last executing test programs: 1m35.51423816s ago: executing program 2 (id=468): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000003e000701fcfffffffddbdf25027c0000044036800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) 1m35.448409485s ago: executing program 2 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 1m35.433677787s ago: executing program 2 (id=473): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x12) close_range(r0, r0, 0x0) 1m35.41187565s ago: executing program 2 (id=475): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x100, 0x2, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) 1m35.341081224s ago: executing program 2 (id=476): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 1m35.340406852s ago: executing program 2 (id=478): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) 1m20.312717759s ago: executing program 32 (id=478): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) 1m19.114840038s ago: executing program 0 (id=854): setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 1m19.047760251s ago: executing program 0 (id=856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000083000040"]) 1m18.924121772s ago: executing program 0 (id=860): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) 1m18.816126901s ago: executing program 0 (id=865): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'ni_daq_700\x00', [0x2f00, 0x5, 0xd097, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x7, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x4, 0x70f]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1m18.806958641s ago: executing program 0 (id=867): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 1m18.77165534s ago: executing program 0 (id=868): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x479}]}, 0x28}}, 0x0) 1m3.749342329s ago: executing program 33 (id=868): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x479}]}, 0x28}}, 0x0) 304.909036ms ago: executing program 1 (id=3381): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) 304.001898ms ago: executing program 4 (id=3382): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000100)="fe28", 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000b00)={&(0x7f0000000a00)="c151f987ae", 0x5, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000b40)={r1}) 280.983861ms ago: executing program 1 (id=3385): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4e78, 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) 214.357779ms ago: executing program 4 (id=3387): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000000)=[r1], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000100)=[r1], &(0x7f0000000380), 0x1}) 214.188469ms ago: executing program 3 (id=3388): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x8) 182.851872ms ago: executing program 4 (id=3389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000200000000000000080000000c00018008000100", @ANYRES32=r2, @ANYBLOB="4000028004000380380005"], 0x60}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 181.929329ms ago: executing program 3 (id=3390): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast1}, 0x3, 0x1, 0x2, 0x3}}, 0x26) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) 181.569047ms ago: executing program 1 (id=3391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) 171.803065ms ago: executing program 5 (id=3392): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 137.825936ms ago: executing program 3 (id=3393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01030000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x800c}, 0x20000000) 136.554334ms ago: executing program 4 (id=3394): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 128.454449ms ago: executing program 5 (id=3395): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 125.703099ms ago: executing program 1 (id=3396): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000054d564b00"]) 124.694041ms ago: executing program 3 (id=3397): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 97.758664ms ago: executing program 3 (id=3398): r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f0000001300)={0x2020}, 0x2020) 97.350323ms ago: executing program 4 (id=3399): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 94.066412ms ago: executing program 5 (id=3400): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3fffe0040, 0x0, 0x5f) 52.497845ms ago: executing program 4 (id=3401): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 52.306713ms ago: executing program 5 (id=3402): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r2, 0x9, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x4000014) 49.195288ms ago: executing program 3 (id=3403): r0 = semget$private(0x0, 0x4000000009, 0x208) semop(r0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 5.611177ms ago: executing program 5 (id=3404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100"], 0x2c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x24}}, 0x0) 5.114127ms ago: executing program 1 (id=3405): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 400.008µs ago: executing program 5 (id=3406): r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 0s ago: executing program 1 (id=3407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000011ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2826}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) kernel console output (not intermixed with test programs): dle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.030936][ T7865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.037923][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.040819][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.047733][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 92.051781][ T7865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.061421][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 92.129391][ T7865] hsr_slave_0: entered promiscuous mode [ 92.132312][ T7865] hsr_slave_1: entered promiscuous mode [ 92.135267][ T7865] debugfs: 'hsr0' already exists in 'hsr' [ 92.139762][ T7865] Cannot create hsr debugfs directory [ 92.313411][ T7865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.322901][ T7865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.329126][ T7865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.346354][ T7865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.414574][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.432139][ T7865] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.439673][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.442635][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.450498][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.453104][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.612958][ T7908] netlink: 'syz.1.855': attribute type 11 has an invalid length. [ 92.616436][ T7908] netlink: 44 bytes leftover after parsing attributes in process `syz.1.855'. [ 92.627168][ T7865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.792703][ T7928] syz_tun: entered allmulticast mode [ 92.834880][ T7865] veth0_vlan: entered promiscuous mode [ 92.840027][ T7865] veth1_vlan: entered promiscuous mode [ 92.873036][ T7865] veth0_macvtap: entered promiscuous mode [ 92.877063][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 92.879697][ T7865] veth1_macvtap: entered promiscuous mode [ 92.905963][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.919620][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.938301][ T1225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.942555][ T1225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.952262][ T1225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.953485][ T7940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.958545][ T1225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.024341][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.028275][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.059242][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.063169][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.173948][ T7951] sch_fq: defrate 0 ignored. [ 93.338799][ T7967] tmpfs: Bad value for 'mpol' [ 93.384602][ T7969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.596324][ T5975] Bluetooth: hci2: command tx timeout [ 93.691231][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.890'. [ 93.882565][ T7999] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 94.038304][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 94.038320][ T40] audit: type=1400 audit(1758276153.924:412): avc: denied { mount } for pid=8004 comm="syz.3.899" name="/" dev="hugetlbfs" ino=16103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 94.095199][ T40] audit: type=1400 audit(1758276153.974:413): avc: denied { listen } for pid=8010 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.106253][ T40] audit: type=1400 audit(1758276153.974:414): avc: denied { accept } for pid=8010 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.389062][ T40] audit: type=1400 audit(1758276154.274:415): avc: denied { connect } for pid=8024 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.451890][ T40] audit: type=1400 audit(1758276154.334:416): avc: denied { execmod } for pid=8027 comm="syz.3.909" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 94.482337][ T40] audit: type=1400 audit(1758276154.364:417): avc: denied { map } for pid=8030 comm="syz.3.911" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.492121][ T40] audit: type=1400 audit(1758276154.364:418): avc: denied { execute } for pid=8030 comm="syz.3.911" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.493835][ T8033] program syz.1.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.669308][ T8040] netlink: 27 bytes leftover after parsing attributes in process `syz.1.915'. [ 94.743087][ T40] audit: type=1400 audit(1758276154.624:419): avc: denied { create } for pid=8042 comm="syz.3.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 94.760554][ T40] audit: type=1400 audit(1758276154.644:420): avc: denied { sys_admin } for pid=8042 comm="syz.3.916" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 94.815433][ T40] audit: type=1400 audit(1758276154.694:421): avc: denied { append } for pid=8049 comm="syz.4.919" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.828013][ T8050] loop4: detected capacity change from 0 to 2560 [ 94.832321][ T8050] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.835802][ T8050] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.842410][ T8050] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.845591][ T8050] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.848857][ T8050] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.851991][ T8050] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.854567][ T8050] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.857289][ T8050] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.859941][ T8050] ldm_validate_partition_table(): Disk read failed. [ 94.862272][ T8050] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.864892][ T8050] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.870883][ T8050] Dev loop4: unable to read RDB block 0 [ 94.874106][ T8050] loop4: unable to read partition table [ 94.877968][ T8050] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 95.004723][ T8058] macvtap1: entered allmulticast mode [ 95.022786][ T8058] veth0_macvtap: entered allmulticast mode [ 95.046272][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 95.049051][ T1114] ata1: failed to read log page 10h (errno=-5) [ 95.051583][ T1114] ata1.00: exception Emask 0x1 SAct 0x8 SErr 0x0 action 0x0 [ 95.076210][ T1114] ata1.00: irq_stat 0x40000000 [ 95.078370][ T1114] ata1.00: failed command: WRITE FPDMA QUEUED [ 95.080902][ T1114] ata1.00: cmd 61/18:18:36:81:08/00:00:00:00:00/40 tag 3 ncq dma 12288 out [ 95.080902][ T1114] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 95.102121][ T1114] ata1.00: status: { DRDY } [ 95.104065][ T1114] ata1.00: error: { ABRT } [ 95.115288][ T1114] ata1.00: configured for UDMA/100 [ 95.119301][ T1114] ata1: EH complete [ 95.400498][ T8075] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 95.538701][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'. [ 95.543103][ T8086] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 95.550498][ T8086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.678253][ T5975] Bluetooth: hci2: command tx timeout [ 95.872869][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 96.243579][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 96.262730][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 96.480193][ T8140] sp0: Synchronizing with TNC [ 96.487595][ T8139] [U] `` [ 96.560932][ T8142] netlink: 104 bytes leftover after parsing attributes in process `syz.4.959'. [ 96.721438][ T8156] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 97.071692][ T8173] ipvlan2: entered promiscuous mode [ 97.075149][ T8173] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 97.079557][ T8173] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.565417][ T8205] netlink: 'syz.4.988': attribute type 13 has an invalid length. [ 97.757974][ T5975] Bluetooth: hci2: command tx timeout [ 97.826449][ T8222] block device autoloading is deprecated and will be removed. [ 98.128290][ T8247] tmpfs: Too few inodes for current use [ 98.150556][ T8249] veth1_to_bond: entered allmulticast mode [ 98.153037][ T8248] veth1_to_bond: left allmulticast mode [ 98.631523][ T8278] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 98.636800][ T8278] overlayfs: overlapping lowerdir path [ 98.736184][ T6056] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 98.896318][ T6056] usb 6-1: Using ep0 maxpacket: 16 [ 98.902780][ T6056] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 98.913561][ T6056] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 98.917162][ T6056] usb 6-1: Product: syz [ 98.918943][ T6056] usb 6-1: Manufacturer: syz [ 98.920932][ T6056] usb 6-1: SerialNumber: syz [ 98.929118][ T6056] usb 6-1: config 0 descriptor?? [ 99.154541][ T1340] usb 6-1: USB disconnect, device number 5 [ 99.292240][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'. [ 99.297349][ T13] bond0: (slave bond_slave_0): interface is now down [ 99.299780][ T13] bond0: (slave bond_slave_1): interface is now down [ 99.304848][ T13] bond0: now running without any active interface! [ 99.485218][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 99.485232][ T40] audit: type=1400 audit(1758276159.364:429): avc: denied { connect } for pid=8344 comm="syz.3.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.637160][ T839] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 99.652659][ T40] audit: type=1400 audit(1758276159.534:430): avc: denied { create } for pid=8352 comm="syz.3.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.659639][ T40] audit: type=1400 audit(1758276159.534:431): avc: denied { write } for pid=8352 comm="syz.3.