last executing test programs: 1.031775162s ago: executing program 1 (id=918): recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = msgget$private(0x0, 0x168) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(0xffffffffffffffff, 0xf3) setuid(0xffffffffffffffff) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/199) 1.031657585s ago: executing program 1 (id=919): open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) shmget$private(0x0, 0x4000, 0x6d5, &(0x7f00000e1000/0x4000)=nil) r0 = socket(0x11, 0x3, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x2}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) read(r0, &(0x7f0000000300)=""/26, 0x1a) 331.821482ms ago: executing program 0 (id=939): r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000200)=""/155) 331.517581ms ago: executing program 0 (id=942): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) symlinkat(&(0x7f0000000640)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') mkdirat(r0, &(0x7f00000006c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 272.034075ms ago: executing program 0 (id=945): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001440), 0x10, 0x0) 271.834767ms ago: executing program 3 (id=946): r0 = socket(0x18, 0x1, 0x0) listen(r0, 0x0) accept$unix(r0, 0x0, 0x0) shutdown(r0, 0x2) 268.669602ms ago: executing program 0 (id=948): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x24, 0x2, 0x0) setsockopt(r0, 0x6, 0x1, &(0x7f0000000280)="e9f6d779", 0x4) 268.403206ms ago: executing program 2 (id=949): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000000), 0x0) 268.135007ms ago: executing program 3 (id=950): r0 = semget$private(0x0, 0x4, 0x100) semop(r0, &(0x7f0000000100)=[{0x2, 0x9, 0x1800}, {0x2, 0xfff7, 0x1800}], 0x2) 211.779181ms ago: executing program 2 (id=951): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x68) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000001c0)=""/226, 0xe2, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r1, 0x2279, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x720, 0x0, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x26) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 211.215376ms ago: executing program 3 (id=952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a4, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}]}]}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x124, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x51c92c4b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x180000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xee52}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c0c1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x2000c095) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004881}, 0x44884) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0xd}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa90b}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000000680), 0xffffffff, 0xe8200) ioctl$SNDCTL_TMR_START(r4, 0x5402) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) getpeername$packet(r4, &(0x7f0000000880)={0x11, 0x0, 0x0}, &(0x7f00000008c0)=0x14) (async, rerun: 64) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000900)={0x0, @local, @multicast1}, &(0x7f0000000940)=0xc) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000980)={'wg0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r4, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000ac0)={'pimreg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000c40)={0x0, @rand_addr, @local}, &(0x7f0000000c80)=0xc) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x4cf, 0x1, {{0xf, 0x4, 0x3, 0x9, 0x3c, 0xd1, 0x0, 0xf8, 0x4, 0x0, @local, @private=0xa010101, {[@ssrr={0x89, 0x23, 0x10, [@multicast2, @multicast2, @remote, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, @empty]}, @ra={0x94, 0x4}]}}}}}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001ec0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000001e80)={&(0x7f0000001140)={0xd2c, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7dd}}, {0x8, 0x6, r6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x8, 0x52, 0x3}, {0x62ae, 0x5, 0x8, 0x4}, {0x2, 0x9, 0x0, 0x3c2}, {0x0, 0x55, 0x9, 0xd68}, {0x24, 0x8, 0x2, 0xa}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x7, 0x9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x80, 0x81, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x2, 0x0, 0xba7}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r18}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r21}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r22}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc7d}}, {0x8}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}]}}]}, 0xd2c}, 0x1, 0x0, 0x0, 0x4041}, 0x80) 210.931969ms ago: executing program 0 (id=953): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="440f0138440f01c5c744240006000000c7442402b6000000c7442406000000000f011424660f383b2d62539c2db9150b0000b8f6ffffffbaffffff7f0f30c7442400ec440000c744240200000000c7442406000000000f011c24407942f021180f35640f38cd6800", 0x68}], 0x1, 0x60, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x48000) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000a58000480540001800a0001006c696d69740000004400028008000340000000000c00024000000000000007ac0c00024000000000000001330c0001400000000000000007080003400000000f0c00024000000000000000090900010073797a30000000000900020073797a32"], 0xac}}, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 210.010343ms ago: executing program 3 (id=954): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x7, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc5, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0x8, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x8, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x2}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x8, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0x2, 0x4022, 0x4}, {0x4, 0x7, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x1ff, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x3}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae47, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x3de, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8000008, 0x5, 0x401, 0x4, 0xffffffff, 0x80}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x5}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x80000001, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1000, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0x0, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x2, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x1, 0x400, 0x9, 0x6, 0xdbd2}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x3, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x6}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x4, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x0, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x0, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5, 0x3}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x8, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x8, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x7, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x9, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x2}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 209.80835ms ago: executing program 2 (id=955): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x0, r0}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x9) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000080)={0x1, 0x5, 0x9, 0x1000, 0x1, 0x98cb, "3a63e04f62c4e61abae09b120f745a64", 0x5e, 0x2, 0x8, 0x1, 0x5, 0x8, 0x5}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x5, 0xd2, &(0x7f0000000140)="21673c89e9", &(0x7f0000000180)=""/210, 0x6, 0x0, 0xbc, 0x14, &(0x7f0000000280)="df240d15236f2d42f60c4fd95348466a2a0c50c0eabb06eb3bb9be499a9e23420b6f1a2afdd81671b9ce51142645726710b43987446d7868304e4a756baf506d080be6777da99bb6c1cd359437111311d5a556c3bb1de9859bdbf3b6e6353428956b0c6b2ab4af26502311ddb52e394879c9d30a75a8bac81778e407c571dba4c719a38e66980d406bba4fa149040d171022949d00ca17ae1212983b707b56751b0af3cecb6cbd26ccf77b80950e3300ed0e2ed81ea79d89cb68e410", &(0x7f0000000340)="6062a41724a09cc30669c34454d5e34daf7b2f8f", 0x0, 0x0, 0x7}, 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000400), 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x80, 