last executing test programs: 1m21.588103886s ago: executing program 1 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async, rerun: 32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c002238b53217f71b7034471c71ee4a0b0a2a6978cb66c0a428ee53c544879a80d327b37a2aea047fccf6292f8d1910fe07c35979d18c504f8682e8f84a4c2f9353ae210b18484a8d497316e7f616b7fe767377377696fd9280066c7d14585a3125dfe6132ae0286e2d0d690eb22f0de84db0ebe66b99b96fbb2278524887a61e35edf6b765448844ba7dfc775ed05c2eef11494e78e14996978651eb67b22bb2134ffb1d4dac6e918ab019d8f8b6f5429073988e2fea42c45163248d634dfec4804ca2044978dc00e916226e322b62b264be64357817d5bb2b27976d937f3c5a987aeb3438de20e2ba824c299cb5c9941b57eae6f5cb55d2bb8f3d8d21f7765f060ff76b642b805dcd1bc0d000e2b41d8f8aa7ef26c3b5d97659f3b6e1e424a4d0763c582ec8a322cc5b103b69a263c0667d783d6479307d2f0827eff45fbcffee8df670bb6d0c76d990d10ff010bea340bfb2af98a20756b52e08ecad5ae4d73277040ccdb38d60ed4b184afb13350b1bdf71fc7b8f8518dc377f84db7979298a41cf202bad38f7f62952ae33ae5de9c3696a42cb7441adb006c102c40b681de9e61e0d656d151ffd5274923c99050092a17a9d27bd22da05f6366ba8404c8e224a896677bf25e43d14076844fa789e4d1e3d0681aac479e94dae3f58b30c70e49cfad961e80e2670bda85f01e9b6d20b6d82b7a62acda6db44465322159d074274c35fb6b7ab86b4b3bfd063749c34c08f9b48062d28c6fe7f89e425a0624daf26d1a9f96ac318717f57b967018d0cd23e2561e098b97407fa13"]) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, 0x0, &(0x7f0000000100)) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) (async) accept4(r4, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0xc0089364, &(0x7f00000001c0)) bind$alg(r5, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffffffffbfffff02000000000000000000"], 0x2a) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x181800) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 1m20.996307009s ago: executing program 1 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8140) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000000)={0x1, "c582a91e7521959501b25f9a563ee60ddd3d0cc3eb51cf00a2df96e73d5eff39", 0x3, 0x7, 0x2, 0x200, 0x0, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x22c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x218, 0x1, [@m_connmark={0x214, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0x8, 0x5}, 0xf800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2d2b, 0xa893, 0x3, 0x4000, 0x7845}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x10001, 0x7, 0x4, 0x7}, 0x6015}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x3, 0x10000000, 0x7, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x77, 0x1, 0x5, 0x1, 0x8}, 0x8e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xd36, 0x1, 0x3, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0x8, 0x6}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x6, 0x9, 0x8}, 0x200}}]}, {0x101, 0x6, "aedd5a81dac7ec8615521eeb5c630bb953561aca3b14f1f2fa60aeca9ec1598668a0aeccc7209e298a9d9a51ed9aa615aba7e54fe10210250830c386ca081ee97be32d9f5def251be3c48a9ae4a19518ac6a6777bf1583e4bcc85f41420335296e877033fa5be2c248ba4905beeaa5263b0a0f67f454b609ea7958f474b15ea2002626dd3b1bcaa8e48c01468e72f21642d2e763c324fbaa3655c1376c65e6ee780eba122643e2bd7d78bd233f9577c5a192281f721656c747417f610f14d66f7db9d6bd2d408f3069b4aebd866ac7046656facdace2407881c62d46a4284ec560bf4ed4b38a29ca7ca6b27ac444d6f396a332abe5c3ac8e5cd87deb2d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x22c}}, 0x0) 1m5.426323392s ago: executing program 1 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8140) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000000)={0x1, "c582a91e7521959501b25f9a563ee60ddd3d0cc3eb51cf00a2df96e73d5eff39", 0x3, 0x7, 0x2, 0x200, 0x0, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x22c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x218, 0x1, [@m_connmark={0x214, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0x8, 0x5}, 0xf800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2d2b, 0xa893, 0x3, 0x4000, 0x7845}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x10001, 0x7, 0x4, 0x7}, 0x6015}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x3, 0x10000000, 0x7, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x77, 0x1, 0x5, 0x1, 0x8}, 0x8e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xd36, 0x1, 0x3, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0x8, 0x6}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x6, 0x9, 0x8}, 0x200}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x22c}}, 0x0) 48.785019454s ago: executing program 1 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8140) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000000)={0x1, "c582a91e7521959501b25f9a563ee60ddd3d0cc3eb51cf00a2df96e73d5eff39", 0x3, 0x7, 0x2, 0x200, 0x0, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x22c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x218, 0x1, [@m_connmark={0x214, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0x8, 0x5}, 0xf800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2d2b, 0xa893, 0x3, 0x4000, 0x7845}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x10001, 0x7, 0x4, 0x7}, 0x6015}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x3, 0x10000000, 0x7, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x77, 0x1, 0x5, 0x1, 0x8}, 0x8e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xd36, 0x1, 0x3, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0x8, 0x6}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x6, 0x9, 0x8}, 0x200}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x22c}}, 0x0) 33.437929324s ago: executing program 1 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8140) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000000)={0x1, "c582a91e7521959501b25f9a563ee60ddd3d0cc3eb51cf00a2df96e73d5eff39", 0x3, 0x7, 0x2, 0x200, 0x0, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x22c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x218, 0x1, [@m_connmark={0x214, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0x8, 0x5}, 0xf800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2d2b, 0xa893, 0x3, 0x4000, 0x7845}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x10001, 0x7, 0x4, 0x7}, 0x6015}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x3, 0x10000000, 0x7, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x77, 0x1, 0x5, 0x1, 0x8}, 0x8e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xd36, 0x1, 0x3, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0x8, 0x6}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x6, 0x9, 0x8}, 0x200}}]}, {0x101, 0x6, "aedd5a81dac7ec8615521eeb5c630bb953561aca3b14f1f2fa60aeca9ec1598668a0aeccc7209e298a9d9a51ed9aa615aba7e54fe10210250830c386ca081ee97be32d9f5def251be3c48a9ae4a19518ac6a6777bf1583e4bcc85f41420335296e877033fa5be2c248ba4905beeaa5263b0a0f67f454b609ea7958f474b15ea2002626dd3b1bcaa8e48c01468e72f21642d2e763c324fbaa3655c1376c65e6ee780eba122643e2bd7d78bd233f9577c5a192281f721656c747417f610f14d66f7db9d6bd2d408f3069b4aebd866ac7046656facdace2407881c62d46a4284ec560bf4ed4b38a29ca7ca6b27ac444d6f396a332abe5c3ac8e5cd87deb2d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x22c}}, 0x0) 12.266343236s ago: executing program 1 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8140) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000000)={0x1, "c582a91e7521959501b25f9a563ee60ddd3d0cc3eb51cf00a2df96e73d5eff39", 0x3, 0x7, 0x2, 0x200, 0x0, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x22c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x218, 0x1, [@m_connmark={0x214, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0x8, 0x5}, 0xf800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2d2b, 0xa893, 0x3, 0x4000, 0x7845}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x10001, 0x7, 0x4, 0x7}, 0x6015}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x3, 0x10000000, 0x7, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x77, 0x1, 0x5, 0x1, 0x8}, 0x8e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xd36, 0x1, 0x3, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0x8, 0x6}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x6, 0x9, 0x8}, 0x200}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x22c}}, 0x0) 10.458124352s ago: executing program 0 (id=394): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x0, 0x3, 0x0, 0x2, 0x6, 0x10, 0x301, 0x38, 0xffffffff, 0xf, 0x0, 0x20, 0x3f, 0x4, 0x0, 0x4}}, 0x58) (async) close(r0) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000080)='!&$,*\x00', &(0x7f00000000c0)='}\x00', &(0x7f0000000100)='\x12!*/(}@r\\-*[://\x00', &(0x7f0000000180)='/\\\x00', &(0x7f00000001c0)='.()+\x00']}, &(0x7f00000003c0)={[&(0x7f0000000240)='&)(!##\x00', &(0x7f00000002c0)=':\x1a&%\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='$&^f^\x00', &(0x7f0000000380)='{.!/{\x00']}, 0x100) 10.249491763s ago: executing program 0 (id=396): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="feff2c00701004000000050000000600010005000000080009000200000008000b000000000008000c"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 10.243524783s ago: executing program 0 (id=397): socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) r0 = fanotify_init(0x0, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fanotify_mark(r0, 0x1, 0x40000020, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'pids'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'rdma'}, {0x2d, 'freezer'}]}, 0x30) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {}, 0x20000, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3fffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x8569, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8878, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1000, 0xffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1ffffe], [0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6f7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x744]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) tee(0xffffffffffffffff, r0, 0xc3d, 0x4) 10.079890617s ago: executing program 0 (id=398): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'wlan0\x00', {0x2, 0x0, @loopback=0x7f000000}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2006c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 8.368712404s ago: executing program 0 (id=410): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r3 = gettid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) timer_delete(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000001608000340000000000800024000000000080008400020000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r3) tkill(r3, 0x13) 6.390543512s ago: executing program 2 (id=423): r0 = socket$netlink(0x10, 0x3, 0x14) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@empty, 0x72, r2}) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 6.093512857s ago: executing program 2 (id=425): socket$packet(0x11, 0x2, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000000140)='./file0\x00', 0x8) socket$inet6(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) pipe(&(0x7f00000045c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYRES8=r0], 0x3c}}, 0x10) 5.807397992s ago: executing program 3 (id=428): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0xffffffff, 0x7000000, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) 5.749537376s ago: executing program 3 (id=429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "87e89f75b5099e3d2336e04775114317691f90e83631168e23222644717f19c0f56271969e392148cde845cf3ed2813d2e826ed2773e87d74277551ef617485a81e72ca20c4ed6ade4672c844d3200ad5ebffb626f97af26231ba5a3df2db0dc67be4c72a92feebaaf7020672976e47fe768635c8dad9110f1921b5f075eb6cf732f6f423b1eeb75"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2}, 0x400c841) getpeername$netlink(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r3, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8072fa089dc5c947f144947d8c42c3d9"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4000) clock_gettime(0x0, &(0x7f00000049c0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004840)=[{{&(0x7f0000000480)=@can, 0x80, &(0x7f0000001880)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f00000005c0)=""/44, 0x2c}, {&(0x7f0000000600)=""/55, 0x37}, {&(0x7f0000000640)=""/226, 0xe2}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/215, 0xd7}, {&(0x7f0000001840)=""/23, 0x17}], 0x7, &(0x7f0000001900)=""/241, 0xf1}, 0xcc}, {{&(0x7f0000001a00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001a80)=""/195, 0xc3}, {&(0x7f0000001b80)=""/44, 0x2c}, {&(0x7f0000001bc0)=""/77, 0x4d}, {&(0x7f0000001c40)=""/32, 0x20}, {&(0x7f0000001c80)=""/162, 0xa2}, {&(0x7f0000001d40)=""/100, 0x64}, {&(0x7f0000001dc0)=""/229, 0xe5}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x8}, 0x5ef8}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000002f40)=""/226, 0xe2}, {&(0x7f0000003040)=""/147, 0x93}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x3}, 0xffffffff}, {{&(0x7f0000004140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000004300)=[{&(0x7f00000041c0)}, {&(0x7f0000004200)=""/196, 0xc4}], 0x2}, 0xf}, {{&(0x7f0000004340)=@nfc, 0x80, &(0x7f0000004500)=[{&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/156, 0x9c}], 0x2}, 0x1}, {{&(0x7f0000004540)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000047c0)=[{&(0x7f00000045c0)=""/115, 0x73}, {&(0x7f0000004640)=""/209, 0xd1}, {&(0x7f0000004740)=""/88, 0x58}], 0x3, &(0x7f0000004800)=""/36, 0x24}}], 0x6, 0x40000000, &(0x7f0000004a00)={r4, r5+10000000}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004a80), r1) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000004b40)={&(0x7f0000004a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004b00)={&(0x7f0000004ac0)={0x24, r8, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004bc0), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000004c80)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004c00)={0x18, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4080) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004d00), r2) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000004e40)={&(0x7f0000004cc0), 0xc, &(0x7f0000004e00)={&(0x7f0000004d40)={0x88, r10, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x267b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x128c}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8e}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004e80), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000004f80)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004f00)={0x1c, r11, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000001) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000005000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r12, &(0x7f00000050c0)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x30, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xffff, 0x39}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000051c0)={&(0x7f0000005140)={0x74, 0x453, 0x504, 0x70bd25, 0x25dfdbfd, "b8088ffec03381b7de2f52b4cab367d039ea1e4d81772c133fcca45e5e444f4ff2bbfce8b8f9d862ebcba52a9fc7901fcd2b191b39d8a4f433ce5886773a5715b01aa448013dd04a00167a4cd89ceac043569240e437ee6c2b6649530d7c1c47d17f", [""]}, 0x74}, 0x1, 0x0, 0x0, 0x28000040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005240)={'wlan1\x00'}) syz_open_dev$media(&(0x7f0000005280), 0x4, 0x480) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000052c0)={'wlan0\x00'}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r14, &(0x7f00000053c0)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005380)={&(0x7f0000005340)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.615670379s ago: executing program 3 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) shutdown(0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xef, &(0x7f0000000000)=""/239, 0x40f00, 0x40}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) syz_emit_ethernet(0x37, &(0x7f0000000640)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x29, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}, {']'}}}}}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x1, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000004080101a1000000000000050003000000000000"], 0x24}}, 0x0) 5.584418064s ago: executing program 3 (id=431): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400}, 0x80) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000100f0ff030000000000001800d300000c000000ff7f00009396f90021950000000075abd372234f4ac6f22654a187f39d84a8eb5fea5a7f51bc28a527a08723372bb194dd362d88f78cb42120d150dc2f840faab9"], 0x2c}}, 0x20000000) 5.26922901s ago: executing program 3 (id=432): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002c007010043f0000050000000600010005000000080009000200000008000b000000000008000c"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 