last executing test programs: 2.258911344s ago: executing program 3 (id=1206): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) socket$inet6(0xa, 0x5, 0x0) (async) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0xfffffffffffffdd1, 0x80000) (async) accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0xfffffffffffffdd1, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000180)={@loopback, r2}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0073"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.190145804s ago: executing program 3 (id=1207): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0xc, r2, 0x1, 0xed, 0x6, @remote}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, 0x0, 0x4, 0x301, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 2.189769151s ago: executing program 3 (id=1208): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x1, 0x80, 0x3, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, 0x10) 2.110034791s ago: executing program 3 (id=1209): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r5, @ANYRES32=r4, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x203, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r6, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r4, 0x6, 0xb3, 0x2, 0x6, 0x34, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0xb5cc42b6ce06a935, 0x7800, 0x1, 0xd1}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fddbdf2507000000", @ANYRES32=r9], 0x18}}, 0x0) 2.109533876s ago: executing program 3 (id=1210): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x69) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000020000000000000f0200000025ff000000000000000f02000000b8b300005f00dadd95768653755f30fc3d8feabaef2ad04b5d51b9665260a9d6b20bf93a170ad928342b1a0ef8ccb5423a88e4bb1fc365b0a7c0298dd0c513633ce4abdabf3fe66dcbb187596dbea19046aefafdba8249c80c81a995e058d3151e105b1b1438a689890ada2c1ea8d1118c9c6ea1c0856cf9d30c42fe17be63ff830a96c9f75172b81d52a16bf683b127ebbc6b0940e9741a49ffbe5e9957c11310c8d422b5adc938b88df27bd1814f2f9b4baee6803a14b3972d826f35a9"], 0x0, 0x38, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="b141", 0x2}], 0x1}}], 0x1, 0xc0) sendto$inet(r1, &(0x7f0000001040)="ab0e22aa81622eabdeb521a94fb083f5993b9e76e4522516cba6108f1aa02d348584b400315cee31218bd8334af40c188160de0aac0a979eb78b12e97f100d618057c669e5200956f68c4e08786d5f7542cca3043e29e73d027ed941f7f85e2fc0e91cbf8b0ced6b72dc3650200a2c6bd1fc6bdb00043193f89bc6758492d4c21bc6fabe7b6425de678b7b5ba92595f892e0137588ad17b56a7416a235842745ea0427314bae506aa8bc2166ef6f058b89f0b206d17258fb9b0e588be99559339ccb84a5afd3002cf3ecf2bd683fe58b88f0b1b0207933edeab1b3aa0c445609975bee09c0deaaac1b61c80a260f500c12c2ffa8a794c5d7f4f54e43a45453cb359e8621a980168159f4b350a67e32c3db96e3124b4346355c3b9e4278b59e47baabf633b74452b88f104c621b50d6c48ce592c8aa023e0c10d65900bd362063a8f4a9a37679fd5113100d27c877dddeee08f4fae6bd17114ca4f810423262932c4f2a1f790807f601ab7007dfcb698f6a330bdeaa0efb5c5ca18ed9f9cac4b27718998249414a93bd764bb83ee9826072a348126c57a090ad707f4fc06cfeaa327f863d3aae17c60d35943cbe9c72fd1a9d0675eb27d334816f8e7e81efc3ba4f71b910c3d7b867ca617d70e903786cff438d0d4d3f224a2241f049c95943a7451a7ec57c7f9c19e70e0bf734263d62cbc6e2fd82d9121be2126497ab22f4833d9cd40736c06c4a4584f5fe50f1c7cd308d2ebe0b5c85df7562b684d7e190ef95be96235fb63aafb81e76d130c747c6db6e3a6f1d56cfcbfc214187eaa2f996ee2baf8bb4f77f09edede0267c9836728bc9490e0079579fc8d987221f208d88ed10b3765d1568f5c76d4d48c1c528fccfcbc60f729e1ed29c113a8aa80d00ef131f343c3b99401de734d5d9ce05e346135523458ce1e0021fd05fcbc94c4a03b8390c2d3376ae961cfb78f7bc20e14076d584c56621eb1945e6768b341ccb33e7365c9181d8924611b8bfaf88ae5a95b7bb4db914f46bb00391d60102bdc59333fa020872721d89d59e9d9a6e5e52d588589007729335068efeb1407b5c6c2867f3f82dabd243bbd703795406b1ad7d74efa2a67a8ebc07589d0fde93a9256398b433dd920b8978cb681f1ec4bc6c19e0466fb79c93a425606bc8831586d1df21c977fb4dc702eb2cc52c67973aaf0b58edd356207ace73ff3c31857bcf636c1012ebf28f17fab1947b292ea151e3691ed123febaa34ac53165b0c5fd600de2a7c6ff7d53c456ade3e87356db7ed18cd5a6e8de3e79a650f34134920fee688b3bbdf89abe8a33f4132cf72843a62b390cad34f3ea4a88fa3a150cba2a1eb30e90a1f4fdcd6e18ecc5e089803656f6a89d156bb5ee55579eac3667f21507a07d34eee79f91b97a4d60d1ae503d96fb5f8828274f4915ea851e38377b0c6f601202cbf955ed5e066c0984550f95cab68959433b223a70ddee5a86c56d69e3547f07c52a6682fb43ca6cfdef2eff657d32f68768d60ef9e10c1625a726c2811cb456abbabcb1e9780764b2335f0beb3738ac8c346b63fda953e99ca604c7f9d460e2e4fd915cd88a8bbeeda82df40a178cc413f8f43a8276429c93f93ed0f64f14f670134b00010f32417927b5f482b5f55202e3a837e08d4526e850e2351cd3229053cf24705ef9d414bfb884329dd6bd83933ed467b12a4561f45584cbf813162afbcd9a4f1648d02e184abf24910853404f68885dce80521a82d956b0679ceb41b5fe003f9662578ec0569b2e51a0e09a1c23bc7860be5d937426d295c978dc61a7f8861a13613588d77143a93fe60ea91fc6724ca97ee8ad7f59dad4fceca1a39f2ab1ae6f8da92142bd22ffebbce7c5187dea160aa99e6023b83ce8145ae8e3f9183fd710b6a7a0491faa2f34f43a3d2c4958571f47cadcec0bc3677e7e6c3e3a8ae5acde5a157b50909e3173cc181bbae877e66389380933dc4ad36e98d3931db108d2ce2b9ca635472d1c6302d88dc2d83269c4bd7c4b21bf966c9115591ab36eac2b4c675e2547b2c8dd82e4d50dbd18fb8c0898a9df6dad8bda5217a43082cf7059e2808eb2710740765b0f0ec7bf77f7c8f1682c394de96ebddf34521971b5194d5b2e8e35c249d8d3042cf399249e71561b1534e363663e7a6dcb47308d5d574f884f27e9ce311e6c5454abd074d4efae5db98c6e9484a537948a6e09e435d32d77c832f63d214ed7a16a058e68541907050e39df8934d2299f68f0d5adb80fa39057096f0e73f5d3e373e2110a496254c196d5dfd7c52c198f47f705378137b75d8c514e32fba18e1d07d8b07a5dc45589ccb59c40bef98286f3d4de45216a722a2df635f961dbb051a18f5afcf3bf01b4db42c14d5b0aae39175884477f891be1cb212e7e80cb82a4cac2e54e1fd1aad5a050fbcb4b7ac2b2e2c6ba0b4e75d416945796879ba296f2dedcb829760af2cf251d21acb0d736c66f067edb0a77f8d723a9a56102def073d48755fd1aecfadaa0547686a47ef4a726bc4669490fd050ef2af49be899db502a4edb6f61c4087aceb01c3e53fd177f6b7ea69e0e2306f72ee8a5b953a936cb07cbbe726c92a2aec9e2b5d094d2b5748dabba8c6894af695d9dfa36246324ca7f020df86a307062eeeb7d96e009bf4cc0d5890a916375b6f71eac501b6e6cff9ef117cca9cee0354639d1a70cd09d7bbeab77da2b0b33e232eef75962bde43e6db9ed5c2f37751bc88e1aee3649f00a3a8489733ccbd0b75b7b8ce0f78a3ea2745584cea0d6a963aca80e3a42e849001009fd6f34cbb005eb1ba18b6a7dee8fcafd81a38335d85e4e9e8a72d26e112ec572fa693149d91e6bcb5269d9cd3a389efcc9570e743cb5536ecb64f86f6f06ccef3bc4aa45396138c69c294f8201d97d34795f65d51769f9cf98a127c3ebf3f45bd0aadfbaa789088022237ec958278e323e1e95d6146e2368358f2711886b92003d738bbaeed03cffa5fea867d6e16727d058febfafc59d410161759ed1ef11b0906a50bab9bf89d8baafb54c5d14f791495efa40c12e4366b331f65202f66ea7d54ca0d745a8683d77f2f5e37108804c14ccf33211421c12772c2c8c5d4c2f4367a56bd3c8cd25389c8de40a2d63ed4b8fd2d5918d668d3b53510c1119869a7a8c0505573435b5fada0adbd10551d8c1835a3489557cba875c5f85ec04e163a943a20ef55f06548398ec4e83bfb2be206fee2932fdb4602c19ae7388065291224448e1295608d782ed4c2f7a1339c9b23d5a96541bd9b23492e7a41134e4a03840c8d539ebacc090563343bdb5c9d0ac8547b5d18ae19d37765c55be626dcca7292cd3fbb58fc82e0c0e48968dae3718c8c9386d18845cf3e8fe575f85948e25b385497c9d0ffc9eae901967ce109fef92dce9fa50effc3dec1ff22e5934876fa6160dacccccc9929e2f58810037f017e91f07db2d92eac22c1942df42850f8b1d0d0bc4ab57ffb43bd87d61a39c6edf16499c905056dc4f3c3bd1d6db35b7b8a3ce7d97a356ed38775620354b4784853a8c6ec07911b877b14736d3e58d7a6e86a2e6da794cc4fc8e00000000000000b2e1bf1d692a719a500573da841128946e71ce353e8df9374794abbafaea5930dad3d1ef79680a62ad3c8fe284e3a82358b3ba5f89e9807c298b2cf2959e0fb447377ee3c2085afa88056e02c5ff1f2677f9c4e4736b3c3d90815fa99b018ff4a48b617bdcdbb48df4a13e45c4fbffffbf", 0xa61, 0x400c0c0, 0x0, 0x0) close(r3) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/rt6_stats\x00') lseek(r6, 0x4, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r7 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0xc01, 0x3, 0x498, 0xf8, 0x5002004a, 0x6, 0xf8, 0x3, 0x318, 0x3c8, 0x3c8, 0x318, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0xffffff00, 'nicvf0\x00', 'bridge0\x00'}, 0x0, 0xffffffffffffffb5, 0x300, 0x0, {}, [@inet=@rpfilter={{}, {0x9}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@hashlimit2={{}, {'veth0_macvtap\x00', {0x9, 0x1, 0x0, 0x8d, 0x10001, 0x6, 0x6, 0x40, 0x40}, {0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x3, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xfffffffffffffe02) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xcd, 0x30, 0x8}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000340)={r9, 0x5, 0x30}, 0xc) splice(r2, 0x0, r3, 0x0, 0x200000000622c, 0x0) 1.699980502s ago: executing program 2 (id=1217): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x88c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r7, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 1.459002022s ago: executing program 1 (id=1219): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200008070007400000d9000000000000000000"], 0x1c}}, 0x24044000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0xffffffffffffff4e, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="480000001400010027bd7000fddbdf250278"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='mm_collapse_huge_page\x00', r0, 0x0, 0x9}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r4, &(0x7f0000000ac0)="f7", &(0x7f0000000200)=""/86}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0xa458, 0x88, 0x6, 0x9e9e, 0xcb, "0982aa400000000000e6ffffab5b00", 0x5, 0x6}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.400228708s ago: executing program 1 (id=1220): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x4, 0x6, 0x0, @multicast1, @private=0xa010102}, {0x0, 0x4, 0x8}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010040", 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x880) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001740)=0x64, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x140) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NBD_PRINT_DEBUG(r6, 0xab06) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000040) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r11, &(0x7f0000000780)=""/185, 0xb9, 0x3c) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x60, 0x1, 0x4, 0x0, 0x0, 0x0, {0xc8dea504125b5afe, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4638107f}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffffbff}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x10001, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x1000) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020ff41000000bfa100000010000007010000f8ffffffb702000008000000b70300000000000085000000069790fae303e9a3550a1100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.27055288s ago: executing program 1 (id=1221): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x4, 0x7, 0xbcbd}, {0x9, 0x7, 0x4, 0x4ce}]}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x7ffffffffffffffc, 0x82000004}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @broadcast}) syz_io_uring_setup(0x3215, &(0x7f00000002c0)={0x0, 0x731b, 0x1, 0x0, 0x282, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000240)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x101800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x70bd27, 0x0, {0xff}}, 0x14}}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffa1, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0xba01}, 0x0) 1.26116468s ago: executing program 3 (id=1222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)=0x7) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x604, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.060298451s ago: executing program 1 (id=1223): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) (async) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f00000000c0)="6187b90d16b65dec1b97dd3ecad49fdff9235d7c", 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002b000b0000000000fcdbdf250a0032bfcd9cf0ad9d76826f2ac700000c0001800600000088480000"], 0x20}}, 0x0) 998.637298ms ago: executing program 1 (id=1224): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000280)=[{0xc}, {0x6, 0x5, 0x0, 0x6}]}) (async) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='ntfs3\x00', 0x8080, &(0x7f00000001c0)='discard') 350.353868ms ago: executing program 0 (id=1233): syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_RMID(r0, 0x0) (async) r1 = open$dir(&(0x7f0000000000)='./file1\x00', 0x400, 0x12) openat(r1, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x80) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffb, 0x0, 0x5, 0x7, 0x2d3e, 0x756a]}, &(0x7f0000000200)=0x78) (async) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) 349.434158ms ago: executing program 0 (id=1234): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x404c080) write(r0, &(0x7f0000000000)="2000000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ebb67ec}, [@generic={0xd7, 0xa, 0x3, 0x0, 0x40}, @jmp={0x5, 0x1, 0x5, 0xa, 0x6, 0x2, 0x8}, @alu={0x7, 0x1, 0x4, 0x4, 0x3, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 334.353333ms ago: executing program 2 (id=1235): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = syz_io_uring_setup(0x4e16, &(0x7f0000000140)={0x0, 0xd73c, 0x400}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000540)={0x7, 0x7}, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0xf45840, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="036b215c62892068094b14914d97d847e595c88d4d9f7b314442b279c429716d5a097855c4f18c524edc7dac2e0b6352a8d16f8902f066374689210746ab457f2db08ca2be6ea8ba83513c0dbcfde90ef08114319784cb0a530c3efe7f6882cc692ddd12c82fcc8a600be73a1ea3d67f273f2101389848973a3e89d6d240b4ef18f942c59eed892eb53fcb2a4e9a33990b7019c74529be8923415df9257264e39ade7b9725ca64a9df870555ff8d3ed92736cc5d8e5dfb6678bc89c2282682052ee24c8519c8216db2c8ab20d1fff0368be0fde326ef905c6ae4a8e9121ee89c7d73804df47e1c39c3d09b07bfe4e07d4ed7e6f560672a", 0xf7}, {&(0x7f0000000080)="c3a08ec76e7c61e7244fc577376f76e24d7809bfd06d534ab7904a0313b7fa6eb7de42169ab40f10a16bc5345eee9e864b7bcc7f3141c209beb9cea2e933c4eb301352f96b7a33fc389f2d3748eac449779b43af684aad1bce96", 0x5a}, {&(0x7f0000000340)="66f548e470cf52344580ebbc49c325d7d8751c3fa92eb2138140539322c3eb9e797aac0ac81394cff7dc28a8ea0a0d21da50105f7d7e294450553255", 0x3c}], 0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1b000000000000007f"]) fspick(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, 0x0, 0x1d) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) 219.374762ms ago: executing program 2 (id=1236): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = epoll_create1(0x80000) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x2e020000) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async, rerun: 64) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) sendfile(r1, r0, 0x0, 0x20000023893) (async) r6 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) (async) shmctl$SHM_LOCK(r6, 0xb) 219.034567ms ago: executing program 2 (id=1237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0}, 0x34000041) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mknodat(r4, &(0x7f0000000000)='./file0\x00', 0x4, 0x2) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000b88ae4ef00000001000000080005"], 0x20}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c000000000033907800f40002ffffffff0000000000089078"], 0x0) 130.214118ms ago: executing program 0 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01530000f9ffffffffff01"], 0x34}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@broadcast]}) 121.263911ms ago: executing program 1 (id=1239): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0xfffd, "f215ef", 0x2}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000140)=0x6, 0x4) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000640)=[r5, r4], 0x2, 0x80000}) close(0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f00000001c0)={0x1f, 0x4, 0x4}, 0x6) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x58, &(0x7f0000000100)=[0xffffffffffffffff], 0x1}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r11, 0x1, 0x15000000, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$uinput_user_dev(r14, &(0x7f000001c340)={'syz0\x00', {0xc, 0x1, 0x3, 0xffff}, 0x3c, [0x6169, 0xad, 0x6, 0x9, 0x0, 0x10001, 0xffffff1f, 0x1, 0x8, 0x2, 0x5, 0x5, 0x3, 0x24, 0x9, 0x3, 0x59, 0x0, 0x7, 0xffffff00, 0x4, 0xff, 0x78ea, 0x8, 0x3, 0x1, 0x80000000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x400, 0xffffffff, 0x4, 0x2, 0x8, 0x5, 0x5, 0x1, 0x0, 0x3124, 0x10, 0x4, 0x1, 0xfb, 0x7a, 0xc, 0x2, 0x3ff, 0xffffffff, 0x10001, 0x200000, 0xff, 0xe24, 0x8, 0x0, 0x40000000, 0x4, 0x78, 0xa, 0x9, 0x3, 0x6], [0x2, 0x1, 0xa000, 0x0, 0x9, 0x10001, 0x997f, 0x8, 0x80000001, 0x7, 0x22, 0x9, 0xb1, 0xfffffff8, 0x0, 0x8, 0x4fef, 0xffff25a3, 0x7ff, 0x9, 0x3, 0x9, 0x1, 0x7, 0xee1, 0x7, 0x8001, 0x5, 0x7, 0x2, 0x200, 0x8d, 0x0, 0xa, 0x6, 0xfffffffc, 0x9, 0xfffffff9, 0xfff, 0x8, 0xdf, 0x1f3c, 0x3, 0x2, 0x1, 0xfffffff3, 0xfffffffb, 0xbbad, 0x0, 0x10000, 0x4, 0x7, 0xfffffe01, 0x8, 0x7fff, 0x9, 0x9, 0x4, 0x5b58, 0x5, 0x10, 0x4, 0x6, 0x5], [0x8, 0x5, 0x7, 0x530b93b0, 0x1000, 0x2, 0x6, 0x1ff, 0x0, 0x2, 0x8001, 0x6, 0xf, 0x6, 0x1, 0x1, 0x9e24, 0x3, 0x1, 0x9, 0x8, 0x100, 0x9, 0x7f, 0x7, 0x2, 0x1d6, 0x3, 0x8, 0x3, 0x0, 0x3, 0x9, 0x6, 0x5, 0x80000000, 0x2546, 0x0, 0x0, 0x0, 0x1, 0xfe1d, 0xd9, 0x5d1a, 0x101, 0x10000, 0xb, 0x4c6, 0x5, 0x0, 0x2, 0x3, 0x40, 0x2, 0x1, 0x3, 0xd73, 0x10000, 0x1000, 0xf, 0x7, 0xfffffffa, 0x5, 0x5], [0x8, 0x7c7, 0x4, 0x8, 0xea, 0xffffff7f, 0xa08, 0x3, 0x10, 0x7, 0x0, 0x7f, 0x2, 0x3, 0x5, 0x5, 0x3ff, 0x3af9, 0xe9bf, 0x81, 0x37, 0x1, 0x3, 0x2, 0x8, 0x7ff, 0x5, 0x7, 0xff, 0x3, 0x15e1, 0x7, 0x5, 0x0, 0x9, 0x6, 0x7, 0xdc, 0x0, 0x8, 0xc, 0x60, 0xb, 0x6, 0x81, 0x70, 0x2d79, 0x4, 0x6, 0x8001, 0x2, 0x0, 0x9, 0x5, 0x2, 0x6, 0x800, 0x4, 0x8, 0x9, 0x7, 0x2, 0x2, 0x5]}, 0x45c) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x1c}], 0x1}, 0x4040041) 118.91634ms ago: executing program 2 (id=1240): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) syz_emit_ethernet(0x8a, &(0x7f0000000380)={@empty, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x54, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[@hopopts={0x6c, 0x7, '\x00', [@calipso={0x7, 0x15, {0x2, 0xa, 0x0, 0x0, [0x6, 0x3, 0x8000000000000000, 0x9, 0x3]}}, @jumbo={0xc2, 0x4, 0x6}]}], {{0xfffe, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}, 0x1, 0x0, 0x0, 0xc11}, 0x0) 118.687267ms ago: executing program 0 (id=1241): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffffffffff81]}, 0x8, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x70, 0x0, &(0x7f0000000600)=[@acquire={0x40046305, 0x3}, @increfs, @decrefs={0x40046307, 0x1}, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x3, 0x1, 0x9}, @fda={0x66646185, 0x9}}, &(0x7f00000005c0)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x2}], 0x37, 0x0, &(0x7f0000000680)="873fc90a4ba461b3f153adc13ca7c4e95d4c912fcadbc4637c5d480faa0adb1902be6260bcf47e7e16ab5fafa8a33ba2660412d88c0628"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@deltfilter={0x304, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2, 0x2}, {0xfff1, 0xf}, {0x8, 0x1}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_u32={{0x8}, {0x2c8, 0x2, [@TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_SEL={0x274, 0x5, {0xa, 0x34, 0x0, 0xe, 0x5, 0x0, 0x7f, 0x28d9, [{0x1000, 0xffffff00, 0x2, 0x7fffffff}, {0xfc, 0xa, 0xaf76, 0x3}, {0x3, 0xfff, 0x6, 0x1ff}, {0x1, 0x8, 0xf639, 0x1c0}, {0x2, 0x40f1f3f1, 0x4, 0x1}, {0xa, 0x4, 0x6, 0x1}, {0x401, 0x8765, 0x7ff, 0x1}, {0x100, 0x3, 0x9, 0x6}, {0x2, 0x8}, {0x5, 0x2, 0x5, 0x9}, {0x7, 0xffffffff, 0x2}, {0x1, 0x9, 0x2bb1bad, 0x4}, {0x3, 0x8001, 0x7, 0x7e23}, {0x2, 0x6, 0x1c30, 0xe}, {0xffffffda, 0xd, 0x5, 0x43468a2a}, {0x100, 0xb, 0x3c000000, 0xc0000}, {0x9, 0x1ff, 0xb, 0x7f}, {0x9, 0x7, 0xf, 0x4}, {0x4d800000, 0x8, 0x2157, 0x4}, {0x7, 0x5, 0xd, 0x1800000}, {0x0, 0x7, 0x8, 0x3ff}, {0x81, 0x9, 0x8, 0x5}, {0x8000, 0x5, 0x3, 0x4}, {0x8, 0x9, 0x401, 0x9185}, {0x2, 0x3, 0x4, 0x22d08a12}, {0x3, 0x1, 0x7, 0xd745}, {0x3cf, 0x35, 0xd2, 0xa}, {0x3, 0xd, 0x100, 0x3}, {0x0, 0x4, 0x1000, 0x4}, {0x624, 0x8e7d, 0xb73, 0x9}, {0x3, 0x9, 0x1, 0xe}, {0x5, 0x563b, 0x1, 0x3}, {0x4, 0x3ff, 0xd57, 0x5}, {0x0, 0xe, 0x6c6, 0x2}, {0x7fffffff, 0x3, 0xa, 0x2}, {0x9, 0x5, 0xfaea, 0x5}, {0x5, 0x9, 0x9, 0x81}, {0x8, 0x0, 0x4, 0x23f}]}}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0xda}}, @TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_batadv\x00'}, @TCA_U32_MARK={0x10, 0xa, {0x4000009, 0xff}}]}}]}, 0x304}, 0x1, 0x0, 0x0, 0x8894}, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) 118.141813ms ago: executing program 2 (id=1242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000ff8e0f25110000000807bec5d8b7183b332160830fdff600c5", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5460, &(0x7f0000001cc0)={{}, 0x0, 0x0, @unused, @devid}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5460, &(0x7f0000001cc0)={{}, 0x0, 0x0, @unused, @devid}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000480)=[{0x1001, 0x4, 0x4, 0x8}, {0xfffc, 0x1, 0x8}]}, 0xffffffffffffff59) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x10009, 0x35314241, 0x3, 0x0, 0xff, 0x0, 0x6, 0x1, 0x4, 0x1, 0x4}}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x10d002, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x10d002, 0x0) connect$nfc_raw(r10, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10) (async) connect$nfc_raw(r10, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10) socket(0x400000000010, 0x3, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000400000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x8044) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000400000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x8044) ioctl$RTC_WIE_ON(r7, 0x700f) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'nr0\x00'}) 70.113361ms ago: executing program 0 (id=1243): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x507481, 0x5) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000001c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @local}, 0xfffffffffffffcb2) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x6e6bbd, 0x1, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x6e6bbd, 0x1, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000640)=@urb_type_iso={0x0, {0xe, 0x1}, 0xb, 0xa2, &(0x7f0000000500)="3ac8ab55c93d88abbf631ced45b3eaf3853d828fc4e7bf976aed065d281ce0d394f0940ddc7b024942648474371800f6ed2316f298fce43447baa10e67a1d4e33c827f687fd6a46f67de7560d93d53aa16f665530e4c7f975a3212583a05cb563b2f7cfc44bd039a6057bba62c866929bd616fb9bf71dae42449531fbde53f01f6b49af7e839bde778c983b845b6", 0x8e, 0x3, 0x1, 0x3c, 0xfffffff9, 0x6, &(0x7f00000005c0)="79f88a38c24ebe1b01912cb221c2f1b48bd462f502545f4ba9826e6ace9f2849ffc708c0758f7a7af6e8efb274ff06a3db052c67a6b3627e44f4e909a39b5ae4bddf0d63a757fbf9697880e204b7e04cba1dac56692d64bfbf1cad10fef68c0708229ef213b392d1086a", [{0xfffffff2, 0x56, 0x80}, {0x0, 0x6, 0x7}, {0x8, 0xeee0, 0x5c}, {0x1, 0x872b, 0xffffffff}, {0xfffeffff, 0xe688, 0x9}, {0xe225, 0x0, 0x6}, {0x20812a7d, 0x4, 0x7}, {0xd75, 0x7, 0x9}, {0x1, 0x8d5, 0xcd9}, {0x5, 0x7, 0x2}, {0xfffffff9, 0xffffff7f, 0x1deb}, {0x1, 0x3, 0x80}, {0xfff, 0x7, 0xcf5}, {0x5e8e, 0x5, 0x4}, {0xf, 0x3, 0x6}, {0x8, 0x93a, 0xc1aa}, {0x3, 0x3, 0x3ff}, {0x400, 0x3, 0x10}, {0x3, 0xffffffff, 0x3}, {0x5, 0x401, 0xff}, {0x6d5, 0x7, 0x1}, {0x0, 0x4, 0x6}, {0x585, 0x101d9777, 0x2}, {0x0, 0x8, 0x5}, {0x2, 0x100, 0x9}, {0x81, 0x43ff, 0x3}, {0x8001, 0x4, 0x458}, {0x36, 0x3ff, 0xffffffff}, {0x1, 0xdf, 0x3}, {0x0, 0x7, 0x8}, {0x1, 0x0, 0xd668}, {0x5, 0x4e, 0xfffffffd}, {0x101, 0x40, 0x3}, {0xbb, 0x3, 0x3}, {0xfffffffc, 0x3, 0x15853c93}, {0x2, 0xa, 0xf}, {0x1, 0x10}, {0x8, 0x100, 0xfd}, {0x2, 0x0, 0x5}, {0x552e, 0x6, 0x4}, {0x57, 0x5, 0x4}, {0x80000001, 0x1, 0x7}, {0x1, 0x8001, 0x800}, {0x1b, 0x100, 0x2}, {0x7, 0x6, 0x1}, {0x8f5, 0x8, 0x3}, {0x8, 0x7, 0x6}, {0x100, 0x5, 0xd929}, {0x2, 0x9, 0x4}, {0x0, 0xa, 0x101}, {0x100, 0x6}, {0x5, 0xffffff01, 0x9}, {0xa, 0x5, 0x1}, {0x3, 0x8, 0x4c}, {0x4, 0xe51, 0x6a}, {0x80000001, 0x7, 0xfffffffe}, {0x10, 0x484, 0x7ff}, {0xab, 0xee, 0xff5}, {0x3, 0x7fffffff, 0x4}, {0x3, 0xca7, 0x3}]}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="9f3fd402"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r6, 0x0, 0x9, 0x1}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r6, 0x0, 0x9, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 0s ago: executing program 0 (id=1244): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180100002d000100000000000000000006010080140002000000000000000000000000000000000008000100", @ANYRES32=r0, @ANYBLOB="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec2361bce614c639b6b0185b42625658e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29"], 0x118}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008020) r2 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75}, 0x1f) listen(r3, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078301a3030303058d759dc7b2930303030303034653232"]) close_range(r3, r3, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x154}}, 0x0) kernel console output (not intermixed with test programs): g [ 76.611253][ T60] usb 8-1: config 209 interface 164 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 76.614975][ T60] usb 8-1: config 209 interface 164 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 76.619689][ T60] usb 8-1: config 209 interface 164 altsetting 3 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 76.624182][ T60] usb 8-1: config 209 interface 164 has no altsetting 0 [ 76.627091][ T60] usb 8-1: language id specifier not provided by device, defaulting to English [ 76.631450][ T60] usb 8-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=6f.f6 [ 76.634448][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.637200][ T60] usb 8-1: Product: syz [ 76.638664][ T60] usb 8-1: Manufacturer: syz [ 76.640412][ T60] usb 8-1: SerialNumber: syz [ 76.650355][ T6901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.862903][ T60] usb 8-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 76.867529][ T60] usbhid 8-1:209.164: couldn't find an input interrupt endpoint [ 76.879832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 76.884995][ T60] usb 8-1: USB disconnect, device number 5 [ 77.043385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.219830][ T6929] 9pnet_fd: Insufficient options for proto=fd [ 77.364084][ T6946] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.393693][ T6948] debugfs: Invalid uid '0x00000000ffffffff' [ 77.474226][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 77.624515][ T9] usb 6-1: no configurations [ 77.625391][ T6974] geneve2: entered promiscuous mode [ 77.626263][ T9] usb 6-1: can't read configurations, error -22 [ 77.683684][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.763303][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 77.854508][ T34] usb 8-1: config index 0 descriptor too short (expected 102, got 72) [ 77.860113][ T34] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 77.863712][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.866779][ T34] usb 8-1: Product: syz [ 77.868496][ T34] usb 8-1: Manufacturer: syz [ 77.870251][ T34] usb 8-1: SerialNumber: syz [ 77.875536][ T34] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 77.888216][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 77.888226][ T40] audit: type=1400 audit(1748536405.779:380): avc: denied { firmware_load } for pid=60 comm="kworker/3:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 77.910008][ T60] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 77.933805][ T9] usb 6-1: no configurations [ 77.935664][ T9] usb 6-1: can't read configurations, error -22 [ 77.938333][ T9] usb usb6-port1: attempt power cycle [ 78.025770][ T6979] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 78.115847][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.118685][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.131469][ T34] usb 8-1: USB disconnect, device number 6 [ 78.199775][ T6987] __nla_validate_parse: 8 callbacks suppressed [ 78.199786][ T6987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.294'. [ 78.205244][ T6987] overlay: Unknown parameter 'uid>00000000000000000000' [ 78.244174][ T6998] netlink: 256 bytes leftover after parsing attributes in process `syz.0.298'. [ 78.247855][ T6998] unsupported nlmsg_type 40 [ 78.272027][ T40] audit: type=1326 audit(1748536406.159:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.0.300" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff83838e969 code=0x0 [ 78.293826][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 78.314138][ T9] usb 6-1: no configurations [ 78.315655][ T9] usb 6-1: can't read configurations, error -22 [ 78.443280][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 78.447136][ T40] audit: type=1400 audit(1748536406.339:382): avc: denied { name_connect } for pid=7006 comm="syz.2.302" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 78.462875][ T40] audit: type=1400 audit(1748536406.349:383): avc: denied { getopt } for pid=7006 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.470081][ T9] usb 6-1: no configurations [ 78.471640][ T9] usb 6-1: can't read configurations, error -22 [ 78.473847][ T9] usb usb6-port1: unable to enumerate USB device [ 78.973629][ T60] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 78.977918][ T60] ath9k_htc: Failed to initialize the device [ 78.982336][ T34] usb 8-1: ath9k_htc: USB layer deinitialized [ 79.135838][ T7025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 79.145332][ T40] audit: type=1400 audit(1748536407.039:384): avc: denied { read } for pid=5332 comm="acpid" name="event3" dev="devtmpfs" ino=2909 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.152966][ T40] audit: type=1400 audit(1748536407.039:385): avc: denied { open } for pid=5332 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2909 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.161580][ T40] audit: type=1400 audit(1748536407.039:386): avc: denied { ioctl } for pid=5332 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2909 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.249218][ T40] audit: type=1400 audit(1748536407.139:387): avc: denied { write } for pid=7033 comm="syz.2.308" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.327283][ T40] audit: type=1400 audit(1748536407.219:388): avc: denied { ioctl } for pid=7033 comm="syz.2.308" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.768922][ T7040] fuse: Unknown parameter 'f' [ 79.771838][ T40] audit: type=1400 audit(1748536407.659:389): avc: denied { lock } for pid=7039 comm="syz.3.310" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.850359][ T5297] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 80.053288][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 80.088177][ T7049] evm: overlay not supported [ 80.183480][ T34] usb 8-1: device descriptor read/64, error -71 [ 80.204219][ T7055] fuse: Unknown parameter 'fd2eBAfeD' [ 80.289499][ T7058] ufs: You didn't specify the type of your ufs filesystem [ 80.289499][ T7058] [ 80.289499][ T7058] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 80.289499][ T7058] [ 80.289499][ T7058] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 80.300319][ T7058] ufs: failed to set blocksize [ 80.310017][ T7058] netlink: 'syz.1.316': attribute type 1 has an invalid length. [ 80.312438][ T7058] netlink: 'syz.1.316': attribute type 4 has an invalid length. [ 80.317842][ T7058] netlink: 192 bytes leftover after parsing attributes in process `syz.1.316'. [ 80.434488][ T7078] netlink: 'syz.2.321': attribute type 7 has an invalid length. [ 80.443270][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 80.479543][ T7087] netlink: 44 bytes leftover after parsing attributes in process `syz.2.324'. [ 80.534928][ T7087] netlink: 40 bytes leftover after parsing attributes in process `syz.2.324'. [ 80.584266][ T34] usb 8-1: device descriptor read/64, error -71 [ 80.693688][ T34] usb usb8-port1: attempt power cycle [ 80.703348][ T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 80.783286][ T836] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 80.933292][ T836] usb 7-1: Using ep0 maxpacket: 8 [ 80.937226][ T836] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.940500][ T836] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.943406][ T836] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 80.946951][ T836] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 80.950274][ T836] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 80.953118][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.959347][ T836] hub 7-1:1.0: bad descriptor, ignoring hub [ 80.961269][ T836] hub 7-1:1.0: probe with driver hub failed with error -5 [ 80.963798][ T836] cdc_wdm 7-1:1.0: skipping garbage [ 80.965490][ T836] cdc_wdm 7-1:1.0: skipping garbage [ 80.968731][ T836] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 80.970689][ T836] cdc_wdm 7-1:1.0: Unknown control protocol [ 81.053623][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 81.055609][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.058942][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.084635][ T34] usb 8-1: device descriptor read/8, error -71 [ 81.089114][ T7097] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 81.116992][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.119837][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.125664][ T24] usb 5-1: no configurations [ 81.127155][ T24] usb 5-1: can't read configurations, error -22 [ 81.161899][ T7087] syzkaller1: entered promiscuous mode [ 81.165242][ T7087] syzkaller1: entered allmulticast mode [ 81.288011][ T7101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 81.290768][ T7101] netlink: 'syz.1.328': attribute type 7 has an invalid length. [ 81.293126][ T7101] netlink: 'syz.1.328': attribute type 8 has an invalid length. [ 81.296679][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 81.302085][ T7101] erspan0: entered promiscuous mode [ 81.305217][ T7101] batadv_slave_1: entered promiscuous mode [ 81.308657][ T7101] erspan0: left promiscuous mode [ 81.310654][ T7101] batadv_slave_1: left promiscuous mode [ 81.334332][ T34] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 81.353724][ T34] usb 8-1: device descriptor read/8, error -71 [ 81.394417][ T61] cfg80211: failed to load regulatory.db [ 81.473879][ T34] usb usb8-port1: unable to enumerate USB device [ 81.585913][ T7087] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 81.713332][ T7087] usb 7-1: device descriptor read/64, error -71 [ 81.716253][ T7110] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 81.721141][ T7110] pmem0: [POWERTEC] [ 81.753359][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 81.788013][ T7116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7116 comm=syz.1.334 [ 81.799873][ T7116] geneve2: entered promiscuous mode [ 81.851109][ T7118] i2c i2c-1: Invalid block write size 34 [ 81.860141][ T7120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.983352][ T7087] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 82.113352][ T7087] usb 7-1: device descriptor read/64, error -71 [ 82.373281][ T7087] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 82.403776][ T7087] usb 7-1: device descriptor read/8, error -71 [ 82.643322][ T7087] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 82.664065][ T7087] usb 7-1: device descriptor read/8, error -71 [ 82.774592][ T7087] cdc_wdm 7-1:1.0: Error autopm - -16 [ 82.774776][ T1023] usb 7-1: USB disconnect, device number 3 [ 82.924125][ T1023] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 82.938230][ T7153] futex_wake_op: syz.0.349 tries to shift op by 32; fix this program [ 82.969665][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 82.969680][ T40] audit: type=1401 audit(1748536410.859:405): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 82.977524][ T40] audit: type=1401 audit(1748536410.859:406): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 82.981982][ T40] audit: type=1401 audit(1748536410.859:407): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 82.986674][ T40] audit: type=1401 audit(1748536410.859:408): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 82.991151][ T40] audit: type=1401 audit(1748536410.859:409): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 82.997093][ T40] audit: type=1401 audit(1748536410.859:410): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 83.002306][ T40] audit: type=1401 audit(1748536410.859:411): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 83.007472][ T40] audit: type=1401 audit(1748536410.859:412): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 83.012023][ T40] audit: type=1401 audit(1748536410.859:413): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 83.012053][ T40] audit: type=1401 audit(1748536410.859:414): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 83.038892][ T7162] netlink: 'syz.0.351': attribute type 12 has an invalid length. [ 83.065160][ T1023] usb 7-1: device descriptor read/64, error -71 [ 83.091269][ T7164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7164 comm=syz.3.352 [ 83.293984][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 83.303276][ T1023] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.433381][ T1023] usb 7-1: device descriptor read/64, error -71 [ 83.543379][ T1023] usb usb7-port1: attempt power cycle [ 83.787952][ T7183] fuse: root generation should be zero [ 84.672634][ T7211] hugetlbfs: Unknown parameter 'Pze' [ 84.673408][ T7212] pmem0: [POWERTEC] [ 84.810261][ T7222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.367'. [ 84.810292][ T7219] netlink: 14 bytes leftover after parsing attributes in process `syz.3.367'. [ 84.849767][ T7227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16412 sclass=netlink_route_socket pid=7227 comm=syz.3.369 [ 84.891688][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.370'. [ 84.902688][ T7232] cgroup: name respecified [ 84.936859][ T7236] fuse: Unknown parameter 'LJv6ubIP\' [ 84.978314][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 84.980982][ T7244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'. [ 85.020127][ T7252] netlink: 276 bytes leftover after parsing attributes in process `syz.2.377'. [ 85.054292][ T7254] program syz.2.