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.768247][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 99.791019][ T839] usb 9-1: Using ep0 maxpacket: 16 [ 99.797516][ T839] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 99.800850][ T839] usb 9-1: config 0 has no interface number 0 [ 99.803444][ T839] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.805665][ T40] audit: type=1800 audit(1758276159.684:432): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1059" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 99.809564][ T839] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 99.827858][ T839] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 99.831623][ T839] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 99.834925][ T839] usb 9-1: Product: syz [ 99.837270][ T5975] Bluetooth: hci2: command tx timeout [ 99.844734][ T839] usb 9-1: SerialNumber: syz [ 99.855666][ T839] usb 9-1: config 0 descriptor?? [ 99.864705][ T839] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 99.870329][ T839] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input7 [ 99.956345][ T7941] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 100.070977][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.075044][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.078579][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.086109][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.088434][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.090680][ T839] usb 9-1: USB disconnect, device number 2 [ 100.092527][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.092537][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 100.104724][ T839] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 100.130064][ T7941] usb 6-1: config 0 has no interfaces? [ 100.133567][ T7941] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.137496][ T7941] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.140659][ T7941] usb 6-1: Product: syz [ 100.142324][ T7941] usb 6-1: Manufacturer: syz [ 100.151518][ T7941] usb 6-1: config 0 descriptor?? [ 100.170460][ T40] audit: type=1400 audit(1758276160.054:433): avc: denied { getopt } for pid=8380 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.210229][ T40] audit: type=1326 audit(1758276160.094:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.3.1069" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3307d8ec29 code=0x0 [ 100.358647][ T5975] Bluetooth: hci0: adv larger than maximum supported [ 100.358692][ T5975] Bluetooth: hci0: Malformed LE Event: 0x0d [ 100.359617][ T6055] usb 6-1: USB disconnect, device number 6 [ 100.696753][ T5975] Bluetooth: hci2: unexpected cc 0x0402 length: 4 > 1 [ 101.076880][ T40] audit: type=1400 audit(1758276160.964:435): avc: denied { setopt } for pid=8405 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.216687][ T8419] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 101.302121][ T40] audit: type=1400 audit(1758276161.184:436): avc: denied { getopt } for pid=8433 comm="syz.1.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.546555][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 101.716486][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 101.721127][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.725395][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.730682][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.733909][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 101.737251][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 101.741328][ T10] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 101.744440][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.754286][ T10] usb 9-1: config 0 descriptor?? [ 101.793830][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 101.844136][ T40] audit: type=1400 audit(1758276161.724:437): avc: denied { setopt } for pid=8465 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.852614][ T40] audit: type=1400 audit(1758276161.724:438): avc: denied { connect } for pid=8465 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.936349][ T6010] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 101.968508][ T10] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 102.088894][ T6010] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.092938][ T6010] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.095997][ T6010] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.100512][ T6010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.104590][ T8459] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 102.110011][ T6010] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.315174][ T6010] usb 6-1: USB disconnect, device number 7 [ 102.791838][ T8500] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 103.128917][ T8517] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 103.343655][ T8539] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 103.414448][ T8548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1143'. [ 104.030361][ T8589] bond0: entered promiscuous mode [ 104.032043][ T8589] bond_slave_0: entered promiscuous mode [ 104.033995][ T8589] bond_slave_1: entered promiscuous mode [ 104.038447][ T8589] batadv0: entered promiscuous mode [ 104.042431][ T8589] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 104.051852][ T8589] bond0: left promiscuous mode [ 104.053386][ T8589] bond_slave_0: left promiscuous mode [ 104.057695][ T8589] bond_slave_1: left promiscuous mode [ 104.060025][ T8589] batadv0: left promiscuous mode [ 104.234247][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1166'. [ 104.315055][ T839] usb 9-1: USB disconnect, device number 3 [ 104.334899][ T839] usblp0: removed [ 104.397696][ T8608] netlink: 'syz.4.1171': attribute type 9 has an invalid length. [ 104.400960][ T8608] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.1171'. [ 104.479611][ T8616] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 104.653836][ T8631] No buffer was provided with the request [ 104.828040][ T8648] program syz.3.1191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.900778][ T8661] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 104.941251][ T8664] [U] v3f"S/4:XTzWtlW= [ 104.943656][ T8664] [U] J"e:" [ 105.181693][ T839] Process accounting resumed [ 105.204522][ T8697] Process accounting resumed [ 105.210202][ T8699] atomic_op ffff888056228198 conn xmit_atomic 0000000000000000 [ 105.323046][ T8712] comedi: valid board names for 8255 driver are: [ 105.326647][ T8712] 8255 [ 105.327882][ T8712] comedi: valid board names for vmk80xx driver are: [ 105.330618][ T8712] vmk80xx [ 105.331914][ T8712] comedi: valid board names for usbduxsigma driver are: [ 105.334804][ T8712] usbduxsigma [ 105.339047][ T8712] comedi: valid board names for usbduxfast driver are: [ 105.342003][ T8712] usbduxfast [ 105.343403][ T8712] comedi: valid board names for usbdux driver are: [ 105.345910][ T8712] usbdux [ 105.352139][ T8712] comedi: valid board names for ni6501 driver are: [ 105.354984][ T8712] ni6501 [ 105.364121][ T8712] comedi: valid board names for dt9812 driver are: [ 105.367254][ T8712] dt9812 [ 105.368544][ T8712] comedi: valid board names for ni_labpc_cs driver are: [ 105.371467][ T8712] ni_labpc_cs [ 105.372877][ T8712] comedi: valid board names for ni_daq_700 driver are: [ 105.375689][ T8712] ni_daq_700 [ 105.376987][ T8712] comedi: valid board names for labpc_pci driver are: [ 105.377880][ T8717] openvswitch: netlink: Key type 30 is not supported [ 105.379532][ T8712] labpc_pci [ 105.383547][ T8712] comedi: valid board names for adl_pci9118 driver are: [ 105.385794][ T8712] pci9118dg [ 105.387026][ T8712] pci9118hg [ 105.388171][ T8712] pci9118hr [ 105.389401][ T8712] comedi: valid board names for 8255_pci driver are: [ 105.393963][ T8712] 8255_pci [ 105.395334][ T8712] comedi: valid board names for s526 driver are: [ 105.398033][ T8712] s526 [ 105.398952][ T8712] comedi: valid board names for multiq3 driver are: [ 105.401437][ T8712] multiq3 [ 105.402459][ T8712] comedi: valid board names for pcmuio driver are: [ 105.404549][ T8712] pcmuio48 [ 105.405631][ T8712] pcmuio96 [ 105.406824][ T8712] comedi: valid board names for pcmmio driver are: [ 105.409017][ T8712] pcmmio [ 105.410156][ T8712] comedi: valid board names for pcmda12 driver are: [ 105.413127][ T8712] pcmda12 [ 105.414528][ T8712] comedi: valid board names for pcmad driver are: [ 105.417497][ T8712] pcmad12 [ 105.418822][ T8712] pcmad16 [ 105.420005][ T8712] comedi: valid board names for ni_labpc driver are: [ 105.422502][ T8712] lab-pc-1200 [ 105.423926][ T8712] lab-pc-1200ai [ 105.425394][ T8712] lab-pc+ [ 105.427223][ T8712] comedi: valid board names for atmio16 driver are: [ 105.430269][ T8712] atmio16 [ 105.431369][ T8712] atmio16d [ 105.432676][ T8712] comedi: valid board names for ni_at_ao driver are: [ 105.435483][ T8712] at-ao-6 [ 105.438795][ T8712] at-ao-10 [ 105.440246][ T8712] comedi: valid board names for ni_at_a2150 driver are: [ 105.450715][ T8712] ni_at_a2150 [ 105.452314][ T8712] comedi: valid board names for adq12b driver are: [ 105.454932][ T8712] adq12b [ 105.456698][ T8712] comedi: valid board names for mpc624 driver are: [ 105.463034][ T8712] mpc624 [ 105.464155][ T8712] comedi: valid board names for c6xdigio driver are: [ 105.467351][ T8712] c6xdigio [ 105.468754][ T8712] comedi: valid board names for aio_iiro_16 driver are: [ 105.471588][ T8712] aio_iiro_16 [ 105.473085][ T8712] comedi: valid board names for aio_aio12_8 driver are: [ 105.475899][ T8712] aio_aio12_8 [ 105.478055][ T8712] aio_ai12_8 [ 105.479536][ T8712] aio_ao12_4 [ 105.480975][ T8712] comedi: valid board names for fl512 driver are: [ 105.483576][ T8712] fl512 [ 105.484720][ T8712] comedi: valid board names for dmm32at driver are: [ 105.491714][ T8712] dmm32at [ 105.493002][ T8712] comedi: valid board names for dt282x driver are: [ 105.495615][ T8712] dt2821 [ 105.497137][ T8712] dt2821-f [ 105.498627][ T8712] dt2821-g [ 105.500096][ T8712] dt2823 [ 105.506408][ T8712] dt2824-pgh [ 105.507772][ T8712] dt2824-pgl [ 105.509139][ T8712] dt2825 [ 105.510396][ T8712] dt2827 [ 105.511667][ T8712] dt2828 [ 105.512925][ T8712] dt2829 [ 105.514254][ T8712] dt21-ez [ 105.515723][ T8712] dt23-ez [ 105.523085][ T8712] dt24-ez [ 105.524158][ T8712] dt24-ez-pgl [ 105.525261][ T8712] comedi: valid board names for dt2817 driver are: [ 105.527876][ T8712] dt2817 [ 105.529177][ T8712] comedi: valid board names for dt2815 driver are: [ 105.532427][ T8712] dt2815 [ 105.533808][ T8712] comedi: valid board names for dt2814 driver are: [ 105.537055][ T8712] dt2814 [ 105.544335][ T8712] comedi: valid board names for dt2811 driver are: [ 105.555260][ T8712] dt2811-pgh [ 105.558948][ T8712] dt2811-pgl [ 105.560019][ T8712] comedi: valid board names for dt2801 driver are: [ 105.562019][ T8712] dt2801 [ 105.562947][ T8712] comedi: valid board names for das6402 driver are: [ 105.564965][ T8712] das6402-12 [ 105.566447][ T8712] das6402-16 [ 105.567879][ T8712] comedi: valid board names for das1800 driver are: [ 105.570579][ T8712] das-1701st [ 105.572039][ T8712] das-1701st-da [ 105.573592][ T8712] das-1702st [ 105.575076][ T8712] das-1702st-da [ 105.577788][ T8712] das-1702hr [ 105.579257][ T8712] das-1702hr-da [ 105.580697][ T8712] das-1701ao [ 105.581760][ T8712] das-1702ao [ 105.582833][ T8712] das-1801st [ 105.583881][ T8712] das-1801st-da [ 105.585005][ T8712] das-1802st [ 105.586694][ T8712] das-1802st-da [ 105.589179][ T8712] das-1802hr [ 105.590654][ T8712] das-1802hr-da [ 105.592198][ T8712] das-1801hc [ 105.593498][ T8712] das-1802hc [ 105.594628][ T8712] das-1801ao [ 105.595764][ T8712] das-1802ao [ 105.600192][ T8712] comedi: valid board names for das800 driver are: [ 105.602728][ T8712] das-800 [ 105.603832][ T8712] cio-das800 [ 105.605107][ T8712] das-801 [ 105.610598][ T8712] cio-das801 [ 105.611667][ T8712] das-802 [ 105.612679][ T8712] cio-das802 [ 105.613757][ T8712] cio-das802/16 [ 105.614883][ T8712] comedi: valid board names for isa-das08 driver are: [ 105.617226][ T8712] isa-das08 [ 105.618594][ T8712] das08-pgm [ 105.620007][ T8712] das08-pgh [ 105.621388][ T8712] das08-pgl [ 105.622825][ T8712] das08-aoh [ 105.624020][ T8712] das08-aol [ 105.625054][ T8712] das08-aom [ 105.626275][ T8712] das08/jr-ao [ 105.629102][ T8712] das08jr-16-ao [ 105.630292][ T8712] pc104-das08 [ 105.631372][ T8712] das08jr/16 [ 105.632421][ T8712] comedi: valid board names for das16m1 driver are: [ 105.635711][ T8712] das16m1 [ 105.647393][ T8712] comedi: valid board names for dac02 driver are: [ 105.649702][ T8712] dac02 [ 105.650628][ T8712] comedi: valid board names for rti802 driver are: [ 105.652676][ T8712] rti802 [ 105.653674][ T8712] comedi: valid board names for rti800 driver are: [ 105.655706][ T8712] rti800 [ 105.659054][ T8712] rti815 [ 105.660103][ T8712] comedi: valid board names for pcm3724 driver are: [ 105.662232][ T8712] pcm3724 [ 105.663233][ T8712] comedi: valid board names for pcl818 driver are: [ 105.665321][ T8712] pcl818l [ 105.666538][ T8712] pcl818h [ 105.674009][ T8712] pcl818hd [ 105.675629][ T8712] pcl818hg [ 105.679162][ T8712] pcl818 [ 105.683558][ T8712] pcl718 [ 105.684988][ T8712] pcm3718 [ 105.688938][ T8712] comedi: valid board names for pcl816 driver are: [ 105.691698][ T8712] pcl816 [ 105.693025][ T8712] pcl814b [ 105.694419][ T8712] comedi: valid board names for pcl812 driver are: [ 105.697281][ T8712] pcl812 [ 105.698603][ T8712] pcl812pg [ 105.699999][ T8712] acl8112pg [ 105.701433][ T8712] acl8112dg [ 105.702922][ T8712] acl8112hg [ 105.704388][ T8712] a821pgl [ 105.705772][ T8712] a821pglnda [ 105.709284][ T8712] a821pgh [ 105.710494][ T8712] a822pgl [ 105.711516][ T8712] a822pgh [ 105.712527][ T8712] a823pgl [ 105.713592][ T8712] a823pgh [ 105.714596][ T8712] pcl813 [ 105.715552][ T8712] pcl813b [ 105.716671][ T8712] acl8113 [ 105.717701][ T8712] iso813 [ 105.718639][ T8712] acl8216 [ 105.719721][ T8712] a826pg [ 105.720673][ T8712] comedi: valid board names for pcl730 driver are: [ 105.722785][ T8712] pcl730 [ 105.723835][ T8712] iso730 [ 105.724840][ T8712] acl7130 [ 105.725861][ T8712] pcm3730 [ 105.727108][ T8712] pcl725 [ 105.728082][ T8712] p8r8dio [ 105.729069][ T8712] acl7225b [ 105.730200][ T8712] p16r16dio [ 105.731261][ T8712] pcl733 [ 105.732223][ T8712] pcl734 [ 105.733183][ T8712] opmm-1616-xt [ 105.734339][ T8712] pearl-mm-p [ 105.735588][ T8712] ir104-pbf [ 105.736946][ T8712] comedi: valid board names for pcl726 driver are: [ 105.739216][ T8712] pcl726 [ 105.740184][ T8712] pcl727 [ 105.741143][ T8712] pcl728 [ 105.742130][ T8712] acl6126 [ 105.743147][ T8712] acl6128 [ 105.744155][ T8712] comedi: valid board names for pcl724 driver are: [ 105.746401][ T8712] pcl724 [ 105.747377][ T8712] pcl722 [ 105.748354][ T8712] pcl731 [ 105.749428][ T8712] acl7122 [ 105.750496][ T8712] acl7124 [ 105.751742][ T8712] pet48dio [ 105.752996][ T8712] pcmio48 [ 105.754234][ T8712] onyx-mm-dio [ 105.755609][ T8712] comedi: valid board names for pcl711 driver are: [ 105.758308][ T8712] pcl711 [ 105.759557][ T8712] pcl711b [ 105.760733][ T8712] acl8112hg [ 105.762056][ T8712] acl8112dg [ 105.763364][ T8712] comedi: valid board names for amplc_pc263 driver are: [ 105.766556][ T8712] pc263 [ 105.767713][ T8712] comedi: valid board names for amplc_pc236 driver are: [ 105.770474][ T8712] pc36at [ 105.771658][ T8712] comedi: valid board names for amplc_dio200 driver are: [ 105.774383][ T8712] pc212e [ 105.775578][ T8712] pc214e [ 105.777114][ T8712] pc215e [ 105.778332][ T8712] pc218e [ 105.779298][ T8712] pc272e [ 105.780480][ T8712] comedi: valid board names for comedi_parport driver are: [ 105.783353][ T8712] comedi_parport [ 105.784817][ T8712] comedi: valid board names for comedi_test driver are: [ 105.788434][ T8712] comedi_test [ 105.789816][ T8712] comedi: valid board names for comedi_bond driver are: [ 105.792494][ T8712] comedi_bond [ 105.991896][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1251'. [ 105.994732][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1251'. [ 106.953839][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'. [ 107.154940][ T8841] xt_policy: neither incoming nor outgoing policy selected [ 107.374134][ C0] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 107.380274][ C0] sr 2:0:0:0: [sr0] tag#19 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 107.478948][ T8870] CIFS mount error: No usable UNC path provided in device string! [ 107.478948][ T8870] [ 107.482142][ T8870] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 107.509658][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 107.509668][ T40] audit: type=1400 audit(1758276167.394:447): avc: denied { setopt } for pid=8871 comm="syz.3.