5.268865471s ago: executing program 0 (id=433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0\x00') r5 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast1}, 0x4, 0x4, 0x3, 0x100}}, 0x2e) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80800, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563", @ANYRES64=r7, @ANYRESDEC=r6, @ANYRESDEC=r7], 0xffdd) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r5) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1000, 0x0) rename(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000480)='./bus\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r3, 0x0, 0xd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3900860000004d720000000000000000000000000000000000060000000000006f07c6e2a2257b21b8177b6dbc9e1d160fb3b96dff12d5ac0248d524a682c1ae6437d5ab5e8246475012c294d433423f6a6c6e414ed0fbcc60c7217e0a233b370c3d29f0510754352fd5485fcc38212dc0ff23990a93e8a92a9a5ed2da11dc875506788493eee8ac90ba0b9843077d0b7e51baccd02b0886dc6243d16d89f39985b8d11e3235727bdfec2e6df5cdb0644176125f9fbbf41b17db91f3eaad5a11f36052c2afa9858cb533825f0cea49354008ab9fdcf48a6fd968782b748b2ce6d6522c13612daf0ecb09f92e4910ff458c98578ee34ebf2bdef5e9c30d60aa6315", @ANYRES32=0x0, @ANYBLOB="00000000460000001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB="65e11cafefd15a096c035974a26b4635f8545801e2c87221575a63b5f2c555b1261ee14ea1704b432c66973d24a1ba0e32b373a7dd8f5a8bfdae6ff0dc368775bffa701fffc574aede2c20835ec1faa1d070e03f6158e6165655d3db74f6a5bea75ec19985b8979f98ed136b99e9f80d1b1f49cc2137623a2e6195e2195a60489c7cddda25c6bb8d2f0a779e6cf24467045d6b381309be1787fcc8ab836394b2a2c414842fb848429b5e090e66440cf0808f6a03fc50af443bfb"], 0x38}, 0x1, 0xba01}, 0x0) close_range(r1, r1, 0x0) 276.349428ms ago: executing program 3 (id=434): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000000) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3, 0x4}, {0x9}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 276.058321ms ago: executing program 2 (id=435): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00000004000004040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) bind$ax25(r0, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) 161.307001ms ago: executing program 2 (id=436): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x20000000) 67.388327ms ago: executing program 2 (id=437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0xffffffff, 0xff7f0000, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) 0s ago: executing program 2 (id=438): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) kernel console output (not intermixed with test programs): adding VLAN 0 to HW filter on device team0 [ 122.476685][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.480340][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.486883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.495434][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.572337][ T5962] veth0_vlan: entered promiscuous mode [ 122.597325][ T5959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.611920][ T5959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.680750][ T5962] veth1_vlan: entered promiscuous mode [ 122.707913][ T5962] veth0_macvtap: entered promiscuous mode [ 122.736313][ T5962] veth1_macvtap: entered promiscuous mode [ 122.754678][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.805676][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.826462][ T5962] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.836422][ T5962] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.840397][ T5962] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.845865][ T5962] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.933189][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.955822][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.015419][ T5969] veth0_vlan: entered promiscuous mode [ 123.080236][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.095445][ T5960] Bluetooth: hci0: command tx timeout [ 123.103607][ T5965] Bluetooth: hci1: command tx timeout [ 123.111636][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.134477][ T5969] veth1_vlan: entered promiscuous mode [ 123.171018][ T5965] Bluetooth: hci2: command tx timeout [ 123.210506][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.225388][ T5966] veth0_vlan: entered promiscuous mode [ 123.235344][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.254756][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.263941][ T5965] Bluetooth: hci3: command tx timeout [ 123.309456][ T5966] veth1_vlan: entered promiscuous mode [ 123.329956][ T5969] veth0_macvtap: entered promiscuous mode [ 123.330721][ T40] audit: type=1400 audit(1752330787.579:90): avc: denied { mount } for pid=5962 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.348153][ T40] audit: type=1400 audit(1752330787.589:91): avc: denied { mounton } for pid=5962 comm="syz-executor" path="/syzkaller.a3Ed3v/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.357274][ T40] audit: type=1400 audit(1752330787.589:92): avc: denied { mount } for pid=5962 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 123.359398][ T5969] veth1_macvtap: entered promiscuous mode [ 123.367936][ T40] audit: type=1400 audit(1752330787.589:93): avc: denied { mounton } for pid=5962 comm="syz-executor" path="/syzkaller.a3Ed3v/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 123.368004][ T40] audit: type=1400 audit(1752330787.589:94): avc: denied { mounton } for pid=5962 comm="syz-executor" path="/syzkaller.a3Ed3v/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 123.368045][ T40] audit: type=1400 audit(1752330787.599:95): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 123.387163][ T40] audit: type=1400 audit(1752330787.649:96): avc: denied { mounton } for pid=5962 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 123.437031][ T5959] veth0_vlan: entered promiscuous mode [ 123.444159][ T40] audit: type=1400 audit(1752330787.649:97): avc: denied { mount } for pid=5962 comm="syz-executor" name="/" dev="gadgetfs" ino=7878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 123.444206][ T40] audit: type=1400 audit(1752330787.649:98): avc: denied { mount } for pid=5962 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 123.522295][ T5959] veth1_vlan: entered promiscuous mode [ 123.522380][ T5962] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 123.538514][ T5966] veth0_macvtap: entered promiscuous mode [ 123.581497][ T5966] veth1_macvtap: entered promiscuous mode [ 123.621134][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.656123][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.684263][ T5959] veth0_macvtap: entered promiscuous mode [ 123.690159][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.700948][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.736907][ T5969] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.748042][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 123.755240][ T5969] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.763733][ T5969] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.772508][ T5969] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.794623][ T5959] veth1_macvtap: entered promiscuous mode [ 123.908217][ T5966] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.915242][ T5966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.925649][ T5966] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.933327][ T5966] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.977561][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.984956][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.989902][ T5959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.006716][ T5959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.012819][ T5959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.021164][ T5959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.160864][ T841] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 124.335269][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.339128][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.370758][ T841] usb 7-1: Using ep0 maxpacket: 32 [ 124.433332][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.437335][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.446545][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.446966][ T841] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 124.449730][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.453177][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.468352][ T841] usb 7-1: config 0 descriptor?? [ 124.524167][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.527435][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.614925][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.621408][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.659245][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.708314][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.745999][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.773402][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.931948][ T6060] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 124.998027][ T6062] No control pipe specified [ 125.008502][ T841] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 125.116999][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 125.122873][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 125.129367][ T6062] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 125.137469][ T6062] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4'. [ 125.245014][ T837] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 125.325107][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 125.428506][ T837] usb 6-1: Using ep0 maxpacket: 8 [ 125.457847][ T837] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 125.472970][ T837] usb 6-1: config 179 has no interface number 0 [ 125.487006][ T837] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 125.526822][ T837] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 125.527926][ T6068] nbd3: detected capacity change from 0 to 63 [ 125.536300][ T837] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.557314][ T837] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 125.558372][ T5965] block nbd3: Receive control failed (result -104) [ 125.573355][ T837] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 125.573402][ T837] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 125.573424][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.613288][ T6056] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 125.851517][ T6073] ======================================================= [ 125.851517][ T6073] WARNING: The mand mount option has been deprecated and [ 125.851517][ T6073] and is ignored by this kernel. Remove the mand [ 125.851517][ T6073] option from the mount to silence this warning. [ 125.851517][ T6073] ======================================================= [ 125.891430][ T6073] overlay: ./bus is not a directory [ 125.950486][ T837] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input5 [ 125.985065][ T6034] usb 7-1: USB disconnect, device number 2 [ 126.026841][ T6078] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.337279][ T6084] tmpfs: Unknown parameter 'nr_inodes'' [ 127.295153][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 127.295169][ T40] audit: type=1400 audit(1752330791.559:159): avc: denied { append } for pid=6097 comm="syz.3.14" name="cec3" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.517692][ T40] audit: type=1400 audit(1752330791.789:160): avc: denied { create } for pid=6101 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.551007][ T40] audit: type=1400 audit(1752330791.809:161): avc: denied { setopt } for pid=6101 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.593487][ T40] audit: type=1400 audit(1752330791.809:162): avc: denied { listen } for pid=6101 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.607131][ T40] audit: type=1400 audit(1752330791.809:163): avc: denied { write } for pid=6101 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.627350][ T40] audit: type=1400 audit(1752330791.809:164): avc: denied { accept } for pid=6101 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.845274][ T40] audit: type=1400 audit(1752330792.109:165): avc: denied { setattr } for pid=6107 comm="syz.3.18" name="CAN_RAW" dev="sockfs" ino=8928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.923237][ T6114] Zero length message leads to an empty skb [ 127.940000][ T40] audit: type=1400 audit(1752330792.149:166): avc: denied { read write } for pid=6107 comm="syz.3.18" name="vbi5" dev="devtmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 127.942502][ T6116] program syz.2.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.953921][ T40] audit: type=1400 audit(1752330792.149:167): avc: denied { open } for pid=6107 comm="syz.3.18" path="/dev/vbi5" dev="devtmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 127.953965][ T40] audit: type=1400 audit(1752330792.149:168): avc: denied { ioctl } for pid=6107 comm="syz.3.18" path="/dev/vbi5" dev="devtmpfs" ino=1004 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 128.112737][ T10] usb 6-1: USB disconnect, device number 2 [ 128.115517][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 128.127972][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 128.639988][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24'. [ 128.753331][ T6135] nbd0: detected capacity change from 0 to 63 [ 128.765209][ T6065] block nbd0: Send control failed (result -32) [ 128.779470][ T5965] block nbd0: Receive control failed (result -32) [ 128.809951][ T6065] block nbd0: Request send failed, requeueing [ 128.853972][ T122] block nbd0: Dead connection, failed to find a fallback [ 128.858988][ T122] block nbd0: shutting down sockets [ 128.868285][ T6148] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.877887][ T122] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.877989][ T122] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.878194][ T6065] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.878232][ T6065] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.878462][ T6065] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.878483][ T6065] Buffer I/O error on dev nbd0, logical block 2, async page read [ 128.878581][ T6065] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.878600][ T6065] Buffer I/O error on dev nbd0, logical block 3, async page read [ 128.878706][ T6065] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.878726][ T6065] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.878820][ T6065] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.878838][ T6065] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.878966][ T6065] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.878986][ T6065] Buffer I/O error on dev nbd0, logical block 2, async page read [ 128.879078][ T6065] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.879096][ T6065] Buffer I/O error on dev nbd0, logical block 3, async page read [ 128.880520][ T6065] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.880544][ T6065] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.881963][ T6065] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.882031][ T6065] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.884652][ T6065] ldm_validate_partition_table(): Disk read failed. [ 128.941428][ T6144] netlink: 244 bytes leftover after parsing attributes in process `syz.2.28'. [ 128.951235][ T6065] Dev nbd0: unable to read RDB block 0 [ 129.014460][ T6144] unsupported nlmsg_type 40 [ 129.021505][ T6065] nbd0: unable to read partition table [ 129.166982][ T6065] ldm_validate_partition_table(): Disk read failed. [ 129.173511][ T6065] Dev nbd0: unable to read RDB block 0 [ 129.183998][ T6065] nbd0: unable to read partition table [ 129.275528][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 129.280601][ T6156] netlink: 48 bytes leftover after parsing attributes in process `syz.0.30'. [ 129.707157][ T156] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 129.874553][ T156] usb 7-1: Using ep0 maxpacket: 16 [ 129.879529][ T156] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.883965][ T156] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.887454][ T156] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.904508][ T156] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.909590][ T156] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.923965][ T156] usb 7-1: config 0 descriptor?? [ 129.941340][ T6173] binder: 6172:6173 ioctl 40086602 200000000000 returned -22 [ 130.116058][ T6177] random: crng reseeded on system resumption [ 130.307659][ T6181] ISOFS: Unable to identify CD-ROM format. [ 130.359975][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.387106][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.436797][ T156] HID 045e:07da: Invalid code 65791 type 1 [ 130.439407][ T6186] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.483928][ T156] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0003/input/input6 [ 130.599651][ T156] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 130.641025][ T6177] Restarting kernel threads ... [ 130.657450][ T6177] Done restarting kernel threads. [ 130.694899][ T29] usb 7-1: USB disconnect, device number 3 [ 130.818824][ T6195] fido_id[6195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 130.873093][ T6198] i2c i2c-1: Invalid block write size 34 [ 130.947244][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 130.982812][ T6209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.995927][ T6210] overlay: Unknown parameter 'smackfsfloor' [ 131.261612][ T6226] netlink: 'syz.3.52': attribute type 21 has an invalid length. [ 131.279954][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 131.530743][ T6035] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 131.615431][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.58'. [ 131.716236][ T6035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.721300][ T6035] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.744178][ T6035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.770172][ T6035] usb 6-1: config 0 descriptor?? [ 131.959954][ T6251] ldm_validate_partition_table(): Disk read failed. [ 131.975585][ T6251] Dev nbd0: unable to read RDB block 0 [ 131.994001][ T6251] nbd0: unable to read partition table [ 131.997934][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 132.024086][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=30, location=30 [ 132.024174][ T6035] usbhid 6-1:0.0: can't add hid device: -71 [ 132.050275][ T6035] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 132.051433][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=29, location=29 [ 132.055978][ T6035] usb 6-1: USB disconnect, device number 3 [ 132.057399][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=28, location=28 [ 132.095896][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 132.146983][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 132.151477][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=14, location=14 [ 132.155961][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=13, location=13 [ 132.180893][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=12, location=12 [ 132.199730][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 132.218051][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 132.254755][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=6, location=6 [ 132.279340][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=5, location=5 [ 132.286398][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=4, location=4 [ 132.306782][ T6251] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 132.311831][ T6251] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 132.533036][ T6035] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 132.599168][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'. [ 132.715625][ T6035] usb 6-1: Using ep0 maxpacket: 32 [ 132.723204][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 132.723221][ T40] audit: type=1400 audit(1752330796.979:229): avc: denied { write } for pid=6265 comm="syz.0.64" name="mcfilter6" dev="proc" ino=4026533416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 132.740404][ T6035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.774469][ T6035] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 132.820732][ T6035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.831459][ T6035] usb 6-1: config 0 descriptor?? [ 132.855205][ T6035] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 132.931048][ T6035] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 132.965780][ T5361] udevd[5361]: worker [6017] terminated by signal 33 (Unknown signal 33) [ 132.971459][ T5361] udevd[5361]: worker [6017] failed while handling '/devices/virtual/block/loop3' [ 133.076205][ T34] usb 6-1: USB disconnect, device number 4 [ 133.105154][ T5361] udevd[5361]: worker [6196] terminated by signal 33 (Unknown signal 33) [ 133.108746][ T34] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 133.138932][ T5361] udevd[5361]: worker [6196] failed while handling '/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/usbmisc/ldusb0' [ 133.166591][ T40] audit: type=1400 audit(1752330797.429:230): avc: denied { mount } for pid=6276 comm="syz.0.67" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 133.201009][ T40] audit: type=1400 audit(1752330797.439:231): avc: denied { search } for pid=6276 comm="syz.0.67" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.234584][ T40] audit: type=1400 audit(1752330797.439:232): avc: denied { search } for pid=6276 comm="syz.0.67" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.282175][ T40] audit: type=1400 audit(1752330797.439:233): avc: denied { search } for pid=6276 comm="syz.0.67" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.298842][ T6285] loop6: detected capacity change from 0 to 524287999 [ 133.308492][ T40] audit: type=1400 audit(1752330797.439:234): avc: denied { add_name } for pid=6276 comm="syz.0.67" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.377326][ T40] audit: type=1400 audit(1752330797.439:235): avc: denied { create } for pid=6276 comm="syz.0.67" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 133.388364][ T6081] udevd[6081]: failed to send result of seq 13828 to main daemon: Connection refused [ 133.447321][ T40] audit: type=1400 audit(1752330797.439:236): avc: denied { read append } for pid=6276 comm="syz.0.67" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 133.470702][ T40] audit: type=1400 audit(1752330797.439:237): avc: denied { open } for pid=6276 comm="syz.0.67" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 133.484461][ T40] audit: type=1400 audit(1752330797.559:238): avc: denied { ioctl } for pid=6282 comm="syz.1.68" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7058 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.852763][ T6300] capability: warning: `syz.2.74' uses 32-bit capabilities (legacy support in use) [ 134.203944][ T6305] warning: `syz.0.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.272120][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 134.276272][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 134.284347][ T6307] netlink: 'syz.0.76': attribute type 13 has an invalid length. [ 134.716543][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 134.754531][ T6324] ipip0: entered promiscuous mode [ 135.063434][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 135.067811][ T6333] chnl_net:caif_netlink_parms(): no params data found [ 135.138605][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 135.586740][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.855567][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.870295][ T6342] lo speed is unknown, defaulting to 1000 [ 135.876361][ T6342] lo speed is unknown, defaulting to 1000 [ 135.884931][ T6342] lo speed is unknown, defaulting to 1000 [ 135.983825][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.998874][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.004697][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.026703][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.043930][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.144490][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.362410][ T6342] infiniband syz0: set active [ 136.365840][ T6342] infiniband syz0: added lo [ 136.494341][ T6342] RDS/IB: syz0: added [ 136.497878][ T6342] smc: adding ib device syz0 with port count 1 [ 136.513520][ T6342] smc: ib device syz0 port 1 has pnetid [ 136.528012][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.571239][ T6026] lo speed is unknown, defaulting to 1000 [ 136.574108][ T29] lo speed is unknown, defaulting to 1000 [ 136.577556][ T6342] lo speed is unknown, defaulting to 1000 [ 136.846922][ T6365] block nbd3: NBD_DISCONNECT [ 136.849111][ T6365] block nbd3: Send disconnect failed -32 [ 136.867130][ T6365] block nbd3: shutting down sockets [ 136.925003][ C0] blk_print_req_error: 211 callbacks suppressed [ 136.925023][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.935051][ C0] buffer_io_error: 202 callbacks suppressed [ 136.935064][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 136.942384][ C2] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.967197][ C2] Buffer I/O error on dev nbd3, logical block 1, async page read [ 136.980959][ C2] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.986543][ C2] Buffer I/O error on dev nbd3, logical block 2, async page read [ 136.991393][ C2] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.996010][ C2] Buffer I/O error on dev nbd3, logical block 3, async page read [ 137.000030][ T6004] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.009697][ T6004] Buffer I/O error on dev nbd3, logical block 0, async page read [ 137.015806][ T6004] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.019476][ T6004] Buffer I/O error on dev nbd3, logical block 1, async page read [ 137.021903][ T6342] lo speed is unknown, defaulting to 1000 [ 137.025610][ T6004] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.025720][ T6004] Buffer I/O error on dev nbd3, logical block 2, async page read [ 137.025890][ T6004] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.025908][ T6004] Buffer I/O error on dev nbd3, logical block 3, async page read [ 137.026112][ T6004] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.026131][ T6004] Buffer I/O error on dev nbd3, logical block 0, async page read [ 137.026413][ T6004] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.026429][ T6004] Buffer I/O error on dev nbd3, logical block 1, async page read [ 137.035739][ T46] bridge_slave_1: left allmulticast mode [ 137.035786][ T46] bridge_slave_1: left promiscuous mode [ 137.036701][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.045707][ T6004] ldm_validate_partition_table(): Disk read failed. [ 137.111584][ T6004] Dev nbd3: unable to read RDB block 0 [ 137.126943][ T6004] nbd3: unable to read partition table [ 137.160308][ T46] bridge_slave_0: left allmulticast mode [ 137.163779][ T6004] ldm_validate_partition_table(): Disk read failed. [ 137.164621][ T46] bridge_slave_0: left promiscuous mode [ 137.178403][ T6004] Dev nbd3: unable to read RDB block 0 [ 137.204325][ T6004] nbd3: unable to read partition table [ 137.231412][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.245382][ T6004] udevd[6004]: failed to send result of seq 13627 to main daemon: Transport endpoint is not connected [ 137.822030][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 137.822046][ T40] audit: type=1400 audit(1752330802.079:268): avc: denied { unlink } for pid=6381 comm="syz.3.100" name="#1" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.863107][ T40] audit: type=1400 audit(1752330802.119:269): avc: denied { mount } for pid=6381 comm="syz.3.100" name="/" dev="overlay" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.210824][ T5960] Bluetooth: hci2: command tx timeout [ 138.269277][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.277109][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.290305][ T46] bond0 (unregistering): Released all slaves [ 138.393939][ T6342] lo speed is unknown, defaulting to 1000 [ 138.410363][ T6350] chnl_net:caif_netlink_parms(): no params data found [ 138.986975][ T6342] lo speed is unknown, defaulting to 1000 [ 139.007110][ T6396] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 139.009602][ T40] audit: type=1400 audit(1752330803.279:270): avc: denied { getattr } for pid=6387 comm="syz.2.102" name="/" dev="9p" ino=35913920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 139.118660][ T6389] evm: overlay not supported [ 139.125719][ T40] audit: type=1400 audit(1752330803.349:271): avc: denied { read write } for pid=6387 comm="syz.2.102" name="file1" dev="overlay" ino=35913939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.162045][ T40] audit: type=1400 audit(1752330803.369:272): avc: denied { open } for pid=6387 comm="syz.2.102" path="/25/bus/file1" dev="overlay" ino=35913939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.184883][ T40] audit: type=1400 audit(1752330803.379:273): avc: denied { setattr } for pid=6387 comm="syz.2.102" name="#159" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.197913][ T40] audit: type=1400 audit(1752330803.379:274): avc: denied { link } for pid=6387 comm="syz.2.102" name="#159" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.286608][ T6342] lo speed is unknown, defaulting to 1000 [ 139.426521][ T6405] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 139.447634][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.488233][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.510086][ T6350] bridge_slave_0: entered allmulticast mode [ 139.542191][ T6350] bridge_slave_0: entered promiscuous mode [ 139.591099][ T6342] lo speed is unknown, defaulting to 1000 [ 139.591239][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.600869][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.608140][ T6350] bridge_slave_1: entered allmulticast mode [ 139.634886][ T40] audit: type=1400 audit(1752330803.899:275): avc: denied { unlink } for pid=5962 comm="syz-executor" name="file1" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.678644][ T6350] bridge_slave_1: entered promiscuous mode [ 139.744500][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 139.794054][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 139.818159][ T6415] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.822299][ T6415] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.825989][ T6415] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.829625][ T6415] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.836521][ T6415] vxlan0: entered promiscuous mode [ 139.948717][ T6350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.996634][ T6350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.006642][ T40] audit: type=1400 audit(1752330804.259:276): avc: denied { setopt } for pid=6416 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.303880][ T5960] Bluetooth: hci2: command tx timeout [ 140.312877][ T46] hsr_slave_0: left promiscuous mode [ 140.316998][ T46] hsr_slave_1: left promiscuous mode [ 140.324029][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.341543][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.383514][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.386741][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.454420][ T46] veth1_macvtap: left promiscuous mode [ 140.457673][ T46] veth0_macvtap: left promiscuous mode [ 140.463942][ T46] veth1_vlan: left promiscuous mode [ 140.468178][ T46] veth0_vlan: left promiscuous mode [ 140.625592][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 140.769641][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 141.267384][ T40] audit: type=1400 audit(1752330805.519:277): avc: denied { bind } for pid=6438 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.716313][ T6026] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 141.885912][ T6026] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 141.889516][ T6026] usb 8-1: can't read configurations, error -61 [ 142.044610][ T6026] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 142.286137][ T6026] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 142.301890][ T6026] usb 8-1: can't read configurations, error -61 [ 142.323543][ T6026] usb usb8-port1: attempt power cycle [ 142.371025][ T5960] Bluetooth: hci2: command tx timeout [ 142.694148][ T6026] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 142.745141][ T6026] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 142.748880][ T6026] usb 8-1: can't read configurations, error -61 [ 142.903203][ T6026] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 142.941327][ T6026] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 142.946332][ T6026] usb 8-1: can't read configurations, error -61 [ 142.954642][ T6026] usb usb8-port1: unable to enumerate USB device [ 143.206386][ T46] team0 (unregistering): Port device team_slave_1 removed [ 143.374713][ T46] team0 (unregistering): Port device team_slave_0 removed [ 144.461252][ T5960] Bluetooth: hci2: command tx timeout [ 144.545481][ T40] audit: type=1400 audit(1752330808.809:278): avc: denied { create } for pid=6445 