0x0, &(0x7f0000000600)=[@acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @increfs_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0x1001}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/211, 0xd3, 0x2, 0x31}, @fda={0x66646185, 0x2, 0x2, 0x22}}, &(0x7f00000005c0)={0x0, 0x18, 0x40}}}, @increfs={0x40046304, 0x2}], 0x3f, 0x0, &(0x7f0000000680)="993348c1f870d911ce3c57b2e38d9ed0a3d98016c8c455e9504e9bd75870ae64c8cd450f153c04368e0b182bd0132aaafa6f99e0c6c3a527e00e82cf3e2d57"}) r4 = accept4$phonet_pipe(r1, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x80800) bind$phonet(r4, &(0x7f0000000780)={0x23, 0x5, 0x8, 0x8}, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000900)=@generic={&(0x7f0000000840)='./file0\x00', r5}, 0x18) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000940), 0x80400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000980)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0/file0\x00'}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f00000009c0)={0xa5, 0x3, 0x9043, 0x2, "5691859d456bea9ac4ff951fd1edc07c77b2508a59355e4f75551bcfdb65dfa5b0d2aca961553cb5c0e232d7133c5229ed1ed3aacc66faea529925a5439bdae157e5bb92c8f2abf49dc7ab06e1902fa3c17532cf115194bda91f613f352fcf73fd89fb8e383cf1bfd4d65f6ee9a7a6319f371aa1e185db1b2bcfe36c428eb3ef21c1aa227d689bcfbc4064ec5b"}) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000d80)={r7, r7, 0x6, 0x0, @val=@kprobe_multi=@syms={0x1, 0xa, &(0x7f0000000d00)=[&(0x7f0000000a80)='-&/$]\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='\x00', &(0x7f0000000b40)='\\}]>*{\x00', &(0x7f0000000b80)='/dev/snd/seq\x00', &(0x7f0000000bc0)='\x00', &(0x7f0000000c00)='\x00', &(0x7f0000000c40)='!-+\x00', &(0x7f0000000c80)='/+{@$I]-(\x00', &(0x7f0000000cc0)='\x00'], 0x0, 0x10000}}, 0x30) write$cgroup_int(r7, &(0x7f0000000dc0)=0x6, 0x12) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000e00)=0x40, 0x4) accept$phonet_pipe(r7, &(0x7f0000000e40), &(0x7f0000000e80)=0x10) ioctl$IMHOLD_L1(r7, 0x80044948, &(0x7f0000000ec0)=0xb53) openat$ppp(0xffffffffffffff9c, &(0x7f0000000f00), 0x400, 0x0) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x13c, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x6, 0x2, 0x5, 0x4, {0x4e22, 0x4e24, [0x0, 0x8000, 0x3], [0x80000000, 0x0, 0x6, 0xca000000], 0x0, [0xc, 0x3ff]}, 0x3, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x86, 0x1, "a7787b8dda664f40c00740f7e33e1bb1a2a2e32e77df36e76f1b90ad308efcef8bac43e2539b2675afe63ca688a23f6370cc093734365cb05cd856755e26921a4d1ebe338a51b0bd5e6c2d1a497be2a83a52d64c4be7e38b5ad1dd2f67e4cb247e17ddd2de42b0a8abf7906e661e20ebe8b63d89d5bcfda0b39aca8726f7c307b80d"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "992a5487d539886b64ec16dbcd0e586aec1a734c9a41c0e30ef02ba8c1f18ed35c7c1d8f4bd64da0166e628f5c88865b4d18a26e9ed2cf24541af3ddcb485f8a5d0ae8f147dd4c7d030623f1db2d2dabbe7330a14c5be75966bfa3ca05d2ce160584"}]}, 0x13c}}, 0x4040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001180)={0x6, &(0x7f0000001140)=[{0x2, 0x84, 0xc}, {0x8, 0x5, 0x6, 0x2}, {0xa, 0x9, 0xb, 0xf4}, {0x0, 0xfa, 0x6, 0xb42}, {0x10, 0x2, 0x4, 0x9}, {0x3, 0x0, 0x2, 0x40}]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f00000011c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000001200)={0x3, r8, 0x5, 0x3, 0x0, 0x3, 0x9}) 150.413312ms ago: executing program 1 (id=956): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f25c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={0x2}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000280)={0x18, 0x0, 0x1}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x4, 0x3, 0x5891, @vifc_lcl_addr=@empty, @multicast1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x40, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5e2d6d5161ffdb78}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x5, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000008c0)={0xc0}) 150.114097ms ago: executing program 2 (id=957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getpgrp(0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x10000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)='\b\r4V', 0x7e00}], 0x1) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="5fa4ba", 0x3}], 0x1) write$proc_mixer(r2, 0x0, 0x37) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040084) close(r2) 149.868201ms ago: executing program 3 (id=958): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) ioctl$BLKSECDISCARD(r1, 0x127d, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r5, 0x100, 0xac}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000014c0)={0xffffffffffffffff, 0x20, &(0x7f0000001480)={&(0x7f00000012c0)=""/245, 0xf5, 0x0, &(0x7f00000013c0)=""/177, 0xb1}}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000001680)="0fc758000f01c90f01bacc1ad9f89a01000301360f01c365660f71e0f4f26f66b9220300000f32c745060030", 0x2c}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) write$P9_RVERSION(r9, &(0x7f0000001600)=ANY=[@ANYRES8=r2], 0x15) (async) r14 = dup(r9) write$FUSE_BMAP(r14, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r14, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES16=r9], 0x138) (async) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1f, 0x12, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @call={0x85, 0x0, 0x0, 0x30}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x40f00, 0x60, '\x00', r5, @fallback=0x34, r7, 0x8, &(0x7f0000001280)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, &(0x7f0000001500)=[r14], 0x0, 0x10, 0x1, @void, @value}, 0x94) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, 0x1}, 0x6) 91.779228ms ago: executing program 1 (id=959): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async) 90.39792ms ago: executing program 0 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f00000000c0)={'vlan1\x00', @multicast}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r5, 0x80) accept(r5, &(0x7f0000000000)=@xdp, &(0x7f00000000c0)=0x80) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x7fffffff, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0xfffffffe, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) 1.898604ms ago: executing program 1 (id=961): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = eventfd(0x8) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='xprtrdma_post_recv\x00', 0xffffffffffffffff, 0x0, 0x9b9f}, 0x3e) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000180)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(r5, 0x9, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x0, 0x260, 0x0, 0x98, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00', {}, {}, 0x6, 0x0, 0x56}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)=@md5={0x1, "186e703ea6fd4c518ce3f38ab1fda079"}, 0x11, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000440)='\x00\x00\x00\x00\x00', 0x5}], 0x1) close_range(r7, 0xffffffffffffffff, 0x2) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2200, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r0, r8}) 1.433721ms ago: executing program 2 (id=962): timerfd_create(0x3, 0x40800) timerfd_create(0x3, 0x40800) (async) 1.12792ms ago: executing program 2 (id=963): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 64) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 32) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) chdir(&(0x7f0000000300)='./file0\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) (async, rerun: 32) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (rerun: 32) write$uinput_user_dev(r4, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239]}, 0x45c) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 916.707µs ago: executing program 1 (id=964): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="bc0000002b00010000faffffffffffffa9000080"], 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 0s ago: executing program 3 (id=965): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xe, 0x2017}) r1 = socket(0x28, 0x5, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x44}) kernel console output (not intermixed with test programs): om eth0 [ 