last executing test programs: 31.297589022s ago: executing program 3 (id=593): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syncfs(r0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0xffff, 0x4, 0xd7f, 0x20, 0x5, 0x7, 0x4}) ioctl$RTC_UIE_ON(r0, 0x7003) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r1, 0x9fb60000) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r3 = dup(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x0, 0x3}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r4, 0xfffff625}, 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000240)={@empty, @empty}, 0x10) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) recvfrom$inet(r2, &(0x7f00000002c0)=""/160, 0xa0, 0x102, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000003c0)={0x2, {0x34, 0x8, 0xb7c, 0x3, 0x1}}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000400)={@remote, @private=0xa010100, 0x0, "bba94f57bb477dd5a18e3f2aa4d6255aaf83e733915cf3fb19e71e1fcbbd94d1", 0x295a, 0x400, 0x4, 0x8}, 0x3c) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000840)={0x6, 0x16, 0x13, 0x1a, 0x2, 0x7, 0x0, 0xef}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000880)={r4, 0xffffff6d, 0x4, 0x3}, &(0x7f00000008c0)=0x10) mount(&(0x7f0000000900)=@sg0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='hpfs\x00', 0xa1c10, &(0x7f00000009c0)='\x00') r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a80), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r3, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000e40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r8, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20014) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r10, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f5, 0x8, 0x70bd28, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8840}, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000f80)) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000001000)={'gretap0\x00', &(0x7f0000000fc0)=@ethtool_sfeatures={0x3b, 0x4, [{0x1, 0x2}, {0x5, 0x639}, {0xfb, 0x3}, {0xc, 0x3}]}}) 30.380324676s ago: executing program 3 (id=602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240008c4, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r1 = fsopen(&(0x7f0000000200)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) close(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) fcntl$setlease(r3, 0x400, 0x0) fremovexattr(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="737973746dfc357d"]) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x5, 0x1, 0x1, 0x0, 0x9, 0xfffe}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r5, 0x8b32, &(0x7f0000000040)) bind$inet(r4, &(0x7f0000000500)={0x2, 0x0, @empty}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000001019078ac1e00010045a60007002600810229100000000000e00000010000000000000000000000293b16301abd07d7dccdafb410f9e5130e699f147d3e9beec7783b8bcd04f69cca8a13ee96c676db2f7eddd75aba87691e72aa9259300ffdb56420d759e5af01f5f394ecda"], 0x0) r9 = io_uring_setup(0x205, &(0x7f0000000540)={0x0, 0xc8a1, 0x2, 0x5, 0x176, 0x0, r7}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1afeffff0329ea3f436699dac4589bb327ef5297d1fea8fbced833f1e8c3650f85c10dac69f567c61bdaeffce5e49477bd525665136658d31d081d000084bc4ea10087018c86c37d2d5e3a33bfd62df9a46d470cbc7495e1d07d48ad2332452554045f08aca39fea11a013f4dd07de9df7873361cf10efebfefcb8ce5eceb78e286125960a696dbc09bda8e3a47e4f68bfce392b882381920dc74f0b3f3bfae00a2bffc1bba23803d8b7aec34794bfe9d31d1c15191e220f9bf0d3ea9f0da0507e3c7db79f0fcaca41881fc96f6b8a9225f195e71f1f861cd91b21ee8f954215875581559e230fb746981783e50d54cb0caa", @ANYRES8=r5, @ANYRES16=r4, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=0x0], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) 30.374195885s ago: executing program 3 (id=604): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000340)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0x2, 0x242b, 0x8, 0x4d, 0x4, 0x75b, 0xffff, 0x2, 0x2, 0x7, 0x200, 0x582, 0x0, 0x6, 0x2, 0x3], 0x4000, 0x400000}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0x80000001, 0xffb, 0x9, 0xb6b, 0x800c5, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x2, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0x7, 0x7, 0x40, 0x1000, 0x8000100, 0x3, 0x0, 0x11000, 0x4, 0x7, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0x9, 0x7, 0xf, 0x101, 0xa, 0x8a7a, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x20000085, 0x5, 0x1, 0xb, 0x4, 0x7, 0x4009, 0x0, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x0, 0x91f, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x5, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x2, 0xe, 0x2ffffffe, 0xd9a, 0xc8, 0x2a2, 0xffffdffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x200, 0x200, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0xc, 0x8, 0x4, 0x1f8, 0x1ff, 0xffffffff]}}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x100007}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r6, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffdfe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r9, 0xc0844123, &(0x7f00000001c0)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 29.493642246s ago: executing program 3 (id=622): r0 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2}}, 0x20) socket$inet(0x2, 0x1, 0xffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @loopback}, {0xa, 0xfffd, 0xfffffffd, @remote}, r2, 0xfffffffc}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000006c0), 0x2}}, 0x20) (async) socket$inet(0x2, 0x1, 0xffffffff) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @loopback}, {0xa, 0xfffd, 0xfffffffd, @remote}, r2, 0xfffffffc}}, 0x48) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 29.42016273s ago: executing program 3 (id=623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)="303132333a616263643a63ed7b188db386fd353596a17062fe01637654c85ba3a1dfc61bf255cc6e5bbfa4b6dbccec74416c116f64", 0x35) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x1c4}]}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x7a) r5 = syz_open_dev$dri(&(0x7f0000000080), 0xbaaf, 0x20800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x401064d0, &(0x7f0000000000)={0x1, 0x2}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x100) fcntl$notify(r6, 0x402, 0x34) mkdir(&(0x7f0000000040)='./ms\x00', 0x1ff) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r8, &(0x7f0000000380)='Y\n', 0x2) tkill(r7, 0x12) file_setattr(r4, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x6929, 0xabf, 0xf, 0x8, 0x9}, 0x18, 0x400) execve(&(0x7f00000000c0)='./ms\x00', &(0x7f00000001c0)={[&(0x7f0000000180)='.+:@^^{$\xba]$\x00']}, &(0x7f00000002c0)={[&(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)='\x00', &(0x7f0000000380)='\x00']}) fcntl$notify(r6, 0x402, 0x18) lsetxattr$security_ima(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), &(0x7f00000000c0)=ANY=[], 0x2, 0x4) 29.337580081s ago: executing program 3 (id=624): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x51, &(0x7f0000001300), 0x0, 0x0, 0x0, 0x7400}, 0x0) 14.325826646s ago: executing program 32 (id=624): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x51, &(0x7f0000001300), 0x0, 0x0, 0x0, 0x7400}, 0x0) 5.10569294s ago: executing program 1 (id=933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0xa0, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x66, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}, 0x40, @random=0x4, 0x562, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x6, 0xbaa, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x3, 0x2}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0xf0, 0x8}}, @val={0x76, 0x6, {0xff, 0x5, 0x24, 0x6fb9}}}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa0}, 0x1, 0x0, 0x800000000000000}, 0x0) 5.10477424s ago: executing program 1 (id=934): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0x5f5e6000) (async) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000340)=0x1, 0x7a, 0x1) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4bc2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x1000}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x2e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="80007f0a0a0002000180c2000003000004000e8008000f"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_to_batadv\x00'}) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x100, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xaf0726e1ac6ba486, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xffff, 0xf}, {0x0, 0xe}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_POLICE={0x48, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x20000000, 0x83, 0x40, 0x1000, {0x31, 0x0, 0x37cb, 0x565e, 0x39, 0x1}, {0x5, 0x0, 0xdd8, 0x7f, 0x8, 0x401}, 0x8000, 0x9, 0xc456}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0xf}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r2, @ANYBLOB="6d0000000000000000000000000000000000000024189e54ca10f938f4f1dd87601162f651540878d97f4dd3e118dfc4f41d3547cf1aae5ffdf9337114b133964940ce287295d3c4f3667ffc3d27f1137389514351d8f0cd5474c605179cbdf0c13470e0838307b3582c4b45fffe742f13f0c6fde8e16c2416067f9fb32d8c45133f7bcd27738eb28331e1", @ANYRES32=r7, @ANYRES32, @ANYBLOB="01000000040000000500"/28], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/schedstat\x00', 0x0, 0x0) r11 = creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r12, &(0x7f0000000040)={0x50, 0x0, r13, {0x7, 0x1f, 0x0, 0x28000, 0x0, 0x9b68, 0x8, 0x4, 0x0, 0x0, 0x80}}, 0x50) 4.929822416s ago: executing program 1 (id=941): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0281, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f00000000c0)=0xe8, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f00000002c0)="f472f695d04a59b38e3cc58e0dac3aaadd50d769031d8aa5a8f86c4a06f6e8359b7ff70081347db1a55013ba1301a8323dabd7e231758b993933bc61086e7e683644d67019172013c31b2dfe9b43b0d5560d3b85282cabda1dd95df82474d2db1a82d64257cc6938e4972a97eadce95bf9f084d7170b0b803b43bb34b910083a09e51d5a7b63708bb4f4cafc2cf1d79f5fe9cbcf34ad6610604991adfd1a155135b48939eedef0cb4c38c18bb5f1e246a19cb642d6d069390a874cfa349c480eec51c0730e602ebeea95d0af12c5e99cdbf0aa7450d603378e4b3de9e19e7f482ad8fbbe3e530b9341e296", &(0x7f00000003c0)=@udp=r3, 0x4}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) sendto$packet(r1, &(0x7f0000000680)="09000000e70014000000d97bfbf788a83baa88a8000088a8ffff8100009988a836de327e", 0x24, 0x200000c4, &(0x7f0000000140)={0x11, 0x3, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xf18a) 4.85971537s ago: executing program 1 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 4.807168664s ago: executing program 1 (id=949): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140023"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x15c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x3ded4b57e11b35}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x72b1e090}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1833}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x385baa39}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8600}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb00d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2da37301}, @NLBL_CIPSOV4_A_MLSCATREM={0xfffffffffffffdac, 0xa, 0x6dc0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xab15ace}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a23}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ec052d0}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ca96cc4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24d4298f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f139d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b376b43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15204dc9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4911}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4080848) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0x100, 0x70bd27, 0x80000, {0x7, 0x0, 0x0, r6, 0x20, 0x72, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000) write$nci(r0, &(0x7f00000003c0)=ANY=[], 0xee) 1.766976045s ago: executing program 1 (id=960): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup(0x7808, &(0x7f00000006c0)={0x0, 0x9880, 0x200, 0x0, 0x3c2}) (async) r2 = io_uring_setup(0x7808, &(0x7f00000006c0)={0x0, 0x9880, 0x200, 0x0, 0x3c2}) r3 = syz_io_uring_setup(0x253, &(0x7f0000000740)={0x0, 0x1141, 0x800, 0x3, 0x1aa}, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, &(0x7f00000008c0)={0x28, 0x4c, 0x0, r3, &(0x7f0000000880)="9b2942d13c3e9b0b54be9d9a3282818c1f5cab1f35309a97643888f39c89e97959a6a238727ff1adb6c399a511bebfbe1b57a77f3caeab326cd052681ec8bc", 0x1, 0x8, 0x1, 0x0, {0x0, 0x0, r1, 0x10001}}, 0x1) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@hyper}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r4 = syz_usb_connect(0x2, 0x58, &(0x7f0000000a80)=ANY=[@ANYRESOCT=r0, @ANYBLOB="8448b88594631b74662c31790f864873ab"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000900)={0x40, 0x17, 0x4, "b7a984e7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = syz_open_dev$loop(&(0x7f0000000940), 0x3, 0x800) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000a40)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0xc}, 0xc) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x0) (async) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) bind$unix(r7, &(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000980)={0x2, 0x200, 0xfffffff7}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000c00)={0x0, 0x5730, 0x1, 0x2, 0x3e7}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x5, 0x9e38, 0x53, 0xc63, 0x7, 0x8, 0xe09, 0x2, 0x78, 0x40}, {0x9}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x5, 0x9e38, 0x53, 0xc63, 0x7, 0x8, 0xe09, 0x2, 0x78, 0x40}, {0x9}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.599755012s ago: executing program 0 (id=963): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@multicast2, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x40004000000000}, 0x0, 0x6e6bb1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xf00, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r8, @ANYRES16=r2, @ANYBLOB="050007000000fedbdf250f00000008000300a26c0837adc6e8b6429e340281836b6f8e82fa721db4776ef8388272187f01a4e66adb22433b2038db3c4944174d97ebaf068179303388b601021cb7dfededeb18e5f15800968f5cdf18a3a30fff587d47e939f36fba61534c948c6e9f2cff00d78a79399fb03456986435f75b8b34706e3fd3772487c2ead7f463aa731e66a31252431417ffc0962f490251ea99ad761d8f61dbb064f7c32a48f54f1ae6a7cad1572f88365261f4bdb9f35f030b4fe0cf7e", @ANYRES32=r8, @ANYBLOB="66000e0080000000ffffffffffff080211000001ffffffffffff000040000000000000000400620500060101010101012a01023c0401073c022d1a0008110600000000000000aa000600190000000600030000000271070101000102f0087606ff052400b96f0000040080000500a2000700000008000c006400000008000d0000000000"], 0xa0}}, 0x0) 1.537669567s ago: executing program 0 (id=964): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 1.536273392s ago: executing program 0 (id=965): r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x3, 0x4000, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1}, 0x4) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000001d00)={0x6071d56f, 0x0, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x6d14, 0x3, 0x981, 0x8, 0xbe0c, 0x7, 0x4, 0x5, 0x2, 0x1ff, 0x91f, 0x3, 0x5, 0xfffffff8, 0x6000000, 0x20000, 0x3, 0x0, 0x9, 0x7fff, 0x2, 0x0, 0x0, 0xfffffff3, 0x9, 0x41, 0x8, 0x8c1, 0x7, 0x5, 0x8b5, 0x6, 0x5, 0x9, 0x2, 0x5, 0xdf, 0x1, 0xfffffff7, 0x214c000, 0x9, 0xad3, 0x8000, 0x4, 0x0, 0x0, 0x5, 0x2, 0x5, 0x4, 0xfff, 0x9, 0x5, 0x4, 0x4, 0x6, 0x1, 0x1, 0x5, 0x3, 0x2, 0xca, 0x8, 0x7fffffff, 0x2, 0x1, 0xfffeffff, 0x10, 0x1, 0x3ff, 0xf, 0x9, 0x4, 0x7, 0x3, 0xfffffffc, 0x1, 0x4e, 0x6, 0x8, 0x6, 0xeb5, 0xa, 0x7ffe, 0x8, 0x4, 0x10, 0x1, 0x80000001, 0x0, 0x5, 0x1, 0xfff, 0x3, 0x5, 0x6, 0x5, 0x80000001, 0xc, 0x2, 0xd8f3, 0x3ff, 0x9, 0x3, 0x24000, 0x5, 0x3, 0x200, 0x6, 0x1, 0xfffffff2, 0x1, 0x0, 0xb1, 0x8000000, 0x7, 0x2, 0x81f, 0x7ff, 0x4, 0x65b6, 0x2, 0x315, 0x80, 0x1ff, 0xb, 0x1, 0x800, 0x0, 0x8e, 0x80000000, 0x401, 0x8, 0xff, 0x10000, 0x2, 0xc469, 0x71, 0x1, 0x2b, 0xa, 0x8f, 0xe88c, 0x6, 0x80000001, 0x4, 0xb618, 0xf3, 0xffff8001, 0x51, 0x0, 0x2, 0x5, 0x81, 0xea5, 0x0, 0x9, 0x7, 0x3, 0x80000001, 0x0, 0xe19, 0xd6, 0x3, 0x1, 0x6, 0x0, 0x80000001, 0x7, 0x3, 0x80, 0x7fffffff, 0x0, 0x6, 0x9, 0xfffffff7, 0x66, 0xffffffb1, 0x9d1f, 0x7fffffff, 0x8, 0x7fffffff, 0x4, 0x81, 0x3, 0x0, 0x3, 0x82, 0x400, 0x70, 0xf9, 0x0, 0x5, 0x1, 0x30b, 0xa, 0x200, 0xfffffffd, 0x5, 0x0, 0x0, 0xa1, 0x9, 0xfff, 0xc479f90, 0x401, 0x3, 0x2, 0x0, 0x0, 0x40, 0x101, 0x7, 0x0, 0xaad, 0x3, 0x0, 0x0, 0x8, 0x0, 0x8, 0x3, 0x10, 0xff, 0x3, 0x2, 0x9, 0x200, 0x5, 0xfffff001, 0x0, 0xfffffffe, 0x3, 0x3, 0x0, 0xfc4, 0x4, 0x296, 0x2, 0x7, 0x1, 0x8000, 0x80000001, 0x7fffffff, 0x7f, 0x4, 0x5, 0x7, 0x6, 0x2, 0x0, 0x4, 0x4, 0xbc4, 0x10000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x3d4, 0x5, 0x0, 0x2, 0x10, 0x7, 0x9, 0x5, 0x8, 0x7, 0x8, 0x8, 0x9, 0xffff, 0x8f13, 0x1, 0x3, 0x8, 0x8, 0x9, 0x4, 0x8, 0x81, 0x0, 0x7ff, 0x6, 0x10001, 0x6, 0x100, 0xfffffff4, 0x2, 0x8, 0x0, 0x800, 0x0, 0x4, 0x61, 0x7, 0x7, 0xdf4, 0x1ff, 0x80000001, 0xffffffff, 0xffffffc0, 0x7, 0xec3a, 0x80000001, 0x7, 0xe429, 0x8c9, 0x4, 0x8001, 0xc, 0x5, 0x7fff, 0x10001, 0xb436, 0x8001, 0x4, 0x2, 0x5, 0x5, 0x5ba7, 0x5, 0xe3c, 0xfff, 0x2, 0x0, 0x8, 0xd9a1, 0x4, 0x3, 0x8, 0x4, 0xd6fa, 0x2, 0x9, 0x4, 0x31c00000, 0x6, 0x7f, 0x0, 0x67, 0x2, 0x400, 0x10, 0x0, 0xfd, 0x9, 0x8, 0x1ff, 0x9, 0x1, 0xa, 0x4, 0x80000000, 0x2, 0x1, 0x81, 0xfffffffb, 0x6, 0x1, 0x4e, 0x9, 0x3, 0x2, 0x6, 0x8, 0x2b3, 0xb003, 0x3, 0x8001, 0x1, 0x2, 0xec, 0x41, 0x9, 0x0, 0x8, 0x7, 0xa, 0x5, 0xc21, 0x8000, 0x401, 0x3, 0x8, 0x24c8000, 0x2, 0x7c9, 0x5, 0x400, 0xd2, 0xfffff8a1, 0x80, 0x2, 0xf1, 0x76d0, 0x5ab, 0xfff, 0x7, 0x1, 0xfffffffe, 0x52d, 0x401, 0x0, 0x200, 0x5, 0x66fc6967, 0x4d5d, 0x79f, 0x0, 0x3, 0x680, 0x9, 0x4, 0xb460, 0x7, 0x3d4, 0x9, 0x0, 0x5, 0xb, 0x0, 0x9, 0x4, 0x80000001, 0x9, 0x4, 0x5, 0xff, 0x8, 0x5, 0xe, 0x0, 0x2, 0x3, 0xfffffffc, 0x9, 0x401, 0x1602, 0x2, 0x337162be, 0x1, 0x90, 0xfffff475, 0xffc00000, 0x4, 0x80, 0x2, 0x7, 0xf6, 0x1, 0xa196, 0x6, 0xb28, 0x6b, 0x1c0, 0xc, 0x2, 0x7, 0x8, 0x10000, 0x6, 0x0, 0x7, 0x8, 0x7f, 0x7, 0x9, 0x9, 0x32, 0x0, 0xb7, 0x2, 0x10002, 0x7, 0x8, 0x0, 0x0, 0x4, 0xd, 0x7, 0x5, 0x3, 0x7ff, 0x2ab, 0x7c, 0x9, 0x2, 0xe, 0x8f9, 0xb, 0xd6de, 0x10, 0x10, 0x10001, 0xe7, 0x8, 0x5, 0x9, 0x0, 0x9, 0x0, 0x4, 0x32788e81, 0xc, 0x3, 0x81, 0xfffffffa, 0x1, 0x5, 0x5, 0x6]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000d40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r5, &(0x7f0000002f00)={0x130, 0x0, r6, {0x4, 0x1, 0x0, '\x00', {0x10000, 0x0, 0x7, 0x3d0, 0x0, 0x0, 0x6000, '\x00', 0x9, 0x4, 0x7, 0x9, {0x200, 0x78}, {0x6, 0x1}, {0x0, 0x3}, {0xb, 0x4}, 0xc221, 0x0, 0xe, 0x200}}}, 0x130) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2500000010001fff010000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4854) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000000)={0x1, r8}) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f00000003c0)={0x1, r8}) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r11, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) name_to_handle_at(r10, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) ioctl(r3, 0x4048aec9, &(0x7f0000000040)="01") ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x4, 0x243, '\x00', &(0x7f0000000080)=0xb8}) 1.269415177s ago: executing program 0 (id=966): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402210d2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6f}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6b5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x67}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x90}}, 0x20000850) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x24, r0, 0x321, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 1.210367468s ago: executing program 0 (id=967): r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x40000, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) r2 = socket(0x25, 0x80000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002340)=0x14) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) gettid() r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, 0x0, 0x2404c803) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4000010, r8, 0x1bda2000) ftruncate(r11, 0xc17a) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000240)=' ', 0x1}, {&(0x7f0000002380)="fa8f609bf3bf8d6618d209b8ad35905b34a2948c1cb6ee24ffd40d1e56", 0x1d}, {&(0x7f0000002400)="9b1347543629737716292585ba38b62227377a017dd04a945cdfc9407829a8246071b8910bfeea1e9d9f546d745b2f322ae7320dc6dde08df9f0fe165bed9111fc44c6a58ed0f51d65f053770a86d2f4e6e61b3c83899e9e479420b112b7879c9480bb4f83aa59ce6a67865a4b0f8a4aaf1f95f3f644e10c9a6b01251f805e44dd7497e1629404abc6f32b099f064a4671aaa035eaf2efac19b6ff082912a3edaa8560d81755d85d7ad0a220224e19c1f864af1b4b51b3b1bba94fe1be8d6ea7d9982979644593035b551c4de16041051759e2fee7aa", 0xd6}], 0x3}, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000101, 0x0, 0x8000000000000000}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 859.970607ms ago: executing program 2 (id=975): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2f00ebff10008188040f46ecc34cb9cc91480ef42b0cc832733564389c1a30366a9f4ea78ce4e2d02c80e604a93b9ab0bd", 0x31}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) 859.778849ms ago: executing program 2 (id=976): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x4, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x10200000000014) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8001ff, 0xa0401) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r2, r5, 0xa, 0xaf, 0x1, 0x7, {0x80000001, 0x36c8, 0x1, 0x7, 0x4, 0x8, 0x9, 0xd7b, 0x7fff, 0x3, 0x34, 0x7, 0xfffffff9, 0x0, "67963b105d260c3dbff124814b69c92c1e5d095ce7e840d9fdea0e90761fd355"}}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=r5) 859.523166ms ago: executing program 4 (id=977): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000200000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000200003"], 0x33fe0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="e157105e1967bf4c6fa0aa07283a85ae027022bb615433011a4b07e14c68240f461746551cbfbfd3fbfb8c4ac95d5fa2e7334164c669012cb63a72fb08b37e62b08355435f386171bce06d1ef4f0543ac01b86ad2035e8ae86017d2e90bf0220d5f9120642653003e3ce88cf57fd75cc8f8a43f80f99", &(0x7f0000000200)=@tcp=r2, 