last executing test programs: 5.893169371s ago: executing program 2 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) getrlimit(0xd, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setrlimit(0x4, &(0x7f0000000380)={0x7, 0x8}) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x6622, 0x0, 0x40}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000640)=0x4, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) creat(0x0, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r2, 0x0, 0x49) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) 5.527096351s ago: executing program 0 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x38011, 0xffffffffffffffff, 0xdfb8c000) quotactl$Q_GETQUOTA(0x0, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000008600)=0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x2c}}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) 5.509227158s ago: executing program 1 (id=694): write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0), 0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000900)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x6, 0x2, 0x8, 0xf0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) chdir(&(0x7f0000000080)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000104715c1da1c773f3830000000000000500010002000000060006400006"], 0x24}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.294238246s ago: executing program 3 (id=695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000001c0)={0x400, 0x280, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x0, 0x0, 0x0) 4.431900262s ago: executing program 3 (id=696): timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200"], &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x17}, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[0x0], &(0x7f00000007c0), 0x3f00, 0x1, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x0, r4, r3}) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 4.418996646s ago: executing program 2 (id=704): r0 = socket(0x2, 0x2, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) sched_setscheduler(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0xf, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='tlb_flush\x00', r7}, 0x10) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 4.342670661s ago: executing program 1 (id=697): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="12000000030603000000000000000000000000000000020073797a3000000000ddfd5f0b7bf7fd4795268a19173c2f6f285eaf879d86722610b2182f0bed7bd8e476ec30a604a3a373452f74cdb59870513f23b925e3145299626307b6b419cbbb1753afe57f1b1756a1c7c4375c893b74c4b4bdb1456252af6ddeaebb6b85cf700b6ac098b4"], 0x1c}}, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 4.192900517s ago: executing program 0 (id=698): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fanotify_init(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) socket$igmp6(0xa, 0x3, 0x2) write$cgroup_int(r1, &(0x7f0000000040), 0xfea0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000480)=""/110, 0x6e}, {0x0}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/134, 0x86}, {&(0x7f0000000600)=""/22, 0x16}, {&(0x7f0000000640)=""/199, 0xc7}], 0x9) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000404}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x5}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x2880008, 0xffffffffffffffff, 0x0, 0x7, 0xa, 0x2000000}) r4 = fsopen(&(0x7f0000000040)='proc\x00', 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000002c0), 0x4) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fanotify_mark(r0, 0xd, 0x8001029, r5, 0x0) 4.111281915s ago: executing program 0 (id=699): ftruncate(0xffffffffffffffff, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffff0, 0x501200) inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff0000", @ANYRES32=r5, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f00000001c0)={r7, r7, 0x1, 0x5, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f0000000880)={&(0x7f00000009c0)=[r7, r7, r7], &(0x7f0000000680)=[0x2], 0x3}) 3.488277726s ago: executing program 3 (id=700): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) chdir(&(0x7f0000000400)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) ioperm(0x0, 0x4, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3f7, 0x4, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1004}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'veth0_virt_wifi\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendfile(r3, r4, &(0x7f0000000100), 0x10001) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0xfc, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @addr={0xa, 0xe}}, {0x9, 0x3f, 0x0, 0x0, @time={0x4, 0x2}, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @queue={0xbe, {0x3, 0x8}}}, {0x0, 0x3, 0x0, 0xfe, @time, {0x0, 0x1f}, {}, @connect={{0x3}, {0x4, 0x3}}}], 0x8c) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x1, 0x3}, 0x6) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000018c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000e8ffffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x0, 0x0, 0x0, 0x8ff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa6) 2.149516386s ago: executing program 3 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000280)={0x0, &(0x7f0000000180)}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x9360, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) chdir(&(0x7f0000000540)='./file0\x00') ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100001000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000600)) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) r5 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, 0x0) r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) 2.141881903s ago: executing program 0 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 2.140629753s ago: executing program 1 (id=702): socket$unix(0x1, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}, {&(0x7f00000001c0)=""/90}], 0x2e, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000000180)) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 2.140368349s ago: executing program 2 (id=703): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xbf) r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)) unshare(0x60060000) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$sw_sync(0xffffff9c, &(0x7f00000004c0), 0x109580, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000500)=0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "7680ecfb284ad114"}}}, 0x11) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f00000023c0)=""/235, 0xeb}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xcc, r3, 0x304, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x532}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x72}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_open_dev$sndctrl(&(0x7f0000000200), 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000040)={0x0, "9a29fc81921a42e19a779e32c20297d2a53b6db3c9b12df9c74ca94e90c667d972"}}) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x5c}, 0x1, 0x0, 0x0, 0x400d5}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000019c0)=""/4080, 0xff0}], 0x1}, 0x40000162) 2.032040854s ago: executing program 2 (id=705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000001c0)={0x400, 0x280, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x0, 0x0, 0x0) 1.198363669s ago: executing program 1 (id=706): execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) writev(r0, &(0x7f000000e8c0)=[{&(0x7f000000d780)="129db840dd6d20fd959904e19a53216f", 0x10}, {0x0}], 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x64000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x982058, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="01010101", 0x4) close(0xffffffffffffffff) 988.183277ms ago: executing program 2 (id=707): write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0), 0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000900)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x6, 0x2, 0x8, 0xf0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) chdir(&(0x7f0000000080)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000104715c1da1c773f3830000000000000500010002000000060006400006"], 0x24}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 958.2503ms ago: executing program 0 (id=716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000001c0)={0x400, 0x280, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x0, 0x0, 0x0) 935.490328ms ago: executing program 1 (id=708): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x12, &(0x7f00000000c0)="61df712bc884fed5722780b605a7", 0x0, 0x1bd0}, 0x28) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x10}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1, 0x0, 0x0) 899.352654ms ago: executing program 3 (id=709): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) fsetxattr(r8, &(0x7f0000000000)=@random={'user.', 'cgroup.controllers\x00'}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r10, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000b40)={0x0, {{0x2, 0x0, @broadcast}}}, 0x90) 197.861176ms ago: executing program 1 (id=711): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) chdir(&(0x7f0000000400)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) ioperm(0x0, 0x4, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3f7, 0x4, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1004}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'veth0_virt_wifi\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendfile(r3, r4, &(0x7f0000000100), 0x10001) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0xfc, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @addr={0xa, 0xe}}, {0x9, 0x3f, 0x0, 0x0, @time={0x4, 0x2}, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @queue={0xbe, {0x3, 0x8}}}, {0x0, 0x3, 0x0, 0xfe, @time, {0x0, 0x1f}, {}, @connect={{0x3}, {0x4, 0x3}}}], 0x8c) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x1, 0x3}, 0x6) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000018c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000e8ffffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x0, 0x0, 0x0, 0x8ff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa6) 197.53588ms ago: executing program 2 (id=712): socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000040)='net/igmp\x00') ioctl$TCFLSH(r2, 0x40204706, 0x2) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r6 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x928\xd3\x8e\xd3\xc6\x86\x93\xc3\xfd\xe1\x93G\';\x1fz\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9[TJ\x98\x0e\xea;k\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r9) 158.64977ms ago: executing program 0 (id=713): ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x0) syz_emit_ethernet(0x289, &(0x7f0000000880)=ANY=[], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 0s ago: executing program 3 (id=714): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x42002, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd2ec9b3d94f4ab7c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1401, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4000841) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, r2}}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) ioperm(0x0, 0x5, 0x6) unshare(0x0) r4 = memfd_create(&(0x7f0000000040)='\\\x00', 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000000), 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{}, 0x9}}}, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) listen(r3, 0x800803ff) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) shutdown(r3, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2000000001) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x1) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) kernel console output (not intermixed with test programs): SS network, BSSID 50:50:50:50:50:50 [ 52.573773][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.575918][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.584166][ T39] audit: type=1400 audit(1726849938.252:353): avc: denied { mount } for pid=5645 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.870836][ T5670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 53.564334][ T39] audit: type=1400 audit(1726849939.232:354): avc: denied { write } for pid=5682 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 53.646303][ T5340] Bluetooth: hci4: command tx timeout [ 54.465763][ T5663] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 54.618213][ T5663] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 54.620566][ T5663] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.622610][ T5663] usb 7-1: Product: syz [ 54.623714][ T5663] usb 7-1: Manufacturer: syz [ 54.624926][ T5663] usb 7-1: SerialNumber: syz [ 54.629364][ T5663] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 54.660214][ T5663] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 54.813889][ T5695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57222 sclass=netlink_route_socket pid=5695 comm=syz.0.73 [ 54.821688][ T5695] geneve2: entered promiscuous mode [ 54.823127][ T5695] geneve2: entered allmulticast mode [ 54.957986][ T5371] usb 7-1: USB disconnect, device number 4 [ 54.986914][ T39] audit: type=1400 audit(1726849940.662:355): avc: denied { nlmsg_write } for pid=5698 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.328879][ T5704] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.333430][ T5704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'. [ 55.336293][ T39] audit: type=1400 audit(1726849941.012:356): avc: denied { search } for pid=4811 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.443141][ T5706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.446125][ T5706] batadv_slave_0: entered allmulticast mode [ 55.514025][ T5713] zonefs (nullb0) ERROR: Not a zoned block device [ 55.527394][ T5713] nftables ruleset with unbound set [ 55.685866][ T5720] coredump: 90(syz.2.79): interrupted: fatal signal pending [ 55.686781][ T39] audit: type=1326 audit(1726849941.362:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.1.80" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71b557def9 code=0x0 [ 55.687965][ T5720] coredump: 90(syz.2.79): written to core: VMAs: 34, size 99516416; core: 1370894 bytes, pos 1687552 [ 55.725739][ T5340] Bluetooth: hci4: command tx timeout [ 55.727250][ T5663] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 55.729299][ T5663] ath9k_htc: Failed to initialize the device [ 55.732077][ T5371] usb 7-1: ath9k_htc: USB layer deinitialized [ 55.743570][ T39] audit: type=1400 audit(1726849941.412:358): avc: denied { mount } for pid=5721 comm="syz.1.80" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.752009][ T5719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 55.752720][ T39] audit: type=1400 audit(1726849941.422:359): avc: denied { ioctl } for pid=5721 comm="syz.1.80" path="socket:[9953]" dev="sockfs" ino=9953 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.066073][ T5371] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 56.205263][ T65] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.209265][ T65] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.212013][ T65] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.220060][ T65] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.224258][ T65] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 56.226935][ T65] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.249219][ T5371] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 56.251523][ T5371] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.254112][ T5371] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 56.256496][ T5371] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.260315][ T5371] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 56.262647][ T5371] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 56.264711][ T5371] usb 7-1: Product: syz [ 56.269448][ T5371] usb 7-1: Manufacturer: syz [ 56.277811][ T5371] cdc_wdm 7-1:1.0: skipping garbage [ 56.279195][ T5371] cdc_wdm 7-1:1.0: skipping garbage [ 56.283669][ T5371] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 56.285242][ T5371] cdc_wdm 7-1:1.0: Unknown control protocol [ 56.309966][ T5733] chnl_net:caif_netlink_parms(): no params data found [ 56.370955][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.372855][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.374735][ T5733] bridge_slave_0: entered allmulticast mode [ 56.377132][ T5733] bridge_slave_0: entered promiscuous mode [ 56.379835][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.381732][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.383590][ T5733] bridge_slave_1: entered allmulticast mode [ 56.385532][ T5733] bridge_slave_1: entered promiscuous mode [ 56.409576][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.413385][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.437656][ T5733] team0: Port device team_slave_0 added [ 56.441814][ T5733] team0: Port device team_slave_1 added [ 56.463411][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 56.467083][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.468921][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.475615][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.479927][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.481798][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.489146][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.501393][ T30] usb 7-1: USB disconnect, device number 5 [ 56.525211][ T5733] hsr_slave_0: entered promiscuous mode [ 56.531019][ T5733] hsr_slave_1: entered promiscuous mode [ 56.533048][ T5733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.535036][ T5733] Cannot create hsr debugfs directory [ 56.598789][ T5733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.683939][ T5733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.754944][ T5733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.834993][ T5733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.912828][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.915916][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.919141][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.922177][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.941991][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.943945][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.945981][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.948181][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.968191][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.974303][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.977911][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.992743][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.998171][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.000569][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.005188][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.007100][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.108432][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.168410][ T5733] veth0_vlan: entered promiscuous mode [ 57.186308][ T5733] veth1_vlan: entered promiscuous mode [ 57.227647][ T5733] veth0_macvtap: entered promiscuous mode [ 57.236645][ T5733] veth1_macvtap: entered promiscuous mode [ 57.254458][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.258162][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.263050][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.266022][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.268934][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.272010][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.274799][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.278674][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.286288][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.299565][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.304395][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.308916][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.312608][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.315905][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.319471][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.323190][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.327075][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.331316][ T5733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.335572][ T5733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.347579][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.360970][ T5733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.373319][ T5733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.380120][ T5733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.382601][ T5733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.427558][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.429753][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.443351][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.447802][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.620764][ T5759] netlink: 'syz.3.84': attribute type 4 has an invalid length. [ 57.632428][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.634918][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.650663][ T5759] netlink: 'syz.3.84': attribute type 4 has an invalid length. [ 57.666031][ T5760] bridge_slave_1: left allmulticast mode [ 57.670378][ T5760] bridge_slave_1: left promiscuous mode [ 57.672549][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.681406][ T5760] bridge_slave_0: left allmulticast mode [ 57.683013][ T5760] bridge_slave_0: left promiscuous mode [ 57.684647][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.806096][ T65] Bluetooth: hci4: command tx timeout [ 57.944545][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 57.944554][ T39] audit: type=1400 audit(1726849943.612:367): avc: denied { create } for pid=5765 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 57.957263][ T39] audit: type=1400 audit(1726849943.622:368): avc: denied { accept } for pid=5765 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 58.297304][ T65] Bluetooth: hci5: command tx timeout [ 58.486542][ T5778] pim6reg1: entered promiscuous mode [ 58.488311][ T5778] pim6reg1: entered allmulticast mode [ 58.721382][ T39] audit: type=1400 audit(1726849944.392:369): avc: denied { set_context_mgr } for pid=5780 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 58.960664][ T39] audit: type=1400 audit(1726849944.632:370): avc: denied { setopt } for pid=5783 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.974917][ T39] audit: type=1400 audit(1726849944.642:371): avc: denied { map } for pid=5780 comm="syz.2.94" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.019737][ T5784] binder: BINDER_SET_CONTEXT_MGR already set [ 59.029164][ T5784] binder: 5780:5784 ioctl 4018620d 20000040 returned -16 [ 59.032617][ T5782] binder: 5780:5782 ioctl c0306201 0 returned -14 [ 59.061403][ T39] audit: type=1400 audit(1726849944.732:372): avc: denied { write } for pid=5783 comm="syz.3.95" path="socket:[10146]" dev="sockfs" ino=10146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.067015][ T5766] coredump: 18(syz.1.89): written to core: VMAs: 33, size 99442688; core: 62122202 bytes, pos 99454976 [ 59.359215][ T39] audit: type=1400 audit(1726849945.032:373): avc: denied { connect } for pid=5788 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.378467][ T39] audit: type=1400 audit(1726849945.052:374): avc: denied { write } for pid=5788 comm="syz.3.97" path="socket:[10154]" dev="sockfs" ino=10154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.398345][ T5790] mmap: syz.3.97 (5790) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.475255][ T5795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 59.477168][ T39] audit: type=1400 audit(1726849945.152:375): avc: denied { create } for pid=5791 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.483274][ T39] audit: type=1400 audit(1726849945.152:376): avc: denied { bind } for pid=5791 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.815736][ T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 59.862230][ T5792] Zero length message leads to an empty skb [ 59.886049][ T65] Bluetooth: hci4: command tx timeout [ 59.977570][ T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.980952][ T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.985071][ T30] usb 7-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 59.989237][ T5801] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 59.989237][ T5801] program syz.1.99 not setting count and/or reply_len properly [ 59.994951][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.997988][ T30] usb 7-1: SerialNumber: syz [ 60.366351][ T65] Bluetooth: hci5: command tx timeout [ 60.439357][ T30] usb 7-1: USB disconnect, device number 6 [ 60.453191][ T5578] udevd[5578]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.817139][ T5817] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 60.922796][ T5820] kvm: emulating exchange as write [ 61.490833][ T5825] syz.1.105 (5825): drop_caches: 2 [ 61.635868][ T5835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 61.646919][ T5835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 62.449010][ T65] Bluetooth: hci5: command tx timeout [ 63.002120][ T5862] syz.3.113 (5862): drop_caches: 2 [ 63.939858][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 63.939925][ T39] audit: type=1400 audit(1726849949.612:390): avc: denied { ioctl } for pid=5876 comm="syz.0.119" path="socket:[11518]" dev="sockfs" ino=11518 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.956412][ T39] audit: type=1400 audit(1726849949.622:391): avc: denied { write } for pid=5876 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.009048][ T39] audit: type=1400 audit(1726849949.682:392): avc: denied { setopt } for pid=5876 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.382438][ T5885] syz.1.120: attempt to access beyond end of device [ 64.382438][ T5885] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 64.386086][ T5885] EXT4-fs (nbd1): unable to read superblock [ 64.535728][ T65] Bluetooth: hci5: command tx timeout [ 64.798306][ T5889] input: syz1 as /devices/virtual/input/input10 [ 64.798428][ T39] audit: type=1400 audit(1726849950.472:393): avc: denied { connect } for pid=5886 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.862698][ T39] audit: type=1400 audit(1726849950.532:394): avc: denied { shutdown } for pid=5886 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.909254][ T39] audit: type=1400 audit(1726849950.582:395): avc: denied { read } for pid=5886 comm="syz.1.121" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 64.915117][ T39] audit: type=1400 audit(1726849950.582:396): avc: denied { open } for pid=5886 comm="syz.1.121" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 65.397415][ T39] audit: type=1326 audit(1726849951.072:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.2.118" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe177def9 code=0x0 [ 65.447348][ T39] audit: type=1400 audit(1726849951.122:398): avc: denied { write } for pid=5899 comm="syz.3.124" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.569662][ T5892] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.571684][ T5892] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 65.581898][ T5892] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 65.618044][ T5892] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.619772][ T5892] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 65.625989][ T5892] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 65.644090][ T5892] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.650019][ T5892] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 65.656060][ T5892] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 65.660591][ T5892] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 65.662293][ T5892] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 65.667686][ T5892] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 65.677126][ T5892] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 65.678751][ T5892] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 65.681613][ T5892] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 65.939022][ T986] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.115805][ T986] usb 8-1: Using ep0 maxpacket: 8 [ 66.118399][ T986] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.120632][ T986] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 66.123815][ T986] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.127373][ T986] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.130285][ T986] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 66.133987][ T986] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.136291][ T986] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 66.139285][ T986] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.142370][ T986] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.145360][ T986] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 66.150166][ T986] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.152222][ T986] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 66.188245][ T986] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.192711][ T986] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.199027][ T986] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 66.205538][ T986] usb 8-1: string descriptor 0 read error: -22 [ 66.207492][ T986] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 66.210444][ T986] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.230048][ T986] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 66.554276][ T5923] usb usb8: usbfs: process 5923 (syz.0.129) did not claim interface 0 before use [ 66.600367][ T986] usb 8-1: USB disconnect, device number 2 [ 66.613519][ T39] audit: type=1400 audit(1726849952.282:399): avc: denied { getopt } for pid=5925 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.816907][ T5900] overlayfs: failed to resolve './file1': -2 [ 67.023515][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.645762][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.645783][ T5340] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.687063][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 67.725764][ T65] Bluetooth: hci4: command 0x0c1a tx timeout [ 67.727404][ T5340] Bluetooth: hci5: command 0x0405 tx timeout [ 67.896215][ T5938] serio: Serial port ptm0 [ 68.886541][ T5340] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 68.929757][ T5937] coredump: 45(syz.3.133): written to core: VMAs: 41, size 99807232; core: 73922346 bytes, pos 99827712 [ 68.989679][ T5340] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 69.097020][ T5340] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.423033][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 69.423043][ T39] audit: type=1326 audit(1726849955.092:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe177def9 code=0x7ffc0000 [ 69.430928][ T39] audit: type=1326 audit(1726849955.092:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe177def9 code=0x7ffc0000 [ 69.437085][ T39] audit: type=1326 audit(1726849955.092:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.140" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ffbe177def9 code=0x7ffc0000 [ 69.442950][ T39] audit: type=1326 audit(1726849955.092:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe177def9 code=0x7ffc0000 [ 