last executing test programs: 6.390123886s ago: executing program 1 (id=842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x6, 0x0, @val=@tracing}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x6, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 6.271930322s ago: executing program 1 (id=843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x72bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 6.084086768s ago: executing program 1 (id=845): syz_open_dev$char_usb(0xc, 0xb4, 0xde) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) r1 = syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x4206, r1) ptrace(0x8, r1) waitid(0x0, 0x0, 0x0, 0x40000004, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0xd211e5e65a3a6728, 0x10, 0x2, 0x4, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x67, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @remote, {[@cipso={0x86, 0x28, 0xffffffffffffffff, [{0x7, 0xf, "5dfaf5ead7cbc7a4efffa90c8d"}, {0x2, 0x5, "2753cc"}, {0x5, 0xe, "861eeffa916d20ef24de7f28"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'ip6_vti0\x00', r5, 0x29, 0x3, 0x79, 0x2, 0x14, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8000, 0x40, 0x9, 0x7ff}}) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) (rerun: 32) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x401, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x100000004000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0xfff, 0x0, 0x7}, 0xfffffffe, 0x6e6bb9, 0x1}, {{@in=@rand_addr=0x64010102, 0xfffffffc, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x3, 0x200}}, 0xe8) (async) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) (async) getsockopt$inet6_buf(r6, 0x29, 0x14, &(0x7f0000000540)=""/230, &(0x7f0000000640)=0xe6) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x2592c14d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0x7}, {}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.249773202s ago: executing program 1 (id=849): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x30) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x6b0240, 0x102) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x104, 0x4, 0x3f0, 0x220, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="cab170e97230", @multicast1, @remote, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 0x0, 0x0, {@mac=@remote, {[0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x4}, 0x38) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x8080000, 0x8, 0x542, 0x6, 0x0, [{0x4, 0x7, 0x7f}, {0x4, 0x3, 0x7, '\x00', 0x12}, {0xd3, 0x3, 0xaf, '\x00', 0x6}, {0x4, 0xd3, 0x5, '\x00', 0x9}, {0x3a, 0x3, 0x3}, {0x10, 0xa5, 0xff, '\x00', 0xa}, {0x45, 0xf8, 0x2, '\x00', 0x1}, {0x1, 0x3, 0x1, '\x00', 0xa5}, {0x4, 0x5, 0x9, '\x00', 0x1}, {0x8d, 0x9, 0xa, '\x00', 0x40}, {0x1, 0x9, 0x3, '\x00', 0x5}, {0x5, 0x7e, 0x25, '\x00', 0x52}, {0x1, 0xd, 0x4, '\x00', 0x2}, {0x0, 0x3, 0xf8, '\x00', 0x8}, {0x10, 0x6, 0x6, '\x00', 0x1}, {0x3, 0xc, 0x9, '\x00', 0x9}, {0x0, 0x4, 0x7, '\x00', 0x9}, {0xf4, 0x2, 0x9, '\x00', 0xca}, {0x1, 0x1, 0x8, '\x00', 0xf1}, {0xd8, 0xb, 0xb, '\x00', 0xeb}, {0x10, 0x7f, 0x7}, {0x39, 0x4, 0x1, '\x00', 0x4}, {0x3, 0xff, 0x7f, '\x00', 0x9}, {0xda, 0x0, 0x5}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysfs$1(0x64, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x24, r9, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000c, 0x11, r0, 0x100000) 4.434463987s ago: executing program 0 (id=856): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x6959, 0x4080) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x1c, 0x8, 0x6, 0xa}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4000, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) 4.379303051s ago: executing program 0 (id=857): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, "e6dd3c3d"}, 0xb20f, 0x1, {0x0}}) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0], 0x1, r7}) listen(r3, 0x8) r8 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000080)) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x10}}, 0x0) 3.870064187s ago: executing program 1 (id=860): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000001840)=0x8, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fdatasync(r2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000000)={{0x10, 0x9}, {0x5, 0x7}, 0x5, 0x5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xc, 0x1b1407, 0x0, 0x7fffffff, 0x0, 0x8001, 0x800, 0x0, 0x8}) 3.71862167s ago: executing program 1 (id=861): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) sendto$phonet(r1, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x0, 0x1}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x7f, 0x40d, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) r3 = syz_io_uring_setup(0x58f2, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000001240)=""/4102, 0x1006}) io_uring_enter(r3, 0x1f82, 0x0, 0x0, 0x0, 0x0) 2.488149124s ago: executing program 2 (id=868): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.323907128s ago: executing program 2 (id=869): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x7f, 0x40d, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) r2 = syz_io_uring_setup(0x58f2, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000001240)=""/4102, 0x1006}) io_uring_enter(r2, 0x1f82, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 2.203507073s ago: executing program 2 (id=870): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffff"], 0x6c}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x19ee0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0xa, 0x0, &(0x7f0000000100)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d1", 0x1d}, {0x0}], 0x2}}], 0x1, 0xc0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d1", 0x1d}, {0x0}], 0x2}}], 0x1, 0xc0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="120000001200010002f7ffffff000000100000000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x4}, 0x8811) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="120000001200010002f7ffffff000000100000000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x4}, 0x8811) dup(r7) (async) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 1.908379924s ago: executing program 0 (id=871): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000001900)={[{@mode}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x36, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES16=r3], 0x14}}, 0x10000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) io_uring_enter(r2, 0x241, 0x9b9f, 0x20, &(0x7f00000000c0)={[0x1000]}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f00000001c0)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.907877948s ago: executing program 3 (id=872): rt_sigprocmask(0x0, &(0x7f0000000040)={[0x456]}, &(0x7f0000000080), 0x8) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f003, 0x1}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x48}]}}]}, 0x50}}, 0x4000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f00000001c0)={0x0, "bff09f08ffda5bcc4fda2e464f651e10e258bb7d2206376dc8d729763f8dc6df", 0x2, 0x1ff, 0x4, 0x100, 0x10800, 0x8}) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@hopopts_2292={{0x18}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}], 0x30}, 0x20000004) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="66b9800000c00f326635000400000f30f30f0966b9800000c00f326635000100000f30f30fc7b40d006536360f09f30f08b806008ec00fc7aa0300b8ff0f8ee0660f64f6", 0x44}], 0x1, 0x50, &(0x7f00000000c0)=[@cstype3={0x5, 0x3}, @cr4={0x1, 0x200}], 0x2) r9 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x88801) ioctl$CEC_ADAP_G_PHYS_ADDR(r9, 0x80026101, &(0x7f0000000240)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x6, 0x3, 0x0, 0x100000001]}) 1.35522307s ago: executing program 2 (id=873): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', 0x0}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) syz_init_net_socket$ax25(0x3, 0x2, 0xce) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) 1.285656299s ago: executing program 2 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.285188393s ago: executing program 3 (id=875): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x6, 0x0, @val=@tracing}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x6, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.167291654s ago: executing program 3 (id=876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x72bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x85}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 946.077929ms ago: executing program 0 (id=877): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 648.707388ms ago: executing program 0 (id=878): r0 = syz_open_procfs(0x0, &(0x7f00000058c0)='net/if_inet6\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xcf619000) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000000600000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000080000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000180)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)=[{0x0, 0x4, 0x5, 0x1}, {0x0, 0x5, 0x2, 0xa}], 0x10, 0x6, @void, @value}, 0x94) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18) r4 = syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x800) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000500)=""/18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r3, r2, 0x2a, 0x0, 0x0, @void, @value=r2}, 0x20) r5 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000480)=0xfd, 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x368, 0x8, 0x7f02ae, 0x0, 0x200, 0x438, 0x2e8, 0x2e8, 0x438, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv4=@remote, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = syz_open_dev$evdev(&(0x7f0000000540), 0x5, 0x2) ioctl$EVIOCSABS3F(r7, 0x401845ff, &(0x7f0000000b00)={0x7da8, 0x1440000, 0x3, 0x9, 0xfffffffb, 0x41c}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000980)={[&(0x7f00000005c0)='syz1\x00', &(0x7f0000000600)='LED\x00']}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 648.253533ms ago: executing program 3 (id=879): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x7f, 0x40d, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) r2 = syz_io_uring_setup(0x58f2, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000001240)=""/4102, 0x1006}) io_uring_enter(r2, 0x1f82, 0x0, 0x0, 0x0, 0x0) 258.61645ms ago: executing program 2 (id=880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3", 0x5}], 0x1}, 0x48005) readv(r1, &(0x7f0000001680)=[{&(0x7f0000000180)=""/21, 0x15}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 136.720461ms ago: executing program 3 (id=881): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xb, 0x2000) r1 = eventfd(0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) write$eventfd(r1, &(0x7f0000000000)=0x8, 0x8) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x9, 0x4, 0x1012, 0x4, 0x0, 0x0, 0x2, 0x6}}) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f38826e376464f30f11745a2f660fc73166ba420066edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0x1, 0x11, 0x0, 0x0) (async) r7 = dup(r6) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) (rerun: 32) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r10, 0xc008ae05, &(0x7f0000000240)=""/90) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x208}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 96.661594ms ago: executing program 0 (id=882): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', 0x0}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) syz_init_net_socket$ax25(0x3, 0x2, 0xce) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) 0s ago: executing program 3 (id=883): userfaultfd(0x0) kernel console output (not intermixed with test programs): [ 37.975442][ T40] audit: type=1400 audit(1746584837.650:80): avc: denied { write } for pid=5841 comm="sh" path="pipe:[6384]" dev="pipefs" ino=6384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.984799][ T40] audit: type=1400 audit(1746584837.650:81): avc: denied { rlimitinh } for pid=5841 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.992848][ T40] audit: type=1400 audit(1746584837.650:82): avc: denied { siginh } for pid=5841 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.556163][ T40] audit: type=1400 audit(1746584838.250:83): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.565581][ T40] audit: type=1400 audit(1746584838.250:84): avc: denied { append } for pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.574612][ T40] audit: type=1400 audit(1746584838.250:85): avc: denied { open } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.584277][ T40] audit: type=1400 audit(1746584838.250:86): avc: denied { getattr } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:11379' (ED25519) to the list of known hosts. [ 39.251288][ T40] audit: type=1400 audit(1746584838.950:87): avc: denied { name_bind } for pid=5845 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.297169][ T5847] cgroup: Unknown subsys name 'net' [ 41.492901][ T5847] cgroup: Unknown subsys name 'cpuset' [ 41.497142][ T5847] cgroup: Unknown subsys name 'rlimit' [ 41.711057][ T5882] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.477645][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.694897][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 45.694913][ T40] audit: type=1400 audit(1746584845.390:105): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.929652][ T40] audit: type=1400 audit(1746584845.620:106): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.938080][ T40] audit: type=1400 audit(1746584845.620:107): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.950543][ T40] audit: type=1400 audit(1746584845.620:108): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.961311][ T40] audit: type=1400 audit(1746584845.630:109): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[2503]" dev="sockfs" ino=2503 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.992454][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.996719][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.999744][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.002399][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.003569][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.005045][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.007882][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.012503][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.015135][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.017245][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.017465][ T40] audit: type=1400 audit(1746584845.710:110): avc: denied { read } for pid=5931 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.027087][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.027421][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.029492][ T40] audit: type=1400 audit(1746584845.710:111): avc: denied { open } for pid=5931 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.035933][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.039223][ T40] audit: type=1400 audit(1746584845.710:112): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.040030][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.040573][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.040991][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.041313][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.042416][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.060468][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.063674][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.235541][ T40] audit: type=1400 audit(1746584845.930:113): avc: denied { module_request } for pid=5931 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.315289][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 46.388139][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 46.393361][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 46.402352][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 46.532894][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.535311][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.537880][ T5931] bridge_slave_0: entered allmulticast mode [ 46.541725][ T5931] bridge_slave_0: entered promiscuous mode [ 46.593425][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.595888][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.598244][ T5931] bridge_slave_1: entered allmulticast mode [ 46.601306][ T5931] bridge_slave_1: entered promiscuous mode [ 46.705576][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.708677][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.711271][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.713678][ T5938] bridge_slave_0: entered allmulticast mode [ 46.716390][ T5938] bridge_slave_0: entered promiscuous mode [ 46.744466][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.746901][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.749311][ T5943] bridge_slave_0: entered allmulticast mode [ 46.752998][ T5943] bridge_slave_0: entered promiscuous mode [ 46.756585][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.758992][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.761592][ T5943] bridge_slave_1: entered allmulticast mode [ 46.764455][ T5943] bridge_slave_1: entered promiscuous mode [ 46.768074][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.771640][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.774045][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.776436][ T5938] bridge_slave_1: entered allmulticast mode [ 46.779127][ T5938] bridge_slave_1: entered promiscuous mode [ 46.795898][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.798643][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.801477][ T5933] bridge_slave_0: entered allmulticast mode [ 46.804999][ T5933] bridge_slave_0: entered promiscuous mode [ 46.884479][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.886974][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.889662][ T5933] bridge_slave_1: entered allmulticast mode [ 46.892589][ T5933] bridge_slave_1: entered promiscuous mode [ 46.896344][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.901491][ T5931] team0: Port device team_slave_0 added [ 46.905001][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.925673][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.930814][ T5931] team0: Port device team_slave_1 added [ 46.934147][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.003466][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.062785][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.086162][ T5943] team0: Port device team_slave_0 added [ 47.089007][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.092067][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.102432][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.109113][ T5938] team0: Port device team_slave_0 added [ 47.131109][ T5943] team0: Port device team_slave_1 added [ 47.134096][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.136389][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.146900][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.152998][ T5938] team0: Port device team_slave_1 added [ 47.157289][ T5933] team0: Port device team_slave_0 added [ 47.162236][ T5933] team0: Port device team_slave_1 added [ 47.236081][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.238494][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.247685][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.289505][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.292710][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.303793][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.310241][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.313076][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.323784][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.329461][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.332700][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.341875][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.346843][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.349471][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.358040][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.393092][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.395416][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.405104][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.444765][ T5931] hsr_slave_0: entered promiscuous mode [ 47.448054][ T5931] hsr_slave_1: entered promiscuous mode [ 47.501475][ T5933] hsr_slave_0: entered promiscuous mode [ 47.504268][ T5933] hsr_slave_1: entered promiscuous mode [ 47.507250][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.510852][ T5933] Cannot create hsr debugfs directory [ 47.622356][ T5938] hsr_slave_0: entered promiscuous mode [ 47.625644][ T5938] hsr_slave_1: entered promiscuous mode [ 47.628383][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.633574][ T5938] Cannot create hsr debugfs directory [ 47.640418][ T5943] hsr_slave_0: entered promiscuous mode [ 47.642840][ T5943] hsr_slave_1: entered promiscuous mode [ 47.645047][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.647604][ T5943] Cannot create hsr debugfs directory [ 48.020620][ T5945] Bluetooth: hci0: command tx timeout [ 48.100708][ T5945] Bluetooth: hci3: command tx timeout [ 48.100818][ T5940] Bluetooth: hci1: command tx timeout [ 48.100827][ T5948] Bluetooth: hci2: command tx timeout [ 48.173569][ T5931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.181259][ T5931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.189326][ T5931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.194470][ T5931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.211189][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.217750][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.224632][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.230282][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.284607][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.292548][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.298803][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.305626][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.401958][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.414374][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.428323][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.435201][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.462474][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.498692][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.515707][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.519186][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.536527][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.554143][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.556636][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.575656][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.583473][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.598107][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.622040][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.624641][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.628045][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.630500][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.644705][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.647438][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.672599][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.675818][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.767000][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.783140][ T40] audit: type=1400 audit(1746584848.480:114): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.812473][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.830585][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.833190][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.847459][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.852511][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.940640][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.989456][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.014091][ T5931] veth0_vlan: entered promiscuous mode [ 49.023436][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.036389][ T5931] veth1_vlan: entered promiscuous mode [ 49.073014][ T5938] veth0_vlan: entered promiscuous mode [ 49.089934][ T5938] veth1_vlan: entered promiscuous mode [ 49.100672][ T5931] veth0_macvtap: entered promiscuous mode [ 49.111139][ T5931] veth1_macvtap: entered promiscuous mode [ 49.120949][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.128067][ T5933] veth0_vlan: entered promiscuous mode [ 49.136434][ T5933] veth1_vlan: entered promiscuous mode [ 49.151455][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.164487][ T5938] veth0_macvtap: entered promiscuous mode [ 49.169889][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.195728][ T5938] veth1_macvtap: entered promiscuous mode [ 49.205481][ T5931] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.210131][ T5931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.223246][ T5931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.226628][ T5931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.261565][ T5943] veth0_vlan: entered promiscuous mode [ 49.273432][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.277641][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.283236][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.295940][ T5933] veth0_macvtap: entered promiscuous mode [ 49.302772][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.307550][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.312633][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.328026][ T5943] veth1_vlan: entered promiscuous mode [ 49.336572][ T5933] veth1_macvtap: entered promiscuous mode [ 49.348371][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.351912][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.355134][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.357995][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.370498][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.375394][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.380183][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.383766][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.387131][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.391383][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.395766][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.407334][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.412464][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.416757][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.422000][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.427613][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.447531][ T5933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.451986][ T5933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.455816][ T5933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.459707][ T5933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.465299][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.468001][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.511941][ T5943] veth0_macvtap: entered promiscuous mode [ 49.515607][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.518247][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.525278][ T5943] veth1_macvtap: entered promiscuous mode [ 49.537561][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.582816][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.582882][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.586376][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.593765][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.595251][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.602351][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.606505][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.611464][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.616628][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.619277][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.624116][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.627705][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.632354][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.636264][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.641373][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.644818][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.649490][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.655518][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.673537][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.676888][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.681914][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.684804][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.687804][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.691589][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.769251][ T5999] ======================================================= [ 49.769251][ T5999] WARNING: The mand mount option has been deprecated and [ 49.769251][ T5999] and is ignored by this kernel. Remove the mand [ 49.769251][ T5999] option from the mount to silence this warning. [ 49.769251][ T5999] ======================================================= [ 49.783221][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.786497][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.794835][ T5976] kernel write not supported for file /uinput (pid: 5976 comm: kworker/3:5) [ 49.822306][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.827146][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.831705][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 50.150715][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 50.154967][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 50.179781][ T5940] Bluetooth: hci2: command tx timeout [ 50.179805][ T5948] Bluetooth: hci1: command tx timeout [ 50.182587][ T5945] Bluetooth: hci3: command tx timeout [ 50.444707][ T5945] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 50.444747][ T5945] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 50.856349][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 50.874118][ T6043] hub 9-0:1.0: USB hub found [ 50.876906][ T6043] hub 9-0:1.0: 1 port detected [ 50.888457][ T6041] nbd: socks must be embedded in a SOCK_ITEM attr [ 50.893383][ T5936] block nbd64: NBD_DISCONNECT [ 50.924209][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 50.924224][ T40] audit: type=1400 audit(1746584850.620:166): avc: denied { bind } for pid=6047 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.937807][ T40] audit: type=1400 audit(1746584850.620:167): avc: denied { setopt } for pid=6047 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.958495][ T40] audit: type=1400 audit(1746584850.620:168): avc: denied { name_bind } for pid=6047 comm="syz.1.24" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.984206][ T40] audit: type=1400 audit(1746584850.620:169): avc: denied { node_bind } for pid=6047 comm="syz.1.24" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 51.067604][ T40] audit: type=1400 audit(1746584850.760:170): avc: denied { write } for pid=6056 comm="syz.1.28" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.067895][ T40] audit: type=1400 audit(1746584850.760:171): avc: denied { open } for pid=6056 comm="syz.1.28" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.068987][ T40] audit: type=1400 audit(1746584850.760:172): avc: denied { ioctl } for pid=6056 comm="syz.1.28" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.161279][ T40] audit: type=1400 audit(1746584850.860:173): avc: denied { ioctl } for pid=6059 comm="syz.2.29" path="socket:[8518]" dev="sockfs" ino=8518 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.185151][ T40] audit: type=1400 audit(1746584850.880:174): avc: denied { bind } for pid=6059 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.197137][ T40] audit: type=1400 audit(1746584850.890:175): avc: denied { create } for pid=6061 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.629869][ T5975] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.819728][ T5975] usb 8-1: Using ep0 maxpacket: 32 [ 51.824353][ T5975] usb 8-1: config 7 has an invalid interface number: 219 but max is 0 [ 51.829277][ T5975] usb 8-1: config 7 has no interface number 0 [ 51.831997][ T5975] usb 8-1: config 7 interface 219 has no altsetting 0 [ 51.837025][ T5975] usb 8-1: New USB device found, idVendor=17ef, idProduct=3054, bcdDevice=d1.59 [ 51.841443][ T5975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.844896][ T5975] usb 8-1: Product: syz [ 51.846748][ T5975] usb 8-1: Manufacturer: syz [ 51.848823][ T5975] usb 8-1: SerialNumber: syz [ 51.857377][ T5975] r8152-cfgselector 8-1: Unknown version 0x0000 [ 51.860405][ T5945] Bluetooth: hci0: command tx timeout [ 52.083232][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 52.136417][ T5975] r8152 8-1:7.219: Expected endpoints are not found [ 52.142452][ T5975] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 52.261043][ T5945] Bluetooth: hci3: command tx timeout [ 52.261125][ T5940] Bluetooth: hci1: command tx timeout [ 52.261175][ T5945] Bluetooth: hci2: command tx timeout [ 52.680023][ T5940] Bluetooth: Wrong link type (-71) [ 53.523029][ T835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.582346][ T835] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 53.941641][ T5940] Bluetooth: hci0: command tx timeout [ 53.967673][ T6176] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.980434][ T6178] netlink: 32 bytes leftover after parsing attributes in process `syz.0.78'. [ 54.350424][ T5945] Bluetooth: hci3: command tx timeout [ 54.351515][ T5940] Bluetooth: hci2: command tx timeout [ 56.117108][ T6176] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 56.143912][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 56.143937][ T40] audit: type=1400 audit(1746584855.840:230): avc: denied { create } for pid=6236 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.155797][ T40] audit: type=1400 audit(1746584855.850:231): avc: denied { bind } for pid=6236 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.162859][ T40] audit: type=1400 audit(1746584855.850:232): avc: denied { connect } for pid=6236 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.169434][ T40] audit: type=1400 audit(1746584855.850:233): avc: denied { read } for pid=6236 comm="syz.0.101" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.190392][ T40] audit: type=1400 audit(1746584855.890:234): avc: denied { create } for pid=6231 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.201093][ T40] audit: type=1400 audit(1746584855.900:235): avc: denied { write } for pid=6231 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.271469][ T40] audit: type=1400 audit(1746584855.960:236): avc: denied { write } for pid=6231 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.278070][ T40] audit: type=1400 audit(1746584855.960:237): avc: denied { connect } for pid=6242 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.285219][ T40] audit: type=1400 audit(1746584855.960:238): avc: denied { write } for pid=6242 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.301008][ T6240] infiniband syz2: set down [ 56.303933][ T6240] infiniband syz2: added ipvlan1 [ 56.306198][ T40] audit: type=1400 audit(1746584856.000:239): avc: denied { read } for pid=6242 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.384800][ T6240] RDS/IB: syz2: added [ 56.387162][ T6240] smc: adding ib device syz2 with port count 1 [ 56.389409][ T6240] smc: ib device syz2 port 1 has pnetid [ 56.770518][ T6268] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 57.027560][ T6274] Zero length message leads to an empty skb [ 58.592426][ T6315] block nbd3: NBD_DISCONNECT [ 58.595889][ T6315] block nbd3: Disconnected due to user request. [ 58.598941][ T6315] block nbd3: shutting down sockets [ 60.028754][ T6358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.031524][ T6358] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.035877][ T6358] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.042767][ T6358] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.049740][ T6358] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.061370][ T6358] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.064104][ T6358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.066090][ T6358] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.075920][ T6358] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.844226][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 61.214040][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.214054][ T40] audit: type=1400 audit(1746584860.910:255): avc: denied { read write } for pid=6408 comm="syz.3.163" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.226790][ T40] audit: type=1400 audit(1746584860.910:256): avc: denied { open } for pid=6408 comm="syz.3.163" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.236404][ T40] audit: type=1400 audit(1746584860.910:257): avc: denied { append } for pid=6408 comm="syz.3.163" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.273534][ T6411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.278397][ T40] audit: type=1400 audit(1746584860.970:258): avc: denied { ioctl } for pid=6410 comm="syz.3.164" path="socket:[11464]" dev="sockfs" ino=11464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.279771][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 61.429979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.462055][ T40] audit: type=1400 audit(1746584861.160:259): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.706364][ T40] audit: type=1400 audit(1746584861.400:260): avc: denied { ioctl } for pid=6415 comm="syz.1.166" path="socket:[11479]" dev="sockfs" ino=11479 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.898806][ T6422] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 61.940705][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.109887][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.109972][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.875423][ T6447] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.048660][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 63.497341][ T6464] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 63.670689][ T40] audit: type=1400 audit(1746584863.370:261): avc: denied { bind } for pid=6472 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 63.677211][ T6473] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.678866][ T40] audit: type=1400 audit(1746584863.370:262): avc: denied { connect } for pid=6472 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 63.914388][ T40] audit: type=1400 audit(1746584863.610:263): avc: denied { bind } for pid=6475 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.922054][ T40] audit: type=1400 audit(1746584863.610:264): avc: denied { node_bind } for pid=6475 comm="syz.1.189" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 64.029781][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.189740][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.189778][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.815945][ T6503] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.864300][ T6506] block nbd0: NBD_DISCONNECT [ 65.818521][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 65.824398][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 65.826728][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.829355][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.832000][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.834626][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.837252][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.840081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.842630][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.845309][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.847879][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.850587][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.853157][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.855794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.858354][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.861044][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.863661][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.866372][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.868957][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.871674][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.874226][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.876839][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.879430][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.882108][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.884738][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.887370][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.890082][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.892711][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.895302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.898085][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.900766][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.903425][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.905671][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.908148][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.911184][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.914458][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.917711][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.921098][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.924334][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.927550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.930813][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.934030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.937238][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.940535][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.943744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.946946][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.950238][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.953500][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.956721][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.960000][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.963201][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.966639][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.969905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.973107][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.976257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.979478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.982734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.985931][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.989092][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.992404][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.995555][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.998775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.002029][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.005226][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.008353][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.011666][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.014803][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.017997][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.020978][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.023550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.026079][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.028653][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.031294][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.033871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.037005][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.039913][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.042443][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.045081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.047608][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.050255][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.052792][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.055328][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.057833][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.060520][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.063075][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.065637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.068152][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.070794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.073297][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.075836][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.078337][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.081256][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.083825][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.086381][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.088910][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.091589][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.094093][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.096638][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.099159][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.099853][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.101798][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.106244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.108811][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.111436][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.113994][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.116506][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.119074][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.121674][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.124252][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.126778][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.129367][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.132029][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