53.573826][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.580210][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.586722][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.649362][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.658366][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.665947][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.672283][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.723737][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.758177][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.769014][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.772256][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.792160][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.795671][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.798068][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.816155][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.838399][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.845784][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.854265][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.856635][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.865245][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.867534][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.884617][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.890373][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.893385][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.897894][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.900435][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.933603][ T40] audit: type=1400 audit(1750611806.531:89): avc: denied { sys_module } for pid=5939 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.946944][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.973270][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.975975][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.981401][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.984040][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.030470][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.067078][ T5939] veth0_vlan: entered promiscuous mode [ 54.079008][ T5939] veth1_vlan: entered promiscuous mode [ 54.112300][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.122048][ T5939] veth0_macvtap: entered promiscuous mode [ 54.131254][ T5939] veth1_macvtap: entered promiscuous mode [ 54.150323][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.156661][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.166166][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.171383][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.176261][ T5939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.179461][ T5939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.182191][ T5939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.185195][ T5939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.216106][ T5930] veth0_vlan: entered promiscuous mode [ 54.232359][ T5930] veth1_vlan: entered promiscuous mode [ 54.255703][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.261291][ T5942] veth0_vlan: entered promiscuous mode [ 54.261610][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.274247][ T5942] veth1_vlan: entered promiscuous mode [ 54.279400][ T5934] veth0_vlan: entered promiscuous mode [ 54.294823][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.298138][ T5934] veth1_vlan: entered promiscuous mode [ 54.298961][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.310009][ T5930] veth0_macvtap: entered promiscuous mode [ 54.314937][ T5930] veth1_macvtap: entered promiscuous mode [ 54.334340][ T5934] veth0_macvtap: entered promiscuous mode [ 54.340619][ T5934] veth1_macvtap: entered promiscuous mode [ 54.341147][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.355964][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.361554][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.370117][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.372767][ T5942] veth0_macvtap: entered promiscuous mode [ 54.377060][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.386874][ T5942] veth1_macvtap: entered promiscuous mode [ 54.395780][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.399523][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.402173][ T5934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.404827][ T5934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.412775][ T5930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.416192][ T5930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.421652][ T5930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.425060][ T5930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.443067][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.465965][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.479799][ T5942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.482750][ T5942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.485915][ T5942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.489894][ T5942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.499187][ T6016] bpq0: entered promiscuous mode [ 54.500828][ T6016] bpq0: entered allmulticast mode [ 54.520407][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.524183][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.537717][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.540818][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.568588][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.571740][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.580848][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.583355][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.608360][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.611038][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.653636][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.656796][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.957608][ T5994] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.087428][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.143387][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.148675][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.153831][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.159628][ T5994] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.163420][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.168874][ T5994] usb 6-1: config 0 descriptor?? [ 55.199037][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 55.223832][ T6043] team0: Port device ip6gretap1 added [ 55.237661][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 55.242656][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 55.246195][ T9] usb 5-1: config 179 has no interface number 0 [ 55.249415][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 55.254056][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 55.259532][ T9] usb 5-1: config 179 interface 65 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 55.264697][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 55.269198][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x8F has invalid wMaxPacketSize 0 [ 55.272785][ T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 55.278898][ T9] usb 5-1: config 179 interface 65 has no altsetting 0 [ 55.280314][ T6043] veth3: entered promiscuous mode [ 55.281698][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 55.284444][ T6043] team0: Port device veth3 added [ 55.287008][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.308420][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input5 [ 55.317569][ T5936] Bluetooth: hci0: command tx timeout [ 55.322012][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 55.328006][ T5936] Bluetooth: hci2: command tx timeout [ 55.397804][ T5936] Bluetooth: hci1: command tx timeout [ 55.407561][ T5936] Bluetooth: hci3: command tx timeout [ 55.509394][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 55.513481][ T9] usb 5-1: USB disconnect, device number 2 [ 55.518353][ T9] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 55.781221][ T5994] usbhid 6-1:0.0: can't add hid device: -71 [ 55.783188][ T5994] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 55.787699][ T5994] usb 6-1: USB disconnect, device number 2 [ 55.831202][ T6065] binder_alloc: 6064: binder_alloc_buf size 12336 failed, no address space [ 55.835055][ T6065] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 55.941714][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 55.941725][ T40] audit: type=1400 audit(1750611808.541:170): avc: denied { ioctl } for pid=6066 comm="syz.2.16" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.948077][ T6066] delete_channel: no stack [ 56.045353][ T40] audit: type=1400 audit(1750611808.641:171): avc: denied { read write } for pid=6070 comm="syz.0.18" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.052976][ T40] audit: type=1400 audit(1750611808.641:172): avc: denied { open } for pid=6070 