last executing test programs: 25.151401372s ago: executing program 2 (id=386): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x57, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2884832, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x10, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001f00)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x90) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r3, 0x80080400) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r4, 0x10d, 0xfa, &(0x7f0000000000), &(0x7f0000000240)=0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 24.207423518s ago: executing program 2 (id=392): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_io_uring_setup(0x4a67, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b9800000c00f3235000800000f300fe095a6520000b8010000000f01d9c402d53b9e0700000026f047ff4d14f30fc775ddb9c5090000b86c000000ba000000000f300f08450f01cb4a0fc72b", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000010401020000000000000000010000000600064000"], 0x1c}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17.423724014s ago: executing program 2 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x5) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) readlink(0x0, &(0x7f0000000680)=""/111, 0x6f) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000040)) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff801000000800395032303030"], 0x15) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) unshare(0x4000400) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 16.355606947s ago: executing program 2 (id=407): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1}, 0x48) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x2}}]}}}]}, 0x60}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_procfs$userns(0x0, &(0x7f00000002c0)) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) writev(r6, &(0x7f0000000780)=[{0x0}], 0x1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 15.713782182s ago: executing program 0 (id=408): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000500), 0x77, 0x1a1281) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0xffffffffffffffff, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(&(0x7f0000000380)) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)}, &(0x7f0000000480)=0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000080)='./cgroup/file0\x00', 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80005520, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x24}, {0x6, 0x0, 0x0, 0x7}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000580)={0x2, &(0x7f0000000000)=[{0x30, 0x2, 0x0, 0x9}, {0x9, 0x0, 0x0, 0xfffffff9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f00000004c0)=[{0x7c}, {0x6, 0x0, 0x0, 0x2}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) 14.559997883s ago: executing program 0 (id=411): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x48001) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r5, 0x1}, 0x18) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x4161, 0x0) 13.266342149s ago: executing program 0 (id=415): mknod$loop(0x0, 0x100000000000600d, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x5609, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='tlb_flush\x00'}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {&(0x7f0000000080)="53000000b79269c170b9291ca3e588726b9dd721c4dc9d273d33512f6d550e973041da17c27124e49606da8454534e33d8214dd8ad644686726bfbceec85732331", 0x41}], 0x2) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 11.630191751s ago: executing program 0 (id=417): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) mknodat$null(r1, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x103) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x4, 0x460, 0x911, r1, 0x4, '\x00', r3, r1, 0x5, 0x2, 0x2, 0x5}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000006000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x301002, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3f, 0x0, "00efffffff00"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000400)=0x9) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 11.063683374s ago: executing program 0 (id=419): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x48001) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r4, 0x1}, 0x18) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x4161, 0x0) 10.089402825s ago: executing program 0 (id=422): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='io_uring_task_add\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x600040, 0x91) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES16=r5], 0x4c}, 0x1, 0x0, 0x0, 0x841}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r7, &(0x7f00000000c0)=""/29, 0x1d) r8 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000900)) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x11, r0, 0x0) 10.000675322s ago: executing program 2 (id=423): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r2 = syz_io_uring_setup(0x7934, 0x0, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0xec4, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r5}}, 0x48) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x4880) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) 9.081596283s ago: executing program 2 (id=428): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000380)={0xd000, 0x2000, 0x4, 0x6, 0x11}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='io_uring_task_add\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x600040, 0x91) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES16=r5], 0x4c}, 0x1, 0x0, 0x0, 0x841}, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r8, &(0x7f00000000c0)=""/29, 0x1d) r9 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000900)) 6.230699901s ago: executing program 1 (id=434): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40012002) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) socket$alg(0x26, 0x5, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e1d, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}}, 0x0) sendto$inet(r2, &(0x7f0000000880)="bd", 0x1, 0x0, 0x0, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000240)) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0x101, 0x100, 0x1, 0x3, 0x0, 0x8, 0x0, 0x92, 0x6, 0x0, 0x4, 0x81, 0x100, 0x41, 0x1, 0x0, {}, 0x7f, 0x1}}) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff7, 0x4) unshare(0x60600) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_vif\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/237, 0xed}], 0x1, 0xfffffffe, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x9, 0xb7, &(0x7f0000000040)=""/183, 0x40e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x90) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, 0x0) sendmsg$rds(r8, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r8, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x42) 5.433004919s ago: executing program 3 (id=435): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000003c0)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) 5.339174354s ago: executing program 1 (id=436): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 5.083982745s ago: executing program 3 (id=437): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)='o]\x00') r0 = gettid() mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus/file0\x00', 0xffffffffffffffff, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x61, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x1, "0000000500000000260004"}, {0x1f, 0x1, "fe906d26efe3"}, {}, {}]}}}}}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d56549b}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b80a0000000f23c80f21f866350c00a0000f23f866b9800000c00f326635000400000f300fc76a002e0f080f23742e3b5753baf80c66b8f494f78e66efbafc0c66b83ac8000066efda6509", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.15487341s ago: executing program 3 (id=438): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00a0a1451d4188b776cdc39e7bc2b99188aa71af0b86303e1d38b9278fa5282af9c5716513175331d73a88f9650acb5598e65457471ccbf6fb4b5e5593a30cb0bcb2517a7c135c2e332224f9ddee5ca097c3f1cd0578b17ca4deab5d1023e7165176a968f08066b22d6c531df8d2b718035c9a1993f2e8d34394435c65b91f2bfac422056d81cf6dcf518343e3a5e442719aa6b2c5c07c6404425b3dde210bf543b4399e5885b4e853159089aff5565bd0a7dd3c8b5a1da74b20361ecb93deda562e185aaf15172ad60d811d02", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x104) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='1,N,'], 0x31) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000007c0)=""/157, 0x9d}], 0x1, &(0x7f0000002f40)=""/237, 0xed}, 0x0) sendmsg$tipc(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000980)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb6f069a662eaad499c6aa16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacdcede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980663b56eed42b13b92b", 0x96}, {&(0x7f00000001c0)='j', 0x1}], 0x2}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x4) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000200), 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071102f00000000000600000000000008950000002b000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.710953186s ago: executing program 3 (id=439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r5, &(0x7f000000e2c0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001200)={@mcast1}, 0x14) 2.672651507s ago: executing program 1 (id=440): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffb, 0x0, "81fb08cc2b000000f6c05b7225ffff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x0, 0x937, 0x0, 0x0, 0x0, "8afbb5a85093ef768ede381361ce675f4362d2"}) fcntl$setstatus(r4, 0x4, 0x102800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.664747127s ago: executing program 3 (id=441): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ff113133000000000001090223e70100000000090400000103000000092100000001220600090581030000000000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_delete(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x40047459, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4e6efe1f4ffbb7677b2c"], 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0xfc, 0x2b8, 0x182, 0xfc, 0x0, 0x1c8, 0x3a8, 0x3a8, 0x1c8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xdc, 0xfc, 0x0, {0x0, 0x1800}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x6c, 0x3}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @remote, [], [], 'macsec0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8e64, 0x1000, 0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2ec) pipe(&(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0xd, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x2}}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) socket$inet(0x2, 0x80001, 0x0) socket$inet6(0xa, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r5}, 0x10) 1.571520077s ago: executing program 1 (id=442): sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000400), 0x8) listen(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.219069882s ago: executing program 1 (id=443): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00a0a1451d4188b776cdc39e7bc2b99188aa71af0b86303e1d38b9278fa5282af9c5716513175331d73a88f9650acb5598e65457471ccbf6fb4b5e5593a30cb0bcb2517a7c135c2e332224f9ddee5ca097c3f1cd0578b17ca4deab5d1023e7165176a968f08066b22d6c531df8d2b718035c9a1993f2e8d34394435c65b91f2bfac422056d81cf6dcf518343e3a5e442719aa6b2c5c07c6404425b3dde210bf543b4399e5885b4e853159089aff5565bd0a7dd3c8b5a1da74b20361ecb93deda562e185aaf15172ad60d811d02", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x104) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='1,N,'], 0x31) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000007c0)=""/157, 0x9d}], 0x1, &(0x7f0000002f40)=""/237, 0xed}, 0x0) sendmsg$tipc(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x4) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000200), 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071102f00000000000600000000000008950000002b000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 307.44669ms ago: executing program 1 (id=444): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, 0xffffffffffffffff, 0x7}, 0x10) write$rfkill(r1, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 3 (id=446): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1}, 0x48) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x2}}]}}}]}, 0x60}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_procfs$userns(0x0, &(0x7f00000002c0)) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) writev(r6, &(0x7f0000000780)=[{0x0}], 0x1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) kernel console output (not intermixed with test programs): 525, idProduct=a4a3, bcdDevice=1c.92 [ 101.529822][ T832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.532927][ T832] usb 8-1: Product: syz [ 101.534446][ T832] usb 8-1: Manufacturer: syz [ 101.536343][ T832] usb 8-1: SerialNumber: syz [ 101.540373][ T832] usb 8-1: config 0 descriptor?? [ 101.549545][ T832] usbtest 8-1:0.0: couldn't get endpoints, -22 [ 101.552073][ T832] usbtest 8-1:0.0: probe with driver usbtest failed with error -22 [ 101.670278][ T5978] misc userio: Invalid payload size [ 102.540885][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 103.590808][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 104.081138][ T5437] usb 8-1: USB disconnect, device number 6 [ 105.390446][ T5437] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.582282][ T5437] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.612379][ T5437] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 105.617348][ T5437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.621123][ T5437] usb 5-1: Product: syz [ 105.623244][ T5437] usb 5-1: Manufacturer: syz [ 105.625972][ T5437] usb 5-1: SerialNumber: syz [ 105.630409][ T5437] usb 5-1: config 0 descriptor?? [ 105.635709][ T5437] usbtest 5-1:0.0: couldn't get endpoints, -22 [ 105.639457][ T5437] usbtest 5-1:0.0: probe with driver usbtest failed with error -22 [ 105.946793][ T5396] usb 5-1: USB disconnect, device number 4 [ 106.292699][ T6021] Bluetooth: (null): Invalid header checksum [ 106.395574][ T1109] Bluetooth: (null): Invalid header checksum [ 106.412400][ T1109] Bluetooth: (null): Invalid header checksum [ 106.504967][ T90] Bluetooth: (null): Invalid header checksum [ 106.567426][ T5437] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 106.631477][ T1104] Bluetooth: (null): Invalid header checksum [ 106.737952][ T1109] Bluetooth: (null): Invalid header checksum [ 106.788425][ T5437] usb 8-1: config index 0 descriptor too short (expected 59171, got 36) [ 106.793426][ T5437] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.800264][ T5437] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.805853][ T5437] usb 8-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 106.809954][ T5437] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.815412][ T5437] usb 8-1: config 0 descriptor?? [ 106.846444][ T1105] Bluetooth: (null): Invalid header checksum [ 106.955247][ T90] Bluetooth: (null): Invalid header checksum [ 107.138964][ C3] hrtimer: interrupt took 1007163 ns [ 107.426588][ T5437] usbhid 8-1:0.0: can't add hid device: -71 [ 107.429825][ T5437] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 107.456555][ T5437] usb 8-1: USB disconnect, device number 7 [ 108.076839][ T6045] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.163'. [ 108.445164][ T5435] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 108.892607][ T5435] usb 7-1: config index 0 descriptor too short (expected 59171, got 36) [ 108.896786][ T5435] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.901737][ T5435] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.906737][ T5435] usb 7-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 108.910901][ T5435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.918428][ T5435] usb 7-1: config 0 descriptor?? [ 109.646305][ T57] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 