69.449262][ T39] audit: type=1326 audit(1726849955.092:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.140" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ffbe177def9 code=0x7ffc0000 [ 69.454835][ T39] audit: type=1326 audit(1726849955.092:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe177def9 code=0x7ffc0000 [ 69.461034][ T39] audit: type=1326 audit(1726849955.092:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.140" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffbe177def9 code=0x7ffc0000 [ 69.534006][ T39] audit: type=1326 audit(1726849955.202:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe177def9 code=0x7fc00000 [ 69.545709][ T39] audit: type=1326 audit(1726849955.202:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.140" exe="/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ffbe177def9 code=0x7fc00000 [ 69.580867][ T5966] fuse: Bad value for 'fd' [ 69.592637][ T5966] netlink: 'syz.2.140': attribute type 1 has an invalid length. [ 69.595352][ T5966] netlink: 'syz.2.140': attribute type 2 has an invalid length. [ 69.599157][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 69.726301][ T5340] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.735999][ T5340] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.805910][ T5340] Bluetooth: hci5: command 0x0405 tx timeout [ 69.810477][ T39] audit: type=1400 audit(1726849955.482:412): avc: denied { connect } for pid=5969 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.019348][ T5975] netlink: 'syz.1.142': attribute type 2 has an invalid length. [ 70.025561][ T5975] : entered promiscuous mode [ 70.878069][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 71.009725][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 71.010003][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.165746][ T5340] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.540389][ T6037] binder: 6036:6037 ioctl c0306201 20000580 returned -14 [ 71.545130][ T6037] binder: 6036:6037 ioctl 4b31 20000280 returned -22 [ 71.550739][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 71.815801][ T5340] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.817426][ T5340] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.832076][ T69] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 71.885772][ T65] Bluetooth: hci5: command 0x0405 tx timeout [ 72.264937][ T6054] pim6reg1: entered promiscuous mode [ 72.267170][ T6054] pim6reg1: entered allmulticast mode [ 72.559375][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.630755][ T65] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 73.710207][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 74.138271][ T6088] cdrom: dropping to single frame dma [ 74.326548][ T6094] futex_wake_op: syz.2.164 tries to shift op by -1; fix this program [ 74.618396][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 74.622828][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.166'. [ 74.630707][ T5663] IPVS: starting estimator thread 0... [ 74.715824][ T6103] IPVS: using max 36 ests per chain, 86400 per kthread [ 75.106358][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 75.106367][ T39] audit: type=1400 audit(1726849960.782:435): avc: denied { create } for pid=6104 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.114435][ T39] audit: type=1400 audit(1726849960.782:436): avc: denied { write } for pid=6104 comm="syz.3.167" name="dev" dev="proc" ino=4026534014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.133384][ T39] audit: type=1400 audit(1726849960.802:437): avc: denied { unmount } for pid=5331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 75.180576][ T6105] macvlan0: entered allmulticast mode [ 75.182026][ T6105] veth1_vlan: entered allmulticast mode [ 75.197273][ T6110] syz.2.168[6110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.197327][ T6110] syz.2.168[6110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.221891][ T39] audit: type=1400 audit(1726849960.892:438): avc: denied { mount } for pid=6111 comm="syz.3.170" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 75.246268][ T39] audit: type=1326 audit(1726849960.902:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.168" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe177def9 code=0x0 [ 75.257581][ T6114] netlink: 116 bytes leftover after parsing attributes in process `syz.0.171'. [ 75.327873][ T6106] macvlan0: left allmulticast mode [ 75.329304][ T6106] veth1_vlan: left allmulticast mode [ 75.350410][ T6118] netlink: 'syz.0.172': attribute type 9 has an invalid length. [ 75.352449][ T6118] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.172'. [ 75.394786][ T39] audit: type=1400 audit(1726849961.062:440): avc: denied { setopt } for pid=6111 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.056464][ T39] audit: type=1400 audit(1726849961.732:441): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 76.112252][ T39] audit: type=1326 audit(1726849961.782:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.173" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71b557def9 code=0x0 [ 76.122166][ T65] Bluetooth: hci5: unexpected subevent 0x19 length: 32 > 28 [ 76.125151][ T65] Bluetooth: hci5: Unable to find connection with handle 0x1414 [ 76.130331][ T1285] cfg80211: failed to load regulatory.db [ 76.171562][ T6136] mmap: syz.1.173 (6136): VmData 37609472 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 76.375388][ T39] audit: type=1400 audit(1726849962.042:443): avc: denied { write } for pid=6140 comm="syz.0.177" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.381974][ T39] audit: type=1400 audit(1726849962.052:444): avc: denied { ioctl } for pid=6140 comm="syz.0.177" path="/dev/ppp" dev="devtmpfs" ino=714 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.541633][ T6145] 9pnet_fd: Insufficient options for proto=fd [ 76.695923][ T65] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 76.698960][ T65] Bluetooth: hci1: Injecting HCI hardware error event [ 76.702695][ T5340] Bluetooth: hci1: hardware error 0x00 [ 76.840530][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.179'. [ 76.883699][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 76.902573][ T6147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6147 comm=syz.3.179 [ 77.042850][ T6151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 78.040596][ T828] IPVS: starting estimator thread 0... [ 78.123596][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 78.126052][ T6175] IPVS: using max 36 ests per chain, 86400 per kthread [ 78.131330][ T6182] veth0_macvtap: left promiscuous mode [ 78.188885][ T6166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.195816][ T6166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.197462][ T6166] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 78.202204][ T6185] ptrace attach of "/syz-executor exec"[5330] was attempted by "/syz-executor exec"[6185] [ 78.205943][ T6166] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 78.765874][ T5340] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 79.612752][ T5340] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.735079][ T6218] input: syz0 as /devices/virtual/input/input11 [ 79.828126][ T6228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.833900][ T6228] x_tables: duplicate underflow at hook 1 [ 80.205991][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.207697][ T5340] Bluetooth: hci4: command 0x0c1a tx timeout [ 80.285821][ T5340] Bluetooth: hci5: command 0x0405 tx timeout [ 80.894498][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 80.894508][ T39] audit: type=1400 audit(1726849966.562:459): avc: denied { write } for pid=6248 comm="syz.0.204" name="rtc0" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.998892][ T6254] input: syz1 as /devices/virtual/input/input12 [ 81.602971][ T39] audit: type=1400 audit(1726849967.272:460): avc: denied { write } for pid=6257 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.647246][ T6259] mkiss: ax0: crc mode is auto. [ 82.295757][ T5340] Bluetooth: hci4: command 0x0c1a tx timeout [ 82.426196][ T6271] vivid-007: ================= START STATUS ================= [ 82.428557][ T6271] vivid-007: Enable Output Cropping: true grabbed [ 82.430639][ T6271] vivid-007: Enable Output Composing: true grabbed [ 82.433551][ T6271] vivid-007: Enable Output Scaler: true grabbed [ 82.435409][ T6271] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 82.437435][ T6271] vivid-007: Transmit Mode: HDMI grabbed [ 82.438970][ T6271] vivid-007: Hotplug Present: 0x00000000 [ 82.440499][ T6271] vivid-007: RxSense Present: 0x00000000 [ 82.442026][ T6271] vivid-007: EDID Present: 0x00000000 [ 82.443499][ T6271] vivid-007: ================== END STATUS ================== [ 83.240068][ T6286] "syz.2.211" (6286) uses obsolete ecb(arc4) skcipher [ 83.585934][ T6299] nbd3: detected capacity change from 0 to 22 [ 83.605485][ T6303] block nbd3: shutting down sockets [ 83.613281][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.615855][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.618695][ T5578] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.621544][ T5578] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.623727][ T5578] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.628196][ T5578] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.630296][ T5578] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.632659][ T5578] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.634748][ T5578] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.656092][ T5578] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.658198][ T5578] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.660536][ T5578] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.662581][ T5578] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.664938][ T5578] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.667261][ T5578] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.669613][ T5578] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.671672][ T5578] ldm_validate_partition_table(): Disk read failed. [ 83.673637][ T5578] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.676945][ T5578] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.679181][ T5578] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.681515][ T5578] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.683604][ T5578] Dev nbd3: unable to read RDB block 0 [ 83.685147][ T5578] nbd3: unable to read partition table [ 83.687105][ T5578] nbd3: partition table beyond EOD, truncated [ 83.703513][ T6297] ldm_validate_partition_table(): Disk read failed. [ 83.705596][ T6297] Dev nbd3: unable to read RDB block 0 [ 83.707907][ T6297] nbd3: unable to read partition table [ 83.710484][ T6297] nbd3: partition table beyond EOD, truncated [ 83.716608][ T5578] ldm_validate_partition_table(): Disk read failed. [ 83.718512][ T5578] Dev nbd3: unable to read RDB block 0 [ 83.720085][ T5578] nbd3: unable to read partition table [ 83.721581][ T5578] nbd3: partition table beyond EOD, truncated [ 83.766082][ T39] audit: type=1400 audit(1726849969.442:461): avc: denied { write } for pid=6300 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.766352][ T6302] ieee802154 phy1 wpan1: encryption failed: -22 [ 83.861391][ T39] audit: type=1400 audit(1726849969.532:462): avc: denied { read } for pid=6305 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.446535][ T65] Bluetooth: hci5: command 0x0405 tx timeout [ 84.831157][ T6274] coredump: 1(syz.0.206): interrupted: fatal signal pending [ 84.833137][ T6274] coredump: 1(syz.0.206): written to core: VMAs: 38, size 99643392; core: 25635870 bytes, pos 34467840 [ 84.873074][ T39] audit: type=1804 audit(1726849970.542:463): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.217" name="/newroot/36/bus/bus" dev="overlay" ino=225 res=1 errno=0 [ 85.044699][ T6326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 85.277005][ T6332] netlink: 830 bytes leftover after parsing attributes in process `syz.2.220'. [ 85.845763][ T39] audit: type=1400 audit(1726849971.462:464): avc: denied { setopt } for pid=6338 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.842842][ T6361] input: syz0 as /devices/virtual/input/input13 [ 87.686327][ T6374] ieee802154 phy1 wpan1: encryption failed: -22 [ 87.721644][ T35] IPVS: starting estimator thread 0... [ 87.815750][ T6378] IPVS: using max 36 ests per chain, 86400 per kthread [ 88.013557][ T6382] netlink: 830 bytes leftover after parsing attributes in process `syz.1.231'. [ 88.458673][ T6385] mkiss: ax0: crc mode is auto. [ 88.543434][ T6388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.233'. [ 89.543981][ T6366] coredump: 1(syz.2.226): written to core: VMAs: 38, size 99643392; core: 62278686 bytes, pos 99651584 [ 90.989657][ T35] IPVS: starting estimator thread 0... [ 91.076525][ T6418] IPVS: using max 35 ests per chain, 84000 per kthread [ 91.765785][ T63] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 91.915747][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 91.919197][ T63] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 91.922108][ T63] usb 7-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 91.925028][ T63] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.929312][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.938939][ T39] audit: type=1400 audit(1726849977.612:465): avc: denied { write } for pid=4811 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.955543][ T39] audit: type=1400 audit(1726849977.612:466): avc: denied { remove_name } for pid=4811 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.964370][ T39] audit: type=1400 audit(1726849977.612:467): avc: denied { rename } for pid=4811 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.976147][ T39] audit: type=1400 audit(1726849977.612:468): avc: denied { add_name } for pid=4811 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.984985][ T39] audit: type=1400 audit(1726849977.612:469): avc: denied { unlink } for pid=4811 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.994163][ T39] audit: type=1400 audit(1726849977.612:470): avc: denied { create } for pid=4811 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.297715][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'. [ 92.340106][ T6444] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 92.506990][ T6435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.508919][ T6435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.511190][ T6435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 92.516718][ T6435] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 92.525402][ T35] usb 7-1: USB disconnect, device number 7 [ 92.595718][ T65] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 93.140380][ T6460] pim6reg1: entered promiscuous mode [ 93.141841][ T6460] pim6reg1: entered allmulticast mode [ 93.544463][ T42] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 93.687248][ T6474] netlink: 830 bytes leftover after parsing attributes in process `syz.3.252'. [ 93.816106][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.820716][ T6443] coredump: 1(syz.3.243): written to core: VMAs: 38, size 99643392; core: 62282782 bytes, pos 99651584 [ 94.120858][ T6481] netlink: 'syz.3.254': attribute type 4 has an invalid length. [ 94.198136][ T6483] netlink: 'syz.3.254': attribute type 4 has an invalid length. [ 94.315915][ T6484] nbd2: detected capacity change from 0 to 22 [ 94.326370][ T6485] block nbd2: shutting down sockets [ 94.328054][ T6483] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 94.345961][ C0] blk_print_req_error: 40 callbacks suppressed [ 94.345970][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.351444][ C0] buffer_io_error: 40 callbacks suppressed [ 94.351450][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 