comm="syz.0.18" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.060940][ T40] audit: type=1400 audit(1750611808.651:173): avc: denied { ioctl } for pid=6070 comm="syz.0.18" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.075224][ T40] audit: type=1400 audit(1750611808.671:174): avc: denied { setopt } for pid=6070 comm="syz.0.18" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.079286][ T6074] syz.2.17: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 56.088516][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.2.17 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 56.088530][ T6074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.088536][ T6074] Call Trace: [ 56.088539][ T6074] [ 56.088543][ T6074] dump_stack_lvl+0x16c/0x1f0 [ 56.088561][ T6074] warn_alloc+0x248/0x3a0 [ 56.088576][ T6074] ? __pfx_warn_alloc+0x10/0x10 [ 56.088593][ T6074] ? __vcalloc_noprof+0x4d/0x80 [ 56.088607][ T6074] ? __vmalloc_node_noprof+0xad/0xf0 [ 56.088620][ T6074] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 56.088635][ T6074] ? __vcalloc_noprof+0x4d/0x80 [ 56.088651][ T6074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 56.088663][ T6074] ? __pfx___mutex_lock+0x10/0x10 [ 56.088681][ T6074] ? __vcalloc_noprof+0x4d/0x80 [ 56.088697][ T6074] __vmalloc_node_noprof+0xad/0xf0 [ 56.088707][ T6074] ? __vcalloc_noprof+0x4d/0x80 [ 56.088721][ T6074] __vcalloc_noprof+0x4d/0x80 [ 56.088735][ T6074] kvm_set_memslot+0xee3/0x1380 [ 56.088749][ T6074] ? kasan_save_track+0x14/0x30 [ 56.088763][ T6074] kvm_set_memory_region+0xebc/0x1680 [ 56.088780][ T6074] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 56.088797][ T6074] kvm_vm_ioctl+0x1482/0x3da0 [ 56.088816][ T6074] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 56.088838][ T6074] ? kasan_quarantine_put+0x10a/0x240 [ 56.088851][ T6074] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.088866][ T6074] ? find_held_lock+0x2b/0x80 [ 56.088879][ T6074] ? tomoyo_path_number_perm+0x295/0x580 [ 56.088893][ T6074] ? tomoyo_path_number_perm+0x18d/0x580 [ 56.088906][ T6074] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.088917][ T6074] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.088931][ T6074] ? do_vfs_ioctl+0x523/0x1a60 [ 56.088942][ T6074] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 56.088962][ T6074] ? hook_file_ioctl_common+0x145/0x410 [ 56.088982][ T6074] ? selinux_file_ioctl+0x180/0x270 [ 56.088995][ T6074] ? selinux_file_ioctl+0xb4/0x270 [ 56.089008][ T6074] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 56.089024][ T6074] __x64_sys_ioctl+0x18e/0x210 [ 56.089035][ T6074] do_syscall_64+0xcd/0x4c0 [ 56.089052][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.089062][ T6074] RIP: 0033:0x7fcda0d8e929 [ 56.089070][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.089080][ T6074] RSP: 002b:00007fcda1ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.089089][ T6074] RAX: ffffffffffffffda RBX: 00007fcda0fb6160 RCX: 00007fcda0d8e929 [ 56.089095][ T6074] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000005 [ 56.089101][ T6074] RBP: 00007fcda0e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 56.089106][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.089112][ T6074] R13: 0000000000000000 R14: 00007fcda0fb6160 R15: 00007ffe183a4028 [ 56.089124][ T6074] [ 56.089128][ T6074] Mem-Info: [ 56.162080][ T40] audit: type=1400 audit(1750611808.761:175): avc: denied { ioctl } for pid=6077 comm="syz.0.19" path="socket:[8454]" dev="sockfs" ino=8454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.165113][ T6074] active_anon:9167 inactive_anon:0 isolated_anon:0 [ 56.165113][ T6074] active_file:1951 inactive_file:40576 isolated_file:0 [ 56.165113][ T6074] unevictable:1768 dirty:1612 writeback:0 [ 56.165113][ T6074] slab_reclaimable:11288 slab_unreclaimable:67422 [ 56.165113][ T6074] mapped:25320 shmem:3888 pagetables:1144 [ 56.165113][ T6074] sec_pagetables:305 bounce:0 [ 56.165113][ T6074] kernel_misc_reclaimable:0 [ 56.165113][ T6074] free:473716 free_pcp:16844 free_cma:0 [ 56.202142][ T6074] Node 0 active_anon:38776kB inactive_anon:0kB active_file:10036kB inactive_file:162104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103388kB dirty:6408kB writeback:0kB shmem:14124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12464kB pagetables:4360kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 56.217508][ T6074] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:40kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 56.226993][ T6074] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 56.235718][ T6074] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 56.237584][ T6074] Node 0 DMA32 free:248792kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41876kB inactive_anon:0kB active_file:12888kB inactive_file:162104kB unevictable:3536kB writepending:6408kB present:2080628kB managed:1264736kB mlocked:0kB bounce:0kB free_pcp:58504kB local_pcp:11564kB free_cma:0kB [ 56.249159][ T6074] lowmem_reserve[]: 0 0 0 0 0 [ 56.250795][ T6074] Node 1 Normal free:1616816kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:40kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:12296kB local_pcp:3944kB free_cma:0kB [ 56.262794][ T6074] lowmem_reserve[]: 0 0 0 0 0 [ 56.264987][ T6074] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 56.269210][ T6074] Node 0 DMA32: 2*4kB (UE) 1*8kB (E) 0*16kB 2*32kB (ME) 0*64kB 2*128kB (ME) 2*256kB (ME) 4*512kB (UE) 4*1024kB (UME) 8*2048kB (UME) 54*4096kB (M) = 244560kB [ 56.274136][ T6074] Node 1 Normal: 2*4kB (E) 8*8kB (ME) 6*16kB (ME) 12*32kB (UME) 8*64kB (ME) 5*128kB (ME) 3*256kB (UE) 5*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 392*4096kB (M) = 1616808kB [ 56.280882][ T6074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.284738][ T6074] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 56.289000][ T6074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.292314][ T6074] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 56.295207][ T6074] 51340 total pagecache pages [ 56.296686][ T6074] 0 pages in swap cache [ 56.298596][ T6074] Free swap = 124996kB [ 56.300570][ T6074] Total swap = 124996kB [ 56.302377][ T6074] 1048443 pages RAM [ 56.303907][ T6074] 0 pages HighMem/MovableOnly [ 56.305857][ T6074] 282930 pages reserved [ 56.307815][ T6074] 0 pages cma reserved [ 56.382510][ T40] audit: type=1400 audit(1750611808.981:176): avc: denied { mounton } for pid=6095 comm="syz.1.24" path="/2/bus" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 56.397622][ T40] audit: type=1400 audit(1750611808.981:177): avc: denied { prog_run } for pid=6096 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.420402][ T6097] XFS (nullb0): Invalid superblock magic number [ 56.433480][ T40] audit: type=1400 audit(1750611809.031:178): avc: denied { ioctl } for pid=6102 comm="syz.2.26" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.446054][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 56.451292][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'. [ 56.454812][ T40] audit: type=1400 audit(1750611809.051:179): avc: denied { create } for pid=6102 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.457902][ T6097] netlink: 'syz.1.24': attribute type 18 has an invalid length. [ 56.512567][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30'. [ 56.647677][ T6129] capability: warning: `syz.0.31' uses deprecated v2 capabilities in a way that may be insecure [ 56.685175][ T6129] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.705053][ T6142] binder: 6141:6142 ioctl c0306201 200000000080 returned -14 [ 56.935226][ T6154] gfs2: not a GFS2 filesystem [ 56.947359][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 56.997340][ T6011] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.077390][ T9] usb 8-1: device descriptor read/64, error -71 [ 57.147333][ T6011] usb 6-1: Using ep0 maxpacket: 16 [ 57.154939][ T6011] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 57.157790][ T6011] usb 6-1: config 0 has no interface number 0 [ 57.159822][ T6011] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.163270][ T6011] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 57.168510][ T6011] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 57.171441][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 57.174068][ T6011] usb 6-1: Product: syz [ 57.175485][ T6011] usb 6-1: SerialNumber: syz [ 57.178797][ T6011] usb 6-1: config 0 descriptor?? [ 57.188343][ T6011] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 