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.094444][ T7258] binder: 7257:7258 ioctl c0306201 200000000640 returned -22 [ 85.099284][ T7260] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 85.102861][ T7260] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 85.108932][ T7262] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 85.111873][ T7262] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 85.157627][ T7270] netlink: 'syz.0.383': attribute type 2 has an invalid length. [ 85.160244][ T7270] netlink: 784 bytes leftover after parsing attributes in process `syz.0.383'. [ 85.255881][ T7289] binder: 7287:7289 ioctl c0306201 200000000280 returned -14 [ 85.293092][ T7299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.392'. [ 85.633395][ T24] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 85.803257][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 85.935350][ T24] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 86.083271][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 86.086004][ T24] usb usb5-port1: attempt power cycle [ 86.401977][ T7328] overlayfs: invalid redirect ((null)) [ 86.437709][ T24] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 86.463722][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 86.603351][ T24] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 86.634387][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 86.636147][ T24] usb usb5-port1: unable to enumerate USB device [ 87.453384][ T5297] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.221902][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 88.221913][ T40] audit: type=1400 audit(1748536416.109:474): avc: denied { read write } for pid=7366 comm="syz.0.412" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.231224][ T40] audit: type=1400 audit(1748536416.109:475): avc: denied { open } for pid=7366 comm="syz.0.412" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.444782][ T7375] netlink: 100 bytes leftover after parsing attributes in process `syz.2.413'. [ 88.445498][ T40] audit: type=1400 audit(1748536416.339:476): avc: denied { read } for pid=7372 comm="syz.3.415" name="file0" dev="9p" ino=35913861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.592814][ T40] audit: type=1400 audit(1748536416.479:477): avc: denied { bind } for pid=7382 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.668784][ T40] audit: type=1400 audit(1748536416.559:478): avc: denied { map } for pid=7391 comm="syz.3.420" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.682208][ T40] audit: type=1400 audit(1748536416.559:479): avc: denied { execute } for pid=7391 comm="syz.3.420" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.792542][ T40] audit: type=1400 audit(1748536416.679:480): avc: denied { write } for pid=7395 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.802985][ T7401] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 89.017780][ T7407] xt_l2tp: v2 doesn't support IP mode [ 89.024340][ T40] audit: type=1400 audit(1748536416.919:481): avc: denied { create } for pid=7406 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 89.244657][ T7416] overlay: filesystem on ./file1 not supported as upperdir [ 89.350182][ T40] audit: type=1400 audit(1748536417.239:482): avc: denied { module_request } for pid=7418 comm="syz.1.427" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 89.427897][ T7422] ip6t_rpfilter: unknown options [ 89.688240][ T40] audit: type=1400 audit(1748536417.579:483): avc: denied { create } for pid=7427 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 89.703836][ T7428] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 89.770137][ T7428] nfs: Unknown parameter 'TIPCv2' [ 89.804678][ T7434] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 89.826377][ T7434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.853721][ T7434] veth3: entered promiscuous mode [ 89.860407][ T7434] bond1: (slave veth3): Enslaving as an active interface with a down link [ 89.870479][ T7434] vlan2: entered allmulticast mode [ 89.872490][ T7434] bond1: entered allmulticast mode [ 89.875284][ T7434] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 89.901034][ T7439] netlink: 68 bytes leftover after parsing attributes in process `syz.0.434'. [ 89.916157][ T7439] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 90.003031][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 90.007737][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.436'. [ 90.010450][ T7443] netlink: 'syz.3.436': attribute type 13 has an invalid length. [ 90.163676][ T7451] IPv6: sit1: Disabled Multicast RS [ 90.448464][ T7471] geneve3: entered promiscuous mode [ 90.504040][ T7474] loop4: detected capacity change from 0 to 7 [ 90.507507][ T7474] Dev loop4: unable to read RDB block 7 [ 90.509400][ T7474] loop4: AHDI p2 [ 90.510692][ T7474] loop4: partition table partially beyond EOD, truncated [ 90.626796][ T7492] trusted_key: encrypted_key: insufficient parameters specified [ 90.671884][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'. [ 91.037093][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.463'. [ 91.037883][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.463'. [ 91.039985][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.463'. [ 91.042698][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.463'. [ 91.463666][ T7537] use of bytesused == 0 is deprecated and will be removed in the future, [ 91.466870][ T7537] use the actual size instead. [ 91.525106][ T7545] kernel profiling enabled (shift: 7) [ 91.525150][ T7544] usb usb8: usbfs: process 7544 (syz.3.469) did not claim interface 0 before use [ 91.531479][ T7544] netlink: 'syz.3.469': attribute type 27 has an invalid length. [ 91.589144][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.591974][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.648787][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.656572][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.705618][ T7544] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.708316][ T7544] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.711034][ T7544] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.713966][ T7544] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.728575][ T7544] gtp0: left promiscuous mode [ 91.732485][ T7544] veth3: left promiscuous mode [ 91.749665][ T7547] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.754641][ T7547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.764309][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 91.767060][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 91.770681][ T7553] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.816572][ T7561] hfsplus: unable to find HFS+ superblock [ 91.891218][ T7570] xt_bpf: check failed: parse error [ 92.245027][ T5297] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 92.330982][ T7610] overlayfs: disabling nfs_export due to verity=require [ 92.399398][ T7619] netlink: 'syz.0.490': attribute type 10 has an invalid length. [ 92.415052][ T7619] hsr_slave_0: left promiscuous mode [ 92.430065][ T7619] hsr_slave_1: left promiscuous mode [ 92.451882][ T7634] binder: 7617:7634 ioctl 4b31 200000000200 returned -22 [ 92.516608][ T7638] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 92.552642][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.556314][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.810134][ T7649] JFS: charset not found [ 92.813511][ T7649] xt_cgroup: path and classid specified [ 93.181173][ T7656] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.185048][ T7656] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 93.189587][ T7656] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 93.565268][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 93.565279][ T40] audit: type=1400 audit(1748536421.459:500): avc: denied { read } for pid=7670 comm="syz.0.507" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 93.576093][ T40] audit: type=1400 audit(1748536421.459:501): avc: denied { open } for pid=7670 comm="syz.0.507" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 93.591084][ T40] audit: type=1400 audit(1748536421.479:502): avc: denied { ioctl } for pid=7670 comm="syz.0.507" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 93.643356][ T5996] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 93.752171][ T40] audit: type=1804 audit(1748536421.639:503): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.509" name="/newroot/109/bus/file0" dev="overlay" ino=619 res=1 errno=0 [ 93.813518][ T5996] usb 6-1: Using ep0 maxpacket: 32 [ 93.817441][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.821933][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.825487][ T5996] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 93.828386][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.832159][ T5996] usb 6-1: config 0 descriptor?? [ 94.041961][ T5996] usbhid 6-1:0.0: can't add hid device: -71 [ 94.044824][ T5996] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 94.052428][ T5996] usb 6-1: USB disconnect, device number 10 [ 94.343678][ T836] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 94.451835][ T40] audit: type=1400 audit(1748536422.339:504): avc: denied { getopt } for pid=7712 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.523401][ T836] usb 7-1: Using ep0 maxpacket: 16 [ 94.526301][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.529737][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.533752][ T836] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.537773][ T836] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.540727][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.545087][ T836] usb 7-1: config 0 descriptor?? [ 94.576837][ T40] audit: type=1400 audit(1748536422.469:505): avc: denied { read } for pid=7719 comm="syz.1.520" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.585544][ T40] audit: type=1400 audit(1748536422.469:506): avc: denied { open } for pid=7719 comm="syz.1.520" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.594126][ T40] audit: type=1400 audit(1748536422.469:507): avc: denied { ioctl } for pid=7719 comm="syz.1.520" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.627937][ T40] audit: type=1400 audit(1748536422.519:508): avc: denied { getopt } for pid=7722 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.634258][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.637564][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.638491][ T7720] netlink: 'syz.0.521': attribute type 2 has an invalid length. [ 94.863394][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 95.048925][ T836] usbhid 7-1:0.0: can't add hid device: -71 [ 95.050933][ T836] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 95.054445][ T836] usb 7-1: USB disconnect, device number 7 [ 95.626413][ T40] audit: type=1400 audit(1748536423.519:509): avc: denied { map } for pid=7730 comm="syz.3.523" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.533481][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 96.536392][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 96.577293][ T7743] netlink: 'syz.3.526': attribute type 10 has an invalid length. [ 96.579785][ T7743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.526'. [ 96.582835][ T7743] dummy0: entered promiscuous mode [ 96.586722][ T7743] bridge0: port 3(dummy0) entered blocking state [ 96.589181][ T7743] bridge0: port 3(dummy0) entered disabled state [ 96.591264][ T7743] dummy0: entered allmulticast mode [ 96.594310][ T7743] bridge0: port 3(dummy0) entered blocking state [ 96.596354][ T7743] bridge0: port 3(dummy0) entered forwarding state [ 96.618665][ T7745] netlink: 'syz.2.527': attribute type 13 has an invalid length. [ 96.621593][ T7745] netlink: 'syz.2.527': attribute type 27 has an invalid length. [ 96.700648][ T5996] IPVS: starting estimator thread 0... [ 96.813600][ T7754] IPVS: using max 43 ests per chain, 103200 per kthread [ 96.859191][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 96.950620][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 97.153311][ T5308] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 97.335832][ T5308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.339223][ T5308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.342320][ T5308] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.346439][ T5308] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.349068][ T5308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.353851][ T5308] usb 7-1: config 0 descriptor?? [ 97.559169][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.561612][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.565192][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.567565][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.569944][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.572288][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.574691][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.577045][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.579429][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.581780][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.584246][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.586623][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.588981][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.591328][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.593605][ T5308] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.596200][ T5308] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 97.605224][ T5308] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 97.766322][ T7779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7779 comm=syz.1.538 [ 97.770781][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 97.841343][ T5308] usb 7-1: USB disconnect, device number 8 [ 97.990481][ T7787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.424627][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 98.604807][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 98.604818][ T40] audit: type=1400 audit(1748536426.499:521): avc: denied { getopt } for pid=7831 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.612614][ T40] audit: type=1400 audit(1748536426.499:522): avc: denied { lock } for pid=7831 comm="syz.1.551" path="socket:[18359]" dev="sockfs" ino=18359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 98.671995][ T40] audit: type=1400 audit(1748536426.559:523): avc: denied { create } for pid=7840 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.685161][ T40] audit: type=1400 audit(1748536426.579:524): avc: denied { bind } for pid=7840 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.691847][ T7841] netlink: 448 bytes leftover after parsing attributes in process `syz.1.553'. [ 98.693330][ T40] audit: type=1400 audit(1748536426.579:525): avc: denied { write } for pid=7840 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.697653][ T7841] unsupported nla_type 14345 [ 98.702586][ T40] audit: type=1400 audit(1748536426.579:526): avc: denied { nlmsg_write } for pid=7840 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.712473][ T40] audit: type=1400 audit(1748536426.599:527): avc: denied { mount } for pid=7844 comm="syz.0.555" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 98.726822][ T7845] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 98.754945][ T7848] dlm: non-version read from control device 238 [ 98.765552][ T40] audit: type=1400 audit(1748536426.659:528): avc: denied { getopt } for pid=7847 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.835476][ T40] audit: type=1400 audit(1748536426.729:529): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 98.862626][ T7857] fuse: Bad value for 'fd' [ 98.868190][ T7857] 9pnet_fd: Insufficient options for proto=fd [ 98.965192][ T40] audit: type=1400 audit(1748536426.859:530): avc: denied { ioctl } for pid=7861 comm="syz.2.559" path="socket:[21536]" dev="sockfs" ino=21536 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.991290][ T7867] binder: Binderfs stats mode cannot be changed during a remount [ 99.324670][ T7882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7882 comm=syz.2.566 [ 99.463001][ T7890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.511715][ T7894] netlink: 'syz.1.569': attribute type 21 has an invalid length. [ 99.514484][ T7894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.569'. [ 99.520581][ T5297] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 99.523792][ T5297] Bluetooth: Wrong link type (-22) [ 99.813353][ T5996] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 99.919169][ T7910] tmpfs: Bad value for 'mpol' [ 99.963326][ T5996] usb 6-1: Using ep0 maxpacket: 32 [ 99.965425][ T7910] netlink: 52 bytes leftover after parsing attributes in process `syz.0.575'. [ 99.967169][ T5996] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 99.971873][ T5996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.976914][ T5996] usb 6-1: config 0 has no interface number 0 [ 99.979307][ T5996] usb 6-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 99.982476][ T5996] usb 6-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 99.988952][ T5996] usb 6-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 99.991709][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.994352][ T5996] usb 6-1: Product: syz [ 99.995702][ T5996] usb 6-1: Manufacturer: syz [ 99.997160][ T5996] usb 6-1: SerialNumber: syz [ 99.999441][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 99.999896][ T5996] usb 6-1: config 0 descriptor?? [ 100.001887][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.004341][ T7898] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.007434][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.009161][ T5996] usb-storage 6-1:0.231: USB Mass Storage device detected [ 100.010413][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.019077][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.021969][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.025167][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.027790][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.030385][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.032848][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.036570][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.039037][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.041647][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.044691][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.047289][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.049876][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.052338][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.056163][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.058787][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.061336][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.064093][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.066741][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.069320][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.072471][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.075746][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.078282][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.080658][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.083086][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.086289][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.089461][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.092818][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.098739][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.101958][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.103883][ T7920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.105480][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.111846][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.117385][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.120230][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.122686][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.125513][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.128588][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.131608][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.136022][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.138989][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.141935][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.145019][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.147976][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.150892][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.154126][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.157059][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.159260][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.161479][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.163842][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.166116][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.168477][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.170800][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.173123][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.175543][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.177985][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.180296][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.182625][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.185618][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.187902][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.190122][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.192310][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.194775][ T7914] binder: 7913:7914 ioctl c0306201 2000000003c0 returned -14 [ 100.235113][ T6380] usb 6-1: USB disconnect, device number 12 [ 100.485126][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 100.603427][ T7933] tipc: Enabling of bearer rejected, media not registered [ 100.648846][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.652684][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 100.655468][ T24] usb 5-1: can't read configurations, error -71 [ 100.722245][ T7936] netlink: 'syz.2.582': attribute type 3 has an invalid length. [ 101.110562][ T7954] netlink: 'syz.2.586': attribute type 10 has an invalid length. [ 101.117695][ T7954] bond0: (slave wlan1): Opening slave failed [ 101.121309][ T7955] netlink: 'syz.2.586': attribute type 10 has an invalid length. [ 101.124623][ T7955] bond0: (slave wlan1): Opening slave failed [ 101.136121][ T5308] IPVS: starting estimator thread 0... [ 101.233418][ T7958] IPVS: using max 43 ests per chain, 103200 per kthread [ 101.317931][ T7978] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.386463][ T7982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58480 sclass=netlink_route_socket pid=7982 comm=syz.1.597 [ 101.441348][ T7981] vlan0: entered promiscuous mode [ 101.443003][ T7981] veth1_virt_wifi: entered promiscuous mode [ 101.451751][ T7989] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 101.456235][ T7989] SELinux: failed to load policy [ 101.458600][ T7990] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 101.462115][ T7990] SELinux: failed to load policy [ 101.543506][ T1023] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 101.562796][ T8002] 9pnet: Could not find request transport: v [ 101.566878][ T8008] netdevsim netdevsim1: Direct firmware load for 0PqD"2NktTWj%N failed with error -2 [ 101.572350][ T8008] netdevsim netdevsim1: Falling back to sysfs fallback for: 0PqD"2NktTWj%N [ 101.611715][ T8010] 6t: renamed from lo (while UP) [ 101.618131][ T8010] fuse: Bad value for 'group_id' [ 101.620258][ T8010] fuse: Bad value for 'group_id' [ 101.695405][ T1023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.698919][ T1023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.701977][ T1023] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 101.707537][ T1023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.712123][ T1023] usb 7-1: config 0 descriptor?? [ 101.920968][ T1023] usbhid 7-1:0.0: can't add hid device: -71 [ 101.923669][ T1023] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 101.927655][ T1023] usb 7-1: USB disconnect, device number 9 [ 102.432595][ T8020] __nla_validate_parse: 9 callbacks suppressed [ 102.432612][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 102.440688][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 102.627267][ T8035] Driver unsupported XDP return value 0 on prog (id 122) dev N/A, expect packet loss! [ 102.716722][ T8044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.017598][ T8080] unknown channel width for channel at 909000KHz? [ 103.037461][ T8082] netlink: 'syz.2.628': attribute type 11 has an invalid length. [ 103.039945][ T8082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.628'. [ 103.139825][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.631'. [ 103.169951][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 103.172804][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'. [ 103.190434][ T5297] Bluetooth: hci0: connection err: -111 [ 103.216139][ T8105] binder: 8104:8105 ioctl c0306201 2000000003c0 returned -14 [ 103.219077][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 103.294407][ T5297] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 103.323293][ T1023] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 103.453325][ T1023] usb 5-1: device descriptor read/64, error -71 [ 103.693426][ T1023] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 103.823368][ T1023] usb 5-1: device descriptor read/64, error -71 [ 103.934126][ T1023] usb usb5-port1: attempt power cycle [ 104.079972][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 104.079986][ T40] audit: type=1400 audit(1748536432.969:552): avc: denied { write } for pid=8110 comm="syz.1.637" name="/" dev="9p" ino=35913857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.157897][ T40] audit: type=1400 audit(1748536433.049:553): avc: denied { mount } for pid=8116 comm="syz.2.639" name="/" dev="configfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 104.167192][ T40] audit: type=1400 audit(1748536433.049:554): avc: denied { search } for pid=8116 comm="syz.2.639" name="/" dev="configfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.174509][ T40] audit: type=1400 audit(1748536433.049:555): avc: denied { search } for pid=8116 comm="syz.2.639" name="/" dev="configfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.183296][ T40] audit: type=1400 audit(1748536433.049:556): avc: denied { setattr } for pid=8116 comm="syz.2.639" name="/" dev="configfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.194221][ T40] audit: type=1400 audit(1748536433.089:557): avc: denied { getopt } for pid=8118 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.255575][ T8121] netlink: 68 bytes leftover after parsing attributes in process `syz.2.641'. [ 104.273362][ T1023] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 104.293928][ T1023] usb 5-1: device descriptor read/8, error -71 [ 104.298360][ T40] audit: type=1400 audit(1748536433.189:558): avc: denied { map } for pid=8126 comm="syz.2.642" path="socket:[23120]" dev="sockfs" ino=23120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.306062][ T40] audit: type=1400 audit(1748536433.189:559): avc: denied { read accept } for pid=8126 comm="syz.2.642" path="socket:[23120]" dev="sockfs" ino=23120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.537237][ T1023] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 104.543907][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 104.548796][ T8131] veth1_macvtap: left promiscuous mode [ 104.554063][ T1023] usb 5-1: device descriptor read/8, error -71 [ 104.673690][ T1023] usb usb5-port1: unable to enumerate USB device [ 104.761554][ T8138] syzkaller0: entered promiscuous mode [ 104.763808][ T8138] syzkaller0: entered allmulticast mode [ 104.769978][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 104.775710][ T8138] netlink: 'syz.2.646': attribute type 13 has an invalid length. [ 104.787914][ T8138] gretap0: refused to change device tx_queue_len [ 104.790013][ T8138] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 104.796762][ T8138] syzkaller0: left promiscuous mode [ 104.798465][ T8138] syzkaller0: left allmulticast mode [ 104.802639][ T40] audit: type=1400 audit(1748536433.689:560): avc: denied { ioctl } for pid=8137 comm="syz.2.646" path="socket:[21251]" dev="sockfs" ino=21251 ioctlcmd=0x8942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.206156][ T8156] netlink: 'syz.1.652': attribute type 39 has an invalid length. [ 105.841923][ T12] bond0: (slave bond_slave_0): interface is now down [ 105.844940][ T12] bond0: (slave bond_slave_1): interface is now down [ 105.847827][ T12] bond0: (slave batadv0): interface is now down [ 105.852616][ T12] bond0: now running without any active interface! [ 105.875506][ T8160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.000311][ T40] audit: type=1400 audit(1748536434.889:561): avc: denied { read } for pid=8168 comm="syz.1.657" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.120106][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 106.201738][ T8198] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 106.262847][ T8206] xt_hashlimit: size too large, truncated to 1048576 [ 106.669692][ T8279] team0: Device gtp0 is of different type [ 106.684058][ T6380] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 106.843282][ T6380] usb 5-1: Using ep0 maxpacket: 8 [ 106.846238][ T6380] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.849745][ T6380] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.852852][ T6380] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.857070][ T6380] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.862374][ T6380] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.866566][ T6380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.889279][ T8286] netlink: 'syz.2.677': attribute type 10 has an invalid length. [ 106.891935][ T8286] team0: Device geneve0 is up. Set it down before adding it as a team port [ 106.895051][ T8286] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 107.072861][ T6380] usb 5-1: GET_CAPABILITIES returned 0 [ 107.074790][ T6380] usbtmc 5-1:16.0: can't read capabilities [ 107.247874][ T8300] sp0: Synchronizing with TNC [ 107.274021][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.276954][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.282098][ T24] usb 5-1: USB disconnect, device number 20 [ 107.296954][ T8302] usb usb9: usbfs: process 8302 (syz.1.681) did not claim interface 0 before use [ 107.448230][ T8314] netlink: 'syz.1.684': attribute type 1 has an invalid length. [ 107.643314][ T1023] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 107.793346][ T1023] usb 7-1: Using ep0 maxpacket: 8 [ 107.797580][ T1023] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 107.800847][ T1023] usb 7-1: config 0 has no interface number 0 [ 107.803683][ T1023] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.808004][ T1023] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 107.812717][ T1023] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.817568][ T1023] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.822602][ T1023] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 107.826594][ T1023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.831851][ T1023] usb 7-1: config 0 descriptor?? [ 107.838803][ T1023] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 107.913370][ T8321] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 107.946833][ T8324] syz.3.687: attempt to access beyond end of device [ 107.946833][ T8324] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 107.950838][ T8324] efs: cannot read volume header [ 108.069836][ T8330] __nla_validate_parse: 4 callbacks suppressed [ 108.069847][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 108.089422][ T8330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=8330 comm=syz.0.690 [ 108.114612][ T8340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.683'. [ 108.198819][ T8349] netlink: 'syz.0.693': attribute type 6 has an invalid length. [ 108.823109][ T8328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.826321][ T8328] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.830113][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 108.845163][ T8328] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.852714][ T8328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.855765][ T8328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.860104][ T8328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.863483][ T8328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.865657][ T8328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.870955][ T8328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.875755][ T8328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.877813][ T8328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.881120][ T8328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.916283][ T8361] binder: BINDER_SET_CONTEXT_MGR already set [ 108.916919][ T8363] binder: 8360:8363 unknown command 0 [ 108.918386][ T8361] binder: 8360:8361 ioctl 4018620d 2000000000c0 returned -16 [ 108.920065][ T8363] binder: 8360:8363 ioctl c0306201 200000000080 returned -22 [ 108.922657][ T8362] binder: 8360:8362 unknown command 0 [ 108.927740][ T8362] binder: 8360:8362 ioctl c0306201 200000000080 returned -22 [ 109.049208][ T8381] fuse: Unknown parameter '۩\&jr [ 109.049208][ T8381] gv00000000000000000000' [ 109.406293][ T8396] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 109.407050][ T8397] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 109.416758][ T8396] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.420063][ T8396] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.422789][ T8396] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.425806][ T8396] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.499600][ T8404] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 109.501667][ T8404] PKCS7: Only support pkcs7_signedData type [ 109.505636][ T8404] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.515361][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 109.515372][ T40] audit: type=1400 audit(1748536438.409:576): avc: denied { bind } for pid=8403 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.523925][ T40] audit: type=1400 audit(1748536438.409:577): avc: denied { getopt } for pid=8403 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.623328][ T40] audit: type=1400 audit(1748536438.509:578): avc: denied { ioctl } for pid=8406 comm="syz.3.714" path="socket:[22432]" dev="sockfs" ino=22432 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 109.668200][ T8412] input: syz0 as /devices/virtual/input/input14 [ 109.858856][ T40] audit: type=1400 audit(1748536438.749:579): avc: denied { name_bind } for pid=8411 comm="syz.3.715" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.976007][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 109.981788][ T40] audit: type=1400 audit(1748536438.869:580): avc: denied { ioctl } for pid=8422 comm="syz.0.719" path="socket:[23549]" dev="sockfs" ino=23549 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.991072][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 109.995882][ T8424] binder: 8422:8424 ioctl 8933 200000000c80 returned -22 [ 110.002840][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'. [ 110.008064][ T8424] block device autoloading is deprecated and will be removed. [ 110.084034][ T8433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.722'. [ 110.093614][ T5297] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.124735][ T8437] netlink: 'syz.3.724': attribute type 10 has an invalid length. [ 110.130190][ T40] audit: type=1400 audit(1748536439.019:581): avc: denied { append } for pid=8434 comm="syz.1.723" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.138881][ T40] audit: type=1400 audit(1748536439.019:582): avc: denied { ioctl } for pid=8434 comm="syz.1.723" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.173525][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 110.182549][ T8441] overlay: ./file1/file0 is not a directory [ 110.247536][ T40] audit: type=1400 audit(1748536439.139:583): avc: denied { write } for pid=8454 comm="syz.1.730" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.255334][ T40] audit: type=1400 audit(1748536439.139:584): avc: denied { ioctl } for pid=8454 comm="syz.1.730" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.291212][ T40] audit: type=1400 audit(1748536439.179:585): avc: denied { bind } for pid=8460 comm="syz.1.