last executing test programs: 3.43960532s ago: executing program 0 (id=944): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x4, 0x0, @val=@perf_event={0x2}}, 0x18) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, &(0x7f0000000280)="2d17fad737", 0x5, 0x20000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='xprtrdma_err_unrecognized\x00', r0, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x4, 0x0, @val=@perf_event={0x2}}, 0x18) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendto$inet6(r1, &(0x7f0000000280)="2d17fad737", 0x5, 0x20000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='xprtrdma_err_unrecognized\x00', r0, 0x0, 0x100}, 0x18) (async) 3.38012462s ago: executing program 0 (id=945): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0xc379b233464da889, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000fe"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@can_delroute={0x3c4, 0x19, 0x100, 0x70bd29, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x6c, 0x4e, 0x5e, 0xff, 0x0, "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", 0x2, "74a31f9793887d84e4ff8ad157b4d4c03afd4a45"}}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x6, 0x1, 0x0, 0x0, "9a3708c4d7825cce"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2f, 0x20, 0x13, 0x96, 0x7f, "1fb3e07979025d32975ca133048159092580ec46570aa350ec7d6127d6bf5a48543b24de55c1f534e470e1d5881dea8cbbbb74a53b70c4eb3e85aef2badb0427d462ad61653514789dc751d3c315108013db4cffc08d6dccaa6de7b699d937fc2b2b991f0006c931241d7e4370a7a152bd0eada961b9f5c7cc4e35e6fe1430c6fc67a087bb03b2af3a828c90a93267f3c54093e3901de211e810d7296af27380488fb6be7425a11d0ff128f7a287fb101dbac4ee5d35ac5ed3d3ac42e708d438f7a5bc605edcf391e968d2f8f6ff3c00d356ef73d4a00b9929593661c1d054786afc240abd5ef96482e320652ed6c6447f29dcc40855b591b42edfb6ba5b325f", 0x1, "76f1032f8b38a5dc4e4732bb789f6bf7b70dd7e8"}}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "13a16ae1b701cfdf"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x21, 0x34, 0x37, 0x9, 0x0, "653e72c76d2dd5e00fa12f50a538796150a226898dbfc5f516aafb7f59b8ad84f910f9b8ac3ff1e6d27ad2a234863d500a51ad9bc554f4e6597775e9f2a450aad3fc3ad1a034e689a77a2a3fd8ced676ea6b3e8bd30c3da8e045dcd80e827a9ab5fc09bd9c195d475d8f44ee1b8621439edac427020d517efc3210290cf362ba02ab293b34cb9456aab81cce172b8def4491921bf1ce530fe440dc627de22b0a5994b6f93c95a8ba03e0db3e9d9f5012607c4188cd28c6afd339b401b42d5efb56e87ef81df3be8a6d947aeab2a84d2b1cdac93ee82011a100223a135fdad2fbb336f326ad357a58fc3bfb8ec0a1771725e1ae0c134198bbfaedfdd8019cd15e", 0x2, "84e651fa737fca1920df781abfc62eba42acb90f"}}, @CGW_SRC_IF={0x8}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c040) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000340)={r7, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0xfffffffe, 0x8, 0x30, 0x5}, 0x9c) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000007c0), 0x200, 0x0) ioctl$CDROMVOLCTRL(r8, 0x31f, &(0x7f00000001c0)={0x2, 0x16, 0xc2, 0xff}) 3.289840689s ago: executing program 0 (id=948): syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}}}}}, 0x0) io_setup(0x7ff, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 3.130132174s ago: executing program 1 (id=951): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6(0xa, 0x4, 0x9) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40045}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000030a1b000000000000000000020000000900010073797a30000000000900030073797a3200000000340008"], 0x88}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0xffffc000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x73, @dev={0xac, 0x14, 0x14, 0xfd}, 0x0, 0x2, 'lblcr\x00', 0x10}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000080)={0x3}, 0x4) mkdir(&(0x7f0000000440)='./file1\x00', 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=virtio,agid=0x00000000p0000200,\x00']) sendfile(r8, r7, 0x0, 0x20000008) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) 3.128569515s ago: executing program 0 (id=952): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010007", 0x7) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r2 = socket(0x2, 0x2, 0x0) getsockopt$inet_opts(r2, 0x0, 0x5, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept4$x25(r2, 0x0, &(0x7f0000000040), 0x800) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000180)={0x4c, 0xfffffff8, 0x4, 0xb, 0xebe2, 0x81}) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20002016}) 3.052535182s ago: executing program 1 (id=955): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x18, 0x0, &(0x7f0000002300)) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockname$packet(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) 3.051795777s ago: executing program 0 (id=956): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x280, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x29, 0x3e, 0x0, &(0x7f0000000040)=0x2000) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040303049d5532e9"], 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000cfcd5a403807c5a2ce1e010203010902240001000000000904000002ff5d010009050303000000000009058a03"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) close(0x3) r5 = accept4$inet6(r3, &(0x7f0000000000), &(0x7f0000000100)=0x1c, 0x80000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x7c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x4, 0x7, 0xeb7, 0x4, {0x7, 0x0, 0x1, 0x9, 0xfffb}, {0xa6, 0x0, 0x6, 0x6e5, 0x8001}, 0x2, 0x9, 0x7}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8850}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-ssse3)\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x20008051) accept4$inet6(r10, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000140)={@local, r8}, 0x14) 2.920087948s ago: executing program 1 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)={0xa0, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x1}, [@typed={0x4, 0x11f}, @nested={0x88, 0x1, 0x0, 0x1, [@generic="664daf258421409993b071068ff774eed479ee4e29250582681b6edd83f3af6cb8803c581cef8f169bc52f97b3ced597fe5a237df002de7f7dac8d812d5d21fa6fe19b7400a22e1694a2aa33b57d477772df85cbe8099645ce50ee1631df8cc496d2268707086d6ecaf8a8a2b9b426f2", @typed={0xc, 0x53, 0x0, 0x0, @u64=0xfffffffffffffffe}, @typed={0x8, 0xed, 0x0, 0x0, @u32}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x184, 0x30, 0xffff, 0x0, 0x0, {}, [{0x170, 0x1, [@m_mirred={0x16c, 0x4, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x0, 0x0, 0x3, 0x400}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x58, 0x6, 0x10000000, 0x2, 0x6}, 0x2, r2}}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x184}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f00000007c0)={&(0x7f0000000600), 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd0, r6, 0x8ee108df29a17e26, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x881}, 0x40004) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f00000007c0)={&(0x7f0000000600), 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd0, r6, 0x8ee108df29a17e26, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x881}, 0x40004) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x27, 0xe, 0x0, &(0x7f00000002c0)="0300f977030ffa030000004256fd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000540)) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000600)=@xdp, 0x0, 0x40800) (async) accept4(0xffffffffffffffff, &(0x7f0000000600)=@xdp, 0x0, 0x40800) syz_emit_vhci(&(0x7f0000001a00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_neg_reply={{0x9}, {0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0xd) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001d00)={0x0, 0x4, 0x10}, 0xc) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001d00)={0x0, 0x4, 0x10}, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001d40), 0x400000, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) (async) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 2.919515969s ago: executing program 3 (id=959): openat(0xffffffffffffff9c, &(0x7f0000004280)='./bus\x00', 0x0, 0xf5) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./bus\x00', 0x0, 0xf5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000440)) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000440)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000200)={'syzkaller0\x00', @local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='neigh_create\x00', r3, 0x0, 0x40000}, 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) poll(&(0x7f0000000000)=[{r1, 0x2070}], 0x1, 0x10000) getdents64(r0, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0xffff}) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) (async) r6 = fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='iocharset', &(0x7f0000000100)='iocharset', 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000500)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='bbr\x00', 0x2f) sendmmsg$inet(r5, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5f", 0x7d}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1", 0x5f}, {&(0x7f0000001280)="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", 0x7f1}, {&(0x7f0000000180)="f5791136c84df2c738b86ff29a5cc9db0f49f4a999ed19267051ba94e6d25055b353e9b9321fa0e0a1ecf6b713aeb22589c8602a435352ac192512cae552770afade83b929d36355afb8aa8149008a50fd20d429c8ea", 0x2d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="2627f6367533738e2ac6edde073e71087ba176c3b84e6bd2930ca66fa07c9ffdef5c82abaaf7f751febf2cfa46e62ce3373155702ed4816dba4b38755e67f38b5defb3f1dcb9799d16d25316c7fb825f5377", 0x52}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040) (async) sendmmsg$inet(r5, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5f", 0x7d}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1", 0x5f}, {&(0x7f0000001280)="056e5b9b59ddf71e43a39b69192d71b413bee6d8da8ebeab12e7e66359538f0b29fe0ef84b80fc7fd86b05c41a5b9a76ad650b827a2f029b37bb3cc06a2c77cfea505ccd69d3aa325fec15751b88e0e407fe06159ee5b5a966ff18287f8abe6c596c1ee4cbaf1380c9c068dcb8f0df8e379a9e86c5443d114f77ea3c680cff695ec90b4310dfd8967566dd2ef076eb4c9dd3402a02b6168586bd7a4908b1901241cec52141e3a51e303ca67afef464738e4d4d98f0516321cdd62f8f10ee23726fc2e64123d98b699fb48fe6e8507cc1f218badec134df21acc4675acb908e27d325f8396fa3a1e4e37904fa4f2564587c483019daccd06e50a35d8628e98298fc90825cf34ffc6495dc74fd7968f015505ef45d4d01370542a8337012565691a0da6452163fcca32c42b2ed7e4020ba4e87d3b49d684e49c02cce8f2cfa32e4458ea39b8e5de6f938ed359f4877c9977d6a452f963f6b1de89185927c6df49b8a2a3df9b60544c03875e6eac96cacc16285a6ca183d7b3d7cc44400c66ee725a060c3761788537ad4cc3edd85d9d45b390468340497272607eb4704c89574088dad5bb6d58af9c7220dca4be7ea6eb31d5bd6ef97d02c2c0c2cacc72c96b0710454d56c62907df83e86d4ad786be57649cfd3f3b823d7f6702bfd81a94055be62af3c61be7e474ca016d06c4ca15f2658d885fdea1d0e81ee76944bc49c9ad971030895e4cd525fc4a083b9d7e7cb093eeb119936e14bcc18d70ab4a5af568a47a967519ac004c0f39b9b80a58044b72ded6d4956684dc2008cde2854fbfd3f149a04df3523192b63792fb435875db22182279937709894ab1ce74f84ce99ce05d8059e0c8d5eaec183fa9ec0ee2108597003178874b157a81ed9403e5977d6bf717ef14b14bd53a882885e5b60e4958aace23ea61a248b36118da90afca8beac96d2d107aeca86131c61628ca9797c0793c3fa9c8a3360c63b3549d5a657c8203c40a19faa51f6ed740864b70b25e70ba3da9bb19fa1cd7028c23dba78d5443f5513e4d391b94c5d4d5aeef8958df391a2d93e18d404ce0a1a60d81edcb3a1f41efac6e1903c3ebd94f0934028102827be9cf8e647ee1f36f32f94a8fb5a3bcc242c3472c24aea80a7bdf205227049a30187288579e2b1855bf6671133a817dc2526ddedf74c313b04862d4db9537a8745b3dfac05926acec0ff589db7205a42a4df1ae833d52e71201a61b775e4ea2df93652a04393a057f5f30cf5177fc2e2bec219575418dd995a0c58805e14c65e93251b5a9a5e7d807711b4588e4529232e47719b8d135c786cb1d521d3942528f1c5691172ccb21798afded0804403a7448d79ffe14b6cd6ad26ffb58267b94ec60759de1ae8cebb3174cfd29f31c647cf1af223051a7699ae0648168ed30e49a789177bfab8c038a45122836c9e1aa1ec59afc9119c26dbd46647c38d90d1fcca0d91970dbd486b695b1d29f099147dfc2bfe8864402da60aa0a8ff8e71a30ba017e55849b9bb157e2867335be0d2f9df6346a7ccc682c755c84208715900ef612311fbfb793ba7cf504acae892c47e8fda97adfe65560a517ad73f69c15e46533d15fc33ffed057bd5c0100e002b93944ad013a404863cf275988d39ceacaf50071982a517186a788261537e9d286062735b3e74c5c1f7b02c473cb64067ac4bc77ee13422bf7960bb35a4baa199fe2e90d2f76f218d3512376fccf1889d74aa5c15eeb139f48bafed64582d59272accb8526d9b6e90504390d030b734bb72290dc00c4890508826581045bf4d80a41c7991c64580cbdd9907decbfce8a5ad65e7f63afd726362111e3ced1a55b00d3d6bac3ce804aabd74ce13294fd7a4b85898dc9e2a31b05668475b20d5d3b1f81f84eb7711961609706c20fdc04e7175d21e7b1aab9ad09c282ee61fbb124d1ee92704a1373a36cf98639073da11b9831a88c0df9c1e9b4a3ae522d29aa58e827388afd8461d8094c36edae28158a42d1bbdd04af5568ae2325a87cb3650aad2d52df511cfd6521df0a6d01aa7f8256d14422061d1de9482f608c9ff5c11830b8b66afb2b66293df93c273aa88a5ce93358130168a0f7882291f2d864cb36a5b36c4b36a068fd24e97076ec26df4b7ba50e813eccc19ee0861f8e95f76e158e9ba9aa84d20a409bc39fc79e3d9e476716a858a0392f898648c77d75e10ff8fea3bdee7d7856948108910d4be55d4a47714964ac724b6bfdc3243a1b25a151f73d24bbce1b8a1ca5f5cb15de9f4e31c59813700e52fd2cebb5a93ef8d9bdaf05ecf81e88db6d275a5036ff173af8c0f182c7bbe125e80a6a02bb68d810cef8fb6ae1811241fc9c4a6eae2e5b1443db02e9a58e0f9920233febd2ba136c25452839061649c10771edfaa7562f82536400bf6e629f18a0a7d226d3b71b9ac6c76b548acf01fc628e9e5fccd4833c1bb57d649a162e2b2a3680fb453d382abb33863de0595d51a114b6bf7c1ad6654f963ba63504658821ef94bd1f85bec6095541a2eac2787b28d119e34a9349f9fdd8da3b1397cdc70df1d69786fa1348573e3a5023c7cf9251f2dab9bfc44c9e7ae743a4750cd981079f4f7feed6901187cff71306704e635b406036d027358e716874881925704720929f1b76cf61d37748839d212fd4666faaf67c3385feb7641885545c5bbe5ff193487c33f5d0cc95f9a4c83d9b7a717093d1a6f3fdfdc59b1a7e74e8bb73c55d01f2ded4502ba84f535cfb285d0f18fa90ba36ade28628534c924a20c7c1036e114460e91941d0a73552a32fb88612cc1da1686feae4bca66ef903e088b8c3d627223cb1fa0e2d84f3eca5ef97aa90032382b7e8f3654da4fe154", 0x7f1}, {&(0x7f0000000180)="f5791136c84df2c738b86ff29a5cc9db0f49f4a999ed19267051ba94e6d25055b353e9b9321fa0e0a1ecf6b713aeb22589c8602a435352ac192512cae552770afade83b929d36355afb8aa8149008a50fd20d429c8ea", 0x2d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="2627f6367533738e2ac6edde073e71087ba176c3b84e6bd2930ca66fa07c9ffdef5c82abaaf7f751febf2cfa46e62ce3373155702ed4816dba4b38755e67f38b5defb3f1dcb9799d16d25316c7fb825f5377", 0x52}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) (async) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000021000100000000000000000081abf0867ca68734421f0f038af06cb2b07b3dcf0eef5f884ae8cb0a206492b0e0dada8eb29d08000000b60e5405ee11824349d5575048c13945ac5fd93b51d6c182787ae669d3b4fbce26dfad4175b43ab37eeedd1b305ff2c983552c98dfcfa60c5a144af159bcd7000000006aaabb931fa4d7239915d289cf018b347e64c9234e8765672f01a2642bc22ca918a832f1a4053c0ac99aff019a65dd6108ab37b8583b094027eb127e63fec1a6607b"], 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1, 0x2, [0x7, 0xfff9]}, &(0x7f0000000100)=0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.850085164s ago: executing program 1 (id=960): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7c, @dev={0xfe, 0x80, '\x00', 0xc}, 0x305a}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) listen(r0, 0x5) accept4(r0, &(0x7f0000000040)=@x25, 0x0, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) 2.018737439s ago: executing program 1 (id=963): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) write$selinux_create(r0, &(0x7f00000000c0)=@objname={'system_u:object_r:dbusd_etc_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x271a, 0x20, './file1\x00'}, 0x55) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x7fa9, 0x7ca, 0x8, 0xfffffff7, 0x45, 0xe8, 0x2}, 0x1c) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x7fa9, 0x7ca, 0x8, 0xfffffff7, 0x45, 0xe8, 0x2}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000140)=0xffff8001, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000140)=0xffff8001, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000000000003542c468b087c2b5650d57ef3a8ec0829e0d9a2aacc05327080df12b940f6b04e07e57bd17e72abcd0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000000000003542c468b087c2b5650d57ef3a8ec0829e0d9a2aacc05327080df12b940f6b04e07e57bd17e72abcd0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200, 0x3, 0xffff}}}}}}, 0x0) close(0x3) 1.949899012s ago: executing program 2 (id=964): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6(0xa, 0x4, 0x9) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40045}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000030a1b000000000000000000020000000900010073797a30000000000900030073797a3200000000340008"], 0x88}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0xffffc000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x73, @dev={0xac, 0x14, 0x14, 0xfd}, 0x0, 0x2, 'lblcr\x00', 0x10}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000080)={0x3}, 0x4) mkdir(&(0x7f0000000440)='./file1\x00', 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=virtio,agid=0x00000000p0000200,\x00']) sendfile(r8, r7, 0x0, 0x20000008) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) 1.949646956s ago: executing program 1 (id=965): r0 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000000040)={0x8f, 0x5, 0x8, 0x3}) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x80088a02, &(0x7f0000000140)=0x20) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015001500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) 1.949386331s ago: executing program 3 (id=966): r0 = syz_open_dev$media(&(0x7f0000000080), 