last executing test programs: 2m5.786335484s ago: executing program 2 (id=682): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000c47000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) 2m5.550973065s ago: executing program 2 (id=689): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 2m5.394150032s ago: executing program 2 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80060, &(0x7f0000000080)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x32]}}]}) 2m5.339863913s ago: executing program 2 (id=696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2m5.271998062s ago: executing program 2 (id=698): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 2m5.271846814s ago: executing program 2 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x1c, r1, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) 2m4.207859028s ago: executing program 1 (id=722): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m4.207737616s ago: executing program 1 (id=723): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000108000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 2m4.14077444s ago: executing program 1 (id=727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m4.100482977s ago: executing program 1 (id=729): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="6313a439f8f819fe5b9129cb2703d4fa9f439d04b87095f5b9e49fa236fb8cf35138db333124bd62865985c1bdd8", 0x2e) 2m3.941563752s ago: executing program 1 (id=734): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 2m3.893202308s ago: executing program 1 (id=736): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000200)="f50bbcb9f9bb4971ea6c883546b9b6e4fab4ecd09c7978cb9d629d7fd83c6efc08f05f0c971ac78e47586e0486f4e909d0bad2c7e3042ebf9fbd748d628c59809e2de6a9c0d2b9ba809ea3eca4d64779a2d989b5dae14ac2b520b0f39ca92ad68e0bc03c67f979ec3a0ab0194df9a39892122819acda2167c46827312aacc662124b52b0839bb82225a58c7b110683dc7d592997ff19946386747133fdaf9f8c11926fb92c25d1806b3265e4e6dc37cb50f6b99c44f9a4a2", 0xb8}], 0x1) 1m49.85873354s ago: executing program 32 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x1c, r1, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) 1m48.891399526s ago: executing program 33 (id=736): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000200)="f50bbcb9f9bb4971ea6c883546b9b6e4fab4ecd09c7978cb9d629d7fd83c6efc08f05f0c971ac78e47586e0486f4e909d0bad2c7e3042ebf9fbd748d628c59809e2de6a9c0d2b9ba809ea3eca4d64779a2d989b5dae14ac2b520b0f39ca92ad68e0bc03c67f979ec3a0ab0194df9a39892122819acda2167c46827312aacc662124b52b0839bb82225a58c7b110683dc7d592997ff19946386747133fdaf9f8c11926fb92c25d1806b3265e4e6dc37cb50f6b99c44f9a4a2", 0xb8}], 0x1) 1m19.849751271s ago: executing program 4 (id=1685): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m19.798973174s ago: executing program 4 (id=1687): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x1e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002700)={r0}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 1m19.746228874s ago: executing program 4 (id=1691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 1m19.707959194s ago: executing program 4 (id=1694): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 1m19.659369262s ago: executing program 4 (id=1696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @pic={0x6, 0x5, 0x4, 0x1, 0x6, 0xb, 0x10, 0x6, 0xd, 0x1, 0x5, 0xfa, 0x1, 0x5, 0x9, 0x6}}) 1m19.38996674s ago: executing program 4 (id=1704): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee00) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x1}) 1m19.292794968s ago: executing program 34 (id=1704): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee00) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x1}) 1m8.459068375s ago: executing program 6 (id=2139): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0xfffffff9, 0x5, '\x00', 0x10}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000}) 1m8.417670488s ago: executing program 6 (id=2142): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800"], 0x15) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a"]) 1m8.381405261s ago: executing program 6 (id=2145): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r1, r0, 0x0, 0x80009) 1m8.3768946s ago: executing program 6 (id=2147): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000140)=[{'PHONEIN', @void}, {'TREBLE', @val={' \'', 'Master Playback Switch'}}, {'LINE3', @void}, {'OGAIN', @val={' \'', 'Synth Capture'}}, {'DIGITAL3', @void}, {'LINE', @val={' \'', 'Synth Capture Switch'}}], 0xa8) close(r0) 1m8.337625573s ago: executing program 6 (id=2149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad-generic)\x00'}, 0x58) 1m8.197288597s ago: executing program 6 (id=2157): syz_usb_connect$cdc_ncm(0x6, 0x72, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x3, 0x8cb5, "6ab586", 0xa, 0x4}) 53.166997708s ago: executing program 35 (id=2157): syz_usb_connect$cdc_ncm(0x6, 0x72, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x3, 0x8cb5, "6ab586", 0xa, 0x4}) 42.283004258s ago: executing program 7 (id=3145): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x44000000) 42.202705163s ago: executing program 7 (id=3150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1a", 0x1}], 0x1, 0x0, 0x0, 0x10000814}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004841}}], 0x2, 0x480d0) 42.144588703s ago: executing program 7 (id=3152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 42.081112564s ago: executing program 7 (id=3157): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x1) 42.008286968s ago: executing program 7 (id=3159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000600)={0xdf, 0x0, 0x4000}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 41.760658919s ago: executing program 7 (id=3167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x884, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0xf0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0xd9, 0xb, "dd408efb4ee43dc1d64a7be83b23bb28f7e8f45b3351a37e3ff89c48f49f204f8e0c42566e9ca825e983dc9f283b08e8c89d205140bdf169d7e409b0672f27d436b6c56b2cbfc7e6cddf7909fd3f38fce3e4693a0fec006cc6dac1821ccbe47ff309ade5b89c9d574bca61edf324e810caae321b10f2bf5f456bb7851dc613bfbed4eb82a114e085e90d166db51eee48d71702b21b87b9d654a2bf411459f3d9f53de0cf44a61442543697dc37c399c66a46e689390bda953b7b52427623800643839075646f6821748093c89d72c2064ce5ec1074"}]}, @NL80211_ATTR_NAN_FUNC={0x464, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x21c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xb}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xa0, 0xd, 0x0, 0x1, [{0x99, 0x0, "a04b10c527e7eb26452333acfe8c27da2324d98b5dedb2b4e45fb42da1e082a852cae36b1e7293657c530e4fc22937c2776e9b398b7e687f0837ef31d534e70ce191bc5fec2353e79d49bd17244fdfe99d803eb04efaac34cdb92a0126591e6474509d5be5b4d5fe75d19378632ba82f8d90c4a41024f31865c4b7fb36fe3b44be35268c79ab960fafea2ee6b5884341a8bb271944"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1a0, 0xd, 0x0, 0x1, [{0x69, 0x0, "3cc540c5d08d1a25b599b2f05ae78c1425c1baeee8048e73bbe9d10232c2546bef8f9030a230ffeab00a7ab9453b3b18d760de46b2d7c06a2d257d1f572e03115249c16c06c792dca59b383caa4c97c5dd079070adaedfa1fa3b607f532bee5ec54aa7543e"}, {0x75, 0x0, "f102e91f4eec9c0fdfb6edf963575681007f5a3e9c955bc691872b8426bcdbb093262e014c4627d22f40e2ba997fc837a0cbc755449018e81820259fc675373d56e5e31edce0cb82ede13f6db3038320c14d055e2520804f96848bf2e9104d1820aa6cac09a265441898fefbb8223d8013"}, {0xb5, 0x0, "2eee09ca8d932eb6f5d97aee6fc393eaee886ea73e3953c6b0198bb7224a6bd60157af83ec99a854ac0885ce037b89b8ccafd41c8de53d06641e220b3d1e295e4c2cf4ea21d2e481b752519365c1d60c526ddbc7e8085710d0a6554fc6b2704b186d360d9d393c13378c291baaa46ea3ba614f327eb3b2a8e452d829e5e475d60a9f13e5aecca6eb99b8065550bbc5f797d9a6cb65cb82b105652a385f57db9ddfc169ef57888ff2481a2e5e41586b1f5d"}]}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x2c8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x81}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x44000}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "eb6b3f2a5d43"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2a8, 0xe, 0x0, 0x1, [{0x2a1, 0x0, "34f639b893c993f56bea8ed8ca7c36cac06ba74dbee25afff782c684af8d1caef740b9bf69639e01ba0caacfafb63dd626b864555da3a59ab60cf6d2986683362568aeeec00172117cd66b5f613d8eca25a5af064968af94acb2cfe22f4e516592b8a21c09e2bcfb1187baf13b82a3621dc5f6cebedf53114e1176e0f60603fda036029bca9621421b91586fe53373487b74e71765a202cbdeed4ea79e63be0f2e86a1989ea81e5b0d7245df4bf599c8d8907c6f463cf741a1420fc0352150b782d41c7c06ae49761d3fb08a19d72525bf689797bec5c781bb5dee60b997aca627d57871305a4d305f631034198405f61ef1c8a327a951fed1c8c24595e2d2aca8b4097843c2c12bdc9e24c42617d964bc5f7a5f756f7a261c99ecda1ef24e660aa32640cc8719facbbfd70b15c87634ce1ce07f34a0a1f4e79d2a87af7b392ab865261859e0c467e7bc6a1bf318b519bab05b97ff0e1a92bce9827502c682a76323a1682987e9c2bff7d6df955d3c5b2f204cd0d3febb37ea804a4ddb2a0a11095cff49956ef9dfc9715be2b6f85db2818dd0abef769ea6101f0de228b1e34865095a241ec9c024d71c0c7705eb90b3f94f59851956fa70ef72331cec9d637590c099d47f17e24c9168f4800b4d8f87c41f0d58903d3a7392c7e41f2ed43975573e1c4940a3189faaa0426437c437bf8cd6a11e5dca135485af1ed52bb05dacc283bd4b552d0e7b36311f9de374a43c9bff3d986b8bddef891ef690e384446657b8e4037baa93123875c213d9163a82e44173013bd1f71e45b43107d3f2aaabcbd204fd5f416f7f97de45704b7c6d003acd509258843d084d0e4d262ec64de90ff368ef619204857d4ac24df1389042120a70604b8387e145867c866db20c339ce8dfb534710076439450fa04190030ca6db25ded3b08b0ebbf44f448"}]}]}]}, 0x884}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 41.683223877s ago: executing program 36 (id=3167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x884, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0xf0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0xd9, 0xb, "dd408efb4ee43dc1d64a7be83b23bb28f7e8f45b3351a37e3ff89c48f49f204f8e0c42566e9ca825e983dc9f283b08e8c89d205140bdf169d7e409b0672f27d436b6c56b2cbfc7e6cddf7909fd3f38fce3e4693a0fec006cc6dac1821ccbe47ff309ade5b89c9d574bca61edf324e810caae321b10f2bf5f456bb7851dc613bfbed4eb82a114e085e90d166db51eee48d71702b21b87b9d654a2bf411459f3d9f53de0cf44a61442543697dc37c399c66a46e689390bda953b7b52427623800643839075646f6821748093c89d72c2064ce5ec1074"}]}, @NL80211_ATTR_NAN_FUNC={0x464, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x21c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xb}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "afa01c68d64362096fd9018d2081df5e99faa123f6ec5ed0e26368dde66f3154ea4fbd39be0e27bf0145f85b6c467f90429a882a25aad9546bfbbd934b0e1ec916b128cf76bbbeda3faab18e6c5e74dcd8978f4e25e0fa914875798e44bdbdc1f89eba9ab3561baf78c474134cf38bea048e73c0876db22dc824b10a049c923e0ce5935f2898e54f1ed11056e67dc23d3897e91ea60655ec0f138b9a98eb39278436dcce0feeba6dd1eda7931b5af9f5496aecd60c0cab162ddc4d1e98cf792f6537cf2babb03938b329625cffacf08468b2290e5112c7d8b9465d6dbc4ef2245a0fa19a958ff0c3ac5ec2fd2d82c8d2c560745a05f67847e67d33fa25b1b1"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xa0, 0xd, 0x0, 0x1, [{0x99, 0x0, "a04b10c527e7eb26452333acfe8c27da2324d98b5dedb2b4e45fb42da1e082a852cae36b1e7293657c530e4fc22937c2776e9b398b7e687f0837ef31d534e70ce191bc5fec2353e79d49bd17244fdfe99d803eb04efaac34cdb92a0126591e6474509d5be5b4d5fe75d19378632ba82f8d90c4a41024f31865c4b7fb36fe3b44be35268c79ab960fafea2ee6b5884341a8bb271944"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1a0, 0xd, 0x0, 0x1, [{0x69, 0x0, "3cc540c5d08d1a25b599b2f05ae78c1425c1baeee8048e73bbe9d10232c2546bef8f9030a230ffeab00a7ab9453b3b18d760de46b2d7c06a2d257d1f572e03115249c16c06c792dca59b383caa4c97c5dd079070adaedfa1fa3b607f532bee5ec54aa7543e"}, {0x75, 0x0, "f102e91f4eec9c0fdfb6edf963575681007f5a3e9c955bc691872b8426bcdbb093262e014c4627d22f40e2ba997fc837a0cbc755449018e81820259fc675373d56e5e31edce0cb82ede13f6db3038320c14d055e2520804f96848bf2e9104d1820aa6cac09a265441898fefbb8223d8013"}, {0xb5, 0x0, "2eee09ca8d932eb6f5d97aee6fc393eaee886ea73e3953c6b0198bb7224a6bd60157af83ec99a854ac0885ce037b89b8ccafd41c8de53d06641e220b3d1e295e4c2cf4ea21d2e481b752519365c1d60c526ddbc7e8085710d0a6554fc6b2704b186d360d9d393c13378c291baaa46ea3ba614f327eb3b2a8e452d829e5e475d60a9f13e5aecca6eb99b8065550bbc5f797d9a6cb65cb82b105652a385f57db9ddfc169ef57888ff2481a2e5e41586b1f5d"}]}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x2c8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x81}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x44000}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "eb6b3f2a5d43"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2a8, 0xe, 0x0, 0x1, [{0x2a1, 0x0, "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"}]}]}]}, 0x884}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 3.032863093s ago: executing program 0 (id=4426): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x800, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0xfffffffffffffffd, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77d, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2000000000, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x1, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1000000000800000, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66d, 0x0, 0x0, 0x4, 0x0, 0x0, 0x807fffffffff, 0x0, 0x200000000000, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 2.979367951s ago: executing program 0 (id=4430): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvfrom$packet(r0, &(0x7f00000002c0)=""/244, 0xf4, 0x0, 0x0, 0x0) 2.760387393s ago: executing program 0 (id=4434): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x8, r2, 0x0, 0x5, 0x332215, 0x0, 0x0, 0x10005}) 2.689319468s ago: executing program 0 (id=4438): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) 1.53360924s ago: executing program 0 (id=4474): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6}, 0x10) 1.467774906s ago: executing program 0 (id=4485): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004a00611400000000000000000a"], 0x24}}, 0x0) 1.089057511s ago: executing program 3 (id=4502): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 1.007931334s ago: executing program 3 (id=4505): r0 = socket(0x23, 0x80002, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 997.649639ms ago: executing program 3 (id=4514): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) 538.933027ms ago: executing program 3 (id=4508): r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100), &(0x7f00000000c0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) io_uring_enter(r0, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 458.84588ms ago: executing program 3 (id=4511): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40000, 0x0, 0x0, 0x200}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 414.412161ms ago: executing program 3 (id=4515): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000002100)=[{r0, 0x400}], 0x1, 0x2) 345.202085ms ago: executing program 8 (id=4522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xf}, @NL80211_ATTR_PMKID={0x14, 0x55, "ee996152682c2d2271f92cf111629a53"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c43b134390f08e809a0ce5239a65d632"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x44) 288.330652ms ago: executing program 8 (id=4524): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) 279.014573ms ago: executing program 5 (id=4525): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 278.690872ms ago: executing program 8 (id=4526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10b581, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000140)={0x64de}) 187.75447ms ago: executing program 5 (id=4527): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1fd6b38443af8512}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x4) 187.456207ms ago: executing program 5 (id=4528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000007000/0x4000)=nil) 109.191231ms ago: executing program 5 (id=4529): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) 108.601822ms ago: executing program 8 (id=4530): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) 100.91388ms ago: executing program 5 (id=4531): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 6.146663ms ago: executing program 8 (id=4532): r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x826e, 0x40, 0x3, 0xf1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000d80)=""/122, 0x7a}, {0x0}], 0x2) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 4.77443ms ago: executing program 5 (id=4533): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 0s ago: executing program 8 (id=4534): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000d9ff00000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) kernel console output (not intermixed with test programs): ve opt len 1 is not a multiple of 4. [ 115.502444][ T40] audit: type=1400 audit(1751265623.154:461): avc: denied { bind } for pid=9970 comm="syz.0.