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.560700][ T40] audit: type=1400 audit(1752330808.819:279): avc: denied { create } for pid=6445 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.587665][ T40] audit: type=1400 audit(1752330808.819:280): avc: denied { write } for pid=6445 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.616214][ T40] audit: type=1400 audit(1752330808.879:281): avc: denied { bind } for pid=6445 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.527398][ T6350] team0: Port device team_slave_0 added [ 145.670550][ T6350] team0: Port device team_slave_1 added [ 145.878581][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.885812][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.965859][ T6350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.054127][ T40] audit: type=1400 audit(1752330810.319:282): avc: denied { mount } for pid=6457 comm="syz.0.123" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 146.076561][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.080492][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.105484][ T6350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.315812][ T6350] hsr_slave_0: entered promiscuous mode [ 146.322220][ T6350] hsr_slave_1: entered promiscuous mode [ 146.338990][ T6350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.345882][ T6462] Bluetooth: hci4: Frame reassembly failed (-84) [ 146.346279][ T75] Bluetooth: hci4: Frame reassembly failed (-84) [ 146.357569][ T6350] Cannot create hsr debugfs directory [ 146.645025][ T6464] futex_wake_op: syz.2.125 tries to shift op by 32; fix this program [ 146.653920][ T6464] netlink: 'syz.2.125': attribute type 64 has an invalid length. [ 146.665774][ T6464] netlink: 'syz.2.125': attribute type 4 has an invalid length. [ 146.690494][ T6464] netlink: 152 bytes leftover after parsing attributes in process `syz.2.125'. [ 146.841451][ T6464] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.847461][ T6464] binder: BINDER_SET_CONTEXT_MGR already set [ 146.855632][ T6464] binder: 6463:6464 ioctl 4018620d 200000000040 returned -16 [ 147.096014][ T40] audit: type=1400 audit(1752330811.349:283): avc: denied { bind } for pid=6468 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.169316][ T40] audit: type=1400 audit(1752330811.349:284): avc: denied { name_bind } for pid=6468 comm="syz.2.126" src=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 147.239227][ T40] audit: type=1400 audit(1752330811.349:285): avc: denied { node_bind } for pid=6468 comm="syz.2.126" src=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 147.296547][ T40] audit: type=1400 audit(1752330811.559:286): avc: denied { bind } for pid=6472 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.311917][ T40] audit: type=1400 audit(1752330811.559:287): avc: denied { write } for pid=6472 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.343479][ T6473] mkiss: ax0: crc mode is auto. [ 147.409310][ T1145] Bluetooth: hci5: Frame reassembly failed (-84) [ 147.581638][ T6350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.599012][ T6350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.609677][ T6350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.626430][ T6350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.802895][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.832101][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.863593][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.866934][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.875144][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.878892][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.954653][ T6350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.973743][ T6350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.334545][ T6350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.371067][ T64] Bluetooth: hci4: command 0xfc11 tx timeout [ 148.371452][ T5960] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 148.458624][ T6350] veth0_vlan: entered promiscuous mode [ 148.492776][ T6350] veth1_vlan: entered promiscuous mode [ 148.544479][ T6350] veth0_macvtap: entered promiscuous mode [ 148.553905][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 148.567019][ T6350] veth1_macvtap: entered promiscuous mode [ 148.659615][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.730126][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.803399][ T6350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.804288][ T6495] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 148.824295][ T6350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.824361][ T6350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.824387][ T6350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.113557][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.153689][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.164715][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.188761][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.223243][ T6503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.132'. [ 149.265512][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.284747][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.325712][ T6509] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 149.410911][ T5960] Bluetooth: hci5: command 0x1003 tx timeout [ 149.421297][ T5965] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 149.691192][ T6519] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 149.698513][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 149.698529][ T40] audit: type=1400 audit(1752330813.959:298): avc: denied { read write } for pid=6520 comm="syz.3.138" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.730363][ T40] audit: type=1400 audit(1752330813.969:299): avc: denied { open } for pid=6520 comm="syz.3.138" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.757547][ T40] audit: type=1400 audit(1752330813.969:300): avc: denied { ioctl } for pid=6520 comm="syz.3.138" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.766567][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.777224][ T40] audit: type=1400 audit(1752330813.989:301): avc: denied { read } for pid=6515 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.929449][ T6519] vlan2: entered allmulticast mode [ 149.946009][ T6519] bond1: entered allmulticast mode [ 149.960836][ T841] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 150.111637][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 150.124605][ T841] usb 8-1: Using ep0 maxpacket: 32 [ 150.130033][ T841] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 150.139660][ T841] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8425, setting to 1024 [ 150.155309][ T841] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.185588][ T841] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 150.204409][ T841] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 150.214500][ T841] usb 8-1: Product: syz [ 150.222687][ T841] usb 8-1: Manufacturer: syz [ 150.233531][ T841] usb 8-1: SerialNumber: syz [ 150.242953][ T40] audit: type=1400 audit(1752330814.499:302): avc: denied { mounton } for pid=6535 comm="syz.2.142" path="/36/file0" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.265747][ T841] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input7 [ 150.315789][ T40] audit: type=1400 audit(1752330814.579:303): avc: denied { create } for pid=6537 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 150.333016][ T40] audit: type=1400 audit(1752330814.589:304): avc: denied { setopt } for pid=6537 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 150.376656][ T40] audit: type=1400 audit(1752330814.639:305): avc: denied { write } for pid=6537 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 150.469949][ T40] audit: type=1400 audit(1752330814.729:306): avc: denied { shutdown } for pid=6535 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.600801][ T40] audit: type=1400 audit(1752330814.809:307): avc: denied { connect } for pid=6535 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.757810][ T6548] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 151.334473][ T1146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.583260][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 151.662471][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.740455][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.779056][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.801721][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.806038][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.871150][ T6565] lo speed is unknown, defaulting to 1000 [ 151.945591][ T6574] gfs2: not a GFS2 filesystem [ 152.220989][ T6565] chnl_net:caif_netlink_parms(): no params data found [ 152.448408][ T1146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.650032][ T6589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=6589 comm=syz.0.156 [ 152.658632][ T1146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.798401][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.825913][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.830522][ T6565] bridge_slave_0: entered allmulticast mode [ 152.858693][ T6565] bridge_slave_0: entered promiscuous mode [ 152.910340][ T6034] usb 8-1: USB disconnect, device number 6 [ 153.000472][ T6034] appletouch 8-1:1.0: input: appletouch disconnected [ 153.040006][ T1146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.094702][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.098355][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.104161][ T6565] bridge_slave_1: entered allmulticast mode [ 153.109789][ T6565] bridge_slave_1: entered promiscuous mode [ 153.332824][ T6612] ceph: No mds server is up or the cluster is laggy [ 153.343626][ T6026] libceph: connect (1)[c::]:6789 error -101 [ 153.379811][ T6026] libceph: mon0 (1)[c::]:6789 connect error [ 153.383956][ T6565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.431613][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'. [ 153.484334][ T6565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.904701][ T6565] team0: Port device team_slave_0 added [ 153.918720][ T5960] Bluetooth: hci2: command tx timeout [ 153.931817][ T6629] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 153.935692][ T6629] overlayfs: missing 'lowerdir' [ 153.999523][ T6565] team0: Port device team_slave_1 added [ 154.281236][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.295997][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.354024][ T6565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.466611][ T6641] netlink: 60 bytes leftover after parsing attributes in process `syz.0.170'. [ 154.486794][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.493188][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.509216][ T6565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.707506][ T6565] hsr_slave_0: entered promiscuous mode [ 154.712386][ T6565] hsr_slave_1: entered promiscuous mode [ 154.716766][ T6565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.722690][ T6565] Cannot create hsr debugfs directory [ 154.726481][ T1146] bridge_slave_1: left allmulticast mode [ 154.750781][ T1146] bridge_slave_1: left promiscuous mode [ 154.753612][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.761423][ T1146] bridge_slave_0: left allmulticast mode [ 154.764276][ T1146] bridge_slave_0: left promiscuous mode [ 154.766845][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.781709][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 154.781725][ T40] audit: type=1400 audit(1752330819.039:337): avc: denied { watch } for pid=6643 comm="syz.0.171" path="/49/bus" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 154.830055][ T40] audit: type=1400 audit(1752330819.039:338): avc: denied { watch_sb watch_reads } for pid=6643 comm="syz.0.171" path="/49/bus" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.613300][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.650918][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.679025][ T1146] bond0 (unregistering): Released all slaves [ 155.894728][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.972676][ T5960] Bluetooth: hci2: command tx timeout [ 155.981382][ T40] audit: type=1400 audit(1752330820.249:339): avc: denied { accept } for pid=6659 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.989888][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 155.998144][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 156.028405][ T6660] xfrm1: entered promiscuous mode [ 156.030367][ T6660] xfrm1: entered allmulticast mode [ 156.204818][ T40] audit: type=1400 audit(1752330820.449:340): avc: denied { write } for pid=6669 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.229612][ T40] audit: type=1400 audit(1752330820.449:341): avc: denied { read } for pid=6669 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.270752][ T40] audit: type=1400 audit(1752330820.449:342): avc: denied { getopt } for pid=6669 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.278227][ T40] audit: type=1400 audit(1752330820.449:343): avc: denied { map } for pid=6669 comm="syz.0.179" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.314005][ T40] audit: type=1400 audit(1752330820.449:344): avc: denied { execute } for pid=6669 comm="syz.0.179" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.382534][ T40] audit: type=1400 audit(1752330820.629:345): avc: denied { setopt } for pid=6672 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.532963][ T40] audit: type=1400 audit(1752330820.799:346): avc: denied { search } for pid=6682 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.783997][ T6688] comedi comedi1: Minor 3 could not be opened [ 157.148640][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 157.149295][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.505675][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 157.552761][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.191'. [ 157.592691][ T1146] hsr_slave_0: left promiscuous mode [ 157.662890][ T1146] hsr_slave_1: left promiscuous mode [ 157.666489][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.670576][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.685339][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.688120][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.756628][ T1146] veth1_macvtap: left promiscuous mode [ 157.777940][ T1146] veth0_macvtap: left promiscuous mode [ 157.781567][ T1146] veth1_vlan: left promiscuous mode [ 157.783915][ T1146] veth0_vlan: left promiscuous mode [ 158.051995][ T5960] Bluetooth: hci2: command tx timeout [ 158.578694][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.595230][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.712729][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.794974][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.147869][ T5960] Bluetooth: hci2: command tx timeout [ 160.209908][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 160.476141][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 160.693433][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.785944][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 162.786100][ T40] audit: type=1400 audit(1752330827.049:365): avc: denied { read } for pid=6729 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.061653][ T40] audit: type=1400 audit(1752330827.299:366): avc: denied { execute } for pid=6734 comm="syz.3.195" path="/dev/audio" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 163.094433][ T40] audit: type=1400 audit(1752330827.299:367): avc: denied { create } for pid=6734 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.107824][ T40] audit: type=1400 audit(1752330827.359:368): avc: denied { connect } for pid=6734 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.130817][ T40] audit: type=1400 audit(1752330827.399:369): avc: denied { ioctl } for pid=6734 comm="syz.3.195" path="socket:[13126]" dev="sockfs" ino=13126 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.153541][ T40] audit: type=1400 audit(1752330827.419:370): avc: denied { ioctl } for pid=6734 comm="syz.3.195" path="socket:[13125]" dev="sockfs" ino=13125 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.213582][ T40] audit: type=1400 audit(1752330827.469:371): avc: denied { write } for pid=6734 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.569562][ T6745] process 'syz.0.197' launched './file0' with NULL argv: empty string added [ 163.665903][ T6565] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.761247][ T6565] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.782721][ T6565] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.873021][ T6565] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.932289][ T40] audit: type=1400 audit(1752330828.199:372): avc: denied { ioctl } for pid=6755 comm="syz.3.200" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.984382][ T6759] netlink: 92 bytes leftover after parsing attributes in process `syz.3.200'. [ 164.053573][ T6762] No source specified [ 164.141723][ T6565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.203560][ T6565] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.254858][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.266057][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.283841][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.286840][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.309472][ T6773] /dev/nullb0: Can't open blockdev [ 164.503821][ T6776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.206'. [ 164.564253][ T40] audit: type=1400 audit(1752330828.829:373): avc: denied { connect } for pid=6775 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.569355][ T6776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.206'. [ 164.755801][ T6565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.763083][ T6756] orangefs_mount: mount request failed with -4 [ 164.824711][ T6565] veth0_vlan: entered promiscuous mode [ 164.837085][ T6565] veth1_vlan: entered promiscuous mode [ 164.883809][ T6565] veth0_macvtap: entered promiscuous mode [ 164.936858][ T6565] veth1_macvtap: entered promiscuous mode [ 164.968561][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.017247][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.023121][ T6785] tipc: Started in network mode [ 165.026087][ T6785] tipc: Node identity ca9fca59ca4d, cluster identity 4711 [ 165.040921][ T6785] tipc: Enabled bearer , priority 0 [ 165.065307][ T6785] syzkaller0: entered promiscuous mode [ 165.090985][ T6785] syzkaller0: entered allmulticast mode [ 165.131239][ T6565] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.134554][ T40] audit: type=1400 audit(1752330829.399:374): avc: denied { bind } for pid=6795 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.149870][ T6565] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.200768][ T6565] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.204402][ T6565] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.404899][ T6801] tipc: Resetting bearer [ 165.620836][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.624174][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.695176][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.699738][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.717692][ T6784] tipc: Resetting bearer [ 165.745619][ T6784] tipc: Disabling bearer [ 165.836211][ T5897] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 166.035087][ T5897] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 166.083067][ T5897] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 166.101609][ T5897] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.117276][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.143403][ T5897] usb 7-1: Product: syz [ 166.145389][ T5897] usb 7-1: Manufacturer: syz [ 166.164951][ T5897] usb 7-1: SerialNumber: syz [ 166.474099][ T6803] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 166.512609][ T5897] cdc_ncm 7-1:1.0: bind() failure [ 166.519376][ T5897] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 166.544674][ T5897] cdc_ncm 7-1:1.1: bind() failure [ 166.550504][ T5897] usb 7-1: USB disconnect, device number 4 [ 166.651471][ T6835] mkiss: ax0: crc mode is auto. [ 166.733306][ T6841] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 167.269037][ T6869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.356972][ T6873] binder: 6871:6873 ioctl 80104592 200000000100 returned -22 [ 167.595040][ T1146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.945964][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 167.945980][ T40] audit: type=1400 audit(1752330832.209:385): avc: denied { execute } for pid=6887 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 168.000812][ T40] audit: type=1400 audit(1752330832.249:386): avc: denied { execute_no_trans } for pid=6887 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 168.274433][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 168.301963][ T40] audit: type=1400 audit(1752330832.569:387): avc: denied { remount } for pid=6893 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 168.375341][ T5965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.379318][ T40] audit: type=1400 audit(1752330832.649:388): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 168.389904][ T5965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.416884][ T5965] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.447856][ T5965] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.494291][ T5965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.607317][ T6895] lo speed is unknown, defaulting to 1000 [ 168.844273][ T54] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 168.888217][ T6907] overlayfs: failed to resolve './file1/file0': -2 [ 169.013377][ T54] usb 5-1: config 1 interface 0 has no altsetting 0 [ 169.030236][ T6911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=6911 comm=syz.2.240 [ 169.031471][ T54] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.40 [ 169.058082][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.066320][ T54] usb 5-1: Product: 䆥矼珤쟽憨ﾰ黎칞扊瞾쮎榆Ị忭ᯥ餯▲侀Ｔ蜌ᆈ潅뇅録饨絃◰湚ꄿ輱繧ꫮ㸍ᇡꊩ竤娪쌃䉻탼鐿뾑䩖į马뱾놽䱦푿쿑⨨陌妆썉샌纺掣灯㠩1ꇉ揓炍师ࢴ锭Ő嵀죥෇暘岴㹫檓퉈賂溺絛֝워ꦨ갎耭痳ꦵ僨堝ꍕ偖깸ᜄ履嬩 [ 169.103819][ T54] usb 5-1: Manufacturer: 䀊 [ 169.106642][ T54] usb 5-1: SerialNumber: я [ 169.132932][ T6895] chnl_net:caif_netlink_parms(): no params data found [ 169.495504][ T1146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.497468][ T6923] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 169.565246][ T6923] netlink: 224 bytes leftover after parsing attributes in process `syz.3.243'. [ 169.661572][ T54] usbhid 5-1:1.0: can't add hid device: -71 [ 169.675907][ T54] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 169.687781][ T54] usb 5-1: USB disconnect, device number 2 [ 169.734884][ T1146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.893837][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.898211][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.903215][ T6895] bridge_slave_0: entered allmulticast mode [ 169.908182][ T6895] bridge_slave_0: entered promiscuous mode [ 169.938590][ T1146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.990927][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.995676][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.998778][ T6895] bridge_slave_1: entered allmulticast mode [ 170.007864][ T40] audit: type=1400 audit(1752330834.269:389): avc: denied { load_policy } for pid=6931 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 170.041727][ T6932] SELinux: failed to load policy [ 170.070138][ T6895] bridge_slave_1: entered promiscuous mode [ 170.247083][ T6895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.268510][ T6895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.433684][ T40] audit: type=1400 audit(1752330834.669:390): avc: denied { watch watch_reads } for pid=6935 comm="syz.0.247" path="/72/file0" dev="9p" ino=35913920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.474375][ T40] audit: type=1400 audit(1752330834.729:391): avc: denied { write } for pid=6935 comm="syz.0.247" name="cpu.stat" dev="9p" ino=35913964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.510888][ T40] audit: type=1400 audit(1752330834.759:392): avc: denied { ioctl } for pid=6935 comm="syz.0.247" path="/72/file0/cpu.stat" dev="9p" ino=35913964 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.551733][ T40] audit: type=1400 audit(1752330834.809:393): avc: denied { setopt } for pid=6935 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.564363][ T6895] team0: Port device team_slave_0 added [ 170.592180][ T6895] team0: Port device team_slave_1 added [ 170.621399][ T5965] Bluetooth: hci2: command tx timeout [ 170.856748][ T1146] bridge_slave_1: left allmulticast mode [ 170.858850][ T1146] bridge_slave_1: left promiscuous mode [ 170.861318][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.891485][ T1146] bridge_slave_0: left allmulticast mode [ 170.935644][ T1146] bridge_slave_0: left promiscuous mode [ 170.949144][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.951603][ T6945] syz.2.250 (6945) used greatest stack depth: 20808 bytes left [ 171.156005][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 171.156397][ T40] audit: type=1400 audit(1752330835.409:394): avc: denied { append } for pid=6950 comm="syz.0.252" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 171.940506][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.956919][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.969067][ T1146] bond0 (unregistering): Released all slaves [ 171.990252][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.993465][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.015722][ T6895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.044096][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.047252][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.070863][ T6895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.239152][ T6895] hsr_slave_0: entered promiscuous mode [ 172.249099][ T6895] hsr_slave_1: entered promiscuous mode [ 172.251774][ T6957] afs: Unknown parameter '>' [ 172.254971][ T6895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.258005][ T6895] Cannot create hsr debugfs directory [ 172.296904][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 172.372541][ T6958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6958 comm=syz.2.254 [ 172.700789][ T5965] Bluetooth: hci2: command tx timeout [ 172.706337][ T6963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6963 comm=syz.0.256 [ 172.950137][ T6971] openvswitch: netlink: Duplicate or invalid key (type 0). [ 172.953604][ T6971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.206311][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 173.206327][ T40] audit: type=1400 audit(1752330837.469:400): avc: denied { mount } for pid=6972 comm="syz.0.258" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 173.293649][ T40] audit: type=1400 audit(1752330837.489:401): avc: denied { mounton } for pid=6972 comm="syz.0.258" path="/76/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 173.495095][ T40] audit: type=1400 audit(1752330837.749:402): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 173.535666][ T6979] xt_hashlimit: size too large, truncated to 1048576 [ 173.607238][ T1146] hsr_slave_0: left promiscuous mode [ 173.646069][ T1146] hsr_slave_1: left promiscuous mode [ 173.648819][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.653017][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.659411][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.664549][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.664682][ T40] audit: type=1400 audit(1752330837.929:403): avc: denied { append } for pid=6983 comm="syz.0.261" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 173.739244][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 173.745283][ T1146] veth1_macvtap: left promiscuous mode [ 173.752848][ T1146] veth0_macvtap: left promiscuous mode [ 173.758720][ T40] audit: type=1400 audit(1752330838.009:404): avc: denied { watch_mount watch_reads } for pid=6983 comm="syz.0.261" path="/77" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 173.771269][ T1146] veth1_vlan: left promiscuous mode [ 173.817369][ T1146] veth0_vlan: left promiscuous mode [ 173.882441][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 173.924245][ T6984] nfs: Unknown parameter 'fsc' [ 174.770949][ T5965] Bluetooth: hci2: command tx timeout [ 174.854573][ C3] vkms_vblank_simulate: vblank timer overrun [ 175.006670][ C3] vkms_vblank_simulate: vblank timer overrun [ 175.598328][ C3] vkms_vblank_simulate: vblank timer overrun [ 176.055845][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 176.299347][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 176.327973][ C3] vkms_vblank_simulate: vblank timer overrun [ 176.860876][ T5965] Bluetooth: hci2: command tx timeout [ 178.112856][ T6980] : renamed from bridge_slave_0 (while UP) [ 178.129871][ T6985] pim6reg: entered allmulticast mode [ 178.294544][ T6995] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 178.333525][ T6995] netlink: 224 bytes leftover after parsing attributes in process `syz.3.264'. [ 178.380693][ C3] vkms_vblank_simulate: vblank timer overrun [ 178.822106][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 178.825891][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 178.834522][ T7010] erspan0: entered promiscuous mode [ 178.865641][ T7010] erspan0: left promiscuous mode [ 178.898562][ C3] vkms_vblank_simulate: vblank timer overrun [ 179.135014][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 179.209869][ T6895] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.225848][ T40] audit: type=1400 audit(1752330843.489:405): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 179.234580][ T6895] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.244528][ C3] vkms_vblank_simulate: vblank timer overrun [ 179.323948][ T40] audit: type=1400 audit(1752330843.559:406): avc: denied { write } for pid=7016 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.325481][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 179.355942][ C3] vkms_vblank_simulate: vblank timer overrun [ 179.394322][ T6895] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.409051][ T6895] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.652017][ T6895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.668205][ T6895] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.691691][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.695110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.715558][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.719213][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.913507][ T40] audit: type=1400 audit(1752330844.179:407): avc: denied { ioctl } for pid=7035 comm="syz.2.278" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 180.188765][ T6895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.256997][ T6895] veth0_vlan: entered promiscuous mode [ 180.267213][ T6895] veth1_vlan: entered promiscuous mode [ 180.310958][ T837] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 180.342834][ T6895] veth0_macvtap: entered promiscuous mode [ 180.349361][ T6895] veth1_macvtap: entered promiscuous mode [ 180.421506][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.449211][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.489695][ T6895] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.494326][ T6895] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.522359][ T6895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.526200][ T6895] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.566097][ T7051] nbd: must specify at least one socket [ 180.601699][ T837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.607704][ T837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.614118][ T837] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 180.619127][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.626366][ T837] usb 5-1: config 0 descriptor?? [ 180.740358][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.755044][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.755701][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.769276][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.325929][ T837] usbhid 5-1:0.0: can't add hid device: -71 [ 181.329252][ T837] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 181.336364][ T837] usb 5-1: USB disconnect, device number 3 [ 181.565161][ T40] audit: type=1400 audit(1752330845.819:408): avc: denied { getopt } for pid=7068 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.599233][ T7069] ieee802154 phy1 wpan1: encryption failed: -22 [ 181.669390][ T6052] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 181.834390][ T6052] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.839911][ T6052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.843721][ T6052] usb 8-1: Product: syz [ 181.850593][ T6052] usb 8-1: Manufacturer: syz [ 181.855695][ T6052] usb 8-1: SerialNumber: syz [ 181.860355][ T7071] kvm: MWAIT instruction emulated as NOP! [ 181.895928][ T6052] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.970954][ T40] audit: type=1400 audit(1752330846.229:409): avc: denied { firmware_load } for pid=6035 