0x3f, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000440)={0x80000000, 0x0, &(0x7f00000000c0)=[{{}, {0x80000000}}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000002c0)={r1}) 1.928161097s ago: executing program 3 (id=967): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0xffff}, {0x0, 0xa}}}, 0x24}}, 0x4000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004000000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{}]}) 1.906317643s ago: executing program 2 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000280)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000004180)={"2370411d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', '8\x00', '\x00', "64bdac32", ["e86601d9cc668c391f66c506", "3549ffffffffffffff010800", "0800000000000000ececf51f", "cf6cce2296b3f853e224c4e0"]}) getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') statx(r2, 0x0, 0x1000, 0x6000, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000480)={0xa, 0xfffffffffffffffb, 0x9, 0xffffffff, 0x0, 0x0, 'm\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\x00', 0x0, 0x6, 0x0, 0xfe, 0xff, 0x1, 0x4}) r3 = dup(r0) ioperm(0x0, 0xe6e, 0x1000000000000007) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4018aee2, &(0x7f0000000040)=ANY=[]) 1.709474425s ago: executing program 2 (id=969): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1417, 0xa8ff279e447cf4f1, 0x100100, 0x25dfdbfb}, 0x10}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xfffc, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x48d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'pim6reg1\x00', 0x1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc00, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x311) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x4e21, 0x0, 'lblcr\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1417, 0xa8ff279e447cf4f1, 0x100100, 0x25dfdbfb}, 0x10}}, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xfffc, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x48d0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'pim6reg1\x00', 0x1}, 0x18) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc00, 0x0) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x311) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x4e21, 0x0, 'lblcr\x00', 0x0, 0xfffffffc}, 0x2c) (async) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async) 1.70913869s ago: executing program 2 (id=970): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x26) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x49, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @map_val, @call, @exit, @tail_call]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2}}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x26) (async) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x49, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @map_val, @call, @exit, @tail_call]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) (async) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2}}}}}}, 0x0) (async) 1.708944231s ago: executing program 3 (id=971): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}]}]}]}], {0x14, 0x10}}, 0xd8}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}]}]}]}], {0x14, 0x10}}, 0xd8}}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x8000, 0x8}, 0x4f, [0x7, 0x8, 0x1, 0x2, 0xfc9c, 0x2, 0x5, 0xe, 0xffff, 0x9e4, 0x0, 0x7, 0x1, 0x0, 0x7, 0xa6, 0x8cbe, 0x6, 0x8001, 0x40, 0x4, 0x4, 0x93b, 0x8, 0xffffffff, 0x7, 0x5, 0x3, 0xffffffff, 0x0, 0x9, 0xfff, 0x6, 0x2, 0x1, 0x8, 0xa000, 0xb, 0x3, 0xfffffffd, 0x58, 0xfffffffa, 0x3, 0x800, 0x75ec, 0x2, 0x4, 0x2, 0x7, 0x1, 0xfffffff6, 0x4, 0x6, 0xff, 0x81, 0xa9, 0x7, 0xfffffff8, 0x80, 0x4, 0x0, 0x7fffffff, 0x80, 0xdc55], [0xb0c, 0x100, 0xfffffffd, 0xb, 0xfeb, 0x5, 0x2, 0x69c, 0x6, 0x9, 0xa, 0xf8cd, 0x6, 0x1, 0x3, 0x7, 0xc1f0, 0xfffffffd, 0xe, 0x40, 0x9, 0x8, 0x5, 0x9, 0x0, 0x16, 0xd5, 0x1, 0x0, 0x1, 0x9, 0xffff, 0x8, 0x9, 0xbb79, 0x6, 0x2, 0x0, 0x8, 0x2, 0x9, 0x3ff, 0x7, 0x1, 0x0, 0x3, 0x7, 0x8, 0x7fff, 0x200, 0x0, 0x8, 0xa7c, 0xa1, 0x6, 0xeb23, 0x8001, 0x6f, 0x5, 0x10001, 0x7, 0xff, 0x7ff, 0xd], [0x0, 0x8, 0x4, 0x7, 0xd, 0xffffffff, 0x7, 0x8, 0xffffffff, 0x74d5ea16, 0x3, 0xffff4092, 0x3, 0x0, 0x5, 0x302, 0x9a1, 0x8000, 0x9, 0x8, 0x0, 0x3, 0x0, 0x62, 0x40, 0x8, 0x3, 0x2, 0x3, 0x0, 0x3356, 0xff, 0xfffffff8, 0x4, 0x39, 0x0, 0x0, 0x8a, 0xd, 0xd885, 0x8ae0, 0x5, 0x6, 0xb, 0xb636, 0xffffffff, 0x4, 0xffff, 0x0, 0x5, 0x0, 0x9, 0xffffffff, 0x8000, 0x5, 0x4, 0x3, 0x8001, 0x2, 0x0, 0x80, 0x8, 0xfffffffc, 0xd], [0x0, 0x2, 0x9, 0x0, 0xff, 0x7, 0x7, 0x0, 0x101, 0x4, 0x7bcf, 0x92e, 0x7, 0xfffff001, 0x3, 0x1, 0xc, 0x9, 0x88, 0x2, 0x4, 0x6, 0x3, 0x2b, 0x6, 0x8, 0x9, 0x10, 0x7f, 0x10e, 0x35bf, 0x0, 0xfffffffa, 0x9, 0xd2, 0x4, 0x5, 0xe, 0x197, 0x9, 0x3, 0xc, 0x0, 0x2, 0x8001, 0x5, 0x10000, 0x0, 0x80, 0x3, 0x9, 0x36103ef4, 0x100, 0x17900, 0x77, 0x8, 0x0, 0x5b5, 0x1ff, 0xd, 0x6, 0x7, 0x67, 0xb]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.649318103s ago: executing program 2 (id=972): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.589957287s ago: executing program 3 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000200000022000040"]) (async, rerun: 64) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x9c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffff8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000848}, 0xc000) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r7, 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = syz_open_dev$radio(&(0x7f0000000e40), 0x3, 0x2) ppoll(&(0x7f0000000e80)=[{r10, 0x1000}], 0x1, &(0x7f0000000ec0)={0x0, 0x989680}, 0x0, 0x0) (async) write$qrtrtun(r6, &(0x7f0000000180)="024dfc7b58623401", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 1.279960192s ago: executing program 3 (id=974): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x490003, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, r4, 0x11, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x2fe, 0x0, @l2={'eth', 0x3a, 'macvlan0\x00'}}}}}, 0x38}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) r5 = socket(0x11, 0xa, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r7, 0x0, 0x1) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c300"/20, @ANYRES32=r9, @ANYBLOB="0000d400000000000a000100003b"], 0x2c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000050000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) (async) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, r2, 0x1, 0x4}, 0x10) (async) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000067c0), 0x0, 0x0) preadv(r12, &(0x7f00000080c0)=[{&(0x7f0000007f80)=""/206, 0xce}], 0x1, 0x10000, 0x47d) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 779.641995ms ago: executing program 2 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() ioprio_set$pid(0x2, r2, 0x2004) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x38, r3, 0x1, 0x70bdad, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x10) 0s ago: executing program 0 (id=976): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="14f9f94d0220ae585bf2be840a52df69", 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000"], 0x0) syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf) setpriority(0x1, 0x2, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) kernel console output (not intermixed with test programs): th1 [ 46.211031][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.214914][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.221430][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.236401][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.252134][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.261769][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.264695][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.279964][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.285202][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.287178][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.292405][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.309520][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.311857][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.321473][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.324281][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.345888][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.353506][ T214] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.355521][ T214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.356942][ T40] audit: type=1400 audit(1741689986.792:114): avc: denied { sys_module } for pid=5940 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.362666][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.370464][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.372383][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.383396][ T5942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.386827][ T5942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.407604][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.421635][ T214] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.423567][ T214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.430358][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.435932][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.437958][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.487049][ T5940] veth0_vlan: entered promiscuous mode [ 46.492582][ T5940] veth1_vlan: entered promiscuous mode [ 46.497044][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.516986][ T5940] veth0_macvtap: entered promiscuous mode [ 46.522295][ T5940] veth1_macvtap: entered promiscuous mode [ 46.533298][ T5942] veth0_vlan: entered promiscuous mode [ 46.538109][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.542825][ T5942] veth1_vlan: entered promiscuous mode [ 46.546988][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.552284][ T5940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.555675][ T5940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.558089][ T5940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.560552][ T5940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.585966][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.591283][ T5942] veth0_macvtap: entered promiscuous mode [ 46.599351][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.602723][ T5942] veth1_macvtap: entered promiscuous mode [ 46.616670][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.620488][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.635522][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.636978][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.637714][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.640627][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.646321][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.654761][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.657801][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.661003][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.673103][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.675854][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.678375][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.680987][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.687569][ T5941] veth0_vlan: entered promiscuous mode [ 46.692460][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.701355][ T5937] veth0_vlan: entered promiscuous mode [ 46.710829][ T5941] veth1_vlan: entered promiscuous mode [ 46.717491][ T5937] veth1_vlan: entered promiscuous mode [ 46.733438][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.741861][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.746063][ T5941] veth0_macvtap: entered promiscuous mode [ 46.751908][ T5937] veth0_macvtap: entered promiscuous mode [ 46.754632][ T5941] veth1_macvtap: entered promiscuous mode [ 46.765509][ T5999] trusted_key: syz.1.2 sent an empty control message without MSG_MORE. [ 46.767341][ T5937] veth1_macvtap: entered promiscuous mode [ 46.772151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.774392][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.777212][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.781115][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.786356][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.790549][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.795006][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.800233][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.803150][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.806626][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.809468][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.812641][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.817913][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.819259][ T5999] mmap: syz.1.2 (5999): VmData 37519360 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 46.820322][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.827371][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.829765][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.834665][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.838631][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.842286][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.847923][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.851582][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.856320][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.861372][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.876264][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.879158][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.882770][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.885949][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.888619][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.891536][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.895342][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.901604][ T5937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.904543][ T5937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.907217][ T5937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.909577][ T5937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.925397][ T5939] Bluetooth: hci2: command tx timeout [ 46.934557][ T67] Bluetooth: hci1: command tx timeout [ 46.934793][ T5948] Bluetooth: hci0: command tx timeout [ 46.936728][ T5939] Bluetooth: hci3: command tx timeout [ 46.961704][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.967491][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.989267][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.990226][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.991459][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.993644][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.009427][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.012787][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.093606][ T6035] bridge0: port 2(bridge_slave_1) entered listening state [ 47.098749][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.113810][ T6040] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.117319][ T6040] netlink: zone id is out of range [ 47.118906][ T6040] netlink: zone id is out of range [ 47.120333][ T6040] netlink: zone id is out of range [ 47.121801][ T6040] netlink: zone id is out of range [ 47.123255][ T6040] netlink: zone id is out of range [ 47.127598][ T6040] netlink: zone id is out of range [ 47.129639][ T6040] netlink: zone id is out of range [ 47.133967][ T6040] netlink: zone id is out of range [ 47.135994][ T6040] netlink: zone id is out of range [ 47.138776][ T6040] netlink: zone id is out of range [ 47.167701][ T6035] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 47.170834][ T6037] veth0_macvtap: left promiscuous mode [ 47.177878][ T6052] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 47.180271][ T6052] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15'. [ 47.317703][ T6070] netlink: 'syz.0.20': attribute type 20 has an invalid length. [ 47.320081][ T6069] warning: `syz.3.