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.620135][ T9981] delete_channel: no stack [ 115.746187][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.823231][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.913909][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.005756][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.025201][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.028679][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.031566][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.038249][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.041139][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.165970][ T60] bridge_slave_1: left allmulticast mode [ 116.168005][ T60] bridge_slave_1: left promiscuous mode [ 116.170334][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.177109][ T60] bridge_slave_0: left allmulticast mode [ 116.179438][ T60] bridge_slave_0: left promiscuous mode [ 116.183362][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.552167][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.557688][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.561269][ T60] bond0 (unregistering): Released all slaves [ 116.638536][ T9986] chnl_net:caif_netlink_parms(): no params data found [ 116.647326][ T60] tipc: Disabling bearer [ 116.651624][ T60] tipc: Left network mode [ 116.768957][ T9986] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.771192][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.773405][ T9986] bridge_slave_0: entered allmulticast mode [ 116.789764][ T9986] bridge_slave_0: entered promiscuous mode [ 116.795335][ T9986] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.797658][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.799941][ T9986] bridge_slave_1: entered allmulticast mode [ 116.810151][ T9986] bridge_slave_1: entered promiscuous mode [ 116.923066][ T9986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.939436][ T9986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.980105][ T9986] team0: Port device team_slave_0 added [ 116.986072][ T60] hsr_slave_0: left promiscuous mode [ 116.988229][ T60] hsr_slave_1: left promiscuous mode [ 116.990198][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.992494][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.996053][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.998423][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.016711][ T60] veth1_macvtap: left promiscuous mode [ 117.018536][ T60] veth0_macvtap: left promiscuous mode [ 117.020336][ T60] veth1_vlan: left promiscuous mode [ 117.022020][ T60] veth0_vlan: left promiscuous mode [ 117.401416][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1739'. [ 117.730704][ T60] team0 (unregistering): Port device team_slave_1 removed [ 117.799881][ T60] team0 (unregistering): Port device team_slave_0 removed [ 118.125368][ T5948] Bluetooth: hci3: command tx timeout [ 118.231257][ T9986] team0: Port device team_slave_1 added [ 118.271323][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.273512][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.282049][ T9986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.286971][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.289265][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.299616][ T9986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.352088][ T9986] hsr_slave_0: entered promiscuous mode [ 118.355309][ T9986] hsr_slave_1: entered promiscuous mode [ 118.358362][ T9986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.362328][ T9986] Cannot create hsr debugfs directory [ 118.515568][ T9986] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 118.522077][ T9986] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 118.530461][ T9986] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 118.552607][ T9986] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 118.586762][T10119] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1752'. [ 118.617254][ T9986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.627286][ T9986] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.638382][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.640877][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.648864][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.651304][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.750659][T10136] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1756'. [ 118.819562][ T9986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.898564][T10153] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 118.987326][ T9986] veth0_vlan: entered promiscuous mode [ 118.996659][ T9986] veth1_vlan: entered promiscuous mode [ 119.017338][ T9986] veth0_macvtap: entered promiscuous mode [ 119.021323][ T9986] veth1_macvtap: entered promiscuous mode [ 119.038357][ T9986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.052707][ T9986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.064409][ T9986] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.068092][ T9986] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.071689][ T9986] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.076704][ T9986] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.151040][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.159623][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.189721][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.193051][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.250984][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 119.257821][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1775'. [ 119.260888][T10192] netlink: 'syz.3.1775': attribute type 7 has an invalid length. [ 119.271175][T10197] netlink: 'syz.5.1774': attribute type 7 has an invalid length. [ 119.277337][T10197] netlink: 'syz.5.1774': attribute type 8 has an invalid length. [ 119.704620][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 119.872678][T10250] program syz.5.1795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.875771][T10250] ata1.00: non-matching transfer count (32/0) [ 119.987530][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 119.987545][ T40] audit: type=1400 audit(1751265627.644:472): avc: denied { ioctl } for pid=10262 comm="syz.3.1800" path="socket:[27023]" dev="sockfs" ino=27023 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.205631][ T5948] Bluetooth: hci3: command 0x041b tx timeout [ 120.210666][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 120.213540][T10295] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 120.216340][T10295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.302039][T10316] hugetlbfs: Bad value 'e' for mount option 'size' [ 120.302039][T10316] [ 120.452046][T10342] sp0: Synchronizing with TNC [ 120.469661][T10342] sp0: Found TNC [ 120.573752][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1846'. [ 120.577868][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1846'. [ 120.646949][ T5948] Bluetooth: hci3: unexpected event for opcode 0x200c [ 120.897199][ T40] audit: type=1400 audit(1751265628.554:473): avc: denied { create } for pid=10390 comm="syz.5.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.898868][T10391] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1861'. [ 120.904251][ T40] audit: type=1400 audit(1751265628.554:474): avc: denied { write } for pid=10390 comm="syz.5.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.914589][ T40] audit: type=1400 audit(1751265628.554:475): avc: denied { nlmsg_write } for pid=10390 comm="syz.5.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.037082][ T40] audit: type=1400 audit(1751265628.694:476): avc: denied { write } for pid=10396 comm="syz.5.1864" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.055859][ T6004] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 121.204075][ T6004] usb 11-1: Using ep0 maxpacket: 32 [ 121.208202][ T6004] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.211993][ T6004] usb 11-1: config 0 has no interface number 0 [ 121.219147][ T6004] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 121.222671][ T6004] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.226088][ T6004] usb 11-1: Product: syz [ 121.227752][ T6004] usb 11-1: Manufacturer: syz [ 121.229687][ T6004] usb 11-1: SerialNumber: syz [ 121.233434][ T6004] usb 11-1: config 0 descriptor?? [ 121.237000][ T40] audit: type=1326 audit(1751265628.894:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.5.1870" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x0 [ 121.238719][ T6004] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 121.249249][ T6004] usb 11-1: selecting invalid altsetting 1 [ 121.251032][ T6004] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 121.256581][ T6004] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.259963][ T6004] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 121.262514][ T6004] usb 11-1: media controller created [ 121.271533][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.495108][T10421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1875'. [ 121.840041][ T40] audit: type=1400 audit(1751265629.494:478): avc: denied { shutdown } for pid=10436 comm="syz.0.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 121.846333][ T40] audit: type=1400 audit(1751265629.494:479): avc: denied { read } for pid=10436 comm="syz.0.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.195343][T10459] netlink: 'syz.5.1894': attribute type 62 has an invalid length. [ 122.218624][T10457] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 122.374919][ T6004] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 122.377776][ T6004] zl10353_read_register: readreg error (reg=127, ret==-110) [ 122.421398][ T6004] usb 11-1: USB disconnect, device number 2 [ 122.896123][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 122.899903][T10508] nbd: illegal input index 1879048192 [ 123.010800][T10531] openvswitch: netlink: IPv6 tunnel dst address is zero [ 123.101159][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1935'. [ 123.316829][T10580] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 123.324744][T10583] netlink: 'syz.3.1960': attribute type 1 has an invalid length. [ 123.440680][T10603] 9pnet_fd: p9_fd_create_unix (10603): problem connecting socket: éq‰Y’3aK: -91 [ 123.510087][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1969'. [ 123.512973][T10616] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 123.515969][T10616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.709980][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1984'. [ 123.712911][T10643] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 123.716160][ T40] audit: type=1326 audit(1751265631.374:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.0.1982" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa43478e929 code=0x0 [ 123.876984][T10664] overlayfs: missing 'lowerdir' [ 123.919978][T10669] program syz.6.1994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.980471][T10679] netlink: 'syz.5.1998': attribute type 2 has an invalid length. [ 124.309496][ T40] audit: type=1400 audit(1751265631.964:481): avc: denied { map } for pid=10721 comm="syz.6.2022" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.527586][T10755] program syz.3.2039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.891011][T10803] __nla_validate_parse: 3 callbacks suppressed [ 124.891022][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2061'. [ 124.896585][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2061'. [ 124.954246][ T6002] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 124.971645][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2063'. [ 124.974545][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2063'. [ 124.977322][T10808] netlink: 'syz.5.2063': attribute type 12 has an invalid length. [ 125.124251][ T6002] usb 8-1: Using ep0 maxpacket: 32 [ 125.127113][ T6002] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.129764][ T6002] usb 8-1: config 0 has no interface number 0 [ 125.134312][ T6002] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 125.137820][ T6002] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.141070][ T6002] usb 8-1: Product: syz [ 125.142826][ T6002] usb 8-1: Manufacturer: syz [ 125.146123][ T6002] usb 8-1: SerialNumber: syz [ 125.150684][ T6002] usb 8-1: config 0 descriptor?? [ 125.155500][ T6002] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 125.159123][ T6002] usb 8-1: selecting invalid altsetting 1 [ 125.161521][ T6002] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 125.168471][ T6002] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.172766][ T6002] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 125.175804][ T6002] usb 8-1: media controller created [ 125.185468][ T6002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.718346][T10829] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.889174][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2080'. [ 125.931791][T10852] netlink: 'syz.5.2083': attribute type 23 has an invalid length. [ 126.021511][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 126.021524][ T40] audit: type=1400 audit(1751265633.674:483): avc: denied { ioctl } for pid=10863 comm="syz.0.2089" path="mnt:[4026532878]" dev="nsfs" ino=4026532878 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 126.075761][ T5988] hid-generic 3730:1B2E:07FF.0003: unknown main item tag 0x6 [ 126.078287][ T5988] hid-generic 3730:1B2E:07FF.0003: item fetching failed at offset 3/4 [ 126.079047][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2094'. [ 126.081220][ T5988] hid-generic 3730:1B2E:07FF.0003: probe with driver hid-generic failed with error -22 [ 126.085997][T10876] netlink: 264 bytes leftover after parsing attributes in process `syz.5.2094'. [ 126.095776][T10876] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2094'. [ 126.123720][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2097'. [ 126.201716][T10894] binder: 10893:10894 ioctl c0306201 200000000080 returned -22 [ 126.284526][ T6002] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 126.287589][ T6002] zl10353_read_register: readreg error (reg=127, ret==-110) [ 126.292511][T10907] netlink: 'syz.6.2110': attribute type 11 has an invalid length. [ 126.315223][T10779] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 126.323331][ T6002] usb 8-1: USB disconnect, device number 4 [ 126.466115][ T40] audit: type=1800 audit(1751265634.124:484): pid=10934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2123" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 126.494827][T10940] Bluetooth: MGMT ver 1.23 [ 126.549981][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2131'. [ 126.552785][T10951] netlink: 'syz.6.2131': attribute type 18 has an invalid length. [ 126.645333][T10963] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 126.649986][ T40] audit: type=1400 audit(1751265634.304:485): avc: denied { relabelto } for pid=10962 comm="syz.5.2137" name="368" dev="tmpfs" ino=1874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 126.662775][ T40] audit: type=1400 audit(1751265634.314:486): avc: denied { associate } for pid=10962 comm="syz.5.2137" name="368" dev="tmpfs" ino=1874 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 126.681170][ T40] audit: type=1400 audit(1751265634.334:487): avc: denied { remove_name } for pid=7902 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 126.691909][ T40] audit: type=1400 audit(1751265634.334:488): avc: denied { rmdir } for pid=7902 comm="syz-executor" name="368" dev="tmpfs" ino=1874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 126.728076][T10973] program syz.6.2142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.728381][T10975] xt_hashlimit: size too large, truncated to 1048576 [ 126.867444][ T40] audit: type=1400 audit(1751265634.524:489): avc: denied { module_load } for pid=10994 comm="syz.5.2151" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=29204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 126.880388][T10995] Invalid ELF header magic: != ELF [ 126.923004][T11007] vim2m vim2m.0: vidioc_s_fmt queue busy [ 126.966293][T11016] sg_read: process 785 (syz.5.2159) changed security contexts after opening file descriptor, this is not allowed. [ 127.017257][T11026] sp0: Synchronizing with TNC [ 127.021671][ T40] audit: type=1400 audit(1751265634.674:490): avc: denied { connect } for pid=11027 comm="syz.5.