.134594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.137103][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.139762][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.142314][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.144872][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.147399][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.150186][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.152738][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.155318][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.157846][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.160530][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.163045][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.165607][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.168117][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.170774][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.173307][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.175884][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.178419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.181123][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.183634][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.186165][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.188682][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.191306][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.193827][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.196366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.198905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.201584][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.204110][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.206652][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.209161][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.211788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.214286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.216844][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.219370][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.222015][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.224535][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.227073][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.229643][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.232196][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.234713][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.237243][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.239871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.242397][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.244883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.247410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.250009][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.252577][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.255092][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.257648][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.259645][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.260419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.264931][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.267451][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.270093][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.272641][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.275189][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.277712][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.280443][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.282980][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.285571][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.288101][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.290724][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.293245][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.295804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.298430][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.301111][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.303647][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.306188][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.308710][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.311558][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.311567][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.314065][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.314110][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.321227][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.323771][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.326282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.328853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.331453][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.334001][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.336532][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.339113][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.341762][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.344324][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.346847][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.349393][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.351982][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.354534][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.357041][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.359713][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.362257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.364804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.367306][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.369931][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.372478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.375046][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.377554][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.380221][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.382742][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.385288][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.387807][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.390713][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.393266][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.395920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.398518][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.401178][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.403869][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.406436][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.408949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.411590][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.414105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.416671][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.419191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.421825][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.424348][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.426902][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.429398][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.432021][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.434545][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.437103][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.439755][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.441581][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 66.441590][ T40] audit: type=1400 audit(1746584866.140:267): avc: denied { rename } for pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.442330][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.444344][ T40] audit: type=1400 audit(1746584866.140:268): avc: denied { unlink } for pid=5330 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.451378][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.451430][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.454082][ T40] audit: type=1400 audit(1746584866.140:269): avc: denied { create } for pid=5330 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.461357][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.461418][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.461427][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.461478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.461487][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.461522][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.461529][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.461565][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.461572][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.461616][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.498597][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.501417][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.503968][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.506521][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.509037][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.511701][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.514231][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.516808][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.519400][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.522058][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.524579][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.527135][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.529743][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.532366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.534900][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.537445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.540077][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.542633][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.545150][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.547714][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.550298][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.552863][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.555375][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.557927][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.560563][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.563114][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.565632][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.568182][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.570766][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.573314][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.575832][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.578379][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.581106][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.583664][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.586174][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.588747][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.591337][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.593906][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.596423][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.598983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.601588][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.604147][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.606673][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.609254][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.611843][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.614382][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 66.616938][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.700246][ T40] audit: type=1400 audit(1746584866.400:270): avc: denied { remount } for pid=6543 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.725443][ T40] audit: type=1400 audit(1746584866.420:271): avc: denied { override_creds } for pid=6547 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.012488][ T40] audit: type=1400 audit(1746584866.710:272): avc: denied { setopt } for pid=6558 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.020162][ T40] audit: type=1400 audit(1746584866.710:273): avc: denied { getopt } for pid=6558 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.315486][ T5940] Bluetooth: hci1: Malformed Event: 0x2f [ 67.341436][ T40] audit: type=1400 audit(1746584867.040:274): avc: denied { create } for pid=6566 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 67.341932][ T6567] syz.3.224 uses obsolete (PF_INET,SOCK_PACKET) [ 67.353100][ T6567] netlink: 'syz.3.224': attribute type 11 has an invalid length. [ 67.436170][ T5940] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 67.647685][ T40] audit: type=1400 audit(1746584867.340:275): avc: denied { bind } for pid=6590 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.810824][ T5940] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 67.839629][ T40] audit: type=1400 audit(1746584867.530:276): avc: denied { map } for pid=6618 comm="syz.1.247" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.113128][ T6633] netlink: 'syz.1.253': attribute type 10 has an invalid length. [ 68.117358][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.121220][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.130003][ T6633] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.133023][ T6633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.136453][ T6633] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.138835][ T6633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.144970][ T6633] team0: Port device bridge0 added [ 68.351800][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 68.431945][ T6656] tipc: Started in network mode [ 68.433997][ T6656] tipc: Node identity 8, cluster identity 4711 [ 68.436521][ T6656] tipc: Node number set to 8 [ 68.438908][ T6656] tipc: Cannot configure node identity twice [ 68.657529][ T6683] loop2: detected capacity change from 0 to 7 [ 68.673704][ T6683] Dev loop2: unable to read RDB block 7 [ 68.676189][ T6683] loop2: unable to read partition table [ 68.678710][ T6683] loop2: partition table beyond EOD, truncated [ 68.681558][ T6683] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 69.748608][ T6735] process 'syz.3.282' launched '/dev/fd/7' with NULL argv: empty string added [ 69.931928][ T6736] capability: warning: `syz.2.294' uses deprecated v2 capabilities in a way that may be insecure [ 70.583146][ T6755] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 70.931561][ T6774] block nbd3: shutting down sockets [ 70.966033][ T6785] xt_hashlimit: size too large, truncated to 1048576 [ 71.153254][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.155441][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.480164][ T5940] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 71.484194][ T5940] Bluetooth: hci1: Injecting HCI hardware error event [ 71.487773][ T5940] Bluetooth: hci1: hardware error 0x00 [ 71.571004][ T6826] loop7: detected capacity change from 0 to 2 [ 71.576079][ T5937] Dev loop7: unable to read RDB block 2 [ 71.578278][ T5937] loop7: unable to read partition table [ 71.582029][ T5937] loop7: partition table beyond EOD, truncated [ 71.587771][ T6826] Dev loop7: unable to read RDB block 2 [ 71.590262][ T6826] loop7: unable to read partition table [ 71.592256][ T6826] loop7: partition table beyond EOD, truncated [ 71.595369][ T6826] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 71.595369][ T6826] ) failed (rc=-5) [ 73.039502][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 