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 110.401677][ T8465] overlay: ./file1 is not a directory [ 110.405835][ T24] usb 7-1: USB disconnect, device number 10 [ 110.410555][ T24] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 110.697918][ T5297] Bluetooth: hci3: unexpected event for opcode 0x000d [ 110.880249][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 110.884272][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 110.893436][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.893475][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.941390][ T8509] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 110.945544][ T8509] bond0: (slave wlan1): Opening slave failed [ 110.949369][ T8508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.162499][ T8520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'. [ 111.176001][ T8520] gretap0: entered promiscuous mode [ 111.183383][ T8520] batadv_slave_1: entered promiscuous mode [ 111.233097][ T8525] Bluetooth: MGMT ver 1.23 [ 111.310532][ T8535] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 111.360673][ T8541] netlink: 'syz.0.756': attribute type 15 has an invalid length. [ 111.425232][ T63] Bluetooth: hci1: unexpected event for opcode 0x080d [ 111.433415][ T8557] futex_wake_op: syz.3.761 tries to shift op by 32; fix this program [ 111.585206][ T8578] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 111.587292][ T8578] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.590465][ T8578] vhci_hcd vhci_hcd.0: Device attached [ 111.594461][ T8578] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 111.596518][ T8578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.599617][ T8578] vhci_hcd vhci_hcd.0: Device attached [ 111.602500][ T8578] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 111.604580][ T8578] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.607831][ T8578] vhci_hcd vhci_hcd.0: Device attached [ 111.610060][ T8586] vhci_hcd: connection closed [ 111.610185][ T8584] vhci_hcd: connection closed [ 111.611166][ T8582] vhci_hcd: connection closed [ 111.613913][ T8214] vhci_hcd: stop threads [ 111.616757][ T8214] vhci_hcd: release socket [ 111.618941][ T8214] vhci_hcd: disconnect device [ 111.620702][ T8214] vhci_hcd: stop threads [ 111.622434][ T8214] vhci_hcd: release socket [ 111.624327][ T8214] vhci_hcd: disconnect device [ 111.624833][ T63] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 111.627845][ T8214] vhci_hcd: stop threads [ 111.628954][ T63] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 111.630057][ T8214] vhci_hcd: release socket [ 111.630069][ T8214] vhci_hcd: disconnect device [ 112.743546][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.866603][ T8642] 9pnet_fd: p9_fd_create_tcp (8642): problem connecting socket to 127.0.0.1 [ 112.870796][ T8642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64023 sclass=netlink_route_socket pid=8642 comm=syz.0.786 [ 112.876982][ T8642] 9pnet_fd: p9_fd_create_tcp (8642): problem connecting socket to 127.0.0.1 [ 112.908010][ T8640] netlink: 'syz.1.785': attribute type 21 has an invalid length. [ 112.983794][ T5297] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.041226][ T8658] program syz.0.789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.041374][ T8659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8659 comm=syz.0.789 [ 113.041855][ T8660] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 113.042054][ T8660] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 113.042165][ T8660] netlink: 'syz.0.789': attribute type 2 has an invalid length. [ 113.044203][ T8660] A link change request failed with some changes committed already. Interface 6t may have been left with an inconsistent configuration, please check. [ 113.221632][ T8667] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 113.484380][ T8673] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 113.520872][ T8673] __nla_validate_parse: 9 callbacks suppressed [ 113.520888][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 113.885508][ T8691] netlink: 32 bytes leftover after parsing attributes in process `syz.1.799'. [ 113.951420][ T8696] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 114.090508][ T5297] Bluetooth: hci0: unexpected event for opcode 0x080d [ 114.103311][ T5308] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 114.105689][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 114.218029][ T8710] openvswitch: netlink: IP tunnel dst address not specified [ 114.256886][ T5308] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.259736][ T5308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.262289][ T5308] usb 7-1: Product: syz [ 114.265022][ T5308] usb 7-1: Manufacturer: syz [ 114.266501][ T5308] usb 7-1: SerialNumber: syz [ 114.271583][ T5308] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.285447][ T5977] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.318730][ T8719] netlink: 'syz.0.804': attribute type 14 has an invalid length. [ 114.328440][ T5297] Bluetooth: hci0: Malformed LE Event: 0x1d [ 114.759328][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 114.759344][ T40] audit: type=1400 audit(1748536443.649:603): avc: denied { setcheckreqprot } for pid=8769 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 114.813348][ T8774] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004 [ 114.816865][ T40] audit: type=1400 audit(1748536443.709:604): avc: denied { connect } for pid=8769 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.821310][ T5297] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.938504][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 115.038878][ T8790] syz.1.822: attempt to access beyond end of device [ 115.038878][ T8790] loop1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 115.043941][ T8790] syz.1.822: attempt to access beyond end of device [ 115.043941][ T8790] loop1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 115.048132][ T8790] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 115.051881][ T8790] syz.1.822: attempt to access beyond end of device [ 115.051881][ T8790] loop1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 115.056014][ T5297] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.058786][ T8790] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 115.063286][ T8790] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 115.065858][ T8790] UDF-fs: Scanning with blocksize 512 failed [ 115.070182][ T8790] syz.1.822: attempt to access beyond end of device [ 115.070182][ T8790] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 115.075017][ T8790] syz.1.822: attempt to access beyond end of device [ 115.075017][ T8790] loop1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 115.079008][ T8790] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 115.082057][ T8790] syz.1.822: attempt to access beyond end of device [ 115.082057][ T8790] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 115.086188][ T8790] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 115.089181][ T8790] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 115.091572][ T8790] UDF-fs: Scanning with blocksize 1024 failed [ 115.094712][ T8790] syz.1.822: attempt to access beyond end of device [ 115.094712][ T8790] loop1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 115.098684][ T8790] syz.1.822: attempt to access beyond end of device [ 115.098684][ T8790] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 115.102716][ T8790] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 115.105884][ T8790] syz.1.822: attempt to access beyond end of device [ 115.105884][ T8790] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 115.109987][ T8790] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 115.112917][ T8790] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 115.115342][ T8790] UDF-fs: Scanning with blocksize 2048 failed [ 115.117542][ T8790] syz.1.822: attempt to access beyond end of device [ 115.117542][ T8790] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 115.121885][ T8790] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 115.124986][ T8790] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 115.128033][ T8790] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 115.130383][ T8790] UDF-fs: Scanning with blocksize 4096 failed [ 115.132285][ T8790] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 115.195355][ T5308] usb 7-1: USB disconnect, device number 11 [ 115.383462][ T5977] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 115.386247][ T5977] ath9k_htc: Failed to initialize the device [ 115.388772][ T5308] usb 7-1: ath9k_htc: USB layer deinitialized [ 115.484326][ T8810] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 115.492361][ T8812] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 115.621857][ T40] audit: type=1400 audit(1748536444.509:605): avc: denied { map } for pid=8819 comm="syz.3.830" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 115.631849][ T40] audit: type=1400 audit(1748536444.509:606): avc: denied { watch_sb watch_reads } for pid=8819 comm="syz.3.830" path="/178/file0" dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.735626][ T8826] ALSA: mixer_oss: invalid OSS volume '' [ 116.048883][ T8840] futex_wake_op: syz.2.835 tries to shift op by -1; fix this program [ 116.059233][ T40] audit: type=1400 audit(1748536444.949:607): avc: denied { ioctl } for pid=8844 comm="syz.3.837" path="socket:[24240]" dev="sockfs" ino=24240 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 116.067266][ T8847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.109593][ T40] audit: type=1400 audit(1748536444.999:608): avc: denied { read } for pid=8839 comm="syz.2.835" path="socket:[26867]" dev="sockfs" ino=26867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.119102][ T40] audit: type=1326 audit(1748536444.999:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.1.838" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f757018e969 code=0x0 [ 116.163502][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 116.167148][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 116.336361][ T40] audit: type=1400 audit(1748536445.229:610): avc: denied { map } for pid=8859 comm="syz.3.840" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.464806][ T8872] ata1.00: invalid multi_count 1 ignored [ 116.552014][ T8876] 8021q: VLANs not supported on ip6tnl0 [ 116.594902][ T40] audit: type=1400 audit(1748536445.489:611): avc: denied { ioctl } for pid=8879 comm="syz.3.846" path="socket:[24318]" dev="sockfs" ino=24318 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.639685][ T8882] loop2: detected capacity change from 0 to 7 [ 116.648803][ T8882] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 116.650639][ T8882] loop2: partition table partially beyond EOD, truncated [ 116.655449][ T8882] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 116.663446][ T8882] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 116.666535][ T8882] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 116.687244][ T8878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.845'. [ 116.696775][ T6596] udevd[6596]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 116.768463][ T8884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.782414][ T8840] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 116.893395][ T5297] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.080341][ T40] audit: type=1400 audit(1748536445.969:612): avc: denied { listen } for pid=8908 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 117.318710][ T8913] binder: 8912:8913 ioctl c00c6211 0 returned -14 [ 117.730480][ T8934] Invalid logical block size (2) [ 118.142978][ T8940] Process accounting resumed [ 118.493430][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 118.881465][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 118.887058][ T8949] netlink: 'syz.2.865': attribute type 1 has an invalid length. [ 118.971006][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 119.006618][ T8955] veth3: entered promiscuous mode [ 119.153696][ T8958] xt_connbytes: Forcing CT accounting to be enabled [ 119.155818][ T8958] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 119.160017][ T8958] overlay: Bad value for 'uuid' [ 119.162424][ T8958] overlayfs: overlapping lowerdir path [ 119.402517][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.867'. [ 119.405384][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 119.459607][ T8963] netlink: 56 bytes leftover after parsing attributes in process `syz.2.869'. [ 119.467176][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.890530][ T8980] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 119.893155][ T8980] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 119.896825][ T8980] vhci_hcd vhci_hcd.0: Device attached [ 119.901395][ T8980] vhci_hcd vhci_hcd.0: port 0 already used [ 119.906674][ T8980] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 119.909638][ T8980] netlink: 210 bytes leftover after parsing attributes in process `syz.2.874'. [ 119.916626][ T8980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.874'. [ 119.921479][ T8983] vhci_hcd: connection closed [ 119.921785][ T13] vhci_hcd: stop threads [ 119.925443][ T13] vhci_hcd: release socket [ 119.927729][ T13] vhci_hcd: disconnect device [ 119.975878][ T8991] netlink: 'syz.1.877': attribute type 11 has an invalid length. [ 119.979024][ T8991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.877'. [ 120.520474][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 120.520486][ T40] audit: type=1400 audit(1748536449.409:615): avc: denied { shutdown } for pid=8994 comm="syz.2.