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.030074][ T40] audit: type=1400 audit(1751265634.674:491): avc: denied { write } for pid=11027 comm="syz.5.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.242435][ T40] audit: type=1400 audit(1751265634.894:492): avc: denied { read } for pid=11064 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 127.744182][ T839] hid-generic 0000:0004:0009.0004: unknown main item tag 0x0 [ 127.748734][ T839] hid-generic 0000:0004:0009.0004: unknown main item tag 0x0 [ 127.751195][ T839] hid-generic 0000:0004:0009.0004: unknown main item tag 0x0 [ 127.757364][ T839] hid-generic 0000:0004:0009.0004: hidraw1: HID v0.04 Device [syz0] on syz1 [ 127.785903][T11141] fido_id[11141]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.530946][T11230] sp0: Synchronizing with TNC [ 129.402672][T11317] IPVS: Error joining to the multicast group [ 129.427924][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.431728][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.434700][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.437658][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.440944][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.443805][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.443819][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.443901][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.451663][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.451677][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458046][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458061][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458073][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458084][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458096][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458107][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458119][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458130][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458142][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458153][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458165][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458176][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458187][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458199][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458210][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458222][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458233][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458245][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458256][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458268][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458279][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458290][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458302][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458313][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458325][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458336][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458348][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458359][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458370][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458382][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458393][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458405][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458416][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458428][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458439][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458451][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458462][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458473][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458485][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458496][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458508][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458519][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458663][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458684][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458700][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458711][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458723][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458734][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458746][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458757][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458769][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458780][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458798][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458810][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458821][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458833][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458844][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458856][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458867][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458879][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458890][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458902][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458913][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458925][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458936][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458948][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458959][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458971][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458982][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.458993][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.459005][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.459016][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.459028][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.461590][ T839] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 129.493380][T11322] fido_id[11322]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.528638][T11329] program syz.3.2308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.801079][T11353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.360024][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.362894][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.366169][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.368572][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.370954][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.373321][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.375861][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.376548][T11427] tmpfs: Bad value for 'mpol' [ 130.378883][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.382852][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.386152][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.388520][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.390952][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.393317][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.396163][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.398632][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.401015][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.403394][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.406982][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.409471][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.411865][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.414333][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.416707][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.419076][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.421513][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.423976][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.426784][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.427550][T11433] netlink: 'syz.5.2357': attribute type 5 has an invalid length. [ 130.429211][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.434166][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.436559][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.438970][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.441341][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.443680][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.446816][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.454081][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.456459][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.458992][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.461380][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.463780][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.466226][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.468610][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.471090][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.473483][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.475946][ T839] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 130.482605][ T839] hid-generic 0000:007F:FFFFFFFE.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 130.519759][T11438] fido_id[11438]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.567947][T11452] __nla_validate_parse: 8 callbacks suppressed [ 130.567963][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2366'. [ 130.779086][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2377'. [ 131.063475][T11514] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2392'. [ 131.196416][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 131.196427][ T40] audit: type=1400 audit(1751265638.854:502): avc: denied { ioctl } for pid=11525 comm="syz.0.2398" path="socket:[30456]" dev="sockfs" ino=30456 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.607057][ T40] audit: type=1400 audit(1751265639.264:503): avc: denied { bind } for pid=11566 comm="syz.5.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.639953][ T40] audit: type=1400 audit(1751265639.294:504): avc: denied { mount } for pid=11570 comm="syz.5.2420" name="/" dev="autofs" ino=31859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 131.651571][ T40] audit: type=1400 audit(1751265639.304:505): avc: denied { unmount } for pid=7902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 131.656914][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2421'. [ 131.662437][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2421'. [ 131.665789][T11573] netlink: 'syz.3.2421': attribute type 11 has an invalid length. [ 131.716573][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2424'. [ 131.720176][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2424'. [ 131.723800][T11579] netlink: 'syz.5.2424': attribute type 14 has an invalid length. [ 131.902665][ T5948] Bluetooth: hci0: SCO packet too small [ 132.460396][T11620] netlink: 'syz.3.2442': attribute type 2 has an invalid length. [ 132.462855][T11620] netlink: 784 bytes leftover after parsing attributes in process `syz.3.2442'. [ 132.501099][T11624] CUSE: info not properly terminated [ 132.536028][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.538473][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.655510][T11637] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 132.655510][T11637] The task syz.3.2449 (11637) triggered the difference, watch for misbehavior. [ 132.679280][T11636] hub 2-0:1.0: USB hub found [ 132.681051][T11636] hub 2-0:1.0: 2 ports detected [ 132.761677][T11641] program syz.0.2459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.813483][T11642] program syz.0.2459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.084125][ T5948] Bluetooth: hci1: command tx timeout [ 133.119891][ T40] audit: type=1326 audit(1751265640.774:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.5.2460" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x0 [ 133.173017][T11667] can0: slcan on ptm0. [ 133.253922][T11666] can0 (unregistered): slcan off ptm0. [ 133.547970][T11676] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 133.554620][T11678] netlink: 'syz.0.2474': attribute type 1 has an invalid length. [ 133.960251][T11709] netlink: 'syz.0.2481': attribute type 7 has an invalid length. [ 133.962970][T11709] netlink: 'syz.0.2481': attribute type 8 has an invalid length. [ 134.247354][ T40] audit: type=1326 audit(1751265641.904:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.0.2493" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa43478e929 code=0x0 [ 134.324337][ T6002] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 134.473914][ T6002] usb 8-1: Using ep0 maxpacket: 32 [ 134.476948][ T6002] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.479648][ T6002] usb 8-1: config 0 has no interface number 0 [ 134.485359][ T6002] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 134.488530][ T6002] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.491067][ T6002] usb 8-1: Product: syz [ 134.492460][ T6002] usb 8-1: Manufacturer: syz [ 134.494290][ T6002] usb 8-1: SerialNumber: syz [ 134.498330][ T6002] usb 8-1: config 0 descriptor?? [ 134.501864][ T6002] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 134.504824][ T6002] usb 8-1: selecting invalid altsetting 1 [ 134.508257][ T6002] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 134.512702][ T6002] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.516100][ T6002] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 134.518718][ T6002] usb 8-1: media controller created [ 134.529088][ T6002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.564378][ T6002] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 135.566660][ T6002] zl10353_read_register: readreg error (reg=127, ret==-110) [ 135.572627][ T6002] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 135.589558][ T6002] usb 8-1: USB disconnect, device number 5 [ 136.059187][T11744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2504'. [ 136.247592][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'. [ 136.251142][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2508'. [ 136.255726][T11768] netlink: 'syz.0.2508': attribute type 7 has an invalid length. [ 136.357170][T11779] xt_hashlimit: size too large, truncated to 1048576 [ 137.078825][T11820] netlink: 'syz.5.2532': attribute type 2 has an invalid length. [ 137.081439][T11820] netlink: 784 bytes leftover after parsing attributes in process `syz.5.2532'. [ 137.150670][ T5948] Bluetooth: hci0: Malformed LE Event: 0x0d [ 137.502904][ T40] audit: type=1400 audit(1751265645.154:508): avc: denied { listen } for pid=11828 comm="syz.0.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 137.509166][ T40] audit: type=1400 audit(1751265645.154:509): avc: denied { accept } for pid=11828 comm="syz.0.