73.043432][ T40] audit: type=1400 audit(1746584872.730:292): avc: denied { mount } for pid=6848 comm="syz.1.335" name="/" dev="rpc_pipefs" ino=11828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 73.271572][ T6861] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.540459][ T5940] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 73.796500][ T40] audit: type=1400 audit(1746584873.490:293): avc: denied { write } for pid=6866 comm="syz.1.341" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.805685][ T6867] binder: 6866:6867 ioctl c0306201 2000000003c0 returned -14 [ 74.026033][ T6876] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 74.080160][ T6877] block nbd3: shutting down sockets [ 74.088615][ T6882] FAULT_INJECTION: forcing a failure. [ 74.088615][ T6882] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.093421][ T6882] CPU: 2 UID: 0 PID: 6882 Comm: syz.1.347 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 74.093436][ T6882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.093442][ T6882] Call Trace: [ 74.093446][ T6882] [ 74.093449][ T6882] dump_stack_lvl+0x16c/0x1f0 [ 74.093475][ T6882] should_fail_ex+0x512/0x640 [ 74.093496][ T6882] _copy_from_user+0x2e/0xd0 [ 74.093519][ T6882] move_addr_to_kernel+0x65/0x170 [ 74.093544][ T6882] __sys_bind+0x11b/0x260 [ 74.093565][ T6882] ? __pfx___sys_bind+0x10/0x10 [ 74.093586][ T6882] ? __fget_files+0x20e/0x3c0 [ 74.093618][ T6882] ? __pfx_ksys_write+0x10/0x10 [ 74.093647][ T6882] __x64_sys_bind+0x72/0xb0 [ 74.093668][ T6882] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.093682][ T6882] do_syscall_64+0xcd/0x260 [ 74.093696][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.093707][ T6882] RIP: 0033:0x7f5b06f8e969 [ 74.093715][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.093725][ T6882] RSP: 002b:00007f5b07ece038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 74.093735][ T6882] RAX: ffffffffffffffda RBX: 00007f5b071b5fa0 RCX: 00007f5b06f8e969 [ 74.093741][ T6882] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 0000000000000004 [ 74.093747][ T6882] RBP: 00007f5b07ece090 R08: 0000000000000000 R09: 0000000000000000 [ 74.093752][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.093758][ T6882] R13: 0000000000000000 R14: 00007f5b071b5fa0 R15: 00007ffe10571628 [ 74.093770][ T6882] [ 74.136496][ T40] audit: type=1400 audit(1746584873.830:294): avc: denied { mount } for pid=6883 comm="syz.3.348" name="/" dev="hugetlbfs" ino=11870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 74.179376][ T40] audit: type=1400 audit(1746584873.860:295): avc: denied { remount } for pid=6883 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 74.209788][ T40] audit: type=1400 audit(1746584873.900:296): avc: denied { read } for pid=6889 comm="syz.1.351" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.226155][ T40] audit: type=1400 audit(1746584873.900:297): avc: denied { open } for pid=6889 comm="syz.1.351" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.238635][ T40] audit: type=1400 audit(1746584873.910:298): avc: denied { ioctl } for pid=6889 comm="syz.1.351" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.249419][ T40] audit: type=1400 audit(1746584873.920:299): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 74.258950][ T40] audit: type=1400 audit(1746584873.960:300): avc: denied { sqpoll } for pid=6894 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.375650][ T40] audit: type=1400 audit(1746584874.070:301): avc: denied { mounton } for pid=6905 comm="syz.1.355" path="/98/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 74.407766][ T6909] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 74.413733][ T6909] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 75.167413][ T6934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6934 comm=syz.3.365 [ 75.319330][ T6952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.371'. [ 75.634005][ T6976] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 75.639306][ T6976] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.709197][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 75.906129][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 76.316287][ T7014] overlayfs: conflicting options: userxattr,verity=on [ 77.107343][ T7020] binder: 7018:7020 ioctl c0306201 2000000003c0 returned -14 [ 77.183567][ T7026] binder: BINDER_SET_CONTEXT_MGR already set [ 77.187284][ T7026] binder: 7025:7026 ioctl 4018620d 200000000100 returned -16 [ 77.624491][ T7038] nbd: must specify a device to reconfigure [ 77.773829][ T7040] FAULT_INJECTION: forcing a failure. [ 77.773829][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.788928][ T7040] CPU: 1 UID: 0 PID: 7040 Comm: syz.1.405 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 77.788952][ T7040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.788961][ T7040] Call Trace: [ 77.788966][ T7040] [ 77.788971][ T7040] dump_stack_lvl+0x16c/0x1f0 [ 77.788995][ T7040] should_fail_ex+0x512/0x640 [ 77.789017][ T7040] _copy_from_user+0x2e/0xd0 [ 77.789039][ T7040] do_sock_getsockopt+0x5f4/0x800 [ 77.789061][ T7040] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 77.789078][ T7040] ? __fget_files+0x204/0x3c0 [ 77.789113][ T7040] __sys_getsockopt+0x12f/0x260 [ 77.789132][ T7040] __x64_sys_getsockopt+0xbd/0x160 [ 77.789145][ T7040] ? do_syscall_64+0x91/0x260 [ 77.789165][ T7040] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.789183][ T7040] do_syscall_64+0xcd/0x260 [ 77.789203][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.789218][ T7040] RIP: 0033:0x7f5b06f8e969 [ 77.789231][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.789245][ T7040] RSP: 002b:00007f5b07ece038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 77.789259][ T7040] RAX: ffffffffffffffda RBX: 00007f5b071b5fa0 RCX: 00007f5b06f8e969 [ 77.789269][ T7040] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 77.789277][ T7040] RBP: 00007f5b07ece090 R08: 00002000000002c0 R09: 0000000000000000 [ 77.789286][ T7040] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 77.789295][ T7040] R13: 0000000000000000 R14: 00007f5b071b5fa0 R15: 00007ffe10571628 [ 77.789313][ T7040] [ 77.966662][ T7046] block nbd1: NBD_DISCONNECT [ 78.013969][ T7050] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 78.019758][ T7051] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 78.093387][ T7050] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 78.205408][ T7050] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 78.208842][ T7050] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 78.217681][ T7050] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 78.228803][ T7050] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 78.249280][ T7050] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 78.252957][ T7050] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 78.282988][ T7050] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 78.390073][ T7077] FAULT_INJECTION: forcing a failure. [ 78.390073][ T7077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.398982][ T7077] CPU: 2 UID: 0 PID: 7077 Comm: syz.3.419 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 78.399006][ T7077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.399015][ T7077] Call Trace: [ 78.399021][ T7077] [ 78.399027][ T7077] dump_stack_lvl+0x16c/0x1f0 [ 78.399054][ T7077] should_fail_ex+0x512/0x640 [ 78.399079][ T7077] _copy_from_user+0x2e/0xd0 [ 78.399104][ T7077] sctp_getsockopt+0x29db/0x6b90 [ 78.399122][ T7077] ? avc_has_perm_noaudit+0x117/0x3b0 [ 78.399144][ T7077] ? __pfx_sctp_getsockopt+0x10/0x10 [ 78.399164][ T7077] ? avc_has_perm+0x11a/0x1c0 [ 78.399180][ T7077] ? __pfx_avc_has_perm+0x10/0x10 [ 78.399207][ T7077] ? sock_has_perm+0x259/0x2f0 [ 78.399233][ T7077] ? find_held_lock+0x2b/0x80 [ 78.399253][ T7077] ? __might_fault+0xe3/0x190 [ 78.399270][ T7077] ? __might_fault+0xe3/0x190 [ 78.399283][ T7077] ? __might_fault+0x13b/0x190 [ 78.399305][ T7077] ? sock_common_getsockopt+0x21/0xb0 [ 78.399325][ T7077] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 78.399348][ T7077] do_sock_getsockopt+0x3fc/0x800 [ 78.399372][ T7077] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 78.399393][ T7077] ? __fget_files+0x204/0x3c0 [ 78.399433][ T7077] __sys_getsockopt+0x12f/0x260 [ 78.399455][ T7077] __x64_sys_getsockopt+0xbd/0x160 [ 78.399470][ T7077] ? do_syscall_64+0x91/0x260 [ 78.399492][ T7077] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.399513][ T7077] do_syscall_64+0xcd/0x260 [ 78.399543][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.399579][ T7077] RIP: 0033:0x7f53f6b8e969 [ 78.399594][ T7077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.399611][ T7077] RSP: 002b:00007f53f7a61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 78.399628][ T7077] RAX: ffffffffffffffda RBX: 00007f53f6db5fa0 RCX: 00007f53f6b8e969 [ 78.399638][ T7077] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 78.399647][ T7077] RBP: 00007f53f7a61090 R08: 00002000000002c0 R09: 0000000000000000 [ 78.399656][ T7077] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 78.399666][ T7077] R13: 0000000000000000 R14: 00007f53f6db5fa0 R15: 00007ffee9601c88 [ 78.399687][ T7077] [ 78.540411][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 78.540429][ T40] audit: type=1400 audit(1746584878.230:316): avc: denied { ioctl } for pid=7081 comm="syz.2.417" path="socket:[12074]" dev="sockfs" ino=12074 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.604031][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 78.681915][ T40] audit: type=1400 audit(1746584878.360:317): avc: denied { getattr } for pid=7091 comm="syz.3.421" name="/" dev="9p" ino=35913821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.704661][ T5940] Bluetooth: hci2: ISO packet too small [ 78.719886][ T40] audit: type=1400 audit(1746584878.360:318): avc: denied { mounton } for pid=7091 comm="syz.3.421" path="/87/file0" dev="9p" ino=35913821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.771480][ T7103] loop7: detected capacity change from 0 to 2 [ 78.778529][ T7103] Dev loop7: unable to read RDB block 2 [ 78.781411][ T7103] loop7: unable to read partition table [ 78.784515][ T7103] loop7: partition table beyond EOD, truncated [ 78.790536][ T7103] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 78.790536][ T7103] ) failed (rc=-5) [ 78.816951][ T7106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.426'. [ 78.820876][ T7108] netlink: 80 bytes leftover after parsing attributes in process `syz.2.427'. [ 78.879899][ T40] audit: type=1400 audit(1746584878.570:319): avc: denied { listen } for pid=7107 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 78.909948][ T7111] binder: 7104:7111 ioctl c018620c 200000000000 returned -22 [ 79.555679][ T40] audit: type=1400 audit(1746584879.250:320): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.797661][ T40] audit: type=1400 audit(1746584879.490:321): avc: denied { create } for pid=7114 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.958837][ T40] audit: type=1400 audit(1746584879.640:322): avc: denied { getopt } for pid=7114 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.173295][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 80.430792][ T40] audit: type=1400 audit(1746584880.120:323): avc: denied { ioctl } for pid=7146 comm="syz.2.440" path="socket:[10971]" dev="sockfs" ino=10971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.472100][ T40] audit: type=1400 audit(1746584880.120:324): avc: denied { accept } for pid=7146 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.919379][ T40] audit: type=1400 audit(1746584880.600:325): avc: denied { bind } for pid=7165 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.395582][ T29] cfg80211: failed to load regulatory.db [ 81.419112][ T7182] binder: BINDER_SET_CONTEXT_MGR already set [ 81.421502][ T7182] binder: 7181:7182 ioctl 4018620d 2000000000c0 returned -16 [ 81.425948][ T7182] binder: BINDER_SET_CONTEXT_MGR already set [ 81.432346][ T7182] binder: 7181:7182 ioctl 4018620d 200000000040 returned -16 [ 81.435912][ T7182] binder: 7181:7182 ioctl c0306201 2000000003c0 returned -14 [ 81.823022][ T7197] 9pnet_fd: p9_fd_create_unix (7197): problem connecting socket: ./file0: -13 [ 82.382604][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 82.697210][ T7246] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 83.626461][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 83.626479][ T40] audit: type=1400 audit(1746584883.320:337): avc: denied { connect } for pid=7264 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.700145][ T40] audit: type=1326 audit(1746584883.380:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7267 comm="syz.0.484" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f850a78e969 code=0x0 [ 84.650847][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 84.883245][ T40] audit: type=1400 audit(1746584884.560:339): avc: denied { lock } for pid=7306 comm="syz.2.496" path="socket:[12286]" dev="sockfs" ino=12286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 84.930548][ T7313] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 84.946693][ T7316] binder: 7315:7316 ioctl c0306201 2000000003c0 returned -14 [ 84.947680][ T7313] Error validating options; rc = [-22] [ 84.967741][ T7313] validate_nla: 26 callbacks suppressed [ 84.967757][ T7313] netlink: 'syz.0.498': attribute type 29 has an invalid length. [ 84.994284][ T7321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.502'. [ 85.055862][ T7321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=7321 comm=syz.1.502 [ 85.191324][ T7330] block nbd0: shutting down sockets [ 85.260621][ T40] audit: type=1400 audit(1746584884.930:340): avc: denied { mounton } for pid=7341 comm="syz.1.509" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 85.389308][ T40] audit: type=1400 audit(1746584885.080:341): avc: denied { read } for pid=7350 comm="syz.3.515" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.434212][ T40] audit: type=1400 audit(1746584885.080:342): avc: denied { open } for pid=7350 comm="syz.3.515" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.475995][ C2] vkms_vblank_simulate: vblank timer overrun [ 85.501928][ T40] audit: type=1400 audit(1746584885.090:343): avc: denied { ioctl } for pid=7353 comm="syz.2.514" path="socket:[13598]" dev="sockfs" ino=13598 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.517904][ T40] audit: type=1400 audit(1746584885.100:344): avc: denied { ioctl } for pid=7350 comm="syz.3.515" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.518116][ T7365] NILFS (nbd0): device size too small [ 85.704773][ C2] vkms_vblank_simulate: vblank timer overrun [ 85.974557][ T7386] FAULT_INJECTION: forcing a failure. [ 85.974557][ T7386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.988380][ T7386] CPU: 2 UID: 0 PID: 7386 Comm: syz.0.526 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 85.988409][ T7386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.988429][ T7386] Call Trace: [ 85.988436][ T7386] [ 85.988443][ T7386] dump_stack_lvl+0x16c/0x1f0 [ 85.988469][ T7386] should_fail_ex+0x512/0x640 [ 85.988492][ T7386] _copy_from_user+0x2e/0xd0 [ 85.988517][ T7386] sctp_setsockopt+0x2045/0xb870 [ 85.988535][ T7386] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 85.988559][ T7386] ? proc_fail_nth_write+0x9f/0x250 [ 85.988587][ T7386] ? __pfx_sctp_setsockopt+0x10/0x10 [ 85.988601][ T7386] ? __lock_acquire+0x5ca/0x1ba0 [ 85.988632][ T7386] ? selinux_socket_setsockopt+0x6a/0x80 [ 85.988651][ T7386] ? sock_common_setsockopt+0x2e/0xf0 [ 85.988672][ T7386] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 85.988693][ T7386] do_sock_setsockopt+0x221/0x470 [ 85.988713][ T7386] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 85.988746][ T7386] __sys_setsockopt+0x1a0/0x230 [ 85.988767][ T7386] __x64_sys_setsockopt+0xbd/0x160 [ 85.988782][ T7386] ? do_syscall_64+0x91/0x260 [ 85.988803][ T7386] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.988824][ T7386] do_syscall_64+0xcd/0x260 [ 85.988848][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.988865][ T7386] RIP: 0033:0x7f850a78e969 [ 85.988880][ T7386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.988895][ T7386] RSP: 002b:00007f850b538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 85.988912][ T7386] RAX: ffffffffffffffda RBX: 00007f850a9b5fa0 RCX: 00007f850a78e969 [ 85.988922][ T7386] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000003 [ 85.988932][ T7386] RBP: 00007f850b538090 R08: 0000000000000090 R09: 0000000000000000 [ 85.988941][ T7386] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 85.988951][ T7386] R13: 0000000000000000 R14: 00007f850a9b5fa0 R15: 00007ffcff8e88a8 [ 85.988971][ T7386] [ 86.032313][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 86.034911][ C2] vkms_vblank_simulate: vblank timer overrun [ 86.168779][ C2] vkms_vblank_simulate: vblank timer overrun [ 86.171424][ C2] hrtimer: interrupt took 181827723 ns [ 86.271675][ C2] vkms_vblank_simulate: vblank timer overrun [ 86.472730][ T40] audit: type=1400 audit(1746584886.150:345): avc: denied { execheap } for pid=7406 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.535390][ T40] audit: type=1400 audit(1746584886.150:346): avc: denied { execute } for pid=7406 comm="syz.0.532" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 86.663385][ T7424] FAULT_INJECTION: forcing a failure. [ 86.663385][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.679378][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.3.540 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 86.679402][ T7424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.679427][ T7424] Call Trace: [ 86.679433][ T7424] [ 86.679439][ T7424] dump_stack_lvl+0x16c/0x1f0 [ 86.679467][ T7424] should_fail_ex+0x512/0x640 [ 86.679493][ T7424] _copy_to_user+0x32/0xd0 [ 86.679518][ T7424] simple_read_from_buffer+0xcb/0x170 [ 86.679545][ T7424] proc_fail_nth_read+0x197/0x270 [ 86.679588][ T7424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.679614][ T7424] ? rw_verify_area+0xcf/0x680 [ 86.679634][ T7424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.679658][ T7424] vfs_read+0x1de/0xc70 [ 86.679683][ T7424] ? __pfx___mutex_lock+0x10/0x10 [ 86.679705][ T7424] ? __pfx_vfs_read+0x10/0x10 [ 86.679734][ T7424] ? __fget_files+0x20e/0x3c0 [ 86.679767][ T7424] ksys_read+0x12a/0x240 [ 86.679789][ T7424] ? __pfx_ksys_read+0x10/0x10 [ 86.679819][ T7424] do_syscall_64+0xcd/0x260 [ 86.679842][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.679858][ T7424] RIP: 0033:0x7f53f6b8d37c [ 86.679873][ T7424] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 86.679887][ T7424] RSP: 002b:00007f53f7a61030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.679903][ T7424] RAX: ffffffffffffffda RBX: 00007f53f6db5fa0 RCX: 00007f53f6b8d37c [ 86.680019][ T7424] RDX: 000000000000000f RSI: 00007f53f7a610a0 RDI: 0000000000000005 [ 86.680029][ T7424] RBP: 00007f53f7a61090 R08: 0000000000000000 R09: 0000000000000000 [ 86.680038][ T7424] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 86.680047][ T7424] R13: 0000000000000000 R14: 00007f53f6db5fa0 R15: 00007ffee9601c88 [ 86.680070][ T7424] [ 87.891154][ T7454] bridge_slave_0: default FDB implementation only supports local addresses [ 88.536746][ C2] vkms_vblank_simulate: vblank timer overrun [ 88.902581][ T7480] mmap: syz.0.559 (7480) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.166266][ T7497] program syz.0.565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.170852][ T7497] ata1.00: non-matching transfer count (-2011401270/0) [ 89.481398][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 89.481416][ T40] audit: type=1400 audit(1746584889.180:352): avc: denied { setopt } for pid=7507 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.488271][ T7508] tipc: Started in network mode [ 89.496416][ T7508] tipc: Node identity 4000004, cluster identity 4711 [ 89.499069][ T7508] tipc: Node number set to 67108868 [ 90.516402][ T40] audit: type=1400 audit(1746584890.210:353): avc: denied { bind } for pid=7520 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.685761][ T7530] Bluetooth: MGMT ver 1.23 [ 90.686642][ T40] audit: type=1400 audit(1746584890.380:354): avc: denied { write } for pid=7529 comm="syz.0.577" path="socket:[13046]" dev="sockfs" ino=13046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.729540][ T7530] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 90.914508][ T7537] fuse: Bad value for 'fd' [ 91.782332][ T7561] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 91.829769][ T40] audit: type=1400 audit(1746584891.490:355): avc: denied { setopt } for pid=7560 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.255433][ T5940] Bluetooth: hci2: Malformed LE Event: 0x02 [ 92.271020][ T7573] tmpfs: Bad value for 'mpol' [ 92.319957][ T40] audit: type=1400 audit(1746584891.940:356): avc: denied { mount } for pid=7572 comm="syz.1.591" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 92.328934][ T7575] netlink: 'syz.3.592': attribute type 5 has an invalid length. [ 92.367454][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.377543][ T40] audit: type=1400 audit(1746584892.060:357): avc: denied { search } for pid=5330 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.385486][ T7575] netlink: 'syz.3.592': attribute type 5 has an invalid length. [ 92.749930][ T40] audit: type=1400 audit(1746584892.440:358): avc: denied { bind } for pid=7582 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.910098][ T7590] netlink: 'syz.2.597': attribute type 7 has an invalid length. [ 93.774247][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.815057][ T40] audit: type=1400 audit(1746584893.510:359): avc: denied { write } for pid=7621 comm="syz.3.609" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.870606][ T40] audit: type=1400 audit(1746584893.560:360): avc: denied { open } for pid=7621 comm="syz.3.609" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.892386][ T40] audit: type=1400 audit(1746584893.560:361): avc: denied { ioctl } for pid=7621 comm="syz.3.609" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.042344][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.226027][ T7638] capability: warning: `syz.3.615' uses 32-bit capabilities (legacy support in use) [ 94.261861][ T7638] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 94.309198][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.511130][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 94.609008][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 94.609024][ T40] audit: type=1400 audit(1746584894.300:364): avc: denied { write } for pid=7651 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.668549][ T40] audit: type=1400 audit(1746584894.330:365): avc: denied { create } for pid=7651 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.715390][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.777109][ T40] audit: type=1400 audit(1746584894.330:366): avc: denied { getopt } for pid=7651 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.810004][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.917121][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.961133][ T7667] netlink: 11 bytes leftover after parsing attributes in process `syz.0.627'. [ 95.022466][ T40] audit: type=1400 audit(1746584894.720:367): avc: denied { create } for pid=7668 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.059707][ T7675] netlink: 164 bytes leftover after parsing attributes in process `syz.0.629'. [ 95.075159][ T7675] netlink: 164 bytes leftover after parsing attributes in process `syz.0.629'. [ 95.098619][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz.0.629'. [ 95.229407][ T7685] raw_sendmsg: syz.1.631 forgot to set AF_INET. Fix it! [ 96.334731][ T7709] netlink: 'syz.0.639': attribute type 12 has an invalid length. [ 96.342208][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.344178][ T7709] syz.0.639: attempt to access beyond end of device [ 96.344178][ T7709] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 96.363648][ T7709] EXT4-fs (nbd0): unable to read superblock [ 96.436227][ T40] audit: type=1400 audit(1746584896.130:368): avc: denied { getopt } for pid=7708 comm="syz.0.639" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.568086][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 96.572826][ T7714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.640'. [ 97.436037][ T40] audit: type=1400 audit(1746584897.130:369): avc: denied { write } for pid=7733 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.540056][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.874200][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.893998][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 98.125346][ T7756] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 98.147413][ T7756] batman_adv: batadv0: Adding interface: team0 [ 98.150651][ T7756] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.167731][ T7756] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 98.177658][ T7756] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 98.199172][ T7756] netlink: 2 bytes leftover after parsing attributes in process `syz.1.653'. [ 98.214046][ T7756] team0: entered promiscuous mode [ 98.222956][ T7756] team_slave_0: entered promiscuous mode [ 98.232535][ T7756] team_slave_1: entered promiscuous mode [ 98.246235][ T7756] bridge0: entered promiscuous mode [ 98.258920][ T7756] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.266316][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.273278][ T7756] batman_adv: batadv0: Interface activated: team0 [ 98.273364][ T7756] batman_adv: batadv0: Interface deactivated: team0 [ 98.273382][ T7756] batman_adv: batadv0: Removing interface: team0 [ 98.297109][ T7756] bridge0: port 3(team0) entered blocking state [ 98.302067][ T7756] bridge0: port 3(team0) entered disabled state [ 98.305746][ T7756] team0: entered allmulticast mode [ 98.307965][ T7756] team_slave_0: entered allmulticast mode [ 98.311735][ T7756] team_slave_1: entered allmulticast mode [ 98.315531][ T7756] bridge0: entered allmulticast mode [ 98.321241][ T7756] team0: left allmulticast mode [ 98.324268][ T7756] team_slave_0: left allmulticast mode [ 98.327922][ T7756] team_slave_1: left allmulticast mode [ 98.331884][ T7756] bridge0: left allmulticast mode [ 98.610674][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.154129][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.438360][ T7793] binder: BINDER_SET_CONTEXT_MGR already set [ 99.448043][ T7793] binder: 7792:7793 ioctl 4018620d 2000000000c0 returned -16 [ 99.482875][ T7793] binder: BINDER_SET_CONTEXT_MGR already set [ 99.485411][ T7793] binder: 7792:7793 ioctl 4018620d 200000000040 returned -16 [ 99.492066][ T7793] binder: 7792:7793 ioctl c0306201 2000000003c0 returned -14 [ 99.559424][ T7795] FAULT_INJECTION: forcing a failure. [ 99.559424][ T7795] name failslab, interval 1, probability 0, space 0, times 0 [ 99.568029][ T7795] CPU: 2 UID: 0 PID: 7795 Comm: syz.3.666 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 99.568059][ T7795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.568069][ T7795] Call Trace: [ 99.568075][ T7795] [ 99.568081][ T7795] dump_stack_lvl+0x16c/0x1f0 [ 99.568110][ T7795] should_fail_ex+0x512/0x640 [ 99.568130][ T7795] ? fs_reclaim_acquire+0xae/0x150 [ 99.568171][ T7795] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 99.568197][ T7795] should_failslab+0xc2/0x120 [ 99.568216][ T7795] __kmalloc_noprof+0xd2/0x510 [ 99.568247][ T7795] tomoyo_realpath_from_path+0xc2/0x6e0 [ 99.568273][ T7795] ? tomoyo_profile+0x47/0x60 [ 99.568300][ T7795] tomoyo_path_number_perm+0x245/0x580 [ 99.568320][ T7795] ? tomoyo_path_number_perm+0x237/0x580 [ 99.568341][ T7795] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 99.568363][ T7795] ? find_held_lock+0x2b/0x80 [ 99.568405][ T7795] ? find_held_lock+0x2b/0x80 [ 99.568422][ T7795] ? hook_file_ioctl_common+0x145/0x410 [ 99.568445][ T7795] ? __fget_files+0x20e/0x3c0 [ 99.568474][ T7795] security_file_ioctl+0x9b/0x240 [ 99.568498][ T7795] __x64_sys_ioctl+0xb7/0x200 [ 99.568522][ T7795] do_syscall_64+0xcd/0x260 [ 99.568547][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.568587][ T7795] RIP: 0033:0x7f53f6b8e969 [ 99.568601][ T7795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.568682][ T7795] RSP: 002b:00007f53f7a61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.568699][ T7795] RAX: ffffffffffffffda RBX: 00007f53f6db5fa0 RCX: 00007f53f6b8e969 [ 99.568708][ T7795] RDX: 0000200000000540 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 99.568718][ T7795] RBP: 00007f53f7a61090 R08: 0000000000000000 R09: 0000000000000000 [ 99.568727][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.568735][ T7795] R13: 0000000000000000 R14: 00007f53f6db5fa0 R15: 00007ffee9601c88 [ 99.568758][ T7795] [ 99.568836][ T7795] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.026130][ T40] audit: type=1400 audit(1746584900.720:370): avc: denied { getopt } for pid=7822 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.064437][ T40] audit: type=1400 audit(1746584900.760:371): avc: denied { getopt } for pid=7825 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.183707][ T7833] FAULT_INJECTION: forcing a failure. [ 101.183707][ T7833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.189818][ T7833] CPU: 3 UID: 0 PID: 7833 Comm: syz.3.679 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 101.189842][ T7833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.189852][ T7833] Call Trace: [ 101.189860][ T7833] [ 101.189867][ T7833] dump_stack_lvl+0x16c/0x1f0 [ 101.189893][ T7833] should_fail_ex+0x512/0x640 [ 101.189917][ T7833] _copy_from_user+0x2e/0xd0 [ 101.189940][ T7833] copy_msghdr_from_user+0x98/0x160 [ 101.189955][ T7833] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 101.189979][ T7833] ___sys_sendmsg+0xfe/0x1d0 [ 101.189996][ T7833] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.190042][ T7833] __sys_sendmsg+0x16d/0x220 [ 101.190059][ T7833] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.190140][ T7833] ? rcu_is_watching+0x12/0xc0 [ 101.190169][ T7833] do_syscall_64+0xcd/0x260 [ 101.190193][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.190210][ T7833] RIP: 0033:0x7f53f6b8e969 [ 101.190223][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.190238][ T7833] RSP: 002b:00007f53f7a61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.190255][ T7833] RAX: ffffffffffffffda RBX: 00007f53f6db5fa0 RCX: 00007f53f6b8e969 [ 101.190265][ T7833] RDX: 0000000020000004 RSI: 00002000000001c0 RDI: 0000000000000004 [ 101.190275][ T7833] RBP: 00007f53f7a61090 R08: 0000000000000000 R09: 0000000000000000 [ 101.190284][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.190294][ T7833] R13: 0000000000000000 R14: 00007f53f6db5fa0 R15: 00007ffee9601c88 [ 101.190316][ T7833] [ 101.190708][ T7829] block nbd3: shutting down sockets [ 101.464025][ T7847] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.464069][ T40] audit: type=1400 audit(1746584901.160:372): avc: denied { write } for pid=7845 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.489402][ T40] audit: type=1400 audit(1746584901.170:373): avc: denied { read } for pid=7845 comm="syz.1.685" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.518153][ T40] audit: type=1400 audit(1746584901.210:374): avc: denied { watch_mount watch_reads } for pid=7845 comm="syz.1.685" path="/203" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.910263][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 102.023537][ T7862] futex_wake_op: syz.2.690 tries to shift op by 32; fix this program [ 102.555159][ T7872] block nbd0: NBD_DISCONNECT [ 102.573063][ T7872] block nbd0: Disconnected due to user request. [ 102.576628][ T7872] block nbd0: shutting down sockets [ 102.999026][ T40] audit: type=1400 audit(1746584902.690:375): avc: denied { getopt } for pid=7882 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 103.573941][ T7900] fuse: Bad value for 'group_id' [ 103.576150][ T7900] fuse: Bad value for 'group_id' [ 103.586921][ T7901] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = -2, id = 0 [ 103.601787][ T40] audit: type=1400 audit(1746584903.290:376): avc: denied { create } for pid=7899 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.655508][ T40] audit: type=1400 audit(1746584903.290:377): avc: denied { ioctl } for pid=7899 comm="syz.3.703" path="socket:[16559]" dev="sockfs" ino=16559 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.024214][ T7911] binder: BINDER_SET_CONTEXT_MGR already set [ 104.027636][ T7911] binder: 7909:7911 ioctl 4018620d 2000000000c0 returned -16 [ 104.067289][ T7911] binder: 7909:7911 ioctl ae80 0 returned -22 [ 104.367020][ T7922] block nbd0: NBD_DISCONNECT [ 104.371229][ T7922] block nbd0: Disconnected due to user request. [ 104.376096][ T7922] block nbd0: shutting down sockets [ 105.289816][ T40] audit: type=1400 audit(1746584904.990:378): avc: denied { append } for pid=7934 comm="syz.1.712" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 105.424912][ T7935] SELinux: policydb version 66888301 does not match my version range 15-34 [ 105.438175][ T40] audit: type=1400 audit(1746584905.110:379): avc: denied { load_policy } for pid=7934 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.456315][ T7938] binder: BINDER_SET_CONTEXT_MGR already set [ 105.460669][ T7935] SELinux: failed to load policy [ 105.474214][ T7938] binder: 7937:7938 ioctl 4018620d 2000000000c0 returned -16 [ 105.519344][ T7938] binder: BINDER_SET_CONTEXT_MGR already set [ 105.525032][ T7938] binder: 7937:7938 ioctl 4018620d 200000000040 returned -16 [ 105.730222][ T7949] block device autoloading is deprecated and will be removed. [ 106.302245][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 106.302263][ T40] audit: type=1400 audit(1746584905.990:384): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 107.405270][ T40] audit: type=1400 audit(1746584907.100:385): avc: denied { map } for pid=7970 comm="syz.3.725" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 107.527000][ T7982] loop7: detected capacity change from 0 to 2 [ 107.536368][ T7982] Dev loop7: unable to read RDB block 2 [ 107.544588][ T7982] loop7: unable to read partition table [ 107.548844][ T7982] loop7: partition table beyond EOD, truncated [ 107.568820][ T7982] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 107.568820][ T7982] ) failed (rc=-5) [ 107.620838][ T7986] tmpfs: Unknown parameter 'yr_1' [ 107.650287][ T7987] tmpfs: Unknown parameter 'yr_1' [ 108.372001][ T7996] SET target dimension over the limit! [ 108.429713][ T40] audit: type=1400 audit(1746584908.110:386): avc: denied { accept } for pid=7995 comm="syz.1.731" laddr=fe80::f081:5aff:feee:2300 lport=48599 faddr=ff02::1 fport=20010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 109.027661][ T40] audit: type=1400 audit(1746584908.720:387): avc: denied { read } for pid=8007 comm="syz.0.735" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 109.110102][ T40] audit: type=1400 audit(1746584908.720:388): avc: denied { open } for pid=8007 comm="syz.0.735" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 109.130603][ T40] audit: type=1400 audit(1746584908.720:389): avc: denied { ioctl } for pid=8007 comm="syz.0.735" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 109.286773][ T8013] loop7: detected capacity change from 0 to 2 [ 109.301038][ T7908] Dev loop7: unable to read RDB block 2 [ 109.304899][ T7908] loop7: unable to read partition table [ 109.308072][ T7908] loop7: partition table beyond EOD, truncated [ 109.374755][ T8013] Dev loop7: unable to read RDB block 2 [ 109.378163][ T8013] loop7: unable to read partition table [ 109.381552][ T8013] loop7: partition table beyond EOD, truncated [ 109.385603][ T8013] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 109.385603][ T8013] ) failed (rc=-5) [ 109.931799][ T8025] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.959407][ T40] audit: type=1400 audit(1746584909.630:390): avc: denied { ioctl } for pid=8024 comm="syz.0.740" path="uts:[4026533024]" dev="nsfs" ino=4026533024 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.438944][ T40] audit: type=1400 audit(1746584912.130:391): avc: denied { read } for pid=8092 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.474165][ C2] vkms_vblank_simulate: vblank timer overrun [ 112.554123][ C2] vkms_vblank_simulate: vblank timer overrun [ 112.610360][ C2] vkms_vblank_simulate: vblank timer overrun [ 112.773798][ C2] vkms_vblank_simulate: vblank timer overrun [ 112.862887][ T8103] loop7: detected capacity change from 0 to 2 [ 112.867861][ T40] audit: type=1400 audit(1746584912.560:392): avc: denied { ioctl } for pid=8100 comm="syz.1.766" path="socket:[15028]" dev="sockfs" ino=15028 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.951990][ T7908] Dev loop7: unable to read RDB block 2 [ 112.954729][ T7908] loop7: unable to read partition table [ 112.957927][ T7908] loop7: partition table beyond EOD, truncated [ 113.020507][ T8103] Dev loop7: unable to read RDB block 2 [ 113.023958][ T8103] loop7: unable to read partition table [ 113.027942][ T8103] loop7: partition table beyond EOD, truncated [ 113.030419][ T40] audit: type=1400 audit(1746584912.720:393): avc: denied { mount } for pid=8100 comm="syz.1.766" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 113.037613][ T8103] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 113.037613][ T8103] ) failed (rc=-5) [ 113.042207][ C2] vkms_vblank_simulate: vblank timer overrun [ 113.077034][ T8101] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.130316][ T40] audit: type=1400 audit(1746584912.770:394): avc: denied { setopt } for pid=8100 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.351099][ C2] vkms_vblank_simulate: vblank timer overrun [ 113.626488][ C2] vkms_vblank_simulate: vblank timer overrun [ 113.878619][ C2] vkms_vblank_simulate: vblank timer overrun [ 114.142060][ T40] audit: type=1400 audit(1746584913.830:395): avc: denied { bind } for pid=8148 comm="syz.2.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.263046][ T40] audit: type=1400 audit(1746584913.940:396): avc: denied { name_bind } for pid=8150 comm="syz.3.781" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 114.356965][ C2] vkms_vblank_simulate: vblank timer overrun [ 114.921053][ C2] vkms_vblank_simulate: vblank timer overrun [ 115.273466][ T8170] macvtap0: entered allmulticast mode [ 115.276426][ T8170] veth0_macvtap: entered allmulticast mode [ 115.282346][ T8170] netlink: 'syz.1.785': attribute type 3 has an invalid length. [ 115.313505][ T8170] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 115.399186][ T8176] futex_wake_op: syz.2.787 tries to shift op by 32; fix this program [ 115.438092][ C2] vkms_vblank_simulate: vblank timer overrun [ 115.463177][ T8181] loop7: detected capacity change from 0 to 2 [ 115.477918][ T8181] Dev loop7: unable to read RDB block 2 [ 115.509899][ T8181] loop7: unable to read partition table [ 115.512621][ T8181] loop7: partition table beyond EOD, truncated [ 115.516086][ T8181] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 115.516086][ T8181] ) failed (rc=-5) [ 116.183627][ T40] audit: type=1400 audit(1746584915.880:397): avc: denied { getopt } for pid=8204 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.322162][ C2] vkms_vblank_simulate: vblank timer overrun [ 117.516709][ T8228] sp0: Synchronizing with TNC [ 117.564180][ T40] audit: type=1400 audit(1746584917.240:398): avc: denied { search } for pid=5648 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.583560][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.803'. [ 117.606110][ T40] audit: type=1400 audit(1746584917.250:399): avc: denied { read } for pid=5648 comm="dhcpcd" name="n103" dev="tmpfs" ino=3163 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.607063][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 117.629958][ T40] audit: type=1400 audit(1746584917.250:400): avc: denied { open } for pid=5648 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=3163 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.630006][ T40] audit: type=1400 audit(1746584917.250:401): avc: denied { getattr } for pid=5648 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=3163 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.630045][ T40] audit: type=1400 audit(1746584917.280:402): avc: denied { create } for pid=8226 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.679674][ T40] audit: type=1400 audit(1746584917.290:403): avc: denied { getopt } for pid=8226 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.700445][ T40] audit: type=1400 audit(1746584917.360:404): avc: denied { listen } for pid=8232 comm="syz.2.805" lport=39346 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.714659][ T40] audit: type=1400 audit(1746584917.360:405): avc: denied { accept } for pid=8232 comm="syz.2.805" lport=39346 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.740894][ T40] audit: type=1400 audit(1746584917.360:406): avc: denied { setopt } for pid=8232 comm="syz.2.805" lport=39346 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 117.763031][ T40] audit: type=1326 audit(1746584917.460:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.0.807" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f850a78e969 code=0x0 [ 117.823708][ T8241] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 117.855094][ T8241] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 118.002793][ T8252] loop7: detected capacity change from 0 to 2 [ 118.011022][ T7908] Dev loop7: unable to read RDB block 2 [ 118.014537][ T7908] loop7: unable to read partition table [ 118.017892][ T7908] loop7: partition table beyond EOD, truncated [ 118.163668][ T8252] Dev loop7: unable to read RDB block 2 [ 118.166744][ T8252] loop7: unable to read partition table [ 118.175722][ T8252] loop7: partition table beyond EOD, truncated [ 118.180972][ T8252] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 118.180972][ T8252] ) failed (rc=-5) [ 118.592321][ T8256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.452749][ T8281] loop7: detected capacity change from 0 to 2 [ 119.470147][ T8281] Dev loop7: unable to read RDB block 2 [ 119.472809][ T8281] loop7: unable to read partition table [ 119.484010][ T8281] loop7: partition table beyond EOD, truncated [ 119.509347][ T8281] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 119.509347][ T8281] ) failed (rc=-5) [ 120.004926][ T8292] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 120.676902][ T8309] loop7: detected capacity change from 0 to 2 [ 120.686131][ T7908] Dev loop7: unable to read RDB block 2 [ 120.697793][ T7908] loop7: unable to read partition table [ 120.701730][ T7908] loop7: partition table beyond EOD, truncated [ 120.735515][ T8309] Dev loop7: unable to read RDB block 2 [ 120.739124][ T8309] loop7: unable to read partition table [ 120.742526][ T8309] loop7: partition table beyond EOD, truncated [ 120.752032][ T8309] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 120.752032][ T8309] ) failed (rc=-5) [ 120.930030][ T8312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8312 comm=syz.1.832 [ 120.933807][ T5940] Bluetooth: hci2: unexpected event for opcode 0x200f [ 121.514295][ T8338] loop7: detected capacity change from 0 to 2 [ 121.518811][ T8338] Dev loop7: unable to read RDB block 2 [ 121.526573][ T8338] loop7: unable to read partition table [ 121.538962][ T8338] loop7: partition table beyond EOD, truncated [ 121.547877][ T8338] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 121.547877][ T8338] ) failed (rc=-5) [ 121.674077][ C3] vkms_vblank_simulate: vblank timer overrun [ 123.054363][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 123.054458][ T40] audit: type=1400 audit(1746584922.740:411): avc: denied { open } for pid=8373 comm="syz.1.849" path="/dev/ptyq7" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 123.404196][ T40] audit: type=1326 audit(1746584923.100:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.1.849" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b06f8e969 code=0x7ffc0000 [ 123.418581][ T40] audit: type=1326 audit(1746584923.100:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.1.849" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b06f8e969 code=0x7ffc0000 [ 123.432549][ T40] audit: type=1326 audit(1746584923.100:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.1.849" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f5b06f8e969 code=0x7ffc0000 [ 123.446785][ T40] audit: type=1326 audit(1746584923.100:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.1.849" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b06f8e969 code=0x7ffc0000 [ 123.488627][ C3] vkms_vblank_simulate: vblank timer overrun [ 123.493307][ T40] audit: type=1326 audit(1746584923.100:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.1.849" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b06f8e969 code=0x7ffc0000 [ 123.530619][ T40] audit: type=1326 audit(1746584923.100:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.1.849" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b06f8e969 code=0x7ffc0000 [ 123.572682][ T40] audit: type=1326 audit(1746584923.100:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.1.849" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b06f8e969 code=0x7ffc0000 [ 123.590445][ T40] audit: type=1326 audit(1746584923.100:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.1.849" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b06f8e969 code=0x7ffc0000 [ 123.621908][ T40] audit: type=1326 audit(1746584923.230:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8373 comm="syz.1.849" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b06f90887 code=0x7ffc0000 [ 123.949769][ C3] vkms_vblank_simulate: vblank timer overrun [ 123.972280][ C3] vkms_vblank_simulate: vblank timer overrun [ 124.447501][ C3] vkms_vblank_simulate: vblank timer overrun [ 125.905791][ T8409] loop7: detected capacity change from 0 to 2 [ 126.003842][ C3] vkms_vblank_simulate: vblank timer overrun [ 126.009818][ T7908] Dev loop7: unable to read RDB block 2 [ 126.050529][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.870'. [ 126.066556][ T7908] loop7: unable to read partition table [ 126.069828][ T8436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.870'. [ 126.071910][ T7908] loop7: partition table beyond EOD, [ 126.075723][ T8436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.870'. [ 126.084890][ T7908] truncated [ 126.126405][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.870'. [ 126.149257][ T8398] syz.0.857 (8398): drop_caches: 1 [ 126.152640][ T8409] Dev loop7: unable to read RDB block 2 [ 126.155818][ T8409] loop7: unable to read partition table [ 126.158639][ T8409] loop7: partition table beyond EOD, truncated [ 126.178207][ T8409] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 126.178207][ T8409] ) failed (rc=-5) [ 126.358957][ T8408] syz.1.861 (8408) used greatest stack depth: 21048 bytes left [ 127.591998][ T8467] loop7: detected capacity change from 0 to 2 [ 127.629375][ T8467] Dev loop7: unable to read RDB block 2 [ 127.636744][ T8467] loop7: unable to read partition table [ 127.665181][ T8467] loop7: partition table beyond EOD, truncated [ 127.677588][ T8467] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 127.677588][ T8467] ) failed (rc=-5) [ 127.794611][ T8464] pim6reg: entered allmulticast mode [ 128.200825][ T8482] ================================================================== [ 128.220289][ T8482] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x549/0x640 [ 128.223511][ T8482] Read of size 1 at addr ffff88803558e030 by task syz.0.882/8482 [ 128.239904][ T8482] [ 128.241045][ T8482] CPU: 1 UID: 0 PID: 8482 Comm: syz.0.882 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 128.241071][ T8482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.241082][ T8482] Call Trace: [ 128.241088][ T8482] [ 128.241096][ T8482] dump_stack_lvl+0x116/0x1f0 [ 128.241127][ T8482] print_report+0xc3/0x670 [ 128.241146][ T8482] ? __virt_addr_valid+0x5e/0x590 [ 128.241169][ T8482] ? __phys_addr+0xc6/0x150 [ 128.241194][ T8482] ? rose_get_neigh+0x549/0x640 [ 128.241218][ T8482] kasan_report+0xe0/0x110 [ 128.241236][ T8482] ? rose_get_neigh+0x549/0x640 [ 128.241260][ T8482] rose_get_neigh+0x549/0x640 [ 128.241283][ T8482] rose_connect+0x2d4/0x1540 [ 128.241314][ T8482] ? __pfx_rose_connect+0x10/0x10 [ 128.241333][ T8482] ? selinux_netlbl_socket_connect+0x30/0x40 [ 128.241359][ T8482] ? rcu_is_watching+0x12/0xc0 [ 128.241380][ T8482] ? __local_bh_enable_ip+0xa4/0x120 [ 128.241403][ T8482] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.241425][ T8482] ? selinux_netlbl_socket_connect+0x30/0x40 [ 128.241447][ T8482] ? __local_bh_enable_ip+0xa4/0x120 [ 128.241467][ T8482] ? selinux_netlbl_socket_connect+0x30/0x40 [ 128.241490][ T8482] ? selinux_socket_connect+0x6b/0x80 [ 128.241511][ T8482] ? __pfx_rose_connect+0x10/0x10 [ 128.241528][ T8482] __sys_connect_file+0x13e/0x1a0 [ 128.241555][ T8482] __sys_connect+0x14d/0x170 [ 128.241580][ T8482] ? __pfx___sys_connect+0x10/0x10 [ 128.241608][ T8482] ? rcu_is_watching+0x12/0xc0 [ 128.241629][ T8482] __x64_sys_connect+0x72/0xb0 [ 128.241654][ T8482] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.241674][ T8482] do_syscall_64+0xcd/0x260 [ 128.241697][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.241715][ T8482] RIP: 0033:0x7f850a78e969 [ 128.241730][ T8482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.241749][ T8482] RSP: 002b:00007f850b538038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 128.241768][ T8482] RAX: ffffffffffffffda RBX: 00007f850a9b5fa0 RCX: 00007f850a78e969 [ 128.241781][ T8482] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000008 [ 128.241793][ T8482] RBP: 00007f850a810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 128.241803][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.241813][ T8482] R13: 0000000000000000 R14: 00007f850a9b5fa0 R15: 00007ffcff8e88a8 [ 128.241831][ T8482] [ 128.241874][ T8482] [ 128.458265][ T8482] Allocated by task 6033: [ 128.460993][ T8482] kasan_save_stack+0x33/0x60 [ 128.463985][ T8482] kasan_save_track+0x14/0x30 [ 128.469513][ T8482] __kasan_kmalloc+0xaa/0xb0 [ 128.472160][ T8482] rose_rt_ioctl+0x87e/0x1d40 [ 128.475199][ T8482] rose_ioctl+0x64d/0x7d0 [ 128.478287][ T8482] sock_do_ioctl+0x115/0x280 [ 128.480956][ T8482] sock_ioctl+0x227/0x6b0 [ 128.483530][ T8482] __x64_sys_ioctl+0x190/0x200 [ 128.487249][ T8482] do_syscall_64+0xcd/0x260 [ 128.492069][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.496264][ T8482] [ 128.497509][ T8482] Freed by task 8482: [ 128.500059][ T8482] kasan_save_stack+0x33/0x60 [ 128.503391][ T8482] kasan_save_track+0x14/0x30 [ 128.522012][ T8482] kasan_save_free_info+0x3b/0x60 [ 128.532390][ T8482] __kasan_slab_free+0x51/0x70 [ 128.535584][ T8482] kfree+0x2b6/0x4d0 [ 128.538106][ T8482] rose_remove_neigh+0x25e/0x370 [ 128.542235][ T8482] rose_rt_device_down+0x2aa/0x390 [ 128.545241][ T8482] rose_device_event+0xfc/0x120 [ 128.547561][ T8482] notifier_call_chain+0xb9/0x410 [ 128.549947][ T8482] call_netdevice_notifiers_info+0xbe/0x140 [ 128.554685][ T8482] __dev_notify_flags+0x1f7/0x2e0 [ 128.559336][ T8482] netif_change_flags+0x108/0x160 [ 128.562781][ T8482] dev_change_flags+0xba/0x250 [ 128.566785][ T8482] dev_ifsioc+0x1498/0x1f70 [ 128.570869][ T8482] dev_ioctl+0x223/0x10e0 [ 128.575061][ T8482] sock_do_ioctl+0x19d/0x280 [ 128.579142][ T8482] sock_ioctl+0x227/0x6b0 [ 128.582327][ T8482] __x64_sys_ioctl+0x190/0x200 [ 128.586296][ T8482] do_syscall_64+0xcd/0x260 [ 128.591462][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.595422][ T8482] [ 128.597043][ T8482] The buggy address belongs to the object at ffff88803558e000 [ 128.597043][ T8482] which belongs to the cache kmalloc-512 of size 512 [ 128.608425][ T8482] The buggy address is located 48 bytes inside of [ 128.608425][ T8482] freed 512-byte region [ffff88803558e000, ffff88803558e200) [ 128.619383][ T8482] [ 128.621115][ T8482] The buggy address belongs to the physical page: [ 128.625385][ T8482] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3558c [ 128.632026][ T8482] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 128.637207][ T8482] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 128.641686][ T8482] page_type: f5(slab) [ 128.643985][ T8482] raw: 00fff00000000040 ffff88801b442c80 dead000000000100 dead000000000122 [ 128.650183][ T8482] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 128.654518][ T8482] head: 00fff00000000040 ffff88801b442c80 dead000000000100 dead000000000122 [ 128.658895][ T8482] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 128.662598][ T8482] head: 00fff00000000002 ffffea0000d56301 00000000ffffffff 00000000ffffffff [ 128.667830][ T8482] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 128.672924][ T8482] page dumped because: kasan: bad access detected [ 128.676126][ T8482] page_owner tracks the page as allocated [ 128.680927][ T8482] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5348, tgid 5348 (udevd), ts 50194683029, free_ts 48932533369 [ 128.694939][ T8482] post_alloc_hook+0x181/0x1b0 [ 128.698164][ T8482] get_page_from_freelist+0x135c/0x3920 [ 128.701875][ T8482] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 128.705362][ T8482] alloc_pages_mpol+0x1fb/0x550 [ 128.708261][ T8482] new_slab+0x244/0x340 [ 128.710597][ T8482] ___slab_alloc+0xd9c/0x1940 [ 128.714331][ T8482] __slab_alloc.constprop.0+0x56/0xb0 [ 128.717581][ T8482] __kmalloc_cache_noprof+0xfb/0x3e0 [ 128.720832][ T8482] kernfs_fop_open+0x244/0xda0 [ 128.723643][ T8482] do_dentry_open+0x741/0x1c10 [ 128.726390][ T8482] vfs_open+0x82/0x3f0 [ 128.728713][ T8482] path_openat+0x1e5e/0x2d40 [ 128.731535][ T8482] do_filp_open+0x20b/0x470 [ 128.734603][ T8482] do_sys_openat2+0x11b/0x1d0 [ 128.737624][ T8482] __x64_sys_openat+0x174/0x210 [ 128.740555][ T8482] do_syscall_64+0xcd/0x260 [ 128.743155][ T8482] page last free pid 13 tgid 13 stack trace: [ 128.747076][ T8482] __free_frozen_pages+0x69d/0xff0 [ 128.751265][ T8482] qlist_free_all+0x4e/0x120 [ 128.753967][ T8482] kasan_quarantine_reduce+0x195/0x1e0 [ 128.757306][ T8482] __kasan_slab_alloc+0x69/0x90 [ 128.760358][ T8482] __kmalloc_noprof+0x1d4/0x510 [ 128.763327][ T8482] lsm_blob_alloc+0x68/0x90 [ 128.765420][ T8482] security_prepare_creds+0x30/0x270 [ 128.768012][ T8482] prepare_creds+0x56f/0x7d0 [ 128.770453][ T8482] copy_creds+0xa7/0xa50 [ 128.773448][ T8482] copy_process+0x10b1/0x91a0 [ 128.776445][ T8482] kernel_clone+0xfc/0x960 [ 128.778925][ T8482] user_mode_thread+0xc7/0x110 [ 128.781575][ T8482] call_usermodehelper_exec_work+0x6b/0x170 [ 128.784402][ T8482] process_one_work+0x9cc/0x1b70 [ 128.788002][ T8482] worker_thread+0x6c8/0xf10 [ 128.791549][ T8482] kthread+0x3c2/0x780 [ 128.793859][ T8482] [ 128.794961][ T8482] Memory state around the buggy address: [ 128.797394][ T8482] ffff88803558df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.802205][ T8482] ffff88803558df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.806518][ T8482] >ffff88803558e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.809665][ T8482] ^ [ 128.811927][ T8482] ffff88803558e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.817946][ T8482] ffff88803558e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.823609][ T8482] ================================================================== [ 128.830389][ T8482] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.835395][ T8482] CPU: 1 UID: 0 PID: 8482 Comm: syz.0.882 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 128.845809][ T8482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.852093][ T8482] Call Trace: [ 128.853771][ T8482] [ 128.855454][ T8482] dump_stack_lvl+0x3d/0x1f0 [ 128.858447][ T8482] panic+0x71c/0x800 [ 128.860816][ T8482] ? __pfx_panic+0x10/0x10 [ 128.863966][ T8482] ? irqentry_exit+0x3b/0x90 [ 128.868232][ T8482] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.873808][ T8482] ? rose_get_neigh+0x549/0x640 [ 128.877911][ T8482] ? rose_get_neigh+0x549/0x640 [ 128.881237][ T8482] check_panic_on_warn+0xab/0xb0 [ 128.885105][ T8482] end_report+0x107/0x170 [ 128.888774][ T8482] kasan_report+0xee/0x110 [ 128.892328][ T8482] ? rose_get_neigh+0x549/0x640 [ 128.896315][ T8482] rose_get_neigh+0x549/0x640 [ 128.898919][ T8482] rose_connect+0x2d4/0x1540 [ 128.901251][ T8482] ? __pfx_rose_connect+0x10/0x10 [ 128.904003][ T8482] ? selinux_netlbl_socket_connect+0x30/0x40 [ 128.907476][ T8482] ? rcu_is_watching+0x12/0xc0 [ 128.909851][ T8482] ? __local_bh_enable_ip+0xa4/0x120 [ 128.912787][ T8482] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.915850][ T8482] ? selinux_netlbl_socket_connect+0x30/0x40 [ 128.920010][ T8482] ? __local_bh_enable_ip+0xa4/0x120 [ 128.922773][ T8482] ? selinux_netlbl_socket_connect+0x30/0x40 [ 128.925822][ T8482] ? selinux_socket_connect+0x6b/0x80 [ 128.928068][ T8482] ? __pfx_rose_connect+0x10/0x10 [ 128.930135][ T8482] __sys_connect_file+0x13e/0x1a0 [ 128.932608][ T8482] __sys_connect+0x14d/0x170 [ 128.935421][ T8482] ? __pfx___sys_connect+0x10/0x10 [ 128.938581][ T8482] ? rcu_is_watching+0x12/0xc0 [ 128.941265][ T8482] __x64_sys_connect+0x72/0xb0 [ 128.943894][ T8482] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.947272][ T8482] do_syscall_64+0xcd/0x260 [ 128.950650][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.955811][ T8482] RIP: 0033:0x7f850a78e969 [ 128.959328][ T8482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.969003][ T8482] RSP: 002b:00007f850b538038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 128.972508][ T8482] RAX: ffffffffffffffda RBX: 00007f850a9b5fa0 RCX: 00007f850a78e969 [ 128.975758][ T8482] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000008 [ 128.979187][ T8482] RBP: 00007f850a810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 128.982600][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.986100][ T8482] R13: 0000000000000000 R14: 00007f850a9b5fa0 R15: 00007ffcff8e88a8 [ 128.989544][ T8482] [ 129.006632][ T8482] Kernel Offset: disabled [ 129.009315][ T8482] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:28:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000483 RBX=0000000000000100 RCX=ffffffff84d7245f RDX=0000000000000000 RSI=ffffffff84d70d78 RDI=ffff88802ae39070 RBP=0000000000000080 RSP=ffffc90003edd710 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffff88802ae30030 R12=ffff88802ae39068 R13=dffffc0000000000 R14=ffff88802ae31000 R15=ffff88802ae30000 RIP=ffffffff81bb32f0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5b07ead6c0 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000080 CR3=000000004e7b5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffd907690 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000b0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f50f5 RDI=ffffffff9adf94e0 RBP=ffffffff9adf94a0 RSP=ffffc9000345f688 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000079 R14=ffffffff9adf94a0 R15=ffffffff854f5090 RIP=ffffffff854f511f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f850b5386c0 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c30cd15 CR3=000000003f88f000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f850a811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f850a811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f850a811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f850a811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f850a811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f850a811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f850a983488 00007f850a983480 00007f850a983478 00007f850a983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f850b4ed100 00007f850a983440 00007f850a983458 00007f850a9834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f850a983498 00007f850a983490 00007f850a983488 00007f850a983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffffffff8b6f6932 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8dbe1277 RDI=ffffffff8dbe123f RBP=0000000000000293 RSP=ffffc9000403ecf8 R8 =0000000000000006 R9 =0000000000000020 R10=0000000000000020 R11=0000000000000000 R12=ffff88801b47df00 R13=0000000000000010 R14=ffff88801b47df58 R15=0000000000000020 RIP=ffffffff8b6cdcc0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5b07ead6c0 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c33c3fb CR3=0000000032ad0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425a11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425b83488 00007fb425b83480 00007fb425b83478 00007fb425b83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4266ed100 00007fb425b83440 00007fb425b80004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb425b83498 00007fb425b83490 00007fb425b83488 00007fb425b83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e3bf5c0 RCX=ffffc9000359f524 RDX=0000000000000004 RSI=ffffffff8dcd20e4 RDI=ffffffff8bf482a0 RBP=00007f53f6b85100 RSP=ffffc9000359f518 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff81cc2a0a R13=0000000000000206 R14=ffff888027ba0000 R15=0000000000000004 RIP=ffffffff81980ba9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555557f0a500 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f53f78e56c0 CR3=0000000048c1c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee9602010 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53f6c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53f6c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53f6c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53f6c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53f6c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53f6c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000