0x4}, 0x20) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x6, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (rerun: 64) 788.128745ms ago: executing program 4 (id=978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000000500), 0xb, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x17, r7, 0x1, 0x4, 0x6, @random="98c8ca7122df"}, 0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r10, 0x1, 0xff, 0x6, @remote}, 0x14) 783.793258ms ago: executing program 2 (id=979): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\b'], 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000000b}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x1, 0x0, 0x0, 0x21980}, 0x94) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x1, r7, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r5, 0xffffffffffffffff, 0x0) 709.562126ms ago: executing program 2 (id=980): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r1, &(0x7f0000000040)="3ffd7552cc7518981354ed088803087180d356f9b676b89701e67bfc08b08b8ee6dfc7a1468e7181e102065d57e8292891f3731a42e3185a46d232388a61", 0x3e, 0x2) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f00000004c0)={&(0x7f0000000080)=0x9, 0xac22, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000480)}) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000500)={r1, 0xdae, 0xffff, "3d1300fd174d84a3b2f3766b4a0b694f60219e8ce5b992f3fb4147b47bd66777221634b50be030521c51b1d775be34e5e0697309f789872b81d5457c678b0e409af9b1899c7b1d3d0f8c224b7609876c85ec70524b8080f9774d8b8348a67c52974ad6b5b6be779d5979ef1267f2fa55c67b6a26970efe22c06b2ac95e714a999e53e74e29eeda34a35137847f0f99be9e4d70cb9bd015f5cb41958828cdfb7b6d93e26d57027ab0b365e635a3ec4d110cb0caed13f263d2360756d5131ed33e9b5d67c76fe2"}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0xf200ba5cd58b57cb, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000600)='bridge_slave_1\x00', 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x1cf, 0xcf31}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000680)={0x0, 0x8000, 0x8, 0xffff, 0x675, 0x40, 0xf, 0xd, 0x0}, &(0x7f00000006c0)=0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000700)={r5, 0xfffffff7}, 0x8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x18, 0x1409, 0x800, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x40) write$binfmt_misc(r4, &(0x7f0000000840)="9c10f78ed84f2a4a29c882b77b67ef8c4684d3268d9962d0e9e5e55a18cba60fb2c88e282643d21762be4af4b509ef88247548a696d4692aeda6ec74a5d4b30c7eb8e038ca946c274788686052886c0b4e06ae510123d3b921faea1636e5989e69c5bf76bbce559102631f886f3cb3e3ef1f4a59b7adb5ce5ccde814a2650bad13a7ec4ea3f93ad3c142b21958f127b02df6d7565e278a9b3b54f6f98d", 0x9d) link(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file0\x00') getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000980)=""/178, &(0x7f0000000a40)=0xb2) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a80), 0x20000, 0x0) getpeername$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r4, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000d00)={'gretap0\x00', &(0x7f0000000c80)={'erspan0\x00', 0x0, 0x8, 0x40, 0x100, 0xf, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x66, 0x0, 0xe0, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x88, 0x3, 0x1, [{@multicast1, 0x6}, {@multicast2}, {@private=0xa010100, 0xfffffffb}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000d40)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000e00)={'ip6_vti0\x00', &(0x7f0000000d80)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x1, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x0, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000e40)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000e80)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x81, 0x3, 0x44, @private1, @rand_addr=' \x01\x00', 0x8, 0x7, 0x80000001, 0x7}}) sendmsg$nl_route(r7, &(0x7f00000010c0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)=@RTM_DELMDB={0x118, 0x55, 0x200, 0x70bd2a, 0x25dfdbff, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x3, 0x2, {@in6_addr=@mcast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x3, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @multicast1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x0, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4b6e}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x1, 0x4, {@in6_addr=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x0, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x44}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x1, 0x2, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0x2a}, 0x86dd}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x4094) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) getpeername(r2, &(0x7f0000001200)=@nl, &(0x7f0000001280)=0x80) pwritev(r7, &(0x7f0000002480)=[{&(0x7f00000012c0)="3f8d30b2f98da60d0b8e6a1eabfe538b559a96ed0dae79c18108c98782b6a52673235ed559f0669b295ae19a733304fee999beb23dca4f04d13ef2677823e83984e25b2986426f7da2fefc409884a9fe373d4c33f421455e0d89dbd1366c26da5fdb70d7088bb8316217653a6ff8fc421299ba36a8516b76700c2dd41f6a3f4b8e0f71810141d373caee522eebef291e1c5befd335f8269e59ba8ed298", 0x9d}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="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", 0xfe}], 0x3, 0x990, 0x10000) sendmmsg(r2, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000024c0)="6b812a25ebf7817276fd1b5ee6f304605bfbf337177a189f472447d048e91f153463f43bbb0dcf120ccbed8a276830b7ec4549211a47685ccf620b6d21ae448673f844306b03d4be1dfe719a9171d8f70a11c143616a81d40e4233624e52a3f19fa8ee5a935f3a8c5b2ebebe", 0x6c}, {&(0x7f0000002540)="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", 0xfd}, {&(0x7f0000002640)="7f067a49c7b15a3a51202074ac77c8229b353f70e84de054e38453b82d836301c27c0ee9e9cf8b49ebc2d3f47233839fed49ce41c5c1b5d09fdaf31b3919ddd11e3dba2371c1ee85a2bf20e6885420bc2bf5b57f665a0d4f40999dd5cc90b126973752d4fdae1ce1448af7789c00f275b90ad3ba3519f2d0d6e608dc0f3c5ef53515d60626ef527e957e52b01a4167abf6aaff7de1e6bf9292a6865c93b7f9d1a72f8fa0e62f53be3949ea3d147360c474d1450f66bbbf0e7c15ff45bb90de71e04cc0e90120497bdbe24865f685a77f3b90706f6267f082e5e1b5f33e76ac5d32", 0xe1}, {&(0x7f0000002740)="3ad201ab40a676bef160a3880dc73f366ecd02bfc4dccc0e63fa1542a392fb951097279b2a76325954289dab16e3fab505d4806c471c0daa9c14a7800ee17e608b30b53d24458fc1dadbc7e975bbc13e55eca34966ea336d86e30b7baafe0b11a3304389dee10d566a8cbdce71c62b14b6d0fc7ae0d17dde7b5b52f8eeb73de2bcba0dc91c48494c79472a4d280e2ef8c68a0f0c060be6c4713350554ee50c1fa175cf01d6ffa73d6279203da4d618df8f75b01ef37338b37566c22b3b6bdc3e198ea95b629c072f9b687d18c6398911763c197b3eaa2fcc6341db517c58c931d8378de83f81cbe9c25564", 0xeb}, {&(0x7f0000002840)="9fc44de8641d63472863f67536c4e3fbcb1fededa8a2e7cd311dd0d064667f96bb60e0e11eb171c371ece16e7d437f282436454db4c6a0bdfbccceff5753792e19796c293c5373ee80db35a62de33bf93276ff26be937dcf04c754476a0535d417430de15c8c0679df544af67d0dfe863e97bfa13a81fa17673a7e682ba38308f727209f12957468ed4dd5006d3cd4eb10f3c5100b4d9a01452a55447dee2d2d2725309c0ef04d", 0xa7}, {&(0x7f0000002900)="d0dd49ecc937f817c851d4fbceda0058f7f5d23d9f1c27d2e157456edbca1be1573f4a3f7a5ef98aa17efa52de145ac1089523ee20f0eb429927deeaf5ff71d4c04c8f1550190d87c0931d5d063622cbcd56b6955c4f13ff4bcb0763cf485edb26204a994078aec6b3a066fa9cb5f742a45e212c6ee378", 0x77}], 0x6, &(0x7f0000002a00)=[{0x20, 0x103, 0xc1, "37a19034a058fa5b0086604232f114"}, {0x18, 0x104, 0x7, "b75c"}, {0x68, 0x10b, 0xd9f2, "7760dd266973ac6894ddf0a9a47433c3423d00a49c0ca8bf52160e8c9c327c38d0b4ed7e8ad53ebcad64c161fe5dc626cb3493aacf357f9d07bf473a3d0ba7c2427573ac831fcfa115c7467d5269a8abe13efd"}, {0x48, 0x103, 0x3, "36dd31db5398c7bea78a764d046b9b3ae50248863b03717d3bab2eca0324e12450e921866d140ebb05a673b05a9df9db235c"}, {0xb8, 0x107, 0x6, "fca6f0fb323f4beb1cea99b8237f12d411cf9f2469ecfa94ff1dab057b696fb4741acdde637785c154475eef7058573e3b64be5a6ed5696da967895c984a22923cb008e1d74f9ec52d53e268451f20addda9b0de022a2864c73b94af49def611c27fed9ab3a689c40cc1d813df3eff6503fed3085e5e1f4aed96a10a643ecc568186929171a5519412a2672433c709a03435c0fd5fa4691a3e3231feb2fa7502fa198701bc5892"}, {0xb0, 0x6, 0x4, "ae2b8c82f8e9a356e77d5146a03c86dafa226d6f0028a902fa60e8f09b94b171e0ac15317bd1d0a5c645e62136ef3fed96514d3cc6ef67a6f48532d34e6915b9568c3e36f686da51e3a7169939c165ea94dc6986481a9a4abb3ece8203440b973e6b33b61cc965d763f01c97da26e6ca6efe6945f289d25a4b22a23c500cb989a8a87e58dd019f86d84e69e2f8bc35b69d6ec8977103cd56a94c"}, {0x38, 0x109, 0x6, "5e11bd68338253a6e041fb07b61524f5f5ba7ed1f0fe5cdd41dcc9e2bde21181afe5575b"}], 0x288}}], 0x1, 0x4000001) writev(0xffffffffffffffff, &(0x7f0000003240)=[{&(0x7f0000002d00)="db009b69265eb4aefe336a6999d5d48ebb59602aca5c712346c3ea846708554a63a1be0fefa23cc3865f156a93bfd612d16b7f04e3d50f0cc993e6e62491e62a4e2de5b0ac01cd460fa3203b06a9204da35de4e5e669505a7b04019386f7503d4b5c7719705a9937dc74233a9295a453c5fe4f80ac69325e71b2492b61803eb8543c874ac446df261b68cc81d8e81e3ece1b9c0e09b490247fee66699c46c120b07046ef81f6fb4f96f6506d3f75edddd992c904c5f20f5a8c7fc21a3d96b610da", 0xc1}, {&(0x7f0000002e00)="b4cc91defc07202b8962aa16cd3c2c354049ab758cb29427b8b0e11f70a310b9f51266834c5a6e11515ca9a8463468d2d6f64346cb71e3cb4017c4c4674527c34a2b316b5b5a0f6f28830be2992b9e61977a401df41d5418474385b390e581c5f206f0206d24b9fb47e6f6f0fd092a831cb17b4fa2c55f7a6d9293df712f8ac9f179761a7008603c68aa23789cf47f79c34e69f179d7acc1703c6a1ead47", 0x9e}, {&(0x7f0000002ec0)="189a4e0d7579048da07f51f9a4ef6ce3fc42be352b6d2d6c8d30537e518047694fbf1adc", 0x24}, {&(0x7f0000002f00)="68e85a39dac1ac88736e48da86035867158959feebe34d18e0da59566a65109c58db345772fead0ddfe99cf0d5c9c99fd7552f446a17c8c08ba043f202a218fbdba3814aed447faab84e164d1dca8a236f95f9e88200f348fea6200e66a84a6f4d9e7b4f1edae90243c76db1a6ef96be1d0be55251c48c45d3757d1c953554dc8776ce61322fdc99c61881dbb8dfe7cb29431d09c2e24ffc7254e3749f47c43459434a3cc8b5db777f70d7e11fca02fbd811c9b3d30f8bda69740c94db2fcb1280d78b039dc7d04e71003c86084df5333f696cfe78385ea5d777fd6724e341459644ca25780e72905b95", 0xea}, {&(0x7f0000003000)="f8fae00de3ebe2f3b8b4df0f1fbfc81e4a96", 0x12}, {&(0x7f0000003040)="a001befd55631c795b89aec2a91d7b4f13a967bf71598940b4587ea73f5f1136d7fd5cd0c933813034d45b6bf89694a8197fb4ea171d6878207964f8045b357ca8f4", 0x42}, {&(0x7f00000030c0)="7429beffb4a54bce7a7c195bd587748f44f0987531b5ea4c620b8dd4c8041e0ffdfc8fcaa0fccd12e6b50fbf2cc064ca6af83e1704a8f65cd5340be9bee41bc95237e3cf099c574f92733d87a95b94cd906658f67ee2d80b712dd45aea46ef178f461eca6f27336e7de53b62bbe0d86ed08ae5f4233b8ddb535882b90fe73be261d1adbbd706bffa0c29449bf248c58b1b7aa36c98e118", 0x97}, {&(0x7f0000003180)="4b4b05291699f5201895f18478fb88881cf75b0bfad364974bb6a905ccf341c703d3e9ec1e3cd0908a6f618e7dc503928021113149c747dd9394cc920eff11c89ec7af9de63934a8f2312d302a68af9b7b55854522cfee4c1c7f424ad470863714fa1323a357fb1aaa3756a5d12670e965d02646c30001c4e9d9db779e353662d653359633fd02b23973fc350d5161ec658cbfab5137efd756e534050c6a6ac1ea66322a6d72a953952eeccd7195342a634f53d5addb", 0xb6}], 0x8) 639.908088ms ago: executing program 2 (id=981): r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x12b85bad, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)={0x24, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3e, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl(r3, 0xc4c85513, &(0x7f0000000200)) 639.64771ms ago: executing program 4 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0xa0, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x66, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}, 0x40, @random=0x4, 0x562, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x6, 0xbaa, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x3, 0x2}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0xf0, 0x8}}, @val={0x76, 0x6, {0xff, 0x5, 0x24, 0x6fb9}}}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 589.352052ms ago: executing program 4 (id=983): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 1) 587.796877ms ago: executing program 4 (id=984): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r3, 0x15, 0x0, @val=@perf_event={0x4b}}, 0x18) r5 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004000)=""/4086, 0xff6, 0x1, 0x0}, &(0x7f0000000480)=0x8a) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r6 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='bond_slave_0\x00', 0x10) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r7 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$kcm(0xa, 0x2, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000440)=[{0x1, 0x1, {0x0, 0xff, 0x2}, {0x1, 0xff, 0x4}, 0x2, 0xfd}], 0x20) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='vcan0\x00'}) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 310.01476ms ago: executing program 0 (id=985): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x660, 0x1b8, 0x2e8, 0x1b8, 0x1b8, 0x418, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x100, 0x8, 0xb34f, 0x57c1, 0xffff, 0x6, 0xb561a16a5759827b}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@ah={{0x30}, {[0x4d2, 0x4d4], 0x6, 0x2, 0x2}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x67]}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1) 86.812672ms ago: executing program 2 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10d800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cdaec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad7481d8cc1bea8dc978402a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8b06c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00150100000000000000000200000000000000000020"], 0x24}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000ec0)={{r3, &(0x7f0000000340)='/dev/kvm\x00', 0x20000, &(0x7f0000000380)={@align=0xffffffffffffff15, {0x81, 0xa3, 0xfff}}, 0x81, &(0x7f0000000440), &(0x7f0000000480)=0x9}, 0x9, &(0x7f0000000d80)=[{0x3, 0x3, &(0x7f0000000600)='%[:@:$-\x00', &(0x7f0000000640)="ac19d998208562771cdd6b6669a643a9bb73190b752fb4cbd542fbbcf453beeaf3ce7b8991ee34e7fe7972128a7c129f66e2516af3fb39cadc2e7bb330fbf2d119bf1421d4b3029d33ec7e1d8c0850a92264a89630ad0e715e856b1bbb2d165f3d4ea9b01a74688456cb33875a97e41c3a597b9eadc75b5c27", 0x79, 0x10}, {0x1, 0x8, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="20b9b91214b2e0d86f64d266934e296c52e2cc07a739ab88a542f0b25f0167b26cb958d2509cce55c734d22a71927d3f9a42226df7ab1590ba6ee65b2969683c05bfc7b64d2bf656b6be986759be0429cc70a8a492fed3b3a14f9d1b767620cbda8bb7fb226dbc5dae566501cc185f33e5ab68a5f95807657d6c82614fad121f5e687c436ca8a6bf7745f9a23f9304fcfb825cb11b89aa70409d9ffa516e", 0x9e, 0x12}, {0x1, 0x4, &(0x7f00000007c0)='-\x00', &(0x7f0000000800)="bd2273a7f9b9060f54fab20bef51dc804f95df6d215b28c7963ef56f725cf5996e985d4dc039e39336ab0f7cbd53bb42a8dd677ff26d28", 0x37, 0x18}, {0x1, 0x8, &(0x7f0000000840)='\x00', &(0x7f0000000880)="4e9593c462396284ba4cd3e530c6d4327ae656333c61798a84dc092ec9c2359f8abd682d3a9acf6261d48f38fd48a835dd534c5a5fb5993b291e27869d6fdfed98fe543528c719afcaffea8600c177dcff729363e99dd06a43e13b464a28cb37b5e8fea2be3a94ab0a99dc5fa424b1c86e571bec5da6406a5ffe217c237821165604107abe7c0c1301b1098e199aa222a4d02c69e77dec728816c379ffec3f1f84e41e5ed96c2c405ac1bf657e7a25e082d1cbc0ae217ab958bd2cea7ddb8f", 0xbf}, {0x0, 0x6, &(0x7f0000000940)=':\x93\x00', &(0x7f0000000980), 0x0, 0x9}, {0x1, 0x80000000, &(0x7f00000009c0)='\\\'&&\x00', &(0x7f0000000a00)="fc040d8e00159e8e5a79ff9e2e26d20540e2bc25df3a426e725033c6b0e156ee8d0af5f549d85d05e08957b5b9a77c35b79a3b477c73734f13f341bef86e212afa46f0c99279e655fc39af747af5c87b3fbbd0e2c1f9a176ffc982b3c1b96639688411fe39e09ae641d2d826b11209234d10e8e380f5b07079a69b5ea325ed0165626b2cfb737978fd41828d7edbe5dbac816b19273909db843d5f3ae327b911d3c86757b90ff059e13d378527eba6b8e331ba5577d3a0e06e210094d5f93706cb11bce2d23ad7d337e7d397d90e546065c062254384410d1c9b49fd50a45bca93d7b89f5cceec0a188af4088c62b7f7cb71", 0xf2, 0x2}, {0x1, 0x9, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="2ba65c08cff53e3f6f4db138e42246dccfce7abe", 0x14}, {0x3, 0x7, &(0x7f0000000b80)=',*\'\'+:,\xc6$-\\\x00', &(0x7f0000000bc0)="ce35ea9c60ee13982263b4fd2dd8268abe3a5a924f3ab8664bdbf6035bb8ef0c938ee4ed233d20863c6a41c40e1314cd970514872b9c8e00573eb2a5b5943a2ee1d3d6f872874fd5f49b6974a3a857cb4a9ce14318160efad30708880626a2dad8728701fcd68310bd4f671931ecefcb74a02123f856ea9a1f78047e430a55c96dc4becf6aa5429fa77060078403462b52d3303d1a79b35f873c869e649a97112d1608", 0xa3}, {0x3, 0xa08, &(0x7f0000000c80)='\\&%({!)&^\x00', &(0x7f0000000cc0)="b5ed60ea0609f6100cc3b85e7f93a6901642f92cce2840f0fb1a3fb365d68388482f3e59d863dd4f990b3c7eaae7f689a1ff30a26796bd92709023272c5a22de88f1058c52ea18a5b163c99cbb329f8a5d698164557b9a2371bb3145c92a403f5a3fc64312cb2b7b31b31a2113f49d244dbebb046154283b9ebb251905a72e6fa0cb441a9c8295c5bd2de35bf8a5917bbe16d60b9356cacab6c9", 0x9a, 0x1a}]}) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000cbe635f21fecd32629d9da0956b87f11d4b6f5000000102df26010e8843881c66b099568a482398194f127d4cf38217b052930bda639ad32c760"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000001300)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bc0900000000000055090100000000006a00000000000000bf91000000000000b7020000020000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x65}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c5000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001180)={'sit0\x00', &(0x7f0000001080)={'sit0\x00', 0x0, 0x7, 0x20, 0x200, 0x1, {{0x2d, 0x4, 0x3, 0x9, 0xb4, 0x67, 0x0, 0xff, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@noop, @cipso={0x86, 0x48, 0x1, [{0x2, 0x8, "ac8393a7e4e8"}, {0x5f20a7f71328af66, 0x5, "be6e43"}, {0x1, 0x8, "f7cbb2e74ec0"}, {0x2, 0x6, '\v*|R'}, {0x7, 0xb, "34111d5f2e202717a1"}, {0x1, 0x7, "8851abe03c"}, {0x0, 0x9, "9d6fd8ad5fefca"}, {0xb8e3d827b11cf259, 0xc, "2ac21880f667b3227a99"}]}, @cipso={0x86, 0x36, 0x3, [{0x6, 0x10, "d69645f2decf9c1ba5c1fd4d45f5"}, {0x6, 0x10, "330aa5b3d0336c5227f9e56b89ab"}, {0x2, 0x10, "b2d7ab1f52d4ee8fa1b87fa32da5"}]}, @end, @ssrr={0x89, 0xf, 0x2c, [@multicast1, @multicast1, @local]}, @ssrr={0x89, 0xf, 0xd4, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}]}]}}}}}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_ext={0x1c, 0x16, &(0x7f0000000f40)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x852}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, r4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f0000001000)='syzkaller\x00', 0x5d1, 0x2a, &(0x7f0000001040)=""/42, 0x41100, 0x28, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1ad6e, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001200)=[{0x0, 0x5, 0x9, 0x6}, {0x0, 0x1, 0xd, 0x5}, {0x2, 0x4000005, 0xc, 0x7}], 0x10, 0x9}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002f80)={r6, &(0x7f0000001380)="85f6b33f1935db2df471209604863887dd78e82e69e0d252e43b3464b9c0a6e10d7e29aa4ecb272279580127ad4630e1b4ccc3e239d4222f33575f76ae781e9d2a0e6e8e27bbb906f111cdf8e86e273466150bbbed8eaa0099ff5af457d51554ad69fc4d97f51dd5a7877b5e5098b32a9b58a9ce6587e9efcfc685f1918fe821e544886c9a8c805eae7701d343848f15276032e3f4f27d343f42f2122ff3e0", &(0x7f0000002e80)=""/247, 0x4}, 0x20) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000005b00)={'syz', 0x2}, &(0x7f0000005b40)='(\x94\xb7aE)', 0xffffffffffffffff) close(r11) ioctl$CDROMVOLREAD(r11, 0x5313, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000002fc0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @from_mac, @from_mac, {0x4}, "", @value={0x1, 0x1, 0x1, 0x1, 0x8}}, @random="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"}, 0x5ef) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{r5}, &(0x7f00000003c0), &(0x7f0000000980)='%pB \x00'}, 0x20) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r12, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x83, @tick=0xfdff, {0xfd}, {}, @note={0xfa}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}], 0x54) r13 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 0s ago: executing program 4 (id=987): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x78) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r3], 0x1c}}, 0x804) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r5 = pidfd_getfd(r0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x7, &(0x7f0000001040)=ANY=[@ANYBLOB="18fd0000", @ANYRES32=r0, @ANYBLOB="000000000000000018410000faffffff000000000000000085100000fcffffff09c70104070000008520000005000000"], &(0x7f0000001080)='GPL\x00', 0x40, 0xc8, &(0x7f0000001100)=""/200, 0x41000, 0x20, '\x00', r2, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x5, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001240)=[r0, r0, r5, r0, r0], &(0x7f0000001280)=[{0x1, 0x3, 0x0, 0x8}, {0x3, 0x3, 0x2, 0x6}, {0x0, 0x1, 0x5, 0xa}], 0x10, 0x5}, 0x94) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='7', 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001400)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b80, &(0x7f0000001380)={0x0, 0x896e, 0x1f280, 0x0, 0x8000399}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000001", @ANYBLOB="0102"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) (async, rerun: 64) io_uring_enter(r6, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) (rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r7, &(0x7f00000003c0)='\\x01000000 20', 0xd) (async) r8 = socket(0x27, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) (async) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r11, &(0x7f00000000c0), 0x2) (async) close_range(r10, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000001c0)=@secondary) kernel console output (not intermixed with test programs): iommufd_mock28: Adding to iommu group 37 [ 67.054757][ T6672] iommufd_mock iommufd_mock29: Adding to iommu group 38 [ 67.055467][ T6672] iommufd_mock iommufd_mock30: Adding to iommu group 39 [ 67.060272][ T6672] iommufd_mock iommufd_mock31: Adding to iommu group 40 [ 67.070770][ T6672] iommufd_mock iommufd_mock32: Adding to iommu group 41 [ 67.073930][ T6672] iommufd_mock iommufd_mock33: Adding to iommu group 42 [ 67.074633][ T6672] iommufd_mock iommufd_mock34: Adding to iommu group 43 [ 67.075406][ T6672] iommufd_mock iommufd_mock35: Adding to iommu group 44 [ 67.088077][ T6672] iommufd_mock iommufd_mock36: Adding to iommu group 45 [ 67.097122][ T6672] iommufd_mock iommufd_mock37: Adding to iommu group 46 [ 67.105226][ T6672] iommufd_mock iommufd_mock38: Adding to iommu group 47 [ 67.110814][ T6672] iommufd_mock iommufd_mock39: Adding to iommu group 48 [ 67.116853][ T6672] iommufd_mock iommufd_mock40: Adding to iommu group 49 [ 67.119956][ T6672] iommufd_mock iommufd_mock41: Adding to iommu group 50 [ 67.124300][ T6672] iommufd_mock iommufd_mock42: Adding to iommu group 51 [ 67.128730][ T6672] iommufd_mock iommufd_mock43: Adding to iommu group 52 [ 67.130579][ T6672] iommufd_mock iommufd_mock44: Adding to iommu group 53 [ 67.132389][ T6672] iommufd_mock iommufd_mock45: Adding to iommu group 54 [ 67.133261][ T6672] iommufd_mock iommufd_mock46: Adding to iommu group 55 [ 67.134324][ T6672] iommufd_mock iommufd_mock47: Adding to iommu group 56 [ 67.136773][ T6672] iommufd_mock iommufd_mock48: Adding to iommu group 57 [ 67.136822][ T6625] lo speed is unknown, defaulting to 1000 [ 67.137578][ T6672] iommufd_mock iommufd_mock49: Adding to iommu group 58 [ 67.142235][ T6672] iommufd_mock iommufd_mock50: Adding to iommu group 59 [ 67.144666][ T6672] iommufd_mock iommufd_mock51: Adding to iommu group 60 [ 67.146388][ T6672] iommufd_mock iommufd_mock52: Adding to iommu group 61 [ 67.153270][ T6672] iommufd_mock iommufd_mock53: Adding to iommu group 62 [ 67.155438][ T6672] iommufd_mock iommufd_mock54: Adding to iommu group 63 [ 67.156177][ T6672] iommufd_mock iommufd_mock55: Adding to iommu group 64 [ 67.157910][ T6672] iommufd_mock iommufd_mock56: Adding to iommu group 65 [ 67.160197][ T5879] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 67.162963][ T6686] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 67.165451][ T6672] iommufd_mock iommufd_mock57: Adding to iommu group 66 [ 67.166158][ T6685] vhci_hcd: connection closed [ 67.166374][ T6672] iommufd_mock iommufd_mock58: Adding to iommu group 67 [ 67.170904][ T13] vhci_hcd vhci_hcd.3: stop threads [ 67.170920][ T13] vhci_hcd vhci_hcd.3: release socket [ 67.172558][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 67.181593][ T6672] iommufd_mock iommufd_mock59: Adding to iommu group 68 [ 67.196354][ T6672] iommufd_mock iommufd_mock60: Adding to iommu group 69 [ 67.197863][ T6672] iommufd_mock iommufd_mock61: Adding to iommu group 70 [ 67.206732][ T6672] iommufd_mock iommufd_mock62: Adding to iommu group 71 [ 67.210373][ T6672] iommufd_mock iommufd_mock63: Adding to iommu group 72 [ 67.221219][ T6672] iommufd_mock iommufd_mock64: Adding to iommu group 73 [ 67.540458][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 67.542512][ T43] audit: type=1400 audit(1788063698.200:760): avc: denied { read } for pid=6699 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.545678][ T43] audit: type=1400 audit(1788063698.200:761): avc: denied { ioctl } for pid=6699 comm="syz.2.220" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.545709][ T43] audit: type=1400 audit(1788063698.200:762): avc: denied { ioctl } for pid=6699 comm="syz.2.220" path="socket:[11167]" dev="sockfs" ino=11167 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.588133][ T6625] lo speed is unknown, defaulting to 1000 [ 67.609659][ T43] audit: type=1400 audit(1788063698.270:763): avc: denied { mount } for pid=6706 comm="syz.2.223" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.627190][ T6707] capability: warning: `syz.2.223' uses 32-bit capabilities (legacy support in use) [ 67.635703][ T43] audit: type=1400 audit(1788063698.290:764): avc: denied { connect } for pid=6710 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.655648][ T43] audit: type=1400 audit(1788063698.310:765): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.676598][ T43] audit: type=1400 audit(1788063698.330:766): avc: denied { read write } for pid=6714 comm="syz.2.225" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.676842][ T43] audit: type=1400 audit(1788063698.330:767): avc: denied { open } for pid=6714 comm="syz.2.225" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.678746][ T43] audit: type=1400 audit(1788063698.340:768): avc: denied { ioctl } for pid=6714 comm="syz.2.225" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.715730][ T43] audit: type=1400 audit(1788063698.370:769): avc: denied { listen } for pid=6717 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.860352][ T6730] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 67.860426][ T6730] CIFS mount error: No usable UNC path provided in device string! [ 67.860426][ T6730] [ 67.860798][ T6730] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 67.928134][ T6711] netlink: 'syz.0.224': attribute type 19 has an invalid length. [ 68.420150][ T6772] MTD: Couldn't look up './dev/mtdblock0': -2 [ 68.428733][ T6778] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 68.428802][ T6778] syzkaller1: linktype set to 776 [ 68.434717][ T6778] syzkaller0: entered promiscuous mode [ 68.434787][ T6778] syzkaller0: entered allmulticast mode [ 68.478579][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.505483][ T6778] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 68.630654][ T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 68.635453][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.639353][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 68.639371][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 68.639382][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 68.639406][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.655169][ T6762] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.655762][ T6762] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.661408][ T10] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 68.662379][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 68.662423][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 68.669814][ T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 68.670776][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 68.670811][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 68.672632][ T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 68.751192][ T6795] usb 2-1: USB disconnect, device number 2 [ 68.844732][ T6801] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 68.867052][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.867388][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.951779][ T6803] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 68.954540][ T6803] SELinux: failed to load policy [ 68.958367][ T6762] jffs2: notice: (6762) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 69.123427][ T10] usb 6-1: USB disconnect, device number 4 [ 69.128086][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 69.133550][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 69.134200][ T10] keyspan 6-1:1.0: device disconnected [ 69.620026][ T6808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37368 sclass=netlink_route_socket pid=6808 comm=syz.0.252 [ 69.639786][ T6808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37368 sclass=netlink_route_socket pid=6808 comm=syz.0.252 [ 70.019702][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.023466][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.027027][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.032540][ T6850] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 70.036726][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.041416][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.044090][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.046901][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.049679][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.052957][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.052966][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053052][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053057][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053103][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053108][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053147][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053151][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053191][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053195][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053247][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053251][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053290][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053294][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053333][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053337][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053377][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053381][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053433][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053437][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053479][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053483][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053522][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053526][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053565][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053571][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053623][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053627][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053666][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053670][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053709][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053713][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053772][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053779][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053857][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053863][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053902][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053906][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053942][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053946][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.053984][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.053987][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.054038][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.054042][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.054086][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.054090][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.054130][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.054134][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.054173][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.054177][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.058489][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.058496][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.058597][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.058602][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.058657][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.058663][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.058709][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.058713][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.058752][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.058756][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.058866][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.058872][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.058911][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.058915][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.058952][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.058956][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.058993][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.058997][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.059047][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.059051][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.059088][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.059092][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.059137][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.059141][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.059179][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.059182][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.059657][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.059662][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.059701][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.059705][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.059944][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.059949][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.059987][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.059991][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060029][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060033][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060070][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060074][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060111][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060115][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060158][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060162][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060200][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060204][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060241][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060245][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060282][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060286][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060325][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060329][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060368][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060372][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060410][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060413][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060451][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060455][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060492][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060495][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060547][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060551][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.060588][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.060592][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.068822][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.068830][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.068886][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.068891][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.068936][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.068941][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.069009][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 70.069015][ T6849] binder: 6840:6849 ioctl 4018620d 200000000040 returned -16 [ 70.786029][ T6842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.786860][ T6842] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.808651][ T6842] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.819824][ T6842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.819895][ T6842] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.830251][ T6842] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.834485][ T6842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.834736][ T6842] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.840722][ T6906] netlink: 'syz.0.267': attribute type 20 has an invalid length. [ 70.842785][ T6842] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.848796][ T6842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.848874][ T6842] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.856808][ T6842] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.858697][ T6906] netlink: 'syz.0.267': attribute type 20 has an invalid length. [ 70.868948][ T5810] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.869119][ T5810] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.869164][ T5810] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.888392][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.007106][ T6918] syz_tun: entered allmulticast mode [ 71.014318][ T6918] pim6reg: entered allmulticast mode [ 71.026231][ T6918] syz_tun (unregistering): left allmulticast mode [ 71.161748][ T6925] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 71.258456][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 71.258556][ T5523] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 71.274898][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.275196][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.276736][ T1351] cfg80211: failed to load regulatory.db [ 71.345167][ T6937] atomic_op ffff88805716e9e0 conn xmit_atomic 0000000000000000 [ 71.419088][ T5523] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 71.421152][ T5523] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 71.421172][ T5523] usb 8-1: config 1 has no interface number 0 [ 71.423140][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 71.423331][ T5523] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.423343][ T5523] usb 8-1: Product: syz [ 71.423350][ T5523] usb 8-1: Manufacturer: syz [ 71.423357][ T5523] usb 8-1: SerialNumber: syz [ 71.432179][ T5523] usb 8-1: cannot find UAC_HEADER [ 71.448158][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.454580][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.454626][ T9] usb 6-1: Product: syz [ 71.454680][ T9] usb 6-1: Manufacturer: syz [ 71.454708][ T9] usb 6-1: SerialNumber: syz [ 71.470719][ T5523] snd-usb-audio 8-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 71.475838][ T9] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 71.632244][ T6921] netlink: 'syz.3.272': attribute type 62 has an invalid length. [ 71.675857][ T6915] batadv_slave_0: entered promiscuous mode [ 71.677148][ T6915] ipvlan0: entered promiscuous mode [ 71.677160][ T6915] ipvlan0: entered allmulticast mode [ 71.677168][ T6915] veth0_vlan: entered allmulticast mode [ 71.710144][ T6950] __nla_validate_parse: 52 callbacks suppressed [ 71.710292][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 72.068611][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.116935][ T6953] netlink: 7 bytes leftover after parsing attributes in process `syz.0.282'. [ 72.182607][ T6957] 8021q: VLANs not supported on ip6gre0 [ 72.308464][ T5879] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 72.546557][ T6968] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 72.549814][ T9] dvb_usb_ec168 6-1:1.1: probe with driver dvb_usb_ec168 failed with error -110 [ 72.741881][ T43] kauditd_printk_skb: 113 callbacks suppressed [ 72.746784][ T43] audit: type=1400 audit(1788063703.400:883): avc: denied { create } for pid=6969 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.754204][ T43] audit: type=1400 audit(1788063703.410:884): avc: denied { read } for pid=6969 comm="syz.2.285" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.754247][ T43] audit: type=1400 audit(1788063703.410:885): avc: denied { open } for pid=6969 comm="syz.2.285" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.768495][ T43] audit: type=1400 audit(1788063703.420:886): avc: denied { getopt } for pid=6969 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.816799][ T43] audit: type=1400 audit(1788063703.470:887): avc: denied { name_bind } for pid=6971 comm="syz.2.286" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.817004][ T43] audit: type=1400 audit(1788063703.470:888): avc: denied { node_bind } for pid=6971 comm="syz.2.286" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 72.819940][ T6975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'. [ 72.878487][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.878577][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.878670][ T5092] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.756636][ T43] audit: type=1400 audit(1788063704.410:889): avc: denied { write } for pid=6976 comm="syz.2.287" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.006695][ T6948] batadv_slave_0: left promiscuous mode [ 74.010338][ T5523] usb 6-1: USB disconnect, device number 5 [ 74.030738][ T5879] usb 8-1: USB disconnect, device number 14 [ 74.040664][ T43] audit: type=1400 audit(1788063704.700:890): avc: denied { mount } for pid=6980 comm="syz.1.288" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 74.041822][ T43] audit: type=1400 audit(1788063704.700:891): avc: denied { mount } for pid=6980 comm="syz.1.288" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.043166][ T43] audit: type=1400 audit(1788063704.700:892): avc: denied { bind } for pid=6980 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.099761][ T6986] bridge0: port 3(vlan2) entered blocking state [ 74.100018][ T6986] bridge0: port 3(vlan2) entered disabled state [ 74.100154][ T6986] vlan2: entered allmulticast mode [ 74.100168][ T6986] geneve0: entered allmulticast mode [ 74.101506][ T6986] vlan2: entered promiscuous mode [ 74.101521][ T6986] geneve0: entered promiscuous mode [ 74.148395][ T5092] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.165329][ T6991] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 74.444312][ T35] libceph: connect (1)[c::]:6789 error -101 [ 74.444681][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 74.450434][ T35] libceph: connect (1)[c::]:6789 error -101 [ 74.450593][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 74.462341][ T6997] syzkaller0: entered promiscuous mode [ 74.462401][ T6997] syzkaller0: entered allmulticast mode [ 74.535100][ T6998] ceph: No mds server is up or the cluster is laggy [ 74.959430][ T5092] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.959519][ T5092] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.959578][ T5092] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.069287][ T6953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.468634][ T970] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.639154][ T970] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 75.640120][ T970] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 75.640139][ T970] usb 5-1: config 1 has no interface number 0 [ 75.641944][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.641964][ T970] usb 5-1: Product: syz [ 75.641976][ T970] usb 5-1: Manufacturer: syz [ 75.641985][ T970] usb 5-1: SerialNumber: syz [ 75.648797][ T970] usb 5-1: 3:1 : does not exist [ 75.648816][ T970] usb 5-1: 3:2 : does not exist [ 75.851691][ T7017] netlink: 'syz.0.298': attribute type 62 has an invalid length. [ 75.885898][ T7023] netlink: 'syz.1.300': attribute type 39 has an invalid length. [ 75.926509][ T7031] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 75.953737][ T7033] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 75.954743][ T7033] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 75.954757][ T7033] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 75.961985][ T7033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7033 comm=syz.3.303 [ 76.228554][ T5092] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.277775][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 76.428039][ T5879] usb 5-1: USB disconnect, device number 6 [ 76.479696][ T7071] JFS: discard option not supported on device [ 76.481936][ T7071] Mount JFS Failure: -5 [ 76.482034][ T7071] jfs_mount failed w/return code = -5 [ 76.484661][ T7068] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 76.832811][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 76.839808][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 76.842064][ T7088] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.842079][ T7088] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 76.842270][ T7088] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.842279][ T7088] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 76.856823][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 76.857380][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 76.857959][ T7088] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.857972][ T7088] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 76.858010][ T7088] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.858019][ T7088] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 76.861195][ T7034] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.861235][ T7034] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.861265][ T7034] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.861294][ T7034] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.003254][ T7113] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 77.029378][ T5092] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.029454][ T5092] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.031050][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.147283][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 77.150759][ T37] nvmet: connect request for invalid subsystem testsubsys! [ 77.151535][ T7119] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 77.173781][ T7125] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 77.173832][ T7125] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 77.322534][ T7131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7131 comm=syz.1.329 [ 77.347725][ T7135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.357784][ T7135] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 77.361628][ T7135] netlink: 'syz.0.330': attribute type 29 has an invalid length. [ 77.362095][ T7135] netlink: 'syz.0.330': attribute type 29 has an invalid length. [ 77.379729][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.475854][ T7144] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 77.549621][ T7152] net2280 0000:00:00.0: unbind [ 77.549706][ T7152] net2280 0000:00:00.0: probe with driver net2280 failed with error -16 [ 77.585538][ T7157] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.674013][ T7160] lo speed is unknown, defaulting to 1000 [ 77.746478][ T7174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7174 comm=syz.2.345 [ 77.766600][ T43] kauditd_printk_skb: 79 callbacks suppressed [ 77.766685][ T43] audit: type=1400 audit(1788063708.420:972): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.835876][ T7179] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 78.053103][ T43] audit: type=1400 audit(1788063708.710:973): avc: denied { write } for pid=7192 comm="syz.2.348" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.055291][ T7185] netlink: 36 bytes leftover after parsing attributes in process `syz.1.349'. [ 78.057374][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.349'. [ 78.074660][ T43] audit: type=1400 audit(1788063708.730:974): avc: denied { append } for pid=7192 comm="syz.2.348" name="loop9" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.085050][ T7193] loop9: detected capacity change from 0 to 255852544 [ 78.160012][ T7193] Invalid logical block size (4) [ 78.187066][ T7200] ptrace attach of "/syz-executor exec"[7201] was attempted by "/syz-executor exec"[7200] [ 78.217375][ T43] audit: type=1400 audit(1788063708.870:975): avc: denied { mounton } for pid=7183 comm="syz.1.349" path="/73/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.344791][ T43] audit: type=1400 audit(1788063709.000:976): avc: denied { unlink } for pid=7208 comm="syz.0.355" name="#f" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.404299][ T7213] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 78.446311][ T5523] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 78.585937][ T43] audit: type=1400 audit(1788063709.240:977): avc: denied { create } for pid=7222 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 78.605949][ T43] audit: type=1400 audit(1788063709.260:978): avc: denied { connect } for pid=7222 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.613552][ T5523] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 78.614485][ T5523] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 78.614511][ T5523] usb 8-1: config 1 has no interface number 0 [ 78.614540][ T5523] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 78.614559][ T5523] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 72 [ 78.614577][ T5523] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 78.614594][ T5523] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.618862][ T5523] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.618883][ T5523] usb 8-1: Product: syz [ 78.618894][ T5523] usb 8-1: Manufacturer: syz [ 78.618905][ T5523] usb 8-1: SerialNumber: syz [ 78.641125][ T7200] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.641183][ T7200] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.657363][ T43] audit: type=1400 audit(1788063709.310:979): avc: denied { create } for pid=7222 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.659110][ T43] audit: type=1400 audit(1788063709.320:980): avc: denied { connect } for pid=7222 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.664777][ T7227] tmpfs: Unknown parameter 'ÿ' [ 78.695648][ T43] audit: type=1400 audit(1788063709.350:981): avc: denied { append } for pid=7228 comm="syz.0.361" name="cec0" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.843200][ T7200] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.843319][ T7200] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.846531][ T7232] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 78.846759][ T7232] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 78.930482][ T7237] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 78.937224][ T7237] erspan1: entered allmulticast mode [ 78.995084][ T7237] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 79.057382][ T5523] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 79.249367][ T7200] tipc: Enabling of bearer rejected, media not registered [ 79.282539][ T7243] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 79.452141][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.368'. [ 79.452914][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.368'. [ 79.479027][ T7251] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 79.494956][ T7248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7248 comm=syz.2.368 [ 79.661822][ T7253] netlink: 'syz.0.369': attribute type 5 has an invalid length. [ 79.778640][ T5523] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 79.778692][ T5523] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 79.779812][ T5523] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 79.779847][ T5523] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 79.786608][ T5523] usb 8-1: USB disconnect, device number 15 [ 79.794561][ T5523] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 79.860149][ T5523] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 79.980571][ T7274] binder: 7272:7274 ioctl c0306201 200000000640 returned -22 [ 80.152121][ T7292] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 80.231481][ T5092] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.231511][ T5742] Bluetooth: hci4: command 0x1003 tx timeout [ 80.371868][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.379'. [ 80.473731][ T7321] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 80.501785][ T7324] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 80.517691][ T5092] Bluetooth: hci1: connection err: -111 [ 80.520117][ T7324] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 80.520154][ T7324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 80.520831][ T7324] vhci_hcd vhci_hcd.0: Device attached [ 80.539665][ T7327] vhci_hcd: connection closed [ 80.541699][ T7036] vhci_hcd vhci_hcd.1: stop threads [ 80.543119][ T7036] vhci_hcd vhci_hcd.1: release socket [ 80.543142][ T7036] vhci_hcd vhci_hcd.1: disconnect device [ 80.833650][ T7335] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.897031][ T7350] input: syz0 as /devices/virtual/input/input15 [ 81.050117][ T7356] 9p: Could not find request transport: f!×ï¹µf’Üe£¦dd [ 81.050395][ T7356] nbd: illegal input index 67111936 [ 81.064630][ T7368] nbd: illegal input index 67111936 [ 81.106415][ T7373] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 81.109634][ T7375] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 81.109662][ T7375] overlayfs: missing 'lowerdir' [ 81.242578][ T7388] syzkaller0: entered promiscuous mode [ 81.242631][ T7388] syzkaller0: entered allmulticast mode [ 81.279970][ T7398] gfs2: error -5 reading superblock [ 81.313214][ T7401] netlink: 'syz.0.401': attribute type 9 has an invalid length. [ 81.369765][ T7406] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 81.605845][ T7435] netlink: 'syz.2.414': attribute type 1 has an invalid length. [ 81.612793][ T7437] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 81.797519][ T7460] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 81.942748][ T7489] netlink: 'syz.2.425': attribute type 62 has an invalid length. [ 81.968471][ T7491] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 82.129313][ T7506] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 82.157078][ T7507] nfs: Unknown parameter '#//' [ 82.270527][ T7510] __nla_validate_parse: 7 callbacks suppressed [ 82.270612][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 82.271050][ T7510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.328008][ T7515] overlayfs: failed to resolve './file1': -2 [ 82.651854][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 82.690916][ T7535] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 82.844443][ T7538] Bluetooth: MGMT ver 1.23 [ 82.844518][ T7538] Bluetooth: hci1: expected 121 bytes, got 2 bytes [ 82.845214][ T43] kauditd_printk_skb: 171 callbacks suppressed [ 82.845232][ T43] audit: type=1400 audit(1788063713.500:1153): avc: denied { write } for pid=7537 comm="syz.1.440" path="socket:[17140]" dev="sockfs" ino=17140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.896384][ T43] audit: type=1400 audit(1788063713.550:1154): avc: denied { read write } for pid=7543 comm="syz.1.442" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 82.896642][ T43] audit: type=1400 audit(1788063713.550:1155): avc: denied { open } for pid=7543 comm="syz.1.442" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 82.897922][ T43] audit: type=1400 audit(1788063713.550:1156): avc: denied { write } for pid=7543 comm="syz.1.442" name="functions" dev="configfs" ino=10785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.902566][ T7507] overlayfs: statfs failed on './file0' [ 82.905373][ T43] audit: type=1400 audit(1788063713.560:1157): avc: denied { write } for pid=7543 comm="syz.1.442" name="functions" dev="configfs" ino=10785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.906663][ T43] audit: type=1400 audit(1788063713.560:1158): avc: denied { remove_name } for pid=7543 comm="syz.1.442" name="uvc.usb0" dev="configfs" ino=18675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.906835][ T43] audit: type=1400 audit(1788063713.560:1159): avc: denied { rmdir } for pid=7543 comm="syz.1.442" name="uvc.usb0" dev="configfs" ino=18675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.006637][ T7549] netlink: 48 bytes leftover after parsing attributes in process `syz.0.444'. [ 83.009971][ T7549] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 83.010844][ T7549] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 83.011367][ T7549] cramfs: wrong magic [ 83.053425][ T43] audit: type=1400 audit(1788063713.710:1160): avc: denied { bind } for pid=7548 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.062078][ T43] audit: type=1400 audit(1788063713.720:1161): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=38956 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 83.110555][ T70] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 83.110628][ T70] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 83.118544][ T5092] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.124722][ T7562] FAULT_INJECTION: forcing a failure. [ 83.124722][ T7562] name failslab, interval 1, probability 0, space 0, times 0 [ 83.124817][ T7562] CPU: 3 UID: 0 PID: 7562 Comm: syz.1.447 Not tainted syzkaller #0 PREEMPT(full) [ 83.124838][ T7562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.124847][ T7562] Call Trace: [ 83.124855][ T7562] [ 83.124861][ T7562] dump_stack_lvl+0x100/0x190 [ 83.124902][ T7562] should_fail_ex.cold+0x5/0xa [ 83.124942][ T7562] should_failslab+0xc2/0x120 [ 83.124964][ T7562] kmem_cache_alloc_noprof+0x92/0x6a0 [ 83.124978][ T7562] ? __send_signal_locked+0x155/0x12d0 [ 83.125001][ T7562] __send_signal_locked+0x155/0x12d0 [ 83.125025][ T7562] send_signal_locked+0x15e/0xa00 [ 83.125040][ T7562] ? __pfx_send_signal_locked+0x10/0x10 [ 83.125052][ T7562] ? do_raw_spin_lock+0x128/0x260 [ 83.125072][ T7562] ? _raw_spin_lock_irqsave+0x52/0x60 [ 83.125098][ T7562] force_sig_info_to_task+0x450/0x660 [ 83.125113][ T7562] force_sig_fault+0xc3/0x100 [ 83.125128][ T7562] ? __pfx_force_sig_fault+0x10/0x10 [ 83.125142][ T7562] ? __pfx___up_read+0x10/0x10 [ 83.125155][ T7562] ? fixup_vdso_exception+0x2d1/0x370 [ 83.125172][ T7562] __bad_area_nosemaphore+0x31b/0x3f0 [ 83.125188][ T7562] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 83.125206][ T7562] do_user_addr_fault+0x8ca/0x12f0 [ 83.125225][ T7562] exc_page_fault+0x6f/0xd0 [ 83.125238][ T7562] asm_exc_page_fault+0x26/0x30 [ 83.125254][ T7562] RIP: 0033:0x7fec1d9877a1 [ 83.125266][ T7562] Code: 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c ef 04 00 00 62 a1 c5 00 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 e0 04 00 00 <62> e1 fe 28 6f 06 62 b2 7e 20 26 c0 c5 fb 93 c8 48 89 f8 48 83 fa [ 83.125280][ T7562] RSP: 002b:00007fec1bbf5bd8 EFLAGS: 00010283 [ 83.125293][ T7562] RAX: 0000000000000000 RBX: 00000000000002a2 RCX: 0000000000000000 [ 83.125302][ T7562] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007fec1bbf5c00 [ 83.125310][ T7562] RBP: 00007fec1bbf5c00 R08: 0000000000000000 R09: 0000000000000000 [ 83.125318][ T7562] R10: 0000000000000000 R11: 0000000000101000 R12: cccccccccccccccd [ 83.125326][ T7562] R13: 00007fec1dc26038 R14: 00007fec1dc25fa0 R15: 00007ffcab7752d8 [ 83.125342][ T7562] [ 83.140455][ T43] audit: type=1400 audit(1788063713.800:1162): avc: denied { recv } for pid=34 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=38956 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 83.186597][ T7564] netlink: 'syz.2.448': attribute type 12 has an invalid length. [ 83.186611][ T7564] netlink: 'syz.2.448': attribute type 29 has an invalid length. [ 83.186619][ T7564] netlink: 148 bytes leftover after parsing attributes in process `syz.2.448'. [ 83.186629][ T7564] netlink: 'syz.2.448': attribute type 3 has an invalid length. [ 83.186636][ T7564] netlink: 'syz.2.448': attribute type 2 has an invalid length. [ 83.186642][ T7564] netlink: 35 bytes leftover after parsing attributes in process `syz.2.448'. [ 83.188608][ T7566] overlayfs: failed to clone upperpath [ 83.254090][ T7572] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 83.364556][ T7578] nvme nvme0: rdma connection establishment failed (-104) [ 83.486597][ T9] libceph: connect (1)[c::]:6789 error -101 [ 83.486824][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 83.526515][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 83.750592][ T9] libceph: connect (1)[c::]:6789 error -101 [ 83.750810][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 83.862599][ T7604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.906700][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.910522][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.162096][ T7615] option changes via remount are deprecated (pid=7614 comm=syz.0.464) [ 84.259651][ T9] libceph: connect (1)[c::]:6789 error -101 [ 84.259862][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 84.289225][ T42] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 84.303644][ T7591] ceph: No mds server is up or the cluster is laggy [ 84.408168][ T7626] netlink: 'syz.0.468': attribute type 6 has an invalid length. [ 84.408211][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 84.461808][ T42] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 84.463404][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.463428][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 84.463457][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.484333][ T42] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 84.492213][ T42] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 84.678075][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.679291][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.828489][ T5823] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.830730][ T7661] fuseblk: Bad value for 'rootmode' [ 84.840028][ T7613] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 84.840551][ T7613] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 84.841772][ T7613] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 84.933496][ T7613] SPCP8x5 ttyUSB0: Set UART format 0x107 failed (error = -32) [ 84.934289][ T7613] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 85.009702][ T5823] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.011508][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.011537][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.011554][ T5823] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.011591][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.014848][ T5823] usb 5-1: config 0 descriptor?? [ 85.082902][ T5287] usb 8-1: USB disconnect, device number 16 [ 85.091477][ T5287] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 85.092120][ T5287] spcp8x5 8-1:1.0: device disconnected [ 85.137252][ T7665] netlink: 'syz.2.478': attribute type 62 has an invalid length. [ 85.188397][ T5092] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.188433][ T70] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 85.188469][ T70] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 85.447522][ T5823] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 85.557844][ T7659] orangefs_mount: mount request failed with -4 [ 85.616320][ T7674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.619510][ T7674] 9pnet_fd: Insufficient options for proto=fd [ 85.637392][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 85.637456][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 85.637641][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 85.659796][ T7036] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.679131][ T7036] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.698399][ T7036] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.728577][ T7036] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.057967][ T7712] netlink: 'syz.2.493': attribute type 62 has an invalid length. [ 86.069340][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.228609][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 86.229445][ T35] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 86.230742][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 86.230770][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 86.232975][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.232989][ T35] usb 6-1: Product: syz [ 86.232997][ T35] usb 6-1: Manufacturer: syz [ 86.233012][ T35] usb 6-1: SerialNumber: syz [ 86.234642][ T35] usb 6-1: config 0 descriptor?? [ 86.240035][ T35] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input17 [ 86.440797][ T7699] loop2: detected capacity change from 0 to 4095 [ 86.519894][ T7699] Buffer I/O error on dev loop2, logical block 511, async page read [ 86.520467][ T6089] Buffer I/O error on dev loop2, logical block 511, async page read [ 87.122492][ T7727] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 87.260212][ T7736] netlink: 'syz.2.502': attribute type 62 has an invalid length. [ 87.270709][ T5092] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.271993][ T70] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 87.272021][ T70] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 87.431254][ T35] usb 5-1: USB disconnect, device number 7 [ 87.953307][ T7753] tipc: Can't bind to reserved service type 2 [ 88.014527][ T7753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7753 comm=syz.2.507 [ 88.814834][ T43] kauditd_printk_skb: 115 callbacks suppressed [ 88.814897][ T43] audit: type=1400 audit(1788063719.470:1278): avc: denied { create } for pid=7814 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.815264][ T43] audit: type=1400 audit(1788063719.470:1279): avc: denied { bind } for pid=7814 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.815524][ T43] audit: type=1400 audit(1788063719.470:1280): avc: denied { name_bind } for pid=7814 comm="syz.2.510" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 88.815714][ T43] audit: type=1400 audit(1788063719.470:1281): avc: denied { node_bind } for pid=7814 comm="syz.2.510" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 88.896275][ T5287] usb 6-1: USB disconnect, device number 6 [ 88.896335][ C3] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 88.922842][ T7820] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 