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 138.047587][ T40] audit: type=1400 audit(1751265645.704:510): avc: denied { map } for pid=11842 comm="syz.3.2543" path="socket:[28522]" dev="sockfs" ino=28522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.214317][ T40] audit: type=1400 audit(1751265645.874:511): avc: denied { read write } for pid=11859 comm="syz.3.2552" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 138.222678][ T40] audit: type=1400 audit(1751265645.874:512): avc: denied { open } for pid=11859 comm="syz.3.2552" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 138.855058][ T5948] Bluetooth: hci1: command tx timeout [ 138.866587][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 138.870034][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2587'. [ 138.873755][T11931] netlink: 'syz.0.2587': attribute type 15 has an invalid length. [ 138.991268][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2592'. [ 139.031417][T11947] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2595'. [ 139.340425][ T40] audit: type=1400 audit(1751265646.994:513): avc: denied { read } for pid=11976 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.685702][T12005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12005 comm=syz.5.2621 [ 140.211345][T12039] A link change request failed with some changes committed already. Interface ªªªªªª2g,¾{ may have been left with an inconsistent configuration, please check. [ 140.261348][T12044] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2638'. [ 140.296393][T12046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2640'. [ 140.349026][ T40] audit: type=1400 audit(1751265648.004:514): avc: denied { write } for pid=12049 comm="syz.5.2642" name="/" dev="9p" ino=35913918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.055870][ T40] audit: type=1400 audit(1751265648.714:515): avc: denied { map } for pid=12082 comm="syz.5.2659" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 141.098285][ T40] audit: type=1400 audit(1751265648.754:516): avc: denied { setattr } for pid=12088 comm="syz.5.2661" name="SCO" dev="sockfs" ino=32549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.465293][ T40] audit: type=1400 audit(1751265649.124:517): avc: denied { listen } for pid=12120 comm="syz.3.2676" path=2F3736382FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 141.604604][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2683'. [ 141.608258][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2683'. [ 141.616934][T12135] gretap0: entered promiscuous mode [ 141.620903][T12135] gretap0: left promiscuous mode [ 141.724928][T12143] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 142.008161][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2699'. [ 142.011853][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2699'. [ 142.016506][T12168] netlink: 'syz.3.2699': attribute type 14 has an invalid length. [ 142.171090][T12179] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 142.173496][T12179] SELinux: failed to load policy [ 142.209133][ T5941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.214927][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.220937][ T5941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.227515][ T5941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.231892][ T5941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.286733][T12192] program syz.3.2708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.412035][T12180] chnl_net:caif_netlink_parms(): no params data found [ 142.430521][T12215] netlink: 'syz.0.2717': attribute type 1 has an invalid length. [ 142.523338][T12180] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.526826][T12180] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.529710][T12180] bridge_slave_0: entered allmulticast mode [ 142.532477][T12180] bridge_slave_0: entered promiscuous mode [ 142.535651][T12180] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.538051][T12180] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.540426][T12180] bridge_slave_1: entered allmulticast mode [ 142.542844][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2721'. [ 142.543009][T12180] bridge_slave_1: entered promiscuous mode [ 142.546947][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2721'. [ 142.578817][T12180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.583148][T12180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.627154][T12180] team0: Port device team_slave_0 added [ 142.630797][T12180] team0: Port device team_slave_1 added [ 142.670992][T12180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.673592][T12180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.682967][T12180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.688858][T12180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.691497][T12180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.699711][T12180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.757169][T12180] hsr_slave_0: entered promiscuous mode [ 142.759388][T12180] hsr_slave_1: entered promiscuous mode [ 142.761485][T12180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.763587][T12180] Cannot create hsr debugfs directory [ 142.819038][T12249] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 142.850726][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 142.850742][ T40] audit: type=1400 audit(1751265650.504:520): avc: denied { mount } for pid=12251 comm="syz.5.2734" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 142.861703][ T40] audit: type=1400 audit(1751265650.504:521): avc: denied { remount } for pid=12251 comm="syz.5.2734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 142.873374][ T40] audit: type=1400 audit(1751265650.524:522): avc: denied { unmount } for pid=7902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 142.929108][T12180] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 142.930120][T12257] netlink: zone id is out of range [ 142.934186][T12257] netlink: zone id is out of range [ 142.936386][T12257] netlink: zone id is out of range [ 142.937226][T12180] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 142.938683][T12257] netlink: zone id is out of range [ 142.948573][T12180] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 142.953772][T12180] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 142.954189][T12257] netlink: zone id is out of range [ 142.958169][T12257] netlink: zone id is out of range [ 142.960161][T12257] netlink: zone id is out of range [ 142.962490][T12257] netlink: zone id is out of range [ 142.971043][T12257] netlink: set zone limit has 4 unknown bytes [ 142.973286][T12180] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.976342][T12180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.979402][T12180] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.981827][T12180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.028270][T12180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.040350][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.045054][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.057827][T12180] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.066471][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.068814][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.075707][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.078737][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.218678][T12180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.402544][T12180] veth0_vlan: entered promiscuous mode [ 143.405107][T12319] block nbd3: Unsupported socket: shutdown callout must be supported. [ 143.410757][T12180] veth1_vlan: entered promiscuous mode [ 143.428568][T12180] veth0_macvtap: entered promiscuous mode [ 143.435511][T12180] veth1_macvtap: entered promiscuous mode [ 143.436614][T12321] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 143.440287][T12321] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 143.444129][T12320] [U]  [ 143.451974][T12180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.459864][T12180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.466341][T12180] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.469992][T12180] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.473598][T12180] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.478812][T12180] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.520912][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.523384][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.547148][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.549704][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.561639][T12335] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 143.704779][T12356] delete_channel: no stack [ 143.706661][ T40] audit: type=1400 audit(1751265651.354:523): avc: denied { setopt } for pid=12356 comm="syz.7.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 143.778619][T12371] xt_hashlimit: size too large, truncated to 1048576 [ 143.897335][T12378] fuse: blksize only supported for fuseblk [ 144.009102][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 144.101496][T12393] tipc: Started in network mode [ 144.103366][T12393] tipc: Node identity 68a, cluster identity 4711 [ 144.106296][T12393] tipc: Node number set to 1674 [ 144.108292][T12393] tipc: Cannot configure node identity twice [ 144.284319][ T5948] Bluetooth: hci4: command tx timeout [ 144.426319][ T40] audit: type=1400 audit(1751265652.084:524): avc: denied { read } for pid=12419 comm="syz.7.2804" name="file0" dev="9p" ino=35913919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.433507][ T40] audit: type=1400 audit(1751265652.084:525): avc: denied { open } for pid=12419 comm="syz.7.2804" path="/11/file0/file0" dev="9p" ino=35913919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.663788][T12442] xt_hashlimit: size too large, truncated to 1048576 [ 144.739302][T12451] vim2m vim2m.0: vidioc_s_fmt queue busy [ 145.167099][T12486] /dev/sr0: Can't open blockdev [ 145.169984][T12497] gfs2: gfs2 mount does not exist [ 145.480956][T12544] program syz.0.2860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.517215][T12548] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.520464][T12548] overlayfs: missing 'lowerdir' [ 145.531596][ T5948] Bluetooth: hci4: Malformed LE Event: 0x0d [ 145.579110][ T6001] hid-generic 0000:0004:0009.0007: unknown main item tag 0x0 [ 145.582083][ T6001] hid-generic 0000:0004:0009.0007: unknown main item tag 0x0 [ 145.584907][ T6001] hid-generic 0000:0004:0009.0007: unknown main item tag 0x0 [ 145.590700][ T6001] hid-generic 0000:0004:0009.0007: hidraw1: HID v0.04 Device [syz0] on syz1 [ 145.599389][T12559] program syz.3.2868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.623666][T12560] fido_id[12560]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.625078][ T40] audit: type=1400 audit(1751265653.284:526): avc: denied { write } for pid=12561 comm="syz.0.2869" path="socket:[35209]" dev="sockfs" ino=35209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 145.672090][ T40] audit: type=1400 audit(1751265653.324:527): avc: denied { append } for pid=12568 comm="syz.3.2872" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.178819][T12623] random: crng reseeded on system resumption [ 146.363929][ T5948] Bluetooth: hci4: command 0x041b tx timeout [ 146.365987][T12647] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2909'. [ 146.370452][T12647] netlink: 'syz.5.2909': attribute type 6 has an invalid length. [ 146.372994][T12647] netlink: 'syz.5.2909': attribute type 5 has an invalid length. [ 146.376013][T12647] netlink: 'syz.5.2909': attribute type 4 has an invalid length. [ 146.721234][T12692] use of bytesused == 0 is deprecated and will be removed in the future, [ 146.725250][T12692] use the actual size instead. [ 146.730789][ T40] audit: type=1400 audit(1751265654.384:528): avc: denied { setopt } for pid=12695 comm="syz.0.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.739980][ T40] audit: type=1400 audit(1751265654.394:529): avc: denied { nlmsg_read } for pid=12695 comm="syz.0.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.778734][T12703] net_ratelimit: 1 callbacks suppressed [ 146.778745][T12703] openvswitch: netlink: IPv6 tunnel dst address is zero [ 146.848655][T12715] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2943'. [ 147.555655][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.558069][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.560441][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.562941][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.567452][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.570001][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.572382][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.575105][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.577492][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.579778][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.582091][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.584794][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.587163][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.589514][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.591776][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.594425][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.596867][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.599215][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.601546][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.604366][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.607245][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.610380][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.613441][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.616738][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.620122][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.623141][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.626557][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.631057][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.633796][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.636966][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.639307][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.641895][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.644948][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.647858][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.650753][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.654469][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.657224][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.659580][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.661922][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.664906][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.667267][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.669611][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.672147][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.674926][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.677256][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.680089][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.682438][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.685080][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.688187][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.691052][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.693392][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.696347][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.698709][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.701008][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.703791][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.706984][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.709340][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.711642][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.714615][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.717973][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.720643][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.723319][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.727224][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.730382][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.731895][T12795] autofs: Bad value for 'fd' [ 