comm="kworker/2:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 182.021176][ T6035] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 182.416928][ T7082] nbd: must specify at least one socket [ 182.563208][ T7084] netlink: 'syz.0.292': attribute type 4 has an invalid length. [ 182.579601][ T5897] lo speed is unknown, defaulting to 1000 [ 182.580420][ T40] audit: type=1400 audit(1752330846.849:410): avc: denied { connect } for pid=7083 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.591418][ T7084] netlink: 'syz.0.292': attribute type 4 has an invalid length. [ 182.600168][ T5897] syz0: Port: 1 Link DOWN [ 182.604458][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.622312][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.627368][ T52] lo speed is unknown, defaulting to 1000 [ 182.635158][ T52] syz0: Port: 1 Link ACTIVE [ 182.635247][ T6026] lo speed is unknown, defaulting to 1000 [ 182.651063][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.672371][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.934541][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.953601][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.974785][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.981456][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.995602][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.031048][ T52] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 183.092474][ T6035] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 183.099639][ T6035] ath9k_htc: Failed to initialize the device [ 183.140046][ T6035] usb 8-1: ath9k_htc: USB layer deinitialized [ 183.226721][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 183.235295][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.242247][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.248424][ T52] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 183.256093][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.292997][ T52] usb 5-1: config 0 descriptor?? [ 183.382567][ T34] usb 8-1: USB disconnect, device number 7 [ 183.525521][ T7095] pim6reg: left allmulticast mode [ 183.733365][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.738228][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.763914][ T52] usbhid 5-1:0.0: can't add hid device: -71 [ 183.796303][ T52] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.811084][ T52] usb 5-1: USB disconnect, device number 4 [ 183.823842][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.844871][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.850462][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.872689][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.876980][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.989888][ T7099] lo speed is unknown, defaulting to 1000 [ 184.103641][ T40] audit: type=1400 audit(1752330848.369:411): avc: denied { kexec_image_load } for pid=7103 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 184.134207][ T40] audit: type=1400 audit(1752330848.389:412): avc: denied { ioctl } for pid=7103 comm="syz.2.298" path="socket:[16018]" dev="sockfs" ino=16018 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.188811][ T40] audit: type=1400 audit(1752330848.449:413): avc: denied { setattr } for pid=7103 comm="syz.2.298" name="radio9" dev="devtmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 184.216090][ T7110] nbd: must specify at least one socket [ 184.272730][ T40] audit: type=1400 audit(1752330848.539:414): avc: denied { bind } for pid=7103 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.449261][ T40] audit: type=1400 audit(1752330848.709:415): avc: denied { ioctl } for pid=7117 comm="syz.3.301" path="socket:[16034]" dev="sockfs" ino=16034 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.607555][ T40] audit: type=1400 audit(1752330848.839:416): avc: denied { ioctl } for pid=7119 comm="syz.0.302" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 184.722921][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.736116][ T7131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7131 comm=syz.2.304 [ 184.742523][ T7131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7131 comm=syz.2.304 [ 184.812892][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 184.964943][ T7134] block nbd2: NBD_DISCONNECT [ 184.980852][ T40] audit: type=1400 audit(1752330849.229:417): avc: denied { read } for pid=7133 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 185.028312][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.079909][ T7147] nbd: nbd0 already in use [ 185.216600][ T40] audit: type=1326 audit(1752330849.489:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7150 comm="syz.0.310" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10ffd8e929 code=0x0 [ 185.329517][ T40] audit: type=1400 audit(1752330849.579:419): avc: denied { ioctl } for pid=7154 comm="syz.3.311" path="socket:[15291]" dev="sockfs" ino=15291 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 185.368013][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.378017][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.382665][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.385926][ T40] audit: type=1400 audit(1752330849.649:420): avc: denied { create } for pid=7154 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 185.390977][ T7099] bridge_slave_0: entered allmulticast mode [ 185.430163][ T7099] bridge_slave_0: entered promiscuous mode [ 185.436465][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.440485][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.447270][ T7099] bridge_slave_1: entered allmulticast mode [ 185.459890][ T7099] bridge_slave_1: entered promiscuous mode [ 185.663606][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.672946][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.827290][ T7099] team0: Port device team_slave_0 added [ 185.854378][ T7099] team0: Port device team_slave_1 added [ 185.972513][ T5960] Bluetooth: hci2: command tx timeout [ 185.998859][ T40] audit: type=1400 audit(1752330850.269:421): avc: denied { read } for pid=7163 comm="syz.3.314" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 186.025137][ T40] audit: type=1400 audit(1752330850.269:422): avc: denied { open } for pid=7163 comm="syz.3.314" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 186.103469][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.114122][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.178747][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.183642][ T61] bridge_slave_1: left allmulticast mode [ 186.197025][ T61] bridge_slave_1: left promiscuous mode [ 186.200397][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.216177][ T61] bridge_slave_0: left allmulticast mode [ 186.218517][ T61] bridge_slave_0: left promiscuous mode [ 186.222208][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.673544][ T7181] nbd: nbd0 already in use [ 187.030561][ T7186] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.069157][ T40] audit: type=1400 audit(1752330851.329:423): avc: denied { read } for pid=7185 comm="syz.2.320" name="file0" dev="overlay" ino=35913932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 187.272252][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.290583][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.323876][ T61] bond0 (unregistering): Released all slaves [ 187.361382][ T7189] FAULT_INJECTION: forcing a failure. [ 187.361382][ T7189] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 187.371120][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.2.321 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 187.371142][ T7189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.371150][ T7189] Call Trace: [ 187.371155][ T7189] [ 187.371161][ T7189] dump_stack_lvl+0x16c/0x1f0 [ 187.371186][ T7189] should_fail_ex+0x512/0x640 [ 187.371208][ T7189] _copy_from_user+0x2e/0xd0 [ 187.371229][ T7189] copy_msghdr_from_user+0x98/0x160 [ 187.371248][ T7189] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 187.371278][ T7189] ___sys_sendmsg+0xfe/0x1d0 [ 187.371297][ T7189] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.371314][ T7189] ? __lock_acquire+0x622/0x1c90 [ 187.371354][ T7189] __sys_sendmsg+0x16d/0x220 [ 187.371372][ T7189] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.371403][ T7189] do_syscall_64+0xcd/0x4c0 [ 187.371424][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.371439][ T7189] RIP: 0033:0x7fcbaeb8e929 [ 187.371450][ T7189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.371464][ T7189] RSP: 002b:00007fcbaf9f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.371477][ T7189] RAX: ffffffffffffffda RBX: 00007fcbaedb5fa0 RCX: 00007fcbaeb8e929 [ 187.371486][ T7189] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 187.371494][ T7189] RBP: 00007fcbaf9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 187.371502][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.371511][ T7189] R13: 0000000000000000 R14: 00007fcbaedb5fa0 R15: 00007ffe89f059c8 [ 187.371531][ T7189] [ 187.617632][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.660733][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.706956][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.732164][ T7176] xfrm1: entered allmulticast mode [ 188.063989][ T5960] Bluetooth: hci2: command tx timeout [ 188.080334][ T7197] xt_hashlimit: size too large, truncated to 1048576 [ 188.089854][ T7099] hsr_slave_0: entered promiscuous mode [ 188.111379][ T7099] hsr_slave_1: entered promiscuous mode [ 188.114647][ T7099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.117456][ T7099] Cannot create hsr debugfs directory [ 188.585143][ T7213] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 188.593096][ T7213] netlink: 224 bytes leftover after parsing attributes in process `syz.3.328'. [ 188.646907][ T7217] FAULT_INJECTION: forcing a failure. [ 188.646907][ T7217] name failslab, interval 1, probability 0, space 0, times 1 [ 188.662391][ T7217] CPU: 3 UID: 0 PID: 7217 Comm: syz.2.330 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 188.662418][ T7217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.662430][ T7217] Call Trace: [ 188.662436][ T7217] [ 188.662443][ T7217] dump_stack_lvl+0x16c/0x1f0 [ 188.662472][ T7217] should_fail_ex+0x512/0x640 [ 188.662495][ T7217] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 188.662522][ T7217] should_failslab+0xc2/0x120 [ 188.662544][ T7217] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 188.662570][ T7217] ? __alloc_skb+0x2b2/0x380 [ 188.662596][ T7217] __alloc_skb+0x2b2/0x380 [ 188.662617][ T7217] ? __pfx___alloc_skb+0x10/0x10 [ 188.662641][ T7217] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 188.662673][ T7217] netlink_alloc_large_skb+0x69/0x130 [ 188.662692][ T7217] netlink_sendmsg+0x6a1/0xdd0 [ 188.662715][ T7217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.662743][ T7217] ____sys_sendmsg+0xa95/0xc70 [ 188.662762][ T7217] ? copy_msghdr_from_user+0x10a/0x160 [ 188.662797][ T7217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.662828][ T7217] ___sys_sendmsg+0x134/0x1d0 [ 188.662854][ T7217] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.662874][ T7217] ? __lock_acquire+0x622/0x1c90 [ 188.662921][ T7217] __sys_sendmsg+0x16d/0x220 [ 188.662944][ T7217] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.662985][ T7217] do_syscall_64+0xcd/0x4c0 [ 188.663012][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.663030][ T7217] RIP: 0033:0x7fcbaeb8e929 [ 188.663046][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.663061][ T7217] RSP: 002b:00007fcbaf9f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.663096][ T7217] RAX: ffffffffffffffda RBX: 00007fcbaedb5fa0 RCX: 00007fcbaeb8e929 [ 188.663108][ T7217] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 188.663118][ T7217] RBP: 00007fcbaf9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 188.663129][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.663139][ T7217] R13: 0000000000000000 R14: 00007fcbaedb5fa0 R15: 00007ffe89f059c8 [ 188.663162][ T7217] [ 189.030778][ T837] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.180714][ T61] hsr_slave_0: left promiscuous mode [ 189.206010][ T837] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 189.209353][ T837] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.218190][ T61] hsr_slave_1: left promiscuous mode [ 189.221102][ T837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 189.226563][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.230283][ T837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 189.230329][ T837] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.230370][ T837] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.249085][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.252217][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.255898][ T837] usb 5-1: config 0 descriptor?? [ 189.271978][ T7215] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.291819][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.296996][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.407890][ T61] veth1_macvtap: left promiscuous mode [ 189.412642][ T61] veth0_macvtap: left promiscuous mode [ 189.416173][ T61] veth1_vlan: left promiscuous mode [ 189.419151][ T61] veth0_vlan: left promiscuous mode [ 189.747913][ T837] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 189.749073][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 189.749088][ T40] audit: type=1400 audit(1752330853.989:426): avc: denied { write } for pid=7233 comm="syz.2.335" name="/" dev="9p" ino=35913920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.803965][ T837] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 190.028751][ T34] usb 5-1: USB disconnect, device number 5 [ 190.131517][ T5960] Bluetooth: hci2: command tx timeout [ 190.618966][ T7244] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 190.658535][ T7246] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.339'. [ 192.210897][ T5960] Bluetooth: hci2: command tx timeout [ 192.813274][ T61] team0 (unregistering): Port device team_slave_1 removed [ 193.088142][ T61] team0 (unregistering): Port device team_slave_0 removed [ 193.390855][ T6034] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 193.575172][ T6034] usb 8-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 1023 [ 193.580028][ T6034] usb 8-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 16 [ 193.585927][ T6034] usb 8-1: config 1 interface 0 has no altsetting 0 [ 193.641598][ T6034] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.666615][ T6034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.671941][ T6034] usb 8-1: Product:  [ 193.681412][ T6034] usb 8-1: Manufacturer: 鳥㚕扦ퟎ㧖ꨇﰏ嘆懌ྷ铪罟Ώ脃㢃ꕿ⃙䓯正곩㬺׮Ϯ촪謁ㅬﭭग廻룼洇잀Ჰ⨚ᓈ鴭茭⡨诓䁅味癶 [ 193.704980][ T6034] usb 8-1: SerialNumber: И [ 193.719593][ T7250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.745180][ T7250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.325146][ T6034] usb 8-1: bad CDC descriptors [ 195.388424][ T7254] netlink: 64 bytes leftover after parsing attributes in process `syz.2.341'. [ 195.399476][ T6034] usb 8-1: USB disconnect, device number 8 [ 195.402833][ T7252] tipc: Started in network mode [ 195.402861][ T7252] tipc: Node identity 5672233c4efa, cluster identity 4711 [ 195.402989][ T7252] tipc: Enabled bearer , priority 0 [ 195.505247][ T7252] syzkaller0: entered promiscuous mode [ 195.521296][ T7252] syzkaller0: entered allmulticast mode [ 195.524948][ T7252] tipc: Resetting bearer [ 195.695257][ T7251] tipc: Resetting bearer [ 195.891350][ T6811] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 196.008265][ T40] audit: type=1400 audit(1752330860.259:427): avc: denied { create } for pid=7257 comm="syz.3.343" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.030826][ T40] audit: type=1400 audit(1752330860.259:428): avc: denied { link } for pid=7257 comm="syz.3.343" name="#d" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.043202][ T40] audit: type=1400 audit(1752330860.279:429): avc: denied { rename } for pid=7257 comm="syz.3.343" name="#e" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.080841][ T6811] usb 5-1: Using ep0 maxpacket: 32 [ 196.105492][ T6811] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 196.108717][ T6811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.114927][ T6811] usb 5-1: config 0 descriptor?? [ 196.138575][ T6811] as10x_usb: device has been detected [ 196.141897][ T6811] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 196.171273][ T6811] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 196.241351][ T6811] as10x_usb: error during firmware upload part1 [ 196.258914][ T6811] Registered device nBox DVB-T Dongle [ 196.363079][ T156] usb 5-1: USB disconnect, device number 6 [ 196.422226][ T156] Unregistered device nBox DVB-T Dongle [ 196.423526][ T156] as10x_usb: device has been disconnected [ 196.446607][ T841] tipc: Node number set to 411575100 [ 200.179705][ T7251] tipc: Disabling bearer [ 200.411563][ T7279] netlink: 'syz.0.348': attribute type 10 has an invalid length. [ 200.419563][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.430803][ T7279] bridge_slave_1: left allmulticast mode [ 200.433119][ T7279] bridge_slave_1: left promiscuous mode [ 200.435582][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.523073][ T7279] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 200.632806][ T7286] FAULT_INJECTION: forcing a failure. [ 200.632806][ T7286] name failslab, interval 1, probability 0, space 0, times 0 [ 200.637412][ T7288] nbd: nbd0 already in use [ 200.639595][ T7286] CPU: 3 UID: 0 PID: 7286 Comm: syz.2.351 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 200.639618][ T7286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.639627][ T7286] Call Trace: [ 200.639632][ T7286] [ 200.639640][ T7286] dump_stack_lvl+0x16c/0x1f0 [ 200.639666][ T7286] should_fail_ex+0x512/0x640 [ 200.639688][ T7286] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 200.639711][ T7286] should_failslab+0xc2/0x120 [ 200.639734][ T7286] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 200.639753][ T7286] ? __alloc_skb+0x2b2/0x380 [ 200.639776][ T7286] __alloc_skb+0x2b2/0x380 [ 200.639794][ T7286] ? __pfx___alloc_skb+0x10/0x10 [ 200.639813][ T7286] ? genl_rcv_msg+0x4bb/0x800 [ 200.639837][ T7286] netlink_ack+0x15d/0xb80 [ 200.639854][ T7286] ? __lock_acquire+0x622/0x1c90 [ 200.639872][ T7286] netlink_rcv_skb+0x332/0x420 [ 200.639887][ T7286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.639905][ T7286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.639930][ T7286] ? netlink_deliver_tap+0x1ae/0xd30 [ 200.639952][ T7286] ? is_vmalloc_addr+0x86/0xa0 [ 200.639979][ T7286] genl_rcv+0x28/0x40 [ 200.639993][ T7286] netlink_unicast+0x58a/0x850 [ 200.640012][ T7286] ? __pfx_netlink_unicast+0x10/0x10 [ 200.640033][ T7286] netlink_sendmsg+0x8d1/0xdd0 [ 200.640052][ T7286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.640077][ T7286] ____sys_sendmsg+0xa95/0xc70 [ 200.640093][ T7286] ? copy_msghdr_from_user+0x10a/0x160 [ 200.640114][ T7286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.640140][ T7286] ___sys_sendmsg+0x134/0x1d0 [ 200.640162][ T7286] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.640276][ T7286] ? __lock_acquire+0x622/0x1c90 [ 200.640321][ T7286] __sys_sendmsg+0x16d/0x220 [ 200.640342][ T7286] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.640379][ T7286] do_syscall_64+0xcd/0x4c0 [ 200.640402][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.640417][ T7286] RIP: 0033:0x7fcbaeb8e929 [ 200.640432][ T7286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.640447][ T7286] RSP: 002b:00007fcbaf9f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.640468][ T7286] RAX: ffffffffffffffda RBX: 00007fcbaedb5fa0 RCX: 00007fcbaeb8e929 [ 200.640478][ T7286] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 200.640488][ T7286] RBP: 00007fcbaf9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 200.640497][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.640505][ T7286] R13: 0000000000000000 R14: 00007fcbaedb5fa0 R15: 00007ffe89f059c8 [ 200.640526][ T7286] [ 200.715656][ T7291] gfs2: not a GFS2 filesystem [ 200.731833][ T7099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.738126][ T40] audit: type=1400 audit(1752330864.999:430): avc: denied { read } for pid=7292 comm="syz.3.354" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.926088][ T40] audit: type=1400 audit(1752330864.999:431): avc: denied { open } for pid=7292 comm="syz.3.354" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.927767][ T7099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.942049][ T40] audit: type=1400 audit(1752330864.999:432): avc: denied { setopt } for pid=7287 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.942092][ T40] audit: type=1400 audit(1752330865.169:433): avc: denied { bind } for pid=7296 comm="syz.2.356" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.942121][ T40] audit: type=1400 audit(1752330865.169:434): avc: denied { node_bind } for pid=7296 comm="syz.2.356" saddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 200.942149][ T40] audit: type=1400 audit(1752330865.169:435): avc: denied { setattr } for pid=7296 comm="syz.2.356" name="/" dev="9p" ino=35913920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.015229][ T40] audit: type=1400 audit(1752330865.279:436): avc: denied { associate } for pid=7296 comm="syz.2.356" name="cpu.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 201.058065][ T7099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.076723][ T7099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.111975][ T6026] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 201.157540][ T7307] netlink: 'syz.0.357': attribute type 11 has an invalid length. [ 201.160453][ T7307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.357'. [ 201.279544][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.301925][ T7310] 9pnet_virtio: no channels available for device syz [ 201.303518][ T6026] usb 8-1: Using ep0 maxpacket: 32 [ 201.309693][ T7099] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.324603][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.325677][ T6026] usb 8-1: config index 0 descriptor too short (expected 50356, got 796) [ 201.335213][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.350932][ T6026] usb 8-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 201.356665][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.361266][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.363275][ T6026] usb 8-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 201.377463][ T6026] usb 8-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 201.384929][ T6026] usb 8-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 201.393200][ T6026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.402356][ T6026] usb 8-1: Product: syz [ 201.413926][ T6026] usb 8-1: Manufacturer: syz [ 201.416881][ T6026] usb 8-1: SerialNumber: syz [ 201.434411][ T7099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.443563][ T7099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.726455][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.820572][ T7099] veth0_vlan: entered promiscuous mode [ 201.845752][ T7099] veth1_vlan: entered promiscuous mode [ 201.924197][ T7099] veth0_macvtap: entered promiscuous mode [ 201.931043][ T7099] veth1_macvtap: entered promiscuous mode [ 201.976763][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.995778][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.026054][ T7099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.030133][ T7099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.042365][ T7099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.055986][ T7099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.112548][ T6026] usb 8-1: USB disconnect, device number 9 [ 202.330856][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.338377][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.341616][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.357167][ T40] audit: type=1400 audit(1752330866.619:437): avc: denied { ioctl } for pid=7332 comm="syz.2.365" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.425788][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.472974][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.630699][ T40] audit: type=1400 audit(1752330866.899:438): avc: denied { read } for pid=7338 comm="syz.2.367" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 202.657384][ T40] audit: type=1400 audit(1752330866.899:439): avc: denied { open } for pid=7338 comm="syz.2.367" path="/125/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 202.664225][ T7345] block device autoloading is deprecated and will be removed. [ 202.819569][ T7337] nbd: illegal input index 16449536 [ 202.909539][ T7351] sctp: [Deprecated]: syz.3.368 (pid 7351) Use of int in max_burst socket option. [ 202.909539][ T7351] Use struct sctp_assoc_value instead [ 202.973968][ T40] audit: type=1400 audit(1752330867.219:440): avc: denied { getopt } for pid=7350 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.180433][ T7361] tmpfs: Group quota block hardlimit too large. [ 203.181866][ T40] audit: type=1400 audit(1752330867.439:441): avc: denied { remount } for pid=7356 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.210684][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.257416][ T7368] nbd: nbd0 already in use [ 203.285987][ T7365] can0: slcan on ttyS3. [ 203.458425][ T7365] can0 (unregistered): slcan off ttyS3. [ 203.652066][ T7388] syz.2.378 uses obsolete (PF_INET,SOCK_PACKET) [ 203.782406][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.905477][ T7400] veth0_to_bond: entered allmulticast mode [ 204.056013][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.081994][ T6034] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 204.169691][ T1146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.307694][ T6034] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 204.322317][ T6034] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 204.329561][ T6034] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.337771][ T6034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.344620][ T6034] usb 5-1: Product: syz [ 204.347181][ T6034] usb 5-1: Manufacturer: syz [ 204.349950][ T6034] usb 5-1: SerialNumber: syz [ 204.565156][ T7386] netlink: 76 bytes leftover after parsing attributes in process `syz.0.377'. [ 204.661122][ T7412] nbd: must specify a size in bytes for the device [ 204.681191][ T6034] cdc_ncm 5-1:1.0: bind() failure [ 204.693189][ T6034] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 204.699807][ T6034] cdc_ncm 5-1:1.1: bind() failure [ 204.715568][ T6034] usb 5-1: USB disconnect, device number 7 [ 205.062779][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.161931][ T7415] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.368304][ T40] audit: type=1400 audit(1752330869.629:442): avc: denied { append } for pid=7428 comm="syz.0.390" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.396843][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.438154][ T5965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.445544][ T7428] Process accounting resumed [ 205.470917][ T5965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.503012][ T5965] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.505343][ T7434] netlink: 236 bytes leftover after parsing attributes in process `syz.3.389'. [ 205.512400][ T5965] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.548183][ T5965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.636657][ T7430] lo speed is unknown, defaulting to 1000 [ 205.659744][ T5758] IPVS: starting estimator thread 0... [ 205.790696][ T7436] IPVS: using max 27 ests per chain, 64800 per kthread [ 205.842319][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.898626][ T40] audit: type=1400 audit(1752330870.149:443): avc: denied { execute_no_trans } for pid=7444 comm="syz.0.394" path="/120/file0" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.022068][ T1146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.066870][ T40] audit: type=1400 audit(1752330870.329:444): avc: denied { watch } for pid=7453 comm="syz.0.397" path="pipe:[18951]" dev="pipefs" ino=18951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 206.069464][ T7454] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 206.092046][ T40] audit: type=1400 audit(1752330870.329:445): avc: denied { write } for pid=7453 comm="syz.0.397" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 206.205848][ T1146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.290391][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.351958][ T40] audit: type=1400 audit(1752330870.609:446): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 206.447433][ T1146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.533053][ T7430] chnl_net:caif_netlink_parms(): no params data found [ 206.558365][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.582018][ T841] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 206.785659][ T841] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 206.809169][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.812742][ T841] usb 5-1: Product: syz [ 206.814618][ T841] usb 5-1: Manufacturer: syz [ 206.817517][ T841] usb 5-1: SerialNumber: syz [ 206.877031][ T841] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 207.046599][ T6057] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 207.115353][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.121287][ T7430] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.125678][ T7430] bridge_slave_0: entered allmulticast mode [ 207.128924][ T7430] bridge_slave_0: entered promiscuous mode [ 207.138224][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.160971][ T7430] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.167068][ T7430] bridge_slave_1: entered allmulticast mode [ 207.179720][ T7430] bridge_slave_1: entered promiscuous mode [ 207.264788][ T7511] netlink: 'syz.3.404': attribute type 11 has an invalid length. [ 207.268219][ T7511] netlink: 'syz.3.404': attribute type 11 has an invalid length. [ 207.275416][ T7511] netlink: 224 bytes leftover after parsing attributes in process `syz.3.404'. [ 207.295102][ T841] usb 5-1: USB disconnect, device number 8 [ 207.331981][ T40] audit: type=1400 audit(1752330871.599:447): avc: denied { getopt } for pid=7510 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.375283][ T40] audit: type=1400 audit(1752330871.639:448): avc: denied { write } for pid=7510 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 207.421746][ T7430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.432231][ T7430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.585054][ T5965] Bluetooth: hci2: command tx timeout [ 207.679271][ T1146] bridge_slave_1: left allmulticast mode [ 207.682717][ T1146] bridge_slave_1: left promiscuous mode [ 207.684647][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.721872][ T1146] bridge_slave_0: left allmulticast mode [ 207.724509][ T1146] bridge_slave_0: left promiscuous mode [ 207.736010][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.150839][ T6057] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 208.158270][ T6057] ath9k_htc: Failed to initialize the device [ 208.201273][ T841] usb 5-1: ath9k_htc: USB layer deinitialized [ 208.278268][ T7534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.411'. [ 208.338070][ T40] audit: type=1400 audit(1752330872.599:449): avc: denied { create } for pid=7535 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 208.373920][ T40] audit: type=1400 audit(1752330872.639:450): avc: denied { read } for pid=7535 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 208.735117][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.754819][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.763654][ T1146] bond0 (unregistering): Released all slaves [ 208.796360][ T7430] team0: Port device team_slave_0 added [ 208.818302][ T7430] team0: Port device team_slave_1 added [ 209.013290][ T40] audit: type=1400 audit(1752330873.269:451): avc: denied { map } for pid=7554 comm="syz.2.413" path="socket:[20009]" dev="sockfs" ino=20009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.042700][ T40] audit: type=1400 audit(1752330873.269:452): avc: denied { read } for pid=7554 comm="syz.2.413" path="socket:[20009]" dev="sockfs" ino=20009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.083718][ T7430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.087469][ T7430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.150893][ T7430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.158000][ T7430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.161093][ T7430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.212725][ T7430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.278920][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.415'. [ 209.630201][ T7430] hsr_slave_0: entered promiscuous mode [ 209.640334][ T7430] hsr_slave_1: entered promiscuous mode [ 209.662447][ T7430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.665221][ T7430] Cannot create hsr debugfs directory [ 209.670547][ T5965] Bluetooth: hci2: command tx timeout [ 209.718589][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 209.846029][ T40] audit: type=1400 