109.766101][ T5435] usbhid 7-1:0.0: can't add hid device: -71 [ 109.768716][ T5435] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 109.777154][ T5435] usb 7-1: USB disconnect, device number 4 [ 109.854540][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 109.867332][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.871548][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.875569][ T57] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.879407][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.886672][ T57] usb 8-1: config 0 descriptor?? [ 109.898441][ T57] hub 8-1:0.0: USB hub found [ 110.064534][ T830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.101347][ T57] hub 8-1:0.0: 1 port detected [ 110.247812][ T830] usb 5-1: Using ep0 maxpacket: 32 [ 110.266472][ T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.271170][ T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.278746][ T830] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 110.282595][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.288490][ T830] usb 5-1: config 0 descriptor?? [ 110.293422][ T830] hub 5-1:0.0: USB hub found [ 110.371846][ T39] audit: type=1400 audit(1724636444.892:227): avc: denied { write } for pid=6072 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.392008][ T39] audit: type=1400 audit(1724636444.922:228): avc: denied { read } for pid=6072 comm="syz.2.173" path="socket:[10030]" dev="sockfs" ino=10030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.507208][ T830] hub 5-1:0.0: 1 port detected [ 110.718400][ T5437] hub 8-1:0.0: activate --> -90 [ 110.864552][ T5435] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 111.054828][ T5435] usb 7-1: Using ep0 maxpacket: 8 [ 111.069646][ T5435] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 111.074984][ T5435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.078981][ T5435] usb 7-1: Product: syz [ 111.080962][ T5435] usb 7-1: Manufacturer: syz [ 111.083128][ T5435] usb 7-1: SerialNumber: syz [ 111.089718][ T5435] usb 7-1: config 0 descriptor?? [ 111.119892][ T830] hub 5-1:0.0: activate --> -90 [ 111.310816][ T5435] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 111.920116][ T5437] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 111.920442][ T5396] usb 8-1: USB disconnect, device number 8 [ 111.924822][ T5437] usb 8-1-port1: config error [ 112.326998][ T830] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 112.327251][ T5396] usb 5-1: USB disconnect, device number 5 [ 112.329633][ T830] usb 5-1-port1: config error [ 112.627316][ T6100] misc userio: The device must be registered before sending interrupts [ 112.744166][ T39] audit: type=1326 audit(1724636447.272:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.3.181" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f046cf79e79 code=0x0 [ 112.819494][ T5435] usb write operation failed. (-71) [ 112.836085][ T5435] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.840862][ T5435] dvbdev: DVB: registering new adapter (Terratec H7) [ 112.843636][ T5435] usb 7-1: media controller created [ 112.846700][ T5435] usb read operation failed. (-71) [ 112.849523][ T5435] usb write operation failed. (-71) [ 112.855854][ T5435] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 112.862705][ T5435] usb 7-1: USB disconnect, device number 5 [ 112.963886][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 112.968365][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 113.021234][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 113.025369][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 113.341012][ T6112] syzkaller0: entered promiscuous mode [ 113.343865][ T6112] syzkaller0: entered allmulticast mode [ 113.595351][ T5435] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.781095][ T5435] usb 6-1: config index 0 descriptor too short (expected 59171, got 36) [ 113.788562][ T5435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.797852][ T5435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.802341][ T5435] usb 6-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 113.811105][ T5435] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.823087][ T5435] usb 6-1: config 0 descriptor?? [ 114.395231][ T5435] usbhid 6-1:0.0: can't add hid device: -71 [ 114.398915][ T5435] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 114.411563][ T5435] usb 6-1: USB disconnect, device number 2 [ 115.745794][ T6134] syzkaller0: entered promiscuous mode [ 115.748025][ T6134] syzkaller0: entered allmulticast mode [ 115.984544][ T6138] syzkaller0: entered promiscuous mode [ 115.987036][ T6138] syzkaller0: entered allmulticast mode [ 116.082642][ T39] audit: type=1400 audit(1724636450.612:230): avc: denied { map } for pid=6146 comm="syz.0.198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.110148][ T39] audit: type=1400 audit(1724636450.612:231): avc: denied { read write } for pid=6146 comm="syz.0.198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.208231][ T39] audit: type=1400 audit(1724636450.742:232): avc: denied { write } for pid=6146 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.208419][ T6149] netlink: 244 bytes leftover after parsing attributes in process `syz.0.198'. [ 116.217553][ T39] audit: type=1400 audit(1724636450.742:233): avc: denied { nlmsg_write } for pid=6146 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.245743][ T6149] unsupported nlmsg_type 40 [ 117.603027][ T39] audit: type=1400 audit(1724636452.132:234): avc: denied { execute } for pid=6153 comm="syz.2.200" path="/dev/audio1" dev="devtmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 118.275000][ T39] audit: type=1400 audit(1724636452.802:235): avc: denied { create } for pid=6157 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.291777][ T39] audit: type=1400 audit(1724636452.822:236): avc: denied { write } for pid=6157 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.628885][ T39] audit: type=1400 audit(1724636453.162:237): avc: denied { read write } for pid=6157 comm="syz.1.201" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 118.648034][ T39] audit: type=1400 audit(1724636453.162:238): avc: denied { open } for pid=6157 comm="syz.1.201" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 118.979559][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.202'. [ 119.117446][ T6165] syzkaller0: entered promiscuous mode [ 119.119937][ T6165] syzkaller0: entered allmulticast mode [ 119.200686][ T39] audit: type=1400 audit(1724636453.732:239): avc: denied { unmount } for pid=5332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 119.334595][ T5437] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 119.539909][ T5437] usb 8-1: config index 0 descriptor too short (expected 59171, got 36) [ 119.543879][ T5437] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.549243][ T5437] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.553580][ T5437] usb 8-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 119.562701][ T5437] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.568884][ T5437] usb 8-1: config 0 descriptor?? [ 120.443541][ T5437] usbhid 8-1:0.0: can't add hid device: -71 [ 120.451304][ T5437] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 120.460163][ T5437] usb 8-1: USB disconnect, device number 9 [ 120.816779][ T57] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 121.019987][ T57] usb 7-1: config index 0 descriptor too short (expected 59171, got 36) [ 121.023434][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.028472][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.036436][ T57] usb 7-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 121.040934][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.046868][ T57] usb 7-1: config 0 descriptor?? [ 121.093314][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 121.093331][ T39] audit: type=1326 audit(1724636455.622:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6192 comm="syz.3.212" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046cf79e79 code=0x0 [ 121.258259][ T6195] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.275529][ T39] audit: type=1326 audit(1724636455.812:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6192 comm="syz.3.212" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046cf79e79 code=0x0 [ 121.392805][ T39] audit: type=1326 audit(1724636455.922:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6192 comm="syz.3.212" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046cf79e79 code=0x0 [ 121.797203][ T57] usbhid 7-1:0.0: can't add hid device: -71 [ 121.799887][ T57] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 121.805809][ T57] usb 7-1: USB disconnect, device number 6 [ 121.957085][ T39] audit: type=1400 audit(1724636456.442:249): avc: denied { read write } for pid=6198 comm="syz.1.213" name="usbmon9" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.984115][ T39] audit: type=1400 audit(1724636456.442:250): avc: denied { open } for pid=6198 comm="syz.1.213" path="/dev/usbmon9" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 122.744722][ T5435] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 122.936870][ T5435] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.941687][ T5435] usb 7-1: config 0 has no interfaces? [ 122.949380][ T5435] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 122.955146][ T5435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.997496][ T5435] usb 7-1: Product: syz [ 122.999688][ T5435] usb 7-1: Manufacturer: syz [ 123.002235][ T5435] usb 7-1: SerialNumber: syz [ 123.009132][ T5435] usb 7-1: config 0 descriptor?? [ 123.236495][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.251129][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.261198][ T5435] usb 7-1: USB disconnect, device number 7 [ 123.623412][ T39] audit: type=1400 audit(1724636458.152:251): avc: denied { ioctl } for pid=6212 comm="syz.1.218" path="socket:[12296]" dev="sockfs" ino=12296 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 123.635933][ T39] audit: type=1400 audit(1724636458.172:252): avc: denied { write } for pid=6212 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 124.642838][ T6227] tipc: Started in network mode [ 124.645224][ T6227] tipc: Node identity fffffff9, cluster identity 4711 [ 124.661951][ T6227] tipc: Node number set to 4294967289 [ 124.804799][ T39] audit: type=1400 audit(1724636459.332:253): avc: denied { shutdown } for pid=6228 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.820345][ T39] audit: type=1400 audit(1724636459.352:254): avc: denied { read } for pid=6228 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.879778][ T39] audit: type=1400 audit(1724636459.412:255): avc: denied { read } for pid=6228 comm="syz.2.222" name="uinput" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.946205][ T6230] input: syz0 as /devices/virtual/input/input5 [ 125.100665][ T6230] 9pnet: Could not find request transport: fd0x0000000000000005 [ 126.552043][ T6250] input: syz0 as /devices/virtual/input/input6 [ 126.929488][ T6250] 9pnet: Could not find request transport: fd0x0000000000000005 [ 127.755295][ T6261] syzkaller0: entered promiscuous mode [ 127.765946][ T6261] syzkaller0: entered allmulticast mode [ 128.870769][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 128.870784][ T39] audit: type=1400 audit(1724636463.402:266): avc: denied { setopt } for pid=6271 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.221410][ T39] audit: type=1326 audit(1724636463.762:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.237" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046cf79e79 code=0x0 [ 129.342754][ T6280] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.395611][ T39] audit: type=1326 audit(1724636463.932:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.237" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046cf79e79 code=0x0 [ 129.497616][ T39] audit: type=1326 audit(1724636464.032:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.237" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046cf79e79 code=0x0 [ 130.494559][ T39] audit: type=1400 audit(1724636465.022:270): avc: denied { ioctl } for pid=6282 comm="syz.2.238" path="socket:[12338]" dev="sockfs" ino=12338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.518372][ T39] audit: type=1400 audit(1724636465.032:271): avc: denied { bind } for pid=6282 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.090029][ T39] audit: type=1400 audit(1724636465.622:272): avc: denied { bind } for pid=6295 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.122600][ T39] audit: type=1400 audit(1724636465.622:273): avc: denied { node_bind } for pid=6295 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 131.200137][ T6300] vivid-000: disconnect [ 131.204992][ T6300] vivid-000: reconnect [ 131.511417][ T6306] vivid-000: disconnect [ 131.514091][ T6306] vivid-000: reconnect [ 132.385543][ T6317] binder: 6316:6317 ioctl c0306201 0 returned -14 [ 132.417893][ T6315] syzkaller0: entered promiscuous mode [ 132.420041][ T6315] syzkaller0: entered allmulticast mode [ 133.080181][ T6324] input: syz0 as /devices/virtual/input/input7 [ 133.588141][ T6324] 9pnet: Could not find request transport: fd0x0000000000000004 [ 133.941455][ T39] audit: type=1326 audit(1724636468.472:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.252" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4f5f79e79 code=0x0 [ 134.099636][ T6335] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.162907][ T39] audit: type=1326 audit(1724636468.692:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.252" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4f5f79e79 code=0x0 [ 134.314571][ T5435] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.504786][ T5435] usb 5-1: config index 0 descriptor too short (expected 59171, got 36) [ 134.509966][ T5435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.520189][ T5435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.525450][ T5435] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 134.539146][ T5435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.548869][ T5435] usb 5-1: config 0 descriptor?? [ 135.029943][ T39] audit: type=1326 audit(1724636469.562:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.1.255" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4f5f79e79 code=0x0 [ 135.070756][ T5435] usbhid 5-1:0.0: can't add hid device: -71 [ 135.073541][ T5435] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 135.080030][ T5435] usb 5-1: USB disconnect, device number 6 [ 135.183642][ T6347] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.241554][ T39] audit: type=1326 audit(1724636469.782:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.1.255" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4f5f79e79 code=0x0 [ 135.247144][ T6348] input: syz0 as /devices/virtual/input/input8 [ 135.338427][ T39] audit: type=1326 audit(1724636469.852:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.1.255" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4f5f79e79 code=0x0 [ 136.317042][ T1105] Bluetooth: (null): Invalid header checksum [ 136.320772][ T1105] Bluetooth: (null): Invalid header checksum [ 136.632256][ T1105] Bluetooth: (null): Invalid header checksum [ 136.634792][ T1105] Bluetooth: (null): Invalid header checksum [ 136.652348][ T1105] Bluetooth: (null): Invalid header checksum [ 136.756609][ T1105] Bluetooth: (null): Invalid header checksum [ 136.887061][ T64] Bluetooth: (null): Invalid header checksum [ 137.116092][ T6374] misc userio: The device must be registered before sending interrupts [ 137.429331][ T6380] vivid-000: disconnect [ 137.432366][ T6380] vivid-000: reconnect [ 137.445329][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 137.451541][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 138.023900][ T6388] syzkaller0: entered promiscuous mode [ 138.027066][ T6388] syzkaller0: entered allmulticast mode [ 138.559436][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.566391][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.224588][ T39] audit: type=1400 audit(1724636473.752:279): avc: denied { read write } for pid=6402 comm="syz.2.270" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.241790][ T39] audit: type=1400 audit(1724636473.752:280): avc: denied { open } for pid=6402 comm="syz.2.270" path="/dev/sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.270042][ T39] audit: type=1400 audit(1724636473.802:281): avc: denied { mounton } for pid=6402 comm="syz.2.270" path="/66/file0" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 139.271536][ T6406] syz.2.270: attempt to access beyond end of device [ 139.271536][ T6406] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 139.288373][ T6406] syz.2.270: attempt to access beyond end of device [ 139.288373][ T6406] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 139.295805][ T6406] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 139.302467][ T6406] syz.2.270: attempt to access beyond end of device [ 139.302467][ T6406] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 139.308193][ T6406] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 139.312635][ T6406] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 139.316232][ T6406] UDF-fs: Scanning with blocksize 512 failed [ 139.320267][ T6406] syz.2.270: attempt to access beyond end of device [ 139.320267][ T6406] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 139.326581][ T6406] syz.2.270: attempt to access beyond end of device [ 139.326581][ T6406] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 139.331953][ T6406] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 139.337538][ T6406] syz.2.270: attempt to access beyond end of device [ 139.337538][ T6406] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 139.343078][ T6406] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 139.346934][ T6406] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 139.349739][ T6406] UDF-fs: Scanning with blocksize 1024 failed [ 139.353179][ T6406] syz.2.270: attempt to access beyond end of device [ 139.353179][ T6406] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 139.359472][ T6406] syz.2.270: attempt to access beyond end of device [ 139.359472][ T6406] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 139.365321][ T6406] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 139.369119][ T6406] syz.2.270: attempt to access beyond end of device [ 139.369119][ T6406] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 139.375332][ T6406] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 139.379769][ T6406] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 139.383587][ T6406] UDF-fs: Scanning with blocksize 2048 failed [ 139.386707][ T6406] syz.2.270: attempt to access beyond end of device [ 139.386707][ T6406] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 139.392587][ T6406] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 139.397754][ T6406] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 139.401959][ T6406] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 139.405706][ T6406] UDF-fs: Scanning with blocksize 4096 failed [ 139.408450][ T6406] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 140.100926][ T6414] input: syz0 as /devices/virtual/input/input9 [ 140.199409][ T6414] 9pnet: Could not find request transport: fd0x0000000000000004 [ 140.309495][ T39] audit: type=1400 audit(1724636474.832:282): avc: denied { sys_module } for pid=6415 comm="syz.3.274" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 141.006606][ T6433] vivid-000: disconnect [ 141.010876][ T6433] vivid-000: reconnect [ 141.463025][ T6444] vivid-000: disconnect [ 141.709141][ T6448] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 141.713628][ T6448] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 141.718210][ T6448] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 141.722305][ T6448] UDF-fs: Scanning with blocksize 512 failed [ 141.726757][ T6448] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 141.731489][ T6448] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 141.736390][ T6448] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 141.740056][ T6448] UDF-fs: Scanning with blocksize 1024 failed [ 141.744932][ T6448] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 141.749317][ T6448] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 141.753588][ T6448] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 141.757069][ T6448] UDF-fs: Scanning with blocksize 2048 failed [ 141.760935][ T6448] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 141.765393][ T6448] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 141.770646][ T6448] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 141.773589][ T6448] UDF-fs: Scanning with blocksize 4096 failed [ 141.776594][ T6448] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 141.777487][ T39] audit: type=1400 audit(1724636476.312:283): avc: denied { rename } for pid=4805 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.792096][ T39] audit: type=1400 audit(1724636476.312:284): avc: denied { unlink } for pid=4805 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.804159][ T39] audit: type=1400 audit(1724636476.312:285): avc: denied { create } for pid=4805 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.913350][ T6434] vivid-000: reconnect [ 142.250800][ T6454] input: syz0 as /devices/virtual/input/input10 [ 142.324822][ T6457] input: syz0 as /devices/virtual/input/input11 [ 142.595159][ T6455] 9pnet: Could not find request transport: fd0x0000000000000004 [ 142.602717][ T6454] 9pnet: Could not find request transport: fd0x0000000000000004 [ 144.587997][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 144.594743][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 144.992358][ T6485] bio_check_eod: 14 callbacks suppressed [ 144.992456][ T6485] syz.0.287: attempt to access beyond end of device [ 144.992456][ T6485] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 145.002369][ T6485] syz.0.287: attempt to access beyond end of device [ 145.002369][ T6485] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 145.007950][ T6485] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 145.012191][ T6485] syz.0.287: attempt to access beyond end of device [ 145.012191][ T6485] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 145.016911][ T6485] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 145.020548][ T6485] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 145.024024][ T6485] UDF-fs: Scanning with blocksize 512 failed [ 145.032599][ T6485] syz.0.287: attempt to access beyond end of device [ 145.032599][ T6485] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 145.039752][ T6485] syz.0.287: attempt to access beyond end of device [ 145.039752][ T6485] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 145.045874][ T6485] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 145.051748][ T6485] syz.0.287: attempt to access beyond end of device [ 145.051748][ T6485] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 145.057629][ T6485] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 145.062098][ T6485] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 145.066284][ T6485] UDF-fs: Scanning with blocksize 1024 failed [ 145.077012][ T6485] syz.0.287: attempt to access beyond end of device [ 145.077012][ T6485] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 145.082864][ T6485] syz.0.287: attempt to access beyond end of device [ 145.082864][ T6485] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 145.088481][ T6485] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 145.092652][ T6485] syz.0.287: attempt to access beyond end of device [ 145.092652][ T6485] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 145.098158][ T6485] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 145.102395][ T6485] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 145.105860][ T6485] UDF-fs: Scanning with blocksize 2048 failed [ 145.113722][ T6485] syz.0.287: attempt to access beyond end of device [ 145.113722][ T6485] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 145.118372][ T6485] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 145.123860][ T6485] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 145.127750][ T6485] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 145.131220][ T6485] UDF-fs: Scanning with blocksize 4096 failed [ 145.134077][ T6485] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 146.684626][ T39] audit: type=1326 audit(1724636481.212:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.292" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f00779e79 code=0x0 [ 146.805771][ T6507] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 146.841317][ T39] audit: type=1326 audit(1724636481.372:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.292" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f00779e79 code=0x0 [ 146.937574][ T39] audit: type=1326 audit(1724636481.472:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.292" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f00779e79 code=0x0 [ 147.971396][ T6520] input: syz0 as /devices/virtual/input/input13 [ 148.130178][ T6525] input: syz0 as /devices/virtual/input/input12 [ 148.179401][ T6524] fuse: Unknown parameter 'user_i00000000000000000000' [ 148.503846][ T6530] netlink: 'syz.0.299': attribute type 14 has an invalid length. [ 148.888586][ T6536] netlink: 'syz.2.301': attribute type 14 has an invalid length. [ 148.956722][ T6540] netlink: 'syz.1.302': attribute type 14 has an invalid length. [ 148.960807][ T39] audit: type=1400 audit(1724636483.492:289): avc: denied { ioctl } for pid=6528 comm="syz.0.299" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 149.049488][ T6535] netlink: 'syz.3.300': attribute type 14 has an invalid length. [ 149.246831][ T39] audit: type=1400 audit(1724636483.782:290): avc: denied { ioctl } for pid=6531 comm="syz.3.300" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12047 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.202231][ T6559] 9pnet_fd: Insufficient options for proto=fd [ 151.429114][ T6564] vivid-000: disconnect [ 151.448602][ T6564] vivid-000: reconnect [ 151.520036][ T5435] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 151.722886][ T5435] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.737544][ T5435] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 151.741907][ T5435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.746022][ T830] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 151.749488][ T5435] usb 7-1: Product: syz [ 151.752227][ T5435] usb 7-1: Manufacturer: syz [ 151.754329][ T5435] usb 7-1: SerialNumber: syz [ 151.774142][ T5435] usb 7-1: config 0 descriptor?? [ 151.786415][ T5435] usbtest 7-1:0.0: couldn't get endpoints, -22 [ 151.791546][ T5435] usbtest 7-1:0.0: probe with driver usbtest failed with error -22 [ 151.924575][ T830] usb 6-1: Using ep0 maxpacket: 8 [ 151.935196][ T830] usb 6-1: config 0 has no interfaces? [ 151.938504][ T830] usb 6-1: New USB device found, idVendor=1b96, idProduct=0018, bcdDevice= 0.00 [ 151.942178][ T830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.949767][ T830] usb 6-1: config 0 descriptor?? [ 152.185545][ T5380] usb 6-1: USB disconnect, device number 3 [ 152.986846][ T6576] syzkaller0: entered promiscuous mode [ 152.990076][ T6576] syzkaller0: entered allmulticast mode [ 154.126794][ T833] usb 7-1: USB disconnect, device number 8 [ 155.741122][ T6591] netlink: 'syz.2.314': attribute type 14 has an invalid length. [ 156.588034][ T6607] syzkaller0: entered promiscuous mode [ 156.590235][ T6607] syzkaller0: entered allmulticast mode [ 158.319322][ T6613] netlink: 'syz.2.319': attribute type 14 has an invalid length. [ 158.556518][ T6617] syzkaller0: entered promiscuous mode [ 158.559436][ T6617] syzkaller0: entered allmulticast mode [ 160.360307][ T6623] netlink: 'syz.2.321': attribute type 14 has an invalid length. [ 166.608263][ T5347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.617902][ T5347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.621703][ T5347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.626970][ T5336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.631565][ T5347] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.632638][ T5336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.639135][ T5336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.642980][ T5336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.649517][ T5347] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.649581][ T5336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.656361][ T5347] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 166.659774][ T5347] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.682518][ T5342] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.693376][ T39] audit: type=1400 audit(1724636501.222:291): avc: denied { mounton } for pid=6639 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 166.695731][ T5342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.725798][ T5342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.732826][ T5342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.737425][ T5342] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 166.768703][ T5342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.064608][ T6639] chnl_net:caif_netlink_parms(): no params data found [ 167.122658][ T6642] chnl_net:caif_netlink_parms(): no params data found [ 167.292439][ T6639] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.303793][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.308109][ T6639] bridge_slave_0: entered allmulticast mode [ 167.319549][ T6639] bridge_slave_0: entered promiscuous mode [ 167.332473][ T6639] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.337824][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.340827][ T6639] bridge_slave_1: entered allmulticast mode [ 167.353456][ T6639] bridge_slave_1: entered promiscuous mode [ 167.565149][ T6639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.573737][ T6639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.582153][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.594103][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.603642][ T6642] bridge_slave_0: entered allmulticast mode [ 167.608360][ T6642] bridge_slave_0: entered promiscuous mode [ 167.641725][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.645492][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.648693][ T6642] bridge_slave_1: entered allmulticast mode [ 167.652661][ T6642] bridge_slave_1: entered promiscuous mode [ 167.767733][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.779094][ T6639] team0: Port device team_slave_0 added [ 167.783991][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.839982][ T6639] team0: Port device team_slave_1 added [ 167.982763][ T6642] team0: Port device team_slave_0 added [ 167.987325][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.990746][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.021458][ T6639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.029286][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.048197][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.062100][ T6639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.112209][ T6642] team0: Port device team_slave_1 added [ 168.258601][ T6639] hsr_slave_0: entered promiscuous mode [ 168.277736][ T6639] hsr_slave_1: entered promiscuous mode [ 168.280859][ T6639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.283834][ T6639] Cannot create hsr debugfs directory [ 168.321736][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.326312][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.340091][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.431489][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.434224][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.445822][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.631537][ T6642] hsr_slave_0: entered promiscuous