last executing test programs: 1m11.784232027s ago: executing program 0 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x111) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x3) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000280)={r5, 0x2, 0x2, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x2, 0x2, r5}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe7, 0x1b1c07, 0x0, 0x0, 0x20000}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r10, 0x2, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) recvmmsg(r7, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x9}, 0x3}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001780)=""/249, 0xf9}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000001880)=""/166, 0xa6}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000004680)=""/163, 0xa3}, {&(0x7f0000001a00)=""/122, 0x7a}, {&(0x7f0000001a80)=""/104, 0x68}], 0x8}, 0xfffffff8}, {{&(0x7f0000001b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000001c00)=""/77, 0x4d}, {&(0x7f0000001c80)=""/116, 0x74}, {&(0x7f0000003d40)=""/229, 0xe5}, {&(0x7f0000003e40)=""/236, 0xec}, {&(0x7f0000003f40)=""/253, 0xfd}, {&(0x7f0000004040)=""/225, 0xe1}, {&(0x7f0000004140)=""/166, 0xa6}, {&(0x7f0000004200)=""/153, 0x99}, {&(0x7f0000000700)=""/12, 0xc}, {&(0x7f00000042c0)=""/240, 0xf0}], 0xa, &(0x7f00000043c0)=""/61, 0x3d}, 0x400}], 0x5, 0x0, 0x0) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000200)="f50bbcb9f9bb4971ea6c883546b9b6e4fab4ecd09c7978cb9d629d7fd83c6efc08f05f0c971ac78e47586e0486f4e909d0bad2c7e3042ebf9fbd748d628c59809e2de6a9c0d2b9ba809ea3eca4d64779a2d989b5dae14ac2b520b0f39ca92ad68e0bc03c67f979ec3a0ab0194df9a39892122819acda2167c46827312aacc662124b52b0839bb82225a58c7b110683dc7d592997ff19946386747133fdaf9f8c11926fb92c25d1806b3265e4e6dc37cb50f6b99c44f9a4a2", 0xb8}], 0x1) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000080)) 1m5.623179717s ago: executing program 0 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x111) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x3) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000280)={r5, 0x2, 0x2, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x2, 0x2, r5}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe7, 0x1b1c07, 0x0, 0x0, 0x20000}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r10, 0x2, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) recvmmsg(r7, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x9}, 0x3}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001780)=""/249, 0xf9}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000001880)=""/166, 0xa6}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000004680)=""/163, 0xa3}, {&(0x7f0000001a00)=""/122, 0x7a}, {&(0x7f0000001a80)=""/104, 0x68}], 0x8}, 0xfffffff8}, {{&(0x7f0000001b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000001c00)=""/77, 0x4d}, {&(0x7f0000001c80)=""/116, 0x74}, {&(0x7f0000003d40)=""/229, 0xe5}, {&(0x7f0000003e40)=""/236, 0xec}, {&(0x7f0000003f40)=""/253, 0xfd}, {&(0x7f0000004040)=""/225, 0xe1}, {&(0x7f0000004140)=""/166, 0xa6}, {&(0x7f0000004200)=""/153, 0x99}, {&(0x7f0000000700)=""/12, 0xc}, {&(0x7f00000042c0)=""/240, 0xf0}], 0xa, &(0x7f00000043c0)=""/61, 0x3d}, 0x400}], 0x5, 0x0, 0x0) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000200)="f50bbcb9f9bb4971ea6c883546b9b6e4fab4ecd09c7978cb9d629d7fd83c6efc08f05f0c971ac78e47586e0486f4e909d0bad2c7e3042ebf9fbd748d628c59809e2de6a9c0d2b9ba809ea3eca4d64779a2d989b5dae14ac2b520b0f39ca92ad68e0bc03c67f979ec3a0ab0194df9a39892122819acda2167c46827312aacc662124b52b0839bb82225a58c7b110683dc7d592997ff19946386747133fdaf9f8c11926fb92c25d1806b3265e4e6dc37cb50f6b99c44f9a4a2", 0xb8}], 0x1) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000080)) 58.813108749s ago: executing program 0 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x111) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x3) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000280)={r5, 0x2, 0x2, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x2, 0x2, r5}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe7, 0x1b1c07, 0x0, 0x0, 0x20000}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r10, 0x2, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) recvmmsg(r7, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x9}, 0x3}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001780)=""/249, 0xf9}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000001880)=""/166, 0xa6}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000004680)=""/163, 0xa3}, {&(0x7f0000001a00)=""/122, 0x7a}, {&(0x7f0000001a80)=""/104, 0x68}], 0x8}, 0xfffffff8}, {{&(0x7f0000001b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000001c00)=""/77, 0x4d}, {&(0x7f0000001c80)=""/116, 0x74}, {&(0x7f0000003d40)=""/229, 0xe5}, {&(0x7f0000003e40)=""/236, 0xec}, {&(0x7f0000003f40)=""/253, 0xfd}, {&(0x7f0000004040)=""/225, 0xe1}, {&(0x7f0000004140)=""/166, 0xa6}, {&(0x7f0000004200)=""/153, 0x99}, {&(0x7f0000000700)=""/12, 0xc}, {&(0x7f00000042c0)=""/240, 0xf0}], 0xa, &(0x7f00000043c0)=""/61, 0x3d}, 0x400}], 0x5, 0x0, 0x0) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000200)="f50bbcb9f9bb4971ea6c883546b9b6e4fab4ecd09c7978cb9d629d7fd83c6efc08f05f0c971ac78e47586e0486f4e909d0bad2c7e3042ebf9fbd748d628c59809e2de6a9c0d2b9ba809ea3eca4d64779a2d989b5dae14ac2b520b0f39ca92ad68e0bc03c67f979ec3a0ab0194df9a39892122819acda2167c46827312aacc662124b52b0839bb82225a58c7b110683dc7d592997ff19946386747133fdaf9f8c11926fb92c25d1806b3265e4e6dc37cb50f6b99c44f9a4a2", 0xb8}], 0x1) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000080)) 52.265836215s ago: executing program 0 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x111) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x3) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000280)={r5, 0x2, 0x2, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x2, 0x2, r5}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe7, 0x1b1c07, 0x0, 0x0, 0x20000}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r10, 0x2, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) recvmmsg(r7, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x9}, 0x3}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001780)=""/249, 0xf9}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000001880)=""/166, 0xa6}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000004680)=""/163, 0xa3}, {&(0x7f0000001a00)=""/122, 0x7a}, {&(0x7f0000001a80)=""/104, 0x68}], 0x8}, 0xfffffff8}, {{&(0x7f0000001b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000001c00)=""/77, 0x4d}, {&(0x7f0000001c80)=""/116, 0x74}, {&(0x7f0000003d40)=""/229, 0xe5}, {&(0x7f0000003e40)=""/236, 0xec}, {&(0x7f0000003f40)=""/253, 0xfd}, {&(0x7f0000004040)=""/225, 0xe1}, {&(0x7f0000004140)=""/166, 0xa6}, {&(0x7f0000004200)=""/153, 0x99}, {&(0x7f0000000700)=""/12, 0xc}, {&(0x7f00000042c0)=""/240, 0xf0}], 0xa, &(0x7f00000043c0)=""/61, 0x3d}, 0x400}], 0x5, 0x0, 0x0) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000200)="f50bbcb9f9bb4971ea6c883546b9b6e4fab4ecd09c7978cb9d629d7fd83c6efc08f05f0c971ac78e47586e0486f4e909d0bad2c7e3042ebf9fbd748d628c59809e2de6a9c0d2b9ba809ea3eca4d64779a2d989b5dae14ac2b520b0f39ca92ad68e0bc03c67f979ec3a0ab0194df9a39892122819acda2167c46827312aacc662124b52b0839bb82225a58c7b110683dc7d592997ff19946386747133fdaf9f8c11926fb92c25d1806b3265e4e6dc37cb50f6b99c44f9a4a2", 0xb8}], 0x1) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000080)) 44.974605159s ago: executing program 0 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x111) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x3) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000280)={r5, 0x2, 0x2, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x2, 0x2, r5}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe7, 0x1b1c07, 0x0, 0x0, 0x20000}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r10, 0x2, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) recvmmsg(r7, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x9}, 0x3}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001780)=""/249, 0xf9}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000001880)=""/166, 0xa6}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000004680)=""/163, 0xa3}, {&(0x7f0000001a00)=""/122, 0x7a}, {&(0x7f0000001a80)=""/104, 0x68}], 0x8}, 0xfffffff8}, {{&(0x7f0000001b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000001c00)=""/77, 0x4d}, {&(0x7f0000001c80)=""/116, 0x74}, {&(0x7f0000003d40)=""/229, 0xe5}, {&(0x7f0000003e40)=""/236, 0xec}, {&(0x7f0000003f40)=""/253, 0xfd}, {&(0x7f0000004040)=""/225, 0xe1}, {&(0x7f0000004140)=""/166, 0xa6}, {&(0x7f0000004200)=""/153, 0x99}, {&(0x7f0000000700)=""/12, 0xc}, {&(0x7f00000042c0)=""/240, 0xf0}], 0xa, &(0x7f00000043c0)=""/61, 0x3d}, 0x400}], 0x5, 0x0, 0x0) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000200)="f50bbcb9f9bb4971ea6c883546b9b6e4fab4ecd09c7978cb9d629d7fd83c6efc08f05f0c971ac78e47586e0486f4e909d0bad2c7e3042ebf9fbd748d628c59809e2de6a9c0d2b9ba809ea3eca4d64779a2d989b5dae14ac2b520b0f39ca92ad68e0bc03c67f979ec3a0ab0194df9a39892122819acda2167c46827312aacc662124b52b0839bb82225a58c7b110683dc7d592997ff19946386747133fdaf9f8c11926fb92c25d1806b3265e4e6dc37cb50f6b99c44f9a4a2", 0xb8}], 0x1) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000080)) 26.205432396s ago: executing program 0 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x111) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x3) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000280)={r5, 0x2, 0x2, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x2, 0x2, r5}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe7, 0x1b1c07, 0x0, 0x0, 0x20000}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r10, 0x2, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) recvmmsg(r7, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x9}, 0x3}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001780)=""/249, 0xf9}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000001880)=""/166, 0xa6}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000004680)=""/163, 0xa3}, {&(0x7f0000001a00)=""/122, 0x7a}, {&(0x7f0000001a80)=""/104, 0x68}], 0x8}, 0xfffffff8}, {{&(0x7f0000001b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000001c00)=""/77, 0x4d}, {&(0x7f0000001c80)=""/116, 0x74}, {&(0x7f0000003d40)=""/229, 0xe5}, {&(0x7f0000003e40)=""/236, 0xec}, {&(0x7f0000003f40)=""/253, 0xfd}, {&(0x7f0000004040)=""/225, 0xe1}, {&(0x7f0000004140)=""/166, 0xa6}, {&(0x7f0000004200)=""/153, 0x99}, {&(0x7f0000000700)=""/12, 0xc}, {&(0x7f00000042c0)=""/240, 0xf0}], 0xa, &(0x7f00000043c0)=""/61, 0x3d}, 0x400}], 0x5, 0x0, 0x0) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000200)="f50bbcb9f9bb4971ea6c883546b9b6e4fab4ecd09c7978cb9d629d7fd83c6efc08f05f0c971ac78e47586e0486f4e909d0bad2c7e3042ebf9fbd748d628c59809e2de6a9c0d2b9ba809ea3eca4d64779a2d989b5dae14ac2b520b0f39ca92ad68e0bc03c67f979ec3a0ab0194df9a39892122819acda2167c46827312aacc662124b52b0839bb82225a58c7b110683dc7d592997ff19946386747133fdaf9f8c11926fb92c25d1806b3265e4e6dc37cb50f6b99c44f9a4a2", 0xb8}], 0x1) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000080)) 21.695393423s ago: executing program 2 (id=746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000", 0x17}], 0x1}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0xb9d, 0x0, 0x10000000001, 0x13, 0x0, 0x0, 0x0, 0x2, 0x4], 0x100000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) 21.552900118s ago: executing program 2 (id=747): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x511000, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x511000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffa0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x3, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x4, @broadcast, 'batadv_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="65c2ea4fe2cb45e3f0e87f60da0efbb6e753fc8e2c599de2b655071c8de33ae3418ab3e0708fe4900a9f9bb19eeef984682828c0fd34156ad4402a0673bd55dd8e01866f6ecf6b949f32fea42e6897285f246bc4670a810ef7910de707d2bdd24aa9efa1387b048d14ac4bb04c6e5f646372a92c6a23de80d35d449729eb95d500c5df4340e91c3a51172e927fcd97", 0x8f}], 0x1}, 0x4044880) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) (async) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@gettclass={0x24, 0x2a, 0xa90c4de7e7270a60, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0x4}, {0x8, 0x3}, {0xfffa, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4000}, 0x48d1) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@gettclass={0x24, 0x2a, 0xa90c4de7e7270a60, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0x4}, {0x8, 0x3}, {0xfffa, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4000}, 0x48d1) 21.391215988s ago: executing program 2 (id=748): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x6, 0x1}, 0x10) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000006300)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="8f01", 0x2}], 0x1, &(0x7f0000001540)=[@init={0x18, 0x84, 0x0, {0xd0b, 0x8eb, 0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x38, 0x8000}], 0x1, 0x4c045) fchdir(r1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0xf0}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r7 = socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$inet(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)='5', 0x1}], 0x1}, 0x4003) recvmmsg(r8, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x36, 0x0, 0x0) (async) accept4$rose(r1, &(0x7f0000000140)=@short={0xb, @dev, @netrom, 0x1, @bcast}, &(0x7f0000000180)=0x1c, 0x100800) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0xffe, @mcast1, 0x7, 0x83}, 0x80, 0x0}, 0x800) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async) close(0x4) 21.172130993s ago: executing program 3 (id=749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="8f176e010064", 0x0, 0x10, 0x1001a, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x5, "03bbfeb3fb52d288fb0f0000000000006c446593aea9a257d98e03ab46af00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e017e110000002c0012800b0001006d616373656300001c00028005000c00010000c7080014000300000005000d"], 0x54}}, 0x48090) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r3], 0x13c}}, 0x45) 16.479459007s ago: executing program 3 (id=750): unshare(0x7c030300) 16.36931167s ago: executing program 3 (id=751): r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0xc8, 0x2, 0x8}, 0x10) (async, rerun: 64) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x5, 0x4, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x8000], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}]}]}}]}, 0xb8}}, 0x20000000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006ca4720893af7b5dca53"], 0x140}}, 0x0) lseek(r0, 0xffffffffffffff73, 0x2) 16.092388397s ago: executing program 1 (id=753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="f36dc744240015000000c74424020e000000c7442406000000000f0114240f01dfb9b8020000b8494d0000ba000000000f30c4c37d044a08040fff090f8e43d399ad66baf80cb802028e8cef66bafc0c66b8010066efc4c1e956c80fc77cc187", 0x60}], 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_clone(0x20040400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace(0x10, r7) rt_sigqueueinfo(r7, 0x3d, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) socket(0x28, 0xa, 0x9) (async) socket(0x28, 0xa, 0x9) socket$nl_route(0x10, 0x3, 0x0) 15.930362773s ago: executing program 2 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800010000000000fedbdf250a200000ff030008"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x40) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 15.804228342s ago: executing program 2 (id=755): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000380)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000280)={0x6, 0xe, 0xf, 0x4, 0x681, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x10, 0x5, 0x9, 0x7, 0x5, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x80, 0x7, 0x1, 0x6}) 15.669980071s ago: executing program 3 (id=756): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002000010324bd7002fddbdf2501"], 0x14}}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async, rerun: 64) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) (async, rerun: 32) syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)=ANY=[], 0x0}, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x20, 0xf, 0xe4, "db596908339fae93b2b5620e331ad35517bba31be3c980470be9dd474bc6026299479be50b98e02e28e6f1606d7ece21d28babd7205a7fa1f980d5edbd4eb2f2c76542e2a92be6896f850e0893516cc49de7d10aaba4d401e64b17b8e2d2bd9762d8bb7899fa3e64a0ada618413f6b6960b56890832cee538cdd795aad811a61f469d4ef13bf0c12b0c34092c6b5e658def0bbfbc23f3766a2f19b7a4b7d8f3bffe60fc897451fa6e65080e60244c06c4341c9d81aceb15c6c56aa4ed905a29ee8575eb3f178a7d71bf55024b865b310fbd9423aa6e16d932967358c04cf41b653577016"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) write$char_usb(r2, &(0x7f0000000080)="7752a5", 0x3) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x0]}}, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) socket$inet6(0xa, 0x6, 0x5) 15.563809852s ago: executing program 3 (id=757): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0xfd) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x204001, 0x0) 15.523237314s ago: executing program 1 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@generic="d3e5"]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0xffffffffffffffff, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x3332a000}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000040)=@abs={0x1}, 