57.191625][ T6011] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input6 [ 57.327345][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 57.397409][ T5936] Bluetooth: hci2: command tx timeout [ 57.397471][ T63] Bluetooth: hci0: command tx timeout [ 57.459842][ T6183] input: syz0 as /devices/virtual/input/input7 [ 57.466405][ T6184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6184 comm=syz.2.43 [ 57.473811][ T9] usb 8-1: device descriptor read/64, error -71 [ 57.477357][ T63] Bluetooth: hci3: command tx timeout [ 57.477376][ T5936] Bluetooth: hci1: command tx timeout [ 57.515561][ T6189] netlink: 'syz.2.46': attribute type 10 has an invalid length. [ 57.516703][ T6191] xt_hashlimit: invalid interval [ 57.520972][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.525168][ T6189] bridge_slave_1: left allmulticast mode [ 57.526984][ T6189] bridge_slave_1: left promiscuous mode [ 57.529528][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.535981][ T6189] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 57.561229][ T6193] 9pnet: Found fid 0 not clunked [ 57.588025][ T9] usb usb8-port1: attempt power cycle [ 57.630585][ T6198] netlink: 'syz.2.49': attribute type 4 has an invalid length. [ 57.816751][ T6207] tls_set_device_offload: netdev not found [ 57.890178][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 57.893043][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 57.914249][ T6215] syz.2.55 uses obsolete (PF_INET,SOCK_PACKET) [ 57.928301][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 57.957910][ T9] usb 8-1: device descriptor read/8, error -71 [ 58.207425][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 58.237968][ T9] usb 8-1: device descriptor read/8, error -71 [ 58.347571][ T9] usb usb8-port1: unable to enumerate USB device [ 58.796766][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 59.027170][ T6241] netlink: 64 bytes leftover after parsing attributes in process `syz.2.61'. [ 59.084475][ T6245] ceph: Path missing in source [ 59.269411][ T6250] trusted_key: syz.2.65 sent an empty control message without MSG_MORE. [ 59.478097][ T5936] Bluetooth: hci2: command tx timeout [ 59.478736][ T63] Bluetooth: hci0: command tx timeout [ 59.567638][ T63] Bluetooth: hci1: command tx timeout [ 59.567847][ T5936] Bluetooth: hci3: command tx timeout [ 59.827232][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.830561][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.833016][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.835430][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.837781][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.840631][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.843027][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.845411][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.847802][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.850415][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.872892][ T6011] usb 6-1: USB disconnect, device number 3 [ 59.874808][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 59.886294][ T6011] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 59.901185][ T6268] netlink: 'syz.1.69': attribute type 4 has an invalid length. [ 59.910843][ T6268] netlink: 'syz.1.69': attribute type 4 has an invalid length. [ 60.170503][ T6301] tipc: Started in network mode [ 60.172496][ T6301] tipc: Node identity 4eccf5b2db94, cluster identity 4711 [ 60.174824][ T6301] tipc: Enabled bearer , priority 0 [ 60.199379][ T6301] syzkaller0: entered promiscuous mode [ 60.201262][ T6301] syzkaller0: entered allmulticast mode [ 60.203461][ T6301] tipc: Resetting bearer [ 60.230085][ T6300] tipc: Resetting bearer [ 60.251242][ T6299] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 60.263618][ T6299] cramfs: wrong magic [ 60.305101][ T6306] ======================================================= [ 60.305101][ T6306] WARNING: The mand mount option has been deprecated and [ 60.305101][ T6306] and is ignored by this kernel. Remove the mand [ 60.305101][ T6306] option from the mount to silence this warning. [ 60.305101][ T6306] ======================================================= [ 60.839193][ T838] hid-generic 0005:10CF:0009.0002: unknown main item tag 0x0 [ 60.856738][ T838] hid-generic 0005:10CF:0009.0002: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 60.985016][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 60.985037][ T40] audit: type=1400 audit(1750611813.581:294): avc: denied { setopt } for pid=6327 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.993982][ T40] audit: type=1400 audit(1750611813.591:295): avc: denied { getopt } for pid=6327 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.025906][ T6300] tipc: Disabling bearer [ 61.059760][ T6330] netlink: 'syz.3.84': attribute type 4 has an invalid length. [ 61.117371][ T40] audit: type=1400 audit(1750611813.711:296): avc: denied { read write } for pid=6332 comm="syz.1.85" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.125099][ T40] audit: type=1400 audit(1750611813.721:297): avc: denied { open } for pid=6332 comm="syz.1.85" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.134103][ T40] audit: type=1400 audit(1750611813.721:298): avc: denied { ioctl } for pid=6332 comm="syz.1.85" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.141316][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.143741][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.146363][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.152550][ T40] audit: type=1400 audit(1750611813.751:299): avc: denied { accept } for pid=6332 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.181950][ T40] audit: type=1400 audit(1750611813.781:300): avc: denied { execute } for pid=6335 comm="syz.1.87" name="file1" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.182109][ T6336] process 'syz.1.87' launched './file1' with NULL argv: empty string added [ 61.193339][ T40] audit: type=1400 audit(1750611813.791:301): avc: denied { execute_no_trans } for pid=6335 comm="syz.1.87" path="/14/file1" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.257675][ T40] audit: type=1400 audit(1750611813.861:302): avc: denied { create } for pid=6341 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 61.263880][ T40] audit: type=1400 audit(1750611813.861:303): avc: denied { create } for pid=6341 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.300116][ T6346] netlink: 108 bytes leftover after parsing attributes in process `syz.2.90'. [ 61.303518][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 61.368484][ T6351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.91'. [ 61.440126][ T6363] vlan2: entered allmulticast mode [ 61.441774][ T6363] vlan1: entered allmulticast mode [ 61.443365][ T6363] veth0_vlan: entered allmulticast mode [ 61.505126][ T6369] macsec1: entered promiscuous mode [ 61.510850][ T6369] macsec1: entered allmulticast mode [ 61.605063][ T6380] netlink: 76 bytes leftover after parsing attributes in process `syz.2.99'. [ 61.916108][ T6408] binder: 6407:6408 ioctl 4018620d 200000000100 returned -22 [ 61.926789][ T6408] binder: 6407:6408 ioctl c0306201 200000000500 returned -14 [ 61.967984][ T6411] Zero length message leads to an empty skb [ 62.069288][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.072242][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 62.107810][ T6420] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.113'. [ 62.220084][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 62.224227][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.227780][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.231011][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 62.234366][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 62.237782][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.243715][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 62.246646][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.255004][ T9] usb 5-1: config 0 descriptor?? [ 62.260347][ T6436] xt_HMARK: spi-set and port-set can't be combined [ 62.277053][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 62.291014][ T6437] delete_channel: no stack [ 62.466698][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 62.528515][ T6447] policy can only be matched on NF_INET_PRE_ROUTING [ 62.528529][ T6447] unable to load match [ 62.748771][ T6452] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.879327][ T6457] warning: `syz.1.