mode [ 168.650117][ T6642] hsr_slave_1: entered promiscuous mode [ 168.664085][ T6642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.679206][ T6642] Cannot create hsr debugfs directory [ 168.714816][ T5345] Bluetooth: hci4: command tx timeout [ 168.784666][ T5345] Bluetooth: hci5: command tx timeout [ 168.895527][ T6639] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.067881][ T6639] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.167424][ T6639] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.271694][ T6639] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.439953][ T6639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.480308][ T6639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.490460][ T6639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.498255][ T6639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.668873][ T6639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.682733][ T6639] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.694765][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.698675][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.723374][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.726616][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.952852][ T6642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.968518][ T6642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.976696][ T6642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.983908][ T6642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.058889][ T6639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.159805][ T6639] veth0_vlan: entered promiscuous mode [ 170.168951][ T6639] veth1_vlan: entered promiscuous mode [ 170.202502][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.230113][ T6642] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.243027][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.246585][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.284805][ T6639] veth0_macvtap: entered promiscuous mode [ 170.292570][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.295922][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.302358][ T6639] veth1_macvtap: entered promiscuous mode [ 170.379376][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.384333][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.391521][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.398142][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.409222][ T6639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.426218][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.430997][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.435692][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.439975][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.445945][ T6639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.465313][ T6639] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.469194][ T6639] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.473038][ T6639] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.495964][ T6639] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.630056][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.634320][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.663419][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.667008][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.677943][ T39] audit: type=1400 audit(1724636505.212:292): avc: denied { mount } for pid=6639 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 170.781632][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.808723][ T5345] Bluetooth: hci4: command tx timeout [ 170.836585][ T6642] veth0_vlan: entered promiscuous mode [ 170.859892][ T6642] veth1_vlan: entered promiscuous mode [ 170.875099][ T5345] Bluetooth: hci5: command tx timeout [ 170.911928][ T6642] veth0_macvtap: entered promiscuous mode [ 170.918962][ T6642] veth1_macvtap: entered promiscuous mode [ 170.934975][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.939919][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.947988][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.952623][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.957344][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.961973][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.968053][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.006606][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.012135][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.016619][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.018159][ T5342] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.021734][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.021760][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.043413][ T5342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.044231][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.047823][ T5342] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.053055][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.061955][ T5342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.064832][ T6642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.068107][ T5342] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 171.068989][ T6642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.072424][ T5342] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.075874][ T6642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.082126][ T6642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.179436][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.187422][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.265100][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.268613][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.478504][ T6672] chnl_net:caif_netlink_parms(): no params data found [ 171.754913][ T5345] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 171.760269][ T5345] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 171.764245][ T5345] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 171.786357][ T5345] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 171.790990][ T5345] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 171.794320][ T5345] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.808294][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.811962][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.816346][ T6672] bridge_slave_0: entered allmulticast mode [ 171.820948][ T6672] bridge_slave_0: entered promiscuous mode [ 171.846109][ T6672] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.849294][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.852720][ T6672] bridge_slave_1: entered allmulticast mode [ 171.857149][ T6672] bridge_slave_1: entered promiscuous mode [ 171.932501][ T6672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.957428][ T6672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.062585][ T6672] team0: Port device team_slave_0 added [ 172.069833][ T6672] team0: Port device team_slave_1 added [ 172.272753][ T6672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.275594][ T6672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.299870][ T6672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.329015][ T6672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.332541][ T6672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.344665][ T6672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.452056][ T6672] hsr_slave_0: entered promiscuous mode [ 172.456148][ T6672] hsr_slave_1: entered promiscuous mode [ 172.459618][ T6672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.463141][ T6672] Cannot create hsr debugfs directory [ 172.741865][ T6687] chnl_net:caif_netlink_parms(): no params data found [ 172.873686][ T5345] Bluetooth: hci4: command tx timeout [ 172.944578][ T5345] Bluetooth: hci5: command tx timeout [ 173.026120][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.029794][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.033064][ T6687] bridge_slave_0: entered allmulticast mode [ 173.037963][ T6687] bridge_slave_0: entered promiscuous mode [ 173.044151][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.051109][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.055422][ T6687] bridge_slave_1: entered allmulticast mode [ 173.061278][ T6687] bridge_slave_1: entered promiscuous mode [ 173.111125][ T5345] Bluetooth: hci6: command tx timeout [ 173.168544][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.176178][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.277867][ T6687] team0: Port device team_slave_0 added [ 173.324129][ T6687] team0: Port device team_slave_1 added [ 173.445981][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.449002][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.460459][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.480699][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.485592][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.496552][ T6687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.636354][ T6687] hsr_slave_0: entered promiscuous mode [ 173.640935][ T6687] hsr_slave_1: entered promiscuous mode [ 173.644175][ T6687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.652924][ T6687] Cannot create hsr debugfs directory [ 173.794938][ T6672] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.820514][ T6672] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.825098][ T5345] Bluetooth: hci7: command tx timeout [ 173.827817][ T6672] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.854268][ T6672] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.999520][ T6687] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.144867][ T6687] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.167850][ T6672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.206231][ T6672] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.232528][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.236347][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.257741][ T6687] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.273805][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.276539][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.332195][ T6687] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.490148][ T6687] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.498816][ T6687] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.520038][ T6687] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.553045][ T6687] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.586997][ T6672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.725614][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.731883][ T6672] veth0_vlan: entered promiscuous mode [ 174.749841][ T6687] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.758826][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.762869][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.789744][ T6672] veth1_vlan: entered promiscuous mode [ 174.797866][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.802248][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.851125][ T6672] veth0_macvtap: entered promiscuous mode [ 174.887804][ T6672] veth1_macvtap: entered promiscuous mode [ 174.923613][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.944808][ T5345] Bluetooth: hci4: command tx timeout [ 174.948349][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.954503][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.958984][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.963180][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.967557][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.980504][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.985014][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.001515][ T6672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.023725][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.037997][ T5345] Bluetooth: hci5: command tx timeout [ 175.040784][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.060132][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.066127][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.070282][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.091903][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.096775][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.113295][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.133419][ T6672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.167927][ T6672] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.178502][ T6672] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.182373][ T6672] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.205518][ T5345] Bluetooth: hci6: command tx timeout [ 175.216179][ T6672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.383662][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.390104][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.444722][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.448183][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.466206][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.541757][ T6687] veth0_vlan: entered promiscuous mode [ 175.557348][ T6687] veth1_vlan: entered promiscuous mode [ 175.599219][ T6687] veth0_macvtap: entered promiscuous mode [ 175.608964][ T6687] veth1_macvtap: entered promiscuous mode [ 175.628482][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.634057][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.639800][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.644257][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.649104][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.653836][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.661630][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.666432][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.671016][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.676868][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.683217][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.689048][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.693521][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.698047][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.702110][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.707378][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.711536][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.715598][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.720868][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.725676][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.730475][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.737304][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.750248][ T6687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.754206][ T6687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.759102][ T6687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.762921][ T6687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.845034][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.848256][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.876657][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.879802][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.922022][ T5345] Bluetooth: hci7: command tx timeout [ 176.109307][ T6711] input: syz0 as /devices/virtual/input/input14 [ 176.181785][ T6711] 9pnet: Could not find request transport: fd0x0000000000000004 [ 177.275547][ T5345] Bluetooth: hci6: command tx timeout [ 177.984883][ T5345] Bluetooth: hci7: command tx timeout [ 179.355089][ T5345] Bluetooth: hci6: command tx timeout [ 179.837078][ T5345] Bluetooth: hci7: Malformed LE Event: 0x1b [ 180.065583][ T5345] Bluetooth: hci7: command tx timeout [ 180.722795][ T39] audit: type=1400 audit(1724636515.252:293): avc: denied { view } for pid=6719 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 182.002719][ T5342] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 182.008996][ T5342] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 182.014508][ T5342] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 182.024931][ T5342] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 182.035972][ T5342] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 182.044614][ T5342] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 182.095229][ T5345] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 182.104127][ T5345] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 182.109172][ T5345] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 182.117304][ T5345] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 182.122717][ T5345] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 182.132041][ T5345] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 182.556986][ T6725] chnl_net:caif_netlink_parms(): no params data found [ 182.629030][ T6727] chnl_net:caif_netlink_parms(): no params data found [ 182.875537][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.878898][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.881785][ T6725] bridge_slave_0: entered allmulticast mode [ 182.885589][ T6725] bridge_slave_0: entered promiscuous mode [ 182.897620][ T6725] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.900694][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.904228][ T6725] bridge_slave_1: entered allmulticast mode [ 182.908493][ T6725] bridge_slave_1: entered promiscuous mode [ 183.107437][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.110509][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.113770][ T6727] bridge_slave_0: entered allmulticast mode [ 183.118439][ T6727] bridge_slave_0: entered promiscuous mode [ 183.123373][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.128292][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.131466][ T6727] bridge_slave_1: entered allmulticast mode [ 183.135902][ T6727] bridge_slave_1: entered promiscuous mode [ 183.143694][ T6725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.152655][ T6725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.293877][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.359270][ T6725] team0: Port device team_slave_0 added [ 183.374068][ T6725] team0: Port device team_slave_1 added [ 183.438199][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.489689][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.493333][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.507976][ T6725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.554757][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.557532][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.580434][ T6725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.646664][ T6727] team0: Port device team_slave_0 added [ 183.668179][ T6727] team0: Port device team_slave_1 added [ 183.842265][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.846338][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.862432][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.939646][ T6725] hsr_slave_0: entered promiscuous mode [ 183.958244][ T6725] hsr_slave_1: entered promiscuous mode [ 184.002655][ T6725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.007507][ T6725] Cannot create hsr debugfs directory [ 184.010790][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.017640][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.044611][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.154644][ T5345] Bluetooth: hci8: command tx timeout [ 184.234665][ T5345] Bluetooth: hci9: command tx timeout [ 184.319625][ T6727] hsr_slave_0: entered promiscuous mode [ 184.326271][ T6727] hsr_slave_1: entered promiscuous mode [ 184.329207][ T6727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.332009][ T6727] Cannot create hsr debugfs directory [ 184.787179][ T6725] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.907404][ T6725] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.006351][ T6725] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.124673][ T35] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 185.150543][ T6725] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.272173][ T6727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.324496][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 185.328663][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.332934][ T35] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.336510][ T35] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.339946][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.378097][ T35] usb 7-1: config 0 descriptor?? [ 185.420656][ T6727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.507787][ T6727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.616261][ T6727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.855510][ T6727] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.888000][ T6727] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.898371][ T831] usb 7-1: USB disconnect, device number 9 [ 185.936627][ T6727] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.950402][ T6727] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.052246][ T6725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.058682][ T6725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.085646][ T6725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.093024][ T6725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.179727][ T5342] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 186.185174][ T5342] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 186.189256][ T5342] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 186.224544][ T5342] Bluetooth: hci8: command tx timeout [ 186.234517][ T5342] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 186.239322][ T5342] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 186.253071][ T5342] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 186.272888][ T6725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.298828][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.304558][ T5345] Bluetooth: hci9: command tx timeout [ 186.377612][ T6725] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.415897][ T6727] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.425996][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.429187][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.456056][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.462430][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.526546][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.543718][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.554153][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.570907][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.847739][ T6725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.040678][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.146670][ T6727] veth0_vlan: entered promiscuous mode [ 187.170092][ T6727] veth1_vlan: entered promiscuous mode [ 187.203348][ T6754] chnl_net:caif_netlink_parms(): no params data found [ 187.233003][ T6725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.274115][ T6725] veth0_vlan: entered promiscuous mode [ 187.283641][ T6725] veth1_vlan: entered promiscuous mode [ 187.312287][ T6725] veth0_macvtap: entered promiscuous mode [ 187.318920][ T6725] veth1_macvtap: entered promiscuous mode [ 187.560818][ T6772] bridge_slave_0: left allmulticast mode [ 187.570959][ T6772] bridge_slave_0: left promiscuous mode [ 187.573751][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.607770][ T6772] bridge_slave_1: left allmulticast mode [ 187.610501][ T6772] bridge_slave_1: left promiscuous mode [ 187.614661][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.688458][ T6772] bond0: (slave bond_slave_0): Releasing backup interface [ 187.720136][ T6772] bond0: (slave bond_slave_1): Releasing backup interface [ 187.758815][ T6772] team0: Port device team_slave_0 removed [ 187.778787][ T6772] team0: Port device team_slave_1 removed [ 187.782128][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.785729][ T6772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.792442][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.795088][ T6772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.809086][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.813594][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.824742][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.831744][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.838098][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.844626][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.849064][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.855848][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.862756][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.871341][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.881968][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.893327][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.898821][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.907315][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.928925][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.933254][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.939156][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.946252][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.958229][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.973819][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.979220][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.002672][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.007366][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.015525][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.034862][ T6754] bridge_slave_0: entered allmulticast mode [ 188.038831][ T6754] bridge_slave_0: entered promiscuous mode [ 188.044710][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.047884][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.051117][ T6754] bridge_slave_1: entered allmulticast mode [ 188.077619][ T6754] bridge_slave_1: entered promiscuous mode [ 188.082687][ T6773] bridge0: port 1(veth0) entered blocking state [ 188.087447][ T6773] bridge0: port 1(veth0) entered disabled state [ 188.090257][ T6773] veth0: entered allmulticast mode [ 188.116258][ T6773] veth0: entered promiscuous mode [ 188.122797][ T6773] bridge0: port 1(veth0) entered blocking state [ 188.126383][ T6773] bridge0: port 1(veth0) entered forwarding state [ 188.189354][ T6725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.193399][ T6725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.198292][ T6725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.202406][ T6725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.324795][ T5345] Bluetooth: hci8: command tx timeout [ 188.331333][ T5342] Bluetooth: hci10: command tx timeout [ 188.344218][ T6727] veth0_macvtap: entered promiscuous mode [ 188.356992][ T6754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.365899][ T6754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.395484][ T5342] Bluetooth: hci9: command tx timeout [ 188.440525][ T6727] veth1_macvtap: entered promiscuous mode [ 188.516324][ T6754] team0: Port device team_slave_0 added [ 188.522508][ T6754] team0: Port device team_slave_1 added [ 188.614048][ T6778] syzkaller0: entered promiscuous mode [ 188.616986][ T6778] syzkaller0: entered allmulticast mode [ 188.649002][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.652461][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.669385][ T6754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.809318][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.812613][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.822785][ T6754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.911981][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.926696][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.940942][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.944924][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.953029][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.961104][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.965070][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.969296][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.973487][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.977980][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.982067][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.986411][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.993268][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.110257][ T6754] hsr_slave_0: entered promiscuous mode [ 189.118940][ T6754] hsr_slave_1: entered promiscuous mode [ 189.129248][ T6754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.132519][ T6754] Cannot create hsr debugfs directory [ 190.384614][ T5342] Bluetooth: hci8: command tx timeout [ 190.387118][ T5345] Bluetooth: hci10: command tx timeout [ 190.473425][ T5345] Bluetooth: hci9: command tx timeout [ 191.492428][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.499497][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.505784][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.518575][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.523831][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.528761][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.532864][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.540250][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.545267][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.550596][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.555252][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.559420][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.565404][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.614640][ T6727] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.620211][ T6727] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.624441][ T6727] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.628632][ T6727] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.652903][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.656544][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.726757][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.731193][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.809503][ T6782] input: syz0 as /devices/virtual/input/input15 [ 191.908223][ T6645] udevd[6645]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 191.911037][ T6754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.040094][ T6781] 9pnet: Could not find request transport: fd0x0000000000000005 [ 192.042265][ T6754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.092974][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.112664][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.168208][ T6754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.189027][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.192797][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.359251][ T6754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.422685][ T6794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.332'. [ 192.462802][ T39] audit: type=1326 audit(1724636526.992:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.2.342" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b75779e79 code=0x0 [ 192.481436][ T5345] Bluetooth: hci10: command tx timeout [ 192.587286][ T6798] tipc: Started in network mode [ 192.589335][ T6798] tipc: Node identity fffffff9, cluster identity 4711 [ 192.592000][ T6798] tipc: Node number set to 4294967289 [ 192.689285][ T6754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.699570][ T6754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.709704][ T6754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.725808][ T6754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.828144][ T6754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.871120][ T6754] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.881308][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.884428][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.899605][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.903333][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.381351][ T6754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.472392][ T6754] veth0_vlan: entered promiscuous mode [ 193.501870][ T6754] veth1_vlan: entered promiscuous mode [ 193.568255][ T6754] veth0_macvtap: entered promiscuous mode [ 193.603538][ T6754] veth1_macvtap: entered promiscuous mode [ 193.641541][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.650708][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.656393][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.661527][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.666443][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.670759][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.676083][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.680635][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.685527][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.710120][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.714317][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.719580][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.723183][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.726964][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.730671][ T6812] vivid-000: disconnect [ 193.734247][ T6754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.746373][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.750741][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.769288][ T6812] vivid-000: reconnect [ 193.801899][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.806457][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.810960][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.815766][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.820961][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.826767][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.847523][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.853995][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.861678][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.869999][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.874571][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.879993][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.891036][ T6754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.941660][ T6754] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.946079][ T6754] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.950351][ T6754] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.953749][ T6754] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.150426][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.163476][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.190537][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.204464][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.548314][ T6833] netlink: 'syz.3.336': attribute type 14 has an invalid length. [ 194.623213][ T5345] Bluetooth: hci10: command tx timeout [ 195.563420][ T39] audit: type=1400 audit(1724636530.102:295): avc: denied { connect } for pid=6844 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.072738][ T5345] Bluetooth: hci8: Received unexpected HCI Event 0x00 [ 196.118286][ T5345] Bluetooth: hci8: unexpected event 0x06 length: 17 > 3 [ 197.901384][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 197.930198][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 198.967064][ T6874] bridge_slave_0: left allmulticast mode [ 199.038295][ T6874] bridge_slave_0: left promiscuous mode [ 199.046959][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.070653][ T6874] bridge_slave_1: left allmulticast mode [ 199.080457][ T6874] bridge_slave_1: left promiscuous mode [ 199.083659][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.140302][ T6874] bond0: (slave bond_slave_0): Releasing backup interface [ 199.242103][ T6874] bond0: (slave bond_slave_1): Releasing backup interface [ 199.379271][ T6874] team0: Port device team_slave_0 removed [ 199.405905][ T6874] team0: Port device team_slave_1 removed [ 199.420666][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.427164][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.441941][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.449009][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.515416][ T6880] bridge0: port 1(veth0) entered blocking state [ 199.522091][ T6880] bridge0: port 1(veth0) entered disabled state [ 199.529902][ T6880] veth0: entered allmulticast mode [ 199.539109][ T6880] veth0: entered promiscuous mode [ 199.542557][ T6880] bridge0: port 1(veth0) entered blocking state [ 199.546173][ T6880] bridge0: port 1(veth0) entered forwarding state [ 199.947892][ T6890] veth0: left allmulticast mode [ 199.950041][ T6890] veth0: left promiscuous mode [ 199.952152][ T6890] bridge0: port 1(veth0) entered disabled state [ 200.070424][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.074703][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.119041][ T6891] bridge0: port 1(veth0) entered blocking state [ 200.122176][ T6891] bridge0: port 1(veth0) entered disabled state [ 200.146808][ T6891] veth0: entered allmulticast mode [ 200.149931][ T6891] veth0: entered promiscuous mode [ 200.154286][ T6891] bridge0: port 1(veth0) entered blocking state [ 200.159662][ T6891] bridge0: port 1(veth0) entered forwarding state [ 200.580815][ T39] audit: type=1400 audit(1724636535.112:296): avc: denied { getopt } for pid=6892 comm="syz.0.365" lport=51528 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 201.933321][ T6909] veth0: left allmulticast mode [ 201.935596][ T6909] veth0: left promiscuous mode [ 201.956346][ T6909] bridge0: port 1(veth0) entered disabled state [ 202.040351][ T6912] bridge0: port 1(veth0) entered blocking state [ 202.043563][ T6912] bridge0: port 1(veth0) entered disabled state [ 202.071647][ T6912] veth0: entered allmulticast mode [ 202.081892][ T6912] veth0: entered promiscuous mode [ 202.082865][ T6912] bridge0: port 1(veth0) entered blocking state [ 202.083008][ T6912] bridge0: port 1(veth0) entered forwarding state [ 202.728252][ T6920] veth0: left allmulticast mode [ 202.730566][ T6920] veth0: left promiscuous mode [ 202.753412][ T6920] bridge0: port 1(veth0) entered disabled state [ 205.310679][ T5345] Bluetooth: hci10: Malformed LE Event: 0x1b [ 206.714503][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 206.924163][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.949860][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 206.961175][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.969475][ T35] usb 5-1: Product: syz [ 206.972091][ T35] usb 5-1: Manufacturer: syz [ 206.977684][ T35] usb 5-1: SerialNumber: syz [ 206.982131][ T35] usb 5-1: config 0 descriptor?? [ 207.035014][ T35] usbtest 5-1:0.0: couldn't get endpoints, -22 [ 207.071506][ T35] usbtest 5-1:0.0: probe with driver usbtest failed with error -22 [ 207.419046][ T35] usb 5-1: USB disconnect, device number 7 [ 207.653023][ T39] audit: type=1400 audit(1724636542.182:297): avc: denied { remount } for pid=6952 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.063365][ T6996] bio_check_eod: 2 callbacks suppressed [ 212.063382][ T6996] syz.0.389: attempt to access beyond end of device [ 212.063382][ T6996] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 212.073625][ T6996] syz.0.389: attempt to access beyond end of device [ 212.073625][ T6996] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 212.081135][ T6996] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 212.086839][ T6996] syz.0.389: attempt to access beyond end of device [ 212.086839][ T6996] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 212.093038][ T6996] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 212.097466][ T6996] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 212.102194][ T6996] UDF-fs: Scanning with blocksize 512 failed [ 212.110244][ T6996] syz.0.389: attempt to access beyond end of device [ 212.110244][ T6996] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 212.121025][ T6996] syz.0.389: attempt to access beyond end of device [ 212.121025][ T6996] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 212.128657][ T6996] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 212.133788][ T6996] syz.0.389: attempt to access beyond end of device [ 212.133788][ T6996] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 212.141687][ T6996] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 212.146526][ T6996] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 212.150317][ T6996] UDF-fs: Scanning with blocksize 1024 failed [ 212.154438][ T6996] syz.0.389: attempt to access beyond end of device [ 212.154438][ T6996] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 212.160928][ T6996] syz.0.389: attempt to access beyond end of device [ 212.160928][ T6996] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 212.167974][ T6996] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 212.173035][ T6996] syz.0.389: attempt to access beyond end of device [ 212.173035][ T6996] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 212.179077][ T6996] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 212.183330][ T6996] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 212.187317][ T6996] UDF-fs: Scanning with blocksize 2048 failed [ 212.190898][ T6996] syz.0.389: attempt to access beyond end of device [ 212.190898][ T6996] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 212.197399][ T6996] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 212.202592][ T6996] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 212.208254][ T6996] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 212.212204][ T6996] UDF-fs: Scanning with blocksize 4096 failed [ 212.215033][ T6996] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 212.232530][ T5342] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 212.239488][ T5342] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 212.244166][ T5342] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 212.250071][ T5342] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 212.253976][ T5342] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 212.258056][ T5342] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 212.516331][ T6997] chnl_net:caif_netlink_parms(): no params data found [ 212.928699][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.932071][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.939437][ T6997] bridge_slave_0: entered allmulticast mode [ 212.942953][ T6997] bridge_slave_0: entered promiscuous mode [ 212.953574][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.957437][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.960788][ T6997] bridge_slave_1: entered allmulticast mode [ 212.978594][ T6997] bridge_slave_1: entered promiscuous mode [ 213.037512][ T39] audit: type=1326 audit(1724636547.572:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.0.393" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8174379e79 code=0x0 [ 213.123063][ T6997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.131982][ T6997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.199800][ T7012] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 213.210599][ T39] audit: type=1326 audit(1724636547.742:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.0.393" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8174379e79 code=0x0 [ 213.352495][ T39] audit: type=1326 audit(1724636547.882:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.0.393" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8174379e79 code=0x0 [ 213.379666][ T6997] team0: Port device team_slave_0 added [ 213.386275][ T6997] team0: Port device team_slave_1 added [ 213.572411][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.575968][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.589612][ T6997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.595189][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.597773][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.609527][ T6997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.897563][ T6997] hsr_slave_0: entered promiscuous mode [ 213.902276][ T6997] hsr_slave_1: entered promiscuous mode [ 214.315447][ T5345] Bluetooth: hci11: command tx timeout [ 214.355266][ T6997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.358413][ T6997] Cannot create hsr debugfs directory [ 214.775904][ T6997] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.036134][ T7026] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 215.042990][ T7026] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 215.047637][ T7026] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 215.051501][ T7026] UDF-fs: Scanning with blocksize 512 failed [ 215.060274][ T7026] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 215.065635][ T7026] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 215.071802][ T7026] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 215.076505][ T7026] UDF-fs: Scanning with blocksize 1024 failed [ 215.082001][ T7026] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 215.087859][ T7026] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 215.093670][ T7026] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 215.100446][ T7026] UDF-fs: Scanning with blocksize 2048 failed [ 215.105898][ T7026] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 215.111063][ T7026] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 215.117553][ T7026] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 215.122572][ T7026] UDF-fs: Scanning with blocksize 4096 failed [ 215.126784][ T7026] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 215.247323][ T6997] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.473744][ T6997] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.710903][ T6997] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.279949][ T6997] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.287028][ T6997] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.294254][ T6997] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.306756][ T6997] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.387133][ T5345] Bluetooth: hci11: command tx timeout [ 216.443242][ T6997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.472234][ T6997] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.501844][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.509191][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.549345][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.553017][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.941979][ T7042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 216.947591][ T7042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 216.953202][ T7042] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 216.957251][ T7042] UDF-fs: Scanning with blocksize 512 failed [ 216.961509][ T7042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 216.968711][ T7042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 216.972926][ T7042] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 216.976602][ T7042] UDF-fs: Scanning with blocksize 1024 failed [ 216.980699][ T7042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 216.985111][ T7042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 216.988986][ T7042] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 216.992365][ T7042] UDF-fs: Scanning with blocksize 2048 failed [ 216.996127][ T7042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 217.000690][ T7042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 217.006177][ T7042] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 217.009562][ T7042] UDF-fs: Scanning with blocksize 4096 failed [ 217.012489][ T7042] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 217.419495][ T6997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.680735][ T6997] veth0_vlan: entered promiscuous mode [ 217.707020][ T7044] input: syz0 as /devices/virtual/input/input17 [ 217.831558][ T6997] veth1_vlan: entered promiscuous mode [ 217.877495][ T7047] 9pnet: Could not find request transport: fd0x0000000000000004 [ 218.006470][ T7051] bio_check_eod: 26 callbacks suppressed [ 218.006486][ T7051] syz.3.400: attempt to access beyond end of device [ 218.006486][ T7051] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 218.019851][ T7051] syz.3.400: attempt to access beyond end of device [ 218.019851][ T7051] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 218.049362][ T7051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 218.053624][ T7051] syz.3.400: attempt to access beyond end of device [ 218.053624][ T7051] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 218.059316][ T7051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 218.063357][ T7051] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 218.079827][ T7051] UDF-fs: Scanning with blocksize 512 failed [ 218.083817][ T7051] syz.3.400: attempt to access beyond end of device [ 218.083817][ T7051] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 218.090604][ T7051] syz.3.400: attempt to access beyond end of device [ 218.090604][ T7051] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 218.099313][ T7051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 218.103665][ T7051] syz.3.400: attempt to access beyond end of device [ 218.103665][ T7051] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 218.109409][ T7051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 218.113657][ T7051] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 218.117290][ T7051] UDF-fs: Scanning with blocksize 1024 failed [ 218.120440][ T7051] syz.3.400: attempt to access beyond end of device [ 218.120440][ T7051] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 218.128140][ T7051] syz.3.400: attempt to access beyond end of device [ 218.128140][ T7051] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 218.133825][ T7051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 218.138223][ T7051] syz.3.400: attempt to access beyond end of device [ 218.138223][ T7051] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 218.144425][ T7051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 218.148978][ T7051] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 218.152271][ T7051] UDF-fs: Scanning with blocksize 2048 failed [ 218.155229][ T7051] syz.3.400: attempt to access beyond end of device [ 218.155229][ T7051] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 218.160818][ T7051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 218.165513][ T7051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 218.169948][ T7051] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 218.173250][ T7051] UDF-fs: Scanning with blocksize 4096 failed [ 218.176373][ T7051] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 218.485663][ T5345] Bluetooth: hci11: command tx timeout [ 218.652092][ T6997] veth0_macvtap: entered promiscuous mode [ 218.756117][ T5345] Bluetooth: hci10: Received unexpected HCI Event 0x00 [ 218.760168][ T5345] Bluetooth: hci10: unexpected event 0x06 length: 17 > 3 [ 218.761231][ T6997] veth1_macvtap: entered promiscuous mode [ 218.886209][ T7058] input: syz0 as /devices/virtual/input/input18 [ 218.892071][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.908590][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.913375][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.917909][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.921880][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.949947][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.954032][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.986799][ T5345] Bluetooth: hci8: Received unexpected HCI Event 0x00 [ 218.990179][ T5345] Bluetooth: hci8: unexpected event 0x06 length: 17 > 3 [ 218.994196][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.017716][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.038790][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.042543][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.048394][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.055097][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.061809][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.095810][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.115710][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.122128][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.136108][ T7062] vivid-000: disconnect [ 219.136649][ T7062] vivid-000: reconnect [ 219.156377][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.160788][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.185299][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.208043][ T7058] 9pnet: Could not find request transport: fd0x0000000000000004 [ 219.213671][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.231670][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.236653][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.241599][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.254179][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.258486][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.262899][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.278986][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.284229][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.290098][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.312397][ T6997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.319059][ T6997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.330346][ T6997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.334777][ T6997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.443768][ T7071] input: syz0 as /devices/virtual/input/input19 [ 219.685826][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.711859][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.715814][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.718586][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.973201][ T7075] netlink: 'syz.2.407': attribute type 14 has an invalid length. [ 220.434813][ T39] audit: type=1326 audit(1724636554.962:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.0.408" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8174379e79 code=0x0 [ 220.545028][ T5345] Bluetooth: hci11: command tx timeout [ 220.583114][ T7086] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 220.609841][ T39] audit: type=1326 audit(1724636555.132:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.0.408" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8174379e79 code=0x0 [ 220.664027][ T39] audit: type=1326 audit(1724636555.192:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.0.408" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8174379e79 code=0x0 [ 221.134132][ T39] audit: type=1326 audit(1724636555.672:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.1.410" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f42379e79 code=0x0 [ 221.293725][ T39] audit: type=1326 audit(1724636555.822:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.1.410" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f42379e79 code=0x0 [ 221.436382][ T39] audit: type=1326 audit(1724636555.972:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.1.410" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f42379e79 code=0x0 [ 222.625007][ T5342] Bluetooth: hci11: command tx timeout [ 222.752696][ T7107] bridge_slave_0: left allmulticast mode [ 222.755290][ T7107] bridge_slave_0: left promiscuous mode [ 222.757704][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.766385][ T7107] bridge_slave_1: left allmulticast mode [ 222.780089][ T7107] bridge_slave_1: left promiscuous mode [ 222.791621][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.811399][ T7107] bond0: (slave bond_slave_0): Releasing backup interface [ 222.843999][ T7107] bond0: (slave bond_slave_1): Releasing backup interface [ 223.144626][ T7107] team0: Port device team_slave_0 removed [ 223.171596][ T7107] team0: Port device team_slave_1 removed [ 223.174998][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.179544][ T7107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.243024][ T7107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.250711][ T7107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.283283][ T7109] bridge0: port 1(veth0) entered blocking state [ 223.283382][ T7109] bridge0: port 1(veth0) entered disabled state [ 223.283525][ T7109] veth0: entered allmulticast mode [ 223.288606][ T7109] veth0: entered promiscuous mode [ 223.289964][ T7109] bridge0: port 1(veth0) entered blocking state [ 223.290070][ T7109] bridge0: port 1(veth0) entered forwarding state [ 223.446388][ T7116] bio_check_eod: 2 callbacks suppressed [ 223.446398][ T7116] syz.0.415: attempt to access beyond end of device [ 223.446398][ T7116] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 223.488621][ T7116] syz.0.415: attempt to access beyond end of device [ 223.488621][ T7116] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 223.574881][ T7116] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 223.580026][ T7116] syz.0.415: attempt to access beyond end of device [ 223.580026][ T7116] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 223.695961][ T7116] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 223.765702][ T7116] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 223.815140][ T7116] UDF-fs: Scanning with blocksize 512 failed [ 223.832385][ T7116] syz.0.415: attempt to access beyond end of device [ 223.832385][ T7116] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 223.864705][ T7116] syz.0.415: attempt to access beyond end of device [ 223.864705][ T7116] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 223.934509][ T7116] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 223.940169][ T7116] syz.0.415: attempt to access beyond end of device [ 223.940169][ T7116] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 223.946192][ T7116] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 223.950374][ T7116] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 223.953316][ T7116] UDF-fs: Scanning with blocksize 1024 failed [ 223.956496][ T7116] syz.0.415: attempt to access beyond end of device [ 223.956496][ T7116] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 223.964564][ T7116] syz.0.415: attempt to access beyond end of device [ 223.964564][ T7116] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 223.972464][ T7116] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 223.977895][ T7116] syz.0.415: attempt to access beyond end of device [ 223.977895][ T7116] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 223.986465][ T7116] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 223.991754][ T7116] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 223.996705][ T7116] UDF-fs: Scanning with blocksize 2048 failed [ 224.003026][ T7116] syz.0.415: attempt to access beyond end of device [ 224.003026][ T7116] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 224.011205][ T7116] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 224.018779][ T7116] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 224.028640][ T7116] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 224.039602][ T7116] UDF-fs: Scanning with blocksize 4096 failed [ 224.042693][ T7116] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 224.149272][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 224.154205][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 224.168713][ T7121] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 224.175942][ T7121] UDF-fs: Scanning with blocksize 512 failed [ 224.190161][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 224.204727][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 224.218928][ T7121] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 224.244924][ T7121] UDF-fs: Scanning with blocksize 1024 failed [ 224.248188][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 224.252578][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 224.257523][ T7121] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 224.261547][ T7121] UDF-fs: Scanning with blocksize 2048 failed [ 224.265410][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 224.269997][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 224.274063][ T7121] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 224.278540][ T7121] UDF-fs: Scanning with blocksize 4096 failed [ 224.281390][ T7121] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 224.692524][ T7128] bridge0: port 1(veth0) entered blocking state [ 224.700301][ T7128] bridge0: port 1(veth0) entered disabled state [ 224.726696][ T7128] veth0: entered allmulticast mode [ 224.730447][ T7128] veth0: entered promiscuous mode [ 224.733759][ T7128] bridge0: port 1(veth0) entered blocking state [ 224.737149][ T7128] bridge0: port 1(veth0) entered forwarding state [ 226.373845][ T7155] vivid-000: disconnect [ 226.376694][ T7155] vivid-000: reconnect [ 226.592981][ T39] audit: type=1326 audit(1724636561.122:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.3.426" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcf79e79 code=0x0 [ 226.742935][ T7161] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.768498][ T39] audit: type=1326 audit(1724636561.302:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.3.426" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcf79e79 code=0x0 [ 226.895883][ T39] audit: type=1326 audit(1724636561.422:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.3.426" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcf79e79 code=0x0 [ 227.861593][ T7172] vivid-000: disconnect [ 227.863986][ T7172] vivid-000: reconnect [ 228.804170][ T39] audit: type=1326 audit(1724636563.332:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.3.432" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcf79e79 code=0x0 [ 228.970107][ T7182] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.977106][ T39] audit: type=1326 audit(1724636563.512:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.3.432" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcf79e79 code=0x0 [ 229.137899][ T39] audit: type=1326 audit(1724636563.672:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.3.432" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcf79e79 code=0x0 [ 230.870593][ T7199] syzkaller0: entered promiscuous mode [ 230.888165][ T7199] syzkaller0: entered allmulticast mode [ 232.276397][ T7214] misc userio: The device must be registered before sending interrupts [ 234.714558][ T5380] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 234.718166][ T39] audit: type=1400 audit(1724636569.242:313): avc: denied { bind } for pid=7226 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.732926][ T39] audit: type=1400 audit(1724636569.262:314): avc: denied { listen } for pid=7226 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.888524][ T5380] usb 8-1: config index 0 descriptor too short (expected 59171, got 36) [ 234.894492][ T5380] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.900342][ T5380] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.905640][ T5380] usb 8-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 234.910329][ T5380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.925138][ T5380] usb 8-1: config 0 descriptor?? [ 235.113043][ T7234] misc userio: The device must be registered before sending interrupts [ 235.446146][ T5380] usbhid 8-1:0.0: can't add hid device: -71 [ 235.449029][ T5380] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 235.455493][ T5380] usb 8-1: USB disconnect, device number 10 [ 236.268520][ T7241] netlink: 'syz.3.446': attribute type 14 has an invalid length. [ 236.637695][ T7236] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.640714][ T7236] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 236.687214][ T7236] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 236.690634][ T7236] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 236.853836][ T7236] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 