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.554549][ T40] audit: type=1400 audit(1748536449.449:616): avc: denied { listen } for pid=8998 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.701251][ T9011] usb usb8: usbfs: process 9011 (syz.0.881) did not claim interface 0 before use [ 120.821334][ T40] audit: type=1400 audit(1748536449.709:617): avc: denied { mounton } for pid=9017 comm="syz.0.885" path="/198/file0" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 120.821485][ T9018] overlay: Unknown parameter 'smackfsfloor' [ 120.927658][ T9021] netlink: 7 bytes leftover after parsing attributes in process `syz.3.887'. [ 120.935102][ T9021] gfs2: gfs2 mount does not exist [ 120.968725][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 121.104894][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 121.149279][ T40] audit: type=1400 audit(1748536450.039:618): avc: denied { remove_name } for pid=9038 comm="syz.3.892" name="file0" dev="9p" ino=35913861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.157195][ T40] audit: type=1400 audit(1748536450.039:619): avc: denied { unlink } for pid=9038 comm="syz.3.892" name="file0" dev="9p" ino=35913861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.164675][ T40] audit: type=1400 audit(1748536450.039:620): avc: denied { associate } for pid=9038 comm="syz.3.892" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 121.243403][ T9] usb 5-1: device descriptor read/64, error -71 [ 121.306103][ T9041] binder: 9040:9041 ioctl c028aa03 2000000002c0 returned -22 [ 121.313312][ T5977] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 121.360692][ T9047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9047 comm=syz.2.896 [ 121.369689][ T9047] tmpfs: Bad value for 'mpol' [ 121.372237][ T9047] netlink: 'syz.2.896': attribute type 1 has an invalid length. [ 121.439907][ T9062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9062 comm=syz.2.899 [ 121.444697][ T9062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9062 comm=syz.2.899 [ 121.449606][ T9062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9062 comm=syz.2.899 [ 121.456497][ T9062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9062 comm=syz.2.899 [ 121.461517][ T9062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9062 comm=syz.2.899 [ 121.466701][ T9062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9062 comm=syz.2.899 [ 121.471740][ T9062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9062 comm=syz.2.899 [ 121.474664][ T5977] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 121.477942][ T9062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9062 comm=syz.2.899 [ 121.480093][ T5977] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 121.480114][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.480130][ T5977] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 121.480161][ T5977] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 121.480193][ T5977] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 121.482749][ T5977] usb 6-1: string descriptor 0 read error: -22 [ 121.483264][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 121.485068][ T9062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9062 comm=syz.2.899 [ 121.488929][ T5977] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 121.516805][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.523012][ T5977] usb 6-1: config 0 descriptor?? [ 121.527227][ T5977] hub 6-1:0.0: bad descriptor, ignoring hub [ 121.529811][ T5977] hub 6-1:0.0: probe with driver hub failed with error -5 [ 121.613459][ T9] usb 5-1: device descriptor read/64, error -71 [ 121.724026][ T9] usb usb5-port1: attempt power cycle [ 122.063335][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 122.084055][ T9] usb 5-1: device descriptor read/8, error -71 [ 122.281478][ T9033] delete_channel: no stack [ 122.327335][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 122.346534][ T9] usb 5-1: device descriptor read/8, error -71 [ 122.356763][ T40] audit: type=1400 audit(1748536451.249:621): avc: denied { ioctl } for pid=9068 comm="syz.3.902" path="socket:[28687]" dev="sockfs" ino=28687 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.369685][ T40] audit: type=1400 audit(1748536451.249:622): avc: denied { setopt } for pid=9068 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.403734][ T5977] usb 6-1: USB disconnect, device number 13 [ 122.453679][ T9] usb usb5-port1: unable to enumerate USB device [ 123.194578][ T9102] netlink: 'syz.1.911': attribute type 13 has an invalid length. [ 123.427481][ T40] audit: type=1326 audit(1748536452.319:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.2.916" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb0cd8e969 code=0x0 [ 123.882895][ T9119] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 123.890856][ T9119] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 123.944587][ T9128] __nla_validate_parse: 9 callbacks suppressed [ 123.944597][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 123.949949][ T9128] syz_tun: entered allmulticast mode [ 124.076372][ T40] audit: type=1400 audit(1748536452.969:624): avc: denied { write } for pid=9130 comm="syz.0.920" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 124.310490][ T9163] netlink: 'syz.2.928': attribute type 3 has an invalid length. [ 124.314912][ T9163] netlink: 132 bytes leftover after parsing attributes in process `syz.2.928'. [ 124.356193][ T9163] loop4: detected capacity change from 0 to 524255232 [ 124.408690][ T9172] kvm: MWAIT instruction emulated as NOP! [ 124.443285][ T1023] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 124.595077][ T1023] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.598857][ T1023] usb 5-1: config 0 has no interfaces? [ 124.600929][ T1023] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 124.605130][ T1023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.610787][ T1023] usb 5-1: config 0 descriptor?? [ 124.764175][ T9187] SELinux: failed to load policy [ 124.768410][ T9187] xfs: Unknown parameter 'norecoveryard#' [ 124.811660][ T9190] netlink: 'syz.2.937': attribute type 10 has an invalid length. [ 124.815602][ T9190] bridge0: port 3(team0) entered disabled state [ 124.817927][ T9190] team0: left allmulticast mode [ 124.818082][ T9] usb 5-1: USB disconnect, device number 25 [ 124.819535][ T9190] team_slave_0: left allmulticast mode [ 124.823878][ T9190] team_slave_1: left allmulticast mode [ 124.825601][ T9190] team0: left promiscuous mode [ 124.827079][ T9190] team_slave_0: left promiscuous mode [ 124.828872][ T9190] team_slave_1: left promiscuous mode [ 124.830802][ T9190] bridge0: port 3(team0) entered disabled state [ 124.836165][ T9190] batman_adv: batadv0: Adding interface: team0 [ 124.838167][ T9190] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.846474][ T9190] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 124.852940][ T9190] netlink: 'syz.2.937': attribute type 10 has an invalid length. [ 124.855780][ T9190] netlink: 2 bytes leftover after parsing attributes in process `syz.2.937'. [ 124.858658][ T9190] team0: entered promiscuous mode [ 124.860252][ T9190] team_slave_0: entered promiscuous mode [ 124.862177][ T9190] team_slave_1: entered promiscuous mode [ 124.864972][ T9190] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.867173][ T9190] batman_adv: batadv0: Interface activated: team0 [ 124.869331][ T9190] batman_adv: batadv0: Interface deactivated: team0 [ 124.871426][ T9190] batman_adv: batadv0: Removing interface: team0 [ 124.874260][ T9190] bridge0: port 3(team0) entered blocking state [ 124.876272][ T9190] bridge0: port 3(team0) entered disabled state [ 124.878382][ T9190] team0: entered allmulticast mode [ 124.881026][ T9190] team_slave_0: entered allmulticast mode [ 124.882941][ T9190] team_slave_1: entered allmulticast mode [ 124.886303][ T9190] bridge0: port 3(team0) entered blocking state [ 124.888331][ T9190] bridge0: port 3(team0) entered forwarding state [ 125.352346][ T9198] ucma_write: process 615 (syz.0.940) changed security contexts after opening file descriptor, this is not allowed. [ 125.419269][ T9206] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 125.429474][ T9206] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 125.433857][ T9206] netlink: 604 bytes leftover after parsing attributes in process `syz.0.944'. [ 125.660914][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 125.660926][ T40] audit: type=1400 audit(1748536454.549:630): avc: denied { lock } for pid=9220 comm="syz.0.947" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.664226][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 125.719357][ T9227] xt_socket: unknown flags 0x50 [ 125.780192][ T9231] netlink: 72 bytes leftover after parsing attributes in process `syz.2.950'. [ 125.836840][ T9234] netlink: 72 bytes leftover after parsing attributes in process `syz.2.950'. [ 126.013172][ T9247] kAFS: unable to lookup cell '/,cL' [ 126.286951][ T9251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.956'. [ 126.292463][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 126.481779][ T9263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.537542][ T9266] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 126.557743][ T9265] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 126.810277][ T9280] ubi31: attaching mtd0 [ 126.813741][ T9280] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 126.816714][ T9291] ubi31: attaching mtd0 [ 126.818166][ T9291] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 126.847729][ T9290] selinux_netlink_send: 56 callbacks suppressed [ 126.847742][ T9290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9290 comm=syz.0.966 [ 126.852978][ T40] audit: type=1400 audit(1748536455.739:631): avc: denied { read } for pid=9293 comm="syz.1.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.856271][ T9290] x_tables: ip6_tables: TCPOPTSTRIP.0 target: invalid size 32 (kernel) != (user) 22 [ 126.872004][ T40] audit: type=1400 audit(1748536455.759:632): avc: denied { read } for pid=9293 comm="syz.1.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.903177][ T1023] hid (null): unknown global tag 0xe [ 126.905408][ T40] audit: type=1400 audit(1748536455.799:633): avc: denied { ioctl } for pid=9298 comm="syz.1.968" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x54d5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 126.906811][ T1023] hid (null): invalid report_count 23031 [ 126.918178][ T1023] hid (null): bogus close delimiter [ 126.920360][ T1023] hid (null): report_id 3725342353 is invalid [ 126.922927][ T1023] hid (null): global environment stack underflow [ 126.926115][ T1023] hid (null): bogus close delimiter [ 126.931512][ T1023] hid-generic 0000:FFFFFFF7:0008.0006: unknown global tag 0xe [ 126.935249][ T1023] hid-generic 0000:FFFFFFF7:0008.0006: item 0 4 1 14 parsing failed [ 126.940194][ T1023] hid-generic 0000:FFFFFFF7:0008.0006: probe with driver hid-generic failed with error -22 [ 126.957139][ T40] audit: type=1400 audit(1748536455.849:634): avc: denied { ioctl } for pid=9298 comm="syz.1.968" path="socket:[28100]" dev="sockfs" ino=28100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.022586][ T9311] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 127.030380][ T9312] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 127.068427][ T9320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9320 comm=syz.3.973 [ 127.216415][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'. [ 127.258811][ T9336] wg2: entered promiscuous mode [ 127.261822][ T9336] wg2: entered allmulticast mode [ 127.377412][ T9338] block nbd3: Unsupported socket: shutdown callout must be supported. [ 127.410570][ T40] audit: type=1400 audit(1748536456.299:635): avc: denied { read } for pid=9339 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 127.712854][ T9348] netlink: 'syz.2.983': attribute type 1 has an invalid length. [ 127.734433][ T9348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 127.774479][ T9348] veth3: entered promiscuous mode [ 127.784862][ T9348] bond5: (slave veth3): Enslaving as an active interface with a down link [ 127.822245][ T9361] xt_socket: unknown flags 0xc [ 128.113348][ T5977] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 128.263319][ T5977] usb 6-1: Using ep0 maxpacket: 8 [ 128.268328][ T5977] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 128.270812][ T5977] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.274437][ T5977] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.278044][ T5977] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.281796][ T5977] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.286164][ T5977] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 128.288616][ T5977] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.292157][ T5977] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.295885][ T5977] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.299414][ T5977] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.304038][ T5977] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 128.306837][ T5977] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.310316][ T5977] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.314067][ T5977] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.317680][ T5977] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.323317][ T5977] usb 6-1: string descriptor 0 read error: -22 [ 128.326007][ T5977] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 128.328973][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.339060][ T5977] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 128.553057][ T836] usb 6-1: USB disconnect, device number 14 [ 128.590049][ T9376] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 128.669637][ T9380] sp0: Synchronizing with TNC [ 128.815949][ T40] audit: type=1400 audit(1748536457.709:636): avc: denied { read } for pid=9381 comm="syz.2.994" name="/" dev="configfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.824872][ T40] audit: type=1400 audit(1748536457.709:637): avc: denied { open } for pid=9381 comm="syz.2.994" path="/272/file0" dev="configfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.867419][ T9388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.049339][ T40] audit: type=1400 audit(1748536457.939:638): avc: denied { write } for pid=9397 comm="syz.2.1000" path="socket:[27594]" dev="sockfs" ino=27594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 129.058716][ T40] audit: type=1400 audit(1748536457.949:639): avc: denied { block_suspend } for pid=9397 comm="syz.2.1000" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.244369][ T9419] __nla_validate_parse: 3 callbacks suppressed [ 129.244380][ T9419] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1007'. [ 129.252242][ T9419] netlink: 'syz.3.1007': attribute type 39 has an invalid length. [ 129.264463][ T9419] syz_tun (unregistering): left allmulticast mode [ 129.270712][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 129.277560][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 129.280446][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 129.283576][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 129.286538][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 129.289524][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 129.292934][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 129.299052][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 129.303014][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 129.366381][ T9429] Sensor A: ================= START STATUS ================= [ 129.368884][ T9429] Sensor A: Test Pattern: 100% White [ 129.370920][ T9429] Sensor A: Show Information: All [ 129.374458][ T9429] Sensor A: Vertical Flip: false [ 129.376064][ T9429] Sensor A: Horizontal Flip: false [ 129.377717][ T9429] Sensor A: Brightness: 255 [ 129.379155][ T9429] Sensor A: Contrast: 128 [ 129.380527][ T9429] Sensor A: Hue: 127 [ 129.381809][ T9429] Sensor A: Saturation: 128 [ 129.383351][ T9429] Sensor A: ================== END STATUS ================== [ 129.688907][ T9453] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9453 comm=syz.3.1016 [ 129.797250][ T9476] binder: Unknown parameter 'dont_measure' [ 129.880685][ T9487] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 129.899824][ T9487] bond2: entered promiscuous mode [ 129.902428][ T9487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.906045][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 129.937596][ T9487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.939920][ T9487] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 129.943099][ T9487] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 129.947717][ T9487] bond2: (slave ip6gre1): making interface the new active one [ 129.950164][ T9487] ip6gre1: entered promiscuous mode [ 129.952522][ T9487] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 130.020003][ T9492] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 130.053511][ T34] usb 7-1: device descriptor read/64, error -71 [ 130.272303][ T9508] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 130.313393][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 130.403361][ T836] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 130.453258][ T34] usb 7-1: device descriptor read/64, error -71 [ 130.563351][ T836] usb 5-1: Using ep0 maxpacket: 16 [ 130.569713][ T836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.573603][ T34] usb usb7-port1: attempt power cycle [ 130.575947][ T836] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 130.581342][ T836] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.586279][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.595635][ T836] usb 5-1: config 0 descriptor?? [ 130.599652][ T836] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 130.923337][ T34] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 130.943676][ T34] usb 7-1: device descriptor read/8, error -71 [ 130.989375][ T836] usb 5-1: USB disconnect, device number 26 [ 131.194249][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 131.213800][ T34] usb 7-1: device descriptor read/8, error -71 [ 131.322149][ T9536] netlink: 'syz.1.1036': attribute type 13 has an invalid length. [ 131.334713][ T34] usb usb7-port1: unable to enumerate USB device [ 131.350031][ T9536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.358447][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 131.358457][ T40] audit: type=1400 audit(1748536460.249:645): avc: denied { setattr } for pid=9539 comm="syz.3.1040" name="radio5" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 131.478736][ T9543] cgroup: subsys name conflicts with all [ 131.660147][ T40] audit: type=1400 audit(1748536460.549:646): avc: denied { getopt } for pid=9557 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.779895][ T40] audit: type=1400 audit(1748536460.669:647): avc: denied { create } for pid=9573 comm="syz.0.1053" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.805783][ T40] audit: type=1400 audit(1748536460.699:648): avc: denied { unlink } for pid=5940 comm="syz-executor" name="file0" dev="tmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.838823][ T9584] Bluetooth: (null): Invalid header checksum [ 132.053937][ T5297] Bluetooth: hci0: Malformed LE Event: 0x0d [ 132.061915][ T9599] affs: No valid root block on device nullb0 [ 132.154002][ T40] audit: type=1400 audit(1748536461.049:649): avc: denied { link } for pid=9605 comm="syz.1.1062" name="file0" dev="9p" ino=35913861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.213383][ T9613] binder: 9610:9613 ioctl c0306201 2000000003c0 returned -14 [ 132.372117][ T9627] program syz.3.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.376735][ T9628] program syz.3.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.578697][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.581388][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.603911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.644683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.134076][ T40] audit: type=1400 audit(1748536462.029:650): avc: denied { listen } for pid=9643 comm="syz.1.