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.411885][ T6088] FAT-fs (nullb0): bogus number of reserved sectors [ 47.416523][ T6088] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 47.469613][ T6094] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 47.474087][ T6094] /dev/sg0: Can't lookup blockdev [ 47.476134][ T5939] Bluetooth: hci2: ACL packet for unknown connection handle 969 [ 47.496038][ T6096] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 47.604630][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.609073][ T6109] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.738905][ T6135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 47.761156][ T58] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 47.763536][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.768587][ T58] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 47.771106][ T58] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 47.773287][ T58] usb 8-1: Manufacturer: syz [ 47.778038][ T58] usb 8-1: config 0 descriptor?? [ 47.816502][ T6140] overlayfs: failed to resolve './file1': -2 [ 47.823967][ T58] rc_core: IR keymap rc-hauppauge not found [ 47.825831][ T58] Registered IR keymap rc-empty [ 47.828235][ T58] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 47.832310][ T58] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input6 [ 47.964535][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 47.995998][ T58] usb 8-1: USB disconnect, device number 2 [ 48.030277][ T6163] netlink: 'syz.1.51': attribute type 27 has an invalid length. [ 48.065024][ T6168] capability: warning: `syz.1.52' uses deprecated v2 capabilities in a way that may be insecure [ 48.080920][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 48.083478][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 48.084803][ T6169] 9pnet_fd: Insufficient options for proto=fd [ 48.115967][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 48.118528][ T31] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 48.121570][ T31] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 48.125828][ T31] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 48.128498][ T31] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.132006][ T31] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 48.134696][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.151337][ T6171] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.53'. [ 48.336919][ T5981] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 48.340096][ T5981] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 48.342256][ T31] usb 7-1: GET_CAPABILITIES returned 0 [ 48.344966][ T31] usbtmc 7-1:16.0: can't read capabilities [ 48.349862][ T5981] hid-generic 0000:0003:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 48.420787][ T5977] IPVS: starting estimator thread 0... [ 48.479998][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 48.514118][ T6197] IPVS: using max 36 ests per chain, 86400 per kthread [ 48.527439][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.63'. [ 48.566936][ T5977] usb 7-1: USB disconnect, device number 2 [ 48.569274][ T6213] vlan2: entered promiscuous mode [ 48.570872][ T6213] bridge0: entered promiscuous mode [ 48.572641][ T6213] vlan2: entered allmulticast mode [ 48.574978][ T6213] bridge0: entered allmulticast mode [ 48.661078][ T6219] netlink: 'syz.2.67': attribute type 5 has an invalid length. [ 48.737310][ T6229] loop9: detected capacity change from 0 to 2 [ 48.741073][ T6229] Dev loop9: unable to read RDB block 2 [ 48.743136][ T6229] loop9: unable to read partition table [ 48.745022][ T6229] loop9: partition table beyond EOD, truncated [ 48.746725][ T6229] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 48.826333][ T6244] netlink: 180 bytes leftover after parsing attributes in process `syz.2.72'. [ 48.920640][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 49.004583][ T5939] Bluetooth: hci3: command tx timeout [ 49.004687][ T5948] Bluetooth: hci1: command tx timeout [ 49.005261][ T67] Bluetooth: hci2: command tx timeout [ 49.014607][ T5948] Bluetooth: hci0: command tx timeout [ 49.384891][ T6295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'. [ 49.474723][ T6313] process 'syz.1.90' launched './file2' with NULL argv: empty string added [ 49.478179][ T6311] vlan3: entered allmulticast mode [ 49.484939][ T6311] bond0: entered allmulticast mode [ 49.486946][ T6311] bond_slave_0: entered allmulticast mode [ 49.488626][ T6311] bond_slave_1: entered allmulticast mode [ 49.497508][ T6311] bond0: left allmulticast mode [ 49.499070][ T6311] bond_slave_0: left allmulticast mode [ 49.500678][ T6311] bond_slave_1: left allmulticast mode [ 49.558091][ T6325] fuse: Unknown parameter '0x00000000000000030x000000000000000c' [ 49.575557][ T6328] pimreg: entered allmulticast mode [ 49.600409][ T6334] dlm: non-version read from control device 8224 [ 49.604497][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 49.604507][ T40] audit: type=1400 audit(1741689990.032:312): avc: denied { execheap } for pid=6333 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.608961][ T6334] dlm: non-version read from control device 8224 [ 49.629558][ T6337] tmpfs: Bad value for 'huge' [ 49.631828][ T40] audit: type=1400 audit(1741689990.062:313): avc: denied { map } for pid=6336 comm="syz.1.98" path="/dev/i2c-0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 49.640344][ T6337] SELinux: syz.1.98 (6337) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 49.647327][ T40] audit: type=1400 audit(1741689990.082:314): avc: denied { write } for pid=6336 comm="syz.1.98" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.655463][ T40] audit: type=1400 audit(1741689990.082:315): avc: denied { open } for pid=6336 comm="syz.1.98" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.661910][ T40] audit: type=1400 audit(1741689990.092:316): avc: denied { ioctl } for pid=6336 comm="syz.1.98" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.681846][ T40] audit: type=1400 audit(1741689990.112:317): avc: denied { remount } for pid=6340 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.718094][ T40] audit: type=1400 audit(1741689990.152:318): avc: denied { read write } for pid=6344 comm="syz.3.102" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.726615][ T40] audit: type=1400 audit(1741689990.152:319): avc: denied { open } for pid=6344 comm="syz.3.102" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.732540][ T6348] tmpfs: Bad value for 'mpol' [ 49.735260][ T40] audit: type=1400 audit(1741689990.152:320): avc: denied { create } for pid=6346 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 49.978980][ T6376] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 50.070162][ T40] audit: type=1400 audit(1741689990.502:321): avc: denied { watch } for pid=6385 comm="syz.2.115" path="/37" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.193793][ T6404] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 50.220123][ T6410] bridge0: port 3(veth0_to_bridge) entered blocking state [ 50.222212][ T6410] bridge0: port 3(veth0_to_bridge) entered disabled state [ 50.224726][ T6410] veth0_to_bridge: entered allmulticast mode [ 50.226914][ T6410] veth0_to_bridge: entered promiscuous mode [ 50.228659][ T6410] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 50.233763][ T6410] bridge0: port 3(veth0_to_bridge) entered blocking state [ 50.236372][ T6410] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 50.690815][ T6427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6427 comm=syz.1.126 [ 50.954192][ T79] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.084002][ T5948] Bluetooth: hci2: command tx timeout [ 51.094949][ T5948] Bluetooth: hci0: command tx timeout [ 51.096961][ T5948] Bluetooth: hci3: command tx timeout [ 51.099569][ T5939] Bluetooth: hci1: command tx timeout [ 51.123970][ T79] usb 6-1: Using ep0 maxpacket: 8 [ 51.127908][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.129539][ T6439] ucma_write: process 96 (syz.0.128) changed security contexts after opening file descriptor, this is not allowed. [ 51.131016][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.140585][ T79] usb 6-1: unable to get BOS descriptor or descriptor too short [ 51.143093][ T6427] netlink: 'syz.1.126': attribute type 1 has an invalid length. [ 51.149280][ T79] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 51.153069][ T79] usb 6-1: can't read configurations, error -71 [ 51.742681][ T6447] ptrace attach of "/syz-executor exec"[5942] was attempted by ""[6447] [ 51.745782][ T6447] Zero length message leads to an empty skb [ 52.079694][ T6466] pim6reg1: entered promiscuous mode [ 52.081734][ T6466] pim6reg1: entered allmulticast mode [ 52.090830][ T6471] capability: warning: `syz.0.142' uses 32-bit capabilities (legacy support in use) [ 52.123877][ C1] net_ratelimit: 10100 callbacks suppressed [ 52.123888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 52.128735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.131938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.135227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 52.138461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.141716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.144993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 52.148149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.151397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.154674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 52.307906][ T6495] __nla_validate_parse: 9 callbacks suppressed [ 52.307922][ T6495] netlink: 56 bytes leftover after parsing attributes in process `syz.2.148'. [ 52.592990][ T6510] Invalid source name [ 52.595535][ T6510] UBIFS error (pid: 6510): cannot open "./file0", error -22 [ 52.598175][ T6512] Invalid source name [ 52.602533][ T6512] UBIFS error (pid: 6512): cannot open "./file0", error -22 [ 52.858301][ T6539] [U] v3f"S/4:XTzWtlW= [ 53.019069][ T6561] fuse: Bad value for 'fd' [ 53.164018][ T5948] Bluetooth: hci3: command tx timeout [ 53.165563][ T5948] Bluetooth: hci0: command tx timeout [ 53.174840][ T5948] Bluetooth: hci2: command tx timeout [ 53.176374][ T67] Bluetooth: hci1: command tx timeout [ 53.217861][ T6568] vlan2: left allmulticast mode [ 53.219370][ T6568] bridge0: left allmulticast mode [ 53.288759][ T6582] vxcan1: tx address claim with different name [ 53.442098][ T6599] Invalid ELF header magic: != ELF [ 53.511230][ T6608] ======================================================= [ 53.511230][ T6608] WARNING: The mand mount option has been deprecated and [ 53.511230][ T6608] and is ignored by this kernel. Remove the mand [ 53.511230][ T6608] option from the mount to silence this warning. [ 53.511230][ T6608] ======================================================= [ 53.563979][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 53.620467][ T6616] netlink: 48 bytes leftover after parsing attributes in process `syz.1.187'. [ 53.624830][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 53.627274][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 53.629804][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 53.636009][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 53.738298][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 53.741788][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.752389][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 53.756574][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.763864][ T10] usb 8-1: Product: syz [ 53.765062][ T10] usb 8-1: Manufacturer: syz [ 53.766374][ T10] usb 8-1: SerialNumber: syz [ 53.772377][ T6586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 53.873803][ T6633] program syz.1.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.990094][ T10] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 54.040374][ T67] Bluetooth: hci0: Invalid connection link type handle 0x00c8 [ 54.199029][ T6646] netlink: 'syz.2.197': attribute type 4 has an invalid length. [ 54.614122][ T40] kauditd_printk_skb: 9526 callbacks suppressed [ 54.614133][ T40] audit: type=1326 audit(1741689995.052:9848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c098d169 code=0x50000 [ 54.624723][ T40] audit: type=1326 audit(1741689995.052:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c098d169 code=0x50000 [ 54.630629][ T40] audit: type=1326 audit(1741689995.052:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c098d169 code=0x50000 [ 54.636826][ T40] audit: type=1326 audit(1741689995.052:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c098d169 code=0x50000 [ 54.642794][ T40] audit: type=1326 audit(1741689995.052:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c098d169 code=0x50000 [ 54.649056][ T40] audit: type=1326 audit(1741689995.052:9853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c098d169 code=0x50000 [ 54.655161][ T40] audit: type=1326 audit(1741689995.052:9854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c098d169 code=0x50000 [ 54.661091][ T40] audit: type=1326 audit(1741689995.052:9855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c098d169 code=0x50000 [ 54.667549][ T40] audit: type=1326 audit(1741689995.052:9856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c098d169 code=0x50000 [ 54.673382][ T40] audit: type=1326 audit(1741689995.052:9857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c098d169 code=0x50000 [ 54.825967][ T6648] netlink: 108 bytes leftover after parsing attributes in process `syz.2.198'. [ 54.828676][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 55.246657][ T5939] Bluetooth: hci0: command 0x0406 tx timeout [ 56.338432][ T5997] usb 8-1: USB disconnect, device number 3 [ 56.347218][ T5997] usblp0: removed [ 57.133864][ C2] net_ratelimit: 154763 callbacks suppressed [ 57.133882][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.133928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.136150][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.139303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 57.143482][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.146751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.150885][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.154047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.158264][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.161521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 57.210652][ T6650] bridge_slave_0: left allmulticast mode [ 57.212208][ T6650] bridge_slave_0: left promiscuous mode [ 57.213937][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.226566][ T6650] bridge_slave_1: left allmulticast mode [ 57.228196][ T6650] bridge_slave_1: left promiscuous mode [ 57.229865][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.254285][ T6650] bond0: (slave bond_slave_0): Releasing backup interface [ 57.270901][ T6650] bond0: (slave bond_slave_1): Releasing backup interface [ 57.286822][ T6650] team0: Port device team_slave_0 removed [ 57.316911][ T6650] team0: Port device team_slave_1 removed [ 57.319950][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.322927][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.331755][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.335413][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.356007][ T6651] team0: Mode changed to "loadbalance" [ 57.358751][ T6652] team0: Unable to change to the same mode the team is in [ 57.503198][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.206'. [ 57.557690][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 57.611987][ T6694] netlink: 'syz.2.212': attribute type 39 has an invalid length. [ 57.665973][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 57.827854][ T6703] netlink: 4708 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.835921][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.839347][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.876506][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.882012][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.886745][ T6705] Cannot find del_set index 128 as target [ 57.890392][ T6705] netlink: 4708 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.959130][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 58.124856][ T6725] ptrace attach of "/syz-executor exec"[6724] was attempted by "/syz-executor exec"[6725] [ 58.187865][ T6719] hfs: can't find a HFS filesystem on dev sr0 [ 58.462917][ T6755] Bluetooth: MGMT ver 1.23 [ 59.474179][ T6802] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.630381][ T6813] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 59.632644][ T6813] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 60.136072][ T40] kauditd_printk_skb: 23802 callbacks suppressed [ 60.136085][ T40] audit: type=1400 audit(1741690000.572:33660): avc: denied { listen } for pid=6833 comm="syz.2.256" laddr=::ffff:172.20.20.10 lport=36663 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.154995][ T40] audit: type=1400 audit(1741690000.572:33661): avc: denied { accept } for pid=6833 comm="syz.2.256" laddr=::ffff:172.20.20.10 lport=36663 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.186633][ T40] audit: type=1400 audit(1741690000.622:33662): avc: denied { setopt } for pid=6833 comm="syz.2.256" laddr=::ffff:172.20.20.10 lport=36663 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 60.199893][ T40] audit: type=1400 audit(1741690000.622:33663): avc: denied { listen } for pid=6833 comm="syz.2.256" laddr=::ffff:172.20.20.10 lport=36663 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 60.506593][ T40] audit: type=1400 audit(1741690000.932:33664): avc: denied { getattr } for pid=6852 comm="syz.1.258" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.522369][ T40] audit: type=1400 audit(1741690000.952:33665): avc: denied { read } for pid=6855 comm="syz.2.261" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.540864][ T6857] deleting an unspecified loop device is not supported. [ 60.547043][ T5939] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 60.550108][ T6857] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 60.558283][ T40] audit: type=1400 audit(1741690000.952:33666): avc: denied { open } for pid=6855 comm="syz.2.261" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.577575][ T40] audit: type=1400 audit(1741690000.972:33667): avc: denied { ioctl } for pid=6855 comm="syz.2.261" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.611493][ T40] audit: type=1400 audit(1741690000.972:33668): avc: denied { bind } for pid=6855 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.619721][ T40] audit: type=1400 audit(1741690000.982:33669): avc: denied { setopt } for pid=6855 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.789185][ T6864] syz.2.263: attempt to access beyond end of device [ 60.789185][ T6864] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 60.796070][ T6864] syz.2.263: attempt to access beyond end of device [ 60.796070][ T6864] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 60.800701][ T6864] Mount JFS Failure: -5 [ 60.802059][ T6864] jfs_mount failed w/return code = -5 [ 60.912777][ T6871] Bluetooth: Short BCSP packet [ 61.604664][ T6867] Bluetooth: hci5: Frame reassembly failed (-84) [ 61.607808][ T6867] Bluetooth: hci5: Frame reassembly failed (-84) [ 61.609746][ T6867] Bluetooth: hci5: Frame reassembly failed (-84) [ 61.611815][ T1144] Bluetooth: hci5: Frame reassembly failed (-84) [ 61.618370][ T6878] Bluetooth: hci5: Frame reassembly failed (-84) [ 62.143874][ C1] net_ratelimit: 149951 callbacks suppressed [ 62.143887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.143939][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.145694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.148916][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.152129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 62.155428][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.158646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.161928][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.165100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 62.168317][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.339831][ T6885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 62.341807][ T6885] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 62.345660][ T6885] vhci_hcd vhci_hcd.0: Device attached [ 62.348102][ T6887] vhci_hcd: connection closed [ 62.349903][ T1218] vhci_hcd: stop threads [ 62.353116][ T1218] vhci_hcd: release socket [ 62.355103][ T1218] vhci_hcd: disconnect device [ 62.366053][ T5948] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 62.369212][ T5948] Bluetooth: hci2: Injecting HCI hardware error event [ 62.372206][ T5943] Bluetooth: hci2: hardware error 0x00 [ 62.849901][ T6890] devtmpfs: Cannot enable quota on remount [ 62.852541][ T6890] __nla_validate_parse: 9 callbacks suppressed [ 62.852549][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 62.856922][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 62.859430][ T6890] netlink: 'syz.3.269': attribute type 7 has an invalid length. [ 62.925176][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 62.999437][ T6898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.273'. [ 63.083002][ T6904] overlayfs: conflicting options: nfs_export=on,index=off [ 63.146429][ T6909] netlink: 'syz.3.276': attribute type 19 has an invalid length. [ 63.293033][ T6925] Bluetooth: Short BCSP packet [ 63.305820][ T46] Bluetooth: Error in BCSP hdr checksum [ 63.313493][ T6925] evm: overlay not supported [ 63.528898][ T6937] netlink: 'syz.3.280': attribute type 30 has an invalid length. [ 63.557926][ T6937] tipc: Started in network mode [ 63.559440][ T6937] tipc: Node identity 7, cluster identity 4711 [ 63.561239][ T6937] tipc: Node number set to 7 [ 63.562750][ T6937] tipc: Cannot configure node identity twice [ 63.644071][ T67] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 63.647334][ T5948] Bluetooth: hci5: command 0xfc11 tx timeout [ 63.722588][ T6942] 9pnet_fd: Insufficient options for proto=fd [ 63.904270][ T6957] netlink: 'syz.0.288': attribute type 4 has an invalid length. [ 63.904727][ T6958] netlink: 'syz.0.288': attribute type 4 has an invalid length. [ 64.229410][ T67] block nbd0: Receive control failed (result -107) [ 64.340815][ T6964] block nbd0: shutting down sockets [ 64.454079][ T5943] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 64.506822][ T6984] futex_wake_op: syz.0.294 tries to shift op by 32; fix this program [ 64.589051][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 64.592504][ T6990] netlink: 'syz.0.297': attribute type 30 has an invalid length. [ 64.599328][ T6990] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.603062][ T6990] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.606641][ T6990] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.609936][ T6990] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.779005][ T6994] overlayfs: statfs failed on './file0' [ 65.329464][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 65.501746][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 65.501757][ T40] audit: type=1400 audit(1741690005.932:33694): avc: denied { append } for pid=7035 comm="syz.2.312" name="vsock" dev="devtmpfs" ino=1334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.514795][ T40] audit: type=1400 audit(1741690005.942:33695): avc: denied { write } for pid=5336 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.550529][ T40] audit: type=1400 audit(1741690005.942:33696): avc: denied { remove_name } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.576834][ T40] audit: type=1400 audit(1741690005.942:33697): avc: denied { rename } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.599318][ T40] audit: type=1400 audit(1741690005.942:33698): avc: denied { add_name } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.621052][ T40] audit: type=1400 audit(1741690005.942:33699): avc: denied { unlink } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.640401][ T40] audit: type=1400 audit(1741690005.952:33700): avc: denied { create } for pid=5336 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.652872][ T40] audit: type=1400 audit(1741690005.992:33701): avc: denied { setattr } for pid=7035 comm="syz.2.312" name="[io_uring]" dev="anon_inodefs" ino=13836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.653993][ T7040] netlink: 100 bytes leftover after parsing attributes in process `syz.2.314'. [ 65.659800][ T40] audit: type=1400 audit(1741690006.002:33702): avc: denied { open } for pid=7035 comm="syz.2.312" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.746554][ T7045] netlink: 104 bytes leftover after parsing attributes in process `syz.2.316'. [ 65.773884][ T40] audit: type=1400 audit(1741690006.202:33703): avc: denied { map } for pid=7041 comm="syz.3.315" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 65.901769][ T7057] tipc: Enabled bearer , priority 10 [ 65.904386][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 66.189841][ T7066] SELinux: security_context_str_to_sid () failed with errno=-22 [ 66.314535][ T7070] netlink: 'syz.0.327': attribute type 4 has an invalid length. [ 66.554202][ T7093] syz.0.336 uses obsolete (PF_INET,SOCK_PACKET) [ 66.572588][ T5997] IPVS: starting estimator thread 0... [ 66.623712][ T7105] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 66.683931][ T7099] IPVS: using max 37 ests per chain, 88800 per kthread [ 66.686390][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 66.688864][ T7108] netlink: 17 bytes leftover after parsing attributes in process `syz.0.340'. [ 66.788764][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 66.889616][ T7117] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 66.922543][ T7120] netlink: 'syz.3.345': attribute type 29 has an invalid length. [ 67.072063][ T7129] MINIX-fs: blocksize too small for device [ 67.125456][ T7135] block nbd1: shutting down sockets [ 67.149282][ T7141] ip6t_srh: unknown srh match flags 4000 [ 67.151225][ T7142] ip6t_srh: unknown srh match flags 4000 [ 67.153935][ C2] net_ratelimit: 136076 callbacks suppressed [ 67.153948][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.153963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.155813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.159059][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.162295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 67.165553][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.168669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.172034][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.175219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 67.178463][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.409461][ T7166] netlink: 'syz.1.358': attribute type 10 has an invalid length. [ 67.830076][ T7194] xt_TCPMSS: Only works on TCP SYN packets [ 68.131670][ T7201] overlayfs: failed to get inode (-116) [ 68.143014][ T7201] overlayfs: failed to get inode (-116) [ 69.009658][ T7210] tipc: Resetting bearer [ 69.030146][ T7213] program syz.1.373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.198101][ T7227] __nla_validate_parse: 2 callbacks suppressed [ 69.198111][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 69.215569][ T7228] program syz.1.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.268430][ T7233] ptrace attach of "/syz-executor exec"[5940] was attempted by ""[7233] [ 69.282643][ T7233] netlink: 'syz.1.379': attribute type 39 has an invalid length. [ 69.392945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.408273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.418335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.506893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 69.723850][ C2] sched: DL replenish lagged too much [ 70.931055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.003931][ T5939] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 71.006516][ T5939] Bluetooth: hci1: Injecting HCI hardware error event [ 71.009705][ T5939] Bluetooth: hci1: hardware error 0x00 [ 71.021639][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 71.021649][ T40] audit: type=1804 audit(1741690011.452:33724): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.383" name="/newroot/84/file0" dev="tmpfs" ino=473 res=1 errno=0 [ 71.042067][ T7243] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -29824, delta: 1 [ 71.049324][ T7243] ref_ctr increment failed for inode: 0x1d9 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888022f83200 [ 71.237538][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.971247][ T40] audit: type=1400 audit(1741690012.402:33725): avc: denied { accept } for pid=7253 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.974328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 71.978806][ T7256] netlink: 'syz.1.387': attribute type 5 has an invalid length. [ 72.084813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 72.163886][ C1] net_ratelimit: 143462 callbacks suppressed [ 72.163898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.164126][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.165666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 72.168946][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.172147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.175414][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.178600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.181755][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.184944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.188294][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.273971][ T1344] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.423957][ T1344] usb 7-1: Using ep0 maxpacket: 32 [ 72.429938][ T1344] usb 7-1: config 6 has an invalid interface number: 33 but max is 2 [ 72.432789][ T1344] usb 7-1: config 6 has an invalid interface number: 44 but max is 2 [ 72.435276][ T1344] usb 7-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 72.437666][ T1344] usb 7-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 72.439988][ T1344] usb 7-1: config 6 has an invalid descriptor of length 140, skipping remainder of the config [ 72.443562][ T1344] usb 7-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 72.448215][ T1344] usb 7-1: config 6 has no interface number 0 [ 72.449931][ T1344] usb 7-1: config 6 has no interface number 1 [ 72.451628][ T1344] usb 7-1: config 6 interface 33 altsetting 159 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 72.456236][ T1344] usb 7-1: config 6 interface 33 altsetting 159 endpoint 0x5 has an invalid bInterval 247, changing to 7 [ 72.459351][ T1344] usb 7-1: config 6 interface 33 altsetting 159 has an invalid descriptor for endpoint zero, skipping [ 72.462309][ T1344] usb 7-1: config 6 interface 33 altsetting 159 has an invalid descriptor for endpoint zero, skipping [ 72.467494][ T1344] usb 7-1: config 6 interface 33 altsetting 159 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 72.470691][ T1344] usb 7-1: config 6 interface 33 altsetting 159 endpoint 0x8D has an invalid bInterval 213, changing to 11 [ 72.473771][ T1344] usb 7-1: config 6 interface 33 altsetting 159 endpoint 0x8D has invalid maxpacket 18221, setting to 1024 [ 72.477534][ T1344] usb 7-1: config 6 interface 33 altsetting 159 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 72.481234][ T1344] usb 7-1: config 6 interface 33 altsetting 159 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 72.488472][ T1344] usb 7-1: config 6 interface 44 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 72.492022][ T1344] usb 7-1: config 6 interface 33 has no altsetting 0 [ 72.494315][ T1344] usb 7-1: config 6 interface 44 has no altsetting 0 [ 72.498156][ T1344] usb 7-1: New USB device found, idVendor=152d, idProduct=0578, bcdDevice= 2.dd [ 72.500639][ T1344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.502821][ T1344] usb 7-1: Product: syz [ 72.506167][ T1344] usb 7-1: Manufacturer: ѕ [ 72.507440][ T1344] usb 7-1: SerialNumber: syz [ 72.514776][ T7259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.516816][ T7259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.658673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.674320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 72.694550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 72.736186][ T1344] usb-storage 7-1:6.33: USB Mass Storage device detected [ 72.741026][ T1344] usb-storage 7-1:6.33: Quirks match for vid 152d pid 0578: 1000000 [ 72.857266][ T40] audit: type=1400 audit(1741690013.292:33726): avc: denied { map } for pid=7266 comm="syz.0.390" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.894020][ T1344] usb-storage 7-1:6.44: USB Mass Storage device detected [ 72.916903][ T1344] usb-storage 7-1:6.44: Quirks match for vid 152d pid 0578: 1000000 [ 73.131385][ T1344] usb 7-1: USB disconnect, device number 3 [ 73.164478][ T5939] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 73.194326][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.397'. [ 73.197045][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 73.301035][ T7292] netlink: 220 bytes leftover after parsing attributes in process `syz.3.399'. [ 73.333909][ T40] audit: type=1400 audit(1741690013.742:33727): avc: denied { getopt } for pid=7293 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.595048][ T40] audit: type=1400 audit(1741690014.012:33728): avc: denied { create } for pid=7298 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 73.600669][ T40] audit: type=1400 audit(1741690014.012:33729): avc: denied { write } for pid=7298 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 73.721972][ T7305] pim6reg1: entered promiscuous mode [ 73.733886][ T7305] pim6reg1: entered allmulticast mode [ 73.975241][ T7313] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.977467][ T7313] netlink: 1 bytes leftover after parsing attributes in process `syz.3.405'. [ 73.979989][ T40] audit: type=1400 audit(1741690014.412:33730): avc: denied { open } for pid=7307 comm="syz.3.405" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 74.013043][ T40] audit: type=1400 audit(1741690014.412:33731): avc: denied { ioctl } for pid=7307 comm="syz.3.405" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 74.044347][ T7315] netlink: 'syz.2.407': attribute type 12 has an invalid length. [ 74.046697][ T7315] netlink: 'syz.2.407': attribute type 29 has an invalid length. [ 74.048807][ T7315] netlink: 148 bytes leftover after parsing attributes in process `syz.2.407'. [ 74.053497][ T7315] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 74.076937][ T7315] netlink: 'syz.2.407': attribute type 2 has an invalid length. [ 74.081199][ T7315] netlink: 31 bytes leftover after parsing attributes in process `syz.2.407'. [ 74.107047][ T40] audit: type=1400 audit(1741690014.542:33732): avc: denied { read write } for pid=7320 comm="syz.0.409" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 74.113387][ T40] audit: type=1400 audit(1741690014.542:33733): avc: denied { open } for pid=7320 comm="syz.0.409" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 74.167095][ T7325] netlink: 32 bytes leftover after parsing attributes in process `syz.2.407'. [ 74.524014][ T7343] netlink: 'syz.3.415': attribute type 10 has an invalid length. [ 74.605275][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 74.613514][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 75.033900][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.184619][ T10] usb 5-1: no configurations [ 75.186462][ T10] usb 5-1: can't read configurations, error -22 [ 75.190295][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 75.192791][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 75.323912][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.474394][ T10] usb 5-1: no configurations [ 75.475754][ T10] usb 5-1: can't read configurations, error -22 [ 75.478978][ T10] usb usb5-port1: attempt power cycle [ 75.721780][ T7416] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 75.733968][ T7416] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 75.813975][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.838321][ T10] usb 5-1: no configurations [ 