94.375956][ T5323] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.378317][ T5323] Buffer I/O error on dev nbd2, logical block 0, async page read [ 94.380421][ T5323] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.382743][ T5323] Buffer I/O error on dev nbd2, logical block 0, async page read [ 94.384763][ T5323] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.388063][ T5323] Buffer I/O error on dev nbd2, logical block 0, async page read [ 94.390135][ T5323] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.392475][ T5323] Buffer I/O error on dev nbd2, logical block 0, async page read [ 94.394526][ T5323] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.397253][ T5323] Buffer I/O error on dev nbd2, logical block 0, async page read [ 94.399656][ T5323] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.402000][ T5323] Buffer I/O error on dev nbd2, logical block 0, async page read [ 94.404031][ T5323] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.406746][ T5323] Buffer I/O error on dev nbd2, logical block 0, async page read [ 94.408855][ T5323] ldm_validate_partition_table(): Disk read failed. [ 94.410678][ T5323] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.413077][ T5323] Buffer I/O error on dev nbd2, logical block 0, async page read [ 94.415320][ T5323] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.418011][ T5323] Buffer I/O error on dev nbd2, logical block 0, async page read [ 94.420207][ T5323] Dev nbd2: unable to read RDB block 0 [ 94.421838][ T5323] nbd2: unable to read partition table [ 94.423453][ T5323] nbd2: partition table beyond EOD, truncated [ 94.428623][ T6478] ldm_validate_partition_table(): Disk read failed. [ 94.432288][ T6478] Dev nbd2: unable to read RDB block 0 [ 94.436564][ T6478] nbd2: unable to read partition table [ 94.450795][ T6478] nbd2: partition table beyond EOD, truncated [ 94.469213][ T5323] ldm_validate_partition_table(): Disk read failed. [ 94.471235][ T5323] Dev nbd2: unable to read RDB block 0 [ 94.472878][ T5323] nbd2: unable to read partition table [ 94.474491][ T5323] nbd2: partition table beyond EOD, truncated [ 94.525777][ T5341] Bluetooth: hci5: command 0x0405 tx timeout [ 94.527436][ T5341] Bluetooth: hci4: command 0x0c1a tx timeout [ 94.535952][ T5341] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.168851][ T6518] netlink: 'syz.2.259': attribute type 2 has an invalid length. [ 96.181040][ T6518] : entered promiscuous mode [ 96.365780][ T5340] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 96.366029][ T65] Bluetooth: hci6: command 0x1003 tx timeout [ 96.878622][ T6525] netlink: 830 bytes leftover after parsing attributes in process `syz.0.261'. [ 97.063020][ T6527] input: syz1 as /devices/virtual/input/input14 [ 97.139014][ T6533] usb usb8: usbfs: process 6533 (syz.1.270) did not claim interface 0 before use [ 98.108524][ T1129] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 98.225786][ T6549] nbd0: detected capacity change from 0 to 22 [ 98.571614][ T6543] block nbd0: shutting down sockets [ 98.576643][ T5578] ldm_validate_partition_table(): Disk read failed. [ 98.578566][ T5578] Dev nbd0: unable to read RDB block 0 [ 98.580116][ T5578] nbd0: unable to read partition table [ 98.581624][ T5578] nbd0: partition table beyond EOD, truncated [ 98.602957][ T6543] ldm_validate_partition_table(): Disk read failed. [ 98.609441][ T6543] Dev nbd0: unable to read RDB block 0 [ 98.611176][ T6543] nbd0: unable to read partition table [ 98.612867][ T6543] nbd0: partition table beyond EOD, truncated [ 98.619895][ T5578] ldm_validate_partition_table(): Disk read failed. [ 98.622080][ T5578] Dev nbd0: unable to read RDB block 0 [ 98.623851][ T5578] nbd0: unable to read partition table [ 98.625626][ T5578] nbd0: partition table beyond EOD, truncated [ 99.646397][ T6568] netlink: 'syz.2.271': attribute type 4 has an invalid length. [ 99.655101][ T6568] netlink: 'syz.2.271': attribute type 4 has an invalid length. [ 99.740356][ T1104] Bluetooth: hci6: Frame reassembly failed (-84) [ 99.743807][ T6569] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 100.168870][ T65] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 100.207069][ T39] audit: type=1400 audit(1726849985.872:471): avc: denied { mounton } for pid=6570 comm="syz.1.273" path="/syzcgroup/unified/syz1/cgroup.procs" dev="cgroup2" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 101.072695][ T65] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 101.268098][ T6591] input: syz1 as /devices/virtual/input/input15 [ 101.362984][ T6592] netlink: 'syz.3.275': attribute type 2 has an invalid length. [ 101.390365][ T6592] : entered promiscuous mode [ 101.806116][ T5340] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 101.806691][ T65] Bluetooth: hci6: command 0x1003 tx timeout [ 102.296337][ T828] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.447071][ T828] usb 6-1: config index 0 descriptor too short (expected 146, got 18) [ 102.451109][ T828] usb 6-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 102.453585][ T828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.456568][ T828] usb 6-1: Product: syz [ 102.457705][ T828] usb 6-1: Manufacturer: syz [ 102.458946][ T828] usb 6-1: SerialNumber: syz [ 102.461444][ T828] usb 6-1: config 0 descriptor?? [ 102.804111][ T6613] pim6reg1: entered promiscuous mode [ 102.805614][ T6613] pim6reg1: entered allmulticast mode [ 103.718678][ T6632] Sensor A: ================= START STATUS ================= [ 103.722404][ T6632] Sensor A: Test Pattern: 75% Colorbar [ 103.724282][ T6632] Sensor A: Show Information: All [ 103.727482][ T6632] Sensor A: Vertical Flip: false [ 103.729244][ T6632] Sensor A: Horizontal Flip: false [ 103.730988][ T6632] Sensor A: Brightness: 128 [ 103.732644][ T6632] Sensor A: Contrast: 128 [ 103.734119][ T6632] Sensor A: Hue: 0 [ 103.735432][ T6632] Sensor A: Saturation: 128 [ 103.737807][ T6632] Sensor A: ================== END STATUS ================== [ 104.748848][ T6641] qrtr: Invalid version 47 [ 104.750734][ T39] audit: type=1400 audit(1726849990.422:472): avc: denied { watch watch_reads } for pid=6640 comm="syz.2.288" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.760085][ T6641] No such timeout policy "syz0" [ 104.934915][ T828] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 104.940688][ T828] asix 6-1:0.0: probe with driver asix failed with error -71 [ 104.946963][ T828] usb 6-1: USB disconnect, device number 2 [ 114.095013][ T39] audit: type=1400 audit(1726849999.762:473): avc: denied { execute } for pid=6643 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 114.101395][ T39] audit: type=1400 audit(1726849999.762:474): avc: denied { execute_no_trans } for pid=6643 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 114.120970][ T39] audit: type=1400 audit(1726849999.792:475): avc: denied { connect } for pid=6644 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.134161][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.136447][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.136946][ T39] audit: type=1400 audit(1726849999.792:476): avc: denied { listen } for pid=6644 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.139089][ T6649] bridge0: entered allmulticast mode [ 114.143261][ T39] audit: type=1400 audit(1726849999.792:477): avc: denied { accept } for pid=6644 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.180224][ T6649] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 114.182379][ T6649] netlink: 132 bytes leftover after parsing attributes in process `syz.2.298'. [ 114.185290][ T39] audit: type=1400 audit(1726849999.852:478): avc: denied { setopt } for pid=6644 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.193109][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.195217][ T6649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.197336][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.199327][ T6649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.206743][ T6649] bridge0: entered promiscuous mode [ 114.213214][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 114.218326][ T5341] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.226903][ T5341] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.229376][ T5341] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.231949][ T5341] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.234114][ T5341] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 114.237335][ T5341] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.306497][ T39] audit: type=1326 audit(1726849999.982:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.3.291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dad37def9 code=0x7ffc0000 [ 114.312365][ T39] audit: type=1326 audit(1726849999.982:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.3.291" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7dad37def9 code=0x7ffc0000 [ 114.318471][ T39] audit: type=1326 audit(1726849999.982:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.3.291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dad37def9 code=0x7ffc0000 [ 114.324271][ T39] audit: type=1326 audit(1726849999.982:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.3.291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dad37def9 code=0x7ffc0000 [ 114.325869][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 114.370507][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.372356][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.374234][ T6653] bridge_slave_0: entered allmulticast mode [ 114.378819][ T6653] bridge_slave_0: entered promiscuous mode [ 114.381748][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.383641][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.385556][ T6653] bridge_slave_1: entered allmulticast mode [ 114.388234][ T6653] bridge_slave_1: entered promiscuous mode [ 114.406621][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.410187][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.414873][ T6664] fuse: Bad value for 'fd' [ 114.420067][ T6664] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 114.422732][ T6664] netlink: 'syz.3.291': attribute type 2 has an invalid length. [ 114.424728][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 114.431951][ T6653] team0: Port device team_slave_0 added [ 114.434812][ T6653] team0: Port device team_slave_1 added [ 114.452250][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.454045][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.461404][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.464824][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.466857][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.473490][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.498165][ T6653] hsr_slave_0: entered promiscuous mode [ 114.500095][ T6653] hsr_slave_1: entered promiscuous mode [ 114.502181][ T6653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.504181][ T6653] Cannot create hsr debugfs directory [ 114.565381][ T6653] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.808437][ T6653] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.968320][ T6653] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.098853][ T6653] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.399607][ T6653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.402896][ T6653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.406574][ T6653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.410284][ T6653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.445747][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.453210][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.457224][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.459951][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.464840][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.466759][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.485591][ T1104] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 115.543681][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.560745][ T6653] veth0_vlan: entered promiscuous mode [ 115.564792][ T6653] veth1_vlan: entered promiscuous mode [ 115.578242][ T6653] veth0_macvtap: entered promiscuous mode [ 115.581256][ T6653] veth1_macvtap: entered promiscuous mode [ 115.587555][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.590273][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.592787][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.595485][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.599102][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.601802][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.604322][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.607104][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.609619][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.612313][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.615437][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.620044][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.622780][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.625289][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.628357][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.630874][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.633522][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.636285][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.638987][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.641499][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.644180][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.647037][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.649714][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.652766][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.659952][ T6653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.662251][ T6653] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.664506][ T6653] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.666882][ T6653] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.205852][ T65] Bluetooth: hci6: command 0x1003 tx timeout [ 116.207799][ T5340] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 116.258958][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.261045][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.272454][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.274350][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.350983][ T5340] Bluetooth: hci7: command tx timeout [ 116.390226][ T6685] gfs2: path_lookup on c::: returned error -2 [ 116.393090][ T6689] netlink: 'syz.0.289': attribute type 4 has an invalid length. [ 116.475942][ T6691] netlink: 'syz.0.289': attribute type 4 has an invalid length. [ 116.771062][ T6692] input: syz1 as /devices/virtual/input/input16 [ 