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.185817][ T6464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=6464 comm=syz.1.128 [ 63.261326][ T6467] xt_hashlimit: size too large, truncated to 1048576 [ 63.363499][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.131'. [ 63.381440][ T6471] netlink: 'syz.1.130': attribute type 10 has an invalid length. [ 63.383560][ T6475] [U] zͻi[27| [ 63.386748][ T6471] syz_tun: entered promiscuous mode [ 63.393249][ T6471] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 63.449947][ T6485] [U] B [ 63.474228][ T6488] mmap: syz.2.134 (6488) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.519492][ T6494] netlink: 'syz.2.137': attribute type 21 has an invalid length. [ 63.521945][ T6494] netlink: 152 bytes leftover after parsing attributes in process `syz.2.137'. [ 63.542476][ T6494] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 63.545820][ T1241] Bluetooth: hci4: Frame reassembly failed (-84) [ 63.548655][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.249573][ T6509] hfsplus: unable to find HFS+ superblock [ 64.392555][ T6517] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.147'. [ 64.798699][ T6529] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.804301][ T6529] binder: 6528:6529 ioctl c0306201 200000000640 returned -22 [ 64.823619][ T6120] usb 5-1: USB disconnect, device number 3 [ 64.832935][ T6531] netlink: 'syz.1.152': attribute type 21 has an invalid length. [ 64.833316][ T6120] usblp0: removed [ 65.075523][ T6553] use of bytesused == 0 is deprecated and will be removed in the future, [ 65.079344][ T6553] use the actual size instead. [ 65.132285][ T6558] pimreg: entered allmulticast mode [ 65.135294][ T6558] pimreg: left allmulticast mode [ 65.262465][ T6566] netlink: 'syz.1.162': attribute type 30 has an invalid length. [ 65.269090][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.373173][ T6579] netlink: 'syz.1.166': attribute type 20 has an invalid length. [ 65.387531][ T6581] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 65.464679][ T63] Bluetooth: Frame is too long (len 10, expected len 4) [ 65.490770][ T63] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 65.494844][ T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 65.494860][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.494868][ T63] Workqueue: hci2 hci_rx_work [ 65.494905][ T63] Call Trace: [ 65.494910][ T63] [ 65.494914][ T63] dump_stack_lvl+0x16c/0x1f0 [ 65.494932][ T63] sysfs_warn_dup+0x7f/0xa0 [ 65.494951][ T63] sysfs_create_dir_ns+0x24b/0x2b0 [ 65.494964][ T63] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 65.494977][ T63] ? find_held_lock+0x2b/0x80 [ 65.494993][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 65.495006][ T63] kobject_add_internal+0x2c4/0x9b0 [ 65.495025][ T63] kobject_add+0x16e/0x240 [ 65.495036][ T63] ? __pfx_kobject_add+0x10/0x10 [ 65.495046][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 65.495057][ T63] ? kobject_put+0xab/0x5a0 [ 65.495075][ T63] device_add+0x288/0x1a70 [ 65.495092][ T63] ? __pfx_dev_set_name+0x10/0x10 [ 65.495102][ T63] ? __pfx_device_add+0x10/0x10 [ 65.495117][ T63] ? mgmt_send_event_skb+0x2fb/0x460 [ 65.495135][ T63] hci_conn_add_sysfs+0x17e/0x230 [ 65.495151][ T63] le_conn_complete_evt+0x1075/0x1d70 [ 65.495169][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 65.495182][ T63] ? hci_event_packet+0x459/0x11c0 [ 65.495200][ T63] hci_le_conn_complete_evt+0x23c/0x370 [ 65.495217][ T63] hci_le_meta_evt+0x357/0x5e0 [ 65.495232][ T63] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 65.495248][ T63] hci_event_packet+0x682/0x11c0 [ 65.495262][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 65.495278][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 65.495293][ T63] ? kcov_remote_start+0x3c9/0x6d0 [ 65.495305][ T63] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.495321][ T63] hci_rx_work+0x2c5/0x16b0 [ 65.495337][ T63] ? rcu_is_watching+0x12/0xc0 [ 65.495351][ T63] process_one_work+0x9cc/0x1b70 [ 65.495367][ T63] ? __pfx_process_one_work+0x10/0x10 [ 65.495381][ T63] ? assign_work+0x1a0/0x250 [ 65.495397][ T63] worker_thread+0x6c8/0xf10 [ 65.495413][ T63] ? __pfx_worker_thread+0x10/0x10 [ 65.495423][ T63] kthread+0x3c2/0x780 [ 65.495432][ T63] ? __pfx_kthread+0x10/0x10 [ 65.495442][ T63] ? rcu_is_watching+0x12/0xc0 [ 65.495453][ T63] ? __pfx_kthread+0x10/0x10 [ 65.495463][ T63] ret_from_fork+0x5d4/0x6f0 [ 65.495477][ T63] ? __pfx_kthread+0x10/0x10 [ 65.495486][ T63] ret_from_fork_asm+0x1a/0x30 [ 65.495503][ T63] [ 65.495516][ T63] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 65.557391][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 65.558800][ T63] Bluetooth: hci2: failed to register connection device [ 65.672657][ T6612] mkiss: ax0: crc mode is auto. [ 65.850148][ T6614] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.861725][ T6614] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 65.888495][ T6614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.890634][ T6614] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 65.901420][ T6614] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.903547][ T6614] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 65.923794][ T6614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.925990][ T6614] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 65.987364][ T40] kauditd_printk_skb: 3897 callbacks suppressed [ 65.987376][ T40] audit: type=1326 audit(1750611818.581:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0d8e929 code=0x7ff00000 [ 65.997410][ T40] audit: type=1326 audit(1750611818.591:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0d8e929 code=0x7ff00000 [ 66.005052][ T40] audit: type=1326 audit(1750611818.591:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0d8e929 code=0x7ff00000 [ 66.012667][ T40] audit: type=1326 audit(1750611818.591:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0d8e929 code=0x7ff00000 [ 66.019768][ T40] audit: type=1326 audit(1750611818.591:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0d8e929 code=0x7ff00000 [ 66.026921][ T40] audit: type=1326 audit(1750611818.591:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0d8e929 code=0x7ff00000 [ 66.033893][ T40] audit: type=1326 audit(1750611818.591:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0d8e929 code=0x7ff00000 [ 66.041577][ T40] audit: type=1326 audit(1750611818.591:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0d8e929 code=0x7ff00000 [ 66.049089][ T40] audit: type=1326 audit(1750611818.591:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0d8e929 code=0x7ff00000 [ 66.057773][ T40] audit: type=1326 audit(1750611818.591:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0d8e929 code=0x7ff00000 [ 66.127432][ T1469] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 66.290307][ T1469] usb 5-1: No LPM exit latency info found, disabling LPM. [ 66.298703][ T1469] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 66.302501][ T1469] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 66.305862][ T1469] usb 5-1: config 1 interface 0 has no altsetting 0 [ 66.311866][ T6624] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 1, id = 0 [ 66.630849][ T6642] __nla_validate_parse: 4 callbacks suppressed [ 66.630861][ T6642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.191'. [ 66.763562][ T6646] usb usb8: usbfs: process 6646 (syz.1.193) did not claim interface 0 before use [ 66.778816][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 67.440102][ T6675] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.201'. [ 67.529694][ T6679] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 67.531945][ T6679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.535147][ T6679] vhci_hcd vhci_hcd.0: Device attached [ 67.548970][ T6680] vhci_hcd: connection closed [ 67.551316][ T1241] vhci_hcd: stop threads [ 67.555263][ T1241] vhci_hcd: release socket [ 67.557016][ T1241] vhci_hcd: disconnect device [ 67.620628][ T6688] syzkaller0: entered promiscuous mode [ 67.622797][ T6688] syzkaller0: entered allmulticast mode [ 68.481271][ T6701] dvmrp1: entered allmulticast mode [ 68.665369][ T6709] NILFS (loop3): device size too small [ 68.857854][ T6722] netlink: 'syz.3.216': attribute type 11 has an invalid length. [ 68.869118][ T1469] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.40 [ 68.873513][ T1469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.876411][ T1469] usb 5-1: Product: ࠬ [ 68.878779][ T1469] usb 5-1: Manufacturer: ࠇ [ 68.882303][ T1469] usb 5-1: can't set config #1, error -71 [ 68.885576][ T1469] usb 5-1: USB disconnect, device number 4 [ 69.048800][ T6737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.221'. [ 69.052581][ T6737] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 69.227832][ T6745] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 69.230956][ T6745] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 69.297574][ T1469] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.467439][ T1469] usb 5-1: Using ep0 maxpacket: 8 [ 69.471307][ T1469] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 69.474137][ T1469] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 69.477435][ T1469] usb 5-1: config 179 has no interface number 0 [ 69.479639][ T1469] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 69.482579][ T1469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.691819][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.695874][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.705338][ T29] usb 5-1: USB disconnect, device number 5 [ 69.959924][ T6781] overlay: Unknown parameter 'fsname' [ 69.964670][ T6781] netlink: 'syz.3.236': attribute type 4 has an invalid length. [ 69.969825][ T6781] netlink: 'syz.3.236': attribute type 4 has an invalid length. [ 70.262137][ T6787] netfs: Couldn't get user pages (rc=-14) [ 71.008385][ T6819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.249'. [ 71.052263][ T40] kauditd_printk_skb: 27149 callbacks suppressed [ 71.052274][ T40] audit: type=1400 audit(1750611823.651:31360): avc: denied { write } for pid=6823 comm="syz.0.251" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.070362][ T6824] program syz.0.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.073950][ T6824] program syz.0.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.077526][ T6824] program syz.0.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.103486][ T6826] Can't find a SQUASHFS superblock on nullb0 [ 71.161601][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.163789][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.334675][ T40] audit: type=1400 audit(1750611823.931:31361): avc: denied { setattr } for pid=6835 comm="syz.0.255" name="ttyS3" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 71.344682][ T40] audit: type=1400 audit(1750611823.941:31362): avc: denied { accept } for pid=6835 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.399804][ T6839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.256'. [ 71.403266][ T6839] netlink: 176 bytes leftover after parsing attributes in process `syz.2.256'. [ 71.406352][ T6839] ip6gretap0: entered promiscuous mode [ 71.408778][ T6839] netlink: 176 bytes leftover after parsing attributes in process `syz.2.256'. [ 71.501426][ T40] audit: type=1400 audit(1750611824.101:31363): avc: denied { create } for pid=6847 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.503281][ T6849] tmpfs: Invalid gid '0x00000000ffffffff' [ 71.508360][ T40] audit: type=1400 audit(1750611824.101:31364): avc: denied { getopt } for pid=6847 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.516377][ T40] audit: type=1400 audit(1750611824.101:31365): avc: denied { connect } for pid=6842 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.735259][ T6853] netlink: 84 bytes leftover after parsing attributes in process `syz.0.261'. [ 71.740094][ T6853] netlink: 'syz.0.261': attribute type 15 has an invalid length. [ 71.741138][ T40] audit: type=1400 audit(1750611824.341:31366): avc: denied { create } for pid=6864 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.742604][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'. [ 71.749786][ T40] audit: type=1400 audit(1750611824.351:31367): avc: denied { getopt } for pid=6864 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.775895][ T6870] trusted_key: encrypted_key: master key parameter is missing [ 71.783566][ T6873] trusted_key: encrypted_key: master key parameter is missing [ 71.786230][ T40] audit: type=1400 audit(1750611824.381:31368): avc: denied { getopt } for pid=6871 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.819792][ T6879] geneve2: entered promiscuous mode [ 71.821605][ T6879] geneve2: entered allmulticast mode [ 71.853544][ T40] audit: type=1400 audit(1750611824.451:31369): avc: denied { remount } for pid=6884 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.855189][ T6886] binder: Binderfs stats mode cannot be changed during a remount [ 72.124973][ T6914] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.174412][ T6920] capability: warning: `syz.3.283' uses 32-bit capabilities (legacy support in use) [ 72.213187][ T6922] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 72.236084][ T6922] veth5: entered promiscuous mode [ 72.298155][ T6928] block device autoloading is deprecated and will be removed. [ 72.345603][ T6932] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 72.349724][ T6932] overlayfs: overlapping lowerdir path [ 72.697512][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 72.867566][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 72.871949][ T29] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 72.876121][ T29] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 88 [ 72.884428][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.888451][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.891790][ T29] usb 8-1: Product: 絲凔㟜琹쿭䋮킕呋锂ا䢶衳㩋橼ᮽ [ 72.895492][ T29] usb 8-1: Manufacturer: 纮餤㙌鮵⇃⣷྽㑒ⶸᆽ⻙辅ꮐ㹾늦鄴୚庥쇤ュ놩썻⦐ﴅ欄ઐ蜆ഥ㆓ꉋᓎꋜ㹣㝷豧黗腋ꌊ폢褍ᰛ誟ﴻ౻봴䟉฿膑汱渗ￓ䰱ူ㢞좟䗞馮耜読庲硅⨜홆䡸ᐶ닧⮅巊꼡✃햩䛜陯᱁᧢鏡祖ࠗ떈ꈥ뉔药퇗蹩ᇜ＋槺ꭅ敎햍幹な誳ꠥ桕葘ꂓ갊媃쾰鹎骬焎熦 [ 72.909913][ T29] usb 8-1: SerialNumber: ḯ죟铒ﳂ鵿㟛輡⁆䒹趿䓷虰엾礸㙗⚁硁♜㑳븊︺擑蔽澔㌛롌騌︢☖箓鱥₣딢탶ｆ蒷ᑯᱶ뾨鰻틇 [ 73.121405][ T6945] netlink: 'syz.3.295': attribute type 4 has an invalid length. [ 73.123974][ T6945] netlink: 152 bytes leftover after parsing attributes in process `syz.3.295'. [ 73.128876][ T6945] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 73.141125][ T29] cdc_ncm 8-1:1.0: bind() failure [ 73.144927][ T29] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 73.147514][ T29] cdc_ncm 8-1:1.1: bind() failure [ 73.153191][ T29] usb 8-1: USB disconnect, device number 6 [ 73.171104][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'. [ 73.252339][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 73.252350][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 73.255830][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 73.263016][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 73.348651][ T7001] loop6: detected capacity change from 0 to 4 [ 73.500353][ T7012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.607752][ T7022] tipc: Started in network mode [ 73.612552][ T7022] tipc: Node identity ce5e0a1371ed, cluster identity 4711 [ 73.614901][ T7022] tipc: Enabled bearer , priority 0 [ 73.620532][ T7022] syzkaller0: MTU too low for tipc bearer [ 73.622339][ T7022] tipc: Disabling bearer [ 73.710663][ T7040] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 73.871971][ T7067] ptrace attach of "/syz-executor exec"[5942] was attempted by "/syz-executor exec"[7067] [ 73.997402][ T6011] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 74.127453][ T24] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 74.147411][ T6011] usb 8-1: Using ep0 maxpacket: 16 [ 74.151192][ T6011] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 74.153695][ T6011] usb 8-1: config 0 has no interface number 0 [ 74.155630][ T6011] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 74.159215][ T6011] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 74.163555][ T6011] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 74.166610][ T6011] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 74.167374][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 74.170275][ T6011] usb 8-1: Product: syz [ 74.172836][ T6011] usb 8-1: SerialNumber: syz [ 74.175568][ T6011] usb 8-1: config 0 descriptor?? [ 74.179137][ T6011] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 74.182000][ T6011] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input9 [ 74.279473][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 74.282285][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 74.287468][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.292026][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 74.295523][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 74.300160][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 