75.840260][ T10] usb 5-1: can't read configurations, error -22 [ 75.886506][ T7421] vlan2: entered promiscuous mode [ 75.888097][ T7421] bridge0: entered promiscuous mode [ 75.889719][ T7421] vlan2: entered allmulticast mode [ 75.891221][ T7421] bridge0: entered allmulticast mode [ 75.891630][ T7426] program syz.3.433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.975500][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.995589][ T10] usb 5-1: no configurations [ 75.997138][ T10] usb 5-1: can't read configurations, error -22 [ 75.999476][ T10] usb usb5-port1: unable to enumerate USB device [ 76.213955][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 76.213965][ T40] audit: type=1326 audit(1741690016.642:33750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.1.440" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcd138d169 code=0x0 [ 76.252938][ T7445] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 76.254792][ T7445] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.258771][ T7445] vhci_hcd vhci_hcd.0: Device attached [ 76.260671][ T7448] vhci_hcd: connection closed [ 76.260858][ T46] vhci_hcd: stop threads [ 76.263517][ T46] vhci_hcd: release socket [ 76.264854][ T46] vhci_hcd: disconnect device [ 77.173886][ C1] net_ratelimit: 154582 callbacks suppressed [ 77.173898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.173912][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.175931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 77.179136][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.182771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.186024][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.189165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.192297][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.195532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.198656][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.851564][ T7453] cgroup: Invalid name [ 78.288997][ T7466] xt_l2tp: invalid flags combination: c [ 78.581148][ T40] audit: type=1400 audit(1741690019.012:33751): avc: denied { mount } for pid=7469 comm="syz.0.446" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.585464][ T7470] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.602981][ T7470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.446'. [ 78.639706][ T40] audit: type=1400 audit(1741690019.072:33752): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.068533][ T40] audit: type=1400 audit(1741690019.502:33753): avc: denied { shutdown } for pid=7502 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.087439][ T7505] xfs: Unknown parameter 'discard/file0' [ 79.164266][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 79.176739][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'. [ 79.314563][ T7523] xt_l2tp: missing protocol rule (udp|l2tpip) [ 79.720151][ T7532] xt_hashlimit: size too large, truncated to 1048576 [ 80.147679][ T7558] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 80.959959][ T40] audit: type=1400 audit(1741690021.392:33754): avc: denied { getattr } for pid=7564 comm="syz.0.474" laddr=ff01::1 lport=128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.096139][ T7574] netlink: 'syz.2.476': attribute type 6 has an invalid length. [ 81.211271][ C3] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 81.214184][ C3] sr 2:0:0:0: [sr0] tag#22 CDB: Pre-fetch(16) 90 a6 14 b8 5e 96 bc 59 55 c7 c4 37 [ 81.217528][ T7583] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 81.265136][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 81.306050][ T40] audit: type=1400 audit(1741690021.732:33755): avc: denied { append } for pid=7585 comm="syz.1.481" name="file0" dev="9p" ino=37879865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.345018][ T40] audit: type=1400 audit(1741690021.782:33756): avc: denied { create } for pid=7594 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.378239][ T40] audit: type=1400 audit(1741690021.782:33757): avc: denied { write } for pid=7594 comm="syz.2.483" path="socket:[17745]" dev="sockfs" ino=17745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.394906][ T40] audit: type=1400 audit(1741690021.782:33758): avc: denied { nlmsg_read } for pid=7594 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.413557][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 81.416216][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 81.453934][ T5997] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.459421][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.487'. [ 81.462123][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.487'. [ 81.482254][ T835] cfg80211: failed to load regulatory.db [ 81.514439][ T67] Bluetooth: hci4: sending frame failed (-49) [ 81.516985][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 81.521207][ T7607] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 81.554406][ T7607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.558936][ T7607] vlan2: entered promiscuous mode [ 81.561437][ T7607] bond1: entered promiscuous mode [ 81.624011][ T5997] usb 5-1: Using ep0 maxpacket: 8 [ 81.627452][ T7607] bond1: left promiscuous mode [ 81.632032][ T5997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 131, changing to 11 [ 81.632049][ T5997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9033, setting to 1024 [ 81.639979][ T5997] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 81.639992][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.641239][ T5997] usb 5-1: config 0 descriptor?? [ 81.652069][ T7616] Bluetooth: hci4: Frame reassembly failed (-84) [ 81.654450][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 81.830119][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 81.852812][ T5997] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 81.971673][ T7625] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 81.980938][ T40] audit: type=1400 audit(1741690022.412:33759): avc: denied { write } for pid=7621 comm="syz.1.493" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.025785][ T40] audit: type=1400 audit(1741690022.462:33760): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.183864][ C1] net_ratelimit: 152313 callbacks suppressed [ 82.183876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.183890][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.185662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.189743][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.193402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.197435][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.201413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 82.205455][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.208678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 82.212858][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.401707][ T40] audit: type=1400 audit(1741690022.832:33761): avc: denied { map } for pid=7654 comm="syz.3.504" path="socket:[17126]" dev="sockfs" ino=17126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.538199][ T40] audit: type=1400 audit(1741690022.972:33762): avc: denied { ioctl } for pid=7660 comm="syz.3.506" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 82.583310][ T40] audit: type=1400 audit(1741690023.012:33763): avc: denied { connect } for pid=7662 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.600581][ T7663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.507'. [ 82.609055][ T10] usb 5-1: USB disconnect, device number 6 [ 82.613575][ T40] audit: type=1400 audit(1741690023.042:33764): avc: denied { setattr } for pid=7662 comm="syz.3.507" name="file0" dev="9p" ino=37879865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.657149][ T7663] syz.3.507 (7663) used greatest stack depth: 19872 bytes left [ 82.847516][ T7685] wg1: entered promiscuous mode [ 82.907404][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.517'. [ 83.012949][ T7697] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.059895][ T1344] IPVS: starting estimator thread 0... [ 83.062034][ T7706] IPVS: ip_vs_add_dest(): server weight less than zero [ 83.064641][ T7706] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20001 [ 83.108049][ T7711] PKCS8: Unsupported PKCS#8 version [ 83.108597][ T7713] netlink: 'syz.1.523': attribute type 10 has an invalid length. [ 83.118677][ T7713] team0: Cannot enslave team device to itself [ 83.136822][ T7714] fuse: Unknown parameter '' [ 83.153905][ T7707] IPVS: using max 36 ests per chain, 86400 per kthread [ 83.270650][ T7730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42424 sclass=netlink_route_socket pid=7730 comm=syz.1.528 [ 83.276853][ T7735] vlan0: entered promiscuous mode [ 83.377713][ T7739] netlink: 696 bytes leftover after parsing attributes in process `syz.2.532'. [ 83.484245][ T5943] Bluetooth: hci3: command 0x0406 tx timeout [ 83.522154][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 83.607520][ T7757] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 83.687802][ T7762] x_tables: ip_tables: osf match: only valid for protocol 6 [ 83.884300][ T1120] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 83.886976][ T1120] sr 2:0:0:0: [sr0] tag#5 Sense Key : Illegal Request [current] [ 83.889069][ T1120] sr 2:0:0:0: [sr0] tag#5 Add. Sense: Invalid command operation code [ 83.891393][ T1120] sr 2:0:0:0: [sr0] tag#5 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 83.893802][ T1120] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 83.907014][ T1120] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 84.074895][ T7802] Illegal XDP return value 4294967274 on prog (id 112) dev syz_tun, expect packet loss! [ 84.169461][ T7812] mmap: syz.3.559 (7812) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.230174][ T7823] loop2: detected capacity change from 0 to 7 [ 84.238042][ T7823] Dev loop2: unable to read RDB block 7 [ 84.239656][ T7823] loop2: AHDI p1 p2 p3 [ 84.240821][ T7823] loop2: partition table partially beyond EOD, truncated [ 84.243408][ T7823] loop2: p1 start 1601398130 is beyond EOD, truncated [ 84.253935][ T7823] loop2: p2 start 1702059890 is beyond EOD, truncated [ 84.268438][ T7826] netlink: 'syz.0.562': attribute type 12 has an invalid length. [ 84.430886][ T7841] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:1 [ 84.441448][ T7844] loop2: detected capacity change from 0 to 524287999 [ 84.721741][ T7859] netlink: 'syz.3.571': attribute type 4 has an invalid length. [ 84.739837][ T7867] vivid-007: ================= START STATUS ================= [ 84.746414][ T7867] vivid-007: Enable Output Cropping: true grabbed [ 84.749578][ T7867] vivid-007: Enable Output Composing: true grabbed [ 84.751898][ T7867] vivid-007: Enable Output Scaler: true grabbed [ 84.756542][ T7867] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 84.765744][ T7867] vivid-007: Transmit Mode: HDMI grabbed [ 84.767388][ T7867] vivid-007: Hotplug Present: 0x00000000 [ 84.769044][ T7867] vivid-007: RxSense Present: 0x00000000 [ 84.771035][ T7867] vivid-007: EDID Present: 0x00000000 [ 84.772784][ T7867] vivid-007: ================== END STATUS ================== [ 85.434169][ T7900] overlayfs: failed to resolve './file1': -2 [ 85.462277][ T7902] bridge0: port 3(syz_tun) entered blocking state [ 85.464588][ T7902] bridge0: port 3(syz_tun) entered disabled state [ 85.466473][ T7902] syz_tun: entered allmulticast mode [ 85.469206][ T7902] syz_tun: entered promiscuous mode [ 85.471150][ T7902] bridge0: port 3(syz_tun) entered blocking state [ 85.473160][ T7902] bridge0: port 3(syz_tun) entered forwarding state [ 85.512640][ T7904] tmpfs: Cannot change global quota limit on remount [ 85.745796][ T7912] dlm: no locking on control device [ 85.751428][ T7912] kernel profiling enabled (shift: 63) [ 85.753165][ T7912] profiling shift: 63 too large [ 85.764739][ T7912] netlink: 'syz.1.588': attribute type 11 has an invalid length. [ 87.193893][ C1] net_ratelimit: 146449 callbacks suppressed [ 87.193906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 87.193961][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.195710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.198972][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.202208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:f9:d3:b6:ed:a8, vlan:0) [ 87.205583][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.208776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.212035][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.215221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.218324][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.604025][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.624982][ T6867] bridge0: port 3(veth0_to_bridge) entered disabled state [ 87.651602][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 87.651616][ T40] audit: type=1400 audit(1741690028.082:33777): avc: denied { ioctl } for pid=7934 comm="syz.2.593" path="socket:[18308]" dev="sockfs" ino=18308 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 87.653253][ T7939] __nla_validate_parse: 8 callbacks suppressed [ 87.653262][ T7939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.594'. [ 87.657179][ T40] audit: type=1400 audit(1741690028.092:33778): avc: denied { ioctl } for pid=7934 comm="syz.2.593" path="socket:[9977]" dev="sockfs" ino=9977 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 87.787805][ T7950] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 87.812892][ T40] audit: type=1400 audit(1741690028.242:33779): avc: denied { shutdown } for pid=7956 comm="syz.3.600" laddr=fe80::12 lport=40822 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.883909][ T1344] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 87.983905][ T835] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 88.036329][ T7980] overlayfs: workdir and upperdir must be separate subtrees [ 88.040172][ T40] audit: type=1400 audit(1741690028.472:33780): avc: denied { setopt } for pid=7979 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.047067][ T1344] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.050209][ T1344] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.053132][ T1344] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.055726][ T1344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.059632][ T7933] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.064560][ T1344] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.145153][ T7965] ceph: No mds server is up or the cluster is laggy [ 88.145514][ T835] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 88.149873][ T835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.156487][ T835] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 88.159173][ T835] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 88.161378][ T835] usb 7-1: Manufacturer: syz [ 88.167402][ T835] usb 7-1: config 0 descriptor?? [ 88.214014][ T835] rc_core: IR keymap rc-hauppauge not found [ 88.215724][ T835] Registered IR keymap rc-empty [ 88.217395][ T835] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 88.220880][ T835] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 88.247367][ T40] audit: type=1326 audit(1741690028.682:33781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.1.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd138d169 code=0x50000 [ 88.254203][ T40] audit: type=1326 audit(1741690028.682:33782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.1.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd138d169 code=0x50000 [ 88.260828][ T40] audit: type=1326 audit(1741690028.682:33783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.1.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd138d169 code=0x50000 [ 88.268498][ T40] audit: type=1326 audit(1741690028.682:33784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.1.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd138d169 code=0x50000 [ 88.275621][ T40] audit: type=1326 audit(1741690028.682:33785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.1.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd138d169 code=0x50000 [ 88.282102][ T40] audit: type=1326 audit(1741690028.682:33786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.1.