118.182506][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.185028][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.187928][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.189871][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.191805][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.193725][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.199426][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.201352][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.203277][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.205191][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.207280][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.209202][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.211215][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.213122][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.215042][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.219951][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.221957][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.223887][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.226679][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.228633][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.230598][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.232631][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.234575][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.236923][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.238860][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.240779][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.242798][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.244716][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.247073][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.249004][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.250941][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.252990][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.254922][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.257168][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.259094][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.261005][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.262930][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.264925][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.267370][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.269299][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.271229][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.273142][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.275169][ T828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.315640][ T828] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 118.347088][ T5663] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1 [ 118.349643][ T5663] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 118.366033][ T65] Bluetooth: hci7: command tx timeout [ 119.095775][ T5340] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 119.270810][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 119.597429][ T6734] gfs2: path_lookup on c::: returned error -2 [ 120.409967][ T6752] input: syz1 as /devices/virtual/input/input17 [ 120.451838][ T5340] Bluetooth: hci7: command tx timeout [ 120.456146][ T6756] netlink: 'syz.0.310': attribute type 2 has an invalid length. [ 120.477663][ T6756] : entered promiscuous mode [ 121.194830][ T6770] ipt_REJECT: TCP_RESET invalid for non-tcp [ 121.259866][ T6770] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 121.624117][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 121.624189][ T39] audit: type=1400 audit(1726850007.292:495): avc: denied { listen } for pid=6777 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.472513][ T6797] gfs2: path_lookup on c::: returned error -2 [ 122.525794][ T5340] Bluetooth: hci7: command tx timeout [ 122.532317][ T39] audit: type=1400 audit(1726850008.202:496): avc: denied { mount } for pid=6786 comm="syz.0.326" name="/" dev="gadgetfs" ino=15614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 122.596369][ T1129] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 123.428959][ T39] audit: type=1400 audit(1726850009.102:497): avc: denied { unmount } for pid=6653 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 123.531291][ T39] audit: type=1400 audit(1726850009.192:498): avc: denied { write } for pid=6803 comm="syz.1.321" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 123.539383][ T39] audit: type=1400 audit(1726850009.192:499): avc: denied { open } for pid=6803 comm="syz.1.321" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 123.611454][ T6812] input: syz1 as /devices/virtual/input/input18 [ 124.369718][ T39] audit: type=1400 audit(1726850010.042:500): avc: denied { bind } for pid=6815 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.537944][ T39] audit: type=1400 audit(1726850010.212:501): avc: denied { ioctl } for pid=6825 comm="syz.3.329" path="socket:[13826]" dev="sockfs" ino=13826 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.869306][ T5377] libceph: connect (1)[c::]:6789 error -101 [ 124.870829][ T5377] libceph: mon0 (1)[c::]:6789 connect error [ 124.873354][ T5377] libceph: connect (1)[c::]:6789 error -101 [ 124.875011][ T5377] libceph: mon0 (1)[c::]:6789 connect error [ 125.135958][ T5377] libceph: connect (1)[c::]:6789 error -101 [ 125.137670][ T5377] libceph: mon0 (1)[c::]:6789 connect error [ 125.300974][ T1104] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 125.645986][ T35] libceph: connect (1)[c::]:6789 error -101 [ 125.647657][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 125.701897][ T6851] ipt_REJECT: TCP_RESET invalid for non-tcp [ 125.736248][ T6851] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 125.745878][ T6836] ceph: No mds server is up or the cluster is laggy [ 126.041138][ T6856] input: syz1 as /devices/virtual/input/input19 [ 126.153998][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.157168][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.159234][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.161550][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.163763][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.169938][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.172838][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.176550][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.178599][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.184957][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.192475][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.198862][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.204277][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.209795][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.212632][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.216820][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.221178][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.223404][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.225400][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.231270][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.235032][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.239297][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.244327][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.264315][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.270035][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.275554][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.280181][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.284957][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.295098][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.301445][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.303471][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.305884][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.307952][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.309974][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.312163][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.314206][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.318770][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.323068][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.325095][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.328198][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.330312][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.336328][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.338411][ T63] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.347354][ T63] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 126.358373][ T74] hid-generic 0000:0000:0000.0005: item fetching failed at offset 0/1 [ 126.361307][ T74] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 126.518385][ T6877] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 126.528486][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.531145][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.648784][ T6901] ipt_REJECT: TCP_RESET invalid for non-tcp [ 127.753077][ T6906] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 128.675797][ T39] audit: type=1400 audit(1726850014.352:502): avc: denied { bind } for pid=6912 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 128.679796][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.681315][ T39] audit: type=1400 audit(1726850014.352:503): avc: denied { name_bind } for pid=6912 comm="syz.2.355" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 128.682731][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.689422][ T39] audit: type=1400 audit(1726850014.352:504): avc: denied { node_bind } for pid=6912 comm="syz.2.355" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 128.694336][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.695569][ T39] audit: type=1400 audit(1726850014.362:505): avc: denied { connect } for pid=6912 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 128.697992][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.702395][ T39] audit: type=1400 audit(1726850014.362:506): avc: denied { name_connect } for pid=6912 comm="syz.2.355" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 128.710285][ T39] audit: type=1400 audit(1726850014.362:507): avc: denied { accept } for pid=6912 comm="syz.2.355" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 128.714048][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.715474][ T39] audit: type=1400 audit(1726850014.362:508): avc: denied { write } for pid=6912 comm="syz.2.355" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=32934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 128.723902][ T39] audit: type=1400 audit(1726850014.362:509): avc: denied { read } for pid=6912 comm="syz.2.355" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=32934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 128.734866][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.737905][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.740012][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.744128][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.746162][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.748340][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.750291][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.752232][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.754224][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.757303][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.759258][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.762131][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.764068][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.766813][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.768753][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.771605][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.773586][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.775540][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.777619][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.779559][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.781496][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.783441][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.785382][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.787522][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.788107][ T6920] dccp_close: ABORT with 32 bytes unread [ 128.789486][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.794927][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.796938][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.798928][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.800975][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.802924][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.804912][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.806933][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.808780][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.810709][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.812906][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.814864][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.816873][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.820276][ T5377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.831388][ T5377] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 128.869989][ T30] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/1 [ 128.872707][ T30] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 129.493816][ T6934] input: syz1 as /devices/virtual/input/input21 [ 129.822810][ T6941] netlink: 'syz.1.351': attribute type 2 has an invalid length. [ 129.825865][ T6941] openvswitch: : Dropping previously announced user features [ 130.188616][ T39] audit: type=1400 audit(1726850015.862:510): avc: denied { accept } for pid=6946 comm="syz.2.354" lport=40061 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.519693][ T6954] netlink: 'syz.2.358': attribute type 4 has an invalid length. [ 130.627448][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.629420][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.631344][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.635328][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.640360][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.642643][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.644903][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.647317][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.649258][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.651179][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.653096][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.655021][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.665759][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.667692][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.669601][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.671500][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.673347][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.675279][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.680907][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.682851][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.686212][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.698924][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.700874][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.702836][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.704747][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.707231][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.709182][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.711117][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.713031][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.714971][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.717567][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.719516][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.721437][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.723357][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.725278][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.727606][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.729550][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.731479][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.733400][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.735462][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.738380][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.740319][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.742250][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.755958][ T30] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 130.768446][ T74] hid-generic 0000:0000:0000.0009: item fetching failed at offset 0/1 [ 130.770751][ T74] hid-generic 