236.857730][ T7236] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 237.017247][ T7236] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 237.020533][ T7236] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 237.165477][ T7236] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 237.168223][ T7236] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 237.182740][ T7236] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 237.187193][ T7236] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 237.255166][ T7236] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 237.257864][ T7236] Bluetooth: hci10: Error when powering off device on rfkill (-4) [ 237.419756][ T7236] ------------[ cut here ]------------ [ 237.423035][ T7236] WARNING: CPU: 2 PID: 7236 at kernel/kcov.c:871 kcov_remote_start+0xfd/0x6e0 [ 237.430519][ T7236] Modules linked in: [ 237.432494][ T7236] CPU: 2 UID: 0 PID: 7236 Comm: syz.1.444 Not tainted 6.11.0-rc5-syzkaller #0 [ 237.460287][ T7236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.467318][ T7236] RIP: 0010:kcov_remote_start+0xfd/0x6e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 237.472347][ T7236] Code: 65 4c 8b 3d 35 50 79 7e 4d 89 7c 24 28 8b 95 f8 15 00 00 65 8b 05 2b 50 79 7e a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 1b 98 86 09 44 8b 1d 64 36 66 13 89 c0 48 03 1c c5 40 [ 237.484102][ T7236] RSP: 0018:ffffc90004a77518 EFLAGS: 00010002 [ 237.487276][ T7236] RAX: 0000000080000200 RBX: 000000000002d648 RCX: 0000000000000001 [ 237.492060][ T7236] RDX: 0000000000000002 RSI: ffffffff8b4cc7a0 RDI: ffffffff8bb09ac0 [ 237.497979][ T7236] RBP: ffff88802ae32440 R08: 0000000000000000 R09: fffffbfff28c5aee [ 237.502143][ T7236] R10: ffffffff9462d777 R11: 0000000000000026 R12: ffff88806b22d648 [ 237.506037][ T7236] R13: 0000000000000200 R14: 0000000000000000 R15: ffff88802ae32440 [ 237.509776][ T7236] FS: 00007f9f431856c0(0000) GS:ffff88806b200000(0000) knlGS:0000000000000000 [ 237.514088][ T7236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.517244][ T7236] CR2: 00007f1a6d0c0020 CR3: 000000005d0c4000 CR4: 0000000000350ef0 [ 237.520757][ T7236] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.524153][ T7236] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.527809][ T7236] Call Trace: [ 237.529424][ T7236] [ 237.530878][ T7236] ? show_regs+0x8c/0xa0 [ 237.532888][ T7236] ? __warn+0xe5/0x3c0 [ 237.534850][ T7236] ? kcov_remote_start+0xfd/0x6e0 [ 237.537126][ T7236] ? report_bug+0x3c0/0x580 [ 237.539103][ T7236] ? handle_bug+0x3d/0x70 [ 237.541070][ T7236] ? exc_invalid_op+0x17/0x50 [ 237.543172][ T7236] ? asm_exc_invalid_op+0x1a/0x20 [ 237.545646][ T7236] ? kcov_remote_start+0xfd/0x6e0 [ 237.547811][ T7236] ? kcov_remote_start+0xb3/0x6e0 [ 237.550025][ T7236] ieee80211_rx_list+0x470/0x2e90 [ 237.552203][ T7236] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 237.554776][ T7236] ? lock_acquire+0x1b1/0x560 [ 237.558177][ T7236] ? __pfx_lock_acquire+0x10/0x10 [ 237.560632][ T7236] ? lock_acquire+0x1b1/0x560 [ 237.562854][ T7236] ? find_held_lock+0x2d/0x110 [ 237.564754][ T7236] ? skb_dequeue+0x126/0x180 [ 237.566491][ T7236] ieee80211_rx_napi+0xdd/0x400 [ 237.568790][ T7236] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 237.571405][ T7236] ? lockdep_hardirqs_on+0x7c/0x110 [ 237.574729][ T7236] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 237.577252][ T7236] ieee80211_handle_queued_frames+0xd5/0x130 [ 237.579817][ T7236] ? ieee80211_stop_device+0x22/0x110 [ 237.582334][ T7236] ieee80211_stop_device+0x32/0x110 [ 237.584694][ T7236] ieee80211_do_stop+0x1921/0x2270 [ 237.587024][ T7236] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 237.589799][ T7236] ? __pfx_lock_release+0x10/0x10 [ 237.592297][ T7236] ? mark_held_locks+0x9f/0xe0 [ 237.594508][ T7236] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 237.597127][ T7236] ieee80211_stop+0x11e/0x6b0 [ 237.599259][ T7236] ? __pfx_ieee80211_stop+0x10/0x10 [ 237.601526][ T7236] __dev_close_many+0x1c5/0x310 [ 237.603733][ T7236] ? __pfx___dev_close_many+0x10/0x10 [ 237.606145][ T7236] ? do_raw_spin_lock+0x12d/0x2c0 [ 237.608473][ T7236] dev_close_many+0x24c/0x6a0 [ 237.610521][ T7236] ? __pfx_dev_close_many+0x10/0x10 [ 237.612685][ T7236] ? __mutex_lock+0x1a6/0x9c0 [ 237.614900][ T7236] ? cfg80211_rfkill_set_block+0x29/0x50 [ 237.617622][ T7236] dev_close+0x181/0x230 [ 237.619650][ T7236] ? __pfx_dev_close+0x10/0x10 [ 237.622090][ T7236] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 237.624873][ T7236] cfg80211_rfkill_set_block+0x35/0x50 [ 237.627709][ T7236] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 237.630458][ T7236] rfkill_set_block+0x203/0x560 [ 237.632631][ T7236] rfkill_fop_write+0x2d4/0x570 [ 237.634970][ T7236] ? __pfx_rfkill_fop_write+0x10/0x10 [ 237.637844][ T7236] ? security_file_permission+0x10/0xc0 [ 237.640208][ T7236] ? __pfx_rfkill_fop_write+0x10/0x10 [ 237.642669][ T7236] vfs_write+0x29a/0x1140 [ 237.644510][ T7236] ? __pfx_vfs_write+0x10/0x10 [ 237.646547][ T7236] ? do_futex+0x123/0x350 [ 237.648648][ T7236] ? __fget_files+0x256/0x400 [ 237.650886][ T7236] ? __fget_light+0x173/0x210 [ 237.652864][ T7236] ksys_write+0x1f8/0x260 [ 237.654741][ T7236] ? __pfx_ksys_write+0x10/0x10 [ 237.657735][ T7236] do_syscall_64+0xcd/0x250 [ 237.660233][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.663287][ T7236] RIP: 0033:0x7f9f42379e79 [ 237.665448][ T7236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.674107][ T7236] RSP: 002b:00007f9f43185038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.678389][ T7236] RAX: ffffffffffffffda RBX: 00007f9f42515f80 RCX: 00007f9f42379e79 [ 237.682490][ T7236] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000006 [ 237.686590][ T7236] RBP: 00007f9f423e793e R08: 0000000000000000 R09: 0000000000000000 [ 237.690887][ T7236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.696415][ T7236] R13: 0000000000000000 R14: 00007f9f42515f80 R15: 00007ffe8b5aef28 [ 237.700332][ T7236] [ 237.702112][ T7236] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 237.706153][ T7236] CPU: 2 UID: 0 PID: 7236 Comm: syz.1.444 Not tainted 6.11.0-rc5-syzkaller #0 [ 237.711142][ T7236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.716766][ T7236] Call Trace: [ 237.718646][ T7236] [ 237.720106][ T7236] dump_stack_lvl+0x3d/0x1f0 [ 237.722220][ T7236] panic+0x6dc/0x7c0 [ 237.723963][ T7236] ? __pfx_panic+0x10/0x10 [ 237.725998][ T7236] ? show_trace_log_lvl+0x363/0x500 [ 237.728367][ T7236] ? kcov_remote_start+0xfd/0x6e0 [ 237.730759][ T7236] check_panic_on_warn+0xab/0xb0 [ 237.733531][ T7236] __warn+0xf1/0x3c0 [ 237.735740][ T7236] ? kcov_remote_start+0xfd/0x6e0 [ 237.738097][ T7236] report_bug+0x3c0/0x580 [ 237.739995][ T7236] handle_bug+0x3d/0x70 [ 237.742440][ T7236] exc_invalid_op+0x17/0x50 [ 237.744368][ T7236] asm_exc_invalid_op+0x1a/0x20 [ 237.746937][ T7236] RIP: 0010:kcov_remote_start+0xfd/0x6e0 [ 237.749496][ T7236] Code: 65 4c 8b 3d 35 50 79 7e 4d 89 7c 24 28 8b 95 f8 15 00 00 65 8b 05 2b 50 79 7e a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 1b 98 86 09 44 8b 1d 64 36 66 13 89 c0 48 03 1c c5 40 [ 237.757705][ T7236] RSP: 0018:ffffc90004a77518 EFLAGS: 00010002 [ 237.760512][ T7236] RAX: 0000000080000200 RBX: 000000000002d648 RCX: 0000000000000001 [ 237.764111][ T7236] RDX: 0000000000000002 RSI: ffffffff8b4cc7a0 RDI: ffffffff8bb09ac0 [ 237.768300][ T7236] RBP: ffff88802ae32440 R08: 0000000000000000 R09: fffffbfff28c5aee [ 237.771783][ T7236] R10: ffffffff9462d777 R11: 0000000000000026 R12: ffff88806b22d648 [ 237.776005][ T7236] R13: 0000000000000200 R14: 0000000000000000 R15: ffff88802ae32440 [ 237.779639][ T7236] ? kcov_remote_start+0xb3/0x6e0 [ 237.782009][ T7236] ieee80211_rx_list+0x470/0x2e90 [ 237.784283][ T7236] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 237.786703][ T7236] ? lock_acquire+0x1b1/0x560 [ 237.788817][ T7236] ? __pfx_lock_acquire+0x10/0x10 [ 237.791126][ T7236] ? lock_acquire+0x1b1/0x560 [ 237.793236][ T7236] ? find_held_lock+0x2d/0x110 [ 237.795875][ T7236] ? skb_dequeue+0x126/0x180 [ 237.798110][ T7236] ieee80211_rx_napi+0xdd/0x400 [ 237.800276][ T7236] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 237.802701][ T7236] ? lockdep_hardirqs_on+0x7c/0x110 [ 237.804927][ T7236] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 237.807399][ T7236] ieee80211_handle_queued_frames+0xd5/0x130 [ 237.810558][ T7236] ? ieee80211_stop_device+0x22/0x110 [ 237.813042][ T7236] ieee80211_stop_device+0x32/0x110 [ 237.815571][ T7236] ieee80211_do_stop+0x1921/0x2270 [ 237.818029][ T7236] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 237.820485][ T7236] ? __pfx_lock_release+0x10/0x10 [ 237.822723][ T7236] ? mark_held_locks+0x9f/0xe0 [ 237.824825][ T7236] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 237.827380][ T7236] ieee80211_stop+0x11e/0x6b0 [ 237.829809][ T7236] ? __pfx_ieee80211_stop+0x10/0x10 [ 237.832180][ T7236] __dev_close_many+0x1c5/0x310 [ 237.834351][ T7236] ? __pfx___dev_close_many+0x10/0x10 [ 237.836998][ T7236] ? do_raw_spin_lock+0x12d/0x2c0 [ 237.839285][ T7236] dev_close_many+0x24c/0x6a0 [ 237.841386][ T7236] ? __pfx_dev_close_many+0x10/0x10 [ 237.843947][ T7236] ? __mutex_lock+0x1a6/0x9c0 [ 237.846394][ T7236] ? cfg80211_rfkill_set_block+0x29/0x50 [ 237.849165][ T7236] dev_close+0x181/0x230 [ 237.851376][ T7236] ? __pfx_dev_close+0x10/0x10 [ 237.853560][ T7236] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 237.856642][ T7236] cfg80211_rfkill_set_block+0x35/0x50 [ 237.859890][ T7236] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 237.862612][ T7236] rfkill_set_block+0x203/0x560 [ 237.864736][ T7236] rfkill_fop_write+0x2d4/0x570 [ 237.866908][ T7236] ? __pfx_rfkill_fop_write+0x10/0x10 [ 237.869265][ T7236] ? security_file_permission+0x10/0xc0 [ 237.871658][ T7236] ? __pfx_rfkill_fop_write+0x10/0x10 [ 237.873994][ T7236] vfs_write+0x29a/0x1140 [ 237.875919][ T7236] ? __pfx_vfs_write+0x10/0x10 [ 237.878349][ T7236] ? do_futex+0x123/0x350 [ 237.880589][ T7236] ? __fget_files+0x256/0x400 [ 237.882711][ T7236] ? __fget_light+0x173/0x210 [ 237.884816][ T7236] ksys_write+0x1f8/0x260 [ 237.886815][ T7236] ? __pfx_ksys_write+0x10/0x10 [ 237.889346][ T7236] do_syscall_64+0xcd/0x250 [ 237.891214][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.893528][ T7236] RIP: 0033:0x7f9f42379e79 [ 237.895283][ T7236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.903729][ T7236] RSP: 002b:00007f9f43185038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.907333][ T7236] RAX: ffffffffffffffda RBX: 00007f9f42515f80 RCX: 00007f9f42379e79 [ 237.910757][ T7236] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000006 [ 237.914398][ T7236] RBP: 00007f9f423e793e R08: 0000000000000000 R09: 0000000000000000 [ 237.917878][ T7236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.921224][ T7236] R13: 0000000000000000 R14: 00007f9f42515f80 R15: 00007ffe8b5aef28 [ 237.924778][ T7236] [ 237.927064][ T7236] Kernel Offset: disabled [ 237.929279][ T7236] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:42:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff8191c276 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806b03edc0 RBP=ffff88806b03edc0 RSP=ffffffff8da07b88 R8 =0000000000000000 R9 =fffffbfff2025f23 R10=ffffffff9012f91f R11=0000000000000000 R12=0000000000000001 R13=ffff88806b03edc0 R14=ffff88806b03edc0 R15=dffffc0000000000 RIP=ffffffff815b0250 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc0f0600210 CR3=000000002294c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0b761e30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f43ed0c98b1dd69 7373737673737372 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 00004e4f53414500 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696b66722f323279 68702f3131323038 656565692f31326d 697377682f6d6973 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d07a88e46aa70a7 000056107af482bc 00000000000003b1 0000000039336c6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 83cf6180b13751e6 7c30c86ae070071a 7c309e7f91a4ae1a 7c30e11f636a02b0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff77fff 7c30ff7fef7ebfff 7c30fffffdf7ff3f 7c30e97f737a5efd ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000021a 000000000000001a 0000000033706f1a 0000000500000001 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000021a 000000000000001a 0000000033706f1a 0000000500000001 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81cfc01f RDX=ffff888027d60000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900032a78a0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00007fc0f3e35000 R13=dffffc0000000000 R14=00007fc0f3f51000 R15=ffffc900032a7cc8 RIP=ffffffff818a7970 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe291a9ef0 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc0f5eeb6a3 00007fc0f5eeb6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe291ac0f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000030000000f 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000012 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555576dc7eef 0000555576dc7ce0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555576dbe9c4 0000555576dbe9c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe291ac470 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d003000800000034 0800100300000000 0300080000030004 0781c00320080007 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000100 00007fc0f5eebf30 00007fc0f5eebf30 0000000000000037 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000f00000000 8080800101901000 078080040a100006 0102a80000000036 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9803200800000000 0303ffffffff0407 82800303ffffffff 040781f000000035 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0781e80300000000 81e0030008000781 d80307ba08000781 d003000800000034 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe6fe5 RDI=ffffffff9519f5a0 RBP=ffffffff9519f560 RSP=ffffc90004a76f20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000054 R14=ffffffff84fe6f80 R15=0000000000000000 RIP=ffffffff84fe700f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f9f431856c0 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1a6d0c0020 CR3=000000005d0c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fd818188 Opmask01=00000000003fffff Opmask02=000000003bbfffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69253a6925632500 3d45444f4d564544 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0b761e30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f43ed0c98b1dd69 7373737673737372 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005614fa003078 30004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005614fa003078 303d4e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005614c7000d45 0d004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000040 00000035336c6c69 6b66722f30316963 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d07a88e46aa70a7 000056107af482bc 00000000000003b1 0000000032336c6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 83cf6180b13751e6 7c30c86ae070071a 7c309e7f91a4ae1a 7c30e11f636a02b0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff77fff 7c30ff7fef7ebfff 7c30fffffdf7ff3f 7c30e97f737a5efd ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000021a 000000000000001a 0000000033706f1a 0000000500000001 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000021a 000000000000001a 0000000033706f1a 0000000500000001 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=000000000023f9bd RBX=0000000000000003 RCX=ffffffff8b111a99 RDX=0000000000000000 RSI=ffffffff8b4cc4a0 RDI=ffffffff8bb09ac0 RBP=ffffed10030db488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d666fd9 R10=ffff88806b337ecb R11=0000000000000000 R12=0000000000000003 R13=ffff8880186da440 R14=ffffffff9012f918 R15=0000000000000000 RIP=ffffffff8b112e8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1a6d116018 CR3=000000002ea08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6dc4d100 00007f1a6d0eb440 00007f1a6d0eb458 00007f1a6d0eb4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000