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd138d169 code=0x50000 [ 88.292499][ T10] usb 5-1: USB disconnect, device number 7 [ 88.384583][ T7951] macvlan2: entered promiscuous mode [ 88.456831][ T1335] usb 7-1: USB disconnect, device number 4 [ 88.520579][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 88.563802][ T8012] netlink: 76 bytes leftover after parsing attributes in process `syz.3.611'. [ 88.577952][ T8012] syzkaller1: entered promiscuous mode [ 88.579545][ T8012] syzkaller1: entered allmulticast mode [ 88.599948][ T8012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.611'. [ 88.643902][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.796986][ T10] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 88.803898][ T10] usb 5-1: config 0 has no interface number 0 [ 88.805636][ T10] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 88.808844][ T10] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 88.814346][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.823325][ T10] usb 5-1: config 0 descriptor?? [ 88.830099][ T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.120/input/input10 [ 89.033318][ T1335] usb 5-1: USB disconnect, device number 8 [ 89.086639][ T8028] gfs2: not a GFS2 filesystem [ 89.264886][ T8039] fuse: Bad value for 'fd' [ 89.267225][ T8039] overlayfs: overlapping lowerdir path [ 89.317415][ T8043] program syz.2.619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.572226][ T8051] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.575030][ T8053] bond0: option ad_select: unable to set because the bond device is up [ 89.587496][ T8053] syz.2.622: attempt to access beyond end of device [ 89.587496][ T8053] sr0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 89.591005][ T8053] syz.2.622: attempt to access beyond end of device [ 89.591005][ T8053] sr0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 89.604119][ T8053] Mount JFS Failure: -5 [ 89.605439][ T8053] jfs_mount failed w/return code = -5 [ 89.773278][ T8065] CUSE: zero length info key specified [ 90.167066][ T8087] overlayfs: upper fs does not support tmpfile. [ 90.239127][ T8099] workqueue: name exceeds WQ_NAME_LEN. Truncating to: HcUË+u!8 [ 90.249206][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 90.348056][ T8106] netlink: 830 bytes leftover after parsing attributes in process `syz.3.640'. [ 90.552904][ T8123] can: request_module (can-proto-0) failed. [ 90.578231][ T8121] macvlan0: entered allmulticast mode [ 90.580402][ T8121] veth1_vlan: entered allmulticast mode [ 90.588266][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.645'. [ 90.611708][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.645'. [ 90.631197][ T8121] veth1_vlan: left allmulticast mode [ 90.650453][ T8121] macvlan0 (unregistering): left allmulticast mode [ 90.685523][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 90.706529][ T8142] nfs: Unknown parameter '#! ' [ 90.746899][ T8150] overlayfs: failed to resolve './file0/file0/..': -2 [ 90.749901][ T8153] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.653'. [ 103.618556][ T40] kauditd_printk_skb: 49637 callbacks suppressed [ 103.618567][ T40] audit: type=1400 audit(1741690044.052:83424): avc: denied { read write } for pid=8160 comm="syz.3.658" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.634171][ T40] audit: type=1400 audit(1741690044.052:83425): avc: denied { open } for pid=8160 comm="syz.3.658" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.671841][ T8179] __nla_validate_parse: 4 callbacks suppressed [ 103.671852][ T8179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.662'. [ 103.686092][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.662'. [ 103.688557][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.662'. [ 103.691508][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.662'. [ 103.696803][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.662'. [ 103.696861][ T40] audit: type=1400 audit(1741690044.132:83426): avc: denied { watch } for pid=8182 comm="syz.2.663" path="/189/file0" dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.820994][ T40] audit: type=1400 audit(1741690044.252:83427): avc: denied { setopt } for pid=8211 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.836701][ T8219] netlink: 'syz.2.674': attribute type 10 has an invalid length. [ 103.844942][ T8219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.850336][ T8219] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 103.857825][ T8219] netlink: 'syz.2.674': attribute type 10 has an invalid length. [ 103.860012][ T8219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.674'. [ 103.860591][ T40] audit: type=1400 audit(1741690044.292:83428): avc: denied { read } for pid=8216 comm="syz.0.673" name="file0" dev="9p" ino=37879865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.863225][ T8219] batadv0: entered promiscuous mode [ 103.869517][ T40] audit: type=1400 audit(1741690044.292:83429): avc: denied { open } for pid=8216 comm="syz.0.673" path="/164/file0/file0" dev="9p" ino=37879865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.872473][ T8219] batadv0: entered allmulticast mode [ 103.880567][ T8219] bond0: (slave batadv0): Releasing backup interface [ 103.884490][ T8219] bridge0: port 3(batadv0) entered blocking state [ 103.886338][ T8219] bridge0: port 3(batadv0) entered disabled state [ 104.005499][ T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 104.008887][ T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 104.020153][ T8231] netlink: 148 bytes leftover after parsing attributes in process `syz.0.677'. [ 104.022287][ T8232] syzkaller1: entered promiscuous mode [ 104.024242][ T8232] syzkaller1: entered allmulticast mode [ 104.043920][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 104.205656][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.208956][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 104.212902][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.216349][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.219104][ T10] usb 6-1: Product: syz [ 104.220631][ T10] usb 6-1: Manufacturer: syz [ 104.222256][ T10] usb 6-1: SerialNumber: syz [ 104.226891][ T10] usb 6-1: config 0 descriptor?? [ 104.230171][ T10] usb 6-1: selecting invalid altsetting 0 [ 104.326934][ T8260] netlink: 'syz.0.686': attribute type 4 has an invalid length. [ 104.327925][ T40] audit: type=1400 audit(1741690044.762:83430): avc: denied { ioctl } for pid=8258 comm="syz.0.686" path="socket:[21946]" dev="sockfs" ino=21946 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.329911][ T8260] netlink: 152 bytes leftover after parsing attributes in process `syz.0.686'. [ 104.342495][ T8260] net_ratelimit: 11022 callbacks suppressed [ 104.342508][ T8260] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 104.401663][ T1335] hid-generic 0005:07C0:06E6.0003: item fetching failed at offset 0/1 [ 104.406039][ T1335] hid-generic 0005:07C0:06E6.0003: probe with driver hid-generic failed with error -22 [ 104.432353][ T10] usb 6-1: USB disconnect, device number 4 [ 104.471026][ T8272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.483476][ T8280] overlayfs: missing 'lowerdir' [ 104.545121][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 104.628622][ T40] audit: type=1400 audit(1741690045.062:83431): avc: denied { watch_reads } for pid=8292 comm="syz.3.696" path=2F6D656D66643A2D42D54E49F46A9A08202864656C6574656429 dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.816076][ T8306] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 104.816136][ T40] audit: type=1400 audit(1741690045.252:83432): avc: denied { mounton } for pid=8303 comm="syz.0.699" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 104.862330][ T8315] SELinux: syz.0.701 (8315) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 104.895095][ T8319] netlink: 44 bytes leftover after parsing attributes in process `syz.0.703'. [ 104.993916][ T40] audit: type=1400 audit(1741690045.422:83433): avc: denied { read } for pid=8325 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 105.206104][ T8326] bridge0: port 3(batadv0) entered disabled state [ 105.209097][ T8326] bridge_slave_1: left allmulticast mode [ 105.210627][ T8326] bridge_slave_1: left promiscuous mode [ 105.212164][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.215828][ T8326] bridge_slave_0: left allmulticast mode [ 105.217415][ T8326] bridge_slave_0: left promiscuous mode [ 105.219057][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.280865][ T8359] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 105.282799][ T8359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.285898][ T8359] vhci_hcd vhci_hcd.0: Device attached [ 105.288336][ T8362] usbip_core: unknown command [ 105.290100][ T8362] vhci_hcd: unknown pdu 0 [ 105.291421][ T8362] usbip_core: unknown command [ 105.295032][ T68] vhci_hcd: stop threads [ 105.296440][ T68] vhci_hcd: release socket [ 105.297845][ T68] vhci_hcd: disconnect device [ 105.963334][ T5939] Bluetooth: hci0: unexpected event 0x01 length: 12 > 1 [ 106.104351][ T8383] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 106.359891][ T8388] syz.0.722 (8388) used greatest stack depth: 18992 bytes left [ 106.504341][ T8410] Malformed UNC in devname [ 106.504341][ T8410] [ 106.505180][ T8412] dvmrp0: entered allmulticast mode [ 106.506665][ T8410] CIFS: VFS: Malformed UNC in devname [ 106.612942][ T8423] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 106.618809][ T8422] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 106.790881][ T8435] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 107.046797][ T8448] block nbd1: NBD_DISCONNECT [ 107.049054][ T8448] block nbd1: Disconnected due to user request. [ 107.053424][ T8448] block nbd1: shutting down sockets [ 107.252708][ T8465] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 107.268870][ T8465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.283766][ T8465] vlan3: entered promiscuous mode [ 107.286595][ T8465] bond2: entered promiscuous mode [ 107.291480][ T8465] bond2: left promiscuous mode [ 107.462035][ T8474] Invalid option length (1047906) for dns_resolver key [ 107.472075][ T8474] netlink: 'syz.3.748': attribute type 10 has an invalid length. [ 107.481756][ T8474] team0: Cannot enslave team device to itself [ 107.734556][ T8482] batadv0: entered promiscuous mode [ 107.736638][ T8482] macvtap1: entered allmulticast mode [ 107.738209][ T8482] batadv0: entered allmulticast mode [ 107.740998][ T8482] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 107.746223][ T8482] batadv0: left allmulticast mode [ 107.747906][ T8482] batadv0: left promiscuous mode [ 108.301222][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.304663][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.307385][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.310466][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.313187][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.317931][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.320698][ T8499] batadv_slave_0: entered promiscuous mode [ 108.323175][ T8499] batadv_slave_0: left promiscuous mode [ 108.351911][ T8501] overlayfs: workdir and upperdir must be separate subtrees [ 108.439450][ T8515] IPv6: sit1: Disabled Multicast RS [ 108.441420][ T8515] sit1: entered allmulticast mode [ 108.637371][ T8531] macvlan0: entered promiscuous mode [ 108.639998][ T8531] bond_slave_0: entered promiscuous mode [ 108.642395][ T8531] bond_slave_1: entered promiscuous mode [ 108.644257][ T8531] bond0: entered promiscuous mode [ 108.648823][ T8531] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 108.653332][ T8531] team0: Port device macvlan0 added [ 108.817664][ T5943] Bluetooth: hci4: sending frame failed (-49) [ 108.820545][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 109.034697][ T40] kauditd_printk_skb: 7047 callbacks suppressed [ 109.034712][ T40] audit: type=1400 audit(1741690049.472:90481): avc: denied { bind } for pid=8556 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.177966][ T40] audit: type=1400 audit(1741690049.612:90482): avc: denied { setattr } for pid=8566 comm="syz.0.776" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.182750][ T8567] overlayfs: failed to resolve './file0': -14 [ 109.316226][ T8583] __nla_validate_parse: 8 callbacks suppressed [ 109.316235][ T8583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.781'. [ 109.333434][ T40] audit: type=1400 audit(1741690049.762:90483): avc: denied { create } for pid=8584 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 109.339954][ T40] audit: type=1400 audit(1741690049.762:90484): avc: denied { accept } for pid=8584 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 109.450395][ T8604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.787'. [ 109.452895][ T8604] openvswitch: netlink: Flow key attr not present in new flow. [ 109.455693][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 109.506356][ T40] audit: type=1400 audit(1741690049.942:90485): avc: denied { ioctl } for pid=8603 comm="syz.1.787" path="socket:[23188]" dev="sockfs" ino=23188 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.508302][ T8605] netlink: 'syz.1.787': attribute type 1 has an invalid length. [ 109.593949][ T1344] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 109.611225][ T8608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8608 comm=syz.1.788 [ 109.615249][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 109.619502][ T40] audit: type=1400 audit(1741690050.052:90486): avc: denied { accept } for pid=8607 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 109.680166][ T8611] IPv6: sit1: Disabled Multicast RS [ 109.681928][ T8611] sit1: entered allmulticast mode [ 109.753931][ T1344] usb 7-1: Using ep0 maxpacket: 32 [ 109.757284][ T1344] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.762728][ T1344] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 109.766035][ T1344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.769001][ T1344] usb 7-1: Product: 밨睗젼ⴠ䮡➡슣좱礹飞壚枔롪꧂ኔ齍たꚆ㱂䕿᷌䧔샯ỲƧ狸ﮈ앉䠂轧瘋➯땰臖懶豁㝗면뎁媊쑌鮨몮Ṝ鶩ㅃ궖㾗署뽳ᐔ袔蹪棫ಷꏄ摌⥵ۚ≑鎝鏞넕 [ 109.777170][ T1344] usb 7-1: Manufacturer: ᠌ [ 109.778869][ T1344] usb 7-1: SerialNumber: 㐁 [ 109.788630][ T8614] netlink: 'syz.1.790': attribute type 27 has an invalid length. [ 109.822350][ T8614] bridge0: left allmulticast mode [ 109.833894][ T8614] bridge0: left promiscuous mode [ 109.936797][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 109.939522][ T8624] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 109.998466][ T8614] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 110.000918][ T8614] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 110.049396][ T8614] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.051853][ T8614] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.054452][ T8614] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.057737][ T8614] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.063325][ T8614] vlan2: left promiscuous mode [ 110.065186][ T8614] vlan2: left allmulticast mode [ 110.082817][ T8615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.086042][ T8615] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.090394][ T8615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.198215][ T1344] usb 7-1: USB disconnect, device number 5 [ 110.286614][ T40] audit: type=1400 audit(1741690050.722:90487): avc: denied { ioctl } for pid=8638 comm="syz.3.799" path="socket:[23780]" dev="sockfs" ino=23780 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.486750][ T8642] netlink: 'syz.3.800': attribute type 3 has an invalid length. [ 110.488835][ T8642] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 110.491458][ T8642] netlink: 216 bytes leftover after parsing attributes in process `syz.3.800'. [ 110.499206][ T8642] tipc: Resetting bearer [ 110.506906][ T8642] openvswitch: netlink: Unknown nsh attribute 0 [ 110.509188][ T8642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.645097][ T40] audit: type=1400 audit(1741690051.082:90488): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 110.759413][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 110.768482][ T8653] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 110.800030][ T8663] binfmt_misc: register: failed to install interpreter file ./file0 [ 110.995931][ T5997] hid (null): unknown global tag 0xd [ 110.997997][ T5997] hid (null): unknown global tag 0xe [ 111.000113][ T5997] hid (null): unknown global tag 0xd [ 111.006203][ T5997] hid-generic 0010:0004:0101.0004: unexpected long global item [ 111.008568][ T5997] hid-generic 0010:0004:0101.0004: probe with driver hid-generic failed with error -22 [ 111.035187][ T40] audit: type=1400 audit(1741690051.472:90489): avc: denied { append } for pid=8686 comm="syz.1.811" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 111.036092][ T8687] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 111.047826][ T40] audit: type=1400 audit(1741690051.482:90490): avc: denied { append } for pid=8688 comm="syz.2.812" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 111.841239][ T8709] netlink: 'syz.3.817': attribute type 10 has an invalid length. [ 111.862142][ T8709] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.951688][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 112.105915][ T8726] ata1.00: invalid multi_count 1 ignored [ 112.513905][ T36] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 112.674125][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 112.677143][ T36] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.680009][ T36] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.682390][ T36] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 112.685970][ T36] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 112.688889][ T36] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.691278][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.697213][ T36] hub 6-1:1.0: bad descriptor, ignoring hub [ 112.698876][ T36] hub 6-1:1.0: probe with driver hub failed with error -5 [ 112.701583][ T36] cdc_wdm 6-1:1.0: skipping garbage [ 112.703138][ T36] cdc_wdm 6-1:1.0: skipping garbage [ 112.706842][ T36] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 112.708830][ T36] cdc_wdm 6-1:1.0: Unknown control protocol [ 113.095339][ T8754] bond0: (slave bond_slave_0): Releasing backup interface [ 113.100032][ T8754] bond0: (slave bond_slave_1): Releasing backup interface [ 113.118155][ T8754] team0: Port device team_slave_0 removed [ 113.123770][ T8754] team0: Port device team_slave_1 removed [ 