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.266765][ T9648] 9pnet_virtio: no channels available for device 127.0.0.1 [ 133.321804][ T40] audit: type=1326 audit(1748536462.209:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.3.1076" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23e0d8e969 code=0x0 [ 133.335172][ T40] audit: type=1326 audit(1748536462.229:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9655 comm="syz.0.1077" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff83838e969 code=0x0 [ 133.400207][ T40] audit: type=1326 audit(1748536462.289:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9655 comm="syz.0.1077" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff83838e969 code=0x0 [ 133.440543][ T9664] xt_l2tp: v2 doesn't support IP mode [ 133.449856][ T40] audit: type=1326 audit(1748536462.339:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9655 comm="syz.0.1077" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff83838e969 code=0x0 [ 133.590478][ T9667] ALSA: mixer_oss: invalid index 40000 [ 133.717734][ T9679] netlink: 'syz.2.1081': attribute type 8 has an invalid length. [ 134.015960][ T9707] futex_wake_op: syz.0.1088 tries to shift op by 32; fix this program [ 134.653178][ T9737] __nla_validate_parse: 82 callbacks suppressed [ 134.655480][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 134.885808][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1104'. [ 135.047456][ T9776] Cannot find set identified by id 0 to match [ 135.090987][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.093687][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.096438][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.099072][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.101458][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.103926][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.106217][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.108448][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.110661][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.112903][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.115281][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.117686][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.119946][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.122180][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.124882][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.127151][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.129366][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.131550][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.134022][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.137531][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.139855][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.142138][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.145053][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.147395][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.149734][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.152004][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.154459][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.156853][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.159195][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.161532][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.163975][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.166259][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.168620][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.170916][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.173409][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.175775][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.178088][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.180344][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.182641][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.185066][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.187438][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.189737][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.192026][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.194573][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.196914][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.199267][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.201582][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.204027][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.206418][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.208766][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.211047][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.213572][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.216286][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.218791][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.221070][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.223505][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.226098][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.228565][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.230911][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.233405][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.235819][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.238227][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.240601][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.242985][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.245856][ T5297] Bluetooth: hci2: unexpected subevent 0x1a length: 25 > 6 [ 135.263476][ T34] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 135.437780][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 135.441198][ T34] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 135.444372][ T34] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 135.449994][ T34] usb 6-1: string descriptor 0 read error: -22 [ 135.452179][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.455307][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.474300][ T9773] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 135.679918][ T34] cdc_ncm 6-1:1.0: bind() failure [ 135.687173][ T34] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 135.689385][ T34] cdc_ncm 6-1:1.1: bind() failure [ 135.693356][ T34] usb 6-1: USB disconnect, device number 15 [ 135.773377][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 135.982447][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 136.219574][ T9795] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1115'. [ 136.222476][ T9795] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1115'. [ 136.263416][ T5977] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 136.418087][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 136.418103][ T40] audit: type=1400 audit(1748536465.309:662): avc: denied { connect } for pid=9804 comm="syz.1.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 136.435529][ T5977] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.443464][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.447640][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 136.457483][ T5977] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.461471][ T5977] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.464884][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.468617][ T5977] usb 5-1: config 0 descriptor?? [ 136.475677][ T9809] trusted_key: encrypted_key: keylen parameter is missing [ 136.478618][ T9809] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 136.873517][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.881382][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.884308][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.886628][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.889014][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.891503][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.894012][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.896384][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.898709][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.901199][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.906517][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.908858][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.911303][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.913953][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.916260][ T5977] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 136.918971][ T5977] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 136.928198][ T5977] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 136.936477][ T5977] usb 5-1: USB disconnect, device number 27 [ 136.975694][ T9829] fido_id[9829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 137.006293][ T40] audit: type=1400 audit(1748536465.899:663): avc: denied { getopt } for pid=9830 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 137.267903][ T40] audit: type=1400 audit(1748536466.159:664): avc: denied { ioctl } for pid=9839 comm="syz.1.1129" path="socket:[32832]" dev="sockfs" ino=32832 ioctlcmd=0x4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.288860][ T9841] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.291650][ T9841] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.294524][ T9841] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.297213][ T9841] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.345952][ T40] audit: type=1400 audit(1748536466.239:665): avc: denied { ioctl } for pid=9838 comm="syz.0.1130" path="socket:[31201]" dev="sockfs" ino=31201 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.366382][ T9851] netlink: 'syz.3.1132': attribute type 10 has an invalid length. [ 137.382968][ T9853] bridge0: entered promiscuous mode [ 137.387199][ T9853] macvlan2: entered promiscuous mode [ 137.419458][ T40] audit: type=1400 audit(1748536466.309:666): avc: denied { create } for pid=9852 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 137.430660][ T9854] kvm: pic: non byte read [ 137.433655][ T9854] kvm: pic: level sensitive irq not supported [ 137.434451][ T9854] kvm: pic: non byte read [ 137.438855][ T9854] kvm: pic: level sensitive irq not supported [ 137.439084][ T9854] kvm: pic: non byte read [ 137.444313][ T9854] kvm: pic: level sensitive irq not supported [ 137.444545][ T9854] kvm: pic: non byte read [ 137.690804][ T9869] overlayfs: unescaped trailing colons in lowerdir mount option. [ 137.703145][ T9871] sctp: [Deprecated]: syz.1.1138 (pid 9871) Use of int in max_burst socket option. [ 137.703145][ T9871] Use struct sctp_assoc_value instead [ 137.747981][ T9878] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 137.749482][ T9879] netlink: 'syz.3.1141': attribute type 12 has an invalid length. [ 137.790198][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 137.799124][ T9887] vti0: entered promiscuous mode [ 137.849361][ T9891] xt_policy: output policy not valid in PREROUTING and INPUT [ 138.017468][ T9904] netlink: 'syz.0.1149': attribute type 142 has an invalid length. [ 138.373294][ T5977] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 138.523370][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 138.526737][ T5977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.530265][ T5977] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.537039][ T5977] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 138.540079][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 138.542762][ T5977] usb 5-1: Product: syz [ 138.544179][ T5977] usb 5-1: Manufacturer: syz [ 138.545759][ T5977] usb 5-1: SerialNumber: syz [ 138.554608][ T5977] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input15 [ 138.755652][ T40] audit: type=1400 audit(1748536467.649:667): avc: denied { bind } for pid=9914 comm="syz.0.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.760933][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 138.962823][ T40] audit: type=1400 audit(1748536467.849:668): avc: denied { attach_queue } for pid=9919 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 139.046559][ T40] audit: type=1400 audit(1748536467.939:669): avc: denied { read } for pid=9929 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.052538][ T5977] usb 5-1: USB disconnect, device number 28 [ 139.094681][ T5977] appletouch 5-1:1.0: input: appletouch disconnected [ 139.176051][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1164'. [ 139.217978][ T9936] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 139.348544][ T9954] xt_hashlimit: size too large, truncated to 1048576 [ 139.417233][ T9958] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1168'. [ 139.479921][ T5297] Bluetooth: hci1: connection err: -111 [ 139.586031][ T9973] SELinux: syz.1.1174 (9973) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 139.706609][ T9990] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1179'. [ 139.717312][ T9995] netlink: 'syz.1.1180': attribute type 1 has an invalid length. [ 139.732149][ T9995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.767775][ T9999] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 139.808981][T10004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1181'. [ 139.837803][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1180'. [ 139.847209][ T9995] bond2: (slave gretap1): making interface the new active one [ 139.851150][ T9995] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 139.895967][T10012] io-wq is not configured for unbound workers [ 139.898616][T10013] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1185'. [ 139.901836][T10014] netlink: 'syz.1.1184': attribute type 23 has an invalid length. [ 139.967066][T10023] fuse: Bad value for 'rootmode' [ 139.982626][T10025] random: crng reseeded on system resumption [ 140.020607][T10028] xt_CONNSECMARK: invalid mode: 0 [ 140.055630][T10031] mkiss: ax0: crc mode is auto. [ 140.099047][ T40] audit: type=1400 audit(1748536468.989:670): avc: denied { accept } for pid=10024 comm="syz.2.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.205858][T10040] netlink: 'syz.1.1192': attribute type 2 has an invalid length. [ 140.215529][T10040] vlan2: entered allmulticast mode [ 140.217173][T10040] vlan1: entered allmulticast mode [ 140.218760][T10040] veth0_vlan: entered allmulticast mode [ 140.486994][T10044] netlink: 'syz.1.1194': attribute type 5 has an invalid length. [ 140.492849][T10044] ip6erspan0: entered promiscuous mode [ 140.547840][ T40] audit: type=1400 audit(1748536469.439:671): avc: denied { append } for pid=10045 comm="syz.1.1195" path="/326/file0/cgroup.events" dev="9p" ino=35913951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.579995][T10051] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.613062][T10053] trusted_key: encrypted_key: master key parameter is missing [ 140.666070][T10061] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 140.670387][T10061] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 140.674794][T10061] random: crng reseeded on system resumption [ 140.677005][T10060] netlink: 'syz.0.1200': attribute type 10 has an invalid length. [ 140.686907][T10060] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 140.701806][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.796843][T10058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.827822][T10061] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 140.840439][T10061] bond6: entered promiscuous mode [ 140.842212][T10061] 8021q: adding VLAN 0 to HW filter on device bond6 [ 140.879888][T10083] IPVS: persistence engine module ip_vs_pe_s not found [ 140.948292][T10090] dvmrp1: entered allmulticast mode [ 140.979049][T10093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56317 sclass=netlink_route_socket pid=10093 comm=syz.3.1209 [ 141.059375][T10097] sp0: Synchronizing with TNC [ 141.225025][T10111] overlayfs: missing 'lowerdir' [ 141.434292][T10125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.501822][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 141.501834][ T40] audit: type=1400 audit(1748536470.389:675): avc: denied { read } for pid=10124 comm="syz.2.1217" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 141.521728][ T40] audit: type=1400 audit(1748536470.389:676): avc: denied { open } for pid=10124 comm="syz.2.1217" path="/308/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 141.655183][T10134] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1219'. [ 141.824494][T10141] bridge_slave_0: left allmulticast mode [ 141.826411][T10141] bridge_slave_0: left promiscuous mode [ 141.828304][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.832799][T10141] bridge_slave_1: left promiscuous mode [ 141.835498][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.858358][T10141] bond0: (slave bond_slave_0): Releasing backup interface [ 141.869739][T10141] bond0: (slave bond_slave_1): Releasing backup interface [ 141.884359][T10141] team0: Port device team_slave_0 removed [ 141.895213][T10141] team0: Port device team_slave_1 removed [ 141.897516][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.899904][T10141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.905834][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.908557][T10141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.923958][T10141] bond2: (slave gretap1): Releasing active interface [ 141.959791][T10141] vlan3: entered allmulticast mode [ 141.961610][T10141] bond0: entered allmulticast mode [ 141.964389][T10141] bridge0: port 1(vlan3) entered blocking state [ 141.966513][T10141] bridge0: port 1(vlan3) entered disabled state [ 141.974498][T10141] vlan3: entered promiscuous mode [ 141.976143][T10141] bond0: entered promiscuous mode [ 142.058603][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 142.099340][ T40] audit: type=1326 audit(1748536470.989:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.1.1224" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f757018e969 code=0x0 [ 142.150916][ T40] audit: type=1400 audit(1748536471.039:678): avc: denied { mounton } for pid=10150 comm="syz.1.1224" path="/338/bus" dev="tmpfs" ino=1890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 142.155735][T10152] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 142.531732][ T40] audit: type=1400 audit(1748536471.419:679): avc: denied { read } for pid=10186 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 142.532240][T10188] bridge0: port 3(veth0_to_bridge) entered blocking state [ 142.541536][T10188] bridge0: port 3(veth0_to_bridge) entered disabled state [ 142.544257][T10188] veth0_to_bridge: entered allmulticast mode [ 142.547737][T10188] veth0_to_bridge: entered promiscuous mode [ 142.774956][T10206] veth0_to_bridge: left allmulticast mode [ 142.777050][T10206] veth0_to_bridge: left promiscuous mode [ 142.779151][T10206] bridge0: port 3(veth0_to_bridge) entered