88.941635][ T7820] erspan1: entered allmulticast mode [ 89.089463][ T7831] netlink: 'syz.2.513': attribute type 62 has an invalid length. [ 89.199398][ T7833] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 89.348496][ T5092] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.354620][ T70] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 89.354642][ T70] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 89.539336][ T7839] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 89.546333][ T43] audit: type=1400 audit(1788063720.200:1282): avc: denied { connect } for pid=7840 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.584507][ T7839] 8021q: adding VLAN 0 to HW filter on device bond4 [ 89.587859][ T7839] bond3: (slave bond4): making interface the new active one [ 89.591108][ T7839] bond3: (slave bond4): Enslaving as an active interface with an up link [ 89.625931][ T7839] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 89.627477][ T7839] __nla_validate_parse: 1 callbacks suppressed [ 89.627490][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 89.691469][ T7858] tipc: Enabling of bearer rejected, failed to enable media [ 89.747061][ T7871] input: syz0 as /devices/virtual/input/input18 [ 89.757140][ T7871] netlink: 165 bytes leftover after parsing attributes in process `syz.3.524'. [ 89.763177][ T43] audit: type=1400 audit(1788063720.420:1283): avc: denied { ioctl } for pid=7870 comm="syz.3.524" path="socket:[21634]" dev="sockfs" ino=21634 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.775724][ T43] audit: type=1400 audit(1788063720.430:1284): avc: denied { write } for pid=7870 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.908180][ T43] audit: type=1400 audit(1788063720.560:1285): avc: denied { name_connect } for pid=7879 comm="syz.2.526" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 89.915585][ T43] audit: type=1400 audit(1788063720.570:1286): avc: denied { listen } for pid=7879 comm="syz.2.526" laddr=fe80::13 lport=60538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.915834][ T43] audit: type=1400 audit(1788063720.570:1287): avc: denied { accept } for pid=7879 comm="syz.2.526" laddr=fe80::13 lport=60538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.992502][ T7885] netlink: 'syz.1.527': attribute type 39 has an invalid length. [ 90.088578][ T35] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 90.239280][ T35] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 90.240208][ T35] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 90.240221][ T35] usb 8-1: config 1 has no interface number 0 [ 90.241706][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.241718][ T35] usb 8-1: Product: syz [ 90.241725][ T35] usb 8-1: Manufacturer: syz [ 90.241733][ T35] usb 8-1: SerialNumber: syz [ 90.257712][ T35] usb 8-1: 3:1 : does not exist [ 90.257725][ T35] usb 8-1: 3:2 : does not exist [ 90.456093][ T7878] netlink: 'syz.3.525': attribute type 62 has an invalid length. [ 90.491012][ T7892] lo speed is unknown, defaulting to 1000 [ 91.023248][ T851] usb 8-1: USB disconnect, device number 17 [ 91.122805][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 91.123056][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 91.204467][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 91.217826][ T7931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7931 comm=syz.2.539 [ 91.335900][ T7933] tipc: Enabling of bearer rejected, failed to enable media [ 91.486202][ T7944] gretap3: entered promiscuous mode [ 91.688038][ T7764] nvmet: connect request for invalid subsystem testsubsys! [ 91.692046][ T7962] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 91.883472][ T7978] netlink: 'syz.2.552': attribute type 62 has an invalid length. [ 91.963623][ T7984] befs: (nullb0): No write support. Marking filesystem read-only [ 91.967907][ T7984] befs: (nullb0): invalid magic header [ 92.338696][ T970] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.422537][ T8002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.560'. [ 92.422595][ T8002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.560'. [ 92.424402][ T8002] geneve0: entered promiscuous mode [ 92.500750][ T970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.500825][ T970] usb 5-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 92.510283][ T970] usb 5-1: config 4 has an invalid interface number: 13 but max is 0 [ 92.513604][ T970] usb 5-1: config 4 has no interface number 0 [ 92.516239][ T970] usb 5-1: config 4 interface 13 has no altsetting 0 [ 92.521262][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.524900][ T970] usb 5-1: Product: syz [ 92.526793][ T970] usb 5-1: Manufacturer: syz [ 92.529215][ T970] usb 5-1: SerialNumber: syz [ 92.598617][ T70] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 92.745491][ T970] ums-realtek 5-1:4.13: USB Mass Storage device detected [ 92.751240][ T70] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 92.755381][ T70] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 92.755435][ T70] usb 6-1: config 1 has no interface number 0 [ 92.762795][ T70] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.762829][ T70] usb 6-1: Product: syz [ 92.762868][ T70] usb 6-1: Manufacturer: syz [ 92.762890][ T70] usb 6-1: SerialNumber: syz [ 92.780272][ T70] usb 6-1: 3:1 : does not exist [ 92.783359][ T70] usb 6-1: 3:2 : does not exist [ 92.827104][ T970] usb 5-1: USB disconnect, device number 8 [ 92.971050][ T8006] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 93.186311][ T8013] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 93.369597][ T8030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=8030 comm=syz.1.559 [ 93.405329][ T30] usb 6-1: USB disconnect, device number 7 [ 93.440342][ T8033] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 93.447140][ T8033] bpf: Bad value for 'gid' [ 93.451104][ T8033] NILFS (loop3): device size too small [ 93.454943][ T8033] netlink: 'syz.3.569': attribute type 21 has an invalid length. [ 93.458434][ T8033] netlink: 152 bytes leftover after parsing attributes in process `syz.3.569'. [ 93.500825][ T8035] mmap: syz.3.570 (8035) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.558473][ T970] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 93.676760][ T8051] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 93.719052][ T970] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 93.720321][ T970] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 93.720340][ T970] usb 5-1: config 1 has no interface number 0 [ 93.721905][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.721920][ T970] usb 5-1: Product: syz [ 93.721928][ T970] usb 5-1: Manufacturer: syz [ 93.721935][ T970] usb 5-1: SerialNumber: syz [ 93.727795][ T970] usb 5-1: 3:1 : does not exist [ 93.727808][ T970] usb 5-1: 3:2 : does not exist [ 93.888636][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 93.888719][ T43] audit: type=1326 audit(1788063725.552:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.3.577" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4966b9e159 code=0x0 [ 93.896592][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 93.896692][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 93.937721][ T8029] netlink: 'syz.0.568': attribute type 62 has an invalid length. [ 94.075120][ T43] audit: type=1400 audit(1788063725.732:1304): avc: denied { execute } for pid=8072 comm="syz.1.578" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 94.113649][ T8076] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 94.127075][ T8076] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.143243][ T8076] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 94.144255][ T8076] netlink: 'syz.1.579': attribute type 10 has an invalid length. [ 94.144341][ T8076] dummy0: entered promiscuous mode [ 94.153316][ T8076] bond5: (slave dummy0): Releasing backup interface [ 94.314161][ T43] audit: type=1400 audit(1788063725.972:1305): avc: denied { append } for pid=8095 comm="syz.1.584" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.316942][ T43] audit: type=1400 audit(1788063725.972:1306): avc: denied { append } for pid=8095 comm="syz.1.584" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.400836][ T8104] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.495627][ T8106] netlink: 'syz.1.586': attribute type 4 has an invalid length. [ 94.495773][ T10] usb 5-1: USB disconnect, device number 9 [ 94.511395][ T8108] netlink: 'syz.1.586': attribute type 4 has an invalid length. [ 94.564760][ T43] audit: type=1400 audit(1788063726.222:1307): avc: denied { ioctl } for pid=8115 comm="syz.1.587" path="socket:[20942]" dev="sockfs" ino=20942 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.716276][ T43] audit: type=1400 audit(1788063726.372:1308): avc: denied { read write } for pid=8119 comm="syz.1.589" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 94.716395][ T43] audit: type=1400 audit(1788063726.372:1309): avc: denied { open } for pid=8119 comm="syz.1.589" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 94.770313][ T8128] __nla_validate_parse: 35 callbacks suppressed [ 94.770388][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.590'. [ 94.770420][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.590'. [ 94.847575][ T43] audit: type=1400 audit(1788063726.502:1310): avc: denied { watch watch_reads } for pid=8136 comm="syz.3.592" path="pipe:[6122]" dev="pipefs" ino=6122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 94.848959][ T8137] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 94.848988][ T8137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.890592][ T43] audit: type=1400 audit(1788063726.552:1311): avc: denied { execute } for pid=8138 comm="syz.3.593" path="/dev/video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.150335][ T8147] netlink: 64 bytes leftover after parsing attributes in process `syz.0.596'. [ 95.177058][ T8149] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 95.225813][ T8155] 9pnet_virtio: no channels available for device mountinfo [ 95.714558][ T8163] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 95.788109][ T43] audit: type=1400 audit(1788063728.446:1312): avc: denied { append } for pid=8167 comm="syz.1.603" name="usbmon3" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 95.939217][ T8174] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 96.354468][ T8211] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 96.375618][ T5446] veth0_vlan: left promiscuous mode [ 96.379846][ T9] veth0_vlan: entered promiscuous mode [ 96.388605][ T5879] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 96.559277][ T5879] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 96.560792][ T5879] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.560923][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 96.561007][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 96.561028][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 96.561046][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 96.561065][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 96.561083][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 96.561101][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 96.561126][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 96.561145][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 96.561163][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 96.561181][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 96.561201][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.561218][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.561236][ T5879] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 96.563916][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.563937][ T5879] usb 6-1: Product: syz [ 96.563949][ T5879] usb 6-1: Manufacturer: syz [ 96.563961][ T5879] usb 6-1: SerialNumber: syz [ 96.580094][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.580297][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.580461][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.580579][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.580648][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.580760][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.580827][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.580976][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.581092][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.581165][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.581342][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.583410][ T5879] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 96.584204][ T5879] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 96.587490][ T5879] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 96.590255][ T8228] veth0_vlan: entered allmulticast mode [ 96.592170][ T5879] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 96.593689][ T5879] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 96.597605][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.620'. [ 96.823030][ T8189] bond6: (slave veth0_to_batadv): Device is not bonding slave [ 96.823096][ T8189] bond6: option active_slave: invalid value (veth0_to_batadv) [ 96.828556][ T8189] bond6 (unregistering): Released all slaves [ 97.043842][ T8231] batman_adv: batadv0: Adding interface: veth0 [ 97.043945][ T8231] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.044425][ T8231] batman_adv: batadv0: Interface activated: veth0 [ 97.052635][ T970] usb 6-1: USB disconnect, device number 8 [ 97.063818][ T970] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 97.069563][ T970] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 97.070329][ T970] keyspan 6-1:1.0: device disconnected [ 97.092633][ T8231] batman_adv: batadv0: Interface deactivated: veth0 [ 97.092697][ T8231] batman_adv: batadv0: Removing interface: veth0 [ 97.412385][ T8257] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 97.703416][ T8262] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 97.715182][ T8262] FAULT_INJECTION: forcing a failure. [ 97.715182][ T8262] name failslab, interval 1, probability 0, space 0, times 0 [ 97.715259][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.1.630 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.715299][ T8262] Tainted: [L]=SOFTLOCKUP [ 97.715306][ T8262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.715317][ T8262] Call Trace: [ 97.715324][ T8262] [ 97.715332][ T8262] dump_stack_lvl+0x100/0x190 [ 97.715378][ T8262] should_fail_ex.cold+0x5/0xa [ 97.715405][ T8262] should_failslab+0xc2/0x120 [ 97.715434][ T8262] kmem_cache_alloc_noprof+0x92/0x6a0 [ 97.715456][ T8262] ? do_getname+0x35/0x390 [ 97.715485][ T8262] do_getname+0x35/0x390 [ 97.715527][ T8262] __x64_sys_symlink+0x57/0xb0 [ 97.715553][ T8262] do_syscall_64+0x123/0x790 [ 97.715583][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.715602][ T8262] RIP: 0033:0x7fec1d99e159 [ 97.715619][ T8262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.715637][ T8262] RSP: 002b:00007fec1bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 97.715656][ T8262] RAX: ffffffffffffffda RBX: 00007fec1dc25fa0 RCX: 00007fec1d99e159 [ 97.715668][ T8262] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000940 [ 97.715681][ T8262] RBP: 00007fec1bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 97.715694][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.715704][ T8262] R13: 00007fec1dc26038 R14: 00007fec1dc25fa0 R15: 00007ffcab7752d8 [ 97.715728][ T8262] [ 97.730682][ T8263] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 97.732386][ T8263] 9pnet_virtio: no channels available for device syz [ 97.900394][ T8271] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.632'. [ 98.000798][ T8273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.631'. [ 98.402993][ T8290] FAULT_INJECTION: forcing a failure. [ 98.402993][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 98.403107][ T8290] CPU: 3 UID: 0 PID: 8290 Comm: syz.1.636 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.403151][ T8290] Tainted: [L]=SOFTLOCKUP [ 98.403160][ T8290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.403171][ T8290] Call Trace: [ 98.403177][ T8290] [ 98.403185][ T8290] dump_stack_lvl+0x100/0x190 [ 98.403222][ T8290] should_fail_ex.cold+0x5/0xa [ 98.403255][ T8290] should_failslab+0xc2/0x120 [ 98.403282][ T8290] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 98.403307][ T8290] ? __d_alloc+0x35/0xa50 [ 98.403341][ T8290] __d_alloc+0x35/0xa50 [ 98.403373][ T8290] d_alloc_pseudo+0x1c/0xc0 [ 98.403394][ T8290] alloc_file_pseudo+0x118/0x290 [ 98.403426][ T8290] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 98.403456][ T8290] ? alloc_fd+0x471/0x7a0 [ 98.403486][ T8290] sock_alloc_file+0x50/0x210 [ 98.403524][ T8290] __sys_socket+0x1c0/0x260 [ 98.403553][ T8290] ? fput+0x7c/0x100 [ 98.403588][ T8290] ? __pfx___sys_socket+0x10/0x10 [ 98.403615][ T8290] ? ksys_write+0x1ac/0x250 [ 98.403636][ T8290] ? __pfx_ksys_write+0x10/0x10 [ 98.403662][ T8290] __x64_sys_socket+0x72/0xb0 [ 98.403686][ T8290] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.403709][ T8290] do_syscall_64+0x123/0x790 [ 98.403736][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.403759][ T8290] RIP: 0033:0x7fec1d99e159 [ 98.403777][ T8290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.403799][ T8290] RSP: 002b:00007fec1bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 98.403820][ T8290] RAX: ffffffffffffffda RBX: 00007fec1dc25fa0 RCX: 00007fec1d99e159 [ 98.403835][ T8290] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 98.403848][ T8290] RBP: 00007fec1da35024 R08: 0000000000000000 R09: 0000000000000000 [ 98.403861][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.403874][ T8290] R13: 00007fec1dc26038 R14: 00007fec1dc25fa0 R15: 00007ffcab7752d8 [ 98.403904][ T8290] [ 98.684024][ T8297] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 98.693204][ T8297] FAULT_INJECTION: forcing a failure. [ 98.693204][ T8297] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.693394][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.1.639 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.693420][ T8297] Tainted: [L]=SOFTLOCKUP [ 98.693427][ T8297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.693443][ T8297] Call Trace: [ 98.693449][ T8297] [ 98.693457][ T8297] dump_stack_lvl+0x100/0x190 [ 98.693487][ T8297] should_fail_ex.cold+0x5/0xa [ 98.693511][ T8297] strncpy_from_user+0x3b/0x2d0 [ 98.693541][ T8297] do_getname+0x78/0x390 [ 98.693569][ T8297] __x64_sys_symlink+0x57/0xb0 [ 98.693595][ T8297] do_syscall_64+0x123/0x790 [ 98.693618][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.693636][ T8297] RIP: 0033:0x7fec1d99e159 [ 98.693651][ T8297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.693668][ T8297] RSP: 002b:00007fec1bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 98.693684][ T8297] RAX: ffffffffffffffda RBX: 00007fec1dc25fa0 RCX: 00007fec1d99e159 [ 98.693696][ T8297] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000940 [ 98.693707][ T8297] RBP: 00007fec1bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.693717][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.693726][ T8297] R13: 00007fec1dc26038 R14: 00007fec1dc25fa0 R15: 00007ffcab7752d8 [ 98.693748][ T8297] [ 98.921899][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 98.921965][ T43] audit: type=1400 audit(1788063731.586:1328): avc: denied { map } for pid=8304 comm="syz.0.643" path="socket:[21186]" dev="sockfs" ino=21186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.009292][ T43] audit: type=1400 audit(1788063731.666:1329): avc: denied { mount } for pid=8315 comm="syz.0.645" name="/" dev="ramfs" ino=22978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 99.011014][ T43] audit: type=1400 audit(1788063731.676:1330): avc: denied { execute } for pid=8315 comm="syz.0.645" path="/file1" dev="ramfs" ino=22979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 99.019293][ T43] audit: type=1400 audit(1788063731.676:1331): avc: denied { getopt } for pid=8306 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.070391][ T8321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.645'. [ 99.167304][ T8330] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 99.232367][ T8332] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 99.232894][ T8332] 9pnet_virtio: no channels available for device syz [ 99.314204][ T43] audit: type=1400 audit(1788063731.976:1332): avc: denied { remount } for pid=8335 comm="syz.2.651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.354709][ T43] audit: type=1400 audit(1788063733.016:1333): avc: denied { bind } for pid=8371 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.360540][ T43] audit: type=1400 audit(1788063733.026:1334): avc: denied { ioctl } for pid=8371 comm="syz.2.661" path="socket:[20457]" dev="sockfs" ino=20457 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.424329][ T8374] bond1: entered promiscuous mode [ 100.451966][ T8377] netlink: 'syz.2.663': attribute type 62 has an invalid length. [ 101.018852][ T43] audit: type=1400 audit(1788063733.686:1335): avc: denied { map } for pid=8386 comm="syz.2.667" path="socket:[22328]" dev="sockfs" ino=22328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.018954][ T43] audit: type=1400 audit(1788063733.686:1336): avc: denied { read } for pid=8386 comm="syz.2.667" path="socket:[22328]" dev="sockfs" ino=22328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.034492][ T43] audit: type=1400 audit(1788063733.686:1337): avc: denied { setopt } for pid=8386 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.188599][ T8393] overlayfs: missing 'workdir' [ 101.189172][ T8394] overlayfs: missing 'workdir' [ 101.223577][ T8396] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 101.223652][ T8396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.404389][ T8399] tipc: Enabling of bearer rejected, failed to enable media [ 101.406894][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 101.736950][ T8405] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 102.021163][ T8413] overlayfs: failed to resolve './file0': -2 [ 102.051962][ T8414] lo speed is unknown, defaulting to 1000 [ 102.263191][ T8429] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 102.461839][ T8435] binder: 8434:8435 ioctl c0306201 200000000100 returned -14 [ 