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.509742][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1298'. [ 107.982770][ T8924] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 108.038908][ T8928] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 108.042074][ T8928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.079148][ T5328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.084192][ T5328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.099592][ T5328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.106399][ T5328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.111765][ T5328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.120418][ T8934] batman_adv: batadv0: Adding interface: gretap1 [ 108.125692][ T8934] batman_adv: batadv0: Interface activated: gretap1 [ 108.288361][ T8931] chnl_net:caif_netlink_parms(): no params data found [ 108.303049][ T40] audit: type=1326 audit(1758276168.184:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8959 comm="syz.1.1340" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34c798ec29 code=0x0 [ 108.381989][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.384388][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.385211][ T40] audit: type=1400 audit(1758276168.264:449): avc: denied { associate } for pid=8971 comm="syz.4.1344" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.388435][ T8931] bridge_slave_0: entered allmulticast mode [ 108.398709][ T8931] bridge_slave_0: entered promiscuous mode [ 108.401753][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.404184][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.407456][ T8931] bridge_slave_1: entered allmulticast mode [ 108.414938][ T8931] bridge_slave_1: entered promiscuous mode [ 108.473410][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.484671][ T8931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.491694][ T8931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.553516][ T8931] team0: Port device team_slave_0 added [ 108.559028][ T8931] team0: Port device team_slave_1 added [ 108.596995][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.636557][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.638979][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.647954][ T8931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.659426][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.661974][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.674715][ T8931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.697349][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.741465][ T8931] hsr_slave_0: entered promiscuous mode [ 108.743708][ T8931] hsr_slave_1: entered promiscuous mode [ 108.745760][ T8931] debugfs: 'hsr0' already exists in 'hsr' [ 108.748610][ T8931] Cannot create hsr debugfs directory [ 108.833349][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.846934][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 108.854581][ T8999] gretap0: entered promiscuous mode [ 108.902670][ T9003] netlink: 'syz.3.1365': attribute type 11 has an invalid length. [ 108.905942][ T9003] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1365'. [ 108.993165][ T8931] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.002037][ T8931] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.011284][ T8931] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.022441][ T8931] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.064367][ T13] bridge_slave_1: left allmulticast mode [ 109.068352][ T13] bridge_slave_1: left promiscuous mode [ 109.071863][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.078670][ T13] bridge_slave_0: left allmulticast mode [ 109.080687][ T13] bridge_slave_0: left promiscuous mode [ 109.082903][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.090931][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 109.247579][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 109.316312][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 109.395360][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.399761][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.403221][ T13] bond0 (unregistering): Released all slaves [ 109.409858][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.412704][ T8931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.415647][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.418007][ T8931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.426124][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.429516][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.467819][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.471427][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.474550][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.477616][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.483670][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.490518][ T9018] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 109.500859][ T13] tipc: Disabling bearer [ 109.505405][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.507939][ T13] tipc: Left network mode [ 109.512474][ T8931] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.527260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.530363][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.585716][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.588633][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.704257][ T24] usb 9-1: USB disconnect, device number 4 [ 109.749391][ T13] hsr_slave_0: left promiscuous mode [ 109.752507][ T13] hsr_slave_1: left promiscuous mode [ 109.755432][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.759686][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.762720][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.765869][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.802275][ T13] veth1_macvtap: left promiscuous mode [ 109.804631][ T13] veth0_macvtap: left promiscuous mode [ 109.807446][ T13] veth1_vlan: left promiscuous mode [ 109.809725][ T13] veth0_vlan: left promiscuous mode [ 110.156983][ T5975] Bluetooth: hci4: command tx timeout [ 110.347447][ T13] team0 (unregistering): Port device team_slave_1 removed [ 110.414167][ T13] team0 (unregistering): Port device team_slave_0 removed [ 110.895128][ T8931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.981987][ T40] audit: type=1400 audit(1758276170.864:450): avc: denied { load_policy } for pid=9074 comm="syz.3.1391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 110.988957][ T9075] SELinux: ebitmap: truncated map [ 111.003578][ T9075] SELinux: failed to load policy [ 111.027177][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1387'. [ 111.031915][ T9083] 8021q: VLANs not supported on gre0 [ 111.120931][ T8931] veth0_vlan: entered promiscuous mode [ 111.129007][ T8931] veth1_vlan: entered promiscuous mode [ 111.172376][ T8931] veth0_macvtap: entered promiscuous mode [ 111.181602][ T8931] veth1_macvtap: entered promiscuous mode [ 111.200826][ T8931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.212793][ T8931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.225950][ T1239] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.232264][ T1239] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.236410][ T1239] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.244739][ T1239] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.291665][ T13] IPVS: stop unused estimator thread 0... [ 111.295892][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.299858][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.322711][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.325975][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.646114][ T6010] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 111.796286][ T6010] usb 6-1: Using ep0 maxpacket: 8 [ 111.800431][ T6010] usb 6-1: config 0 has no interfaces? [ 111.802623][ T6010] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.806310][ T6010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.811574][ T6010] usb 6-1: config 0 descriptor?? [ 111.881641][ T9123] geneve2: entered promiscuous mode [ 111.883867][ T9123] geneve2: entered allmulticast mode [ 112.017541][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1404'. [ 112.019372][ T54] usb 6-1: USB disconnect, device number 8 [ 112.093332][ T9129] netlink: 'syz.4.1406': attribute type 3 has an invalid length. [ 112.236176][ T5975] Bluetooth: hci4: command tx timeout [ 112.248645][ T9140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9140 comm=syz.4.1411 [ 112.630636][ T9162] pim6reg1: tun_chr_ioctl cmd 1074025676 [ 112.633050][ T9162] pim6reg1: owner set to 0 [ 112.724143][ T9164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.776169][ T839] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 112.928552][ T839] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.932802][ T839] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 112.938763][ T839] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.945242][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.948991][ T839] usb 9-1: Product: syz [ 112.950770][ T839] usb 9-1: Manufacturer: syz [ 112.952700][ T839] usb 9-1: SerialNumber: syz [ 112.957471][ T839] usb 9-1: config 0 descriptor?? [ 113.166957][ T54] usb 9-1: USB disconnect, device number 5 [ 113.380338][ T9195] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1438'. [ 113.988467][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1455'. [ 114.316381][ T5975] Bluetooth: hci4: command tx timeout [ 114.317269][ T9261] hugetlbfs: Bad value for 'uid' [ 114.320133][ T9261] hugetlbfs: Bad value for 'uid' [ 114.391704][ T9266] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 114.393854][ T9266] pim6reg1: persist disabled [ 114.493975][ T40] audit: type=1400 audit(1758276174.374:451): avc: denied { lock } for pid=9280 comm="syz.1.1478" path="socket:[24054]" dev="sockfs" ino=24054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.537260][ T9284] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 114.553013][ T9284] CUSE: unknown device info "&b%ZW)3\my " [ 114.555125][ T9284] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 114.560816][ T9284] CUSE: DEVNAME unspecified [ 114.665047][ T9298] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1485'. [ 114.704869][ T9300] ipvlan2: entered promiscuous mode [ 114.707016][ T9300] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 114.709403][ T9300] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.754825][ T9304] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 114.961767][ T9326] binder: 9324:9326 ioctl 40046205 0 returned -22 [ 114.964180][ T9326] binder: 9324:9326 ioctl c0306201 2000000013c0 returned -11 [ 114.975674][ T9327] can0: slcan on ttyS3. [ 114.996041][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 115.026183][ T6055] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 115.037812][ T9325] can0 (unregistered): slcan off ttyS3. [ 115.065643][ T9335] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 115.091824][ T9339] tmpfs: Cannot change global quota limit on remount [ 115.188351][ T9350] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 115.201672][ T6055] usb 10-1: Using ep0 maxpacket: 16 [ 115.210830][ T6055] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 115.214130][ T6055] usb 10-1: config 0 has no interface number 0 [ 115.222373][ T6055] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.227445][ T6055] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.233581][ T6055] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 115.241189][ T6055] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 115.244577][ T6055] usb 10-1: Product: syz [ 115.247660][ T6055] usb 10-1: SerialNumber: syz [ 115.254411][ T6055] usb 10-1: config 0 descriptor?? [ 115.268564][ T6055] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 115.287974][ T6055] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input9 [ 115.410903][ T9374] SELinux: security_context_str_to_sid () failed with errno=-22 [ 115.473751][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 115.556292][ T40] audit: type=1400 audit(1758276175.434:452): avc: denied { view } for pid=9394 comm="syz.3.1534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 115.623824][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.678100][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.681199][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.684279][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.687820][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.691836][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.695354][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.700650][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.704052][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.707021][ T9] usb 10-1: USB disconnect, device number 2 [ 115.707091][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.712181][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 115.718777][ T9] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 115.944074][ T40] audit: type=1400 audit(1758276175.824:453): avc: denied { mount } for pid=9423 comm="syz.3.1548" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 115.956215][ T40] audit: type=1400 audit(1758276175.834:454): avc: denied { mounton } for pid=9423 comm="syz.3.1548" path="/511/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 115.973348][ T40] audit: type=1400 audit(1758276175.854:455): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 115.981304][ T9428] netlink: 'syz.4.1550': attribute type 8 has an invalid length. [ 116.227261][ T40] audit: type=1400 audit(1758276176.104:456): avc: denied { create } for pid=9443 comm="syz.3.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.236376][ T40] audit: type=1400 audit(1758276176.114:457): avc: denied { ioctl } for pid=9443 comm="syz.3.1558" path="socket:[26217]" dev="sockfs" ino=26217 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.275968][ T9451] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 116.396077][ T5975] Bluetooth: hci4: command tx timeout [ 116.398818][ T40] audit: type=1400 audit(1758276176.284:458): avc: denied { execmem } for pid=9465 comm="syz.3.