147.734454][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.737851][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.740538][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.743556][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.746529][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.749007][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.751475][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.754473][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.756736][T12797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.756871][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.771105][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.773638][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.776952][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.779473][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.782425][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.785698][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.787308][T12799] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2983'. [ 147.788259][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.794945][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.798179][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.801348][ T6002] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 147.812133][ T6002] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 147.849654][T12804] fido_id[12804]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.860562][T12806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2986'. [ 147.982537][T12799] hsr_slave_1 (unregistering): left promiscuous mode [ 148.123126][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 148.123136][ T40] audit: type=1400 audit(1751265655.774:532): avc: denied { ioctl } for pid=12830 comm="syz.3.2999" path="socket:[38110]" dev="sockfs" ino=38110 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.217588][T12836] "syz.3.3001" (12836) uses obsolete ecb(arc4) skcipher [ 148.303192][T12856] "syz.5.3010" (12856) uses obsolete ecb(arc4) skcipher [ 148.328285][T12858] nvme_fabrics: missing parameter 'transport=%s' [ 148.331040][T12858] nvme_fabrics: missing parameter 'nqn=%s' [ 148.444759][ T5941] Bluetooth: hci4: command 0x041b tx timeout [ 148.558633][T12887] veth1_to_batadv: entered promiscuous mode [ 149.094515][ T40] audit: type=1400 audit(1751265656.754:533): avc: denied { remount } for pid=12944 comm="syz.0.3051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 149.148028][T12953] netlink: 'syz.7.3057': attribute type 3 has an invalid length. [ 149.656831][T12997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3081'. [ 149.721117][ T40] audit: type=1326 audit(1751265657.374:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13006 comm="syz.5.3080" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa706f8e929 code=0x0 [ 149.773201][ T40] audit: type=1400 audit(1751265657.424:535): avc: denied { mounton } for pid=13006 comm="syz.5.3080" path="/proc/1339/task/1340/fd" dev="proc" ino=38279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 149.810913][T13013] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3083'. [ 150.052045][T13024] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 150.056821][T13024] SELinux: failed to load policy [ 150.534191][ T5941] Bluetooth: hci4: command 0x041b tx timeout [ 150.543210][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3091'. [ 150.549610][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3091'. [ 150.553325][T13034] netlink: 'syz.7.3091': attribute type 14 has an invalid length. [ 150.610142][T13038] misc userio: Can't change port type on an already running userio instance [ 150.647980][T13040] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3095'. [ 150.682031][T13042] netlink: 'syz.5.3096': attribute type 1 has an invalid length. [ 151.315580][T13071] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 151.400879][ T40] audit: type=1400 audit(1751265659.054:536): avc: denied { create } for pid=13077 comm="syz.3.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 151.409453][ T40] audit: type=1400 audit(1751265659.054:537): avc: denied { getopt } for pid=13077 comm="syz.3.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 151.438915][ T40] audit: type=1400 audit(1751265659.094:538): avc: denied { connect } for pid=13079 comm="syz.3.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 151.446414][ T40] audit: type=1400 audit(1751265659.094:539): avc: denied { read } for pid=13079 comm="syz.3.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 151.464669][ T6001] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 151.549179][ T40] audit: type=1400 audit(1751265659.204:540): avc: denied { write } for pid=13086 comm="syz.3.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.609878][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 151.617857][ T6001] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 151.621128][ T6001] usb 10-1: config 0 has no interface number 0 [ 151.625875][ T6001] usb 10-1: config 0 interface 106 has no altsetting 0 [ 151.631804][ T6001] usb 10-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 151.634102][ T6004] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 151.636075][ T6001] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.642060][ T6001] usb 10-1: Product: syz [ 151.644225][ T6001] usb 10-1: Manufacturer: syz [ 151.646689][ T6001] usb 10-1: SerialNumber: syz [ 151.652156][ T6001] usb 10-1: config 0 descriptor?? [ 151.703043][T13095] Cannot find add_set index 0 as target [ 151.797435][ T6004] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 151.800086][ T6004] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.807148][ T6004] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 151.810745][ T6004] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 151.813231][ T6004] usb 12-1: Manufacturer: syz [ 151.816940][ T6004] usb 12-1: config 0 descriptor?? [ 151.867212][ T6001] usb 10-1: USB disconnect, device number 3 [ 151.874656][ T6004] rc_core: IR keymap rc-hauppauge not found [ 151.876678][ T6004] Registered IR keymap rc-empty [ 151.879133][ T6004] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 151.883110][ T6004] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input10 [ 152.024175][ T6004] usb 12-1: USB disconnect, device number 2 [ 152.153999][ T1331] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 152.304999][ T1331] usb 8-1: Using ep0 maxpacket: 32 [ 152.308882][ T1331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.312815][ T1331] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.316855][ T1331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.320738][ T1331] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 152.324632][ T1331] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.330068][ T1331] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 152.333791][ T1331] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.340183][ T1331] usb 8-1: config 0 descriptor?? [ 152.466280][ T40] audit: type=1400 audit(1751265660.124:541): avc: denied { bind } for pid=13115 comm="syz.0.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.554910][ T1331] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 152.614213][ T5941] Bluetooth: hci4: command 0x041b tx timeout [ 152.726720][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 152.727234][T13130] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3137'. [ 152.827301][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3142'. [ 153.037290][T13166] netlink: 'syz.7.3152': attribute type 1 has an invalid length. [ 153.040479][T13166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.184945][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3160'. [ 153.231255][T13182] Driver unsupported XDP return value 0 on prog (id 123) dev N/A, expect packet loss! [ 153.256816][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 153.256833][ T40] audit: type=1400 audit(1751265660.914:546): avc: denied { ioctl } for pid=13179 comm="syz.5.3162" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.426906][ T60] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.529260][ T60] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.582242][T13197] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 153.587604][T13197] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 153.590884][T13196] [U]  [ 153.605222][ T60] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.613059][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.618884][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.622530][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.626653][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.629257][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.684787][ T60] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.838836][T13198] chnl_net:caif_netlink_parms(): no params data found [ 153.853224][ T60] bridge_slave_1: left allmulticast mode [ 153.856424][ T60] bridge_slave_1: left promiscuous mode [ 153.858970][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.866032][ T60] bridge_slave_0: left allmulticast mode [ 153.868548][ T60] bridge_slave_0: left promiscuous mode [ 153.872354][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.898566][T13220] xt_hashlimit: size too large, truncated to 1048576 [ 154.194045][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.200511][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.204468][ T60] bond0 (unregistering): Released all slaves [ 154.282449][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.285110][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.288721][T13198] bridge_slave_0: entered allmulticast mode [ 154.292850][T13198] bridge_slave_0: entered promiscuous mode [ 154.297989][ T60] tipc: Left network mode [ 154.298685][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.302471][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.306439][T13198] bridge_slave_1: entered allmulticast mode [ 154.310610][T13198] bridge_slave_1: entered promiscuous mode [ 154.370463][T13198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.376112][T13198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.420523][T13198] team0: Port device team_slave_0 added [ 154.437968][T13198] team0: Port device team_slave_1 added [ 154.477078][T13198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.480000][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.488683][T13198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.503975][ T60] hsr_slave_0: left promiscuous mode [ 154.506879][ T60] hsr_slave_1: left promiscuous mode [ 154.509191][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.511500][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.514160][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.516460][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.537131][ T60] veth1_macvtap: left promiscuous mode [ 154.539048][ T60] veth0_macvtap: left promiscuous mode [ 154.540933][ T60] veth1_vlan: left promiscuous mode [ 154.542625][ T60] veth0_vlan: left promiscuous mode [ 154.935747][ T6020] usb 8-1: USB disconnect, device number 6 [ 154.943139][ T6020] usblp0: removed [ 155.262760][ T60] team0 (unregistering): Port device team_slave_1 removed [ 155.324982][T13263] /dev/sr0: Can't open blockdev [ 155.330228][T13265] gfs2: gfs2 mount does not exist [ 155.345261][ T60] team0 (unregistering): Port device team_slave_0 removed [ 155.581928][ T40] audit: type=1400 audit(1751265663.234:547): avc: denied { read } for pid=13276 comm="syz.5.3204" path="socket:[39149]" dev="sockfs" ino=39149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.727368][ T5948] Bluetooth: hci4: command tx timeout [ 155.857462][T13198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.859810][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.868471][T13198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.953745][T13198] hsr_slave_0: entered promiscuous mode [ 155.963914][T13198] hsr_slave_1: entered promiscuous mode [ 155.967191][T13198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.970430][T13198] Cannot create hsr debugfs directory [ 156.048394][ T40] audit: type=1400 audit(1751265663.704:548): avc: denied { read } for pid=13298 comm="syz.3.3215" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.151466][T13198] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 156.159869][T13198] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 156.165178][T13198] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 156.170112][T13198] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 156.243259][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.257051][T13198] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.262391][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.265569][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.273381][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.275664][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.393807][T13198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.528745][T13198] veth0_vlan: entered promiscuous mode [ 156.535933][T13198] veth1_vlan: entered promiscuous mode [ 156.550427][T13198] veth0_macvtap: entered promiscuous mode [ 156.555143][T13198] veth1_macvtap: entered promiscuous mode [ 156.564176][T13198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.570141][T13198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.577070][T13198] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.579898][T13198] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.582608][T13198] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.585615][T13198] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.619670][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.622050][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.636151][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.639353][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.647777][ T40] audit: type=1400 audit(1751265664.304:549): avc: denied { mounton } for pid=13198 comm="syz-executor" path="/syzkaller.PNFuOG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 156.659630][ T40] audit: type=1400 audit(1751265664.324:550): avc: denied { mount } for pid=13198 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 156.828894][T13367] loop6: detected capacity change from 0 to 524287999 [ 156.831501][T13367] buffer_io_error: 56 callbacks suppressed [ 156.831510][T13367] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.836172][T13367] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.838684][T13367] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.841121][T13367] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.843536][T13367] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.847637][T13367] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.850113][T13367] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.852543][T13367] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.855736][T13367] ldm_validate_partition_table(): Disk read failed. [ 156.857940][T13367] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.860381][T13367] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.862915][T13367] Dev loop6: unable to read RDB block 0 [ 156.865275][T13367] loop6: unable to read partition table [ 156.867194][T13367] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 156.873330][ T9868] udevd[9868]: symlink '../../loop6' '/dev/disk/by-diskseq/79.tmp-b7:6' failed: Read-only file system [ 156.935223][T13367] ldm_validate_partition_table(): Disk read failed. [ 156.937584][T13367] Dev loop6: unable to read RDB block 0 [ 156.939936][T13367] loop6: unable to read partition table [ 156.941874][T13367] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 156.956097][ T9868] udevd[9868]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 156.975080][ T9868] udevd[9868]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 156.983156][ T9868] udevd[9868]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 157.063078][T13389] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3247'. [ 157.118860][ T40] audit: type=1400 audit(1751265664.774:551): avc: denied { ioctl } for pid=13391 comm="syz.8.3248" path="socket:[38827]" dev="sockfs" ino=38827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.119366][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3248'. [ 