0x5c) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 15.411771403s ago: executing program 1 (id=759): keyctl$KEYCTL_MOVE(0x1c, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) (async) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) acct(0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) 15.391999634s ago: executing program 1 (id=760): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000004c1db7a6c0498a"], 0x0, 0x27, 0x0, 0x1, 0x80, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2500, 0x2a000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa6}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x20004090) 15.131511056s ago: executing program 1 (id=761): mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x200013, 0x0) r0 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x0, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x2, 0x8, 0xd5, 0x10, 0x4}, 0x8c, &(0x7f0000000140)={0x5, 0xf, 0x8c, 0x5, [@generic={0x3b, 0x10, 0xc, "13f9ca37caea651ba105f9bfca1b448b9c12ad36baa54c265617a9d3f39bc6218c01074e9a69beb4bbbe9b64b27ba1e852dad5e2220e0cfe"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x76, 0xb0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x82, 0xf0, 0x1d9f}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "0ee79db02c422cd2ab826c4d0422bca9"}, @ssp_cap={0x24, 0x10, 0xa, 0x10, 0x6, 0x0, 0xf00, 0xfff, [0xf, 0xf, 0x0, 0x7e1e, 0xf, 0x3f]}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x418}}]}) syz_usb_disconnect(r0) 15.053520038s ago: executing program 2 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000280)={0x3c, r5, 0x809, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r6, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c0100696e643a302d313a312f4e00000000"]) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r10 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1800020, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB="2c66736d616769631f3078303030303030303030303030303030322c6d6561737572652c646f6e745f6d6561737572652c736d61636b6673726f6f743d28532c00"]) 14.722649626s ago: executing program 3 (id=763): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x1, 0x4105, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1200) 12.054155698s ago: executing program 1 (id=764): mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e21, 0xc6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb23c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast1, 0x400}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b18, 0x0) (async, rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) (rerun: 32) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x0, 0x0, 0x0, 0x100, 0xa, 0x9, 0x3, 0xfff3, 0x949a, 0x3}) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f00000003c0)=0xe8) (async, rerun: 64) fsopen(&(0x7f0000000380)='nfsd\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x211000, &(0x7f0000000400)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x31, 0x34]}}], [{@subj_user={'subj_user', 0x3d, 'ext2\x00'}}, {@euid_lt}, {@appraise_type}, {@dont_appraise}, {@euid_lt={'euid<', r2}}, {@seclabel}, {@fowner_lt={'fowner<', r4}}, {@uid_eq={'uid', 0x3d, r5}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsroot={'smackfsroot', 0x3d, '('}}]}) 0s ago: executing program 32 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000280)={0x3c, r5, 0x809, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r6, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c0100696e643a302d313a312f4e00000000"]) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r10 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1800020, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB="2c66736d616769631f3078303030303030303030303030303030322c6d6561737572652c646f6e745f6d6561737572652c736d61636b6673726f6f743d28532c00"]) kernel console output (not intermixed with test programs): adv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.672671][ T6849] hsr_slave_0: entered promiscuous mode [ 69.675546][ T6849] hsr_slave_1: entered promiscuous mode [ 69.723090][ T6883] overlayfs: unescaped trailing colons in lowerdir mount option. [ 69.847067][ T6901] ubi31: attaching mtd0 [ 69.850000][ T6901] ubi31: scanning is finished [ 69.851798][ T6901] ubi31: empty MTD device detected [ 69.926941][ T6901] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 69.929508][ T6901] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 69.931921][ T6901] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 69.934235][ T6901] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 69.936945][ T6901] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 69.939213][ T6901] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 69.941853][ T6901] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2245171881 [ 69.945284][ T6901] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 69.949148][ T6910] ubi31: background thread "ubi_bgt31d" started, PID 6910 [ 70.080602][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 70.187231][ T6939] netlink: 'syz.2.237': attribute type 2 has an invalid length. [ 70.189674][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 70.257292][ T6946] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 70.366564][ T6953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.242'. [ 70.371122][ T6953] vcan0: tx drop: invalid sa for name 0x0040000000000000 [ 70.524495][ T61] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 70.674716][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 70.678225][ T61] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.681419][ T61] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 70.685672][ T61] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 70.688492][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.691008][ T61] usb 7-1: Product: syz [ 70.692387][ T61] usb 7-1: Manufacturer: syz [ 70.693868][ T61] usb 7-1: SerialNumber: syz [ 70.737782][ T6965] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 70.751160][ T6965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.787701][ T6965] bond1: (slave veth3): Enslaving as an active interface with a down link [ 70.804629][ T6965] bond1: (slave veth0_to_bond): making interface the new active one [ 70.809529][ T6965] veth0_to_bond: entered promiscuous mode [ 70.812275][ T6965] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 70.856213][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 70.859394][ T6972] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 70.861962][ T6972] netlink: 500 bytes leftover after parsing attributes in process `syz.1.250'. [ 70.912141][ T61] usb 7-1: USB disconnect, device number 2 [ 71.060016][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.104578][ T6988] IPVS: set_ctl: invalid protocol: 50 172.30.0.4:20004 [ 71.158673][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.160860][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.184039][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.309478][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.314629][ T63] Bluetooth: hci0: command tx timeout [ 71.319852][ T7006] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 71.446782][ T7011] netlink: 'syz.2.258': attribute type 27 has an invalid length. [ 71.480241][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.483729][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.539423][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.546413][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.556043][ T7013] netlink: 32 bytes leftover after parsing attributes in process `syz.2.258'. [ 71.586295][ T7011] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.589131][ T7011] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.591909][ T7011] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.596949][ T7011] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.647026][ T13] bridge_slave_1: left allmulticast mode [ 71.648847][ T13] bridge_slave_1: left promiscuous mode [ 71.650785][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.654642][ T13] bridge_slave_0: left allmulticast mode [ 71.656676][ T13] bridge_slave_0: left promiscuous mode [ 71.658786][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.945484][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.951484][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.956141][ T13] bond0 (unregistering): Released all slaves [ 72.033179][ T7037] openvswitch: netlink: Flow key attribute not present in set flow. [ 72.126862][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 72.126872][ T40] audit: type=1400 audit(1750095521.866:408): avc: denied { watch_mount watch_reads } for pid=7048 comm="syz.1.266" path="/62" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.135054][ T40] audit: type=1326 audit(1750095521.866:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.1.266" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ccbf8e929 code=0x0 [ 72.327169][ T13] hsr_slave_0: left promiscuous mode [ 72.327768][ T13] hsr_slave_1: left promiscuous mode [ 72.328146][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.328170][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.328899][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.328914][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.358830][ T13] veth1_macvtap: left promiscuous mode [ 72.358881][ T13] veth0_macvtap: left promiscuous mode [ 72.358951][ T13] veth1_vlan: left promiscuous mode [ 72.359711][ T13] veth0_vlan: left promiscuous mode [ 72.526220][ T40] audit: type=1400 audit(1750095522.266:410): avc: denied { write } for pid=7058 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 72.827477][ T40] audit: type=1400 audit(1750095522.576:411): avc: denied { read } for pid=7067 comm="syz.2.270" lport=58445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.853772][ T40] audit: type=1400 audit(1750095522.586:412): avc: denied { listen } for pid=7067 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.860244][ T40] audit: type=1400 audit(1750095522.586:413): avc: denied { accept } for pid=7067 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.985401][ T13] team0 (unregistering): Port device team_slave_1 removed [ 72.990783][ T7071] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 73.053708][ T13] team0 (unregistering): Port device team_slave_0 removed [ 73.120622][ T40] audit: type=1400 audit(1750095522.856:414): avc: denied { execute_no_trans } for pid=7072 comm="syz.2.272" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=14799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 73.227647][ T40] audit: type=1400 audit(1750095522.966:415): avc: denied { append } for pid=7072 comm="syz.2.272" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 73.404615][ T63] Bluetooth: hci0: command tx timeout [ 73.602926][ T7093] ======================================================= [ 73.602926][ T7093] WARNING: The mand mount option has been deprecated and [ 73.602926][ T7093] and is ignored by this kernel. Remove the mand [ 73.602926][ T7093] option from the mount to silence this warning. [ 73.602926][ T7093] ======================================================= [ 73.615790][ T6849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.622377][ T6849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.641217][ T6849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.648395][ T6849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.702655][ T6849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.713829][ T6849] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.719270][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.721569][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.727605][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.729883][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.837218][ T40] audit: type=1400 audit(1750095523.576:416): avc: denied { mounton } for pid=7119 comm="syz.1.279" path="/proc/231/cgroup" dev="proc" ino=16836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 73.871121][ T7125] /dev/sg0: Can't lookup blockdev [ 73.878364][ T7126] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 73.879836][ T7125] overlay: filesystem on ./bus not supported [ 73.893651][ T6849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.915644][ T6849] veth0_vlan: entered promiscuous mode [ 73.920238][ T6849] veth1_vlan: entered promiscuous mode [ 73.931885][ T6849] veth0_macvtap: entered promiscuous mode [ 73.938777][ T6849] veth1_macvtap: entered promiscuous mode [ 73.948053][ T6849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.953877][ T6849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.960306][ T6849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.963031][ T6849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.966055][ T6849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.968794][ T6849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.999050][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.001548][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.005486][ T40] audit: type=1400 audit(1750095523.746:417): avc: denied { connect } for pid=7131 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 74.013772][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.014008][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.017003][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.019277][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.022350][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.026609][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.029956][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.032639][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.035810][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.038228][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.040668][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.043060][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.045600][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.048005][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.050413][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.053031][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.055587][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.057969][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.060311][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.062728][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.067410][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.069578][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.071952][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.074411][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.076788][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.079120][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.082142][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.085284][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.087656][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.090412][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.093376][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.096155][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.098462][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.100762][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.103050][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.105624][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.107931][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.110284][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.112606][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.115222][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.117553][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.119820][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.122151][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.125034][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.127730][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.130757][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.133391][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.135976][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.138976][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.141627][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.145532][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.147855][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.150195][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.152529][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.155320][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.157577][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.159859][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.162170][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.164590][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.166899][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.169189][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.171484][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.173857][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.176467][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.178770][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.181076][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.183385][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.186133][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.188438][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.190897][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.193516][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.196356][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.198650][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.200945][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.203272][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.205722][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.208173][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.210497][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.212816][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.215404][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.217714][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.220005][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.222332][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.224717][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.227006][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.229306][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.231622][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.234147][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.236635][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.238905][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.241181][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.243484][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.246073][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.248381][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.250675][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.253234][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.255689][ T6007] hid-generic 0400:0008:0005.0002: unknown main item tag 0x0 [ 74.261115][ T6007] hid-generic 0400:0008:0005.0002: hidraw1: HID v0.01 Device [syz0] on syz1 [ 74.285544][ T6006] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.439392][ T6006] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 74.442281][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.446040][ T6006] usb 7-1: Product: syz [ 74.447423][ T6006] usb 7-1: Manufacturer: syz [ 74.448952][ T6006] usb 7-1: SerialNumber: syz [ 74.453616][ T6006] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 74.477426][ T5945] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.114611][ T6006] usb 7-1: USB disconnect, device number 3 [ 75.190575][ T7167] netlink: 'syz.3.293': attribute type 10 has an invalid length. [ 75.202577][ T7169] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 75.206388][ T7167] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 75.210911][ T7167] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 75.213339][ T7167] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 75.233651][ T7167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7167 comm=syz.3.293 [ 75.237873][ T7167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7167 comm=syz.3.293 [ 75.273050][ T7171] nftables ruleset with unbound chain [ 75.275760][ T7171] fuse: Bad value for 'group_id' [ 75.277328][ T7171] fuse: Bad value for 'group_id' [ 75.442259][ T7180] vlan2: entered promiscuous mode [ 75.443862][ T7180] bridge0: entered promiscuous mode [ 75.701895][ T7189] netlink: 'syz.2.303': attribute type 4 has an invalid length. [ 75.709813][ T7189] netlink: 'syz.2.303': attribute type 4 has an invalid length. [ 75.715200][ T5945] usb 7-1: Service connection timeout for: 256 [ 75.717284][ T5945] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 75.721229][ T5945] ath9k_htc: Failed to initialize the device [ 75.723841][ T6006] usb 7-1: ath9k_htc: USB layer deinitialized [ 75.763393][ T7194] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 75.896112][ T7202] tmpfs: Bad value for 'mpol' [ 75.897829][ T7201] tmpfs: Bad value for 'mpol' [ 75.913472][ T7210] netlink: 108 bytes leftover after parsing attributes in process `syz.1.306'. [ 75.950954][ T7215] random: crng reseeded on system resumption [ 75.994560][ T7220] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 76.011308][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.475513][ T7228] syz.1.316: attempt to access beyond end of device [ 76.475513][ T7228] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 76.481072][ T7228] syz.1.316: attempt to access beyond end of device [ 76.481072][ T7228] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 76.486407][ T7228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 76.490469][ T7228] syz.1.316: attempt to access beyond end of device [ 76.490469][ T7228] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 76.495658][ T7228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 76.499499][ T7228] syz.1.316: attempt to access beyond end of device [ 76.499499][ T7228] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 76.503865][ T7228] syz.1.316: attempt to access beyond end of device [ 76.503865][ T7228] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 76.508266][ T7228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 76.511306][ T7228] syz.1.316: attempt to access beyond end of device [ 76.511306][ T7228] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 76.515665][ T7228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 76.519436][ T7228] syz.1.316: attempt to access beyond end of device [ 76.519436][ T7228] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 76.523491][ T7228] syz.1.316: attempt to access beyond end of device [ 76.523491][ T7228] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 76.527824][ T7228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 76.531444][ T7228] syz.1.316: attempt to access beyond end of device [ 76.531444][ T7228] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 76.535747][ T7228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 76.539030][ T7228] syz.1.316: attempt to access beyond end of device [ 76.539030][ T7228] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 76.543190][ T7228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 76.546698][ T7228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 76.548579][ T7233] capability: warning: `syz.2.318' uses 32-bit capabilities (legacy support in use) [ 76.549776][ T7228] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 76.581443][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.585354][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.588186][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.590980][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.593795][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.593883][ T7238] ALSA: mixer_oss: invalid OSS volume 'dev/ppp' [ 76.657626][ T7246] input: syz0 as /devices/virtual/input/input6 [ 76.682014][ T7248] nbd: socks must be embedded in a SOCK_ITEM attr [ 76.742170][ T7259] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 76.747214][ T7235] chnl_net:caif_netlink_parms(): no params data found [ 76.814235][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.816664][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.819029][ T7235] bridge_slave_0: entered allmulticast mode [ 76.821678][ T7235] bridge_slave_0: entered promiscuous mode [ 76.825218][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.827556][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.829811][ T7235] bridge_slave_1: entered allmulticast mode [ 76.832402][ T7235] bridge_slave_1: entered promiscuous mode [ 76.839639][ T7260] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 76.871258][ T7235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.876640][ T7235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.923847][ T7235] team0: Port device team_slave_0 added [ 76.932474][ T7235] team0: Port device team_slave_1 added [ 76.961663][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.963831][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.971746][ T7235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.976738][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.978928][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.986848][ T7235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.032441][ T7235] hsr_slave_0: entered promiscuous mode [ 77.035193][ T7235] hsr_slave_1: entered promiscuous mode [ 77.037619][ T7235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.040613][ T7235] Cannot create hsr debugfs directory [ 77.208047][ T7272] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 77.236634][ T7272] loop6: detected capacity change from 0 to 524287999 [ 77.239844][ T7272] buffer_io_error: 15 callbacks suppressed [ 77.239853][ T7272] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.244152][ T7272] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.247250][ T7272] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.249773][ T7272] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.252433][ T7272] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.255027][ T7272] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.257496][ T7272] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.259944][ T7272] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.262390][ T7272] ldm_validate_partition_table(): Disk read failed. [ 77.264881][ T7272] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.267349][ T7272] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.270355][ T7272] Dev loop6: unable to read RDB block 0 [ 77.272481][ T7272] loop6: unable to read partition table [ 77.274698][ T7272] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 77.340205][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.332'. [ 77.354096][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.332'. [ 77.522121][ T7303] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 77.562980][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.615427][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.693171][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.749424][ T7307] xt_hashlimit: size too large, truncated to 1048576 [ 77.800582][ T7308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.811024][ T13] bridge_slave_1: left allmulticast mode [ 77.812909][ T13] bridge_slave_1: left promiscuous mode [ 77.815798][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.822208][ T13] bridge_slave_0: left allmulticast mode [ 77.823984][ T13] bridge_slave_0: left promiscuous mode [ 77.827392][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.057430][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.061564][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.065724][ T13] bond0 (unregistering): Released all slaves [ 78.068484][ T7312] netlink: 'syz.1.341': attribute type 21 has an invalid length. [ 78.102648][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 78.102659][ T40] audit: type=1400 audit(1750095527.836:440): avc: denied { ioctl } for pid=7314 comm="syz.3.342" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.131532][ T7316] blktrace: Concurrent blktraces are not allowed on sg0 [ 78.184476][ T40] audit: type=1400 audit(1750095527.916:441): avc: denied { setattr } for pid=7327 comm="syz.1.344" name="v4l-subdev6" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.187311][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 78.199482][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 78.257101][ T7340] random: crng reseeded on system resumption [ 78.259904][ T7339] x_tables: duplicate underflow at hook 1 [ 78.262825][ T40] audit: type=1400 audit(1750095527.996:442): avc: denied { ioctl } for pid=7337 comm="syz.2.346" path="socket:[17190]" dev="sockfs" ino=17190 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.290337][ T40] audit: type=1400 audit(1750095528.026:443): avc: denied { accept } for pid=7337 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 78.341285][ T7344] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 78.393492][ T7351] mkiss: ax0: crc mode is auto. [ 78.441369][ T7358] tipc: Started in network mode [ 78.442956][ T7358] tipc: Node identity 6aa43ce1e1e4, cluster identity 4711 [ 78.445546][ T7358] tipc: Enabled bearer , priority 0 [ 78.455015][ T7358] tipc: Enabling of bearer rejected, already enabled [ 78.458081][ T7358] tipc: Enabling of bearer rejected, already enabled [ 78.460682][ T7358] tipc: Enabling of bearer rejected, already enabled [ 78.465602][ T7359] tipc: Disabling bearer [ 78.490740][ T13] hsr_slave_0: left promiscuous mode [ 78.493603][ T13] hsr_slave_1: left promiscuous mode [ 78.508828][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.511204][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.520728][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.523094][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.556185][ T13] veth1_macvtap: left promiscuous mode [ 78.557936][ T13] veth0_macvtap: left promiscuous mode [ 78.560507][ T13] veth1_vlan: left promiscuous mode [ 78.562191][ T13] veth0_vlan: left promiscuous mode [ 78.571410][ T40] audit: type=1400 audit(1750095528.306:444): avc: denied { read write } for pid=7374 comm="syz.1.357" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.582219][ T40] audit: type=1400 audit(1750095528.306:445): avc: denied { open } for pid=7374 comm="syz.1.357" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.590097][ T40] audit: type=1400 audit(1750095528.326:446): avc: denied { write } for pid=7374 comm="syz.1.357" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.688124][ T63] Bluetooth: hci0: command tx timeout [ 78.825425][ T40] audit: type=1400 audit(1750095528.566:447): avc: denied { map } for pid=7380 comm="syz.1.358" path="pipe:[18367]" dev="pipefs" ino=18367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 78.833070][ T40] audit: type=1400 audit(1750095528.566:448): avc: denied { execute } for pid=7380 comm="syz.1.358" path="pipe:[18367]" dev="pipefs" ino=18367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 79.067329][ T13] team0 (unregistering): Port device team_slave_1 removed [ 79.119263][ T13] team0 (unregistering): Port device team_slave_0 removed [ 79.321654][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 79.374253][ T7390] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 79.568860][ T7381] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 79.619233][ T7235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.626297][ T7235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.628061][ T7405] msdos: Unknown parameter 'dg5%ZÍ¢Â' [ 79.632538][ T40] audit: type=1400 audit(1750095529.366:449): avc: denied { lock } for pid=7403 comm="syz.1.364" path="socket:[18488]" dev="sockfs" ino=18488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 79.638927][ T7235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.654170][ T7235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.718786][ T7419] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 79.750015][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.769221][ T7235] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.776101][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.778994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.785341][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.788310][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.916748][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 79.922024][ T7438] xfrm1: entered promiscuous mode [ 79.923610][ T7438] xfrm1: entered allmulticast mode [ 79.928787][ T7438] netlink: 'syz.3.372': attribute type 5 has an invalid length. [ 79.947931][ T7235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.995080][ T7235] veth0_vlan: entered promiscuous mode [ 80.000202][ T7235] veth1_vlan: entered promiscuous mode [ 80.016797][ T7235] veth0_macvtap: entered promiscuous mode [ 80.020383][ T7235] veth1_macvtap: entered promiscuous mode [ 80.029279][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.031876][ T7443] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 80.039184][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.046333][ T7235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.050262][ T7235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.053780][ T7235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.057448][ T7235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.080571][ T7445] netlink: 'syz.3.375': attribute type 1 has an invalid length. [ 80.101511][ T7445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.137117][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.140228][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.155524][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.158018][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.518074][ T7454] netlink: 64 bytes leftover after parsing attributes in process `syz.1.378'. [ 80.619474][ T7459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7459 comm=syz.1.379 [ 80.765884][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 80.825335][ T7486] netlink: 'syz.2.387': attribute type 10 has an invalid length. [ 80.830308][ T7486] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.833362][ T7486] bond0: (slave team0): Enslaving as an active interface with an up link [ 80.880314][ T7492] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 80.883384][ T7492] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 80.887485][ T7492] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 80.890607][ T7492] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 80.894062][ T7492] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 80.897345][ T7492] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 80.900752][ T7492] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 80.903727][ T7492] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 80.907985][ T7492] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 80.916491][ T7492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=7492 comm=syz.1.390 [ 80.969025][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 80.993757][ T7503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.394'. [ 81.061205][ T7514] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 81.063650][ T7514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.075518][ T7517] loop6: detected capacity change from 0 to 524287999 [ 81.078618][ T7514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.081501][ T7514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.084166][ T7514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.088472][ T7514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.091411][ T7514] geneve2: entered promiscuous mode [ 81.093126][ T7514] geneve2: entered allmulticast mode [ 81.115017][ T7514] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.120828][ T7514] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.123611][ T7514] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.134434][ T7514] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.257910][ T7521] No source specified [ 81.354246][ T7525] ptrace attach of "/syz-executor exec"[5943] was attempted by ""[7525] [ 81.408632][ T10] cfg80211: failed to load regulatory.db [ 82.016650][ T7550] team0: Port device team_slave_0 removed [ 82.094540][ T46] veth0_to_bond: left promiscuous mode [ 82.160492][ T7561] overlayfs: workdir and upperdir must reside under the same mount [ 82.178881][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.754609][ T7565] __nla_validate_parse: 3 callbacks suppressed [ 82.754621][ T7565] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.412'. [ 82.759543][ T7565] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.412'. [ 82.763290][ T7565] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 82.766328][ T7565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.412'. [ 82.770087][ T7565] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 82.772997][ T7565] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 82.778636][ T7565] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 82.822316][ T7577] program syz.2.