disabled state [ 142.795790][T10206] bridge_slave_1: left allmulticast mode [ 142.797683][T10206] bridge_slave_1: left promiscuous mode [ 142.799622][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.803464][T10206] bridge_slave_0: left allmulticast mode [ 142.805243][T10206] bridge_slave_0: left promiscuous mode [ 142.807168][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.820104][T10208] program syz.2.1235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.980234][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 143.035413][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 143.039476][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 143.095263][ T40] audit: type=1400 audit(1748536471.989:680): avc: denied { write } for pid=10228 comm="syz.2.1242" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.143162][T10248] 9pnet_fd: p9_fd_create_tcp (10248): problem connecting socket to 127.0.0.1 [ 143.820917][T10224] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 143.913406][T10243] netlink: 'syz.0.1244': attribute type 11 has an invalid length. [ 143.942925][ T40] audit: type=1400 audit(1748536472.829:681): avc: denied { listen } for pid=10249 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.945382][ T5297] ================================================================== [ 143.954103][ T5297] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x16a/0x170 [ 143.957416][ T5297] Read of size 8 at addr ffff888034c3c188 by task kworker/u33:1/5297 [ 143.962574][ T5297] [ 143.963554][ T5297] CPU: 2 UID: 0 PID: 5297 Comm: kworker/u33:1 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 143.963577][ T5297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.963593][ T5297] Workqueue: hci2 hci_rx_work [ 143.963623][ T5297] Call Trace: [ 143.963631][ T5297] [ 143.963639][ T5297] dump_stack_lvl+0x116/0x1f0 [ 143.963662][ T5297] print_report+0xcd/0x680 [ 143.963682][ T5297] ? __virt_addr_valid+0x81/0x610 [ 143.963700][ T5297] ? __phys_addr+0xe8/0x180 [ 143.963714][ T5297] ? l2cap_sock_ready_cb+0x16a/0x170 [ 143.963739][ T5297] kasan_report+0xe0/0x110 [ 143.963762][ T5297] ? l2cap_sock_ready_cb+0x16a/0x170 [ 143.963789][ T5297] l2cap_sock_ready_cb+0x16a/0x170 [ 143.963808][ T5297] l2cap_le_start+0x1ea/0xe40 [ 143.963826][ T5297] ? l2cap_connect_cfm+0x819/0xf80 [ 143.963848][ T5297] ? __pfx_l2cap_le_start+0x10/0x10 [ 143.963866][ T5297] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 143.963884][ T5297] ? __l2cap_chan_add+0x3e6/0xa20 [ 143.963907][ T5297] l2cap_connect_cfm+0x8f4/0xf80 [ 143.963932][ T5297] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 143.963955][ T5297] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 143.963972][ T5297] le_conn_complete_evt+0x1662/0x1d70 [ 143.963997][ T5297] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 143.964018][ T5297] ? hci_event_packet+0x459/0x11c0 [ 143.964044][ T5297] hci_le_conn_complete_evt+0x23c/0x370 [ 143.964064][ T5297] hci_le_meta_evt+0x357/0x5e0 [ 143.964087][ T5297] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 143.964109][ T5297] hci_event_packet+0x682/0x11c0 [ 143.964129][ T5297] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 143.964149][ T5297] ? __pfx_hci_event_packet+0x10/0x10 [ 143.964172][ T5297] ? kcov_remote_start+0x3c9/0x6d0 [ 143.964190][ T5297] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.964209][ T5297] hci_rx_work+0x2c5/0x16b0 [ 143.964233][ T5297] ? rcu_is_watching+0x12/0xc0 [ 143.964254][ T5297] process_one_work+0x9cc/0x1b70 [ 143.964269][ T5297] ? __pfx_process_one_work+0x10/0x10 [ 143.964289][ T5297] ? assign_work+0x1a0/0x250 [ 143.964315][ T5297] worker_thread+0x6c8/0xf10 [ 143.964330][ T5297] ? __kthread_parkme+0x19e/0x250 [ 143.964357][ T5297] ? __pfx_worker_thread+0x10/0x10 [ 143.964373][ T5297] kthread+0x3c2/0x780 [ 143.964400][ T5297] ? __pfx_kthread+0x10/0x10 [ 143.964429][ T5297] ? rcu_is_watching+0x12/0xc0 [ 143.964448][ T5297] ? __pfx_kthread+0x10/0x10 [ 143.964473][ T5297] ret_from_fork+0x5d4/0x6f0 [ 143.964496][ T5297] ? __pfx_kthread+0x10/0x10 [ 143.964520][ T5297] ret_from_fork_asm+0x1a/0x30 [ 143.964539][ T5297] [ 143.964546][ T5297] [ 144.054948][ T5297] Allocated by task 10250: [ 144.056269][ T5297] kasan_save_stack+0x33/0x60 [ 144.057766][ T5297] kasan_save_track+0x14/0x30 [ 144.059234][ T5297] __kasan_kmalloc+0xaa/0xb0 [ 144.060679][ T5297] __kmalloc_noprof+0x223/0x510 [ 144.062201][ T5297] sk_prot_alloc+0x1a8/0x2a0 [ 144.063656][ T5297] sk_alloc+0x36/0xc20 [ 144.064941][ T5297] bt_sock_alloc+0x3b/0x3a0 [ 144.066354][ T5297] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 144.068167][ T5297] l2cap_sock_create+0x123/0x1f0 [ 144.069718][ T5297] bt_sock_create+0x185/0x350 [ 144.071186][ T5297] __sock_create+0x335/0x8d0 [ 144.072610][ T5297] __sys_socket+0x14d/0x260 [ 144.073981][ T5297] __x64_sys_socket+0x72/0xb0 [ 144.075422][ T5297] do_syscall_64+0xcd/0x4c0 [ 144.076820][ T5297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.078642][ T5297] [ 144.079407][ T5297] Freed by task 10252: [ 144.080676][ T5297] kasan_save_stack+0x33/0x60 [ 144.082156][ T5297] kasan_save_track+0x14/0x30 [ 144.083619][ T5297] kasan_save_free_info+0x3b/0x60 [ 144.085184][ T5297] __kasan_slab_free+0x51/0x70 [ 144.086682][ T5297] kfree+0x2b4/0x4d0 [ 144.087908][ T5297] __sk_destruct+0x740/0x980 [ 144.089337][ T5297] sk_destruct+0xc2/0xf0 [ 144.090659][ T5297] __sk_free+0xf4/0x3e0 [ 144.091951][ T5297] sk_free+0x6a/0x90 [ 144.093195][ T5297] l2cap_sock_kill+0x171/0x2d0 [ 144.094719][ T5297] l2cap_sock_release+0x189/0x210 [ 144.096286][ T5297] __sock_release+0xb0/0x270 [ 144.097734][ T5297] sock_close+0x1c/0x30 [ 144.099040][ T5297] __fput+0x3ff/0xb70 [ 144.100299][ T5297] task_work_run+0x150/0x240 [ 144.101726][ T5297] exit_to_user_mode_loop+0xeb/0x110 [ 144.103379][ T5297] do_syscall_64+0x3f6/0x4c0 [ 144.104838][ T5297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.106717][ T5297] [ 144.107516][ T5297] The buggy address belongs to the object at ffff888034c3c000 [ 144.107516][ T5297] which belongs to the cache kmalloc-2k of size 2048 [ 144.111723][ T5297] The buggy address is located 392 bytes inside of [ 144.111723][ T5297] freed 2048-byte region [ffff888034c3c000, ffff888034c3c800) [ 144.115872][ T5297] [ 144.116643][ T5297] The buggy address belongs to the physical page: [ 144.118632][ T5297] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34c38 [ 144.121338][ T5297] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 144.123947][ T5297] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 144.126269][ T5297] page_type: f5(slab) [ 144.127551][ T5297] raw: 00fff00000000040 ffff88801b442f00 ffffea00014a5800 dead000000000002 [ 144.130202][ T5297] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 144.132793][ T5297] head: 00fff00000000040 ffff88801b442f00 ffffea00014a5800 dead000000000002 [ 144.135406][ T5297] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 144.138021][ T5297] head: 00fff00000000003 ffffea0000d30e01 00000000ffffffff 00000000ffffffff [ 144.140613][ T5297] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 144.143298][ T5297] page dumped because: kasan: bad access detected [ 144.145208][ T5297] page_owner tracks the page as allocated [ 144.146864][ T5297] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5800, tgid 5800 (dhcpcd), ts 32247111663, free_ts 31171421927 [ 144.152943][ T5297] post_alloc_hook+0x1c0/0x230 [ 144.154415][ T5297] get_page_from_freelist+0x135c/0x3950 [ 144.156084][ T5297] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 144.157928][ T5297] alloc_pages_mpol+0x1fb/0x550 [ 144.159445][ T5297] new_slab+0x23b/0x330 [ 144.160717][ T5297] ___slab_alloc+0xd9c/0x1940 [ 144.162188][ T5297] __slab_alloc.constprop.0+0x56/0xb0 [ 144.163831][ T5297] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 144.165773][ T5297] kmemdup_noprof+0x29/0x60 [ 144.167199][ T5297] bpf_prepare_filter+0xc4d/0x1100 [ 144.168753][ T5297] bpf_prog_create_from_user+0x1e8/0x2f0 [ 144.170467][ T5297] do_seccomp+0x7b4/0x26d0 [ 144.171843][ T5297] prctl_set_seccomp+0x4b/0x70 [ 144.173307][ T5297] __do_sys_prctl+0x36d/0x24c0 [ 144.174778][ T5297] do_syscall_64+0xcd/0x4c0 [ 144.176176][ T5297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.178007][ T5297] page last free pid 5649 tgid 5649 stack trace: [ 144.179900][ T5297] __free_frozen_pages+0x7fe/0x1180 [ 144.181494][ T5297] __put_partials+0x16d/0x1c0 [ 144.182946][ T5297] qlist_free_all+0x4d/0x120 [ 144.184390][ T5297] kasan_quarantine_reduce+0x195/0x1e0 [ 144.186092][ T5297] __kasan_slab_alloc+0x69/0x90 [ 144.187612][ T5297] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 144.189423][ T5297] __alloc_skb+0x2b2/0x380 [ 144.190782][ T5297] alloc_skb_with_frags+0xe0/0x860 [ 144.192391][ T5297] sock_alloc_send_pskb+0x7fb/0x990 [ 144.194008][ T5297] unix_dgram_sendmsg+0x41a/0x1840 [ 144.195543][ T5297] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 144.197184][ T5297] sock_write_iter+0x4ff/0x5b0 [ 144.198652][ T5297] do_iter_readv_writev+0x556/0x820 [ 144.200238][ T5297] vfs_writev+0x35f/0xde0 [ 144.201602][ T5297] do_writev+0x28c/0x340 [ 144.202921][ T5297] do_syscall_64+0xcd/0x4c0 [ 144.204314][ T5297] [ 144.205069][ T5297] Memory state around the buggy address: [ 144.206793][ T5297] ffff888034c3c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.209240][ T5297] ffff888034c3c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.211673][ T5297] >ffff888034c3c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.214114][ T5297] ^ [ 144.215430][ T5297] ffff888034c3c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.217859][ T5297] ffff888034c3c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.220257][ T5297] ================================================================== [ 144.222960][ T5297] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.225172][ T5297] CPU: 2 UID: 0 PID: 5297 Comm: kworker/u33:1 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 144.228845][ T5297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.232052][ T5297] Workqueue: hci2 hci_rx_work [ 144.233491][ T5297] Call Trace: [ 144.234546][ T5297] [ 144.235494][ T5297] dump_stack_lvl+0x3d/0x1f0 [ 144.236951][ T5297] panic+0x71c/0x800 [ 144.238180][ T5297] ? __pfx_panic+0x10/0x10 [ 144.239540][ T5297] ? irqentry_exit+0x3b/0x90 [ 144.240976][ T5297] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.242577][ T5297] ? preempt_schedule_thunk+0x16/0x30 [ 144.244220][ T5297] ? l2cap_sock_ready_cb+0x16a/0x170 [ 144.245859][ T5297] ? preempt_schedule_common+0x44/0xc0 [ 144.247521][ T5297] ? l2cap_sock_ready_cb+0x16a/0x170 [ 144.249122][ T5297] check_panic_on_warn+0xab/0xb0 [ 144.250669][ T5297] end_report+0x107/0x170 [ 144.251995][ T5297] kasan_report+0xee/0x110 [ 144.253354][ T5297] ? l2cap_sock_ready_cb+0x16a/0x170 [ 144.254962][ T5297] l2cap_sock_ready_cb+0x16a/0x170 [ 144.256505][ T5297] l2cap_le_start+0x1ea/0xe40 [ 144.257969][ T5297] ? l2cap_connect_cfm+0x819/0xf80 [ 144.259532][ T5297] ? __pfx_l2cap_le_start+0x10/0x10 [ 144.261121][ T5297] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 144.262956][ T5297] ? __l2cap_chan_add+0x3e6/0xa20 [ 144.264503][ T5297] l2cap_connect_cfm+0x8f4/0xf80 [ 144.265998][ T5297] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 144.267653][ T5297] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 144.269314][ T5297] le_conn_complete_evt+0x1662/0x1d70 [ 144.270999][ T5297] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 144.272733][ T5297] ? hci_event_packet+0x459/0x11c0 [ 144.274292][ T5297] hci_le_conn_complete_evt+0x23c/0x370 [ 144.275956][ T5297] hci_le_meta_evt+0x357/0x5e0 [ 144.277521][ T5297] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 144.279447][ T5297] hci_event_packet+0x682/0x11c0 [ 144.280978][ T5297] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 144.282605][ T5297] ? __pfx_hci_event_packet+0x10/0x10 [ 144.284222][ T5297] ? kcov_remote_start+0x3c9/0x6d0 [ 144.285763][ T5297] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.287346][ T5297] hci_rx_work+0x2c5/0x16b0 [ 144.288726][ T5297] ? rcu_is_watching+0x12/0xc0 [ 144.290190][ T5297] process_one_work+0x9cc/0x1b70 [ 144.291703][ T5297] ? __pfx_process_one_work+0x10/0x10 [ 144.293392][ T5297] ? assign_work+0x1a0/0x250 [ 144.294814][ T5297] worker_thread+0x6c8/0xf10 [ 144.296201][ T5297] ? __kthread_parkme+0x19e/0x250 [ 144.297768][ T5297] ? __pfx_worker_thread+0x10/0x10 [ 144.299324][ T5297] kthread+0x3c2/0x780 [ 144.300588][ T5297] ? __pfx_kthread+0x10/0x10 [ 144.302026][ T5297] ? rcu_is_watching+0x12/0xc0 [ 144.303510][ T5297] ? __pfx_kthread+0x10/0x10 [ 144.304937][ T5297] ret_from_fork+0x5d4/0x6f0 [ 144.306354][ T5297] ? __pfx_kthread+0x10/0x10 [ 144.307767][ T5297] ret_from_fork_asm+0x1a/0x30 [ 144.309230][ T5297] [ 144.310820][ T5297] Kernel Offset: disabled [ 144.312144][ T5297] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:34:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000049bad RCX=ffffffff822d987c RDX=ffff888029312440 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000383f750 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000005 R13=0000000000000001 R14=dffffc0000000000 R15=00000000000001da RIP=ffffffff81bb7232 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6974000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7570172720 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7570211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7570211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7570211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7570211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7570211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7570211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000465 000000000002401d 000000000000040f 00000000fff0a471 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7570eed100 00007f7570383440 00007f7570380004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7570383498 00007f7570383490 00007f7570383488 00007f7570383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000098 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=0000000000000000 RCX=ffff8881069c1070 RDX=000000000000009d RSI=ffffffff86a4d0c8 RDI=ffff8881069c12d0 RBP=0000000000000001 RSP=ffffc900006a0b78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000004e20 R14=ffff8881069c1070 R15=0000000000000001 RIP=ffffffff86a4d10f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4235f61300 ffffffff 00c00000 GS =0000 ffff8880d6a74000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f756dff5f98 CR3=0000000032f0e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04dd000000010000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000080008 0007000c00080000 0000000000100000 01ac000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04dc000000200000 0010000400000000 0000000000080016 0010000000140100 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000400000008 0008000000240000 0038000000500000 0070000000880000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 009c000000b00000 00c4000000d80000 00ec000001000000 0040000001240000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000d000000000000 0000000000000000 0117000000003305 8600000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=5497b5075497b507 5497b5075497b507 5497b5075497b507 5497b5075497b507 5497b5075497b507 5497b5075497b507 5497b5075497b507 5497b5075497b507 ZMM25=9a2898389a289838 9a2898389a289838 9a2898389a289838 9a2898389a289838 9a2898389a289838 9a2898389a289838 9a2898389a289838 9a2898389a289838 ZMM26=fe1bc99afe1bc99a fe1bc99afe1bc99a fe1bc99afe1bc99a fe1bc99afe1bc99a fe1bc99afe1bc99a fe1bc99afe1bc99a fe1bc99afe1bc99a fe1bc99afe1bc99a ZMM27=dfc2c51ddfc2c51d dfc2c51ddfc2c51d dfc2c51ddfc2c51d dfc2c51ddfc2c51d dfc2c51ddfc2c51d dfc2c51ddfc2c51d dfc2c51ddfc2c51d dfc2c51ddfc2c51d ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b8080000b8080000 b8080000b8080000 b8080000b8080000 b8080000b8080000 b8080000b8080000 b8080000b8080000 b8080000b8080000 b8080000b8080000 info registers vcpu 2 CPU#2 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8557f6b5 RDI=ffffffff9ae67620 RBP=ffffffff9ae675e0 RSP=ffffc90023297148 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6334333038386552 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9ae675e0 R15=ffffffff8557f650 RIP=ffffffff8557f6df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b74000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffb0cf7d2d8 CR3=000000004e622000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080400040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5b3d7930 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb0ce11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb0ce11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb0ce11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb0ce11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb0ce11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb0ce11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001e000000003 ffffffff00000098 ffffffffffffffff 00000000ffffffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ffffffff00000098 ffffffffffffffff 0000000000000009 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000010cbe5 RBX=0000000000000003 RCX=ffffffff8b7b6419 RDX=0000000000000000 RSI=ffffffff8dc0416f RDI=ffffffff8bf52dc0 RBP=ffffed1003bdb000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e663d R10=ffff88806a7331eb R11=0000000000000001 R12=0000000000000003 R13=ffff88801ded8000 R14=ffffffff90876250 R15=0000000000000000 RIP=ffffffff8b7b4f7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c74000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff839175d58 CR3=000000005b06d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8391b6f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff838411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff838411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff838411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff838411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff838411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff838411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000110 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000