102.662713][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.686'. [ 102.859976][ T8445] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 103.229819][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 103.250242][ T8457] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 103.339719][ T8465] netlink: 'syz.2.697': attribute type 62 has an invalid length. [ 103.380357][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 103.381539][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.383435][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.383451][ T10] usb 6-1: Product: syz [ 103.383461][ T10] usb 6-1: Manufacturer: syz [ 103.383470][ T10] usb 6-1: SerialNumber: syz [ 103.398063][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 103.398137][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 103.792303][ T5287] usb 6-1: USB disconnect, device number 9 [ 103.878187][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.701'. [ 103.905211][ T8476] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 103.905211][ T8476] The task syz.0.700 (8476) triggered the difference, watch for misbehavior. [ 104.016057][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 104.016149][ T43] audit: type=1400 audit(1788063736.676:1343): avc: denied { getopt } for pid=8447 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.414604][ T8480] fuse: Bad value for 'fd' [ 104.479418][ T43] audit: type=1400 audit(1788063737.146:1344): avc: denied { mount } for pid=8484 comm="syz.2.703" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 104.487213][ T8485] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 104.767619][ T8498] netlink: 'syz.2.709': attribute type 62 has an invalid length. [ 106.066679][ T43] audit: type=1400 audit(1788063738.726:1345): avc: denied { nlmsg_write } for pid=8501 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 106.106638][ T8505] comedi comedi1: Minor 2 specified more than once! [ 106.343689][ T8526] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 106.395514][ T8525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.717'. [ 106.459852][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 106.874061][ T8552] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3028634658 (6057269316 ns) > initial count (2360585836 ns). Using initial count to start timer. [ 106.876796][ T8552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.082523][ T43] audit: type=1400 audit(1788063739.746:1346): avc: denied { write } for pid=8553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.139806][ T8557] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20001 [ 107.162858][ T43] audit: type=1400 audit(1788063739.826:1347): avc: denied { write } for pid=8558 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.183883][ T8526] CIFS: VFS: Error connecting to socket. Aborting operation. [ 107.184059][ T8526] CIFS: VFS: cifs_mount failed w/return code = -4 [ 107.324412][ T43] audit: type=1400 audit(1788063739.986:1348): avc: denied { write } for pid=8567 comm="syz.1.733" name="/" dev="9p" ino=79953973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.324493][ T43] audit: type=1400 audit(1788063739.986:1349): avc: denied { create } for pid=8567 comm="syz.1.733" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.341702][ T43] audit: type=1400 audit(1788063739.996:1350): avc: denied { read append open } for pid=8567 comm="syz.1.733" path="/153/file0/blkio.bfq.io_service_bytes_recursive" dev="9p" ino=79954075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.456079][ T8579] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 107.456135][ T8579] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.737'. [ 107.552750][ T8583] 9pnet_virtio: no channels available for device syz [ 107.557714][ T8585] overlayfs: failed to clone upperpath [ 107.567193][ T43] audit: type=1400 audit(1788063740.226:1351): avc: denied { mount } for pid=8584 comm="syz.2.740" name="/" dev="autofs" ino=23412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 107.618125][ T43] audit: type=1400 audit(1788063740.276:1352): avc: denied { write } for pid=8589 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.759190][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 107.918734][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.919010][ T35] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 107.920524][ T35] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 107.920539][ T35] usb 6-1: config 1 has no interface number 0 [ 107.922442][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.922458][ T35] usb 6-1: Product: syz [ 107.922466][ T35] usb 6-1: Manufacturer: syz [ 107.922473][ T35] usb 6-1: SerialNumber: syz [ 107.933774][ T35] usb 6-1: cannot find UAC_HEADER [ 107.961179][ T35] snd-usb-audio 6-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 108.088422][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 108.089002][ T10] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 108.089883][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.093989][ T10] usb 5-1: config 0 descriptor?? [ 108.113677][ T10] as10x_usb: device has been detected [ 108.114418][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 108.154358][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 108.203627][ T10] as10x_usb: error during firmware upload part1 [ 108.204744][ T10] Registered device nBox DVB-T Dongle [ 108.304099][ T10] usb 5-1: USB disconnect, device number 10 [ 108.527543][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.743'. [ 108.576147][ T10] Unregistered device nBox DVB-T Dongle [ 108.607998][ T10] as10x_usb: device has been disconnected [ 108.742220][ T5879] usb 6-1: USB disconnect, device number 10 [ 109.264204][ T8635] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 109.268166][ T8635] 9pnet_virtio: no channels available for device syz [ 109.568429][ T35] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 109.699606][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 109.699691][ T43] audit: type=1400 audit(1788063742.366:1358): avc: denied { accept } for pid=8638 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 109.719369][ T35] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 109.724417][ T35] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 109.727512][ T35] usb 5-1: config 1 has no interface number 0 [ 109.731867][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.735425][ T35] usb 5-1: Product: syz [ 109.737654][ T35] usb 5-1: Manufacturer: syz [ 109.737706][ T35] usb 5-1: SerialNumber: syz [ 109.753122][ T35] usb 5-1: 3:1 : does not exist [ 109.755477][ T35] usb 5-1: 3:2 : does not exist [ 109.806520][ T8645] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20001 [ 109.806975][ T8645] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 109.807981][ T7795] IPVS: starting estimator thread 0... [ 109.918512][ T8648] IPVS: using max 45 ests per chain, 108000 per kthread [ 109.953113][ T8637] netlink: 'syz.0.752': attribute type 62 has an invalid length. [ 110.025159][ T8669] tmpfs: Unknown parameter 'grpquotarnel/mm/lru_gen/enabled' [ 110.029495][ T43] audit: type=1400 audit(1788063742.696:1359): avc: denied { create } for pid=8668 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 110.031058][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 110.031078][ T8670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.031095][ T8670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.039358][ T8670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.039371][ T8670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.169984][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 110.247589][ T43] audit: type=1400 audit(1788063742.906:1360): avc: denied { read } for pid=8685 comm="syz.1.765" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.257295][ T43] audit: type=1400 audit(1788063742.906:1361): avc: denied { open } for pid=8685 comm="syz.1.765" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.257338][ T43] audit: type=1400 audit(1788063742.906:1362): avc: denied { ioctl } for pid=8685 comm="syz.1.765" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.324669][ T8693] macvlan2: entered promiscuous mode [ 110.513614][ T8707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.520612][ T5523] usb 5-1: USB disconnect, device number 11 [ 110.562443][ T8709] fuse: fd is not a fuse device [ 110.642444][ T43] audit: type=1400 audit(1788063743.306:1363): avc: denied { write } for pid=8713 comm="syz.1.776" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.642545][ T43] audit: type=1400 audit(1788063743.306:1364): avc: denied { open } for pid=8713 comm="syz.1.776" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.652311][ T43] audit: type=1400 audit(1788063743.306:1365): avc: denied { ioctl } for pid=8713 comm="syz.1.776" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.684740][ T8722] netlink: 'syz.1.779': attribute type 10 has an invalid length. [ 110.693339][ T43] audit: type=1400 audit(1788063743.356:1366): avc: denied { execute_no_trans } for pid=8719 comm="syz.1.779" path=2F3136342FFEE8A2AB78FC979FD1E00D960720 dev="tmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.854072][ T8737] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20001 [ 110.854557][ T8737] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 110.912584][ T43] audit: type=1400 audit(1788063743.576:1367): avc: denied { mounton } for pid=8733 comm="syz.1.782" path="/166/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 111.066199][ T8745] input: syz0 as /devices/virtual/input/input19 [ 111.174688][ T8750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.786'. [ 111.180554][ T8750] openvswitch: netlink: Flow key attr not present in new flow. [ 111.413357][ T8763] netlink: 'syz.2.793': attribute type 62 has an invalid length. [ 111.861560][ T8800] overlay: ./file0 is not a directory [ 111.961379][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.980128][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.983169][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.999565][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.003897][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.064454][ T5092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.067578][ T5092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.070317][ T5092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.071273][ T5092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.071745][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.103111][ T8810] tipc: Enabling of bearer rejected, failed to enable media [ 112.166868][ T8827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.811'. [ 112.166933][ T8827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.811'. [ 112.295252][ T8842] openvswitch: netlink: IP tunnel TTL not specified. [ 112.314289][ T8806] lo speed is unknown, defaulting to 1000 [ 112.329832][ T8846] ceph: No source [ 112.378901][ T5879] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 112.468866][ T5287] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 112.549187][ T5879] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 112.550268][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.553631][ T5879] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 011 [ 112.620578][ T5287] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 112.621494][ T5287] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 112.621512][ T5287] usb 5-1: config 1 has no interface number 0 [ 112.623119][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.623134][ T5287] usb 5-1: Product: syz [ 112.623142][ T5287] usb 5-1: Manufacturer: syz [ 112.623151][ T5287] usb 5-1: SerialNumber: syz [ 112.638696][ T5287] usb 5-1: 3:1 : does not exist [ 112.638779][ T5287] usb 5-1: 3:2 : does not exist [ 112.681566][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.681731][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.681900][ T8806] bridge_slave_0: entered allmulticast mode [ 112.683679][ T8806] bridge_slave_0: entered promiscuous mode [ 112.686669][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.686731][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.686794][ T8806] bridge_slave_1: entered allmulticast mode [ 112.689956][ T8806] bridge_slave_1: entered promiscuous mode [ 112.722601][ T8806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.727848][ T8806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.760913][ T8806] team0: Port device team_slave_0 added [ 112.763526][ T8806] team0: Port device team_slave_1 added [ 112.781959][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.782000][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.782016][ T8806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.782822][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.782830][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.782843][ T8806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.804227][ T8806] hsr_slave_0: entered promiscuous mode [ 112.804686][ T8806] hsr_slave_1: entered promiscuous mode [ 112.805259][ T8806] debugfs: 'hsr0' already exists in 'hsr' [ 112.805279][ T8806] Cannot create hsr debugfs directory [ 112.835079][ T8837] netlink: 'syz.0.813': attribute type 62 has an invalid length. [ 112.955882][ T5879] (null): failure reading functionality [ 112.974789][ T5879] i2c i2c-2: failure reading functionality [ 112.975978][ T8806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.987006][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.990987][ T8806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.014021][ T5879] i2c i2c-2: connected i2c-tiny-usb device [ 113.015399][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.022835][ T8806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.030945][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.031756][ T8806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.037188][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.052437][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.052637][ T8806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.052857][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.052938][ T8806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.108216][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.119106][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.122053][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.137203][ T8806] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.144736][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.144851][ T7766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.149746][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.149792][ T7766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.230056][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.230478][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.235297][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.235706][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.240914][ T8822] i2c i2c-2: failure reading status [ 113.242256][ T8822] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 113.242677][ T8822] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 113.243143][ T8822] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 113.246466][ T30] usb 6-1: USB disconnect, device number 11 [ 113.351171][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 113.393945][ T5523] usb 5-1: USB disconnect, device number 12 [ 113.481836][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.626402][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.822'. [ 113.675116][ T8806] veth0_vlan: entered promiscuous mode [ 113.686169][ T8806] veth1_vlan: entered promiscuous mode [ 113.714269][ T8806] veth0_macvtap: entered promiscuous mode [ 113.719516][ T8806] veth1_macvtap: entered promiscuous mode [ 113.736968][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.747446][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.771832][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.771950][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.772013][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.772046][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.878989][ T7795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.879042][ T7795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.900111][ T7766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.900169][ T7766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.149102][ T5092] Bluetooth: hci4: command tx timeout [ 114.176922][ T8932] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.828'. [ 114.268493][ T5523] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 114.290197][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.290743][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.357248][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.362368][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.473316][ T5523] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 114.499126][ T5523] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 114.499312][ T5523] usb 2-1: Product: QEMU USB Tablet [ 114.499326][ T5523] usb 2-1: Manufacturer: QEMU [ 114.499339][ T5523] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 114.545816][ T5523] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input20 [ 114.558563][ T7037] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.558677][ T7037] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.558720][ T7037] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.558764][ T7037] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.621429][ T8954] netlink: 112 bytes leftover after parsing attributes in process `syz.4.834'. [ 114.624344][ T5523] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 114.636071][ T8954] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 114.636123][ T8954] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 114.636439][ T8954] vhci_hcd vhci_hcd.0: Device attached [ 114.644949][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.834'. [ 114.652247][ T8955] vhci_hcd: connection closed [ 114.656876][ T7036] vhci_hcd vhci_hcd.4: stop threads [ 114.659551][ T7036] vhci_hcd vhci_hcd.4: release socket [ 114.659563][ T7036] vhci_hcd vhci_hcd.4: disconnect device [ 114.663391][ T8960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.836'. [ 114.758811][ T5741] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 114.781288][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 114.781357][ T43] audit: type=1400 audit(1788063747.446:1386): avc: denied { read } for pid=8976 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 114.837802][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 114.837802][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 114.837835][ T8979] netlink: 'syz.2.842': attribute type 30 has an invalid length. [ 114.837868][ T8980] netlink: 'syz.2.842': attribute type 30 has an invalid length. [ 114.847529][ T8982] 9p: Bad value for 'wfdno' [ 114.910267][ T5741] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 114.911278][ T5741] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 114.911301][ T5741] usb 5-1: config 1 has no interface number 0 [ 114.914095][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.914117][ T5741] usb 5-1: Product: syz [ 114.914134][ T5741] usb 5-1: Manufacturer: syz [ 114.914149][ T5741] usb 5-1: SerialNumber: syz [ 114.924084][ T5741] usb 5-1: 3:1 : does not exist [ 114.924103][ T5741] usb 5-1: 3:2 : does not exist [ 115.041828][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.042827][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.125733][ T8950] netlink: 'syz.0.832': attribute type 62 has an invalid length. [ 115.127885][ T8985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.141843][ T8985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.189297][ T8985] veth0_vlan: left promiscuous mode [ 115.228960][ T8985] geneve0: left promiscuous mode [ 115.258096][ T8985] bond1: left promiscuous mode [ 115.260580][ T8985] macvlan2: left promiscuous mode [ 115.279252][ T7036] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.279334][ T7036] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.279402][ T7036] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.279426][ T7036] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.279455][ T7036] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.279479][ T7036] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.279508][ T7036] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.279531][ T7036] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.324530][ T43] audit: type=1400 audit(1788063747.986:1387): avc: denied { write } for pid=8990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.366807][ T9000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.395965][ T43] audit: type=1400 audit(1788063748.056:1388): avc: denied { write } for pid=8997 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.491231][ T43] audit: type=1400 audit(1788063748.156:1389): avc: denied { write } for pid=9009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.514644][ T9011] bond2: Unable to set up delay as MII monitoring is disabled [ 115.530350][ T9011] bond2 (unregistering): Released all slaves [ 115.562186][ T43] audit: type=1400 audit(1788063748.226:1390): avc: denied { create } for pid=9004 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 115.562675][ T43] audit: type=1400 audit(1788063748.226:1391): avc: denied { write } for pid=9004 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 115.581038][ T43] audit: type=1400 audit(1788063748.246:1392): avc: denied { setopt } for pid=9004 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.596240][ T43] audit: type=1400 audit(1788063748.256:1393): avc: denied { write } for pid=9020 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.682429][ T9025] can: request_module (can-proto-0) failed. [ 115.689687][ T6089] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 115.706662][ T43] audit: type=1400 audit(1788063748.366:1394): avc: denied { write } for pid=9028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.708704][ T35] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 115.747696][ T10] usb 5-1: USB disconnect, device number 13 [ 115.763789][ T43] audit: type=1400 audit(1788063748.426:1395): avc: denied { setopt } for pid=9038 