audit(1752330874.109:453): avc: denied { create } for pid=7575 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 209.867327][ T7576] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 209.903107][ T7576] input: syz0 as /devices/virtual/input/input10 [ 210.191616][ T1146] hsr_slave_0: left promiscuous mode [ 210.199012][ T1146] hsr_slave_1: left promiscuous mode [ 210.202876][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.206663][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.223432][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.225098][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 210.241252][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.308268][ T1146] veth1_macvtap: left promiscuous mode [ 210.313047][ T1146] veth0_macvtap: left promiscuous mode [ 210.319033][ T1146] veth1_vlan: left promiscuous mode [ 210.323423][ T1146] veth0_vlan: left promiscuous mode [ 210.717721][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.025186][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 211.200136][ T7606] overlayfs: workdir and upperdir must be separate subtrees [ 211.749636][ T5965] Bluetooth: hci2: command tx timeout [ 212.141248][ T6034] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 212.141913][ T5965] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.144248][ T6034] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 213.073354][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 213.357171][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 213.832595][ T5965] Bluetooth: hci2: command tx timeout [ 214.302537][ T5965] Bluetooth: hci1: command 0x0c1a tx timeout [ 214.312923][ T6034] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 214.317230][ T6034] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 216.284163][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 216.284180][ T40] audit: type=1400 audit(1752330880.549:456): avc: denied { ioctl } for pid=7624 comm="syz.2.438" path="socket:[21567]" dev="sockfs" ino=21567 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.450813][ T6034] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 216.453841][ T6034] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 216.459648][ C0] ------------[ cut here ]------------ [ 216.463258][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 216.466091][ C0] WARNING: CPU: 0 PID: 7606 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 216.470118][ C0] Modules linked in: [ 216.472286][ C0] CPU: 0 UID: 0 PID: 7606 Comm: syz.0.433 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 216.477634][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 216.507098][ C0] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 216.509435][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 e6 1d 38 00 90 0f 0b 90 e9 1b f6 ff [ 216.527937][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 216.530601][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 216.552561][ C0] RDX: ffff8880445d2440 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 216.555981][ C0] RBP: ffff88802b704970 R08: 0000000000000001 R09: 0000000000000000 [ 216.559084][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000000f8f [ 216.588145][ C0] R13: 0000000000000100 R14: ffff888105105178 R15: 0000000000000001 [ 216.590819][ C0] FS: 00007f1100cca6c0(0000) GS:ffff8880d6713000(0000) knlGS:0000000000000000 [ 216.594217][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.596709][ C0] CR2: 0000000000000000 CR3: 000000005b973000 CR4: 0000000000352ef0 [ 216.599410][ C0] Call Trace: [ 216.600578][ C0] [ 216.601630][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 216.603719][ C0] call_timer_fn+0x19a/0x620 [ 216.605600][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 216.607572][ C0] ? __run_timers+0x559/0x960 [ 216.622419][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 216.624709][ C0] __run_timers+0x569/0x960 [ 216.626542][ C0] ? __pfx___run_timers+0x10/0x10 [ 216.642366][ C0] run_timer_base+0x114/0x190 [ 216.643999][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 216.645679][ C0] run_timer_softirq+0x1a/0x40 [ 216.647255][ C0] handle_softirqs+0x219/0x8e0 [ 216.648805][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 216.650542][ C0] __irq_exit_rcu+0x109/0x170 [ 216.652508][ C0] irq_exit_rcu+0x9/0x30 [ 216.655161][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 216.672503][ C0] [ 216.674027][ C0] [ 216.675234][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.677617][ C0] RIP: 0010:lockdep_unregister_key+0xe9/0x140 [ 216.680055][ C0] Code: 48 89 ef e8 b9 e5 ff ff 48 83 2d 79 6b 58 14 01 89 c3 e8 da ee ff ff 9c 58 f6 c4 02 75 52 41 f7 c4 00 02 00 00 74 01 fb 84 db <75> 1b 5b 5d 41 5c e9 4c 74 0a 00 8b 05 6a 8d 11 0f 31 db 85 c0 74 [ 216.686566][ C0] RSP: 0018:ffffc90003f27818 EFLAGS: 00000246 [ 216.688582][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 216.691809][ C0] RDX: 0000000000000000 RSI: ffffffff8df25e21 RDI: ffffffff8c158fa0 [ 216.697778][ C0] RBP: ffffffff97579a08 R08: 000000000003108b R09: ffffffff95f6bab6 [ 216.703009][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 216.708017][ C0] R13: ffff88803b884000 R14: ffff88803b8844c0 R15: 0000000000000100 [ 216.712399][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 216.715455][ C0] __qdisc_destroy+0x11a/0x4d0 [ 216.718294][ C0] qdisc_put+0xab/0xe0 [ 216.720889][ C0] shutdown_scheduler_queue+0xa5/0x160 [ 216.736070][ C0] dev_shutdown+0xb8/0x430 [ 216.738136][ C0] unregister_netdevice_many_notify+0xb3c/0x2700 [ 216.741312][ C0] ? ref_tracker_alloc+0x2fe/0x5b0 [ 216.744234][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 216.747041][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 216.748970][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 216.764743][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 216.767762][ C0] ? linkwatch_fire_event+0x20c/0x270 [ 216.770655][ C0] ? netif_carrier_off+0xa3/0xc0 [ 216.783527][ C0] ? __tun_detach+0x1177/0x1540 [ 216.785687][ C0] unregister_netdevice_queue+0x305/0x3f0 [ 216.787871][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 216.790234][ C0] ? linkwatch_schedule_work+0x181/0x1c0 [ 216.804070][ C0] ? linkwatch_fire_event+0x6f/0x270 [ 216.807457][ C0] __tun_detach+0x1249/0x1540 [ 216.810603][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 216.813021][ C0] tun_chr_close+0xc2/0x230 [ 216.814720][ C0] __fput+0x402/0xb70 [ 216.816259][ C0] task_work_run+0x14d/0x240 [ 216.818853][ C0] ? __pfx_task_work_run+0x10/0x10 [ 216.824130][ C0] get_signal+0x1d1/0x26d0 [ 216.843811][ C0] ? kick_process+0xf6/0x1b0 [ 216.846854][ C0] ? __pfx_get_signal+0x10/0x10 [ 216.849777][ C0] ? task_work_add+0x1d5/0x360 [ 216.852205][ C0] ? __pfx_task_work_add+0x10/0x10 [ 216.854779][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 216.857508][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 216.859831][ C0] ? __fput_deferred+0x213/0x480 [ 216.874230][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 216.876569][ C0] exit_to_user_mode_loop+0x84/0x110 [ 216.878484][ C0] do_syscall_64+0x3f6/0x4c0 [ 216.880271][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.882829][ C0] RIP: 0033:0x7f10ffd8e929 [ 216.885196][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.908600][ C0] RSP: 002b:00007f1100cca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.911851][ C0] RAX: 0000000000000000 RBX: 00007f10fffb5fa0 RCX: 00007f10ffd8e929 [ 216.915877][ C0] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000008 [ 216.924414][ C0] RBP: 00007f10ffe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 216.934282][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.950754][ C0] R13: 0000000000000000 R14: 00007f10fffb5fa0 R15: 00007ffeaf181218 [ 216.954319][ C0] [ 216.955794][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 216.959080][ C0] CPU: 0 UID: 0 PID: 7606 Comm: syz.0.433 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 216.971855][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 216.976650][ C0] Call Trace: [ 216.977952][ C0] [ 216.979266][ C0] dump_stack_lvl+0x3d/0x1f0 [ 216.981339][ C0] panic+0x71c/0x800 [ 216.995638][ C0] ? __pfx_panic+0x10/0x10 [ 216.997705][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 217.001150][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 217.015197][ C0] ? __queue_work+0xc9c/0x10f0 [ 217.018194][ C0] check_panic_on_warn+0xab/0xb0 [ 217.020667][ C0] __warn+0xf6/0x3c0 [ 217.022348][ C0] ? __queue_work+0xc9c/0x10f0 [ 217.024042][ C0] report_bug+0x3c3/0x580 [ 217.025721][ C0] ? __queue_work+0xc9c/0x10f0 [ 217.027629][ C0] handle_bug+0x184/0x210 [ 217.029111][ C0] exc_invalid_op+0x17/0x50 [ 217.035041][ C0] asm_exc_invalid_op+0x1a/0x20 [ 217.043474][ C0] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 217.045809][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 e6 1d 38 00 90 0f 0b 90 e9 1b f6 ff [ 217.066623][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 217.068823][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 217.072344][ C0] RDX: ffff8880445d2440 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 217.079482][ C0] RBP: ffff88802b704970 R08: 0000000000000001 R09: 0000000000000000 [ 217.084220][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000000f8f [ 217.091857][ C0] R13: 0000000000000100 R14: ffff888105105178 R15: 0000000000000001 [ 217.097535][ C0] ? __warn_printk+0x198/0x350 [ 217.101052][ C0] ? __warn_printk+0x1a5/0x350 [ 217.104402][ C0] ? __queue_work+0xc9b/0x10f0 [ 217.113618][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 217.116580][ C0] call_timer_fn+0x19a/0x620 [ 217.121943][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 217.124798][ C0] ? __run_timers+0x559/0x960 [ 217.128574][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 217.134276][ C0] __run_timers+0x569/0x960 [ 217.143031][ C0] ? __pfx___run_timers+0x10/0x10 [ 217.145535][ C0] run_timer_base+0x114/0x190 [ 217.147723][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 217.149975][ C0] run_timer_softirq+0x1a/0x40 [ 217.162152][ C0] handle_softirqs+0x219/0x8e0 [ 217.164386][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 217.166846][ C0] __irq_exit_rcu+0x109/0x170 [ 217.168937][ C0] irq_exit_rcu+0x9/0x30 [ 217.170652][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 217.183661][ C0] [ 217.185338][ C0] [ 217.186817][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.189340][ C0] RIP: 0010:lockdep_unregister_key+0xe9/0x140 [ 217.200226][ C0] Code: 48 89 ef e8 b9 e5 ff ff 48 83 2d 79 6b 58 14 01 89 c3 e8 da ee ff ff 9c 58 f6 c4 02 75 52 41 f7 c4 00 02 00 00 74 01 fb 84 db <75> 1b 5b 5d 41 5c e9 4c 74 0a 00 8b 05 6a 8d 11 0f 31 db 85 c0 74 [ 217.226957][ C0] RSP: 0018:ffffc90003f27818 EFLAGS: 00000246 [ 217.229096][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 217.231879][ C0] RDX: 0000000000000000 RSI: ffffffff8df25e21 RDI: ffffffff8c158fa0 [ 217.235418][ C0] RBP: ffffffff97579a08 R08: 000000000003108b R09: ffffffff95f6bab6 [ 217.239445][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 217.256174][ C0] R13: ffff88803b884000 R14: ffff88803b8844c0 R15: 0000000000000100 [ 217.259313][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 217.261781][ C0] __qdisc_destroy+0x11a/0x4d0 [ 217.274654][ C0] qdisc_put+0xab/0xe0 [ 217.276615][ C0] shutdown_scheduler_queue+0xa5/0x160 [ 217.279801][ C0] dev_shutdown+0xb8/0x430 [ 217.282413][ C0] unregister_netdevice_many_notify+0xb3c/0x2700 [ 217.285684][ C0] ? ref_tracker_alloc+0x2fe/0x5b0 [ 217.287735][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 217.290604][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 217.307715][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 217.310171][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 217.312526][ C0] ? linkwatch_fire_event+0x20c/0x270 [ 217.315115][ C0] ? netif_carrier_off+0xa3/0xc0 [ 217.317977][ C0] ? __tun_detach+0x1177/0x1540 [ 217.320544][ C0] unregister_netdevice_queue+0x305/0x3f0 [ 217.323207][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 217.333586][ C0] ? linkwatch_schedule_work+0x181/0x1c0 [ 217.336271][ C0] ? linkwatch_fire_event+0x6f/0x270 [ 217.342191][ C0] __tun_detach+0x1249/0x1540 [ 217.344418][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 217.360105][ C0] tun_chr_close+0xc2/0x230 [ 217.362298][ C0] __fput+0x402/0xb70 [ 217.364164][ C0] task_work_run+0x14d/0x240 [ 217.366487][ C0] ? __pfx_task_work_run+0x10/0x10 [ 217.369346][ C0] get_signal+0x1d1/0x26d0 [ 217.371390][ C0] ? kick_process+0xf6/0x1b0 [ 217.373176][ C0] ? __pfx_get_signal+0x10/0x10 [ 217.391215][ C0] ? task_work_add+0x1d5/0x360 [ 217.393340][ C0] ? __pfx_task_work_add+0x10/0x10 [ 217.395602][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 217.397915][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 217.399973][ C0] ? __fput_deferred+0x213/0x480 [ 217.401580][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 217.403671][ C0] exit_to_user_mode_loop+0x84/0x110 [ 217.405977][ C0] do_syscall_64+0x3f6/0x4c0 [ 217.424009][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.427068][ C0] RIP: 0033:0x7f10ffd8e929 [ 217.430181][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.444776][ C0] RSP: 002b:00007f1100cca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.453405][ C0] RAX: 0000000000000000 RBX: 00007f10fffb5fa0 RCX: 00007f10ffd8e929 [ 217.472495][ C0] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000008 [ 217.475045][ C0] RBP: 00007f10ffe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 217.477869][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.481762][ C0] R13: 0000000000000000 R14: 00007f10fffb5fa0 R15: 00007ffeaf181218 [ 217.485115][ C0] [ 217.494796][ C0] Kernel Offset: disabled [ 217.512147][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:34:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bd615 RDI=ffffffff9b0c72e0 RBP=ffffffff9b0c72a0 RSP=ffffc90000007588 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000043 R14=ffffffff9b0c72a0 R15=ffffffff855bd5b0 RIP=ffffffff855bd63f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1100cca6c0 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005b973000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5b85488 00007f2fb5b85480 00007f2fb5b85478 00007f2fb5b85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb66ed100 00007f2fb5b85440 00007f2fb5b80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5b85498 00007f2fb5b85490 00007f2fb5b85488 00007f2fb5b85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88806a53b500 RCX=ffffffff81aff013 RDX=0000000000000001 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90000157d08 RSP=ffffc90000157bb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9fae R12=1ffff9200002af80 R13=0000000000000002 R14=0000000000000001 R15=ffffed100d4a76a1 RIP=ffffffff81bbf25a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcbaf9f0f98 CR3=0000000057e91000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaed85488 00007fcbaed85480 00007fcbaed85478 00007fcbaed85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaf8ed100 00007fcbaed85440 00007fcbaed85458 00007fcbaed854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaed85498 00007fcbaed85490 00007fcbaed85488 00007fcbaed85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88806a442060 RCX=ffffffff81afd92d RDX=ffff88804458a440 RSI=ffffffff81afd909 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90004817aa0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d48840d R15=ffff88806a63b580 RIP=ffffffff81bbf74b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcbaf9f16c0 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555561d36808 CR3=0000000057e91000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaec11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaed85488 00007fcbaed85480 00007fcbaed85478 00007fcbaed85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaf8ed100 00007fcbaed85440 00007fcbaed85458 00007fcbaed854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbaed85498 00007fcbaed85490 00007fcbaed85488 00007fcbaed85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000009cd1b RBX=0000000000000003 RCX=ffffffff8b885c79 RDX=0000000000000000 RSI=ffffffff8de32ebf RDI=ffffffff8c158fa0 RBP=ffffed1003bd9000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801dec8000 R14=ffffffff90a98950 R15=0000000000000000 RIP=ffffffff8b8847df RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff8880d6a13000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3051fffc CR3=000000004d679000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5bab99b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb5a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000230 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000