157.173369][ T5948] Bluetooth: hci4: ACL packet too small [ 157.212569][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3253'. [ 157.804063][ T5948] Bluetooth: hci4: command tx timeout [ 158.009262][T13459] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3279'. [ 158.448693][ T40] audit: type=1400 audit(1751265666.104:552): avc: denied { read } for pid=13488 comm="syz.8.3293" path="socket:[41436]" dev="sockfs" ino=41436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.516125][ T40] audit: type=1400 audit(1751265666.174:553): avc: denied { read } for pid=13494 comm="syz.8.3297" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 158.525725][ T40] audit: type=1400 audit(1751265666.174:554): avc: denied { open } for pid=13494 comm="syz.8.3297" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 158.569760][T13499] netlink: 'syz.5.3298': attribute type 11 has an invalid length. [ 158.572211][T13499] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3298'. [ 158.760635][ T13] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 158.768320][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.770931][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.013696][ T40] audit: type=1800 audit(1751265666.664:555): pid=13524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3310" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 159.088987][T13530] openvswitch: netlink: IPv6 tunnel dst address is zero [ 159.436057][ T40] audit: type=1400 audit(1751265667.094:556): avc: denied { watch } for pid=13563 comm="syz.3.3328" path="/929/file0" dev="tmpfs" ino=4723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.756753][T13582] random: crng reseeded on system resumption [ 159.883958][ T5948] Bluetooth: hci4: command tx timeout [ 159.913954][ T6001] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 160.065746][ T6001] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.069714][ T6001] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.072875][ T6001] usb 13-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 160.076291][ T6001] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.080993][ T6001] usb 13-1: config 0 descriptor?? [ 160.085413][ T6001] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 160.087591][ T6001] dvb-usb: bulk message failed: -22 (3/0) [ 160.092430][ T6001] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 160.095850][ T6001] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 160.098233][ T6001] usb 13-1: media controller created [ 160.101024][ T6001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.105297][ T6001] dvb-usb: bulk message failed: -22 (6/0) [ 160.107122][ T6001] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 160.110804][ T6001] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input11 [ 160.115939][ T6001] dvb-usb: schedule remote query interval to 150 msecs. [ 160.118157][ T6001] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 160.273974][ T6001] dvb-usb: bulk message failed: -22 (1/0) [ 160.275964][ T6001] dvb-usb: error while querying for an remote control event. [ 160.289290][ T6001] usb 13-1: USB disconnect, device number 2 [ 160.299074][ T6001] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 160.693909][T11015] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 160.990931][ T1248] tipc: Subscription rejected, illegal request [ 161.041798][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3358'. [ 161.047202][ T1248] bond0: (slave bond_slave_0): interface is now down [ 161.050200][ T1248] bond0: (slave bond_slave_1): interface is now down [ 161.057879][ T1248] bond0: now running without any active interface! [ 161.119495][ T489] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.151532][T13638] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 161.156490][T13638] netlink: 'syz.3.3363': attribute type 10 has an invalid length. [ 161.160152][T13638] bond0: (slave bond_slave_0): Releasing backup interface [ 161.205894][ T489] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.234669][ T40] audit: type=1400 audit(1751265668.894:557): avc: denied { getopt } for pid=13647 comm="syz.3.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 161.235645][T13648] tmpfs: Invalid gid '0x00000000ffffffff' [ 161.262667][T13650] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 161.279115][ T489] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.322727][T13660] tmpfs: Invalid uid '0x00000000ffffffff' [ 161.326126][ T40] audit: type=1400 audit(1751265668.984:558): avc: denied { ioctl } for pid=13657 comm="syz.3.3372" path="socket:[41654]" dev="sockfs" ino=41654 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 161.369522][ T489] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.369621][ T9868] udevd[9868]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 161.385303][ T9868] udevd[9868]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 161.400204][ T9868] udevd[9868]: symlink '../../loop7' '/dev/disk/by-diskseq/82.tmp-b7:7' failed: Read-only file system [ 161.411015][T13671] blkio.reset_stats is deprecated [ 161.411053][T13670] netlink: 'syz.5.3378': attribute type 2 has an invalid length. [ 161.415502][T13670] netlink: 'syz.5.3378': attribute type 8 has an invalid length. [ 161.417940][T13670] netlink: 1148 bytes leftover after parsing attributes in process `syz.5.3378'. [ 161.485728][ T489] bridge_slave_1: left allmulticast mode [ 161.487533][ T489] bridge_slave_1: left promiscuous mode [ 161.489437][ T489] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.493618][ T489] bridge_slave_0: left allmulticast mode [ 161.496942][ T489] bridge_slave_0: left promiscuous mode [ 161.498855][ T489] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.673956][ T59] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 161.726531][ T489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.732424][ T489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.737795][ T489] bond0 (unregistering): Released all slaves [ 161.805289][ T40] audit: type=1400 audit(1751265669.464:559): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 161.846390][ T59] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.850878][ T59] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.856781][ T59] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.860130][ T59] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.869277][T13675] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 161.880850][ T59] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.950536][ T40] audit: type=1400 audit(1751265669.604:560): avc: denied { create } for pid=13699 comm="syz.3.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.964999][ T5948] Bluetooth: hci4: command tx timeout [ 161.970587][T13702] xt_hashlimit: size too large, truncated to 1048576 [ 162.068564][ T489] hsr_slave_0: left promiscuous mode [ 162.070725][ T489] hsr_slave_1: left promiscuous mode [ 162.072700][ T489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.075150][ T489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.077741][ T9] usb 13-1: USB disconnect, device number 3 [ 162.077875][ T489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.082181][ T489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.113659][ T489] veth1_macvtap: left promiscuous mode [ 162.116080][ T489] veth0_macvtap: left promiscuous mode [ 162.117896][ T489] veth1_vlan: left promiscuous mode [ 162.119564][ T489] veth0_vlan: left promiscuous mode [ 162.799759][ T489] team0 (unregistering): Port device team_slave_1 removed [ 162.882163][ T489] team0 (unregistering): Port device team_slave_0 removed [ 162.982810][T13710] Falling back ldisc for ptm0. [ 163.553796][T13769] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3424'. [ 163.601205][ T40] audit: type=1400 audit(1751265671.254:561): avc: denied { mount } for pid=13772 comm="syz.3.3426" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 163.622220][ T40] audit: type=1400 audit(1751265671.274:562): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 163.826771][T13792] team0: No ports can be present during mode change [ 163.874126][T13799] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 163.916709][T13806] netlink: 'syz.5.3440': attribute type 2 has an invalid length. [ 163.919444][T13806] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3440'. [ 165.646371][ T9868] udevd[9868]: symlink '../../loop6' '/dev/disk/by-diskseq/84.tmp-b7:6' failed: Read-only file system [ 165.655565][ T9868] udevd[9868]: symlink '../../loop6' '/dev/disk/by-diskseq/84.tmp-b7:6' failed: Read-only file system [ 165.665180][ T9868] udevd[9868]: symlink '../../loop6' '/dev/disk/by-diskseq/84.tmp-b7:6' failed: Read-only file system [ 165.673789][ T9868] udevd[9868]: symlink '../../loop6' '/dev/disk/by-diskseq/84.tmp-b7:6' failed: Read-only file system [ 165.860513][ T40] audit: type=1326 audit(1751265673.514:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.3.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a78e929 code=0x7fc00000 [ 165.869317][ T40] audit: type=1326 audit(1751265673.514:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.3.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda5a78e929 code=0x7fc00000 [ 165.878058][ T40] audit: type=1326 audit(1751265673.514:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.3.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a78e929 code=0x7fc00000 [ 165.881797][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3503'. [ 165.887943][ T40] audit: type=1326 audit(1751265673.514:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.3.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a78e929 code=0x7fc00000 [ 165.897532][ T40] audit: type=1326 audit(1751265673.514:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.3.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a78e929 code=0x7fc00000 [ 165.909754][ T40] audit: type=1326 audit(1751265673.514:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.3.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a78e929 code=0x7fc00000 [ 165.917575][ T40] audit: type=1326 audit(1751265673.514:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.3.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a78e929 code=0x7fc00000 [ 165.926047][ T40] audit: type=1326 audit(1751265673.514:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.3.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5a78e929 code=0x7fc00000 [ 165.957855][T13952] vxcan0: tx address claim with dest, not broadcast [ 166.064963][T13966] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3515'. [ 166.355095][ T6002] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 166.454342][T13980] veth1_to_bond: default FDB implementation only supports local addresses [ 166.505633][ T6002] usb 8-1: config 0 has no interfaces? [ 166.507589][ T6002] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.510785][ T6002] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.515587][ T6002] usb 8-1: config 0 descriptor?? [ 166.603799][T13990] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 166.722490][ T6002] usb 8-1: USB disconnect, device number 7 [ 167.112547][ T1144] Bluetooth: hci3: Frame reassembly failed (-84) [ 167.116599][T14017] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 167.249865][T14029] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3546'. [ 167.276651][T14033] netlink: 'syz.3.3548': attribute type 10 has an invalid length. [ 167.279726][T14033] netlink: 'syz.3.3548': attribute type 10 has an invalid length. [ 167.282185][T14033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3548'. [ 167.508812][ T1144] Bluetooth: hci5: Frame reassembly failed (-84) [ 167.511155][T14056] Bluetooth: hci5: Frame reassembly failed (-84) [ 167.621041][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3565'. [ 167.790137][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3575'. [ 167.826704][ T1144] Bluetooth: hci6: Frame reassembly failed (-84) [ 167.828789][T14095] Bluetooth: hci6: Frame reassembly failed (-84) [ 167.882428][T14097] netlink: 161716 bytes leftover after parsing attributes in process `syz.5.3578'. [ 167.885474][T14097] netlink: zone id is out of range [ 167.887120][T14097] netlink: zone id is out of range [ 167.889046][T14097] netlink: zone id is out of range [ 167.890618][T14097] netlink: zone id is out of range [ 167.892252][T14097] netlink: zone id is out of range [ 167.893800][T14097] netlink: zone id is out of range [ 167.895759][T14097] netlink: zone id is out of range [ 167.897340][T14097] netlink: zone id is out of range [ 167.899244][T14097] netlink: zone id is out of range [ 167.901328][T14097] netlink: zone id is out of range [ 167.992335][T14101] batadv_slave_1: entered promiscuous mode [ 167.994931][T14100] batadv_slave_1: left promiscuous mode [ 169.164012][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 169.164057][ T5937] Bluetooth: hci3: command 0x1003 tx timeout [ 169.564065][ T5948] Bluetooth: hci5: command 0x1003 tx timeout [ 169.564619][ T5945] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 169.687609][T14142] netlink: 'syz.5.3599': attribute type 10 has an invalid length. [ 169.691602][T14142] hsr_slave_0: left promiscuous mode [ 169.883925][ T5941] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 170.009480][T14154] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 170.176726][T14169] overlayfs: failed to clone lowerpath [ 170.245392][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3616'. [ 170.305284][T14188] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3621'. [ 170.417981][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 170.417992][ T40] audit: type=1400 audit(1751265678.074:631): avc: denied { setopt } for pid=14201 comm="syz.8.3627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.558017][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3639'. [ 170.591104][T14230] netlink: 'syz.3.3642': attribute type 4 has an invalid length. [ 170.625267][ T40] audit: type=1326 audit(1751265678.284:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.3.3644" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda5a78e929 code=0x0 [ 171.425261][T14251] tc_dump_action: action bad kind [ 171.955785][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.036330][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.095390][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.121838][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.127616][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.130454][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.133446][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.137184][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.179415][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.199150][T14310] bridge0: port 3(syz_tun) entered blocking state [ 172.201413][T14310] bridge0: port 3(syz_tun) entered disabled state [ 172.203554][T14310] syz_tun: entered allmulticast mode [ 172.208932][T14310] syz_tun: entered promiscuous mode [ 172.211451][T14310] bridge0: port 3(syz_tun) entered blocking state [ 172.214682][T14310] bridge0: port 3(syz_tun) entered forwarding state [ 172.278370][T14304] chnl_net:caif_netlink_parms(): no params data found [ 172.315878][ T40] audit: type=1400 audit(1751265679.974:633): avc: denied { connect } for pid=14318 comm="syz.5.3682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.319292][ T46] bridge_slave_1: left allmulticast mode [ 172.321928][ T40] audit: type=1400 audit(1751265679.974:634): avc: denied { bind } for pid=14318 comm="syz.5.3682" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.323576][ T46] bridge_slave_1: left promiscuous mode [ 172.329831][ T40] audit: type=1400 audit(1751265679.974:635): avc: denied { name_bind } for pid=14318 comm="syz.5.3682" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 172.329856][ T40] audit: type=1400 audit(1751265679.974:636): avc: denied { node_bind } for pid=14318 comm="syz.5.3682" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 172.345947][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.349372][ T46] bridge_slave_0: left allmulticast mode [ 172.350439][T14322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3683'. [ 172.351132][ T46] bridge_slave_0: left promiscuous mode [ 172.355701][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.534136][ T5941] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 172.537618][ T5945] Bluetooth: hci3: command 0x1003 tx timeout [ 172.746377][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.750278][ T46] bond0 (unregistering): Released all slaves [ 172.806192][T14337] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3689'. [ 172.850240][ T46] tipc: Disabling bearer [ 172.854200][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3691'. [ 172.869834][ T46] tipc: Disabling bearer [ 172.873410][ T46] tipc: Left network mode [ 172.873606][T14304] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.881312][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.881664][T14347] Bluetooth: MGMT ver 1.23 [ 172.884379][T14304] bridge_slave_0: entered allmulticast mode [ 172.886133][T14304] bridge_slave_0: entered promiscuous mode [ 172.894126][T14304] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.896967][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.899849][T14304] bridge_slave_1: entered allmulticast mode [ 172.903555][T14304] bridge_slave_1: entered promiscuous mode [ 172.932995][T14351] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3696'. [ 172.936854][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3696'. [ 172.958277][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3698'. [ 172.993363][T14304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.078003][T14304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.154551][T14304] team0: Port device team_slave_0 added [ 173.170703][T14304] team0: Port device team_slave_1 added [ 173.218307][ T46] hsr_slave_0: left promiscuous mode [ 173.220742][ T46] hsr_slave_1: left promiscuous mode [ 173.242253][ T46] veth1_to_batadv: left promiscuous mode [ 173.244553][ T46] veth1_macvtap: left promiscuous mode [ 173.246333][ T46] veth0_macvtap: left promiscuous mode [ 173.248109][ T46] veth1_vlan: left promiscuous mode [ 173.249808][ T46] veth0_vlan: left promiscuous mode [ 173.821060][ T46] team0 (unregistering): Port device team_slave_1 removed [ 173.891535][ T46] team0 (unregistering): Port device team_slave_0 removed [ 174.207527][ T5945] Bluetooth: hci0: command tx timeout [ 174.533689][T14304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.537332][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.545595][T14304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.559238][T14304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.563549][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.574730][T14304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.597302][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3714'. [ 174.651138][T14304] hsr_slave_0: entered promiscuous mode [ 174.654529][T14304] hsr_slave_1: entered promiscuous mode [ 174.869371][ T40] audit: type=1400 audit(1751265682.524:637): avc: denied { ioctl } for pid=14414 comm="syz.8.3724" path="socket:[43711]" dev="sockfs" ino=43711 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.975503][ T46] IPVS: stop unused estimator thread 0... [ 175.079169][ T40] audit: type=1400 audit(1751265682.734:638): avc: denied { setopt } for pid=14430 comm="syz.8.3733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.102115][T14434] netlink: 'syz.8.3734': attribute type 19 has an invalid length. [ 175.410882][T14304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.420758][T14304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.427266][T14304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.433253][T14304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.489634][T14304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.505703][T14304] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.510617][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.512879][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.518649][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.520921][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.564064][ T5945] Bluetooth: hci2: command 0x0406 tx timeout [ 175.669672][T14304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.692314][T14304] veth0_vlan: entered promiscuous mode [ 175.697916][T14304] veth1_vlan: entered promiscuous mode [ 175.722472][T14304] veth0_macvtap: entered promiscuous mode [ 175.728247][T14304] veth1_macvtap: entered promiscuous mode [ 175.738917][T14304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.745221][T14304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.751338][T14304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.754576][T14304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.757378][T14304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.760076][T14304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.803385][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.806012][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.832118][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.836075][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.038642][T14495] netlink: 'syz.8.3755': attribute type 4 has an invalid length. [ 176.105940][T14500] __nla_validate_parse: 3 callbacks suppressed [ 176.105951][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3758'. [ 176.106515][T14502] could not open pipe file descriptor [ 176.235183][T14516] netlink: 'syz.8.3766': attribute type 11 has an invalid length. [ 176.237792][T14516] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3766'. [ 176.294225][ T5941] Bluetooth: hci0: command tx timeout [ 176.405902][T14540] raw_sendmsg: syz.3.3778 forgot to set AF_INET. Fix it! [ 176.997044][T14605] netlink: 'syz.5.3810': attribute type 11 has an invalid length. [ 177.070895][T14613] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.3814'. [ 177.367085][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3831'. [ 177.395037][ T40] audit: type=1400 audit(1751265685.054:639): avc: denied { watch watch_reads } for pid=14653 comm="syz.5.3834" path="pipe:[16691]" dev="pipefs" ino=16691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 177.402375][T14654] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 177.580783][ T1248] tipc: Subscription rejected, illegal request [ 177.740485][T14671] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3841'. [ 178.364437][ T5941] Bluetooth: hci0: command tx timeout [ 178.507223][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3847'. [ 178.511065][ T1144] bond0: (slave bond_slave_0): interface is now down [ 178.515648][ T1144] bond0: (slave bond_slave_1): interface is now down [ 178.525851][ T1144] bond0: now running without any active interface! [ 178.564051][T14694] netlink: 'syz.8.3850': attribute type 2 has an invalid length. [ 178.567408][T14694] netlink: 'syz.8.3850': attribute type 8 has an invalid length. [ 178.571146][T14694] netlink: 1148 bytes leftover after parsing attributes in process `syz.8.3850'. [ 178.625637][T14702] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 179.091212][T14755] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.159638][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3894'. [ 179.162403][T14772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3894'. [ 179.239058][T14784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3892'. [ 179.352372][ T838] IPVS: starting estimator thread 0... [ 179.454005][T14802] IPVS: using max 22 ests per chain, 52800 per kthread [ 179.487205][T14817] team0: No ports can be present during mode change [ 179.669156][T14834] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 179.751455][T14843] netlink: 'syz.0.3921': attribute type 2 has an invalid length. [ 180.151610][T14909] netem: unknown loss type 13 [ 180.234657][T14917] vlan3: entered promiscuous mode [ 180.236931][T14917] bridge0: entered promiscuous mode [ 180.239337][T14917] vlan3: entered allmulticast mode [ 180.241524][T14917] bridge0: entered allmulticast mode [ 180.359449][ T46] tipc: Subscription rejected, illegal request [ 180.454086][ T5941] Bluetooth: hci0: command tx timeout [ 180.897885][T14966] netlink: 'syz.8.3979': attribute type 10 has an invalid length. [ 180.902957][T14966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.906752][T14966] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 180.918036][T14966] netlink: 'syz.8.3979': attribute type 10 has an invalid length. [ 180.921146][T14966] batadv0: entered promiscuous mode [ 180.923159][T14966] batadv0: entered allmulticast mode [ 180.928355][T14966] bond0: (slave batadv0): Releasing backup interface [ 180.933210][T14966] bridge0: port 3(batadv0) entered blocking state [ 180.936081][T14966] bridge0: port 3(batadv0) entered disabled state [ 181.024528][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 181.027897][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 181.086206][ T40] audit: type=1326 audit(1751265688.744:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.5.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x7fc00000 [ 181.097155][ T40] audit: type=1326 audit(1751265688.744:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.5.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa706f8e929 code=0x7fc00000 [ 181.105040][ T40] audit: type=1326 audit(1751265688.744:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.5.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x7fc00000 [ 181.111859][ T40] audit: type=1326 audit(1751265688.744:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.5.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x7fc00000 [ 181.114682][T14985] vxcan0: tx address claim with dest, not broadcast [ 181.119055][ T40] audit: type=1326 audit(1751265688.744:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.5.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x7fc00000 [ 181.129736][ T40] audit: type=1326 audit(1751265688.744:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.5.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x7fc00000 [ 181.139128][ T40] audit: type=1326 audit(1751265688.744:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.5.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x7fc00000 [ 181.148110][ T40] audit: type=1326 audit(1751265688.744:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.5.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x7fc00000 [ 181.156842][ T40] audit: type=1326 audit(1751265688.744:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.5.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x7fc00000 [ 181.169210][T14991] __nla_validate_parse: 5 callbacks suppressed [ 181.169221][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3988'. [ 181.381607][T15014] netlink: 'syz.5.4000': attribute type 10 has an invalid length. [ 181.387110][T15014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.392849][T15014] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 181.403214][T15014] netlink: 'syz.5.4000': attribute type 10 has an invalid length. [ 181.406808][T15014] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4000'. [ 181.410021][T15014] batadv0: entered promiscuous mode [ 181.411838][T15014] batadv0: entered allmulticast mode [ 181.417564][T15014] bond0: (slave batadv0): Releasing backup interface [ 181.426077][T15014] bridge0: port 4(batadv0) entered blocking state [ 181.428385][T15014] bridge0: port 4(batadv0) entered disabled state [ 181.431295][T15014] bridge0: adding interface batadv0 with same address as a received packet (addr:aa:aa:aa:aa:aa:2a, vlan:0) [ 181.440367][T15018] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 181.845423][ T46] batman_adv: batadv0: IGMP Querier appeared [ 181.847969][ T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 181.914063][ T29] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 182.076059][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.079144][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.082128][ T29] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.093902][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 182.102349][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 182.113975][ T29] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 182.117640][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.136131][T15032] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 182.141543][ T29] hub 8-1:1.0: bad descriptor, ignoring hub [ 182.143514][ T29] hub 8-1:1.0: probe with driver hub failed with error -5 [ 182.146302][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 182.148008][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 182.154890][ T29] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 182.156869][ T29] cdc_wdm 8-1:1.0: Unknown control protocol [ 182.236116][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 182.454537][ T6001] usb 8-1: USB disconnect, device number 8 [ 182.525899][T15082] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4033'. [ 182.793966][ T29] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 182.966247][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.969733][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.972460][ T29] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.976093][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 182.979477][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 182.982783][ T29] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 182.985716][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.990446][T15032] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 182.994131][ T29] hub 8-1:1.0: bad descriptor, ignoring hub [ 182.995976][ T29] hub 8-1:1.0: probe with driver hub failed with error -5 [ 182.998381][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 183.000079][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 183.004449][ T29] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 183.006433][ T29] cdc_wdm 8-1:1.0: Unknown control protocol [ 183.092182][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 183.092194][ T40] audit: type=1326 audit(1751265690.744:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.8.4031" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40db58e929 code=0x7fc00000 [ 183.159282][T15102] vlan2: entered promiscuous mode [ 183.160887][T15102] bridge0: entered promiscuous mode [ 183.162770][T15102] vlan2: entered allmulticast mode [ 183.164568][T15102] bridge0: entered allmulticast mode [ 183.236488][ T40] audit: type=1400 audit(1751265690.894:656): avc: denied { read } for pid=15105 comm="syz.5.4044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 183.314370][ T29] usb 8-1: USB disconnect, device number 9 [ 183.466387][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4056'. [ 183.572946][T15130] 9pnet_rdma: rdma_create_trans (15130): problem binding to privport: 13 [ 183.574123][ T40] audit: type=1400 audit(1751265691.224:657): avc: denied { mounton } for pid=15129 comm="syz.5.4055" path="/983/bus" dev="tmpfs" ino=4999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 183.812763][T15160] net_ratelimit: 44 callbacks suppressed [ 183.812780][T15160] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 183.993744][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4080'. [ 184.003652][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4080'. [ 184.231563][T15203] bond0: entered promiscuous mode [ 184.233061][T15203] bond_slave_0: entered promiscuous mode [ 184.234986][T15203] bond_slave_1: entered promiscuous mode [ 184.355017][ T40] audit: type=1400 audit(1751265692.014:658): avc: denied { bind } for pid=15216 comm="syz.3.