113.126226][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.128488][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.131757][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.133807][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.149368][ T8754] team0: Mode changed to "loadbalance" [ 113.155008][ T8754] vlan0: entered promiscuous mode [ 113.160629][ T8754] team0: Port device vlan0 added [ 113.164057][ T835] usb 6-1: USB disconnect, device number 5 [ 113.250897][ T8766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.834'. [ 113.318894][ T8776] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 113.323502][ T8776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'. [ 113.337606][ T5939] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 113.341235][ T8778] netlink: zone id is out of range [ 113.342722][ T8778] netlink: zone id is out of range [ 113.344988][ T8778] netlink: zone id is out of range [ 113.418898][ T8794] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 113.542351][ T8802] delete_channel: no stack [ 113.637085][ T8810] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.641457][ T8810] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 114.279676][ T8819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8819 comm=syz.1.852 [ 114.730571][ T8824] efs: device does not support 512 byte blocks [ 114.737150][ T8824] device does not support 512 byte blocks [ 114.737150][ T8824] [ 114.742962][ T8824] efs: device does not support 512 byte blocks [ 114.744921][ T8824] device does not support 512 byte blocks [ 114.744921][ T8824] [ 114.749156][ T8824] efs: device does not support 512 byte blocks [ 114.750883][ T8824] device does not support 512 byte blocks [ 114.750883][ T8824] [ 114.760740][ T8824] efs: device does not support 512 byte blocks [ 114.763157][ T8824] device does not support 512 byte blocks [ 114.763157][ T8824] [ 114.771236][ T8824] efs: device does not support 512 byte blocks [ 114.773463][ T8824] device does not support 512 byte blocks [ 114.773463][ T8824] [ 114.781408][ T8824] efs: device does not support 512 byte blocks [ 114.783405][ T8824] device does not support 512 byte blocks [ 114.783405][ T8824] [ 114.790908][ T8824] efs: device does not support 512 byte blocks [ 114.792606][ T8824] device does not support 512 byte blocks [ 114.792606][ T8824] [ 114.798047][ T8824] efs: device does not support 512 byte blocks [ 114.799767][ T8824] device does not support 512 byte blocks [ 114.799767][ T8824] [ 114.812522][ T8824] efs: device does not support 512 byte blocks [ 114.814792][ T8824] device does not support 512 byte blocks [ 114.814792][ T8824] [ 114.830436][ T8824] efs: device does not support 512 byte blocks [ 114.832716][ T8824] device does not support 512 byte blocks [ 114.832716][ T8824] [ 114.837951][ T8824] efs: device does not support 512 byte blocks [ 114.840289][ T8824] device does not support 512 byte blocks [ 114.840289][ T8824] [ 114.846297][ T8824] efs: device does not support 512 byte blocks [ 114.847976][ T8824] device does not support 512 byte blocks [ 114.847976][ T8824] [ 114.853765][ T8824] efs: device does not support 512 byte blocks [ 114.856572][ T8824] device does not support 512 byte blocks [ 114.856572][ T8824] [ 114.862325][ T8824] efs: device does not support 512 byte blocks [ 114.865328][ T8824] device does not support 512 byte blocks [ 114.865328][ T8824] [ 114.870558][ T8820] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 114.872522][ T8824] efs: device does not support 512 byte blocks [ 114.878010][ T8824] device does not support 512 byte blocks [ 114.878010][ T8824] [ 114.886711][ T8824] efs: device does not support 512 byte blocks [ 114.888529][ T8824] device does not support 512 byte blocks [ 114.888529][ T8824] [ 114.895606][ T8824] efs: device does not support 512 byte blocks [ 114.897678][ T8824] device does not support 512 byte blocks [ 114.897678][ T8824] [ 114.902822][ T8824] efs: device does not support 512 byte blocks [ 114.904862][ T8824] device does not support 512 byte blocks [ 114.904862][ T8824] [ 114.909876][ T8824] efs: device does not support 512 byte blocks [ 114.911644][ T8824] device does not support 512 byte blocks [ 114.911644][ T8824] [ 114.917252][ T8824] efs: device does not support 512 byte blocks [ 114.919124][ T8824] device does not support 512 byte blocks [ 114.919124][ T8824] [ 114.930831][ T8824] efs: device does not support 512 byte blocks [ 114.932203][ T8832] tmpfs: Cannot change global quota limit on remount [ 114.932528][ T8824] device does not support 512 byte blocks [ 114.932528][ T8824] [ 114.935211][ T8832] could not open pipe file descriptor [ 114.940988][ T8824] efs: device does not support 512 byte blocks [ 114.942673][ T8824] device does not support 512 byte blocks [ 114.942673][ T8824] [ 114.946876][ T8824] efs: device does not support 512 byte blocks [ 114.948586][ T8824] device does not support 512 byte blocks [ 114.948586][ T8824] [ 114.952695][ T8824] efs: device does not support 512 byte blocks [ 114.954849][ T8824] device does not support 512 byte blocks [ 114.954849][ T8824] [ 114.961513][ T8824] efs: device does not support 512 byte blocks [ 114.963735][ T8824] device does not support 512 byte blocks [ 114.963735][ T8824] [ 114.968987][ T8824] efs: device does not support 512 byte blocks [ 114.971213][ T8824] device does not support 512 byte blocks [ 114.971213][ T8824] [ 114.976655][ T8824] efs: device does not support 512 byte blocks [ 114.978370][ T8824] device does not support 512 byte blocks [ 114.978370][ T8824] [ 114.983379][ T8824] efs: device does not support 512 byte blocks [ 114.985544][ T8824] device does not support 512 byte blocks [ 114.985544][ T8824] [ 114.989579][ T8824] efs: device does not support 512 byte blocks [ 114.991204][ T8824] device does not support 512 byte blocks [ 114.991204][ T8824] [ 114.995256][ T8824] efs: device does not support 512 byte blocks [ 114.997463][ T8824] device does not support 512 byte blocks [ 114.997463][ T8824] [ 115.002046][ T8824] efs: device does not support 512 byte blocks [ 115.003696][ T8824] device does not support 512 byte blocks [ 115.003696][ T8824] [ 115.009940][ T8824] efs: device does not support 512 byte blocks [ 115.011636][ T8824] device does not support 512 byte blocks [ 115.011636][ T8824] [ 115.015804][ T8824] efs: device does not support 512 byte blocks [ 115.018045][ T8824] device does not support 512 byte blocks [ 115.018045][ T8824] [ 115.022583][ T8824] efs: device does not support 512 byte blocks [ 115.024522][ T8824] device does not support 512 byte blocks [ 115.024522][ T8824] [ 115.031098][ T8824] efs: device does not support 512 byte blocks [ 115.033132][ T8824] device does not support 512 byte blocks [ 115.033132][ T8824] [ 115.038140][ T8824] efs: device does not support 512 byte blocks [ 115.039822][ T8824] device does not support 512 byte blocks [ 115.039822][ T8824] [ 115.044793][ T8824] efs: device does not support 512 byte blocks [ 115.046435][ T8824] device does not support 512 byte blocks [ 115.046435][ T8824] [ 115.051594][ T8824] efs: device does not support 512 byte blocks [ 115.053272][ T8824] device does not support 512 byte blocks [ 115.053272][ T8824] [ 115.053974][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 115.053984][ T40] audit: type=1400 audit(1741690055.482:90497): avc: denied { write } for pid=8837 comm="syz.2.859" path="socket:[25615]" dev="sockfs" ino=25615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.059811][ T8824] efs: device does not support 512 byte blocks [ 115.074103][ T8824] device does not support 512 byte blocks [ 115.074103][ T8824] [ 115.082145][ T8824] efs: device does not support 512 byte blocks [ 115.083992][ T8824] device does not support 512 byte blocks [ 115.083992][ T8824] [ 115.090767][ T8824] efs: device does not support 512 byte blocks [ 115.093752][ T8824] device does not support 512 byte blocks [ 115.093752][ T8824] [ 115.099853][ T8824] efs: device does not support 512 byte blocks [ 115.102091][ T8824] device does not support 512 byte blocks [ 115.102091][ T8824] [ 115.111673][ T8824] efs: device does not support 512 byte blocks [ 115.113177][ T8824] device does not support 512 byte blocks [ 115.113177][ T8824] [ 115.118254][ T8824] efs: device does not support 512 byte blocks [ 115.119834][ T8824] device does not support 512 byte blocks [ 115.119834][ T8824] [ 115.124806][ T8824] efs: device does not support 512 byte blocks [ 115.126647][ T8824] device does not support 512 byte blocks [ 115.126647][ T8824] [ 115.130760][ T8824] efs: device does not support 512 byte blocks [ 115.132586][ T8824] device does not support 512 byte blocks [ 115.132586][ T8824] [ 115.137132][ T8824] efs: device does not support 512 byte blocks [ 115.138846][ T8824] device does not support 512 byte blocks [ 115.138846][ T8824] [ 115.143340][ T8824] efs: device does not support 512 byte blocks [ 115.147776][ T8824] device does not support 512 byte blocks [ 115.147776][ T8824] [ 115.156062][ T8824] efs: device does not support 512 byte blocks [ 115.157920][ T8824] device does not support 512 byte blocks [ 115.157920][ T8824] [ 115.162409][ T8853] vivid-001: ================= START STATUS ================= [ 115.162418][ T8824] efs: device does not support 512 byte blocks [ 115.166564][ T8824] device does not support 512 byte blocks [ 115.166564][ T8824] [ 115.167639][ T8853] vivid-001: Radio HW Seek Mode: Bounded [ 115.170656][ T8853] vivid-001: Radio Programmable HW Seek: false [ 115.172338][ T8853] vivid-001: RDS Rx I/O Mode: Block I/O [ 115.175956][ T40] audit: type=1400 audit(1741690055.612:90498): avc: denied { mounton } for pid=8852 comm="syz.3.863" path="/202/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 115.177548][ T8824] efs: device does not support 512 byte blocks [ 115.178156][ T8853] vivid-001: Generate RBDS Instead of RDS: false [ 115.178173][ T8853] vivid-001: RDS Reception: true [ 115.178184][ T8853] vivid-001: RDS Program Type: 0 inactive [ 115.178198][ T8853] vivid-001: RDS PS Name: inactive [ 115.178211][ T8853] vivid-001: RDS Radio Text: inactive [ 115.178224][ T8853] vivid-001: RDS Traffic Announcement: false inactive [ 115.178238][ T8853] vivid-001: RDS Traffic Program: false inactive [ 115.178251][ T8853] vivid-001: RDS Music: false inactive [ 115.178265][ T8853] vivid-001: ================== END STATUS ================== [ 115.200364][ T8824] device does not support 512 byte blocks [ 115.200364][ T8824] [ 115.206008][ T8824] efs: device does not support 512 byte blocks [ 115.207716][ T8824] device does not support 512 byte blocks [ 115.207716][ T8824] [ 115.211876][ T8824] efs: device does not support 512 byte blocks [ 115.213757][ T8824] device does not support 512 byte blocks [ 115.213757][ T8824] [ 115.220013][ T8824] efs: device does not support 512 byte blocks [ 115.221908][ T8824] device does not support 512 byte blocks [ 115.221908][ T8824] [ 115.226024][ T8824] efs: device does not support 512 byte blocks [ 115.227789][ T8824] device does not support 512 byte blocks [ 115.227789][ T8824] [ 115.231975][ T8824] efs: device does not support 512 byte blocks [ 115.234423][ T8824] device does not support 512 byte blocks [ 115.234423][ T8824] [ 115.238499][ T8824] efs: device does not support 512 byte blocks [ 115.244753][ T8824] device does not support 512 byte blocks [ 115.244753][ T8824] [ 115.249723][ T8824] efs: device does not support 512 byte blocks [ 115.251725][ T8824] device does not support 512 byte blocks [ 115.251725][ T8824] [ 115.263359][ T8824] efs: device does not support 512 byte blocks [ 115.265414][ T8824] device does not support 512 byte blocks [ 115.265414][ T8824] [ 115.270410][ T8824] efs: device does not support 512 byte blocks [ 115.272048][ T8824] device does not support 512 byte blocks [ 115.272048][ T8824] [ 115.277528][ T8824] efs: device does not support 512 byte blocks [ 115.279286][ T8824] device does not support 512 byte blocks [ 115.279286][ T8824] [ 115.283473][ T8824] efs: device does not support 512 byte blocks [ 115.285531][ T8824] device does not support 512 byte blocks [ 115.285531][ T8824] [ 115.289234][ T8824] efs: device does not support 512 byte blocks [ 115.291110][ T8824] device does not support 512 byte blocks [ 115.291110][ T8824] [ 115.301727][ T8824] efs: device does not support 512 byte blocks [ 115.303511][ T8824] device does not support 512 byte blocks [ 115.303511][ T8824] [ 115.310680][ T8824] efs: device does not support 512 byte blocks [ 115.311362][ T8875] loop5: detected capacity change from 0 to 7 [ 115.316836][ T8875] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.317572][ T8824] device does not support 512 byte blocks [ 115.317572][ T8824] [ 115.319029][ T8875] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.324307][ T8875] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.326663][ T8875] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.329488][ T8875] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.331646][ T8875] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.334551][ T8875] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.336919][ T8875] ldm_validate_partition_table(): Disk read failed. [ 115.338814][ T8875] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.341160][ T8875] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.343335][ T8875] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.346357][ T8875] Dev loop5: unable to read RDB block 0 [ 115.347928][ T8875] loop5: unable to read partition table [ 115.349567][ T8875] loop5: partition table beyond EOD, truncated [ 115.351289][ T8875] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 115.351289][ T8875] ) failed (rc=-5) [ 115.424052][ T40] audit: type=1400 audit(1741690055.852:90499): avc: denied { bind } for pid=8881 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.430893][ T40] audit: type=1400 audit(1741690055.852:90500): avc: denied { accept } for pid=8881 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.489344][ T8890] net_ratelimit: 8 callbacks suppressed [ 115.489354][ T8890] openvswitch: netlink: Duplicate or invalid key (type 0). [ 115.492767][ T8890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.495300][ T5943] Bluetooth: hci3: command 0x0406 tx timeout [ 115.511511][ T8891] syz.0.871 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.565432][ T8896] kvm: pic: non byte write [ 115.661080][ T8905] loop9: detected capacity change from 0 to 1 [ 115.666776][ T8905] Dev loop9: unable to read RDB block 1 [ 115.673972][ T8905] loop9: unable to read partition table [ 115.675721][ T8905] loop9: partition table beyond EOD, truncated [ 115.677378][ T8905] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 115.686714][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 115.790904][ T40] audit: type=1400 audit(1741690056.222:90501): avc: denied { append } for pid=8911 comm="syz.2.879" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 115.791254][ T8913] random: crng reseeded on system resumption [ 115.797733][ T40] audit: type=1400 audit(1741690056.222:90502): avc: denied { open } for pid=8911 comm="syz.2.879" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 115.993434][ T40] audit: type=1400 audit(1741690056.422:90503): avc: denied { accept } for pid=8916 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.168236][ T40] audit: type=1400 audit(1741690056.602:90504): avc: denied { bind } for pid=8924 comm="syz.2.