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.655525][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 116.725601][ T9508] input: syz1 as /devices/virtual/input/input10 [ 116.734158][ T9510] Context (ID=0x4da) not attached to queue pair (handle=0x4db:0x0) [ 116.900850][ T9529] input: syz1 as /devices/virtual/input/input11 [ 116.903102][ T9529] input: failed to attach handler leds to device input11, error: -6 [ 116.939889][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 117.050796][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'. [ 117.109743][ T9543] UHID_CREATE from different security context by process 838 (syz.1.1603), this is not allowed. [ 117.113015][ T24] hid_parser_main: 5 callbacks suppressed [ 117.113032][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.119530][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.122032][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.124542][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.127515][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.130677][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.134026][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.137519][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.140517][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.143617][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.152500][ T24] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.03 Device [syz1] on syz1 [ 117.182742][ T9544] fido_id[9544]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.189556][ T9548] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 117.222576][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 117.233370][ T9552] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1607'. [ 117.265799][ T9554] netlink: 'syz.1.1608': attribute type 12 has an invalid length. [ 117.374602][ T40] audit: type=1400 audit(1758276177.254:459): avc: denied { read } for pid=9565 comm="syz.1.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.030354][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1633'. [ 118.084226][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.162640][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.200352][ T40] audit: type=1400 audit(1758276178.084:460): avc: denied { create } for pid=9609 comm="syz.4.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.282252][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.349530][ T9618] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 118.361653][ T5328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.367131][ T5328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.373916][ T5328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.378952][ T5328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.381802][ T5328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.384304][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.568144][ T13] bridge_slave_1: left allmulticast mode [ 118.570764][ T13] bridge_slave_1: left promiscuous mode [ 118.573242][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.580967][ T13] bridge_slave_0: left allmulticast mode [ 118.583377][ T13] bridge_slave_0: left promiscuous mode [ 118.585926][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.906094][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.912107][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.918110][ T13] bond0 (unregistering): Released all slaves [ 118.934662][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 118.968589][ T9619] chnl_net:caif_netlink_parms(): no params data found [ 119.181686][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.183951][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.187170][ T9619] bridge_slave_0: entered allmulticast mode [ 119.194596][ T9619] bridge_slave_0: entered promiscuous mode [ 119.198684][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.201042][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.203372][ T9619] bridge_slave_1: entered allmulticast mode [ 119.207875][ T9619] bridge_slave_1: entered promiscuous mode [ 119.276473][ T9619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.281579][ T9619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.335854][ T9619] team0: Port device team_slave_0 added [ 119.348625][ T9619] team0: Port device team_slave_1 added [ 119.354329][ T13] hsr_slave_0: left promiscuous mode [ 119.359167][ T13] hsr_slave_1: left promiscuous mode [ 119.361400][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.363840][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.367430][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.369739][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.395755][ T13] veth1_macvtap: left promiscuous mode [ 119.397830][ T13] veth0_macvtap: left promiscuous mode [ 119.399674][ T13] veth1_vlan: left promiscuous mode [ 119.401391][ T13] veth0_vlan: left promiscuous mode [ 119.870032][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 119.870043][ T40] audit: type=1400 audit(1758276179.754:463): avc: denied { map } for pid=9690 comm="syz.3.1671" path="socket:[27109]" dev="sockfs" ino=27109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.055835][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 120.061313][ T13] team0 (unregistering): Port device team_slave_1 removed [ 120.062033][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 120.364622][ T13] team0 (unregistering): Port device team_slave_0 removed [ 120.401840][ T5328] Bluetooth: hci1: command tx timeout [ 121.171405][ T9715] tc_dump_action: action bad kind [ 121.221313][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.224239][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.235737][ T9619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.248346][ T9721] veth0: entered promiscuous mode [ 121.250331][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.252480][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.260505][ T9619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.269588][ T9721] veth0: left promiscuous mode [ 121.356851][ T9619] hsr_slave_0: entered promiscuous mode [ 121.359957][ T9619] hsr_slave_1: entered promiscuous mode [ 121.362889][ T9619] debugfs: 'hsr0' already exists in 'hsr' [ 121.365275][ T9619] Cannot create hsr debugfs directory [ 121.475372][ T9731] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 121.519240][ T9735] netlink: 'syz.4.1691': attribute type 12 has an invalid length. [ 121.528011][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 121.825796][ T40] audit: type=1400 audit(1758276181.704:464): avc: denied { ioctl } for pid=9754 comm="syz.3.1701" path="socket:[27179]" dev="sockfs" ino=27179 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.830582][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 121.847207][ T9755] macvlan2: entered allmulticast mode [ 121.848968][ T9755] veth1_vlan: entered allmulticast mode [ 121.890182][ T9758] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1702'. [ 121.977777][ T9619] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.988085][ T9619] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.994642][ T9619] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.002667][ T9619] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.066193][ T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 122.070235][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.083891][ T9619] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.089659][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.092688][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.102007][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.104994][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.233486][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 122.240133][ T24] usb 6-1: no configurations [ 122.242091][ T24] usb 6-1: can't read configurations, error -22 [ 122.282685][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.454939][ T9619] veth0_vlan: entered promiscuous mode [ 122.460231][ T9619] veth1_vlan: entered promiscuous mode [ 122.478031][ T5328] Bluetooth: hci1: command tx timeout [ 122.486449][ T9619] veth0_macvtap: entered promiscuous mode [ 122.492298][ T9619] veth1_macvtap: entered promiscuous mode [ 122.510567][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.521363][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.534490][ T1225] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.539021][ T1225] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.548625][ T1225] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.551703][ T1225] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.571507][ T40] audit: type=1326 audit(1758276182.454:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.4.1700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9258ec29 code=0x7fc00000 [ 122.605218][ T9807] ======================================================= [ 122.605218][ T9807] WARNING: The mand mount option has been deprecated and [ 122.605218][ T9807] and is ignored by this kernel. Remove the mand [ 122.605218][ T9807] option from the mount to silence this warning. [ 122.605218][ T9807] ======================================================= [ 122.606790][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.621942][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.648146][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.651507][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.672678][ T40] audit: type=1400 audit(1758276182.554:466): avc: denied { mounton } for pid=9619 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 122.702562][ T9811] __nla_validate_parse: 1 callbacks suppressed [ 122.702578][ T9811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1634'. [ 122.823227][ T9831] mmap: syz.5.1729 (9831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.863989][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 123.149386][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1744'. [ 123.159637][ T9864] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.286402][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 123.300632][ T9883] netlink: 'syz.5.1753': attribute type 10 has an invalid length. [ 123.307018][ T9883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.311162][ T9883] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 123.316373][ T9883] netlink: 'syz.5.1753': attribute type 10 has an invalid length. [ 123.319380][ T9883] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1753'. [ 123.322570][ T9883] batadv0: entered promiscuous mode [ 123.324367][ T9883] batadv0: entered allmulticast mode [ 123.330116][ T9883] bond0: (slave batadv0): Releasing backup interface [ 123.333513][ T9883] bridge0: port 3(batadv0) entered blocking state [ 123.335595][ T9883] bridge0: port 3(batadv0) entered disabled state [ 123.365920][ T9888] netlink: 'syz.3.1755': attribute type 2 has an invalid length. [ 123.434918][ T9895] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1759'. [ 123.436484][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 123.442016][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 123.448532][ T24] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 123.451625][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.454322][ T24] usb 6-1: Product: syz [ 123.455678][ T24] usb 6-1: Manufacturer: syz [ 123.458615][ T24] usb 6-1: SerialNumber: syz [ 123.462346][ T24] usb 6-1: config 0 descriptor?? [ 123.465931][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 123.468287][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 123.472418][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.492667][ T40] audit: type=1400 audit(1758276183.374:467): avc: denied { listen } for pid=9902 comm="syz.5.1763" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.578589][ T40] audit: type=1400 audit(1758276183.464:468): avc: denied { read write } for pid=9908 comm="syz.5.1766" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.585721][ T40] audit: type=1400 audit(1758276183.464:469): avc: denied { open } for pid=9908 comm="syz.5.1766" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.593051][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 123.597522][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 123.733042][ T1340] usb 6-1: USB disconnect, device number 10 [ 123.828713][ T40] audit: type=1400 audit(1758276183.714:470): avc: denied { read } for pid=9920 comm="syz.1.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.928103][ T40] audit: type=1400 audit(1758276183.814:471): avc: denied { write } for pid=9937 comm="syz.5.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.935387][ T40] audit: type=1400 audit(1758276183.814:472): avc: denied { nlmsg_write } for pid=9937 comm="syz.5.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.020576][ T9948] __vm_enough_memory: pid: 9948, comm: syz.5.1784, bytes: 21199605805056 not enough memory for the allocation [ 124.233352][ T9974] batadv_slave_0: entered promiscuous mode [ 124.238078][ T9974] batadv_slave_0: left promiscuous mode [ 124.342715][ T9986] Attempt to restore checkpoint with obsolete wellknown handles [ 124.483109][T10001] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.487424][T10001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.490559][T10001] IPv6: NLM_F_CREATE should be set when creating new route [ 124.556323][ T5328] Bluetooth: hci1: command tx timeout [ 124.686615][T10020] bpf: Bad value for 'uid' [ 124.784143][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 124.784903][ T1148] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 124.795540][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.800163][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.828642][T10037] loop7: detected capacity change from 0 to 7 [ 124.833359][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.836451][ C0] buffer_io_error: 11 callbacks suppressed [ 124.836464][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.841546][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.844539][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.847535][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.850470][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.853228][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.854927][T10040] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 124.856333][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.861177][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.865551][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.868658][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.872025][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.875175][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.878413][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.881589][T10037] ldm_validate_partition_table(): Disk read failed. [ 124.927765][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.930755][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.933623][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.937608][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.941651][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.945468][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.949015][T10037] Dev loop7: unable to read RDB block 0 [ 124.954016][T10037] loop7: unable to read partition table [ 124.956834][T10037] loop7: partition table beyond EOD, truncated [ 124.959469][T10037] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 125.182542][T10072] netlink: 'syz.4.1843': attribute type 1 has an invalid length. [ 125.185819][T10072] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1843'. [ 125.192032][T10072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1843'. [ 125.235146][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 125.246355][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 125.246366][ T40] audit: type=1400 audit(1758276185.124:474): avc: denied { read } for pid=10079 comm="syz.4.