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.542226][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 184.554038][ T6002] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 184.735357][ T6002] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.739247][ T6002] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.743421][ T6002] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.747795][ T6002] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 184.749664][T15260] macvlan2: entered promiscuous mode [ 184.752570][ T6002] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 184.760991][ T6002] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.764128][ T6002] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.766667][ T6002] usb 13-1: Product: syz [ 184.768012][ T6002] usb 13-1: Manufacturer: syz [ 184.770938][T15262] tc_dump_action: action bad kind [ 184.775576][ T6002] cdc_wdm 13-1:1.0: skipping garbage [ 184.777284][ T6002] cdc_wdm 13-1:1.0: skipping garbage [ 184.779513][ T6002] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 184.781371][ T6002] cdc_wdm 13-1:1.0: Unknown control protocol [ 184.916169][T15282] Bluetooth: hci3: Frame reassembly failed (-84) [ 184.919949][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 184.980258][ T34] usb 13-1: USB disconnect, device number 4 [ 185.839036][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4145'. [ 186.061341][T15329] bond0: entered promiscuous mode [ 186.063456][T15329] bond_slave_0: entered promiscuous mode [ 186.066282][T15329] bond_slave_1: entered promiscuous mode [ 186.902746][T15385] vxcan0: tx address claim with dlc 0 [ 186.924582][ T5945] Bluetooth: hci3: command 0x1003 tx timeout [ 186.927853][ T5941] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 187.481959][T15448] netlink: 'syz.0.4207': attribute type 11 has an invalid length. [ 187.484899][T15448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4207'. [ 187.620569][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'. [ 187.781607][ T40] audit: type=1400 audit(1751265695.434:659): avc: denied { ioctl } for pid=15476 comm="syz.3.4223" path="socket:[49448]" dev="sockfs" ino=49448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.869794][ T88] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 187.878134][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.880510][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.044027][ T6004] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 188.196387][ T6004] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 188.201077][ T6004] usb 13-1: config 0 interface 0 has no altsetting 0 [ 188.206287][ T6004] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 188.210141][ T6004] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 188.214779][ T6004] usb 13-1: Product: syz [ 188.217050][ T6004] usb 13-1: Manufacturer: syz [ 188.219060][ T6004] usb 13-1: SerialNumber: syz [ 188.228080][ T6004] usb 13-1: config 0 descriptor?? [ 188.237399][ T6004] usb 13-1: selecting invalid altsetting 0 [ 188.435466][ T6001] usb 13-1: USB disconnect, device number 5 [ 189.131780][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4250'. [ 189.348820][T15558] tmpfs: Invalid gid '0x00000000ffffffff' [ 189.382346][T15566] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4265'. [ 189.512207][T15589] netlink: 'syz.5.4276': attribute type 10 has an invalid length. [ 189.517104][T15589] bond0: (slave bond_slave_0): Releasing backup interface [ 189.520769][T15589] bond_slave_0: left promiscuous mode [ 189.568979][ T9868] udevd[9868]: symlink '../../loop7' '/dev/disk/by-diskseq/86.tmp-b7:7' failed: Read-only file system [ 189.579680][ T9868] udevd[9868]: symlink '../../loop7' '/dev/disk/by-diskseq/86.tmp-b7:7' failed: Read-only file system [ 189.580023][T15596] tmpfs: Invalid uid '0x00000000ffffffff' [ 189.591163][ T9868] udevd[9868]: symlink '../../loop7' '/dev/disk/by-diskseq/86.tmp-b7:7' failed: Read-only file system [ 189.595327][T15598] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 189.600884][ T9868] udevd[9868]: symlink '../../loop7' '/dev/disk/by-diskseq/87.tmp-b7:7' failed: Read-only file system [ 189.746164][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4290'. [ 189.798163][T15625] xt_hashlimit: size too large, truncated to 1048576 [ 189.916918][ T5941] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 189.973296][T15633] netlink: 'syz.3.4296': attribute type 2 has an invalid length. [ 189.977447][T15633] netlink: 'syz.3.4296': attribute type 8 has an invalid length. [ 189.980689][T15633] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.4296'. [ 190.040182][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4297'. [ 190.043371][ T1144] bond0: (slave bond_slave_0): interface is now down [ 190.047368][ T1144] bond0: (slave bond_slave_1): interface is now down [ 190.052361][ T1144] bond0: now running without any active interface! [ 190.316063][T15666] netlink: 'syz.5.4311': attribute type 9 has an invalid length. [ 190.318444][T15666] netlink: 212012 bytes leftover after parsing attributes in process `syz.5.4311'. [ 190.407997][T15672] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.515891][ T40] audit: type=1400 audit(1751265954.180:660): avc: denied { write } for pid=15682 comm="syz.8.4319" path="socket:[50876]" dev="sockfs" ino=50876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.530432][T15685] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4321'. [ 190.863181][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4350'. [ 190.923715][T15742] netlink: 'syz.8.4343': attribute type 2 has an invalid length. [ 191.042652][T15756] SELinux: failed to load policy [ 191.196119][ T5945] Bluetooth: hci3: sending frame failed (-49) [ 191.198776][ T5941] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 191.767656][ T40] audit: type=1400 audit(1751265955.430:661): avc: denied { watch } for pid=15873 comm="syz.3.4404" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 191.777706][ T40] audit: type=1400 audit(1751265955.430:662): avc: denied { watch_sb } for pid=15873 comm="syz.3.4404" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 191.845909][T15883] netlink: 'syz.8.4409': attribute type 8 has an invalid length. [ 191.850069][T15883] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.854354][T15883] bridge0: entered allmulticast mode [ 191.999061][T15904] openvswitch: netlink: IP tunnel TTL not specified. [ 192.574183][ T40] audit: type=1326 audit(1751265956.230:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.5.4401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706f8e929 code=0x7fc00000 [ 192.612601][ T40] audit: type=1400 audit(1751265956.270:664): avc: denied { ioctl } for pid=15955 comm="syz.3.4445" path="socket:[53271]" dev="sockfs" ino=53271 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 193.117218][T15993] kvm: user requested TSC rate below hardware speed [ 193.600243][T16015] __nla_validate_parse: 4 callbacks suppressed [ 193.600254][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4470'. [ 193.644641][T16021] batadv_slave_1: entered promiscuous mode [ 193.647609][T16020] batadv_slave_1: left promiscuous mode [ 193.733101][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4481'. [ 193.782725][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4484'. [ 193.968393][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.976397][T16068] fuse: Bad value for 'fd' [ 194.082786][T16080] netlink: 'syz.5.4504': attribute type 1 has an invalid length. [ 195.182150][T16143] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4534'. [ 195.186601][ T12] ------------[ cut here ]------------ [ 195.189340][ T12] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 195.192997][ T12] WARNING: CPU: 2 PID: 12 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 195.200589][ T12] Modules linked in: [ 195.204830][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 195.209049][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.213408][ T12] Workqueue: bond0 bond_mii_monitor [ 195.215129][ T12] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 195.217015][ T12] Code: 05 ff ff ff e8 a4 d4 58 f8 c6 05 f6 2d 2d 07 01 90 ba 48 00 00 00 48 c7 c6 00 9d e3 8c 48 c7 c7 a0 9c e3 8c e8 c4 94 17 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 3f a8 90 e8 3e b0 bf f8 e9 [ 195.223130][ T12] RSP: 0018:ffffc900000f79f0 EFLAGS: 00010286 [ 195.225159][ T12] RAX: 0000000000000000 RBX: ffff888055782000 RCX: ffffffff817ae278 [ 195.227608][ T12] RDX: ffff88801dabc880 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 195.230070][ T12] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 195.232523][ T12] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff9200001ef48 [ 195.235102][ T12] R13: ffff888055782cc5 R14: ffffffff8c591640 R15: ffffffff899c8b80 [ 195.237592][ T12] FS: 0000000000000000(0000) GS:ffff8880d6952000(0000) knlGS:0000000000000000 [ 195.240356][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.242436][ T12] CR2: 00007fa70717e2d8 CR3: 000000004d3de000 CR4: 0000000000352ef0 [ 195.245016][ T12] Call Trace: [ 195.246089][ T12] [ 195.247035][ T12] ethtool_op_get_link+0x1d/0x70 [ 195.248620][ T12] bond_check_dev_link+0x3fc/0x710 [ 195.250244][ T12] ? stack_trace_save+0x8e/0xc0 [ 195.251779][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 195.253553][ T12] bond_mii_monitor+0x3c0/0x2dc0 [ 195.255175][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 195.256858][ T12] ? rcu_is_watching+0x12/0xc0 [ 195.258404][ T12] process_one_work+0x9cf/0x1b70 [ 195.259961][ T12] ? __pfx_process_one_work+0x10/0x10 [ 195.261651][ T12] ? assign_work+0x1a0/0x250 [ 195.263081][ T12] worker_thread+0x6c8/0xf10 [ 195.264670][ T12] ? __pfx_worker_thread+0x10/0x10 [ 195.266272][ T12] kthread+0x3c2/0x780 [ 195.267539][ T12] ? __pfx_kthread+0x10/0x10 [ 195.269016][ T12] ? rcu_is_watching+0x12/0xc0 [ 195.270528][ T12] ? __pfx_kthread+0x10/0x10 [ 195.272074][ T12] ret_from_fork+0x5d4/0x6f0 [ 195.273584][ T12] ? __pfx_kthread+0x10/0x10 [ 195.275134][ T12] ret_from_fork_asm+0x1a/0x30 [ 195.276857][ T12] [ 195.278029][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.280383][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 195.283638][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.287670][ T12] Workqueue: bond0 bond_mii_monitor [ 195.289421][ T12] Call Trace: [ 195.290510][ T12] [ 195.291482][ T12] dump_stack_lvl+0x3d/0x1f0 [ 195.293036][ T12] panic+0x71c/0x800 [ 195.294312][ T12] ? __pfx_panic+0x10/0x10 [ 195.295838][ T12] ? show_trace_log_lvl+0x29b/0x3e0 [ 195.297501][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 195.299145][ T12] ? __linkwatch_sync_dev+0x1ed/0x230 [ 195.300819][ T12] check_panic_on_warn+0xab/0xb0 [ 195.302392][ T12] __warn+0xf6/0x3c0 [ 195.303627][ T12] ? preempt_schedule_notrace+0x62/0xe0 [ 195.305428][ T12] ? __linkwatch_sync_dev+0x1ed/0x230 [ 195.307672][ T12] report_bug+0x3c3/0x580 [ 195.309126][ T12] ? __linkwatch_sync_dev+0x1ed/0x230 [ 195.310743][ T12] handle_bug+0x184/0x210 [ 195.312104][ T12] exc_invalid_op+0x17/0x50 [ 195.313554][ T12] asm_exc_invalid_op+0x1a/0x20 [ 195.315088][ T12] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 195.316969][ T12] Code: 05 ff ff ff e8 a4 d4 58 f8 c6 05 f6 2d 2d 07 01 90 ba 48 00 00 00 48 c7 c6 00 9d e3 8c 48 c7 c7 a0 9c e3 8c e8 c4 94 17 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 3f a8 90 e8 3e b0 bf f8 e9 [ 195.322964][ T12] RSP: 0018:ffffc900000f79f0 EFLAGS: 00010286 [ 195.324865][ T12] RAX: 0000000000000000 RBX: ffff888055782000 RCX: ffffffff817ae278 [ 195.327938][ T12] RDX: ffff88801dabc880 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 195.330411][ T12] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 195.332856][ T12] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff9200001ef48 [ 195.335329][ T12] R13: ffff888055782cc5 R14: ffffffff8c591640 R15: ffffffff899c8b80 [ 195.337803][ T12] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 195.339610][ T12] ? __warn_printk+0x198/0x350 [ 195.341136][ T12] ? __warn_printk+0x1a5/0x350 [ 195.342641][ T12] ethtool_op_get_link+0x1d/0x70 [ 195.344196][ T12] bond_check_dev_link+0x3fc/0x710 [ 195.345986][ T12] ? stack_trace_save+0x8e/0xc0 [ 195.348017][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 195.349900][ T12] bond_mii_monitor+0x3c0/0x2dc0 [ 195.351461][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 195.353157][ T12] ? rcu_is_watching+0x12/0xc0 [ 195.354665][ T12] process_one_work+0x9cf/0x1b70 [ 195.356218][ T12] ? __pfx_process_one_work+0x10/0x10 [ 195.357929][ T12] ? assign_work+0x1a0/0x250 [ 195.359464][ T12] worker_thread+0x6c8/0xf10 [ 195.360925][ T12] ? __pfx_worker_thread+0x10/0x10 [ 195.362549][ T12] kthread+0x3c2/0x780 [ 195.363703][ T12] ? __pfx_kthread+0x10/0x10 [ 195.365170][ T12] ? rcu_is_watching+0x12/0xc0 [ 195.366655][ T12] ? __pfx_kthread+0x10/0x10 [ 195.368100][ T12] ret_from_fork+0x5d4/0x6f0 [ 195.369597][ T12] ? __pfx_kthread+0x10/0x10 [ 195.371049][ T12] ret_from_fork_asm+0x1a/0x30 [ 195.372562][ T12] [ 195.374301][ T12] Kernel Offset: disabled [ 195.375815][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:41:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00007f40db58e929 RCX=0000000051419fe7 RDX=ffffffff81a6b83f RSI=ffffffff8c157ba0 RDI=ffffffff8c157be0 RBP=00007f40db58e929 RSP=ffffc90021ae7568 R8 =4d110270714c64c4 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff81a78040 R13=ffffc90021ae76b8 R14=0000000000000000 R15=ffff88805bccc880 RIP=ffffffff8b80e414 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f40dc4cbf98 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40db611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40db611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40db611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40db611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40db611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40db611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40db784488 00007f40db784480 00007f40db784478 00007f40db784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40dc2ed100 00007f40db784440 00007f40db784458 00007f40db7844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40db784498 00007f40db784490 00007f40db784488 00007f40db784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001a8fcb RBX=0000000000000001 RCX=ffffffff8b80dc69 RDX=0000000000000000 RSI=ffffffff8de1a0be RDI=ffffffff8c157c20 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90a80d50 R15=0000000000000000 RIP=ffffffff8b80c7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557b68a808 CR3=000000004d3de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816096ba ffffffff816010f8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816096c1 ffffffff816096ba ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff816096c1 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816096c1 ffffffff816096ba ffffffff816010f8 ffffffff816010f8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150ced100 00007f6150184440 00007f6100040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150184498 00007f6150184490 00007f6150184488 00007f6150184480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bfb65 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc900000f7350 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0882e0 R15=ffffffff855bfb00 RIP=ffffffff855bfb8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa70717e2d8 CR3=000000004d3de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816096ba ffffffff816010f8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816096c1 ffffffff816096ba ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff816096c1 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816096c1 ffffffff816096ba ffffffff816010f8 ffffffff816010f8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150ced100 00007f6150184440 00007f6100040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150184498 00007f6150184490 00007f6150184488 00007f6150184480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff8880266e2440 RBX=ffffffff8e5c4940 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8df0c05f RDI=ffffffff8c157c20 RBP=0000000000000002 RSP=ffffc900035e7008 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000010cb6 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b80e3f0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc0072e7d60 CR3=0000000037069000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd957994d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6150011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000