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.828069][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 82.863913][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.868885][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.877142][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.888969][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.890505][ T7585] netlink: 52 bytes leftover after parsing attributes in process `syz.3.417'. [ 82.891487][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.906707][ T7577] hsr_slave_0 (unregistering): left promiscuous mode [ 83.029172][ T7581] chnl_net:caif_netlink_parms(): no params data found [ 83.103327][ T7600] openvswitch: netlink: Message has 8 unknown bytes. [ 83.129291][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 83.160308][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.162597][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.165186][ T7581] bridge_slave_0: entered allmulticast mode [ 83.168563][ T7581] bridge_slave_0: entered promiscuous mode [ 83.171765][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.173975][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.177725][ T7581] bridge_slave_1: entered allmulticast mode [ 83.183450][ T7581] bridge_slave_1: entered promiscuous mode [ 83.243094][ T7581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.248506][ T7581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.248613][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 83.248623][ T40] audit: type=1400 audit(1750095532.996:459): avc: denied { setopt } for pid=7629 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.275794][ T7634] openvswitch: netlink: Flow key attr not present in new flow. [ 83.279001][ T7635] openvswitch: netlink: Flow key attr not present in new flow. [ 83.318500][ T7581] team0: Port device team_slave_0 added [ 83.321891][ T7581] team0: Port device team_slave_1 added [ 83.350031][ T7642] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.429'. [ 83.366225][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.368429][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.376944][ T7581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.381346][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.383579][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.393914][ T7581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.439756][ T7581] hsr_slave_0: entered promiscuous mode [ 83.442004][ T7581] hsr_slave_1: entered promiscuous mode [ 83.499437][ T40] audit: type=1800 audit(1750095533.236:460): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.433" name="bus" dev="tmpfs" ino=732 res=0 errno=0 [ 83.606502][ T7650] xt_hashlimit: size too large, truncated to 1048576 [ 83.658334][ T7652] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.666743][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.670134][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.072931][ T7665] dvmrp1: entered allmulticast mode [ 84.082809][ T40] audit: type=1400 audit(1750095533.816:461): avc: denied { getopt } for pid=7664 comm="syz.3.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.206949][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.253266][ T7685] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 84.260205][ T7685] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 84.274427][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.293797][ T7690] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 84.383188][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.425955][ T7694] xt_hashlimit: size too large, truncated to 1048576 [ 84.510951][ T46] bridge_slave_1: left allmulticast mode [ 84.512796][ T46] bridge_slave_1: left promiscuous mode [ 84.515265][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.519074][ T46] bridge_slave_0: left allmulticast mode [ 84.520933][ T46] bridge_slave_0: left promiscuous mode [ 84.522772][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.576598][ T6081] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 84.735224][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.740042][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.744747][ T46] bond0 (unregistering): Released all slaves [ 84.754380][ T6081] usb 6-1: Using ep0 maxpacket: 8 [ 84.757885][ T6081] usb 6-1: config 0 has no interfaces? [ 84.761608][ T6081] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 84.764589][ T6081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.767041][ T6081] usb 6-1: Product: syz [ 84.768372][ T6081] usb 6-1: Manufacturer: syz [ 84.768845][ T7699] netlink: 216 bytes leftover after parsing attributes in process `syz.2.448'. [ 84.769848][ T6081] usb 6-1: SerialNumber: syz [ 84.775621][ T6081] usb 6-1: config 0 descriptor?? [ 84.914753][ T63] Bluetooth: hci0: command tx timeout [ 84.983085][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.990828][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.994203][ T7692] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 85.013472][ T6081] usb 6-1: USB disconnect, device number 3 [ 85.088813][ T46] hsr_slave_0: left promiscuous mode [ 85.090914][ T46] hsr_slave_1: left promiscuous mode [ 85.092917][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.095318][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.098028][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.100389][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.121463][ T46] veth1_macvtap: left promiscuous mode [ 85.123242][ T46] veth0_macvtap: left promiscuous mode [ 85.125161][ T46] veth1_vlan: left promiscuous mode [ 85.126831][ T46] veth0_vlan: left promiscuous mode [ 85.193941][ T40] audit: type=1400 audit(1750095534.926:462): avc: denied { ioctl } for pid=7716 comm="syz.3.449" path="socket:[21859]" dev="sockfs" ino=21859 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.204733][ T40] audit: type=1400 audit(1750095534.946:463): avc: denied { bind } for pid=7716 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.223033][ T40] audit: type=1400 audit(1750095534.956:464): avc: denied { accept } for pid=7716 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.608976][ T40] audit: type=1400 audit(1750095535.346:465): avc: denied { read } for pid=7725 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.716954][ T46] team0 (unregistering): Port device team_slave_1 removed [ 85.802113][ T46] team0 (unregistering): Port device team_slave_0 removed [ 86.320077][ T40] audit: type=1400 audit(1750095536.056:466): avc: denied { read write } for pid=7733 comm="syz.3.452" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.342711][ T7730] bridge1: entered promiscuous mode [ 86.342716][ T40] audit: type=1400 audit(1750095536.066:467): avc: denied { open } for pid=7733 comm="syz.3.452" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.353721][ T7581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.380825][ T7581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.440413][ T7581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.450410][ T7581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.453631][ T40] audit: type=1400 audit(1750095536.196:468): avc: denied { bind } for pid=7748 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.575019][ T7581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.590345][ T7581] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.599923][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.602988][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.613141][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.615888][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.757120][ T7774] SELinux: syz.1.461 (7774) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.802606][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.828751][ T7581] veth0_vlan: entered promiscuous mode [ 86.842952][ T7581] veth1_vlan: entered promiscuous mode [ 86.871306][ T7783] program syz.1.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.872799][ T61] hid (null): bogus close delimiter [ 86.876456][ T7581] veth0_macvtap: entered promiscuous mode [ 86.877470][ T61] hid (null): unknown global tag 0xe [ 86.881088][ T61] hid (null): unknown global tag 0xc [ 86.882414][ T7581] veth1_macvtap: entered promiscuous mode [ 86.883161][ T61] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x4 [ 86.883178][ T61] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.883191][ T61] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.883203][ T61] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x4 [ 86.883215][ T61] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.883227][ T61] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.883240][ T61] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 86.883252][ T61] hid-generic 0000:007F:FFFFFFFE.0003: bogus close delimiter [ 86.883260][ T61] hid-generic 0000:007F:FFFFFFFE.0003: item 0 0 2 10 parsing failed [ 86.883510][ T61] hid-generic 0000:007F:FFFFFFFE.0003: probe with driver hid-generic failed with error -22 [ 86.903316][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.932451][ T7782] veth3: entered promiscuous mode [ 86.934895][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.939738][ T7581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.947295][ T7581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.947316][ T7581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.947331][ T7581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.992817][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.992843][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.994666][ T63] Bluetooth: hci0: command tx timeout [ 87.025066][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.025086][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.469403][ T7812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7812 comm=syz.2.472 [ 87.469465][ T7813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7813 comm=syz.2.472 [ 87.690254][ T7835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.825495][ T7853] vlan3: entered promiscuous mode [ 87.827371][ T7853] bridge0: entered promiscuous mode [ 87.829234][ T7853] vlan3: entered allmulticast mode [ 87.831168][ T7853] bridge0: entered allmulticast mode [ 87.843583][ T7853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.081505][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 88.084046][ T7858] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 88.086323][ T7858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.602182][ T7850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.604283][ T7850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.609896][ T7850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.652562][ T7867] netlink: 44 bytes leftover after parsing attributes in process `syz.2.488'. [ 88.662951][ T7869] sctp: [Deprecated]: syz.1.489 (pid 7869) Use of int in max_burst socket option. [ 88.662951][ T7869] Use struct sctp_assoc_value instead [ 88.777349][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 88.780627][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 88.783374][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 88.791941][ T7874] syz_tun: entered promiscuous mode [ 88.794875][ T7874] syz_tun: left promiscuous mode [ 88.904381][ T6081] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 88.911148][ T7881] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 89.035379][ T99] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.054384][ T6081] usb 7-1: Using ep0 maxpacket: 32 [ 89.057320][ T6081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.060564][ T6081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.063432][ T6081] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 89.067972][ T6081] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 89.070687][ T6081] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.074809][ T6081] usb 7-1: config 0 descriptor?? [ 89.704645][ T7867] 9pnet_fd: p9_fd_create_tcp (7867): problem connecting socket to 127.0.0.1 [ 89.712716][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 89.719129][ T6081] usbhid 7-1:0.0: can't add hid device: -71 [ 89.721046][ T6081] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 89.726527][ T6081] usb 7-1: USB disconnect, device number 4 [ 89.785340][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.788148][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.791956][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.796617][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.799448][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.884395][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.927676][ T7901] chnl_net:caif_netlink_parms(): no params data found [ 89.929368][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 89.997603][ T7924] uprobe: syz.3.506:7924 failed to unregister, leaking uprobe [ 90.007323][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.010155][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.012562][ T7901] bridge_slave_0: entered allmulticast mode [ 90.015515][ T7901] bridge_slave_0: entered promiscuous mode [ 90.019094][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.021355][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.023820][ T7901] bridge_slave_1: entered allmulticast mode [ 90.027711][ T7901] bridge_slave_1: entered promiscuous mode [ 90.041682][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 90.041690][ T40] audit: type=1400 audit(1750095539.776:480): avc: denied { connect } for pid=7932 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.057726][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.062040][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.099074][ T7901] team0: Port device team_slave_0 added [ 90.102384][ T7901] team0: Port device team_slave_1 added [ 90.131964][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.134177][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.142027][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.146939][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.149142][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.157242][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.195282][ T7901] hsr_slave_0: entered promiscuous mode [ 90.197510][ T7901] hsr_slave_1: entered promiscuous mode [ 90.199601][ T7901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.201954][ T7901] Cannot create hsr debugfs directory [ 90.254189][ T7936] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 90.415497][ T7946] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 90.522672][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.513'. [ 90.597706][ T7962] sch_tbf: burst 1885 is lower than device lo mtu (39799) ! [ 90.814462][ T61] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.836988][ T6081] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.844690][ T99] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.866648][ T40] audit: type=1400 audit(1750095540.606:481): avc: denied { read } for pid=7963 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.902082][ T40] audit: type=1400 audit(1750095540.636:482): avc: denied { setopt } for pid=7968 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.909467][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 90.909816][ T99] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.977433][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.980892][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.983948][ T61] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.990740][ T61] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.993680][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.997779][ T61] usb 7-1: config 0 descriptor?? [ 91.004792][ T6081] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.009341][ T6081] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 91.013296][ T6081] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.014397][ T99] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.017049][ T6081] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.023784][ T6081] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.026559][ T6081] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.030937][ T6081] usb 8-1: config 0 descriptor?? [ 91.032980][ T7962] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.125217][ T99] bridge_slave_1: left allmulticast mode [ 91.127008][ T99] bridge_slave_1: left promiscuous mode [ 91.128924][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.133813][ T99] bridge_slave_0: left allmulticast mode [ 91.137447][ T99] bridge_slave_0: left promiscuous mode [ 91.139260][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.346361][ T7976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.380050][ T7978] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 91.382398][ T99] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.389419][ T99] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.393387][ T99] bond0 (unregistering): Released all slaves [ 91.423243][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.427541][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.429901][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.432332][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.435060][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.437343][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.439904][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.441701][ T6081] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 91.442420][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.448321][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.448665][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 91.450810][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.457516][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.460286][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.461277][ T7980] macsec0: entered promiscuous mode [ 91.465168][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.467056][ T6081] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 91.470423][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.474728][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.476958][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.479164][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.481621][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.483269][ T6081] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 91.484882][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.491211][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.493577][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.496251][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.498770][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.501276][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.503818][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.507026][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.509332][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.511637][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.513971][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.518052][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.520436][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.522840][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.525629][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.527901][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.530184][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.532645][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.535265][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.537550][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.540193][ T61] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 91.546093][ T61] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw2: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 91.667367][ T7996] can: request_module (can-proto-0) failed. [ 91.760150][ T40] audit: type=1400 audit(1750095541.496:483): avc: denied { create } for pid=8000 comm="syz.1.524" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.769381][ T40] audit: type=1400 audit(1750095541.506:484): avc: denied { link } for pid=8000 comm="syz.1.524" name="#b" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.777006][ T40] audit: type=1400 audit(1750095541.506:485): avc: denied { rename } for pid=8000 comm="syz.1.524" name="#c" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.800483][ T99] hsr_slave_0: left promiscuous mode [ 91.803004][ T99] hsr_slave_1: left promiscuous mode [ 91.806543][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.809343][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.817234][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.819703][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.843560][ T99] veth1_macvtap: left promiscuous mode [ 91.846913][ T99] veth0_macvtap: left promiscuous mode [ 91.848702][ T99] veth1_vlan: left promiscuous mode [ 91.850328][ T99] veth0_vlan: left promiscuous mode [ 91.885119][ T5950] Bluetooth: hci0: command tx timeout [ 91.891610][ T6024] hid-generic 0000:0005:0009.0006: ignoring exceeding usage max [ 91.896494][ T6024] hid-generic 0000:0005:0009.0006: reserved main item tag 0xd [ 91.899243][ T6024] hid-generic 0000:0005:0009.0006: item 0 0 0 11 parsing failed [ 91.905217][ T6024] hid-generic 0000:0005:0009.0006: probe with driver hid-generic failed with error -22 [ 91.964488][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.348226][ T99] team0 (unregistering): Port device team_slave_1 removed [ 92.404713][ T99] team0 (unregistering): Port device team_slave_0 removed [ 92.668023][ T54] usb 7-1: USB disconnect, device number 5 [ 92.796939][ T4371] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 92.904421][ T7901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.909292][ T7901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.918411][ T7901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.924651][ T4371] usb 8-1: device descriptor read/64, error -32 [ 92.928543][ T7901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.009271][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.029452][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.041412][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.044900][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.060969][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.064062][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.083729][ T7901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.087930][ T7901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.134483][ T40] audit: type=1400 audit(1750095542.866:486): avc: denied { create } for pid=8034 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.153992][ T40] audit: type=1400 audit(1750095542.876:487): avc: denied { write } for pid=8034 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.184610][ T4371] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 93.207732][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.229225][ T40] audit: type=1400 audit(1750095542.966:488): avc: denied { map } for pid=8047 comm="syz.2.528" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.235049][ T7901] veth0_vlan: entered promiscuous mode [ 93.244892][ T7901] veth1_vlan: entered promiscuous mode [ 93.258320][ T7901] veth0_macvtap: entered promiscuous mode [ 93.261912][ T7901] veth1_macvtap: entered promiscuous mode [ 93.272121][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.277707][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.281903][ T7901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.286061][ T7901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.288686][ T7901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.291303][ T7901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.315069][ T4371] usb 8-1: device descriptor read/64, error -32 [ 93.328928][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.331316][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.352294][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.364368][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.375529][ T40] audit: type=1400 audit(1750095543.116:489): avc: denied { mounton } for pid=7901 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 93.426274][ T8056] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 93.455608][ T8058] __nla_validate_parse: 4 callbacks suppressed [ 93.455619][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 93.566760][ T4371] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 93.585394][ T4371] usb 8-1: device descriptor read/8, error -32 [ 93.676416][ T8065] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 93.727434][ T8073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=174 sclass=netlink_tcpdiag_socket pid=8073 comm=syz.3.536 [ 93.806668][ T8083] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 93.924446][ T8097] sch_fq: defrate 4294967292 ignored. [ 93.965564][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 93.976201][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 94.035824][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.077663][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 94.461199][ T8126] fuse: Unknown parameter 'allow_o' [ 94.498088][ T6007] usb 8-1: USB disconnect, device number 4 [ 94.563898][ T8131] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 94.679272][ T8138] xt_hashlimit: size too large, truncated to 1048576 [ 94.754701][ T8098] delete_channel: no stack [ 94.789500][ T8147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.792918][ T8149] netlink: 'syz.2.554': attribute type 6 has an invalid length. [ 94.848980][ T8152] netlink: 'syz.2.555': attribute type 9 has an invalid length. [ 94.941351][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 94.974553][ T838] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 94.989062][ T8160] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 95.008886][ T8162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.011934][ T8162] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8162 comm=syz.2.560 [ 95.021341][ T8164] bridge1: entered promiscuous mode [ 95.025830][ T8165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.028557][ T8165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.031260][ T8165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.034049][ T8165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.037436][ T8165] geneve2: entered promiscuous mode [ 95.039156][ T8165] geneve2: entered allmulticast mode [ 95.095042][ T8173] netlink: 'syz.3.563': attribute type 11 has an invalid length. [ 95.146135][ T838] usb 6-1: Using ep0 maxpacket: 32 [ 95.149201][ T838] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 95.151945][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.156429][ T838] usb 6-1: config 0 descriptor?? [ 95.161011][ T838] as10x_usb: device has been detected [ 95.163097][ T838] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 95.176302][ T838] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 95.192144][ T838] as10x_usb: error during firmware upload part1 [ 95.194278][ T838] Registered device nBox DVB-T Dongle [ 95.212396][ T8177] /dev/nullb0: Can't open blockdev [ 95.243287][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 95.243296][ T40] audit: type=1400 audit(1750095544.976:498): avc: denied { getopt } for pid=8178 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.363475][ T838] usb 6-1: USB disconnect, device number 4 [ 95.375786][ T838] Unregistered device nBox DVB-T Dongle [ 95.378045][ T838] as10x_usb: device has been disconnected [ 95.396271][ T8183] xt_recent: Unsupported userspace flags (000000c7) [ 95.550256][ T99] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.341565][ T8191] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 96.407724][ T40] audit: type=1400 audit(1750095546.146:499): avc: denied { append } for pid=8197 comm="syz.1.574" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.449824][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.453491][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.456673][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.459907][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.462788][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.530504][ T8198] /dev/nullb0: Can't open blockdev [ 96.585843][ T8203] chnl_net:caif_netlink_parms(): no params data found [ 96.666909][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.669165][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.671498][ T8203] bridge_slave_0: entered allmulticast mode [ 96.674114][ T8203] bridge_slave_0: entered promiscuous mode [ 96.677807][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.680217][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.682533][ T8203] bridge_slave_1: entered allmulticast mode [ 96.685450][ T8203] bridge_slave_1: entered promiscuous mode [ 96.726841][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.728082][ T8220] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.578'. [ 96.731197][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.769978][ T8203] team0: Port device team_slave_0 added [ 96.773411][ T8203] team0: Port device team_slave_1 added [ 96.805178][ T8226] netlink: 'syz.1.580': attribute type 15 has an invalid length. [ 96.808041][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.810324][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.820743][ T8203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.825205][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.827375][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.836547][ T8203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.841194][ T8233] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 96.881926][ T8203] hsr_slave_0: entered promiscuous mode [ 96.884226][ T8203] hsr_slave_1: entered promiscuous mode [ 96.941544][ T40] audit: type=1400 audit(1750095546.676:500): avc: denied { accept } for pid=8239 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.071227][ T8250] trusted_key: syz.1.587 sent an empty control message without MSG_MORE. [ 97.078345][ T40] audit: type=1400 audit(1750095546.826:501): avc: denied { read } for pid=8249 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.088023][ T8246] overlay: Unknown parameter 'func' [ 97.089811][ T40] audit: type=1400 audit(1750095546.836:502): avc: denied { mount } for pid=8245 comm="syz.3.586" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 97.099625][ T40] audit: type=1400 audit(1750095546.836:503): avc: denied { mounton } for pid=8245 comm="syz.3.586" path="/204/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 97.118925][ T40] audit: type=1400 audit(1750095546.856:504): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 97.128523][ T8252] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 97.133800][ T40] audit: type=1400 audit(1750095546.876:505): avc: denied { read } for pid=8251 comm="syz.1.588" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 97.142393][ T40] audit: type=1400 audit(1750095546.876:506): avc: denied { open } for pid=8251 comm="syz.1.588" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 97.206842][ T99] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.207958][ T8260] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 97.255805][ T99] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.326701][ T99] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.420455][ T40] audit: type=1400 audit(1750095547.156:507): avc: denied { view } for pid=8268 comm="syz.3.594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 97.427235][ T8269] vivid-001: ================= START STATUS ================= [ 97.430946][ T8269] vivid-001: Radio HW Seek Mode: Bounded [ 97.432927][ T8269] vivid-001: Radio Programmable HW Seek: false [ 97.435269][ T8269] vivid-001: RDS Rx I/O Mode: Block I/O [ 97.437072][ T8269] vivid-001: Generate RBDS Instead of RDS: false [ 97.439167][ T8269] vivid-001: RDS Reception: true [ 97.440915][ T8269] vivid-001: RDS Program Type: 0 inactive [ 97.442704][ T8269] vivid-001: RDS PS Name: inactive [ 97.446036][ T8269] vivid-001: RDS Radio Text: inactive [ 97.447772][ T8269] vivid-001: RDS Traffic Announcement: false inactive [ 97.449899][ T8269] vivid-001: RDS Traffic Program: false inactive [ 97.451867][ T8269] vivid-001: RDS Music: false inactive [ 97.453636][ T8269] vivid-001: ================== END