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.393960][T10099] erspan0: entered promiscuous mode [ 125.820438][T10105] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1860'. [ 125.853942][T10110] netlink: 'syz.4.1863': attribute type 6 has an invalid length. [ 125.859765][T10110] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.863386][T10110] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.897728][T10119] openvswitch: netlink: IP tunnel TTL not specified. [ 125.932921][ T40] audit: type=1400 audit(1758276185.814:475): avc: denied { ioctl } for pid=10126 comm="syz.4.1870" path="socket:[27528]" dev="sockfs" ino=27528 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.950872][T10127] kvm: kvm [10125]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000018) [ 126.061652][T10140] netlink: 'syz.3.1876': attribute type 1 has an invalid length. [ 126.269393][ T40] audit: type=1400 audit(1758276186.154:476): avc: denied { map } for pid=10173 comm="syz.1.1893" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.277346][ T40] audit: type=1400 audit(1758276186.154:477): avc: denied { execute } for pid=10173 comm="syz.1.1893" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.321620][T10180] netlink: 'syz.4.1897': attribute type 10 has an invalid length. [ 126.325756][T10180] hsr_slave_0: left promiscuous mode [ 126.331070][T10180] hsr_slave_1: left promiscuous mode [ 126.491376][T10206] netlink: 'syz.1.1908': attribute type 142 has an invalid length. [ 126.565722][ T40] audit: type=1400 audit(1758276186.444:478): avc: denied { write } for pid=10215 comm="syz.4.1913" name="/" dev="configfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.646702][ T5328] Bluetooth: hci1: command tx timeout [ 127.597732][ T5328] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 127.601072][ T5328] Bluetooth: hci3: Injecting HCI hardware error event [ 127.604261][ T5328] Bluetooth: hci3: hardware error 0x00 [ 128.045635][ T40] audit: type=1400 audit(1758276187.924:479): avc: denied { watch_with_perm } for pid=10323 comm="syz.1.1965" path="/479/bus" dev="tmpfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.109335][ T40] audit: type=1804 audit(1758276187.994:480): pid=10333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1970" name="/newroot/481/file0" dev="tmpfs" ino=2461 res=1 errno=0 [ 128.116985][ T40] audit: type=1800 audit(1758276187.994:481): pid=10333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1970" name="file0" dev="tmpfs" ino=2461 res=0 errno=0 [ 128.623958][T10381] usb usb7: usbfs: process 10381 (syz.1.1993) did not claim interface 0 before use [ 128.652583][T10382] delete_channel: no stack [ 128.663788][T10387] __nla_validate_parse: 5 callbacks suppressed [ 128.663804][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1996'. [ 128.796759][T10401] SELinux: security_context_str_to_sid () failed with errno=-22 [ 128.863398][ T5975] Bluetooth: hci2: Malformed LE Event: 0x1d [ 129.552692][T10441] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 129.555202][T10441] pim6reg1: persist disabled [ 129.660627][T10450] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2021'. [ 129.660637][ T40] audit: type=1400 audit(1758276189.544:482): avc: denied { nlmsg_read } for pid=10449 comm="syz.3.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.676098][ T5328] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 130.039529][T10496] syz_tun: entered allmulticast mode [ 130.056931][T10498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2046'. [ 130.101497][T10508] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 130.103145][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2051'. [ 130.165364][ T40] audit: type=1326 audit(1758276190.044:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.5.2057" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c42d8ec29 code=0x0 [ 130.364095][T10549] netlink: 'syz.4.2070': attribute type 11 has an invalid length. [ 130.369665][T10549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2070'. [ 130.746139][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 130.907358][ T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.911044][ T24] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.914159][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.917370][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.922058][T10563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.926155][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.131391][ T6010] usb 9-1: USB disconnect, device number 6 [ 131.756849][T10605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.759280][T10605] IPv6: NLM_F_CREATE should be set when creating new route [ 131.761851][T10605] IPv6: NLM_F_CREATE should be set when creating new route [ 131.764653][T10605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.810561][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2099'. [ 132.080496][T10640] netlink: 'syz.1.2124': attribute type 3 has an invalid length. [ 132.349457][T10663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.039549][T10677] input: syz1 as /devices/virtual/input/input13 [ 133.042246][T10677] input: failed to attach handler leds to device input13, error: -6 [ 133.111341][T10681] debugfs: 'ttyS3' already exists in 'caif_serial' [ 133.188166][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 133.228328][T10698] Context (ID=0x4d4) not attached to queue pair (handle=0x4d5:0x0) [ 133.419909][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2156'. [ 133.423739][T10723] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2156'. [ 133.471830][T10728] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2159'. [ 133.819337][T10767] netlink: 'syz.4.2178': attribute type 1 has an invalid length. [ 133.822477][T10767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.863591][ T40] audit: type=1400 audit(1758276193.744:484): avc: denied { ioctl } for pid=10770 comm="syz.4.2180" path="socket:[31628]" dev="sockfs" ino=31628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.177453][T10805] __nla_validate_parse: 1 callbacks suppressed [ 134.177470][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2195'. [ 134.184241][ T1148] bond0: (slave bond_slave_0): interface is now down [ 134.190092][ T1148] bond0: (slave bond_slave_1): interface is now down [ 134.195781][ T1148] bond0: now running without any active interface! [ 134.270273][ T24] hid_parser_main: 73 callbacks suppressed [ 134.270285][ T24] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 134.274620][ T24] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 134.277619][ T24] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 134.280272][ T24] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 134.282819][ T24] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 134.285189][ T24] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 134.287793][ T24] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 134.290105][ T24] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 134.292400][ T24] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 134.294850][ T24] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x0 [ 134.306875][ T24] hid-generic 00A0:0008:0003.0004: hidraw1: HID v0.05 Device [syz1] on syz0 [ 134.640884][T10850] atomic_op ffff888055e09198 conn xmit_atomic 0000000000000000 [ 134.779154][T10861] comedi: valid board names for 8255 driver are: [ 134.781206][T10861] 8255 [ 134.782117][T10861] comedi: valid board names for vmk80xx driver are: [ 134.784150][T10861] vmk80xx [ 134.785207][T10861] comedi: valid board names for usbduxsigma driver are: [ 134.788358][T10861] usbduxsigma [ 134.789551][T10861] comedi: valid board names for usbduxfast driver are: [ 134.792795][T10861] usbduxfast [ 134.793937][T10861] comedi: valid board names for usbdux driver are: [ 134.795970][T10861] usbdux [ 134.797429][T10861] comedi: valid board names for ni6501 driver are: [ 134.799553][T10861] ni6501 [ 134.800571][T10861] comedi: valid board names for dt9812 driver are: [ 134.802763][T10861] dt9812 [ 134.803795][T10861] comedi: valid board names for ni_labpc_cs driver are: [ 134.806742][T10861] ni_labpc_cs [ 134.808205][T10861] comedi: valid board names for ni_daq_700 driver are: [ 134.810978][T10861] ni_daq_700 [ 134.812458][T10861] comedi: valid board names for labpc_pci driver are: [ 134.815387][T10861] labpc_pci [ 134.818580][T10861] comedi: valid board names for adl_pci9118 driver are: [ 134.821200][T10861] pci9118dg [ 134.822346][T10861] pci9118hg [ 134.823456][T10861] pci9118hr [ 134.824532][T10861] comedi: valid board names for 8255_pci driver are: [ 134.826795][T10861] 8255_pci [ 134.827936][T10861] comedi: valid board names for s526 driver are: [ 134.830063][T10861] s526 [ 134.831088][T10861] comedi: valid board names for multiq3 driver are: [ 134.833355][T10861] multiq3 [ 134.834389][T10861] comedi: valid board names for pcmuio driver are: [ 134.836676][T10861] pcmuio48 [ 134.837806][T10861] pcmuio96 [ 134.838882][T10861] comedi: valid board names for pcmmio driver are: [ 134.840987][T10861] pcmmio [ 134.842016][T10861] comedi: valid board names for pcmda12 driver are: [ 134.844632][T10861] pcmda12 [ 134.845975][T10861] comedi: valid board names for pcmad driver are: [ 134.848779][T10861] pcmad12 [ 134.850232][T10861] pcmad16 [ 134.851639][T10861] comedi: valid board names for ni_labpc driver are: [ 134.854332][T10861] lab-pc-1200 [ 134.855689][T10861] lab-pc-1200ai [ 134.857698][T10861] lab-pc+ [ 134.859028][T10861] comedi: valid board names for atmio16 driver are: [ 134.861817][T10861] atmio16 [ 134.863155][T10861] atmio16d [ 134.864534][T10861] comedi: valid board names for ni_at_ao driver are: [ 134.867509][T10861] at-ao-6 [ 134.868857][T10861] at-ao-10 [ 134.870238][T10861] comedi: valid board names for ni_at_a2150 driver are: [ 134.873049][T10861] ni_at_a2150 [ 134.874461][T10861] comedi: valid board names for adq12b driver are: [ 134.877661][T10861] adq12b [ 134.878942][T10861] comedi: valid board names for mpc624 driver are: [ 134.881938][T10861] mpc624 [ 134.883300][T10861] comedi: valid board names for c6xdigio driver are: [ 134.886347][T10861] c6xdigio [ 134.887369][T10861] comedi: valid board names for aio_iiro_16 driver are: [ 134.889511][T10861] aio_iiro_16 [ 134.890586][T10861] comedi: valid board names for aio_aio12_8 driver are: [ 134.892708][T10861] aio_aio12_8 [ 134.893812][T10861] aio_ai12_8 [ 134.894893][T10861] aio_ao12_4 [ 134.896261][T10861] comedi: valid board names for fl512 driver are: [ 134.898229][T10861] fl512 [ 134.899175][T10861] comedi: valid board names for dmm32at driver are: [ 134.901369][T10861] dmm32at [ 134.902460][T10861] comedi: valid board names for dt282x driver are: [ 134.904603][T10861] dt2821 [ 134.905600][T10861] dt2821-f [ 134.906713][T10861] dt2821-g [ 134.907736][T10861] dt2823 [ 134.908687][T10861] dt2824-pgh [ 134.909764][T10861] dt2824-pgl [ 134.910857][T10861] dt2825 [ 134.911816][T10861] dt2827 [ 134.912762][T10861] dt2828 [ 134.913731][T10861] dt2829 [ 134.914688][T10861] dt21-ez [ 134.915739][T10861] dt23-ez [ 134.917406][T10861] dt24-ez [ 134.919153][T10861] dt24-ez-pgl [ 134.921006][T10861] comedi: valid board names for dt2817 driver are: [ 134.923258][T10861] dt2817 [ 134.924272][T10861] comedi: valid board names for dt2815 driver are: [ 134.926517][T10861] dt2815 [ 134.927576][T10861] comedi: valid board names for dt2814 driver are: [ 134.929795][T10861] dt2814 [ 134.930748][T10861] comedi: valid board names for dt2811 driver are: [ 134.932773][T10861] dt2811-pgh [ 134.933834][T10861] dt2811-pgl [ 134.934956][T10861] comedi: valid board names for dt2801 driver are: [ 134.937472][T10861] dt2801 [ 134.938627][T10861] comedi: valid board names for das6402 driver are: [ 134.941359][T10861] das6402-12 [ 134.942831][T10861] das6402-16 [ 134.944116][T10861] comedi: valid board names for das1800 driver are: [ 134.947394][T10861] das-1701st [ 134.949154][T10861] das-1701st-da [ 134.950268][T10861] das-1702st [ 134.951310][T10861] das-1702st-da [ 134.952697][T10861] das-1702hr [ 134.954034][T10861] das-1702hr-da [ 134.955496][T10861] das-1701ao [ 134.957646][T10861] das-1702ao [ 134.959324][T10861] das-1801st [ 134.961013][T10861] das-1801st-da [ 134.962810][T10861] das-1802st [ 134.964704][T10861] das-1802st-da [ 134.969029][T10861] das-1802hr [ 134.972004][T10861] das-1802hr-da [ 134.974078][T10861] das-1801hc [ 134.975585][T10861] das-1802hc [ 134.977269][T10861] das-1801ao [ 134.979154][T10861] das-1802ao [ 134.980712][T10861] comedi: valid board names for das800 driver are: [ 134.983723][T10861] das-800 [ 134.985100][T10861] cio-das800 [ 134.987904][T10861] das-801 [ 134.989277][T10861] cio-das801 [ 134.990850][T10861] das-802 [ 134.992204][T10861] cio-das802 [ 134.993674][T10861] cio-das802/16 [ 134.995365][T10861] comedi: valid board names for isa-das08 driver are: [ 134.999285][T10861] isa-das08 [ 135.000524][T10861] das08-pgm [ 135.001970][T10861] das08-pgh [ 135.003155][T10861] das08-pgl [ 135.004327][T10861] das08-aoh [ 135.005577][T10861] das08-aol [ 135.008092][T10861] das08-aom [ 135.009373][T10861] das08/jr-ao [ 135.010758][T10861] das08jr-16-ao [ 135.012377][T10861] pc104-das08 [ 135.013934][T10861] das08jr/16 [ 135.015428][T10861] comedi: valid board names for das16m1 driver are: [ 135.018824][T10861] das16m1 [ 135.020204][T10861] comedi: valid board names for dac02 driver are: [ 135.023385][T10861] dac02 [ 135.024552][T10861] comedi: valid board names for rti802 driver are: [ 135.029203][T10861] rti802 [ 135.031111][T10861] comedi: valid board names for rti800 driver are: [ 135.033661][T10861] rti800 [ 135.034617][T10861] rti815 [ 135.035813][T10861] comedi: valid board names for pcm3724 driver are: [ 135.038790][T10861] pcm3724 [ 135.040270][T10861] comedi: valid board names for pcl818 driver are: [ 135.043091][T10861] pcl818l [ 135.044494][T10861] pcl818h [ 135.045903][T10861] pcl818hd [ 135.048131][T10861] pcl818hg [ 135.050062][T10861] pcl818 [ 135.051530][T10861] pcl718 [ 135.053093][T10861] pcm3718 [ 135.054490][T10861] comedi: valid board names for pcl816 driver are: [ 135.057304][T10861] pcl816 [ 135.058622][T10861] pcl814b [ 135.059887][T10861] comedi: valid board names for pcl812 driver are: [ 135.062229][T10861] pcl812 [ 135.063456][T10861] pcl812pg [ 135.064730][T10861] acl8112pg [ 135.066273][T10861] acl8112dg [ 135.067653][T10861] acl8112hg [ 135.069156][T10861] a821pgl [ 135.070766][T10861] a821pglnda [ 135.072552][T10861] a821pgh [ 135.074610][T10861] a822pgl [ 135.076303][T10861] a822pgh [ 135.077644][T10861] a823pgl [ 135.078965][T10861] a823pgh [ 135.080143][T10861] pcl813 [ 135.081135][T10861] pcl813b [ 135.082330][T10861] acl8113 [ 135.083382][T10861] iso813 [ 135.084375][T10861] acl8216 [ 135.085564][T10861] a826pg [ 135.086801][T10861] comedi: valid board names for pcl730 driver are: [ 135.088947][T10861] pcl730 [ 135.090040][T10861] iso730 [ 135.091049][T10861] acl7130 [ 135.092087][T10861] pcm3730 [ 135.093094][T10861] pcl725 [ 135.094173][T10861] p8r8dio [ 135.095175][T10861] acl7225b [ 135.096457][T10861] p16r16dio [ 135.097700][T10861] pcl733 [ 135.098648][T10861] pcl734 [ 135.099642][T10861] opmm-1616-xt [ 135.100875][T10861] pearl-mm-p [ 135.101915][T10861] ir104-pbf [ 135.102872][T10861] comedi: valid board names for pcl726 driver are: [ 135.105217][T10861] pcl726 [ 135.106363][T10861] pcl727 [ 135.107790][T10861] pcl728 [ 135.108944][T10861] acl6126 [ 135.109988][T10861] acl6128 [ 135.111002][T10861] comedi: valid board names for pcl724 driver are: [ 135.113209][T10861] pcl724 [ 135.114339][T10861] pcl722 [ 135.115439][T10861] pcl731 [ 135.116505][T10861] acl7122 [ 135.117645][T10861] acl7124 [ 135.118940][T10861] pet48dio [ 135.120231][T10861] pcmio48 [ 135.121274][T10861] onyx-mm-dio [ 135.122497][T10861] comedi: valid board names for pcl711 driver are: [ 135.125180][T10861] pcl711 [ 135.126338][T10861] pcl711b [ 135.141262][T10861] acl8112hg [ 135.142409][T10861] acl8112dg [ 135.143484][T10861] comedi: valid board names for amplc_pc263 driver are: [ 135.150223][T10861] pc263 [ 135.152237][T10861] comedi: valid board names for amplc_pc236 driver are: [ 135.153587][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2235'. [ 135.155703][T10861] pc36at [ 135.161970][T10861] comedi: valid board names for amplc_dio200 driver are: [ 135.165138][T10861] pc212e [ 135.167678][T10861] pc214e [ 135.168928][T10861] pc215e [ 135.173930][T10861] pc218e [ 135.175133][T10861] pc272e [ 135.176433][T10861] comedi: valid board names for comedi_parport driver are: [ 135.179675][T10861] comedi_parport [ 135.181405][T10861] comedi: valid board names for comedi_test driver are: [ 135.183997][T10861] comedi_test [ 135.185365][T10861] comedi: valid board names for comedi_bond driver are: [ 135.188180][T10861] comedi_bond [ 135.447132][T10928] Attempt to restore checkpoint with obsolete wellknown handles [ 135.499702][T10932] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 135.504875][T10932] overlayfs: overlapping lowerdir path [ 135.938219][T10957] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 136.081799][ T5975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.088274][ T5975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.091857][ T5975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.096608][ T5975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.100354][ T5975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.235132][T10966] chnl_net:caif_netlink_parms(): no params data found [ 136.334863][T10966] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.338314][T10966] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.341789][T10966] bridge_slave_0: entered allmulticast mode [ 136.345766][T10966] bridge_slave_0: entered promiscuous mode [ 136.353700][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.358856][T10966] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.362034][T10966] bridge_slave_1: entered allmulticast mode [ 136.366560][T10966] bridge_slave_1: entered promiscuous mode [ 136.432122][T10966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.440978][T10966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.485529][T10966] team0: Port device team_slave_0 added [ 136.490728][T10966] team0: Port device team_slave_1 added [ 136.543543][T10966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.545936][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.556524][T10966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.562201][T10966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.564574][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.575255][T10966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.592154][T10995] binder: 10994:10995 ioctl c018620c 200000000000 returned -22 [ 136.623878][T10966] hsr_slave_0: entered promiscuous mode [ 136.626805][T10966] hsr_slave_1: entered promiscuous mode [ 136.629591][T10966] debugfs: 'hsr0' already exists in 'hsr' [ 136.631937][T10966] Cannot create hsr debugfs directory [ 136.798241][ T7941] e1000 0000:00:06.0 eth0: Reset adapter [ 136.920946][ T5328] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 136.981488][T10966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.154064][T10966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.221421][T10966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.425641][T10966] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.431777][T10966] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.437744][T10966] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 137.444366][T10966] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.521168][T10966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.540974][T10966] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.550578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.553085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.560946][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.563947][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.728961][T10966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.901323][T10966] veth0_vlan: entered promiscuous mode [ 137.910014][T10966] veth1_vlan: entered promiscuous mode [ 137.937785][T10966] veth0_macvtap: entered promiscuous mode [ 137.942115][T10966] veth1_macvtap: entered promiscuous mode [ 137.955479][T10966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.967403][T10966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.977014][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.980602][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.987544][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.991882][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.039388][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.042575][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.070515][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.073747][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.089820][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.092425][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.156261][ T5328] Bluetooth: hci2: command tx timeout [ 138.160352][ T61] bridge_slave_1: left allmulticast mode [ 138.162135][ T61] bridge_slave_1: left promiscuous mode [ 138.164712][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.168701][ T61] bridge_slave_0: left allmulticast mode [ 138.170767][ T61] bridge_slave_0: left promiscuous mode [ 138.172586][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.443766][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.449287][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.453998][ T61] bond0 (unregistering): Released all slaves [ 138.760317][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.763544][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.771269][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.774356][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.804375][ T61] veth1_macvtap: left promiscuous mode [ 138.806737][ T61] veth0_macvtap: left promiscuous mode [ 138.808811][ T61] veth1_vlan: left promiscuous mode [ 138.959657][ T7941] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 139.434402][ T61] team0 (unregistering): Port device team_slave_1 removed [ 139.510701][ T61] team0 (unregistering): Port device team_slave_0 removed [ 140.236142][ T5328] Bluetooth: hci2: command tx timeout [ 141.136852][T11044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2303'. [ 141.140655][T11044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2303'. [ 141.509542][ T40] audit: type=1326 audit(1758276201.394:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.1.2324" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34c798ec29 code=0x0 [ 141.606069][ T40] audit: type=1400 audit(1758276201.484:486): avc: denied { name_bind } for pid=11094 comm="syz.4.2327" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 141.793995][T11118] pim6reg: entered allmulticast mode [ 141.799032][T11118] pim6reg: left allmulticast mode [ 141.988818][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2344'. [ 141.994266][T11134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2344'. [ 141.995460][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 142.004248][T11136] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2345'. [ 142.317452][ T5328] Bluetooth: hci2: command tx timeout [ 142.596360][T11170] nbd0: detected capacity change from 0 to 127 [ 142.601541][ T5328] block nbd0: Receive control failed (result -32) [ 142.753020][T11183] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2366'. [ 142.990577][T11193] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2371'. [ 143.000370][ T40] audit: type=1400 audit(1758276202.884:487): avc: denied { write } for pid=11194 comm="syz.1.2372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 143.266169][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2379'. [ 143.269501][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2379'. [ 143.348384][T11220] could not open pipe file descriptor [ 143.474150][T11231] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 143.725033][T11261] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 143.728333][T11261] syzkaller1: ignored: set checksum disabled [ 143.795028][ T40] audit: type=1400 audit(1758276203.674:488): avc: denied { remount } for pid=11265 comm="syz.1.2405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 143.815829][T11263] team0 (unregistering): Port device team_slave_0 removed [ 143.822954][T11263] team0 (unregistering): Port device team_slave_1 removed [ 144.012732][ T40] audit: type=1400 audit(1758276203.894:489): avc: denied { read } for pid=11287 comm="syz.1.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.396178][ T5328] Bluetooth: hci2: command tx timeout [ 144.872585][T11312] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 145.071908][T11332] 9p: Unknown access argument 18446744073709551615: -34 [ 145.231039][ T40] audit: type=1400 audit(1758276205.114:490): avc: denied { create } for pid=11343 comm="syz.1.2442" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 145.515005][ T40] audit: type=1400 audit(1758276205.394:491): avc: denied { ioctl } for pid=11364 comm="syz.3.2452" path="socket:[36495]" dev="sockfs" ino=36495 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.525205][ T40] audit: type=1400 audit(1758276205.404:492): avc: denied { ioctl } for pid=11364 comm="syz.3.2452" path="socket:[36496]" dev="sockfs" ino=36496 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 145.717950][ T40] audit: type=1400 audit(1758276205.604:493): avc: denied { setopt } for pid=11377 comm="syz.3.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.917157][ T61] wlan1: Trigger new scan to find an IBSS to join [ 146.367538][T11423] __nla_validate_parse: 3 callbacks suppressed [ 146.367555][T11423] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2477'. [ 146.876247][ T5328] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 146.994082][T11447] GUP no longer grows the stack in syz.1.2488 (11447): 200000007000-20000000a000 (200000004000) [ 147.001851][T11447] CPU: 0 UID: 0 PID: 11447 Comm: syz.1.2488 Not tainted syzkaller #0 PREEMPT(full) [ 147.001879][T11447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.001896][T11447] Call Trace: [ 147.001903][T11447] [ 147.001910][T11447] dump_stack_lvl+0x16c/0x1f0 [ 147.001941][T11447] gup_vma_lookup+0x1d2/0x220 [ 147.001970][T11447] __get_user_pages+0x243/0x34a0 [ 147.002007][T11447] ? __pfx___get_user_pages+0x10/0x10 [ 147.002041][T11447] __gup_longterm_locked+0x2dd/0x17e0 [ 147.002066][T11447] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.002095][T11447] ? __pfx___gup_longterm_locked+0x10/0x10 [ 147.002126][T11447] ? lock_acquire+0x62/0x350 [ 147.002150][T11447] pin_user_pages+0x13c/0x160 [ 147.002178][T11447] ? __pfx_pin_user_pages+0x10/0x10 [ 147.002208][T11447] ? xdp_umem_create+0x652/0x1270 [ 147.002252][T11447] xdp_umem_create+0x73c/0x1270 [ 147.002280][T11447] xsk_setsockopt+0x6db/0x9a0 [ 147.002301][T11447] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.002321][T11447] ? find_held_lock+0x2b/0x80 [ 147.002351][T11447] ? selinux_socket_setsockopt+0x6a/0x80 [ 147.002390][T11447] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.002411][T11447] do_sock_setsockopt+0xf3/0x1d0 [ 147.002440][T11447] __sys_setsockopt+0x1a0/0x230 [ 147.002467][T11447] __x64_sys_setsockopt+0xbd/0x160 [ 147.002488][T11447] ? do_syscall_64+0x91/0x4e0 [ 147.002512][T11447] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.002535][T11447] do_syscall_64+0xcd/0x4e0 [ 147.002560][T11447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.002578][T11447] RIP: 0033:0x7f34c798ec29 [ 147.002592][T11447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.002610][T11447] RSP: 002b:00007f34c88e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.002630][T11447] RAX: ffffffffffffffda RBX: 00007f34c7bd5fa0 RCX: 00007f34c798ec29 [ 147.002642][T11447] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 147.002654][T11447] RBP: 00007f34c7a11e41 R08: 0000000000000020 R09: 0000000000000000 [ 147.002667][T11447] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 147.002679][T11447] R13: 00007f34c7bd6038 R14: 00007f34c7bd5fa0 R15: 00007ffe2812de28 [ 147.002705][T11447] [ 147.110787][T11455] vxcan1: tx address claim with dlc 0 [ 147.149462][ T10] IPVS: starting estimator thread 0... [ 147.154580][ T40] audit: type=1400 audit(1758276207.034:494): avc: denied { write } for pid=11461 comm="syz.5.2496" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.244325][T11462] IPVS: using max 42 ests per chain, 100800 per kthread [ 147.252720][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 147.292440][T11479] netlink: 'syz.1.2504': attribute type 1 has an invalid length. [ 147.307477][T11473] Falling back ldisc for ttyS3. [ 147.482380][T11504] batadv_slave_1: entered promiscuous mode [ 147.484784][T11503] batadv_slave_1: left promiscuous mode [ 147.603050][ T40] audit: type=1400 audit(1758276207.484:495): avc: denied { getopt } for pid=11516 comm="syz.4.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 147.603475][T11519] syz.5.2522 uses obsolete (PF_INET,SOCK_PACKET) [ 147.737086][T11532] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2528'. [ 147.769238][ T40] audit: type=1400 audit(1758276207.654:496): avc: denied { read } for pid=11531 comm="syz.5.