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.173398][ T40] audit: type=1400 audit(1741690056.602:90505): avc: denied { name_bind } for pid=8924 comm="syz.2.884" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 116.180652][ T40] audit: type=1400 audit(1741690056.602:90506): avc: denied { node_bind } for pid=8924 comm="syz.2.884" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 116.387596][ T8938] syz.1.889: attempt to access beyond end of device [ 116.387596][ T8938] sr0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 116.391074][ T8938] syz.1.889: attempt to access beyond end of device [ 116.391074][ T8938] sr0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 116.395196][ T8938] Mount JFS Failure: -5 [ 116.396333][ T8938] jfs_mount failed w/return code = -5 [ 116.553063][ T8951] netlink: 'syz.1.894': attribute type 21 has an invalid length. [ 116.557195][ T8951] devtmpfs: Cannot enable quota on remount [ 116.569268][ T8947] Bluetooth: Invalid esc byte 0x03 [ 116.651737][ T8957] random: crng reseeded on system resumption [ 116.761428][ T8964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8964 comm=syz.3.898 [ 116.765314][ T8965] bridge1: entered promiscuous mode [ 116.765329][ T8965] bridge1: entered allmulticast mode [ 117.423308][ T8999] __nla_validate_parse: 4 callbacks suppressed [ 117.423325][ T8999] netlink: 96 bytes leftover after parsing attributes in process `syz.1.908'. [ 117.427849][ T8999] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 117.526620][ T9000] delete_channel: no stack [ 117.725522][ T5939] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 117.726036][ T5943] Bluetooth: hci4: command 0xfc11 tx timeout [ 118.103412][ T9019] overlayfs: failed to resolve './bus/file0': -2 [ 118.658984][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 118.659990][ T9042] delete_channel: no stack [ 118.805611][ T9056] netlink: 'syz.2.926': attribute type 10 has an invalid length. [ 118.808170][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 118.821407][ T9056] syzkaller0: entered promiscuous mode [ 118.823057][ T9056] syzkaller0: entered allmulticast mode [ 120.164321][ T9083] netlink: 112 bytes leftover after parsing attributes in process `syz.3.932'. [ 120.174743][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 120.174752][ T40] audit: type=1400 audit(1741690060.612:90517): avc: denied { create } for pid=9085 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 120.219186][ T9088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42632 sclass=netlink_route_socket pid=9088 comm=syz.3.935 [ 120.330638][ T40] audit: type=1326 audit(1741690060.762:90518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.2.940" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57cf58d169 code=0x0 [ 120.408550][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 120.632116][ T9108] netlink: 112 bytes leftover after parsing attributes in process `syz.0.942'. [ 120.659581][ T9110] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 120.717224][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 120.854213][ T40] audit: type=1400 audit(1741690061.282:90519): avc: denied { ioctl } for pid=9123 comm="syz.1.947" path="socket:[26766]" dev="sockfs" ino=26766 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.860886][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 120.891975][ T40] audit: type=1400 audit(1741690061.322:90520): avc: denied { write } for pid=9127 comm="syz.1.949" name="cgroup.subtree_control" dev="cgroup2" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.899464][ T40] audit: type=1400 audit(1741690061.332:90521): avc: denied { ioctl } for pid=9127 comm="syz.1.949" path="" dev="cgroup2" ino=197 ioctlcmd=0x5630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.907761][ T40] audit: type=1400 audit(1741690061.342:90522): avc: denied { listen } for pid=9127 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.914316][ T40] audit: type=1400 audit(1741690061.352:90523): avc: denied { accept } for pid=9127 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.938686][ T9131] Bluetooth: Invalid esc byte 0x03 [ 121.018719][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 121.019404][ T9137] Bluetooth: MGMT ver 1.23 [ 121.069212][ T9142] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 121.151868][ T40] audit: type=1400 audit(1741690061.582:90524): avc: denied { getopt } for pid=9147 comm="syz.1.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.184467][ T9150] netlink: zone id is out of range [ 121.185915][ T9150] netlink: zone id is out of range [ 121.187586][ T9150] netlink: zone id is out of range [ 121.189211][ T9150] netlink: zone id is out of range [ 121.190622][ T9150] netlink: zone id is out of range [ 121.192036][ T9150] netlink: zone id is out of range [ 121.193448][ T9150] netlink: zone id is out of range [ 121.195063][ T9150] netlink: zone id is out of range [ 121.196429][ T9150] netlink: zone id is out of range [ 121.198290][ T9150] netlink: zone id is out of range [ 121.260473][ T40] audit: type=1400 audit(1741690061.692:90525): avc: denied { connect } for pid=9162 comm="syz.1.960" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.280813][ T6867] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 121.316959][ T9160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.959'. [ 122.087888][ T9168] netlink: 'syz.2.961': attribute type 13 has an invalid length. [ 122.129671][ T40] audit: type=1400 audit(1741690062.562:90526): avc: denied { mounton } for pid=9171 comm="syz.1.963" path="/233/file1/file1" dev="autofs" ino=26133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 122.389202][ T9188] IPVS: Unknown mcast interface: pim6reg1 [ 122.393340][ T9189] IPVS: Unknown mcast interface: pim6reg1 [ 122.446928][ T9199] input: syz1 as /devices/virtual/input/input14 [ 122.544946][ T9204] __nla_validate_parse: 5 callbacks suppressed [ 122.544958][ T9204] netlink: 104 bytes leftover after parsing attributes in process `syz.3.973'. [ 124.524092][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 124.524097][ T5939] Bluetooth: hci0: command 0x0406 tx timeout [ 124.528898][ T64] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 126.603979][ T5939] Bluetooth: hci3: command 0x0406 tx timeout [ 126.604013][ T64] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 126.608027][ T64] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 126.630088][ T64] ------------[ cut here ]------------ [ 126.632136][ T64] refcount_t: underflow; use-after-free. [ 126.633970][ T64] WARNING: CPU: 2 PID: 64 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 126.636494][ T64] Modules linked in: [ 126.637784][ T64] CPU: 2 UID: 0 PID: 64 Comm: kworker/2:1 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 126.641905][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.645151][ T64] Workqueue: events rfkill_op_handler [ 126.646660][ T64] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 126.648386][ T64] Code: ff 89 de e8 f8 2b f5 fc 84 db 0f 85 66 ff ff ff e8 4b 31 f5 fc c6 05 cf 32 86 0b 01 90 48 c7 c7 20 17 d3 8b e8 27 61 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 31 f5 fc 0f b6 1d aa 32 86 0b 31 [ 126.653728][ T64] RSP: 0018:ffffc90000b0f7b8 EFLAGS: 00010282 [ 126.655518][ T64] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a2269 [ 126.657739][ T64] RDX: ffff888020288000 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 126.659936][ T64] RBP: ffff8880404eac78 R08: 0000000000000001 R09: 0000000000000000 [ 126.662127][ T64] R10: 0000000000000000 R11: 0000000000000007 R12: ffff888025663c00 [ 126.664468][ T64] R13: ffff8880404eac78 R14: ffffffff85ec2cc0 R15: dffffc0000000000 [ 126.666694][ T64] FS: 0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 126.669351][ T64] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.671177][ T64] CR2: 000000110c346599 CR3: 000000002bdfc000 CR4: 0000000000352ef0 [ 126.673398][ T64] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.675875][ T64] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.678095][ T64] Call Trace: [ 126.679043][ T64] [ 126.679919][ T64] ? __warn+0xea/0x3c0 [ 126.681086][ T64] ? __pfx_vprintk_emit+0x10/0x10 [ 126.682501][ T64] ? refcount_warn_saturate+0x14a/0x210 [ 126.684254][ T64] ? report_bug+0x3c0/0x580 [ 126.685569][ T64] ? handle_bug+0x54/0xa0 [ 126.686775][ T64] ? exc_invalid_op+0x17/0x50 [ 126.688083][ T64] ? asm_exc_invalid_op+0x1a/0x20 [ 126.689534][ T64] ? __pfx_klist_children_put+0x10/0x10 [ 126.691079][ T64] ? __warn_printk+0x199/0x350 [ 126.692424][ T64] ? __warn_printk+0x1a6/0x350 [ 126.693780][ T64] ? refcount_warn_saturate+0x14a/0x210 [ 126.695439][ T64] ? refcount_warn_saturate+0x149/0x210 [ 126.696990][ T64] klist_put+0x11b/0x1b0 [ 126.698214][ T64] klist_remove+0x140/0x2b0 [ 126.699504][ T64] ? kobject_move+0x15e/0x260 [ 126.700825][ T64] ? __pfx_klist_remove+0x10/0x10 [ 126.702251][ T64] ? __pfx_kobject_move+0x10/0x10 [ 126.703746][ T64] ? get_device_parent+0x1ed/0x4e0 [ 126.705426][ T64] device_move+0x12d/0x10b0 [ 126.706716][ T64] hci_conn_del_sysfs+0x81/0x180 [ 126.708118][ T64] hci_conn_del+0x54e/0xdb0 [ 126.709399][ T64] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 126.710917][ T64] hci_conn_hash_flush+0x4bf/0x790 [ 126.712337][ T64] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 126.713986][ T64] ? 0xffffffff81000000 [ 126.715149][ T64] ? hci_inquiry_cache_flush+0x176/0x2f0 [ 126.716708][ T64] hci_dev_close_sync+0x603/0x11a0 [ 126.718173][ T64] ? __pfx_bt_err+0x10/0x10 [ 126.719458][ T64] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 126.721015][ T64] ? __pfx_lock_release+0x10/0x10 [ 126.722424][ T64] hci_dev_do_close+0x2e/0x90 [ 126.723749][ T64] hci_rfkill_set_block+0x225/0x360 [ 126.725271][ T64] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.726703][ T64] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 126.728293][ T64] rfkill_set_block+0x203/0x560 [ 126.729706][ T64] rfkill_epo+0x8e/0x1d0 [ 126.730913][ T64] rfkill_op_handler+0x262/0x280 [ 126.732297][ T64] process_one_work+0x9c5/0x1ba0 [ 126.733709][ T64] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 126.735521][ T64] ? __pfx_process_one_work+0x10/0x10 [ 126.737025][ T64] ? assign_work+0x1a0/0x250 [ 126.738369][ T64] worker_thread+0x6c8/0xf00 [ 126.739679][ T64] ? __kthread_parkme+0x148/0x220 [ 126.741091][ T64] ? __pfx_worker_thread+0x10/0x10 [ 126.742483][ T64] kthread+0x3af/0x750 [ 126.743590][ T64] ? __pfx_kthread+0x10/0x10 [ 126.744940][ T64] ? lock_acquire+0x2f/0xb0 [ 126.746227][ T64] ? __pfx_kthread+0x10/0x10 [ 126.747559][ T64] ret_from_fork+0x45/0x80 [ 126.748834][ T64] ? __pfx_kthread+0x10/0x10 [ 126.750171][ T64] ret_from_fork_asm+0x1a/0x30 [ 126.751521][ T64] [ 126.752408][ T64] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.754407][ T64] CPU: 2 UID: 0 PID: 64 Comm: kworker/2:1 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 126.757256][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.760228][ T64] Workqueue: events rfkill_op_handler [ 126.761725][ T64] Call Trace: [ 126.762659][ T64] [ 126.763495][ T64] dump_stack_lvl+0x3d/0x1f0 [ 126.764789][ T64] panic+0x71d/0x800 [ 126.765895][ T64] ? __pfx_panic+0x10/0x10 [ 126.767138][ T64] ? show_trace_log_lvl+0x29d/0x3d0 [ 126.768596][ T64] ? check_panic_on_warn+0x1f/0xb0 [ 126.770002][ T64] ? refcount_warn_saturate+0x14a/0x210 [ 126.771446][ T64] check_panic_on_warn+0xab/0xb0 [ 126.772755][ T64] __warn+0xf6/0x3c0 [ 126.773825][ T64] ? __pfx_vprintk_emit+0x10/0x10 [ 126.775155][ T64] ? refcount_warn_saturate+0x14a/0x210 [ 126.776608][ T64] report_bug+0x3c0/0x580 [ 126.777796][ T64] handle_bug+0x54/0xa0 [ 126.778961][ T64] exc_invalid_op+0x17/0x50 [ 126.780226][ T64] asm_exc_invalid_op+0x1a/0x20 [ 126.781530][ T64] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 126.783221][ T64] Code: ff 89 de e8 f8 2b f5 fc 84 db 0f 85 66 ff ff ff e8 4b 31 f5 fc c6 05 cf 32 86 0b 01 90 48 c7 c7 20 17 d3 8b e8 27 61 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 31 f5 fc 0f b6 1d aa 32 86 0b 31 [ 126.788420][ T64] RSP: 0018:ffffc90000b0f7b8 EFLAGS: 00010282 [ 126.790119][ T64] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a2269 [ 126.792278][ T64] RDX: ffff888020288000 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 126.794444][ T64] RBP: ffff8880404eac78 R08: 0000000000000001 R09: 0000000000000000 [ 126.796607][ T64] R10: 0000000000000000 R11: 0000000000000007 R12: ffff888025663c00 [ 126.798912][ T64] R13: ffff8880404eac78 R14: ffffffff85ec2cc0 R15: dffffc0000000000 [ 126.801135][ T64] ? __pfx_klist_children_put+0x10/0x10 [ 126.802688][ T64] ? __warn_printk+0x199/0x350 [ 126.804037][ T64] ? __warn_printk+0x1a6/0x350 [ 126.805401][ T64] ? refcount_warn_saturate+0x149/0x210 [ 126.806943][ T64] klist_put+0x11b/0x1b0 [ 126.808116][ T64] klist_remove+0x140/0x2b0 [ 126.809387][ T64] ? kobject_move+0x15e/0x260 [ 126.810644][ T64] ? __pfx_klist_remove+0x10/0x10 [ 126.811973][ T64] ? __pfx_kobject_move+0x10/0x10 [ 126.813355][ T64] ? get_device_parent+0x1ed/0x4e0 [ 126.814725][ T64] device_move+0x12d/0x10b0 [ 126.815957][ T64] hci_conn_del_sysfs+0x81/0x180 [ 126.817332][ T64] hci_conn_del+0x54e/0xdb0 [ 126.818569][ T64] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 126.820061][ T64] hci_conn_hash_flush+0x4bf/0x790 [ 126.821425][ T64] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 126.822950][ T64] ? 0xffffffff81000000 [ 126.824109][ T64] ? hci_inquiry_cache_flush+0x176/0x2f0 [ 126.825665][ T64] hci_dev_close_sync+0x603/0x11a0 [ 126.827093][ T64] ? __pfx_bt_err+0x10/0x10 [ 126.828390][ T64] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 126.829960][ T64] ? __pfx_lock_release+0x10/0x10 [ 126.831355][ T64] hci_dev_do_close+0x2e/0x90 [ 126.832663][ T64] hci_rfkill_set_block+0x225/0x360 [ 126.834116][ T64] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.835554][ T64] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 126.837135][ T64] rfkill_set_block+0x203/0x560 [ 126.838528][ T64] rfkill_epo+0x8e/0x1d0 [ 126.839743][ T64] rfkill_op_handler+0x262/0x280 [ 126.841138][ T64] process_one_work+0x9c5/0x1ba0 [ 126.842526][ T64] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 126.844082][ T64] ? __pfx_process_one_work+0x10/0x10 [ 126.845585][ T64] ? assign_work+0x1a0/0x250 [ 126.846879][ T64] worker_thread+0x6c8/0xf00 [ 126.848174][ T64] ? __kthread_parkme+0x148/0x220 [ 126.849589][ T64] ? __pfx_worker_thread+0x10/0x10 [ 126.851021][ T64] kthread+0x3af/0x750 [ 126.852174][ T64] ? __pfx_kthread+0x10/0x10 [ 126.853485][ T64] ? lock_acquire+0x2f/0xb0 [ 126.854770][ T64] ? __pfx_kthread+0x10/0x10 [ 126.856100][ T64] ret_from_fork+0x45/0x80 [ 126.857379][ T64] ? __pfx_kthread+0x10/0x10 [ 126.858695][ T64] ret_from_fork_asm+0x1a/0x30 [ 126.860074][ T64] [ 126.861513][ T64] Kernel Offset: disabled [ 126.862917][ T64] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:47:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000140d37 RBX=0000000000000000 RCX=ffffffff8b579469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd36a20 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90626310 R15=0000000000000000 RIP=ffffffff8b57a84f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f57d032ff98 CR3=000000004c506000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe68484b60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0c0a0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0c0a0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0c0a0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0c0a0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0c0a0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0c0a0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000a2f3d RBX=0000000000000001 RCX=ffffffff8b579469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd36a20 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d4e6f85 R10=ffff88806a737c2b R11=0000000000000000 R12=0000000000000001 R13=ffff88801dad8000 R14=ffffffff90626310 R15=0000000000000000 RIP=ffffffff8b57a84f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055eb5d49b908 CR3=0000000023838000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559840673 00005555598404c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555598b30cd 00005555598b2360 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84bef25b58ae2002 4df9f91420080280 0318080006100020 100006016da80880 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00003f0112360800 0320100002800442 08000c0800010800 0a016b8269df520a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c10000010000801 71f8000000000100 2402090100000000 00ffff047f400000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6273752f7665642f 01ffffffffffffff ffdd080580031fff ffffffffff040004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011fffffffffffff 041fffffffffffff 0401ac100006016e e800100004080002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000060165e21e10 00000404016eea10 03200c0e040c0800 0300100000100005 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004060171a20023 7665646469682f62 73752f7665642f01 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dd080580031fffff ffffffff0400046c 1000001000080171 f800000000010024 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540af35 RDI=ffffffff9ab837c0 RBP=ffffffff9ab83780 RSP=ffffc90000b0f138 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000000000000b R12=0000000000000000 R13=0000000000000036 R14=ffffffff9ab83780 R15=0000000000000000 RIP=ffffffff8540af5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c346599 CR3=000000002bdfc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffe8000 Opmask01=0000000000000000 Opmask02=000000003511001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000377ede41 0000000000000008 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 91e719051427dcd2 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec16ffe70 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6970726100656c 69666f7270000920 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c0fe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1600000000000000 00000000000002ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1600000000000000 00000000000002ff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010f00010041 000000020000006a 0000000000000000 000000376270616c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 000470e2e55b37fd 91e719051427dcd2 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 00044ad8df5b0dc7 91dd1905141ddcd2 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000049 0000000000000000 000000326e151f1e 6c5f21bbe2c3450d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000065676173 73656d5f70636864 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000060021 0000000000000000 00000000656d6173 73676d5e70637867 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f27aff3d7b9f9 72610fe5fb7b7bdf 656761737f7d7f7f fffffffff2e37d6f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=00000000000c9c8f RBX=0000000000000003 RCX=ffffffff8b579469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd36a20 RBP=ffffed1003b5b910 RSP=ffffc900001b7e08 R8 =0000000000000001 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dadc880 R14=ffffffff90626310 R15=0000000000000000 RIP=ffffffff8b57a84f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555865305c8 CR3=0000000027122000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=00000000ffffffff Opmask02=00000000fff80000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe051439a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000