STATUS ================== [ 97.475052][ T99] bridge_slave_1: left allmulticast mode [ 97.476877][ T99] bridge_slave_1: left promiscuous mode [ 97.478833][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.482899][ T99] bridge_slave_0: left allmulticast mode [ 97.485109][ T99] bridge_slave_0: left promiscuous mode [ 97.486976][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.659078][ T8285] openvswitch: netlink: Flow key attr not present in new flow. [ 97.663775][ T8285] netlink: 52 bytes leftover after parsing attributes in process `syz.3.599'. [ 97.717971][ T8289] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 97.824404][ T99] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.830481][ T99] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.835011][ T99] bond0 (unregistering): Released all slaves [ 97.877470][ T8305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.936478][ T8309] /dev/nullb0: Can't open blockdev [ 98.139711][ T8325] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 98.173718][ T99] hsr_slave_0: left promiscuous mode [ 98.178327][ T99] hsr_slave_1: left promiscuous mode [ 98.181137][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.184242][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.188911][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.192110][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.204603][ T6007] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 98.217076][ T99] veth1_macvtap: left promiscuous mode [ 98.218863][ T99] veth0_macvtap: left promiscuous mode [ 98.220674][ T99] veth1_vlan: left promiscuous mode [ 98.222449][ T99] veth0_vlan: left promiscuous mode [ 98.354572][ T6007] usb 8-1: Using ep0 maxpacket: 32 [ 98.358271][ T6007] usb 8-1: config 1 interface 0 altsetting 158 bulk endpoint 0x1 has invalid maxpacket 64 [ 98.361442][ T6007] usb 8-1: config 1 interface 0 altsetting 158 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.365767][ T6007] usb 8-1: config 1 interface 0 has no altsetting 0 [ 98.384908][ T6007] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 98.387847][ T6007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.390397][ T6007] usb 8-1: Product: ж [ 98.391827][ T6007] usb 8-1: Manufacturer: @ê‹â…â¨˜à¥½ã¼„Éžî–´è­¦î¥”â”‚à»ªæ‰ [ 98.394206][ T6007] usb 8-1: SerialNumber: â°Š [ 98.397932][ T8312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.524618][ T63] Bluetooth: hci0: command tx timeout [ 98.749291][ T99] team0 (unregistering): Port device team_slave_1 removed [ 98.805919][ T99] team0 (unregistering): Port device team_slave_0 removed [ 99.035319][ T8335] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 99.275017][ T6007] usb 8-1: USB disconnect, device number 5 [ 99.384166][ T8203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.392930][ T8203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.402412][ T8203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.410802][ T8203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.454371][ T8372] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 99.490124][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.509073][ T8203] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.527126][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.530413][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.535909][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.538868][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.596892][ T8203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.603075][ T8203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.655610][ T8383] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 99.698550][ T8385] trusted_key: encrypted_key: insufficient parameters specified [ 99.909547][ T8401] batman_adv: batadv0: Adding interface: dummy0 [ 99.913181][ T8401] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.926737][ T8401] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 100.002939][ T8203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.021564][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.627'. [ 100.021821][ T8395] binder: 8393:8395 ioctl 400c620e 200000001580 returned -22 [ 100.095415][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.113675][ T8203] veth0_vlan: entered promiscuous mode [ 100.124435][ T8203] veth1_vlan: entered promiscuous mode [ 100.161101][ T6024] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 100.183330][ T8203] veth0_macvtap: entered promiscuous mode [ 100.190601][ T8203] veth1_macvtap: entered promiscuous mode [ 100.205919][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.214790][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.226877][ T8203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.230300][ T8203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.236775][ T8203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.240346][ T8203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.257821][ T8412] usb usb4: usbfs: interface 0 claimed by hub while 'syz.3.630' sets config #5 [ 100.354790][ T6024] usb 6-1: Using ep0 maxpacket: 32 [ 100.358766][ T6024] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 100.371481][ T6024] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 100.375705][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.379994][ T6024] usb 6-1: Product: syz [ 100.380835][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.382449][ T6024] usb 6-1: Manufacturer: syz [ 100.405272][ T6024] usb 6-1: SerialNumber: syz [ 100.414318][ T6024] usb 6-1: config 0 descriptor?? [ 100.420304][ T8398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.422486][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.433374][ T6024] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input11 [ 100.440392][ T8415] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 100.460728][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.462660][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.600153][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.608121][ T63] Bluetooth: hci0: command 0x041b tx timeout [ 100.693419][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.700880][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.788298][ T5993] usb 6-1: USB disconnect, device number 5 [ 100.790654][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 100.835762][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.989224][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 100.989243][ T40] audit: type=1400 audit(1750095550.736:518): avc: denied { read append } for pid=8422 comm="syz.3.634" path="/226/file0/cgroup.stat" dev="9p" ino=39583819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.998521][ T8426] netlink: 212376 bytes leftover after parsing attributes in process `#! ./file0 {:\''. [ 101.265883][ T40] audit: type=1400 audit(1750095551.006:519): avc: denied { setopt } for pid=8427 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.512667][ T8434] binder: 8432:8434 ioctl 4090ae82 200000000340 returned -22 [ 101.518427][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 101.522860][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 101.652108][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.908692][ T6007] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 102.075235][ T6007] usb 8-1: Using ep0 maxpacket: 32 [ 102.112365][ T6007] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 102.116108][ T6007] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 102.119800][ T6007] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 102.123737][ T6007] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.128327][ T6007] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.132801][ T6007] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.141788][ T6007] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 102.145425][ T6007] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.156789][ T6007] usb 8-1: config 0 descriptor?? [ 102.362959][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.398486][ T6007] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 102.438211][ T6007] usb 8-1: USB disconnect, device number 6 [ 102.462927][ T6007] usblp0: removed [ 102.468168][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.588446][ T8448] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 102.820207][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.907169][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.935158][ T6007] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 103.064736][ T6007] usb 8-1: device descriptor read/64, error -71 [ 103.332108][ T6007] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 103.465551][ T6007] usb 8-1: device descriptor read/64, error -71 [ 103.578774][ T6007] usb usb8-port1: attempt power cycle [ 103.848168][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.939514][ T6007] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 104.001872][ T8456] bond2: entered promiscuous mode [ 104.015079][ T6007] usb 8-1: device descriptor read/8, error -71 [ 104.018900][ T8456] bond2: entered allmulticast mode [ 104.019351][ T8456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.231867][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.297590][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.310572][ T6007] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 104.324468][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.334781][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.346890][ T6007] usb 8-1: device descriptor read/8, error -71 [ 104.362435][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.372291][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.406799][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.418950][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.484848][ T6007] usb usb8-port1: unable to enumerate USB device [ 104.510001][ T8482] /dev/nullb0: Can't open blockdev [ 104.624572][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.743596][ T8489] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 104.837572][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.097174][ T8504] geneve2: entered promiscuous mode [ 105.100663][ T8504] geneve2: entered allmulticast mode [ 105.144106][ T8478] chnl_net:caif_netlink_parms(): no params data found [ 105.178584][ T40] audit: type=1400 audit(1750095554.916:520): avc: denied { create } for pid=8505 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 105.199193][ T40] audit: type=1400 audit(1750095554.936:521): avc: denied { create } for pid=8505 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.210680][ T40] audit: type=1400 audit(1750095554.936:522): avc: denied { ioctl } for pid=8505 comm="syz.2.657" path="socket:[27692]" dev="sockfs" ino=27692 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 105.224759][ T40] audit: type=1400 audit(1750095554.936:523): avc: denied { ioctl } for pid=8505 comm="syz.2.657" path="socket:[27691]" dev="sockfs" ino=27691 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.267741][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.285366][ T8506] bond0: (slave rose0): Enslaving as an active interface with an up link [ 105.436553][ T13] bridge_slave_1: left allmulticast mode [ 105.440165][ T13] bridge_slave_1: left promiscuous mode [ 105.443775][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.481045][ T13] bridge_slave_0: left allmulticast mode [ 105.483313][ T13] bridge_slave_0: left promiscuous mode [ 105.485193][ T40] audit: type=1400 audit(1750095555.226:524): avc: denied { getopt } for pid=8516 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.486351][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.516282][ T5950] Bluetooth: hci0: command tx timeout [ 106.537166][ T8540] fuse: Bad value for 'rootmode' [ 106.892786][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.918769][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.946501][ T13] bond0 (unregistering): Released all slaves [ 107.137317][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.144508][ T8478] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.150153][ T8478] bridge_slave_0: entered allmulticast mode [ 107.179727][ T8478] bridge_slave_0: entered promiscuous mode [ 107.195754][ T8478] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.199036][ T8478] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.202579][ T8478] bridge_slave_1: entered allmulticast mode [ 107.225992][ T8478] bridge_slave_1: entered promiscuous mode [ 107.239845][ T8549] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 107.704873][ T8478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.729871][ T8478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.845530][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.675'. [ 107.960925][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 108.100287][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.677'. [ 108.154463][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.678'. [ 108.237378][ T8596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.278700][ T8596] netlink: 'syz.3.679': attribute type 2 has an invalid length. [ 108.282873][ T8596] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 108.289849][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 108.320160][ T8478] team0: Port device team_slave_0 added [ 108.331283][ T8478] team0: Port device team_slave_1 added [ 108.550079][ T99] Bluetooth: Error in BCSP hdr checksum [ 108.604163][ T63] Bluetooth: hci0: command tx timeout [ 108.624038][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.744031][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.804630][ T99] Bluetooth: Error in BCSP hdr checksum [ 109.029349][ T8601] netlink: 52 bytes leftover after parsing attributes in process `syz.1.680'. [ 109.032691][ T8601] tipc: Invalid UDP bearer configuration [ 109.032736][ T8601] tipc: Enabling of bearer rejected, failed to enable media [ 109.079757][ T99] Bluetooth: Error in BCSP hdr checksum [ 109.165034][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.168194][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.189148][ T8478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.373092][ T13] hsr_slave_0: left promiscuous mode [ 109.404178][ T13] hsr_slave_1: left promiscuous mode [ 109.412118][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.422354][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.445510][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.450004][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.589555][ T13] veth1_macvtap: left promiscuous mode [ 109.625049][ T13] veth0_macvtap: left promiscuous mode [ 109.627589][ T13] veth1_vlan: left promiscuous mode [ 109.629992][ T13] veth0_vlan: left promiscuous mode [ 109.937335][ T8614] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 110.368608][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 110.476083][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.545643][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.684436][ T63] Bluetooth: hci0: command tx timeout [ 110.754451][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.928358][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.960009][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.485589][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.899791][ T13] team0 (unregistering): Port device team_slave_1 removed [ 112.269337][ T13] team0 (unregistering): Port device team_slave_0 removed [ 112.755262][ T63] Bluetooth: hci0: command tx timeout [ 114.257559][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.260459][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.271051][ T8478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.459622][ T40] audit: type=1400 audit(1750095564.196:525): avc: denied { wake_alarm } for pid=8630 comm="syz.3.690" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.630379][ T8640] ipvlan2: entered promiscuous mode [ 114.650869][ T8640] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 114.681885][ T8478] hsr_slave_0: entered promiscuous mode [ 114.688429][ T8478] hsr_slave_1: entered promiscuous mode [ 114.935523][ T8650] bond0: (slave team0): Releasing backup interface [ 114.964385][ T8650] bridge_slave_0: left allmulticast mode [ 115.020214][ T8650] bridge_slave_0: left promiscuous mode [ 115.029951][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.128244][ T8650] bridge_slave_1: left allmulticast mode [ 115.156512][ T8650] bridge_slave_1: left promiscuous mode [ 115.167099][ T8650] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.217827][ T8650] bond0: (slave bond_slave_0): Releasing backup interface [ 115.277119][ T8650] bond0: (slave bond_slave_1): Releasing backup interface [ 115.294417][ T8650] team0: Port device team_slave_0 removed [ 115.308931][ T8650] team0: Port device team_slave_1 removed [ 115.314168][ T8650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.321648][ T8650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.613673][ T8657] IPVS: Error connecting to the multicast addr [ 115.740666][ T8664] sit0: left allmulticast mode [ 115.914414][ T40] audit: type=1400 audit(1750095565.636:526): avc: denied { connect } for pid=8666 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.993642][ T8670] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 116.553267][ T8688] netlink: 'syz.2.700': attribute type 9 has an invalid length. [ 116.764056][ C3] vkms_vblank_simulate: vblank timer overrun [ 