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.922347][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2534'. [ 147.925566][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2534'. [ 148.256063][ T7718] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 148.416118][ T7718] usb 10-1: Using ep0 maxpacket: 8 [ 148.419329][ T7718] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 148.422099][ T7718] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.425321][ T7718] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.428910][ T7718] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.432128][ T7718] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.437641][ T7718] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.441298][ T7718] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.639998][ T40] audit: type=1400 audit(1758276464.530:497): avc: denied { create } for pid=11565 comm="syz.1.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 148.647548][ T40] audit: type=1400 audit(1758276464.530:498): avc: denied { ioctl } for pid=11565 comm="syz.1.2543" path="socket:[37327]" dev="sockfs" ino=37327 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 148.649886][ T7718] usb 10-1: GET_CAPABILITIES returned 0 [ 148.658813][ T7718] usbtmc 10-1:16.0: can't read capabilities [ 148.681092][T11568] Driver unsupported XDP return value 0 on prog (id 139) dev N/A, expect packet loss! [ 148.850919][ T7941] usb 10-1: USB disconnect, device number 3 [ 149.034817][ T40] audit: type=1400 audit(1758276464.920:499): avc: denied { read } for pid=11588 comm="syz.4.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.037673][ T1148] wlan1: Trigger new scan to find an IBSS to join [ 149.234454][ T40] audit: type=1400 audit(1758276465.120:500): avc: denied { read } for pid=11616 comm="syz.3.2568" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 149.243998][ T40] audit: type=1400 audit(1758276465.120:501): avc: denied { watch } for pid=11616 comm="syz.3.2568" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 149.252256][ T40] audit: type=1400 audit(1758276465.120:502): avc: denied { watch_sb } for pid=11616 comm="syz.3.2568" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 149.302841][T11627] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 149.372492][T11632] bond0: entered promiscuous mode [ 149.374631][T11632] bond_slave_0: entered promiscuous mode [ 149.377515][T11632] bond_slave_1: entered promiscuous mode [ 149.380685][T11632] batadv0: entered promiscuous mode [ 149.383990][T11632] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 149.388693][T11632] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 149.393432][T11632] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 149.398097][T11632] bond0: left promiscuous mode [ 149.400098][T11632] bond_slave_0: left promiscuous mode [ 149.402569][T11632] bond_slave_1: left promiscuous mode [ 149.405936][T11632] batadv0: left promiscuous mode [ 149.530566][T11650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2589'. [ 149.533621][T11650] bond0: Removing last arp target with arp_interval on [ 149.583656][T11658] mkiss: ax0: crc mode is auto. [ 149.591442][ T5328] Bluetooth: hci0: unexpected event 0x03 length: 6 < 11 [ 149.715820][T11670] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 149.722283][T11671] netlink: 'syz.1.2592': attribute type 2 has an invalid length. [ 149.725900][T11670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.730506][T11670] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 149.738097][T11670] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 149.740587][T11670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2593'. [ 149.743743][T11670] batadv0: entered promiscuous mode [ 149.745573][T11670] batadv0: entered allmulticast mode [ 149.751361][T11670] bond0: (slave batadv0): Releasing backup interface [ 149.751587][ T40] audit: type=1326 audit(1758276465.640:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11662 comm="syz.5.2597" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c42d8ec29 code=0x7fc00000 [ 149.763283][T11670] bridge0: port 3(batadv0) entered blocking state [ 149.765461][T11670] bridge0: port 3(batadv0) entered disabled state [ 149.801308][T11680] team0: No ports can be present during mode change [ 149.807777][ T1225] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 149.810839][ T1225] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 149.830819][T11687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2602'. [ 149.869121][T11692] netlink: 'syz.3.2603': attribute type 25 has an invalid length. [ 149.872103][T11692] netlink: 'syz.3.2603': attribute type 28 has an invalid length. [ 149.897430][T11698] netlink: 'syz.5.2606': attribute type 1 has an invalid length. [ 149.970266][T11707] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 150.307192][T11745] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 150.666130][ T1340] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 150.807785][T11785] openvswitch: netlink: Multiple metadata blocks provided [ 150.832621][ T1340] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 150.836625][ T1340] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.840768][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 150.841653][ T1340] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 150.843627][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2651'. [ 150.847031][ T1340] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 150.847045][ T1340] usb 9-1: Manufacturer: syz [ 150.849586][ T1340] usb 9-1: config 0 descriptor?? [ 150.850713][T11788] netlink: 'syz.3.2651': attribute type 19 has an invalid length. [ 150.872178][T11790] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 150.876642][ T839] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 150.916129][ T1340] rc_core: IR keymap rc-hauppauge not found [ 150.918223][ T1340] Registered IR keymap rc-empty [ 150.920751][ T1340] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 150.924853][ T1340] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input14 [ 150.934072][T11799] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 151.026129][ T839] usb 10-1: Using ep0 maxpacket: 16 [ 151.029048][ T839] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.032239][ T839] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.035637][ T839] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 151.040774][ T839] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.043625][ T839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.046463][ T839] usb 10-1: SerialNumber: syz [ 151.051328][ T839] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 151.062661][ T839] usb 9-1: USB disconnect, device number 7 [ 151.254494][ T7718] usb 10-1: USB disconnect, device number 4 [ 151.448388][T11839] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2673'. [ 151.708905][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2685'. [ 151.870772][ T5328] Bluetooth: hci0: hardware error 0x04 [ 151.996586][ T1148] wlan1: Creating new IBSS network, BSSID 02:ef:b7:5c:02:4a [ 152.065941][T11895] : entered promiscuous mode [ 152.070786][T11895] : left promiscuous mode [ 152.329807][T11924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.469297][T11940] can0: slcan on ttyS3. [ 152.546255][T11940] can0 (unregistered): slcan off ttyS3. [ 152.604438][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2728'. [ 152.610200][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2728'. [ 153.289437][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2737'. [ 153.292890][T11974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.295210][T11974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.298174][T11974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.300968][T11974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.472737][T11990] netlink: 'syz.4.2743': attribute type 12 has an invalid length. [ 153.475219][T11990] netlink: 'syz.4.2743': attribute type 29 has an invalid length. [ 153.478657][T11990] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2743'. [ 153.695089][T12006] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 153.698801][T12006] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 153.702198][T12008] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2752'. [ 153.739079][T12012] netlink: 'syz.1.2753': attribute type 9 has an invalid length. [ 153.863551][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 153.863562][ T40] audit: type=1400 audit(1758276469.750:532): avc: denied { listen } for pid=12026 comm="syz.1.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.916181][ T5328] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 154.083898][T12051] bridge_slave_0: default FDB implementation only supports local addresses [ 154.159906][ T40] audit: type=1400 audit(1758276470.040:533): avc: denied { map } for pid=12058 comm="syz.5.2776" path="socket:[38771]" dev="sockfs" ino=38771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.171081][ T40] audit: type=1400 audit(1758276470.040:534): avc: denied { read } for pid=12058 comm="syz.5.2776" path="socket:[38771]" dev="sockfs" ino=38771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.325910][ T40] audit: type=1400 audit(1758276470.210:535): avc: denied { create } for pid=12077 comm="syz.5.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.329671][T12078] tmpfs: Invalid gid '0x00000000ffffffff' [ 154.333004][ T40] audit: type=1400 audit(1758276470.220:536): avc: denied { getopt } for pid=12077 comm="syz.5.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.466131][T12080] nbd1: detected capacity change from 0 to 127 [ 154.469050][ T5328] block nbd1: Receive control failed (result -32) [ 154.469680][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2787'. [ 154.564127][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 154.570031][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2792'. [ 154.779146][T12105] nbd2: detected capacity change from 0 to 127 [ 154.783604][ T5328] block nbd2: Receive control failed (result -32) [ 154.849654][T12120] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 154.866847][T12120] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 154.928293][ T40] audit: type=1400 audit(1758276470.820:537): avc: denied { write } for pid=12128 comm="syz.1.2810" name="cgroup.subtree_control" dev="cgroup2" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.938447][ T40] audit: type=1400 audit(1758276470.820:538): avc: denied { open } for pid=12128 comm="syz.1.2810" path="" dev="cgroup2" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.945315][ T40] audit: type=1400 audit(1758276470.830:539): avc: denied { ioctl } for pid=12128 comm="syz.1.2810" path="" dev="cgroup2" ino=217 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.964263][ T40] audit: type=1400 audit(1758276470.850:540): avc: denied { watch } for pid=12132 comm="syz.4.2812" path="/125/bus" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 154.974200][ T40] audit: type=1400 audit(1758276470.850:541): avc: denied { watch_sb } for pid=12132 comm="syz.4.2812" path="/125/bus" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.014307][T12143] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.164310][T12155] CUSE: unknown device info "" [ 155.165953][T12155] CUSE: zero length info key specified [ 156.038064][T12221] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 156.040658][T12221] syzkaller1: ignored: set checksum disabled [ 156.590923][T12254] netlink: 'syz.1.2867': attribute type 1 has an invalid length. [ 156.644147][T12262] __nla_validate_parse: 5 callbacks suppressed [ 156.644158][T12262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2871'. [ 156.678510][T12262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2871'. [ 156.997276][T12297] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 157.040491][T12300] 9p: Unknown uid 00000000004294967295 [ 157.361856][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 157.431928][T12326] team0 (unregistering): Port device team_slave_0 removed [ 157.435487][T12326] team0 (unregistering): Port device team_slave_1 removed [ 157.475826][T12329] sp0: Synchronizing with TNC [ 157.926580][ T12] wlan1: Trigger new scan to find an IBSS to join [ 158.805594][T12426] batadv_slave_1: entered promiscuous mode [ 158.808945][T12425] batadv_slave_1: left promiscuous mode [ 159.194583][ T40] audit: type=1400 audit(1758276475.080:542): avc: denied { watch_reads } for pid=12458 comm="syz.4.2962" path="/194" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 159.435104][ T40] audit: type=1400 audit(1758276475.320:543): avc: denied { getopt } for pid=12486 comm="syz.5.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.493936][T12497] program syz.1.2979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.593287][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 159.710485][T12526] netlink: 'syz.5.2993': attribute type 1 has an invalid length. [ 159.718347][T12528] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2994'. [ 159.759466][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2996'. [ 160.256308][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 160.362195][T12583] netem: incorrect ge model size [ 160.364603][T12583] netem: change failed [ 160.410076][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 160.414189][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.421597][ T10] usb 6-1: config 0 descriptor?? [ 160.506722][T12592] loop7: detected capacity change from 0 to 524255232 [ 160.595875][ T40] audit: type=1400 audit(1758276732.482:544): avc: denied { checkpoint_restore } for pid=12593 comm="syz.5.3025" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.632484][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 160.635072][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 160.640372][ T10] usb 6-1: USB disconnect, device number 11 [ 160.939592][T12623] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 160.956690][ T61] wlan1: Trigger new scan to find an IBSS to join [ 160.956896][ T12] wlan1: Trigger new scan to find an IBSS to join [ 160.960130][ T40] audit: type=1400 audit(1758276732.842:545): avc: denied { override_creds } for pid=12626 comm="syz.4.