0000:0000:0000.0009: probe with driver hid-generic failed with error -22 [ 130.924613][ T39] audit: type=1400 audit(1726850016.592:511): avc: denied { getopt } for pid=6963 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 131.142223][ T5340] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 131.244247][ T5340] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 131.847658][ T6980] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 131.856256][ T6980] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 131.861648][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.863731][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.456520][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.672488][ T6991] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.506074][ T7006] netlink: 'syz.1.371': attribute type 9 has an invalid length. [ 133.508568][ T7006] netlink: 'syz.1.371': attribute type 7 has an invalid length. [ 133.513502][ T7006] netlink: 'syz.1.371': attribute type 8 has an invalid length. [ 133.527035][ T7006] ax25_connect(): syz.1.371 uses autobind, please contact jreuter@yaina.de [ 134.086228][ T7013] dccp_close: ABORT with 32 bytes unread [ 134.237418][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.376'. [ 135.069815][ T7037] input: syz1 as /devices/virtual/input/input22 [ 135.153178][ T7036] netlink: 'syz.3.381': attribute type 4 has an invalid length. [ 135.339088][ T7040] mac80211_hwsim hwsim13 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 135.384723][ T7042] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.993996][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 135.994023][ T39] audit: type=1400 audit(1726850021.662:517): avc: denied { getopt } for pid=7051 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.235299][ T7058] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.387'. [ 136.509333][ T7064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.163712][ T7073] netlink: 'syz.0.391': attribute type 4 has an invalid length. [ 137.233488][ T7074] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 137.236668][ T7074] openvswitch: : Dropping previously announced user features [ 137.495757][ T11] wlan0: Trigger new scan to find an IBSS to join [ 137.537080][ T7078] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 137.608544][ T7082] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 137.611991][ T7082] cramfs: wrong magic [ 137.662855][ T39] audit: type=1400 audit(1726850023.322:518): avc: denied { connect } for pid=7075 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.673472][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.677331][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.093561][ T39] audit: type=1400 audit(1726850023.762:519): avc: denied { read } for pid=7083 comm="syz.2.394" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 138.233009][ T7091] input: syz1 as /devices/virtual/input/input23 [ 138.663431][ T39] audit: type=1400 audit(1726850024.312:520): avc: denied { bind } for pid=7093 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.672137][ T39] audit: type=1400 audit(1726850024.312:521): avc: denied { read } for pid=7093 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.724790][ T7113] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.401'. [ 140.594364][ T7126] netlink: 'syz.1.403': attribute type 2 has an invalid length. [ 140.596786][ T7126] openvswitch: : Dropping previously announced user features [ 140.616596][ T7125] netlink: 104 bytes leftover after parsing attributes in process `syz.3.404'. [ 140.623988][ T7125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.404'. [ 140.951923][ T7136] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 140.953766][ T7136] cramfs: wrong magic [ 141.133511][ T7140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.408'. [ 141.486476][ T42] wlan0: Trigger new scan to find an IBSS to join [ 142.063593][ T39] audit: type=1400 audit(1726850027.732:522): avc: denied { mounton } for pid=7148 comm="syz.2.411" path="/109/file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 142.068391][ T7150] syz.2.411: attempt to access beyond end of device [ 142.068391][ T7150] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 142.074550][ T7150] SQUASHFS error: Failed to read block 0x0: -5 [ 142.076461][ T7150] unable to read squashfs_super_block [ 142.083474][ T7154] Bluetooth: MGMT ver 1.23 [ 142.113888][ T39] audit: type=1400 audit(1726850027.782:523): avc: denied { name_bind } for pid=7155 comm="syz.3.413" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 142.169134][ T7159] x_tables: duplicate underflow at hook 2 [ 142.374740][ T7164] netlink: 104 bytes leftover after parsing attributes in process `syz.1.415'. [ 142.381888][ T7164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.415'. [ 142.435497][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.418'. [ 142.457209][ T1104] wlan0: Creating new IBSS network, BSSID 4a:56:57:08:14:cd [ 142.774154][ T7176] netlink: 'syz.2.419': attribute type 2 has an invalid length. [ 142.777556][ T7176] openvswitch: : Dropping previously announced user features [ 143.106163][ T7182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.421'. [ 143.453140][ T7190] ======================================================= [ 143.453140][ T7190] WARNING: The mand mount option has been deprecated and [ 143.453140][ T7190] and is ignored by this kernel. Remove the mand [ 143.453140][ T7190] option from the mount to silence this warning. [ 143.453140][ T7190] ======================================================= [ 144.054303][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 144.068334][ T7206] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 144.070919][ T7206] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 144.213679][ T39] audit: type=1400 audit(1726850029.882:524): avc: denied { getopt } for pid=7207 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 144.575047][ T7220] futex_wake_op: syz.2.430 tries to shift op by 32; fix this program [ 144.778580][ T39] audit: type=1400 audit(1726850030.452:525): avc: denied { connect } for pid=7219 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.867123][ T7229] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 144.964025][ T7232] IPVS: Error connecting to the multicast addr [ 145.004697][ T39] audit: type=1400 audit(1726850030.672:526): avc: denied { unmount } for pid=7227 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 146.326054][ T7253] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 146.329757][ T7253] cramfs: wrong magic [ 147.060496][ T39] audit: type=1400 audit(1726850032.732:527): avc: denied { connect } for pid=7256 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.222807][ T7302] Bluetooth: MGMT ver 1.23 [ 149.340195][ T39] audit: type=1400 audit(1726850035.002:528): avc: denied { getopt } for pid=7301 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.348035][ T39] audit: type=1326 audit(1726850035.022:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.0.450" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa87b37def9 code=0x0 [ 149.601639][ T39] audit: type=1400 audit(1726850035.272:530): avc: denied { ioctl } for pid=7295 comm="syz.2.448" path="/dev/nullb0" dev="devtmpfs" ino=691 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 150.138957][ T828] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 150.322914][ T828] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.326656][ T828] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 150.329776][ T828] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.332369][ T828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.345147][ T7315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.351140][ T828] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.627865][ T30] usb 6-1: USB disconnect, device number 3 [ 150.708163][ T7323] futex_wake_op: syz.3.453 tries to shift op by 32; fix this program [ 151.376334][ T39] audit: type=1400 audit(1726850037.052:531): avc: denied { create } for pid=7328 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 151.384291][ T39] audit: type=1400 audit(1726850037.052:532): avc: denied { setopt } for pid=7328 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 152.620202][ T7350] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 152.633614][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.635931][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.638808][ T39] audit: type=1400 audit(1726850038.302:533): avc: denied { create } for pid=7352 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 153.605611][ T39] audit: type=1400 audit(1726850039.272:534): avc: denied { module_request } for pid=7364 comm="syz.1.465" kmod="netdev-vxcan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 153.646132][ T39] audit: type=1400 audit(1726850039.312:535): avc: denied { read append } for pid=7364 comm="syz.1.465" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.652329][ T39] audit: type=1400 audit(1726850039.312:536): avc: denied { open } for pid=7364 comm="syz.1.465" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.009065][ T7383] ptrace attach of "/syz-executor exec"[5645] was attempted by "/syz-executor exec"[7383] [ 154.600189][ T7394] can: request_module (can-proto-4) failed. [ 154.806944][ T39] audit: type=1400 audit(1726850040.482:537): avc: denied { write } for pid=7397 comm="syz.1.471" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.913640][ T5340] Bluetooth: hci5: unexpected event for opcode 0x0406 [ 155.059795][ T39] audit: type=1400 audit(1726850040.732:538): avc: denied { ioctl } for pid=7397 comm="syz.1.471" path="/dev/nullb0" dev="devtmpfs" ino=691 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.402376][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.404309][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.581691][ T7452] fuse: Unknown parameter '0x00000000000000090000000000000000000000000000000000000000' [ 158.525527][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.534062][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.925884][ T5340] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 158.929627][ T5340] Bluetooth: hci5: Injecting HCI hardware error event [ 158.933432][ T5340] Bluetooth: hci5: hardware error 0x00 [ 161.055816][ T5340] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 161.337159][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 161.341465][ T7511] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 161.343826][ T7511] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 162.313573][ T7528] ptrace attach of "/syz-executor exec"[5733] was attempted by "/syz-executor exec"[7528] [ 162.324401][ T7527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.498'. [ 163.563846][ T7543] ptrace attach of "/syz-executor exec"[6653] was attempted by "/syz-executor exec"[7543] [ 163.747375][ T7551] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.706433][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 164.711073][ T7565] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 164.735843][ T7565] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 165.904672][ T39] audit: type=1400 audit(1726850051.562:539): avc: denied { append } for pid=7578 comm="syz.3.509" name="video7" dev="devtmpfs" ino=895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 165.956362][ T7583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.508'. [ 166.014384][ T7587] fuse: Bad value for 'fd' [ 167.465736][ T39] audit: type=1400 audit(1726850053.112:540): avc: denied { ioctl } for pid=7596 comm="syz.3.514" path="socket:[19588]" dev="sockfs" ino=19588 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 167.514070][ T39] audit: type=1400 audit(1726850053.182:541): avc: denied { write } for pid=7596 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 167.656431][ T7607] ptrace attach of "/syz-executor exec"[5331] was attempted by "/syz-executor exec"[7607] [ 167.941808][ T39] audit: type=1400 audit(1726850053.612:542): avc: denied { read } for pid=7612 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.021204][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 169.367490][ T7622] ptrace attach of "/syz-executor exec"[5733] was attempted by "/syz-executor exec"[7622] [ 170.197012][ T39] audit: type=1326 audit(1726850055.862:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7643 comm="syz.1.519" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71b557def9 code=0x0 [ 170.362419][ T7656] fuse: Bad value for 'fd' [ 170.455949][ T5663] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 170.619174][ T5663] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.621758][ T5663] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.624782][ T5663] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.627408][ T5663] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.631853][ T5663] usb 7-1: config 0 descriptor?? [ 171.059484][ T5663] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 171.064563][ T5663] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 171.084780][ T5663] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 171.430000][ T8] usb 7-1: USB disconnect, device number 8 [ 172.329590][ T7680] fuse: Unknown parameter '0x00000000000000090000000000000000000000000000000000000000' [ 172.461950][ T1103] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 172.604469][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 172.618999][ T39] audit: type=1400 audit(1726850058.292:544): avc: denied { bind } for pid=7681 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.643387][ T39] audit: type=1400 audit(1726850058.292:545): avc: denied { listen } for pid=7681 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.780545][ T7689] fuse: Bad value for 'fd' [ 172.878966][ T7690] ptrace attach of "/syz-executor exec"[5733] was attempted by "/syz-executor exec"[7690] [ 173.229618][ T7699] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 174.599057][ T7714] tmpfs: Bad value for 'mpol' [ 174.603376][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.539'. [ 174.616242][ T7716] fuse: Bad value for 'fd' [ 174.737034][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 175.015731][ T5663] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 175.177559][ T5663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.180493][ T5663] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.183881][ T5663] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.188534][ T5663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.191588][ T5663] usb 6-1: config 0 descriptor?? [ 175.703832][ T5663] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 175.716095][ T5663] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 175.723786][ T5663] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 175.815771][ T5371] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 175.976847][ T5371] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 175.979782][ T5371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.982209][ T5371] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.985130][ T5371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 175.987731][ T5371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.990174][ T5371] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.993086][ T5371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 175.995603][ T5371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.088752][ T5371] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.091778][ T5371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.094272][ T5371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.096834][ T5371] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.099641][ T5371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.102098][ T5371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.104465][ T5371] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.107715][ T5371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.110223][ T5371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.112489][ T5371] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.115288][ T5371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.117773][ T5371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.120082][ T5371] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.122823][ T5371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.125288][ T5371] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.127674][ T5371] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.129906][ T828] usb 6-1: USB disconnect, device number 4 [ 176.130537][ T5371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.138359][ T5371] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 176.142157][ T5371] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 176.144315][ T5371] usb 5-1: Product: syz [ 176.145897][ T5371] usb 5-1: Manufacturer: syz [ 176.147180][ T5371] usb 5-1: SerialNumber: syz [ 176.153128][ T5371] usb 5-1: config 0 descriptor?? [ 176.162244][ T5371] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 176.613505][ C2] usb 5-1: yurex_control_callback - control failed: -71 [ 176.614804][ T986] usb 5-1: USB disconnect, device number 3 [ 176.620095][ T7741] yurex 5-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 176.626358][ T986] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 176.759029][ T7749] netlink: 52 bytes leftover after parsing attributes in process `syz.2.547'. [ 176.863474][ T7752] fuse: Unknown parameter '0x00000000000000090000000000000000000000000000000000000000' [ 178.034297][ T7759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7759 comm=syz.3.550 [ 178.049463][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.552'. [ 178.114276][ T39] audit: type=1400 audit(1726850063.782:546): avc: denied { map } for pid=7756 comm="syz.1.551" path="socket:[19732]" dev="sockfs" ino=19732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 178.412427][ T7768] fuse: Bad value for 'fd' [ 178.832831][ T7772] fuse: Bad value for 'fd' [ 178.845806][ T5340] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 178.848301][ T5340] Bluetooth: hci7: Injecting HCI hardware error event [ 178.851731][ T5340] Bluetooth: hci7: hardware error 0x00 [ 179.111863][ T65] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 179.650491][ T7779] vivid-000: ================= START STATUS ================= [ 179.652592][ T7779] vivid-000: Test Pattern: 75% Colorbar [ 179.655418][ T7779] vivid-000: Fill Percentage of Frame: 100 [ 179.661503][ T7779] vivid-000: Horizontal Movement: No Movement [ 179.663271][ T7779] vivid-000: Vertical Movement: No Movement [ 179.664987][ T7779] vivid-000: OSD Text Mode: All [ 179.666755][ T7779] vivid-000: Show Border: false [ 179.668060][ T7779] vivid-000: Show Square: false [ 179.669323][ T7779] vivid-000: Sensor Flipped Horizontally: false [ 179.670961][ T7779] vivid-000: Sensor Flipped Vertically: false [ 179.672600][ T7779] vivid-000: Insert SAV Code in Image: false [ 179.674225][ T7779] vivid-000: Insert EAV Code in Image: false [ 179.678841][ T7779] vivid-000: Insert Video Guard Band: false [ 179.680380][ T7779] vivid-000: Reduced Framerate: false [ 179.681780][ T7779] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 179.683834][ T7779] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 179.686260][ T7779] vivid-000: Enable Capture Cropping: true [ 179.687935][ T7779] vivid-000: Enable Capture Composing: true [ 179.689412][ T7779] vivid-000: Enable Capture Scaler: true [ 179.690872][ T7779] vivid-000: Timestamp Source: End of Frame [ 179.692394][ T7779] vivid-000: Colorspace: sRGB [ 179.693652][ T7779] vivid-000: Transfer Function: Default [ 179.695205][ T7779] vivid-000: Y'CbCr Encoding: Default [ 179.699849][ T7779] vivid-000: HSV Encoding: Hue 0-179 [ 179.701287][ T7779] vivid-000: Quantization: Default [ 179.702772][ T7779] vivid-000: Apply Alpha To Red Only: false [ 179.704310][ T7779] vivid-000: Standard Aspect Ratio: 4x3 [ 179.706128][ T7779] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 179.708448][ T7779] vivid-000: DV Timings: 640x480p59 inactive [ 179.710123][ T7779] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 179.712001][ T7779] vivid-000: Maximum EDID Blocks: 2 [ 179.713373][ T7779] vivid-000: Limited RGB Range (16-235): false [ 179.714987][ T7779] vivid-000: Rx RGB Quantization Range: Automatic [ 179.721546][ T7779] vivid-000: Power Present: 0x00000001 [ 179.723096][ T7779] tpg source WxH: 640x360 (Y'CbCr) [ 179.724423][ T7779] tpg field: 1 [ 179.725319][ T7779] tpg crop: 640x360@0x0 [ 179.746454][ T7779] tpg compose: 640x360@0x0 [ 179.747752][ T7779] tpg colorspace: 8 [ 179.748783][ T7779] tpg transfer function: 0/0 [ 179.750017][ T7779] tpg Y'CbCr encoding: 0/0 [ 179.751211][ T7779] tpg quantization: 0/0 [ 179.752316][ T7779] tpg RGB range: 0/2 [ 179.753377][ T7779] vivid-000: ================== END STATUS ================== [ 179.999637][ T7786] ptrace attach of "/syz-executor exec"[6653] was attempted by "/syz-executor exec"[7786] [ 180.012727][ T7788] netlink: 52 bytes leftover after parsing attributes in process `syz.1.559'. [ 180.927226][ T5340] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 181.057335][ T7799] team_slave_0: entered allmulticast mode [ 182.857504][ T39] audit: type=1400 audit(1726850068.532:547): avc: denied { wake_alarm } for pid=7835 comm="syz.0.569" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.866786][ T39] audit: type=1400 audit(1726850068.542:548): avc: denied { create } for pid=7833 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 182.872971][ T39] audit: type=1400 audit(1726850068.542:549): avc: denied { setopt } for pid=7833 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 182.880600][ T7838] netlink: 'syz.1.568': attribute type 10 has an invalid length. [ 182.895000][ T7838] team0: Device ipvlan1 failed to register rx_handler [ 182.904362][ T39] audit: type=1400 audit(1726850068.572:550): avc: denied { read } for pid=7835 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.165804][ T5340] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 183.168281][ T5340] Bluetooth: hci4: Injecting HCI hardware error event [ 183.172153][ T65] Bluetooth: hci4: hardware error 0x00 [ 183.467479][ T7840] vivid-000: ================= START STATUS ================= [ 183.470148][ T7840] vivid-000: Test Pattern: 75% Colorbar [ 183.472054][ T7840] vivid-000: Fill Percentage of Frame: 100 [ 183.474093][ T7840] vivid-000: Horizontal Movement: No Movement [ 183.476277][ T7840] vivid-000: Vertical Movement: No Movement [ 183.478411][ T7840] vivid-000: OSD Text Mode: All [ 183.480150][ T7840] vivid-000: Show Border: false [ 183.481893][ T7840] vivid-000: Show Square: false [ 183.483593][ T7840] vivid-000: Sensor Flipped Horizontally: false [ 183.485882][ T7840] vivid-000: Sensor Flipped Vertically: false [ 183.487952][ T7840] vivid-000: Insert SAV Code in Image: false [ 183.490024][ T7840] vivid-000: Insert EAV Code in Image: false [ 183.492065][ T7840] vivid-000: Insert Video Guard Band: false [ 183.494106][ T7840] vivid-000: Reduced Framerate: false [ 183.496008][ T7840] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 183.498733][ T7840] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 183.501432][ T7840] vivid-000: Enable Capture Cropping: true [ 183.503441][ T7840] vivid-000: Enable Capture Composing: true [ 183.505483][ T7840] vivid-000: Enable Capture Scaler: true [ 183.507492][ T7840] vivid-000: Timestamp Source: End of Frame [ 183.509522][ T7840] vivid-000: Colorspace: sRGB [ 183.511166][ T7840] vivid-000: Transfer Function: Default [ 183.513057][ T7840] vivid-000: Y'CbCr Encoding: Default [ 183.514923][ T7840] vivid-000: HSV Encoding: Hue 0-179 [ 183.517016][ T7840] vivid-000: Quantization: Default [ 183.519108][ T7840] vivid-000: Apply Alpha To Red Only: false [ 183.521123][ T7840] vivid-000: Standard Aspect Ratio: 4x3 [ 183.523028][ T7840] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 183.526201][ T7840] vivid-000: DV Timings: 640x480p59 inactive [ 183.528798][ T7840] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 183.531303][ T7840] vivid-000: Maximum EDID Blocks: 2 [ 183.533087][ T7840] vivid-000: Limited RGB Range (16-235): false [ 183.535221][ T7840] vivid-000: Rx RGB Quantization Range: Automatic [ 183.537969][ T7840] vivid-000: Power Present: 0x00000001 [ 183.539856][ T7840] tpg source WxH: 640x360 (Y'CbCr) [ 183.541630][ T7840] tpg field: 1 [ 183.542811][ T7840] tpg crop: 640x360@0x0 [ 183.544246][ T7840] tpg compose: 640x360@0x0 [ 183.546154][ T7840] tpg colorspace: 8 [ 183.547489][ T7840] tpg transfer function: 0/0 [ 183.549067][ T7840] tpg Y'CbCr encoding: 0/0 [ 183.550610][ T7840] tpg quantization: 0/0 [ 183.552030][ T7840] tpg RGB range: 0/2 [ 183.553379][ T7840] vivid-000: ================== END STATUS ================== [ 183.965166][ T7852] fuse: Unknown parameter '0x00000000000000090000000000000000000000000000000000000000' [ 184.737806][ T7863] team_slave_0: entered promiscuous mode [ 184.739615][ T7863] team_slave_1: entered promiscuous mode [ 184.741282][ T7863] vlan2: entered promiscuous mode [ 184.742644][ T7863] team0: entered promiscuous mode [ 184.751513][ T7863] team0: left promiscuous mode [ 184.752970][ T7863] team_slave_0: left promiscuous mode [ 184.754434][ T7863] team_slave_1: left promiscuous mode [ 185.255797][ T65] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 185.720655][ T7879] netlink: 'syz.0.580': attribute type 10 has an invalid length. [ 185.735041][ T7879] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 186.065752][ T39] audit: type=1400 audit(1726850071.732:551): avc: denied { lock } for pid=7883 comm="syz.2.581" path="socket:[20683]" dev="sockfs" ino=20683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.707507][ T7896] fuse: Unknown parameter '0x00000000000000090000000000000000000000000000000000000000' [ 187.459670][ T7908] netlink: 52 bytes leftover after parsing attributes in process `syz.3.584'. [ 188.728391][ T39] audit: type=1400 audit(1726850074.392:552): avc: denied { map } for pid=7921 comm="syz.3.587" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.663078][ T7939] process 'syz.3.591' launched './file0' with NULL argv: empty string added [ 189.667475][ T39] audit: type=1400 audit(1726850075.342:553): avc: denied { execute_no_trans } for pid=7937 comm="syz.3.591" path="/125/file0" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 189.767268][ T39] audit: type=1400 audit(1726850075.442:554): avc: denied { nlmsg_write } for pid=7937 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 190.798799][ T39] audit: type=1400 audit(1726850076.472:555): avc: denied { read write } for pid=7956 comm="syz.3.596" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 190.805634][ T39] audit: type=1400 audit(1726850076.472:556): avc: denied { open } for pid=7956 comm="syz.3.596" path="/127/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 190.873734][ T7958] block device autoloading is deprecated and will be removed. [ 191.350829][ T39] audit: type=1400 audit(1726850077.022:557): avc: denied { create } for pid=7967 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 191.597842][ T39] audit: type=1400 audit(1726850077.272:558): avc: denied { write } for pid=7978 comm="syz.3.601" path="socket:[20843]" dev="sockfs" ino=20843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.610274][ T7980] fuse: Bad value for 'fd' [ 193.899182][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.493597][ T39] audit: type=1400 audit(1726850080.162:559): avc: denied { ioctl } for pid=8018 comm="syz.2.611" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 194.745365][ T8027] team_slave_0: entered promiscuous mode [ 194.746970][ T8027] team_slave_1: entered promiscuous mode [ 194.753359][ T8027] vlan2: entered promiscuous mode [ 194.755725][ T8027] team0: entered promiscuous mode [ 194.766255][ T8027] team0: left promiscuous mode [ 194.767729][ T8027] team_slave_0: left promiscuous mode [ 194.770442][ T8027] team_slave_1: left promiscuous mode [ 196.277618][ T39] audit: type=1400 audit(1726850081.952:560): avc: denied { bind } for pid=8047 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.422614][ T8051] mkiss: ax0: crc mode is auto. [ 198.034882][ T39] audit: type=1400 audit(1726850083.702:561): avc: denied { setopt } for pid=8073 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 200.625856][ T39] audit: type=1400 audit(1726850086.232:562): avc: denied { append } for pid=8111 comm="syz.1.631" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.098468][ T8147] netlink: 52 bytes leftover after parsing attributes in process `syz.0.636'. [ 202.109201][ T39] audit: type=1400 audit(1726850087.782:563): avc: denied { write } for pid=8140 comm="syz.2.638" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.008602][ T8158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.647'. [ 203.486329][ T1100] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 206.611196][ T39] audit: type=1400 audit(1726850092.282:564): avc: denied { ioctl } for pid=8184 comm="syz.3.642" path="socket:[21530]" dev="sockfs" ino=21530 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.640502][ T39] audit: type=1400 audit(1726850092.302:565): avc: denied { read } for pid=8184 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 207.499834][ T8218] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 207.602828][ T8215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.451449][ T39] audit: type=1400 audit(1726850094.122:566): avc: denied { nlmsg_read } for pid=8227 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.451454][ T8228] netlink: 104 bytes leftover after parsing attributes in process `syz.3.657'. [ 208.489754][ T8228] ax25_connect(): syz.3.657 uses autobind, please contact jreuter@yaina.de [ 209.108378][ T828] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 209.118011][ T828] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz1 [ 210.250960][ T8264] Invalid option length (1031570) for dns_resolver key [ 210.687360][ T8273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8273 comm=syz.1.665 [ 211.194311][ T8270] Process accounting resumed [ 211.999109][ T8295] mkiss: ax0: crc mode is auto. [ 212.043971][ T8294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.162470][ T828] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 215.169159][ T828] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz1 [ 215.368797][ T8328] Process accounting resumed [ 215.388366][ T8345] bridge0: port 3(syz_tun) entered blocking state [ 215.391963][ T8345] bridge0: port 3(syz_tun) entered disabled state [ 215.394336][ T8345] syz_tun: entered allmulticast mode [ 215.404066][ T8345] syz_tun: entered promiscuous mode [ 215.410303][ T8345] bridge0: port 3(syz_tun) entered blocking state [ 215.412011][ T8345] bridge0: port 3(syz_tun) entered listening state [ 215.493039][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.683'. [ 215.560586][ T39] audit: type=1400 audit(1726850101.232:567): avc: denied { call } for pid=8347 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 215.593887][ T8352] binder: 8347:8352 ioctl c0306201 0 returned -14 [ 216.135619][ T39] audit: type=1400 audit(1726850101.802:568): avc: denied { associate } for pid=8350 comm="syz.2.686" name="cgroup.controllers" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 216.161320][ T39] audit: type=1400 audit(1726850101.832:569): avc: denied { append } for pid=8350 comm="syz.2.686" path="/180/file0/cgroup.controllers" dev="9p" ino=36701740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 