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.871889][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.872893][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.872910][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.872921][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.872946][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.877015][ T35] usb 6-1: config 0 descriptor?? [ 116.228812][ T5092] Bluetooth: hci4: command tx timeout [ 116.303787][ T35] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 116.453631][ T9050] veth0_vlan: left allmulticast mode [ 116.529501][ T7037] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.529598][ T7037] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.529637][ T7037] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.529663][ T7037] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.529696][ T7037] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.529722][ T7037] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.529757][ T7037] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.529784][ T7037] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.638834][ T9055] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 116.883276][ T9081] (syz.0.868,9081,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 116.883355][ T9081] (syz.0.868,9081,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 116.883417][ T9081] (syz.0.868,9081,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 116.883440][ T9081] (syz.0.868,9081,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 117.054906][ T9087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9087 comm=syz.0.871 [ 117.054968][ T9087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9087 comm=syz.0.871 [ 117.560686][ T9091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9091 comm=syz.4.873 [ 117.567512][ T9091] kAFS: Invalid Command on /proc/fs/afs/cells file [ 117.567945][ T9091] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 117.755934][ T9101] __nla_validate_parse: 2 callbacks suppressed [ 117.756189][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 117.761338][ T9101] IPv6: sit1: Disabled Multicast RS [ 117.762006][ T9101] sit1: entered allmulticast mode [ 118.023319][ T9123] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 118.151381][ T9131] loop9: detected capacity change from 0 to 7 [ 118.157223][ T9131] loop9: p1 p4 [ 118.158545][ T9131] loop9: partition table partially beyond EOD, truncated [ 118.373094][ T9145] netlink: 'syz.4.891': attribute type 19 has an invalid length. [ 118.383949][ T5287] usb 6-1: USB disconnect, device number 12 [ 118.526904][ T9159] bond2 (unregistering): Released all slaves [ 118.640690][ T5092] Bluetooth: hci4: command tx timeout [ 118.652065][ T9165] (syz.1.905,9165,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 118.657146][ T9165] (syz.1.905,9165,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 118.689246][ T9165] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 118.792344][ T9182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.804592][ T70] lo speed is unknown, defaulting to 1000 [ 118.807722][ T70] syz0: Port: 1 Link DOWN [ 118.813633][ T70] lo speed is unknown, defaulting to 1000 [ 118.864083][ T9191] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 118.897581][ T9195] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 118.897636][ T9195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.913'. [ 118.897856][ T9195] bond0: entered promiscuous mode [ 118.898047][ T9195] bridge0: port 1(bond0) entered blocking state [ 118.898106][ T9195] bridge0: port 1(bond0) entered disabled state [ 118.898196][ T9195] bond0: entered allmulticast mode [ 118.952774][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.914'. [ 118.952837][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.914'. [ 118.953388][ T9201] geneve0: entered promiscuous mode [ 119.041103][ T9209] overlay: ./file0 is not a directory [ 119.141501][ T9219] tipc: Started in network mode [ 119.141569][ T9219] tipc: Node identity 4, cluster identity 4711 [ 119.141611][ T9219] tipc: Node number set to 4 [ 119.143986][ T9219] netlink: NAT attribute has 5 unknown bytes [ 119.144013][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.917834][ T9240] /dev/sg0: Can't lookup blockdev [ 119.919808][ T9240] jffs2: notice: (9240) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 119.928970][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 119.929055][ T43] audit: type=1400 audit(1788063752.586:1418): avc: denied { write } for pid=9239 comm="syz.1.928" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.930995][ T43] audit: type=1400 audit(1788063752.596:1419): avc: denied { add_name } for pid=9239 comm="syz.1.928" name="del2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.952530][ T43] audit: type=1400 audit(1788063752.616:1420): avc: denied { read write open } for pid=9239 comm="syz.1.928" path="/192/mnt/del2" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 119.961117][ T43] audit: type=1400 audit(1788063752.626:1421): avc: denied { setattr } for pid=9239 comm="syz.1.928" name="del2" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.000059][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'. [ 121.087594][ T9263] fuse: fd is not a fuse device [ 121.098705][ T9271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.936'. [ 121.275679][ T43] audit: type=1400 audit(1788063753.936:1422): avc: denied { read } for pid=9288 comm="syz.0.943" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 121.289024][ T9290] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 121.293002][ T9290] exFAT-fs (nullb0): invalid boot record signature [ 121.295214][ T9290] exFAT-fs (nullb0): failed to read boot sector [ 121.297348][ T9290] exFAT-fs (nullb0): failed to recognize exfat type [ 121.321607][ T9288] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 121.383369][ T43] audit: type=1326 audit(1788063754.046:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.2.950" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f738879e159 code=0x0 [ 121.462665][ T7036] nci: nci_ntf_packet: unknown ntf opcode 0x232 [ 121.537074][ T9323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.542806][ T43] audit: type=1400 audit(1788063754.206:1424): avc: denied { module_load } for pid=9320 comm="syz.4.954" path="/40/file1" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 121.544104][ T9323] Invalid ELF header len 18 [ 122.471042][ T9335] syzkaller0: entered promiscuous mode [ 122.471097][ T9335] syzkaller0: entered allmulticast mode [ 122.479529][ T43] audit: type=1400 audit(1788063755.146:1425): avc: denied { listen } for pid=9332 comm="syz.4.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.354814][ T9302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.420673][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 124.420774][ T9345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.959'. [ 124.455727][ T43] audit: type=1326 audit(1788063757.116:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.4.962" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4762d9e159 code=0x0 [ 124.567696][ T43] audit: type=1400 audit(1788063757.226:1427): avc: denied { watch } for pid=9349 comm="syz.4.962" path="/44/file0" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.678516][ T70] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 124.818543][ T70] usb 6-1: device descriptor read/64, error -71 [ 124.975730][ T43] audit: type=1400 audit(1788063757.636:1428): avc: denied { watch watch_reads } for pid=9373 comm="syz.2.970" path="/file0" dev="ramfs" ino=29756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=lnk_file permissive=1 [ 125.019401][ T9377] fuse: fd is not a fuse device [ 125.055654][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.967'. [ 125.068477][ T70] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 125.209131][ T70] usb 6-1: device descriptor read/64, error -71 [ 125.319243][ T70] usb usb6-port1: attempt power cycle [ 125.319541][ T9391] netlink: 'syz.4.977': attribute type 4 has an invalid length. [ 125.319559][ T9391] netlink: 17 bytes leftover after parsing attributes in process `syz.4.977'. [ 125.320132][ T9391] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.977'. [ 125.355027][ T9395] syzkaller0: entered promiscuous mode [ 125.357010][ T9395] syzkaller0: entered allmulticast mode [ 125.367619][ T43] audit: type=1400 audit(1788063758.026:1429): avc: denied { block_suspend } for pid=9393 comm="syz.2.979" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.509285][ T9402] netlink: 'syz.2.981': attribute type 62 has an invalid length. [ 125.555196][ T9406] FAULT_INJECTION: forcing a failure. [ 125.555196][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.555262][ T9406] CPU: 0 UID: 0 PID: 9406 Comm: syz.4.983 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.555294][ T9406] Tainted: [L]=SOFTLOCKUP [ 125.555301][ T9406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.555313][ T9406] Call Trace: [ 125.555319][ T9406] [ 125.555327][ T9406] dump_stack_lvl+0x100/0x190 [ 125.555371][ T9406] should_fail_ex.cold+0x5/0xa [ 125.555398][ T9406] _copy_from_user+0x2e/0xd0 [ 125.555429][ T9406] copy_msghdr_from_user+0x9f/0x4c0 [ 125.555451][ T9406] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 125.555470][ T9406] ? lock_acquire+0x1d1/0x380 [ 125.555483][ T9406] ? get_pid_task+0x2a/0x250 [ 125.555501][ T9406] ___sys_sendmsg+0x106/0x1e0 [ 125.555517][ T9406] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.555532][ T9406] ? get_pid_task+0x106/0x250 [ 125.555553][ T9406] ? find_held_lock+0x2b/0x80 [ 125.555579][ T9406] __sys_sendmsg+0x160/0x210 [ 125.555598][ T9406] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.555624][ T9406] do_syscall_64+0x123/0x790 [ 125.555644][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.555657][ T9406] RIP: 0033:0x7f4762d9e159 [ 125.555681][ T9406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.555695][ T9406] RSP: 002b:00007f4763c4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.555707][ T9406] RAX: ffffffffffffffda RBX: 00007f4763025fa0 RCX: 00007f4762d9e159 [ 125.555715][ T9406] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 125.555722][ T9406] RBP: 00007f4763c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 125.555729][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.555736][ T9406] R13: 00007f4763026038 R14: 00007f4763025fa0 R15: 00007fff3e1474f8 [ 125.555752][ T9406] [ 125.658563][ T70] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 125.679209][ T70] usb 6-1: device descriptor read/8, error -71 [ 125.918450][ T70] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 125.939853][ T70] usb 6-1: device descriptor read/8, error -71 [ 126.048903][ T70] usb usb6-port1: unable to enumerate USB device [ 126.070299][ T9413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.078428][ T5287] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 126.228989][ T5287] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 126.229055][ T5287] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 126.230116][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.230145][ T5287] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.230161][ T5287] usb 5-1: config 0 interface 0 has no altsetting 0 ** replaying previous printk message ** [ 126.230161][ T5287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.230936][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.230961][ T5287] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.230977][ T5287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.231715][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.231736][ T5287] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.231752][ T5287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.232568][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.232602][ T5287] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.232624][ T5287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.233469][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.233505][ T5287] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.233527][ T5287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.234476][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.234510][ T5287] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.234532][ T5287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.235314][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.235336][ T5287] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.235350][ T5287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.236126][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.236160][ T5287] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.236183][ T5287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.238017][ T5287] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 126.238034][ T5287] usb 5-1: Product: syz [ 126.238042][ T5287] usb 5-1: Manufacturer: syz [ 126.238051][ T5287] usb 5-1: SerialNumber: syz [ 126.240261][ T5287] usb 5-1: config 0 descriptor?? [ 126.242877][ C2] ================================================================== [ 126.242890][ C2] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 126.242908][ C2] Read of size 1 at addr ffff88802a5f74e8 by task kworker/2:3/5287 [ 126.242918][ C2] [ 126.242925][ C2] CPU: 2 UID: 0 PID: 5287 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.242941][ C2] Tainted: [L]=SOFTLOCKUP [ 126.242945][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.242952][ C2] Workqueue: usb_hub_wq hub_event [ 126.242966][ C2] Call Trace: [ 126.242970][ C2] [ 126.242975][ C2] dump_stack_lvl+0x100/0x190 [ 126.242995][ C2] print_report+0x13d/0x4b0 [ 126.243020][ C2] ? __virt_addr_valid+0x239/0x430 [ 126.243040][ C2] ? find_endpoint+0x2a3/0x2c0 [ 126.243062][ C2] kasan_report+0xdf/0x1c0 [ 126.243084][ C2] ? find_endpoint+0x2a3/0x2c0 [ 126.243110][ C2] find_endpoint+0x2a3/0x2c0 [ 126.243134][ C2] dummy_timer+0x500/0x3700 [ 126.243163][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 126.243182][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 126.243194][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 126.243208][ C2] ? mark_held_locks+0x40/0x70 [ 126.243275][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 126.243297][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 126.243312][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 126.243330][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 126.243346][ C2] handle_softirqs+0x1e6/0x9d0 [ 126.243358][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 126.243369][ C2] ? _raw_spin_unlock+0x28/0x50 [ 126.243384][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 126.243400][ C2] __irq_exit_rcu+0x194/0x210 [ 126.243411][ C2] irq_exit_rcu+0x9/0x30 [ 126.243421][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 126.243433][ C2] [ 126.243436][ C2] [ 126.243440][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.243454][ C2] RIP: 0010:stack_depot_save_flags+0x16c/0x9f0 [ 126.243467][ C2] Code: 41 c1 c8 08 45 29 c1 4c 8b 3d 70 d9 65 16 45 89 c8 44 23 05 5e d9 65 16 49 c1 e0 04 4d 01 c7 65 48 ff 05 af 9b 2c 0f 4d 8b 37 <4d> 39 f7 75 1b e9 af 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 4d 8b [ 126.243478][ C2] RSP: 0018:ffffc900016be888 EFLAGS: 00000282 [ 126.243491][ C2] RAX: 000000001407336c RBX: 0000000000000001 RCX: 000000002088cfb3 [ 126.243498][ C2] RDX: 0000000000000027 RSI: 000000007327278d RDI: 0000000000000003 [ 126.243505][ C2] RBP: 0000000000000dc0 R08: 0000000000864940 R09: 0000000059086494 [ 126.243512][ C2] R10: 0000000000000200 R11: 000000000000761b R12: ffffc900016be8e0 [ 126.243519][ C2] R13: 0000000000000027 R14: ffff88816d264940 R15: ffff88816d264940 [ 126.243530][ C2] ? stack_depot_save_flags+0x27/0x9f0 [ 126.243542][ C2] kasan_save_stack+0x3f/0x50 [ 126.243553][ C2] ? kasan_save_stack+0x30/0x50 [ 126.243564][ C2] ? kasan_save_track+0x14/0x30 [ 126.243574][ C2] ? __kasan_kmalloc+0xaa/0xb0 [ 126.243584][ C2] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 126.243599][ C2] ? get_device_parent+0x29a/0x4c0 [ 126.243609][ C2] ? device_add+0x1ad/0x1970 [ 126.243620][ C2] ? device_create_groups_vargs+0x1f8/0x270 [ 126.243632][ C2] ? device_create+0xed/0x130 [ 126.243642][ C2] ? usb_register_dev+0x2f0/0x570 [ 126.243657][ C2] ? yurex_probe+0xb03/0xfb0 [ 126.243669][ C2] ? usb_probe_interface+0x386/0x9b0 [ 126.243682][ C2] ? really_probe+0x241/0xa60 [ 126.243696][ C2] ? __driver_probe_device+0x210/0x460 [ 126.243712][ C2] ? driver_probe_device+0x4a/0x140 [ 126.243728][ C2] ? __device_attach_driver+0x1df/0x320 [ 126.243744][ C2] ? bus_for_each_drv+0x159/0x1e0 [ 126.243756][ C2] ? __device_attach+0x1e4/0x4d0 [ 126.243766][ C2] ? device_initial_probe+0xaf/0xd0 [ 126.243775][ C2] ? bus_probe_device+0x64/0x160 [ 126.243789][ C2] ? device_add+0x121d/0x1970 [ 126.243800][ C2] ? usb_set_configuration+0xd97/0x1c60 [ 126.243811][ C2] ? usb_generic_driver_probe+0xa1/0xe0 [ 126.243826][ C2] ? usb_probe_device+0xef/0x400 [ 126.243838][ C2] ? really_probe+0x241/0xa60 [ 126.243853][ C2] ? __driver_probe_device+0x210/0x460 [ 126.243868][ C2] ? driver_probe_device+0x4a/0x140 [ 126.243887][ C2] ? __device_attach_driver+0x1df/0x320 [ 126.243903][ C2] ? bus_for_each_drv+0x159/0x1e0 [ 126.243916][ C2] ? __device_attach+0x1e4/0x4d0 [ 126.243925][ C2] ? device_initial_probe+0xaf/0xd0 [ 126.243935][ C2] ? bus_probe_device+0x64/0x160 [ 126.243948][ C2] ? device_add+0x121d/0x1970 [ 126.243958][ C2] ? usb_new_device.part.0+0xcc2/0x1686 [ 126.243974][ C2] ? hub_event.cold+0x1e3/0xe90 [ 126.243993][ C2] ? process_one_work+0xac7/0x1b10 [ 126.244008][ C2] ? worker_thread+0x5ef/0xe50 [ 126.244023][ C2] ? kthread+0x373/0x450 [ 126.244036][ C2] ? ret_from_fork+0x730/0xd60 [ 126.244047][ C2] ? ret_from_fork_asm+0x1a/0x30 [ 126.244062][ C2] kasan_save_track+0x14/0x30 [ 126.244073][ C2] __kasan_kmalloc+0xaa/0xb0 [ 126.244083][ C2] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 126.244098][ C2] ? get_device_parent+0x260/0x4c0 [ 126.244108][ C2] ? get_device_parent+0x29a/0x4c0 [ 126.244118][ C2] get_device_parent+0x29a/0x4c0 [ 126.244128][ C2] device_add+0x1ad/0x1970 [ 126.244141][ C2] ? __pfx_device_add+0x10/0x10 [ 126.244160][ C2] ? kfree_const+0x5a/0x70 [ 126.244183][ C2] ? kfree+0x1e5/0x6d0 [ 126.244206][ C2] device_create_groups_vargs+0x1f8/0x270 [ 126.244229][ C2] device_create+0xed/0x130 [ 126.244249][ C2] ? __pfx_device_create+0x10/0x10 [ 126.244271][ C2] ? down_write+0x146/0x1f0 [ 126.244294][ C2] ? __pfx_down_write+0x10/0x10 [ 126.244316][ C2] usb_register_dev+0x2f0/0x570 [ 126.244332][ C2] ? __pfx_usb_register_dev+0x10/0x10 [ 126.244349][ C2] yurex_probe+0xb03/0xfb0 [ 126.244361][ C2] ? _raw_spin_lock_irqsave+0x52/0x60 [ 126.244377][ C2] ? __pfx_yurex_probe+0x10/0x10 [ 126.244390][ C2] ? mark_held_locks+0x40/0x70 [ 126.244400][ C2] ? __pfx_autoremove_wake_function+0x10/0x10 [ 126.244417][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 126.244433][ C2] ? __pm_runtime_set_status+0x13c/0x970 [ 126.244446][ C2] usb_probe_interface+0x386/0x9b0 [ 126.244460][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 126.244474][ C2] ? kernfs_put+0x3f/0x60 [ 126.244490][ C2] ? sysfs_create_link+0x68/0xc0 [ 126.244503][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 126.244542][ C2] really_probe+0x241/0xa60 [ 126.244558][ C2] __driver_probe_device+0x210/0x460 [ 126.244574][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 126.244602][ C2] driver_probe_device+0x4a/0x140 [ 126.244630][ C2] __device_attach_driver+0x1df/0x320 [ 126.244658][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 126.244682][ C2] bus_for_each_drv+0x159/0x1e0 [ 126.244696][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 126.244710][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.244744][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 126.244762][ C2] __device_attach+0x1e4/0x4d0 [ 126.244772][ C2] ? __pfx___device_attach+0x10/0x10 [ 126.244782][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 126.244805][ C2] device_initial_probe+0xaf/0xd0 [ 126.244823][ C2] bus_probe_device+0x64/0x160 [ 126.244850][ C2] device_add+0x121d/0x1970 [ 126.244872][ C2] ? __pfx_device_add+0x10/0x10 [ 126.244892][ C2] ? mark_held_locks+0x40/0x70 [ 126.244910][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 126.244944][ C2] usb_set_configuration+0xd97/0x1c60 [ 126.244963][ C2] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 126.244986][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 126.245002][ C2] usb_probe_device+0xef/0x400 [ 126.245014][ C2] ? __pfx_usb_probe_device+0x10/0x10 [ 126.245027][ C2] really_probe+0x241/0xa60 [ 126.245043][ C2] __driver_probe_device+0x210/0x460 [ 126.245060][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 126.245077][ C2] driver_probe_device+0x4a/0x140 [ 126.245093][ C2] __device_attach_driver+0x1df/0x320 [ 126.245110][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 126.245127][ C2] bus_for_each_drv+0x159/0x1e0 [ 126.245140][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 126.245154][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.245165][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 126.245182][ C2] __device_attach+0x1e4/0x4d0 [ 126.245192][ C2] ? __pfx___device_attach+0x10/0x10 [ 126.245202][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 126.245216][ C2] device_initial_probe+0xaf/0xd0 [ 126.245227][ C2] bus_probe_device+0x64/0x160 [ 126.245241][ C2] device_add+0x121d/0x1970 [ 126.245253][ C2] ? __pfx_device_add+0x10/0x10 [ 126.245264][ C2] ? add_device_randomness+0xc9/0x110 [ 126.245280][ C2] usb_new_device.part.0+0xcc2/0x1686 [ 126.245297][ C2] ? do_raw_spin_lock+0x128/0x260 [ 126.245310][ C2] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 126.245335][ C2] ? mark_held_locks+0x40/0x70 [ 126.245356][ C2] hub_event.cold+0x1e3/0xe90 [ 126.245393][ C2] ? __pfx_hub_event+0x10/0x10 [ 126.245415][ C2] ? __lock_acquire+0x20/0x1ec0 [ 126.245427][ C2] ? lock_acquire+0x1d1/0x380 [ 126.245437][ C2] ? process_one_work+0xa2c/0x1b10 [ 126.245453][ C2] ? process_one_work+0x906/0x1b10 [ 126.245467][ C2] ? process_one_work+0x906/0x1b10 [ 126.245485][ C2] process_one_work+0xac7/0x1b10 [ 126.245503][ C2] ? __pfx_process_one_work+0x10/0x10 [ 126.245519][ C2] ? lock_acquire+0x1d1/0x380 [ 126.245531][ C2] ? __pfx_hub_event+0x10/0x10 [ 126.245543][ C2] worker_thread+0x5ef/0xe50 [ 126.245559][ C2] ? __pfx_worker_thread+0x10/0x10 [ 126.245575][ C2] ? kthread+0x13a/0x450 [ 126.245589][ C2] ? __pfx_worker_thread+0x10/0x10 [ 126.245604][ C2] kthread+0x373/0x450 [ 126.245617][ C2] ? __pfx_kthread+0x10/0x10 [ 126.245631][ C2] ret_from_fork+0x730/0xd60 [ 126.245643][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 126.245655][ C2] ? __switch_to+0x800/0x10f0 [ 126.245669][ C2] ? __pfx_kthread+0x10/0x10 [ 126.245684][ C2] ret_from_fork_asm+0x1a/0x30 [ 126.245698][ C2] [ 126.245702][ C2] [ 126.245705][ C2] Allocated by task 7795: [ 126.245711][ C2] kasan_save_stack+0x30/0x50 [ 126.245722][ C2] kasan_save_track+0x14/0x30 [ 126.245732][ C2] __kasan_kmalloc+0xaa/0xb0 [ 126.245741][ C2] __kmalloc_noprof+0x32f/0x840 [ 126.245750][ C2] fib6_info_alloc+0x40/0x160 [ 126.245764][ C2] ip6_route_info_create+0x14c/0xad0 [ 126.245777][ C2] ip6_route_add+0x4b/0x1d0 [ 126.245786][ C2] addrconf_prefix_route+0x2fb/0x510 [ 126.245798][ C2] addrconf_add_linklocal+0x329/0x500 [ 126.245812][ C2] addrconf_addr_gen+0x364/0x3b0 [ 126.245825][ C2] addrconf_init_auto_addrs+0x1cb/0x780 [ 126.245842][ C2] addrconf_notify+0xa10/0x1ba0 [ 126.245856][ C2] notifier_call_chain+0x99/0x3f0 [ 126.245880][ C2] call_netdevice_notifiers_info+0xbe/0x110 [ 126.245898][ C2] netif_state_change+0x165/0x380 [ 126.245917][ C2] linkwatch_do_dev+0xe0/0x120 [ 126.245939][ C2] __linkwatch_run_queue+0x3a9/0x900 [ 126.245955][ C2] linkwatch_event+0x8f/0xc0 [ 126.245966][ C2] process_one_work+0xac7/0x1b10 [ 126.245986][ C2] worker_thread+0x5ef/0xe50 [ 126.246000][ C2] kthread+0x373/0x450 [ 126.246012][ C2] ret_from_fork+0x730/0xd60 [ 126.246022][ C2] ret_from_fork_asm+0x1a/0x30 [ 126.246032][ C2] [ 126.246034][ C2] Freed by task 0: [ 126.246039][ C2] kasan_save_stack+0x30/0x50 [ 126.246048][ C2] kasan_save_track+0x14/0x30 [ 126.246058][ C2] kasan_save_free_info+0x3b/0x70 [ 126.246071][ C2] __kasan_slab_free+0x5f/0x80 [ 126.246081][ C2] kfree+0x22b/0x6d0 [ 126.246093][ C2] rcu_core+0x5f0/0x1260 [ 126.246105][ C2] handle_softirqs+0x1e6/0x9d0 [ 126.246114][ C2] __irq_exit_rcu+0x194/0x210 [ 126.246123][ C2] irq_exit_rcu+0x9/0x30 [ 126.246133][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 126.246143][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.246154][ C2] [ 126.246157][ C2] Last potentially related work creation: [ 126.246161][ C2] kasan_save_stack+0x30/0x50 [ 126.246170][ C2] kasan_record_aux_stack+0xa7/0xc0 [ 126.246184][ C2] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 126.246194][ C2] fib6_del+0xf60/0x1790 [ 126.246207][ C2] fib6_clean_node+0x426/0x5d0 [ 126.246220][ C2] fib6_walk_continue+0x451/0x8d0 [ 126.246232][ C2] fib6_walk+0x182/0x370 [ 126.246243][ C2] fib6_clean_tree+0xdc/0x120 [ 126.246254][ C2] __fib6_clean_all+0x107/0x2d0 [ 126.246267][ C2] rt6_disable_ip+0x2a6/0x980 [ 126.246277][ C2] addrconf_ifdown.isra.0+0x11d/0x1b70 [ 126.246291][ C2] addrconf_notify+0x4a3/0x1ba0 [ 126.246300][ C2] notifier_call_chain+0x99/0x3f0 [ 126.246313][ C2] call_netdevice_notifiers_info+0xbe/0x110 [ 126.246325][ C2] __dev_notify_flags+0x2fc/0x4b0 [ 126.246339][ C2] netif_change_flags+0x108/0x160 [ 126.246353][ C2] do_setlink.isra.0+0x1ac4/0x3e60 [ 126.246362][ C2] rtnl_newlink+0x1dc4/0x2620 [ 126.246372][ C2] rtnetlink_rcv_msg+0x95e/0xe90 [ 126.246381][ C2] netlink_rcv_skb+0x159/0x420 [ 126.246396][ C2] netlink_unicast+0x585/0x850 [ 126.246410][ C2] netlink_sendmsg+0x8b0/0xda0 [ 126.246423][ C2] ____sys_sendmsg+0xa4d/0xbe0 [ 126.246438][ C2] ___sys_sendmsg+0x190/0x1e0 [ 126.246456][ C2] __sys_sendmsg+0x160/0x210 [ 126.246481][ C2] do_syscall_64+0x123/0x790 [ 126.246498][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.246517][ C2] [ 126.246521][ C2] The buggy address belongs to the object at ffff88802a5f7400 [ 126.246521][ C2] which belongs to the cache kmalloc-512 of size 512 [ 126.246537][ C2] The buggy address is located 232 bytes inside of [ 126.246537][ C2] freed 512-byte region [ffff88802a5f7400, ffff88802a5f7600) [ 126.246556][ C2] [ 126.246561][ C2] The buggy address belongs to the physical page: [ 126.246569][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a5f7000 pfn:0x2a5f4 [ 126.246579][ C2] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 126.246588][ C2] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 126.246598][ C2] page_type: f5(slab) [ 126.246607][ C2] raw: 00fff00000000240 ffff88801c042c80 ffffea000158d210 ffffea000079b910 [ 126.246617][ C2] raw: ffff88802a5f7000 000000000010000a 00000000f5000000 0000000000000000 [ 126.246627][ C2] head: 00fff00000000240 ffff88801c042c80 ffffea000158d210 ffffea000079b910 [ 126.246636][ C2] head: ffff88802a5f7000 000000000010000a 00000000f5000000 0000000000000000 [ 126.246645][ C2] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 126.246654][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 126.246660][ C2] page dumped because: kasan: bad access detected [ 126.246666][ C2] page_owner tracks the page as allocated [ 126.246669][ C2] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6272, tgid 6269 (syz.0.107), ts 59429905032 [ 126.246686][ C2] post_alloc_hook+0xfd/0x120 [ 126.246701][ C2] get_page_from_freelist+0x110d/0x35b0 [ 126.246716][ C2] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 126.246731][ C2] new_slab+0xa9/0x6e0 [ 126.246743][ C2] refill_objects+0xe3/0x410 [ 126.246757][ C2] __pcs_replace_empty_main+0x35e/0x650 [ 126.246771][ C2] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 126.246784][ C2] snd_mixer_oss_build_test+0x7a/0x380 [ 126.246800][ C2] snd_mixer_oss_build_test_all+0x5d0/0x6e0 [ 126.246816][ C2] snd_mixer_oss_build_input+0x139/0xd50 [ 126.246825][ C2] snd_mixer_oss_notify_handler+0x48d/0x990 [ 126.246835][ C2] snd_card_register+0x2af/0x760 [ 126.246847][ C2] f_midi2_bind+0x1198/0x2770 [ 126.246857][ C2] usb_add_function+0x219/0x890 [ 126.246868][ C2] configfs_composite_bind+0xd83/0x1960 [ 126.246880][ C2] gadget_bind_driver+0x28c/0xbf0 [ 126.246894][ C2] page last free pid 5944 tgid 5943 ts 51775029163 stack trace: [ 126.246902][ C2] __free_frozen_pages+0x79f/0x10f0 [ 126.246916][ C2] qlist_free_all+0x47/0xf0 [ 126.246925][ C2] kasan_quarantine_reduce+0x1a0/0x1f0 [ 126.246934][ C2] __kasan_slab_alloc+0x69/0x90 [ 126.246945][ C2] kmem_cache_alloc_noprof+0x269/0x6a0 [ 126.246954][ C2] ptlock_alloc+0x1f/0x70 [ 126.246966][ C2] pte_alloc_one+0x82/0x3d0 [ 126.246986][ C2] do_fault+0x960/0x1830 [ 126.246996][ C2] __handle_mm_fault+0x150b/0x2f60 [ 126.247009][ C2] handle_mm_fault+0x363/0xa20 [ 126.247021][ C2] __get_user_pages+0x8ae/0x2c30 [ 126.247031][ C2] populate_vma_page_range+0x267/0x3f0 [ 126.247042][ C2] __mm_populate+0x107/0x3a0 [ 126.247052][ C2] vm_mmap_pgoff+0x441/0x470 [ 126.247062][ C2] ksys_mmap_pgoff+0xe4/0x610 [ 126.247071][ C2] __x64_sys_mmap+0x125/0x190 [ 126.247082][ C2] [ 126.247084][ C2] Memory state around the buggy address: [ 126.247089][ C2] ffff88802a5f7380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.247096][ C2] ffff88802a5f7400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.247103][ C2] >ffff88802a5f7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.247108][ C2] ^ [ 126.247114][ C2] ffff88802a5f7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.247121][ C2] ffff88802a5f7580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.247126][ C2] ================================================================== [ 126.247132][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.880703][ C2] CPU: 2 UID: 0 PID: 5287 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.884170][ C2] Tainted: [L]=SOFTLOCKUP [ 126.885692][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.889371][ C2] Workqueue: usb_hub_wq hub_event [ 126.891220][ C2] Call Trace: [ 126.892550][ C2] [ 126.893700][ C2] dump_stack_lvl+0x100/0x190 [ 126.895515][ C2] vpanic+0x553/0x970 [ 126.896908][ C2] ? __pfx_vpanic+0x10/0x10 [ 126.898409][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 126.900020][ C2] ? find_endpoint+0x2a3/0x2c0 [ 126.901739][ C2] panic+0xd1/0xe0 [ 126.902972][ C2] ? __pfx_panic+0x10/0x10 [ 126.904348][ C2] ? end_report.part.0+0x23/0x90 [ 126.905885][ C2] ? rcu_is_watching+0x13/0xc0 [ 126.907472][ C2] ? end_report.part.0+0x23/0x90 [ 126.909144][ C2] check_panic_on_warn.cold+0x19/0x34 [ 126.910956][ C2] end_report.part.0+0x3a/0x90 [ 126.912607][ C2] kasan_report.cold+0xe/0x18 [ 126.914231][ C2] ? find_endpoint+0x2a3/0x2c0 [ 126.915968][ C2] find_endpoint+0x2a3/0x2c0 [ 126.917671][ C2] dummy_timer+0x500/0x3700 [ 126.919308][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 126.921442][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 126.923285][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 126.924836][ C2] ? mark_held_locks+0x40/0x70 [ 126.926400][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 126.928242][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 126.929980][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 126.931702][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 126.933465][ C2] handle_softirqs+0x1e6/0x9d0 [ 126.935077][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 126.936823][ C2] ? _raw_spin_unlock+0x28/0x50 [ 126.938335][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 126.940033][ C2] __irq_exit_rcu+0x194/0x210 [ 126.941603][ C2] irq_exit_rcu+0x9/0x30 [ 126.942951][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 126.944819][ C2] [ 126.945825][ C2] [ 126.946806][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.948638][ C2] RIP: 0010:stack_depot_save_flags+0x16c/0x9f0 [ 126.950556][ C2] Code: 41 c1 c8 08 45 29 c1 4c 8b 3d 70 d9 65 16 45 89 c8 44 23 05 5e d9 65 16 49 c1 e0 04 4d 01 c7 65 48 ff 05 af 9b 2c 0f 4d 8b 37 <4d> 39 f7 75 1b e9 af 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 4d 8b [ 126.956112][ C2] RSP: 0018:ffffc900016be888 EFLAGS: 00000282 [ 126.958005][ C2] RAX: 000000001407336c RBX: 0000000000000001 RCX: 000000002088cfb3 [ 126.960629][ C2] RDX: 0000000000000027 RSI: 000000007327278d RDI: 0000000000000003 [ 126.963443][ C2] RBP: 0000000000000dc0 R08: 0000000000864940 R09: 0000000059086494 [ 126.965976][ C2] R10: 0000000000000200 R11: 000000000000761b R12: ffffc900016be8e0 [ 126.968351][ C2] R13: 0000000000000027 R14: ffff88816d264940 R15: ffff88816d264940 [ 126.970761][ C2] ? stack_depot_save_flags+0x27/0x9f0 [ 126.972470][ C2] kasan_save_stack+0x3f/0x50 [ 126.973967][ C2] ? kasan_save_stack+0x30/0x50 [ 126.975532][ C2] ? kasan_save_track+0x14/0x30 [ 126.977163][ C2] ? __kasan_kmalloc+0xaa/0xb0 [ 126.978857][ C2] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 126.980842][ C2] ? get_device_parent+0x29a/0x4c0 [ 126.982613][ C2] ? device_add+0x1ad/0x1970 [ 126.984142][ C2] ? device_create_groups_vargs+0x1f8/0x270 [ 126.986009][ C2] ? device_create+0xed/0x130 [ 126.987647][ C2] ? usb_register_dev+0x2f0/0x570 [ 126.989298][ C2] ? yurex_probe+0xb03/0xfb0 [ 126.990747][ C2] ? usb_probe_interface+0x386/0x9b0 [ 126.992283][ C2] ? really_probe+0x241/0xa60 [ 126.993734][ C2] ? __driver_probe_device+0x210/0x460 [ 126.995358][ C2] ? driver_probe_device+0x4a/0x140 [ 126.996942][ C2] ? __device_attach_driver+0x1df/0x320 [ 126.998675][ C2] ? bus_for_each_drv+0x159/0x1e0 [ 127.000393][ C2] ? __device_attach+0x1e4/0x4d0 [ 127.002208][ C2] ? device_initial_probe+0xaf/0xd0 [ 127.004000][ C2] ? bus_probe_device+0x64/0x160 [ 127.005681][ C2] ? device_add+0x121d/0x1970 [ 127.007085][ C2] ? usb_set_configuration+0xd97/0x1c60 [ 127.008789][ C2] ? usb_generic_driver_probe+0xa1/0xe0 [ 127.010429][ C2] ? usb_probe_device+0xef/0x400 [ 127.011978][ C2] ? really_probe+0x241/0xa60 [ 127.013758][ C2] ? __driver_probe_device+0x210/0x460 [ 127.015364][ C2] ? driver_probe_device+0x4a/0x140 [ 127.016932][ C2] ? __device_attach_driver+0x1df/0x320 [ 127.018845][ C2] ? bus_for_each_drv+0x159/0x1e0 [ 127.020832][ C2] ? __device_attach+0x1e4/0x4d0 [ 127.022715][ C2] ? device_initial_probe+0xaf/0xd0 [ 127.024537][ C2] ? bus_probe_device+0x64/0x160 [ 127.026086][ C2] ? device_add+0x121d/0x1970 [ 127.027517][ C2] ? usb_new_device.part.0+0xcc2/0x1686 [ 127.029201][ C2] ? hub_event.cold+0x1e3/0xe90 [ 127.030698][ C2] ? process_one_work+0xac7/0x1b10 [ 127.032268][ C2] ? worker_thread+0x5ef/0xe50 [ 127.033758][ C2] ? kthread+0x373/0x450 [ 127.035070][ C2] ? ret_from_fork+0x730/0xd60 [ 127.036758][ C2] ? ret_from_fork_asm+0x1a/0x30 [ 127.038355][ C2] kasan_save_track+0x14/0x30 [ 127.039838][ C2] __kasan_kmalloc+0xaa/0xb0 [ 127.041479][ C2] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 127.043734][ C2] ? get_device_parent+0x260/0x4c0 [ 127.045927][ C2] ? get_device_parent+0x29a/0x4c0 [ 127.047810][ C2] get_device_parent+0x29a/0x4c0 [ 127.049678][ C2] device_add+0x1ad/0x1970 [ 127.051399][ C2] ? __pfx_device_add+0x10/0x10 [ 127.053100][ C2] ? kfree_const+0x5a/0x70 [ 127.054454][ C2] ? kfree+0x1e5/0x6d0 [ 127.055773][ C2] device_create_groups_vargs+0x1f8/0x270 [ 127.057646][ C2] device_create+0xed/0x130 [ 127.059384][ C2] ? __pfx_device_create+0x10/0x10 [ 127.061018][ C2] ? down_write+0x146/0x1f0 [ 127.062741][ C2] ? __pfx_down_write+0x10/0x10 [ 127.064963][ C2] usb_register_dev+0x2f0/0x570 [ 127.067244][ C2] ? __pfx_usb_register_dev+0x10/0x10 [ 127.069453][ C2] yurex_probe+0xb03/0xfb0 [ 127.071234][ C2] ? _raw_spin_lock_irqsave+0x52/0x60 [ 127.073414][ C2] ? __pfx_yurex_probe+0x10/0x10 [ 127.075393][ C2] ? mark_held_locks+0x40/0x70 [ 127.077314][ C2] ? __pfx_autoremove_wake_function+0x10/0x10 [ 127.079591][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.081598][ C2] ? __pm_runtime_set_status+0x13c/0x970 [ 127.083679][ C2] usb_probe_interface+0x386/0x9b0 [ 127.085639][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 127.087790][ C2] ? kernfs_put+0x3f/0x60 [ 127.089491][ C2] ? sysfs_create_link+0x68/0xc0 [ 127.091394][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 127.093215][ C2] really_probe+0x241/0xa60 [ 127.094692][ C2] __driver_probe_device+0x210/0x460 [ 127.096389][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 127.098288][ C2] driver_probe_device+0x4a/0x140 [ 127.099825][ C2] __device_attach_driver+0x1df/0x320 [ 127.101902][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 127.104309][ C2] bus_for_each_drv+0x159/0x1e0 [ 127.106290][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 127.108410][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.110834][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.113692][ C2] __device_attach+0x1e4/0x4d0 [ 127.115625][ C2] ? __pfx___device_attach+0x10/0x10 [ 127.117330][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 127.118974][ C2] device_initial_probe+0xaf/0xd0 [ 127.120625][ C2] bus_probe_device+0x64/0x160 [ 127.122249][ C2] device_add+0x121d/0x1970 [ 127.123701][ C2] ? __pfx_device_add+0x10/0x10 [ 127.125401][ C2] ? mark_held_locks+0x40/0x70 [ 127.126876][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 127.128816][ C2] usb_set_configuration+0xd97/0x1c60 [ 127.130563][ C2] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 127.132546][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 127.134416][ C2] usb_probe_device+0xef/0x400 [ 127.136145][ C2] ? __pfx_usb_probe_device+0x10/0x10 [ 127.137993][ C2] really_probe+0x241/0xa60 [ 127.139560][ C2] __driver_probe_device+0x210/0x460 [ 127.141192][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 127.143098][ C2] driver_probe_device+0x4a/0x140 [ 127.144878][ C2] __device_attach_driver+0x1df/0x320 [ 127.146950][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 127.149049][ C2] bus_for_each_drv+0x159/0x1e0 [ 127.150677][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 127.152504][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.154239][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.156215][ C2] __device_attach+0x1e4/0x4d0 [ 127.157818][ C2] ? __pfx___device_attach+0x10/0x10 [ 127.159522][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 127.161215][ C2] device_initial_probe+0xaf/0xd0 [ 127.162953][ C2] bus_probe_device+0x64/0x160 [ 127.164575][ C2] device_add+0x121d/0x1970 [ 127.166013][ C2] ? __pfx_device_add+0x10/0x10 [ 127.167734][ C2] ? add_device_randomness+0xc9/0x110 [ 127.169702][ C2] usb_new_device.part.0+0xcc2/0x1686 [ 127.171480][ C2] ? do_raw_spin_lock+0x128/0x260 [ 127.173388][ C2] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 127.176029][ C2] ? mark_held_locks+0x40/0x70 [ 127.178210][ C2] hub_event.cold+0x1e3/0xe90 [ 127.180256][ C2] ? __pfx_hub_event+0x10/0x10 [ 127.182182][ C2] ? __lock_acquire+0x20/0x1ec0 [ 127.183708][ C2] ? lock_acquire+0x1d1/0x380 [ 127.185428][ C2] ? process_one_work+0xa2c/0x1b10 [ 127.187043][ C2] ? process_one_work+0x906/0x1b10 [ 127.188621][ C2] ? process_one_work+0x906/0x1b10 [ 127.190284][ C2] process_one_work+0xac7/0x1b10 [ 127.191820][ C2] ? __pfx_process_one_work+0x10/0x10 [ 127.193479][ C2] ? lock_acquire+0x1d1/0x380 [ 127.194989][ C2] ? __pfx_hub_event+0x10/0x10 [ 127.196448][ C2] worker_thread+0x5ef/0xe50 [ 127.197956][ C2] ? __pfx_worker_thread+0x10/0x10 [ 127.199604][ C2] ? kthread+0x13a/0x450 [ 127.201197][ C2] ? __pfx_worker_thread+0x10/0x10 [ 127.202783][ C2] kthread+0x373/0x450 [ 127.204066][ C2] ? __pfx_kthread+0x10/0x10 [ 127.205741][ C2] ret_from_fork+0x730/0xd60 [ 127.207829][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 127.210207][ C2] ? __switch_to+0x800/0x10f0 [ 127.212201][ C2] ? __pfx_kthread+0x10/0x10 [ 127.213934][ C2] ret_from_fork_asm+0x1a/0x30 [ 127.215668][ C2] [ 128.293771][ C2] Shutting down cpus with NMI [ 128.296141][ C2] Kernel Offset: disabled [ 128.297610][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:22:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000000 RDX=ffff8880573ecb00 RSI=ffffffff81ff2a4e RDI=ffff8880573ecb00 RBP=ffff88806a641900 RSP=ffffc900055378a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100ae7dc13 R13=0000000000000003 R14=ffffed100d4c8321 R15=0000000000000001 RIP=ffffffff81ff2a50 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000d000 CR3=0000000052257000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000008 DR2=0000000000000006 DR3=00000000000071a5 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7864696f6972702e 6f6972705f74656e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce4f48666 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce4f48666 00007ffce4f4866c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7388835607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7388835647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73888357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7388835639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001243fd RBX=ffff88801f2ccb00 RCX=ffffffff8bcf3115 RDX=0000000000000001 RSI=ffffffff8e3eaa9b RDI=ffffffff8c620c80 RBP=ffffed1003e59960 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4a67bd R10=ffff88806a533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bcf16bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4762deb840 CR3=000000002693e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f166e5f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f166e5f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e297af8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 031ffffffee80200 0180030180040780 9003080800078088 031a080007808003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffe508 1694030280020016 920303fc02001690 0300048800168803 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010900312080016 b00300020016ae03 0000000000000000 000000000001ffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100010800401 000010080606016c a000080010e00330 100010d003060800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2003480800180302 0800100328100000 03000410c0030010 0010b0030fffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0410a00302 8008001090031208 0016b00300020016 ae03000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffffffffffff e508169403028002 0016920303fc0200 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afc6c5 RDI=ffffffff9bc60ca0 RBP=ffffffff9bc60c60 RSP=ffffc900006583c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=0000000000000001 R15=ffffc900006586e0 RIP=ffffffff85afc6ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4763be7d58 CR3=0000000035e68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fe00fefc Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ad15bcb280 000055ace34b4040 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ad15bcb280 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ad15b50770 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ad15b4e1e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36a17f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326de66c01483 737326db3c2dc259 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c003736ec661eb5d 7373737629a22832 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737365636f727020 756c6c2520716573 006e6f6974697472 6170006b636f6c62 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d352f35627375 2f302e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ad15b304d8 000055ad15b304d8 0000000000000041 000000000000302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36a17f1bf0 000055ad15b45550 00000000000000e1 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 342c332c322c312c 3061722c4533312c 4433312c4333312c 4233312c4133312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3733312c3633312c 3433312c3333312c 3133312c3033316b 2c35312c332c312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30652d3836313365 4332383570463645 307633303030623a 7475706e693d5341 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000013c7d5 RBX=ffff88801f2c8000 RCX=ffffffff8bcf3115 RDX=0000000000000001 RSI=ffffffff8e3eaa9b RDI=ffffffff8c620c80 RBP=ffffed1003e59000 RSP=ffffc900001a7e00 R8 =0000000000000001 R9 =ffffed100d4e67bd R10=ffff88806a733deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=dffffc0000000000 RIP=ffffffff8bcf16bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa6ac9eb840 CR3=000000005218f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656772656d5f6f 692e7166622e6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf63572f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf63572f6 00007ffcf63572fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6aca35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6aca35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6aca357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6aca35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000