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 161.047524][ T40] audit: type=1400 audit(1758276732.942:546): avc: denied { accept } for pid=12643 comm="syz.4.3048" lport=36726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.285778][T12663] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3056'. [ 161.320975][ T40] audit: type=1400 audit(1758276733.212:547): avc: denied { name_bind } for pid=12668 comm="syz.5.3059" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 161.348492][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3064'. [ 161.402918][T12684] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 161.410341][T12687] netlink: 'syz.4.3066': attribute type 10 has an invalid length. [ 161.413935][T12687] netlink: 'syz.4.3066': attribute type 10 has an invalid length. [ 161.418465][T12687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3066'. [ 161.538087][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3077'. [ 161.566727][T12713] netlink: 'syz.5.3080': attribute type 25 has an invalid length. [ 161.569213][T12713] netlink: 'syz.5.3080': attribute type 28 has an invalid length. [ 161.575946][T12716] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 161.755291][ T1239] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 161.848144][T12747] mkiss: ax0: crc mode is auto. [ 161.852692][ T5970] Bluetooth: hci1: unexpected event 0x03 length: 6 < 11 [ 161.920067][ T1239] wlan1: Creating new IBSS network, BSSID c2:f1:21:61:47:3d [ 162.107668][T12759] netlink: 'syz.4.3100': attribute type 1 has an invalid length. [ 162.208132][T12769] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 162.388468][T12781] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 162.742190][T12807] openvswitch: netlink: Multiple metadata blocks provided [ 162.960707][T12826] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 163.475445][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3157'. [ 163.480303][T12876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3157'. [ 163.483534][T12876] netlink: 'syz.5.3157': attribute type 19 has an invalid length. [ 163.596100][ T5328] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.598355][ T5970] Bluetooth: hci4: command 0x1003 tx timeout [ 163.675955][T12891] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 163.756368][ T5975] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 164.035880][T12936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.149035][T12948] netlink: 'syz.1.3191': attribute type 12 has an invalid length. [ 164.151443][T12948] netlink: 'syz.1.3191': attribute type 29 has an invalid length. [ 164.153860][T12948] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3191'. [ 164.216749][T12958] netlink: 'syz.5.3195': attribute type 9 has an invalid length. [ 164.408550][T12979] erspan0: entered promiscuous mode [ 164.411668][T12981] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 164.414765][T12981] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 164.455449][T12987] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3209'. [ 164.496559][T12989] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3211'. [ 164.611317][T13003] sp0: Synchronizing with TNC [ 164.730679][T13019] netlink: 'syz.5.3224': attribute type 1 has an invalid length. [ 164.838313][T13032] program syz.5.3231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.023389][T13049] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 165.027158][T13049] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 165.327455][T13076] loop7: detected capacity change from 0 to 524255232 [ 165.485488][T13086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3257'. [ 165.492277][T13086] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.495775][T13086] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.561870][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 165.712629][T13106] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 165.927837][ T1239] wlan1: Trigger new scan to find an IBSS to join [ 166.829637][ T1239] wlan1: Creating new IBSS network, BSSID ee:50:89:05:1a:e4 [ 167.006617][ T839] e1000 0000:00:06.0 eth0: Reset adapter [ 167.033578][T13182] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3299'. [ 167.055946][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3303'. [ 167.116519][ T7941] e1000 0000:00:06.0 eth0: Reset adapter [ 167.226504][ T7941] e1000 0000:00:06.0 eth0: Reset adapter [ 169.358198][ T1340] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 170.534114][T13216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3317'. [ 170.539465][T13216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3317'. [ 170.543491][T13216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3317'. [ 170.551692][T13216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3317'. [ 170.818291][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3337'. [ 170.821683][T13261] netlink: 'syz.1.3337': attribute type 30 has an invalid length. [ 170.824172][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3337'. [ 170.970547][T13290] netlink: 'syz.4.3345': attribute type 14 has an invalid length. [ 171.057384][T13302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13302 comm=syz.3.3353 [ 171.109053][T13308] sock: sock_set_timeout: `syz.5.3356' (pid 13308) tries to set negative timeout [ 171.173033][T13320] sctp: Trying to GSO but underlying device doesn't support it. [ 171.203037][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3365'. [ 171.321391][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3375'. [ 171.324236][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3375'. [ 171.429286][ T40] audit: type=1400 audit(1758276743.322:548): avc: denied { read } for pid=13365 comm="syz.1.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 171.485835][ T40] audit: type=1400 audit(1758276743.372:549): avc: denied { setopt } for pid=13365 comm="syz.1.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 171.549256][T13383] veth1_to_batadv: entered promiscuous mode [ 171.619637][ T40] audit: type=1800 audit(1758276743.512:550): pid=13396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3398" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 171.685927][T13411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3405'. [ 171.718099][ T1239] ------------[ cut here ]------------ [ 171.720129][ T1239] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 171.722846][ T1239] WARNING: CPU: 3 PID: 1239 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 171.726359][ T1239] Modules linked in: [ 171.728185][ T1239] CPU: 3 UID: 0 PID: 1239 Comm: kworker/u32:11 Not tainted syzkaller #0 PREEMPT(full) [ 171.732892][ T1239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.736483][ T1239] Workqueue: bond0 bond_mii_monitor [ 171.738470][ T1239] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.740366][ T1239] Code: 05 ff ff ff e8 54 54 43 f8 c6 05 e1 8e 1b 07 01 90 ba 48 00 00 00 48 c7 c6 a0 08 e6 8c 48 c7 c7 40 08 e6 8c e8 a4 f8 01 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 a6 ab 90 e8 fe bb a9 f8 e9 [ 171.747427][ T1239] RSP: 0018:ffffc900069379f0 EFLAGS: 00010286 [ 171.749714][ T1239] RAX: 0000000000000000 RBX: ffff88802a842000 RCX: ffffffff817a4388 [ 171.752288][ T1239] RDX: ffff8880296a0000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 171.754986][ T1239] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 171.758355][ T1239] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000d26f48 [ 171.761110][ T1239] R13: ffff88802a842cc1 R14: ffffffff8c59e740 R15: ffffffff89b17350 [ 171.763603][ T1239] FS: 0000000000000000(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 171.766599][ T1239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.768779][ T1239] CR2: 00007f7c43c1bf98 CR3: 000000005442d000 CR4: 0000000000352ef0 [ 171.771580][ T1239] Call Trace: [ 171.773007][ T1239] [ 171.774205][ T1239] ethtool_op_get_link+0x1d/0x70 [ 171.776240][ T1239] bond_check_dev_link+0x3fc/0x710 [ 171.778379][ T1239] ? __pfx_bond_check_dev_link+0x10/0x10 [ 171.780731][ T1239] bond_mii_monitor+0x3c0/0x2dc0 [ 171.782831][ T1239] ? __pfx_bond_mii_monitor+0x10/0x10 [ 171.785350][ T1239] ? preempt_schedule_thunk+0x16/0x30 [ 171.787738][ T1239] process_one_work+0x9cc/0x1b70 [ 171.789807][ T1239] ? __pfx_batadv_nc_worker+0x10/0x10 [ 171.792113][ T1239] ? __pfx_process_one_work+0x10/0x10 [ 171.793936][ T1239] ? assign_work+0x1a0/0x250 [ 171.795392][ T1239] worker_thread+0x6c8/0xf10 [ 171.797080][ T1239] ? __kthread_parkme+0x19e/0x250 [ 171.798884][ T1239] ? __pfx_worker_thread+0x10/0x10 [ 171.800506][ T1239] kthread+0x3c2/0x780 [ 171.802008][ T1239] ? __pfx_kthread+0x10/0x10 [ 171.803465][ T1239] ? rcu_is_watching+0x12/0xc0 [ 171.804984][ T1239] ? __pfx_kthread+0x10/0x10 [ 171.806696][ T1239] ret_from_fork+0x56a/0x730 [ 171.808753][ T1239] ? __pfx_kthread+0x10/0x10 [ 171.810696][ T1239] ret_from_fork_asm+0x1a/0x30 [ 171.812715][ T1239] [ 171.814042][ T1239] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.817068][ T1239] CPU: 3 UID: 0 PID: 1239 Comm: kworker/u32:11 Not tainted syzkaller #0 PREEMPT(full) [ 171.820854][ T1239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.824271][ T1239] Workqueue: bond0 bond_mii_monitor [ 171.825916][ T1239] Call Trace: [ 171.827197][ T1239] [ 171.828516][ T1239] dump_stack_lvl+0x3d/0x1f0 [ 171.830086][ T1239] vpanic+0x6e8/0x7a0 [ 171.831402][ T1239] ? __pfx_vpanic+0x10/0x10 [ 171.832924][ T1239] ? __linkwatch_sync_dev+0x1ed/0x230 [ 171.835102][ T1239] panic+0xca/0xd0 [ 171.836696][ T1239] ? __pfx_panic+0x10/0x10 [ 171.838588][ T1239] ? check_panic_on_warn+0x1f/0xb0 [ 171.840690][ T1239] check_panic_on_warn+0xab/0xb0 [ 171.842744][ T1239] __warn+0xf6/0x3c0 [ 171.844366][ T1239] ? preempt_schedule_notrace+0x62/0xe0 [ 171.846675][ T1239] ? __linkwatch_sync_dev+0x1ed/0x230 [ 171.848883][ T1239] report_bug+0x3c3/0x580 [ 171.850706][ T1239] ? __linkwatch_sync_dev+0x1ed/0x230 [ 171.852938][ T1239] handle_bug+0x184/0x210 [ 171.854770][ T1239] exc_invalid_op+0x17/0x50 [ 171.856684][ T1239] asm_exc_invalid_op+0x1a/0x20 [ 171.858700][ T1239] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 171.861067][ T1239] Code: 05 ff ff ff e8 54 54 43 f8 c6 05 e1 8e 1b 07 01 90 ba 48 00 00 00 48 c7 c6 a0 08 e6 8c 48 c7 c7 40 08 e6 8c e8 a4 f8 01 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 a6 ab 90 e8 fe bb a9 f8 e9 [ 171.868636][ T1239] RSP: 0018:ffffc900069379f0 EFLAGS: 00010286 [ 171.870970][ T1239] RAX: 0000000000000000 RBX: ffff88802a842000 RCX: ffffffff817a4388 [ 171.874190][ T1239] RDX: ffff8880296a0000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 171.877426][ T1239] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 171.880625][ T1239] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000d26f48 [ 171.883773][ T1239] R13: ffff88802a842cc1 R14: ffffffff8c59e740 R15: ffffffff89b17350 [ 171.887021][ T1239] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 171.889381][ T1239] ? __warn_printk+0x198/0x350 [ 171.891353][ T1239] ? __warn_printk+0x1a5/0x350 [ 171.893258][ T1239] ethtool_op_get_link+0x1d/0x70 [ 171.894969][ T1239] bond_check_dev_link+0x3fc/0x710 [ 171.896781][ T1239] ? __pfx_bond_check_dev_link+0x10/0x10 [ 171.898688][ T1239] bond_mii_monitor+0x3c0/0x2dc0 [ 171.900665][ T1239] ? __pfx_bond_mii_monitor+0x10/0x10 [ 171.902795][ T1239] ? preempt_schedule_thunk+0x16/0x30 [ 171.904761][ T1239] process_one_work+0x9cc/0x1b70 [ 171.906843][ T1239] ? __pfx_batadv_nc_worker+0x10/0x10 [ 171.908897][ T1239] ? __pfx_process_one_work+0x10/0x10 [ 171.910618][ T1239] ? assign_work+0x1a0/0x250 [ 171.912239][ T1239] worker_thread+0x6c8/0xf10 [ 171.914185][ T1239] ? __kthread_parkme+0x19e/0x250 [ 171.916292][ T1239] ? __pfx_worker_thread+0x10/0x10 [ 171.918338][ T1239] kthread+0x3c2/0x780 [ 171.919940][ T1239] ? __pfx_kthread+0x10/0x10 [ 171.921748][ T1239] ? rcu_is_watching+0x12/0xc0 [ 171.923694][ T1239] ? __pfx_kthread+0x10/0x10 [ 171.925547][ T1239] ret_from_fork+0x56a/0x730 [ 171.927387][ T1239] ? __pfx_kthread+0x10/0x10 [ 171.929252][ T1239] ret_from_fork_asm+0x1a/0x30 [ 171.931239][ T1239] [ 171.933213][ T1239] Kernel Offset: disabled [ 171.934908][ T1239] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:03:51 Registers: info registers vcpu 0 CPU#0 RAX=00007f74d9e31b68 RBX=00007f74d9dd3a18 RCX=ffffffff820da3fc RDX=ffffffff820da3fc RSI=ffffffff820774c3 RDI=00007f74d9e389a0 RBP=00007f74d9d2b5c8 RSP=00007ffe4cec2b20 R8 =00007f74d9db1fb0 R9 =00007f74da7c2000 R10=00007f74d9bfd008 R11=0000000000000002 R12=00007f74d9d2b5c0 R13=000000000000001f R14=00007ffe4cec2c78 R15=00007f74d9bfd008 RIP=00007f74da468031 RFL=00000212 [----A--] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555578ec4500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555570d8c808 CR3=0000000025a7b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820da3fc ffffffff820752eb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820752eb ffffffff820da3fc ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820da3fc ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4cec3066 00007ffe4cec306c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da7a74a8 00007f74da7a74a0 00007f74da7a7498 00007f74da7a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74db30d100 00007f74da7a7460 00007f74da7a7478 00007f74da7a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da7a74b8 00007f74da7a74b0 00007f74da7a74a8 00007f74da7a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888029f3c000 RCX=ffffc90002777b78 RDX=ffff888037a7c880 RSI=ffffffff821ef7fb RDI=ffff888029f3c070 RBP=ffffc90002777b78 RSP=ffffc90002777b18 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000200000011000 R15=0000200000011000 RIP=ffffffff81bb9d88 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555570d8c500 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000011ac0 CR3=000000004ea82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e616c77 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812c7503 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2812e336 00007ffe2812e33c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34c7a12e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34c7a12e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34c7a12e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34c7a12e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34c7a12f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34c7a12fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34c7ba74a8 00007f34c7ba74a0 00007f34c7ba7498 00007f34c7ba7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34c870d100 00007f34c7ba7460 00007f3400040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34c7ba74b8 00007f34c7ba74b0 00007f34c7ba74a8 00007f34c7ba74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000000009f RCX=ffffffff8218f4c2 RDX=000000000000009f RSI=000000000000009f RDI=00000000000001fd RBP=ffffea0001372100 RSP=ffffc9000359f508 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000004 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=00000000000001fd R15=0000000000000003 RIP=ffffffff81bb980a RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2da20ff8 CR3=000000005e40d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4cec2ee0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4cec3066 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4cec3066 00007ffe4cec306c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74da612fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c115 RDI=ffffffff9b118160 RBP=ffffffff9b118120 RSP=ffffc90006937360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000044 R14=ffffffff9b118120 R15=ffffffff8564c0b0 RIP=ffffffff8564c13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7c43c1bf98 CR3=000000005442d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000002fefcf8 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3484d1f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3484d1f6 00007ffc3484d1fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c42e12e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c42e12e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c42e12e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c42e12e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c42e12f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c42e12fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c42fa74a8 00007f7c42fa74a0 00007f7c42fa7498 00007f7c42fa7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c43b0d100 00007f7c42fa7460 00007f7c42fa7478 00007f7c42fa74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c42fa74b8 00007f7c42fa74b0 00007f7c42fa74a8 00007f7c42fa74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000