216.194878][ T39] audit: type=1400 audit(1726850101.862:570): avc: denied { mount } for pid=8363 comm="syz.3.690" name="/" dev="hugetlbfs" ino=21493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 216.935491][ T39] audit: type=1400 audit(1726850102.602:571): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 218.776202][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 220.788561][ T39] audit: type=1400 audit(1726850106.462:572): avc: denied { write } for pid=8414 comm="syz.1.702" lport=40391 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 220.810360][ T8426] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 220.815520][ T8426] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 221.835175][ T8447] binder: 8441:8447 ioctl c0306201 0 returned -14 [ 221.883602][ T8449] zonefs (nullb0) ERROR: Not a zoned block device [ 222.529968][ T39] audit: type=1400 audit(1726850108.202:573): avc: denied { read } for pid=8457 comm="syz.0.713" name="btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 222.548113][ T39] audit: type=1400 audit(1726850108.212:574): avc: denied { open } for pid=8457 comm="syz.0.713" path="/dev/btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 222.741278][ T39] audit: type=1400 audit(1726850108.412:575): avc: denied { shutdown } for pid=8461 comm="syz.3.714" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 222.849967][ T8455] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20e49 pfn:0x652f6 [ 222.852717][ T8455] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 222.854603][ T8455] raw: 00fff00000000000 ffffea0000d26308 ffffea0000d22088 0000000000000000 [ 222.857168][ T8455] raw: 0000000000020e49 0000000000000000 00000000ffffffff 0000000000000000 [ 222.859433][ T8455] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 222.862119][ T8455] page_owner tracks the page as freed [ 222.863756][ T8455] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 8442, tgid 8441 (syz.1.708), ts 222205795473, free_ts 222345496785 [ 222.868859][ T8455] post_alloc_hook+0x2d1/0x350 [ 222.870175][ T8455] get_page_from_freelist+0x1351/0x2e50 [ 222.871635][ T8455] __alloc_pages_noprof+0x22b/0x23f0 [ 222.873039][ T8455] alloc_pages_mpol_noprof+0x275/0x610 [ 222.874478][ T8455] folio_alloc_mpol_noprof+0x36/0xd0 [ 222.875973][ T8455] vma_alloc_folio_noprof+0xee/0x1b0 [ 222.877378][ T8455] do_wp_page+0x1a77/0x3460 [ 222.878582][ T8455] __handle_mm_fault+0x24a5/0x56b0 [ 222.879940][ T8455] handle_mm_fault+0x498/0xa60 [ 222.881225][ T8455] do_user_addr_fault+0x7a3/0x13f0 [ 222.882579][ T8455] exc_page_fault+0x5c/0xc0 [ 222.883786][ T8455] asm_exc_page_fault+0x26/0x30 [ 222.885074][ T8455] page last free pid 8441 tgid 8441 stack trace: [ 222.886801][ T8455] free_unref_folios+0x9e9/0x1390 [ 222.888143][ T8455] folios_put_refs+0x560/0x760 [ 222.889422][ T8455] free_pages_and_swap_cache+0x36d/0x510 [ 222.890901][ T8455] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 222.892483][ T8455] tlb_flush_mmu+0xe9/0x590 [ 222.893699][ T8455] unmap_page_range+0x1d20/0x3d30 [ 222.895026][ T8455] unmap_single_vma+0x194/0x2b0 [ 222.896366][ T8455] unmap_vmas+0x22f/0x490 [ 222.897519][ T8455] exit_mmap+0x1b8/0xb20 [ 222.898643][ T8455] __mmput+0x12a/0x480 [ 222.899721][ T8455] mmput+0x62/0x70 [ 222.900716][ T8455] do_exit+0x9bf/0x2bb0 [ 222.901827][ T8455] do_group_exit+0xd3/0x2a0 [ 222.903026][ T8455] __x64_sys_exit_group+0x3e/0x50 [ 222.904353][ T8455] x64_sys_call+0x14a9/0x16a0 [ 222.905612][ T8455] do_syscall_64+0xcd/0x250 [ 222.907039][ T8455] ------------[ cut here ]------------ [ 222.908472][ T8455] kernel BUG at include/linux/mm.h:1462! [ 222.909959][ T8455] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 222.912036][ T8455] CPU: 3 UID: 0 PID: 8455 Comm: syz.1.711 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 222.916204][ T8455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.918987][ T8455] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 222.920733][ T8455] Code: b0 8b 48 89 df e8 c2 34 48 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 02 78 03 fd 48 c7 c6 80 f8 b0 8b 4c 89 e7 e8 a3 34 48 fd 90 <0f> 0b e8 eb 77 03 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 222.925792][ T8455] RSP: 0018:ffffc90003cdefc8 EFLAGS: 00010293 [ 222.927373][ T8455] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 222.929443][ T8455] RDX: ffff88805bf44880 RSI: ffffffff84898d2d RDI: ffff88805bf44cc4 [ 222.931499][ T8455] RBP: ffffea000194bdb4 R08: 0000000000000001 R09: fffffbfff2d7e105 [ 222.933565][ T8455] R10: ffffffff96bf082f R11: 1ffffffff1bf8c11 R12: ffffea000194bd80 [ 222.935614][ T8455] R13: ffff888024d01c00 R14: 0000000000001000 R15: 0000000000001000 [ 222.937680][ T8455] FS: 0000555557a3c500(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 222.939993][ T8455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.941718][ T8455] CR2: 0000001b2cbc0ff8 CR3: 00000000615f8000 CR4: 0000000000350ef0 [ 222.943783][ T8455] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 222.945851][ T8455] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 222.947914][ T8455] Call Trace: [ 222.948797][ T8455] [ 222.949586][ T8455] ? die+0x31/0x80 [ 222.950584][ T8455] ? do_trap+0x232/0x430 [ 222.951706][ T8455] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 222.953325][ T8455] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 222.954911][ T8455] ? do_error_trap+0xf4/0x230 [ 222.956153][ T8455] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 222.957747][ T8455] ? handle_invalid_op+0x34/0x40 [ 222.959041][ T8455] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 222.960628][ T8455] ? exc_invalid_op+0x2e/0x50 [ 222.961874][ T8455] ? asm_exc_invalid_op+0x1a/0x20 [ 222.963202][ T8455] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 222.964787][ T8455] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 222.966386][ T8455] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 222.967975][ T8455] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 222.969617][ T8455] ? radix_tree_node_alloc.constprop.0+0x1b8/0x350 [ 222.971307][ T8455] ? delete_node+0x207/0x8e0 [ 222.972530][ T8455] iov_iter_get_pages_alloc2+0x53/0xf0 [ 222.973974][ T8455] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 222.975729][ T8455] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 222.977629][ T8455] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 222.978967][ T8455] p9_virtio_zc_request+0x1be/0x1390 [ 222.980352][ T8455] ? p9pdu_writef+0xc4/0x100 [ 222.981577][ T8455] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 222.983062][ T8455] ? __pfx_p9_tag_alloc+0x10/0x10 [ 222.984389][ T8455] ? rcu_is_watching+0x12/0xc0 [ 222.985647][ T8455] ? trace_9p_protocol_dump+0x192/0x220 [ 222.987091][ T8455] ? rcu_is_watching+0x12/0xc0 [ 222.988354][ T8455] ? p9_client_prepare_req+0x111/0x4d0 [ 222.989786][ T8455] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 222.991316][ T8455] ? hlock_class+0x4e/0x130 [ 222.992507][ T8455] ? __pfx_mark_lock+0x10/0x10 [ 222.993790][ T8455] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 222.995342][ T8455] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 222.997011][ T8455] ? trace_event_raw_event_nfsd_cb_recall_any+0x26a/0x490 [ 222.998868][ T8455] ? __pfx___lock_acquire+0x10/0x10 [ 223.000233][ T8455] ? hlock_class+0x4e/0x130 [ 223.001439][ T8455] ? mark_lock+0xb5/0xc60 [ 223.002583][ T8455] ? __pfx_mark_lock+0x10/0x10 [ 223.003844][ T8455] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 223.005192][ T8455] p9_client_write+0x447/0x680 [ 223.006387][ T8455] ? __pfx_p9_client_write+0x10/0x10 [ 223.007780][ T8455] ? mark_held_locks+0x9f/0xe0 [ 223.009053][ T8455] v9fs_issue_write+0xe2/0x180 [ 223.010318][ T8455] ? __pfx_v9fs_issue_write+0x10/0x10 [ 223.011730][ T8455] ? rcu_is_watching+0x12/0xc0 [ 223.013002][ T8455] ? trace_netfs_sreq+0x193/0x220 [ 223.014345][ T8455] netfs_do_issue_write+0x92/0x110 [ 223.015692][ T8455] netfs_advance_write+0x384/0xbd0 [ 223.017034][ T8455] ? netfs_buffer_append_folio+0x569/0x750 [ 223.018569][ T8455] netfs_write_folio+0xc44/0x18f0 [ 223.019918][ T8455] netfs_writepages+0x2ba/0xb90 [ 223.021227][ T8455] ? __pfx_netfs_writepages+0x10/0x10 [ 223.022638][ T8455] ? __pfx___lock_acquire+0x10/0x10 [ 223.023982][ T8455] ? unwind_next_frame+0xe5d/0x20c0 [ 223.025353][ T8455] ? arch_stack_walk+0x74/0x100 [ 223.026657][ T8455] ? __pfx_netfs_writepages+0x10/0x10 [ 223.028065][ T8455] do_writepages+0x1a3/0x7f0 [ 223.029291][ T8455] ? __pfx_do_writepages+0x10/0x10 [ 223.030635][ T8455] ? __pfx_lock_acquire+0x10/0x10 [ 223.031970][ T8455] ? do_raw_spin_lock+0x12d/0x2c0 [ 223.033320][ T8455] ? do_raw_spin_unlock+0x172/0x230 [ 223.034686][ T8455] ? _raw_spin_unlock+0x28/0x50 [ 223.035971][ T8455] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 223.037550][ T8455] filemap_fdatawrite_wbc+0x148/0x1c0 [ 223.038952][ T8455] __filemap_fdatawrite_range+0xba/0x100 [ 223.040423][ T8455] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 223.042066][ T8455] v9fs_dir_release+0x429/0x590 [ 223.043350][ T8455] ? __pfx_v9fs_dir_release+0x10/0x10 [ 223.044755][ T8455] ? __pfx_v9fs_dir_release+0x10/0x10 [ 223.046163][ T8455] __fput+0x3f6/0xb60 [ 223.047216][ T8455] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.048583][ T8455] task_work_run+0x14e/0x250 [ 223.049805][ T8455] ? __pfx_task_work_run+0x10/0x10 [ 223.051150][ T8455] ? __do_sys_rt_sigreturn+0x161/0x230 [ 223.052580][ T8455] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 223.054123][ T8455] syscall_exit_to_user_mode+0x27b/0x2a0 [ 223.055592][ T8455] do_syscall_64+0xda/0x250 [ 223.056789][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.058344][ T8455] RIP: 0033:0x7f71b557def9 [ 223.059517][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.064492][ T8455] RSP: 002b:00007ffdfc7586f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 223.066662][ T8455] RAX: 0000000000000000 RBX: 000000000003648b RCX: 00007f71b557def9 [ 223.068719][ T8455] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 223.070780][ T8455] RBP: 00007f71b5737a80 R08: 0000000000000001 R09: 00007ffdfc7589ef [ 223.072837][ T8455] R10: 00007f71b5400000 R11: 0000000000000246 R12: 0000000000036649 [ 223.074906][ T8455] R13: 00007ffdfc758800 R14: 0000000000000032 R15: ffffffffffffffff [ 223.076967][ T8455] [ 223.077791][ T8455] Modules linked in: [ 223.078986][ T8455] ---[ end trace 0000000000000000 ]--- [ 223.080613][ T8455] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 223.082399][ T8455] Code: b0 8b 48 89 df e8 c2 34 48 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 02 78 03 fd 48 c7 c6 80 f8 b0 8b 4c 89 e7 e8 a3 34 48 fd 90 <0f> 0b e8 eb 77 03 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 223.087410][ T8455] RSP: 0018:ffffc90003cdefc8 EFLAGS: 00010293 [ 223.089000][ T8455] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 223.091065][ T8455] RDX: ffff88805bf44880 RSI: ffffffff84898d2d RDI: ffff88805bf44cc4 [ 223.093147][ T8455] RBP: ffffea000194bdb4 R08: 0000000000000001 R09: fffffbfff2d7e105 [ 223.095216][ T8455] R10: ffffffff96bf082f R11: 1ffffffff1bf8c11 R12: ffffea000194bd80 [ 223.097460][ T8455] R13: ffff888024d01c00 R14: 0000000000001000 R15: 0000000000001000 [ 223.099546][ T8455] FS: 0000555557a3c500(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 223.101881][ T8455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.103608][ T8455] CR2: 0000001b2cbc0ff8 CR3: 00000000615f8000 CR4: 0000000000350ef0 [ 223.106326][ T8455] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.108419][ T8455] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.110523][ T8455] Kernel panic - not syncing: Fatal exception [ 223.116738][ T8455] Kernel Offset: disabled [ 223.117883][ T8455] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:35:08 Registers: info registers vcpu 0 CPU#0 RAX=00000000009d2f2b RBX=0000000000000000 RCX=ffffffff8b1b9d09 RDX=0000000000000000 RSI=ffffffff8b4cd9a0 RDI=ffffffff8bb15a20 RBP=fffffbfff1b92af8 RSP=ffffffff8dc07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8dc957c0 R14=ffffffff903e6bd8 R15=0000000000000000 RIP=ffffffff8b1bb0ef RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b32405ff8 CR3=000000005873e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfc758930 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c4 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffc900042d7cc8 RCX=0000000000000000 RDX=ffffc900042d7ce0 RSI=ffffffff81d9224f RDI=ffffc900042d7ce0 RBP=0000000000000000 RSP=ffffc900042d7858 R8 =0000000000000005 R9 =0000000000000000 R10=000000000000000e R11=0000000000000000 R12=0000000000000001 R13=dffffc0000000000 R14=ffffea000189a2c0 R15=ffffc900042d7cc8 RIP=ffffffff81d92260 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb0ac867d60 CR3=000000000dd7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0abd0b6a3 00007fb0abd0b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca8618250 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555573aebb68 0000555573aebb60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555573adc490 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555573ae8898 0000555573ae8370 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555573aec8b0 0000555573aec8a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000030323335 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010480040885e2d4 8608000100000c08 06060123e4000800 05b0030000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 7a797301ffffffff fffffffedf080490 03000400048c0300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000040000 RBX=ffff88806a82ca40 RCX=ffffffff817a324d RDX=ffff88805c0a2440 RSI=0000000000000007 RDI=0000000000000005 RBP=ffff888048df9540 RSP=ffffc90003acfad8 R8 =0000000000000005 R9 =0000000000000007 R10=0000000000000002 R11=ffffffff8b4f8fc0 R12=0000000000000002 R13=000000000003db0c R14=0000000000000000 R15=ffff88806a82ca40 RIP=ffffffff818d05b1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f71b4fde6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200018c0 CR3=00000000615f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8206122f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b55f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b570b488 00007f71b570b480 00007f71b570b478 00007f71b570b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b626d100 00007f71b570b440 00007f71b570b458 00007f71b570b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71b570b498 00007f71b570b490 00007f71b570b488 00007f71b570b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85057f85 RDI=ffffffff9a8ab680 RBP=ffffffff9a8ab640 RSP=ffffc90003cde8e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff85057f20 R15=0000000000000000 RIP=ffffffff85057faf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555557a3c500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2cbc0ff8 CR3=00000000615f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003000c01 Opmask01=0000000040000000 Opmask02=0000000003006000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2f2993b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d65766973730000 313d657669737369 6d7265700000313d 6576697373696d00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3765766373730000 3137657663737363 6772657000003137 6576637373636700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c00302d30206720 5d2037333554205b 5d3231203430382e 3832312020363030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3000302d30200000 3020303330302000 000000203230362e 0000312020323020 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 796367786f7a0a0a 3b376f7c63797963 670a003f323d3c33 3e3f3e393838382a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 360a3a723a2a6d6b 7e2a676f7e632a64 636b672a647d6564 61647f2a303c3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000