116.892723][ C3] vkms_vblank_simulate: vblank timer overrun [ 116.945615][ T8697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.703'. [ 117.256169][ T40] audit: type=1400 audit(1750095566.986:527): avc: denied { remount } for pid=8715 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.388768][ T63] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 117.644042][ C3] vkms_vblank_simulate: vblank timer overrun [ 117.686259][ T8478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.732325][ T6024] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 117.835797][ T8478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.898431][ T8478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.965913][ T8478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.978338][ T6024] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.982342][ T6024] usb 8-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config [ 117.989542][ T6024] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.994241][ T6024] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 224, changing to 11 [ 117.999070][ T6024] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25318, setting to 1024 [ 118.010269][ T6024] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.015804][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.019800][ T6024] usb 8-1: Product: syz [ 118.021962][ T6024] usb 8-1: Manufacturer: syz [ 118.028895][ C3] vkms_vblank_simulate: vblank timer overrun [ 118.037159][ T6024] cdc_wdm 8-1:1.0: skipping garbage [ 118.042025][ T6024] cdc_wdm 8-1:1.0: skipping garbage [ 118.047122][ T6024] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 118.071392][ T6024] cdc_wdm 8-1:1.0: Unknown control protocol [ 118.084281][ T8743] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 118.133413][ C3] vkms_vblank_simulate: vblank timer overrun [ 118.240905][ T8478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.247030][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.710'. [ 118.251716][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 118.256021][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.710'. [ 118.259477][ C3] vkms_vblank_simulate: vblank timer overrun [ 118.269534][ T10] usb 8-1: USB disconnect, device number 11 [ 118.270437][ T8478] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.288019][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.292842][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.312960][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.316872][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.684873][ T8478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.749357][ T8478] veth0_vlan: entered promiscuous mode [ 118.790224][ T8763] can0: slcan on ptm0. [ 118.795215][ T8478] veth1_vlan: entered promiscuous mode [ 118.883602][ T40] audit: type=1400 audit(1750095568.626:528): avc: denied { map } for pid=8762 comm="syz.2.712" path="socket:[29921]" dev="sockfs" ino=29921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 118.910285][ T8478] veth0_macvtap: entered promiscuous mode [ 118.950384][ T8478] veth1_macvtap: entered promiscuous mode [ 118.997090][ T8762] can0 (unregistered): slcan off ptm0. [ 119.003791][ T8478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.019642][ T8478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.030853][ C3] vkms_vblank_simulate: vblank timer overrun [ 119.070546][ T8478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.077247][ C3] vkms_vblank_simulate: vblank timer overrun [ 119.093534][ T8478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.117092][ C3] vkms_vblank_simulate: vblank timer overrun [ 119.136167][ T8478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.143026][ T8478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.284972][ T40] audit: type=1404 audit(1750095568.996:529): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 119.309401][ T40] audit: type=1400 audit(1750095569.046:530): avc: denied { search } for pid=8775 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.317695][ T73] Bluetooth: hci4: Frame reassembly failed (-84) [ 119.335118][ T40] audit: type=1400 audit(1750095569.066:531): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.335759][ T8779] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 119.367072][ T40] audit: type=1400 audit(1750095569.066:532): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.374046][ T8779] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 119.406262][ T40] audit: type=1400 audit(1750095569.066:533): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.434629][ T40] audit: type=1400 audit(1750095569.066:534): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.456945][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.456968][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.505582][ T40] audit: type=1400 audit(1750095569.066:535): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.521593][ T40] audit: type=1400 audit(1750095569.066:536): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.532808][ T40] audit: type=1400 audit(1750095569.066:537): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.550931][ T40] audit: type=1400 audit(1750095569.066:538): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.573100][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.579779][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.589012][ T40] audit: type=1400 audit(1750095569.066:539): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.632902][ T40] audit: type=1400 audit(1750095569.066:540): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.684474][ T40] audit: type=1400 audit(1750095569.066:541): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.709022][ T40] audit: type=1400 audit(1750095569.066:542): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.723168][ T8478] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.723932][ T40] audit: type=1400 audit(1750095569.066:543): avc: denied { search } for pid=8780 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 119.859960][ C3] vkms_vblank_simulate: vblank timer overrun [ 120.208058][ C3] vkms_vblank_simulate: vblank timer overrun [ 120.507993][ C3] vkms_vblank_simulate: vblank timer overrun [ 120.788005][ C3] vkms_vblank_simulate: vblank timer overrun [ 121.015961][ T8809] overlayfs: cannot append lower layer [ 121.023714][ T8809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.719'. [ 121.031167][ T8809] netem: unknown loss type 13 [ 121.038772][ T8809] netem: change failed [ 121.050149][ T8812] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 121.314476][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.476840][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 121.687799][ T10] usb 8-1: device descriptor read/64, error -71 [ 121.727208][ T8823] fuse: blksize only supported for fuseblk [ 121.733776][ T8821] binder: 8820:8821 ioctl c0306201 0 returned -14 [ 121.749478][ T8821] Bluetooth: MGMT ver 1.23 [ 121.787060][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.961251][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 122.061089][ C3] vkms_vblank_simulate: vblank timer overrun [ 122.108250][ T10] usb 8-1: device descriptor read/64, error -71 [ 122.218580][ T10] usb usb8-port1: attempt power cycle [ 122.577285][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 122.595879][ T10] usb 8-1: device descriptor read/8, error -71 [ 122.854914][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 122.895567][ T10] usb 8-1: device descriptor read/8, error -71 [ 122.912579][ C3] vkms_vblank_simulate: vblank timer overrun [ 122.941197][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.039508][ T8829] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 123.056478][ T10] usb usb8-port1: unable to enumerate USB device [ 123.247985][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.368982][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.389680][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.394046][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.399958][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.420625][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.424844][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.459944][ C3] vkms_vblank_simulate: vblank timer overrun [ 123.750866][ T1144] bridge_slave_1: left allmulticast mode [ 123.754226][ T1144] bridge_slave_1: left promiscuous mode [ 123.757418][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.772123][ T1144] bridge_slave_0: left allmulticast mode [ 123.779035][ T1144] bridge_slave_0: left promiscuous mode [ 123.791869][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.804469][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.052560][ T8849] xt_hashlimit: size too large, truncated to 1048576 [ 124.412016][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 124.415874][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 124.426809][ T8861] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 124.651377][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.684975][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.692290][ T1144] bond0 (unregistering): Released all slaves [ 124.739885][ T8837] chnl_net:caif_netlink_parms(): no params data found [ 124.949951][ T40] kauditd_printk_skb: 153 callbacks suppressed [ 124.949967][ T40] audit: type=1400 audit(1750095574.696:692): avc: denied { bind } for pid=8865 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.967775][ T40] audit: type=1400 audit(1750095574.696:693): avc: denied { node_bind } for pid=8865 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 124.985286][ T40] audit: type=1400 audit(1750095574.696:694): avc: denied { connect } for pid=8865 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.065001][ T40] audit: type=1400 audit(1750095574.806:695): avc: denied { read } for pid=8870 comm="syz.1.736" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 125.069517][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.737'. [ 125.101315][ T40] audit: type=1400 audit(1750095574.806:696): avc: denied { open } for pid=8870 comm="syz.1.736" path="/dev/video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 125.119098][ T40] audit: type=1400 audit(1750095574.836:697): avc: denied { write } for pid=8870 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.131762][ T40] audit: type=1400 audit(1750095574.836:698): avc: denied { name_connect } for pid=8870 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 125.162126][ T40] audit: type=1400 audit(1750095574.846:699): avc: denied { ioctl } for pid=8870 comm="syz.1.736" path="/dev/video7" dev="devtmpfs" ino=975 ioctlcmd=0x5649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 125.191127][ T40] audit: type=1400 audit(1750095574.876:700): avc: denied { set_context_mgr } for pid=8873 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 125.312819][ T40] audit: type=1400 audit(1750095575.046:701): avc: denied { mounton } for pid=8880 comm="syz.2.739" path="/208/file0" dev="tmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.443980][ T8889] netlink: 'syz.3.740': attribute type 7 has an invalid length. [ 125.504497][ T5950] Bluetooth: hci0: command tx timeout [ 125.580562][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.597320][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.609795][ T8879] netlink: 56 bytes leftover after parsing attributes in process `syz.1.738'. [ 125.621076][ T8837] bridge_slave_0: entered allmulticast mode [ 125.632895][ T8837] bridge_slave_0: entered promiscuous mode [ 125.749047][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.752455][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.764736][ T8837] bridge_slave_1: entered allmulticast mode [ 125.810438][ T8837] bridge_slave_1: entered promiscuous mode [ 125.910871][ T8907] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 125.997061][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.012754][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.022154][ T8909] binder: 8908:8909 unknown command 0 [ 126.024985][ T8909] binder: 8908:8909 ioctl c0306201 200000000080 returned -22 [ 126.094068][ T1144] hsr_slave_0: left promiscuous mode [ 126.096947][ T1144] hsr_slave_1: left promiscuous mode [ 126.099449][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.107107][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.121760][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.126687][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.202614][ T1144] veth1_macvtap: left promiscuous mode [ 126.245195][ T1144] veth0_macvtap: left promiscuous mode [ 126.253361][ T1144] veth1_vlan: left promiscuous mode [ 126.256355][ T1144] veth0_vlan: left promiscuous mode [ 126.634977][ T8923] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.749'. [ 126.689303][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 127.561959][ T5950] Bluetooth: hci0: command tx timeout [ 128.945218][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 129.292309][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 129.644531][ T5950] Bluetooth: hci0: command tx timeout [ 131.164210][ T8909] pim6reg1: entered promiscuous mode [ 131.166953][ T8909] pim6reg1: entered allmulticast mode [ 131.231068][ T8837] team0: Port device team_slave_0 added [ 131.404826][ T8837] team0: Port device team_slave_1 added [ 131.460360][ T8931] netlink: 108 bytes leftover after parsing attributes in process `syz.3.751'. [ 131.472556][ T8931] netlink: 108 bytes leftover after parsing attributes in process `syz.3.751'. [ 131.486070][ T8931] netlink: 108 bytes leftover after parsing attributes in process `syz.3.751'. [ 131.529091][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 131.529108][ T40] audit: type=1400 audit(1750095581.256:722): avc: denied { unlink } for pid=8933 comm="syz.1.752" name="#f" dev="tmpfs" ino=1370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.579204][ T40] audit: type=1400 audit(1750095581.296:723): avc: denied { mount } for pid=8933 comm="syz.1.752" name="/" dev="overlay" ino=1365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 131.614821][ T40] audit: type=1400 audit(1750095581.346:724): avc: denied { create } for pid=8933 comm="syz.1.752" name="#11" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.649489][ T40] audit: type=1400 audit(1750095581.346:725): avc: denied { link } for pid=8933 comm="syz.1.752" name="#11" dev="tmpfs" ino=1374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.664904][ T40] audit: type=1400 audit(1750095581.346:726): avc: denied { rename } for pid=8933 comm="syz.1.752" name="#12" dev="tmpfs" ino=1374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.715977][ T5950] Bluetooth: hci0: command tx timeout [ 131.857666][ T40] audit: type=1400 audit(1750095581.596:727): avc: denied { write } for pid=8939 comm="syz.1.753" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.888879][ T8943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.754'. [ 131.918112][ T8943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.933086][ T8943] IPv6: NLM_F_CREATE should be set when creating new route [ 131.940163][ T8943] IPv6: NLM_F_CREATE should be set when creating new route [ 132.142647][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.145399][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.169154][ T8837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.200745][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.203870][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.234594][ T8837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.332009][ T40] audit: type=1400 audit(2000000000.229:728): avc: denied { name_bind } for pid=8956 comm="syz.3.757" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 132.353364][ T8957] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 132.384005][ T40] audit: type=1400 audit(2000000000.299:729): avc: denied { mount } for pid=8960 comm="syz.1.759" name="/" dev="ramfs" ino=27354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 132.423978][ T40] audit: type=1400 audit(2000000000.329:730): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 132.498465][ T8837] hsr_slave_0: entered promiscuous mode [ 132.503825][ T8837] hsr_slave_1: entered promiscuous mode [ 132.598602][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.600562][ T8955] syz.2.755 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 132.619456][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.845557][ T8975] tmpfs: Unknown parameter 'l' [ 132.849218][ T40] audit: type=1400 audit(2000000000.779:731): avc: denied { remount } for pid=8972 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.934903][ T5993] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 133.114482][ T5993] usb 6-1: Invalid ep0 maxpacket: 64 [ 133.254533][ T5993] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 133.434527][ T5993] usb 6-1: Invalid ep0 maxpacket: 64 [ 133.436919][ T5993] usb usb6-port1: attempt power cycle [ 133.784470][ T5993] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 133.816302][ T5993] usb 6-1: Invalid ep0 maxpacket: 64 [ 133.965933][ T5993] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 133.995231][ T5993] usb 6-1: Invalid ep0 maxpacket: 64 [ 133.997783][ T5993] usb usb6-port1: unable to enumerate USB device [ 135.766723][ T8981] bio_check_eod: 15 callbacks suppressed [ 135.766739][ T8981] syz.1.764: attempt to access beyond end of device [ 135.766739][ T8981] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 135.775659][ T8981] EXT4-fs (nbd1): unable to read superblock [ 147.862353][ T1425] ================================================================== [ 147.867824][ T1425] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 147.874458][ T1425] Read of size 1 at addr ffff88802bc0e490 by task aoe_tx0/1425 [ 147.879453][ T1425] [ 147.880557][ T1425] CPU: 2 UID: 0 PID: 1425 Comm: aoe_tx0 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 147.880580][ T1425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.880591][ T1425] Call Trace: [ 147.880600][ T1425] [ 147.880610][ T1425] dump_stack_lvl+0x116/0x1f0 [ 147.880651][ T1425] print_report+0xcd/0x680 [ 147.880675][ T1425] ? __virt_addr_valid+0x81/0x610 [ 147.880694][ T1425] ? __phys_addr+0xe8/0x180 [ 147.880713][ T1425] ? handle_tx+0x5dc/0x630 [ 147.880736][ T1425] kasan_report+0xe0/0x110 [ 147.880758][ T1425] ? handle_tx+0x5dc/0x630 [ 147.880784][ T1425] handle_tx+0x5dc/0x630 [ 147.880811][ T1425] dev_hard_start_xmit+0x94/0x740 [ 147.880835][ T1425] __dev_queue_xmit+0x7eb/0x43e0 [ 147.880857][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.880881][ T1425] ? finish_task_switch.isra.0+0x221/0xc10 [ 147.880903][ T1425] ? rcu_is_watching+0x12/0xc0 [ 147.880924][ T1425] ? __pfx___dev_queue_xmit+0x10/0x10 [ 147.880945][ T1425] ? __lock_acquire+0xb8a/0x1c90 [ 147.880970][ T1425] ? __lock_acquire+0xb8a/0x1c90 [ 147.880996][ T1425] ? do_raw_spin_lock+0x12c/0x2b0 [ 147.881013][ T1425] ? find_held_lock+0x2b/0x80 [ 147.881032][ T1425] ? skb_dequeue+0x126/0x180 [ 147.881050][ T1425] ? find_held_lock+0x2b/0x80 [ 147.881070][ T1425] ? rcu_is_watching+0x12/0xc0 [ 147.881091][ T1425] tx+0xcc/0x190 [ 147.881112][ T1425] ? __pfx_tx+0x10/0x10 [ 147.881126][ T1425] kthread+0x1e4/0x3e0 [ 147.881148][ T1425] ? find_held_lock+0x2b/0x80 [ 147.881166][ T1425] ? __pfx_kthread+0x10/0x10 [ 147.881188][ T1425] ? __pfx_default_wake_function+0x10/0x10 [ 147.881208][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.881231][ T1425] ? __kthread_parkme+0x19e/0x250 [ 147.881253][ T1425] ? __pfx_kthread+0x10/0x10 [ 147.881275][ T1425] kthread+0x3c2/0x780 [ 147.881290][ T1425] ? __pfx_kthread+0x10/0x10 [ 147.881305][ T1425] ? rcu_is_watching+0x12/0xc0 [ 147.881324][ T1425] ? __pfx_kthread+0x10/0x10 [ 147.881339][ T1425] ret_from_fork+0x5d7/0x6f0 [ 147.881361][ T1425] ? __pfx_kthread+0x10/0x10 [ 147.881375][ T1425] ret_from_fork_asm+0x1a/0x30 [ 147.881397][ T1425] [ 147.881403][ T1425] [ 148.099266][ T1425] Allocated by task 7351: [ 148.102129][ T1425] kasan_save_stack+0x33/0x60 [ 148.105179][ T1425] kasan_save_track+0x14/0x30 [ 148.108444][ T1425] __kasan_kmalloc+0xaa/0xb0 [ 148.111826][ T1425] alloc_tty_struct+0x96/0x8c0 [ 148.114645][ T1425] tty_init_dev.part.0+0x1e/0x500 [ 148.117516][ T1425] tty_open+0xa50/0xf90 [ 148.119742][ T1425] chrdev_open+0x234/0x6a0 [ 148.122312][ T1425] do_dentry_open+0x744/0x1c10 [ 148.125754][ T1425] vfs_open+0x82/0x3f0 [ 148.127804][ T1425] path_openat+0x1de4/0x2cb0 [ 148.130563][ T1425] do_filp_open+0x20b/0x470 [ 148.132581][ T1425] do_sys_openat2+0x11b/0x1d0 [ 148.134492][ T1425] __x64_sys_openat+0x174/0x210 [ 148.137016][ T1425] do_syscall_64+0xcd/0x4c0 [ 148.139218][ T1425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.142350][ T1425] [ 148.159970][ T1425] Freed by task 61: [ 148.161803][ T1425] kasan_save_stack+0x33/0x60 [ 148.164222][ T1425] kasan_save_track+0x14/0x30 [ 148.166186][ T1425] kasan_save_free_info+0x3b/0x60 [ 148.168355][ T1425] __kasan_slab_free+0x51/0x70 [ 148.170419][ T1425] kfree+0x2b4/0x4d0 [ 148.192817][ T1425] process_one_work+0x9cc/0x1b70 [ 148.194979][ T1425] worker_thread+0x6c8/0xf10 [ 148.197167][ T1425] kthread+0x3c2/0x780 [ 148.198967][ T1425] ret_from_fork+0x5d7/0x6f0 [ 148.211859][ T1425] ret_from_fork_asm+0x1a/0x30 [ 148.214027][ T1425] [ 148.215067][ T1425] Last potentially related work creation: [ 148.228998][ T1425] kasan_save_stack+0x33/0x60 [ 148.235998][ T1425] kasan_record_aux_stack+0xa7/0xc0 [ 148.239393][ T1425] insert_work+0x36/0x230 [ 148.242173][ T1425] __queue_work+0x97e/0x10f0 [ 148.245206][ T1425] queue_work_on+0x1a4/0x1f0 [ 148.248343][ T1425] release_tty+0x4de/0x5d0 [ 148.250727][ T1425] tty_release_struct+0xb7/0xe0 [ 148.253253][ T1425] tty_release+0xe2d/0x1430 [ 148.255499][ T1425] __fput+0x3ff/0xb70 [ 148.257464][ T1425] task_work_run+0x150/0x240 [ 148.260065][ T1425] do_exit+0x864/0x2bd0 [ 148.262890][ T1425] do_group_exit+0xd3/0x2a0 [ 148.265438][ T1425] get_signal+0x2673/0x26d0 [ 148.268045][ T1425] arch_do_signal_or_restart+0x8f/0x7d0 [ 148.271807][ T1425] exit_to_user_mode_loop+0x84/0x110 [ 148.275079][ T1425] ret_from_fork+0x613/0x6f0 [ 148.277555][ T1425] ret_from_fork_asm+0x1a/0x30 [ 148.280605][ T1425] [ 148.282388][ T1425] The buggy address belongs to the object at ffff88802bc0e000 [ 148.282388][ T1425] which belongs to the cache kmalloc-cg-2k of size 2048 [ 148.292630][ T1425] The buggy address is located 1168 bytes inside of [ 148.292630][ T1425] freed 2048-byte region [ffff88802bc0e000, ffff88802bc0e800) [ 148.301589][ T1425] [ 148.302937][ T1425] The buggy address belongs to the physical page: [ 148.306635][ T1425] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bc08 [ 148.312958][ T1425] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 148.317884][ T1425] memcg:ffff888032f24b81 [ 148.320616][ T1425] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 148.325367][ T1425] page_type: f5(slab) [ 148.328053][ T1425] raw: 00fff00000000040 ffff88801b84c140 dead000000000100 dead000000000122 [ 148.333711][ T1425] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888032f24b81 [ 148.339862][ T1425] head: 00fff00000000040 ffff88801b84c140 dead000000000100 dead000000000122 [ 148.345058][ T1425] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888032f24b81 [ 148.350282][ T1425] head: 00fff00000000003 ffffea0000af0201 00000000ffffffff 00000000ffffffff [ 148.355024][ T1425] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 148.360068][ T1425] page dumped because: kasan: bad access detected [ 148.364070][ T1425] page_owner tracks the page as allocated [ 148.368078][ T1425] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6885, tgid 6884 (syz.2.225), ts 69787113621, free_ts 69470460946 [ 148.380314][ T1425] post_alloc_hook+0x1c0/0x230 [ 148.382796][ T1425] get_page_from_freelist+0x1321/0x3890 [ 148.385630][ T1425] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 148.388782][ T1425] alloc_pages_mpol+0x1fb/0x550 [ 148.391870][ T1425] new_slab+0x23b/0x330 [ 148.394579][ T1425] ___slab_alloc+0xd9c/0x1940 [ 148.397509][ T1425] __slab_alloc.constprop.0+0x56/0xb0 [ 148.400811][ T1425] __kvmalloc_node_noprof+0x3b1/0x620 [ 148.404147][ T1425] alloc_fdtable+0xee/0x2b0 [ 148.407057][ T1425] dup_fd+0x83b/0xb90 [ 148.409632][ T1425] ksys_unshare+0x831/0xa40 [ 148.412441][ T1425] __x64_sys_unshare+0x31/0x40 [ 148.415269][ T1425] do_syscall_64+0xcd/0x4c0 [ 148.418027][ T1425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.422485][ T1425] page last free pid 5352 tgid 5352 stack trace: [ 148.426428][ T1425] __free_frozen_pages+0x7fe/0x1180 [ 148.429647][ T1425] __put_partials+0x16d/0x1c0 [ 148.432731][ T1425] qlist_free_all+0x4d/0x120 [ 148.435890][ T1425] kasan_quarantine_reduce+0x195/0x1e0 [ 148.439469][ T1425] __kasan_slab_alloc+0x69/0x90 [ 148.442513][ T1425] __kmalloc_noprof+0x1d4/0x510 [ 148.445538][ T1425] tomoyo_realpath_from_path+0xc2/0x6e0 [ 148.449442][ T1425] tomoyo_path_perm+0x274/0x460 [ 148.453572][ T1425] security_inode_getattr+0x116/0x290 [ 148.456850][ T1425] vfs_fstat+0x4b/0xe0 [ 148.459104][ T1425] __do_sys_newfstat+0x87/0x100 [ 148.462061][ T1425] do_syscall_64+0xcd/0x4c0 [ 148.464705][ T1425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.468237][ T1425] [ 148.469944][ T1425] Memory state around the buggy address: [ 148.473741][ T1425] ffff88802bc0e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.478587][ T1425] ffff88802bc0e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.483318][ T1425] >ffff88802bc0e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.488172][ T1425] ^ [ 148.491575][ T1425] ffff88802bc0e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.496427][ T1425] ffff88802bc0e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.501053][ T1425] ================================================================== [ 148.505759][ T1425] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 148.509654][ T1425] CPU: 2 UID: 0 PID: 1425 Comm: aoe_tx0 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 148.515383][ T1425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.521581][ T1425] Call Trace: [ 148.523556][ T1425] [ 148.525492][ T1425] dump_stack_lvl+0x3d/0x1f0 [ 148.528212][ T1425] panic+0x71c/0x800 [ 148.530057][ T1425] ? __pfx_panic+0x10/0x10 [ 148.532620][ T1425] ? irqentry_exit+0x3b/0x90 [ 148.535624][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.538647][ T1425] ? handle_tx+0x5dc/0x630 [ 148.541178][ T1425] ? check_panic_on_warn+0x1f/0xb0 [ 148.543913][ T1425] ? handle_tx+0x5dc/0x630 [ 148.546344][ T1425] check_panic_on_warn+0xab/0xb0 [ 148.548558][ T1425] end_report+0x107/0x170 [ 148.550490][ T1425] kasan_report+0xee/0x110 [ 148.552630][ T1425] ? handle_tx+0x5dc/0x630 [ 148.555266][ T1425] handle_tx+0x5dc/0x630 [ 148.558789][ T1425] dev_hard_start_xmit+0x94/0x740 [ 148.563272][ T1425] __dev_queue_xmit+0x7eb/0x43e0 [ 148.566401][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.569695][ T1425] ? finish_task_switch.isra.0+0x221/0xc10 [ 148.573447][ T1425] ? rcu_is_watching+0x12/0xc0 [ 148.576505][ T1425] ? __pfx___dev_queue_xmit+0x10/0x10 [ 148.579981][ T1425] ? __lock_acquire+0xb8a/0x1c90 [ 148.583475][ T1425] ? __lock_acquire+0xb8a/0x1c90 [ 148.587016][ T1425] ? do_raw_spin_lock+0x12c/0x2b0 [ 148.590346][ T1425] ? find_held_lock+0x2b/0x80 [ 148.593125][ T1425] ? skb_dequeue+0x126/0x180 [ 148.595058][ T1425] ? find_held_lock+0x2b/0x80 [ 148.596984][ T1425] ? rcu_is_watching+0x12/0xc0 [ 148.599995][ T1425] tx+0xcc/0x190 [ 148.601978][ T1425] ? __pfx_tx+0x10/0x10 [ 148.604191][ T1425] kthread+0x1e4/0x3e0 [ 148.606959][ T1425] ? find_held_lock+0x2b/0x80 [ 148.609912][ T1425] ? __pfx_kthread+0x10/0x10 [ 148.612547][ T1425] ? __pfx_default_wake_function+0x10/0x10 [ 148.616081][ T1425] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.619533][ T1425] ? __kthread_parkme+0x19e/0x250 [ 148.623071][ T1425] ? __pfx_kthread+0x10/0x10 [ 148.625937][ T1425] kthread+0x3c2/0x780 [ 148.628467][ T1425] ? __pfx_kthread+0x10/0x10 [ 148.630973][ T1425] ? rcu_is_watching+0x12/0xc0 [ 148.633512][ T1425] ? __pfx_kthread+0x10/0x10 [ 148.636119][ T1425] ret_from_fork+0x5d7/0x6f0 [ 148.638983][ T1425] ? __pfx_kthread+0x10/0x10 [ 148.641540][ T1425] ret_from_fork_asm+0x1a/0x30 [ 148.644261][ T1425] [ 148.646527][ T1425] Kernel Offset: disabled [ 148.648332][ T1425] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:39:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000166571 RBX=0000000000000000 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19dd8 RDI=ffffffff8c1578a0 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a81450 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff4a3dff32 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c09440f 000055556c093d50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c08bc07 000055556c08b460 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010100003800401 00000008060c0167 d61080080001b003 02020001ae030000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001ffffffff ffffffffe5080194 0302020001920303 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe02000190030392 04880001880307ff fa04840001840314 04000180033cb29b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26ca340080100803 8003381000128004 0100000008060601 049207fffe080012 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 880302b8c2048400 1284031404001280 0374080004100014 100006006fbe0c08 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffe7 0812940302900200 12920303fc020012 9003038c04880012 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b003022080808082 0012ae0302020012 ac03000000000000 00000000000001ff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011080040288c080 1000068004058004 0010000a0141b200 020013bc03580200 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81b014f7 RDX=ffff88802900c880 RSI=ffffffff81b014e2 RDI=0000000000000005 RBP=ffffc9000382f960 RSP=ffffc9000382f800 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000705f08 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81b014e4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f13299b0ff8 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8f4c152569aa163 14d0effd380db6e9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0814898eea74174d db434937f24cdec1 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d547d782db765ac4 d63831e42ff85ffd ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 258eb9f48dbfed5d d4da6f26ca8b3859 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000011400 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000bb4a4736 000000530000005a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 72ee0ee8b2afa866 22950121b2ee8924 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063fc2800000000 0000005300000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000005a 0932b5e500000053 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e0c544b70f5e0d88 3ffbc1d7173d425f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 53fb5255d3fd9a74 b80b1694b3516668 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000c00000007 000000080010001e 0010000000140100 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0020000e00000000 0000000000000000 02fa000000200000 0002010000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00d60000000383ac 2980000000180000 00200000000e0014 000c000000080004 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080000003c0000 0054000000680000 007c000000900000 00a8000000bc0000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00d0000000e40000 00f80000010c0000 0120000000440000 005c0000013c0000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0150000001640000 0178000001900000 01a8000001bc0000 01d4000001e80000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0208000002200000 0234000002540000 001b000000000000 0000000000000000 ZMM24=b3b8bb28b3b8bb28 b3b8bb28b3b8bb28 b3b8bb28b3b8bb28 b3b8bb28b3b8bb28 b3b8bb28b3b8bb28 b3b8bb28b3b8bb28 b3b8bb28b3b8bb28 b3b8bb28b3b8bb28 ZMM25=49d917f449d917f4 49d917f449d917f4 49d917f449d917f4 49d917f449d917f4 49d917f449d917f4 49d917f449d917f4 49d917f449d917f4 49d917f449d917f4 ZMM26=54f43af854f43af8 54f43af854f43af8 54f43af854f43af8 54f43af854f43af8 54f43af854f43af8 54f43af854f43af8 54f43af854f43af8 54f43af854f43af8 ZMM27=912e30ab912e30ab 912e30ab912e30ab 912e30ab912e30ab 912e30ab912e30ab 912e30ab912e30ab 912e30ab912e30ab 912e30ab912e30ab 912e30ab912e30ab ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=f7060000f7060000 f7060000f7060000 f7060000f7060000 f7060000f7060000 f7060000f7060000 f7060000f7060000 f7060000f7060000 f7060000f7060000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855ba255 RDI=ffffffff9b0893a0 RBP=ffffffff9b089360 RSP=ffffc90006f9f458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032343154 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b089360 R15=ffffffff855ba1f0 RIP=ffffffff855ba27f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c358409 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a9266579ad877ece 04f4f07f23ede51a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6fa6e81eee70b6d0 9f83f7a28e7b36b3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 abe3161cde8459de 86e6e87726c0ae1a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2bfe23e2df5b74fd 49237f84e4f96ccf ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000011040 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78a1fdee00000236 6de80000ee620000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc1ec51e00517b51 00000051dd949535 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00517b42a5bd0000 4138366500000051 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f19a00007efdd21c 00517d53dd949535 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e14c6fff84e6dd6 91d02053e329c092 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e82dd26cf1f7fb87 aa613335ac31c414 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ccc184488 00007f7ccc184480 00007f7ccc184478 00007f7ccc184450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cccced100 00007f7ccc184440 00007f7ccc180004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ccc184498 00007f7ccc184490 00007f7ccc184488 00007f7ccc184480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a643a60 RCX=ffffffff81b0005d RDX=ffff88801daf0000 RSI=ffffffff81b00039 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900001078a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4c874d R15=ffff88806a73cf40 RIP=ffffffff81b0003b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555b9f35c8 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff89d02540 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc423c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc423c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc423c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc423c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc423c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc423c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000