74.302657][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 74.306015][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.309654][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 74.313269][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 74.318067][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 74.319979][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 74.320761][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 74.325847][ T29] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 74.326165][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.330567][ T29] usb 5-1: config 0 has no interface number 0 [ 74.333200][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 74.338471][ T29] usb 5-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= 6.37 [ 74.339414][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 74.343470][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.349723][ T24] usb 7-1: string descriptor 0 read error: -22 [ 74.350364][ T29] usb 5-1: Product: syz [ 74.352312][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 74.354004][ T29] usb 5-1: Manufacturer: syz [ 74.354018][ T29] usb 5-1: SerialNumber: syz [ 74.357575][ T29] usb 5-1: config 0 descriptor?? [ 74.358452][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.377483][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 74.435511][ T7083] input: syz0 as /devices/virtual/input/input10 [ 74.575857][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.580120][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.599028][ T53] usb 7-1: USB disconnect, device number 2 [ 74.681649][ T7087] netlink: 'syz.2.338': attribute type 5 has an invalid length. [ 74.686353][ T7087] netlink: 'syz.2.338': attribute type 5 has an invalid length. [ 74.713017][ T6120] usb 5-1: USB disconnect, device number 6 [ 74.791851][ T7094] netlink: 'syz.2.340': attribute type 7 has an invalid length. [ 75.075085][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 75.478725][ T7124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7124 comm=syz.1.351 [ 75.884993][ T7147] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.357'. [ 76.149575][ T7155] bridge1: entered promiscuous mode [ 76.419472][ T53] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.433208][ T7166] binder: 7165:7166 ioctl c0306201 0 returned -14 [ 76.433259][ T7167] netlink: 'syz.1.364': attribute type 2 has an invalid length. [ 76.562394][ T7171] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 76.569487][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 76.577037][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.581642][ T53] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 76.585826][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.590236][ T53] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 76.593190][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.597103][ T53] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 76.600027][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.604487][ T53] usb 5-1: config 0 descriptor?? [ 76.638525][ T7174] netlink: 'syz.1.367': attribute type 11 has an invalid length. [ 76.640994][ T7174] netlink: 'syz.1.367': attribute type 4 has an invalid length. [ 76.719796][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 76.719848][ T40] audit: type=1400 audit(1750611829.321:31400): avc: denied { ioctl } for pid=7178 comm="syz.1.369" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 76.725518][ T7179] xt_hashlimit: max too large, truncated to 1048576 [ 76.733847][ T7179] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 76.782545][ C2] cm109_urb_ctl_callback: 90 callbacks suppressed [ 76.782559][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 76.782883][ T9] usb 8-1: USB disconnect, device number 7 [ 76.785058][ C2] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 76.805545][ T7183] netlink: 'syz.1.372': attribute type 25 has an invalid length. [ 76.817730][ T53] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 76.820073][ T9] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 76.844712][ T40] audit: type=1400 audit(1750611829.441:31401): avc: denied { execute } for pid=7182 comm="syz.1.372" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 76.949299][ T40] audit: type=1400 audit(1750611829.551:31402): avc: denied { create } for pid=7196 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 76.957166][ T7197] SELinux: policydb version 660900514 does not match my version range 15-34 [ 76.961829][ T40] audit: type=1400 audit(1750611829.551:31403): avc: denied { load_policy } for pid=7196 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.966808][ T7197] SELinux: failed to load policy [ 77.021152][ T40] audit: type=1400 audit(1750611829.621:31404): avc: denied { read } for pid=7203 comm="syz.2.378" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.032882][ T40] audit: type=1400 audit(1750611829.621:31405): avc: denied { open } for pid=7203 comm="syz.2.378" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.044988][ T40] audit: type=1400 audit(1750611829.621:31406): avc: denied { bind } for pid=7205 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.054340][ T40] audit: type=1400 audit(1750611829.621:31407): avc: denied { ioctl } for pid=7203 comm="syz.2.378" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.069410][ T7208] tc_dump_action: action bad kind [ 77.115498][ T7215] __nla_validate_parse: 3 callbacks suppressed [ 77.115514][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'. [ 77.159341][ T7221] netlink: 56 bytes leftover after parsing attributes in process `syz.1.382'. [ 77.177903][ T53] usb 5-1: USB disconnect, device number 7 [ 77.193071][ T53] usblp0: removed [ 77.197121][ T7221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7221 comm=syz.1.382 [ 77.208538][ T40] audit: type=1400 audit(1750611829.811:31408): avc: denied { create } for pid=7227 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 77.215130][ T40] audit: type=1400 audit(1750611829.811:31409): avc: denied { getopt } for pid=7227 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 77.485567][ T7254] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 77.488754][ T7254] hsr_slave_0: entered allmulticast mode [ 77.491149][ T7254] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 77.506135][ T7257] netlink: 172 bytes leftover after parsing attributes in process `syz.0.393'. [ 77.510178][ T7256] netlink: 172 bytes leftover after parsing attributes in process `syz.0.393'. [ 77.523573][ T7259] TCP: TCP_TX_DELAY enabled [ 77.550073][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 77.620781][ T7266] netlink: 33 bytes leftover after parsing attributes in process `syz.3.396'. [ 77.773210][ T7271] netlink: 'syz.3.397': attribute type 10 has an invalid length. [ 77.781439][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.785141][ T7271] team0: Port device bond0 added [ 77.875132][ T7278] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.400'. [ 77.956980][ T7288] sctp: [Deprecated]: syz.3.404 (pid 7288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.956980][ T7288] Use struct sctp_sack_info instead [ 78.011868][ T7292] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 78.148448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.157619][ T7300] netlink: 232 bytes leftover after parsing attributes in process `syz.3.407'. [ 78.157619][ T7299] netlink: 232 bytes leftover after parsing attributes in process `syz.3.407'. [ 78.161319][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 78.616349][ T7340] overlay: filesystem on ./bus not supported [ 78.650867][ T7345] 9pnet_fd: Insufficient options for proto=fd [ 78.737207][ T7350] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 78.754121][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.758998][ T7350] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 78.764078][ T7350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.767592][ T7350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.773780][ T7350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.776387][ T7350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.790419][ T7350] bond0: (slave batadv0): Releasing backup interface [ 79.149467][ T7366] netlink: 'syz.3.427': attribute type 16 has an invalid length. [ 79.205692][ T7373] loop1: detected capacity change from 0 to 7 [ 79.214236][ T7373] Dev loop1: unable to read RDB block 7 [ 79.216585][ T7373] loop1: AHDI p4 [ 79.218155][ T7373] loop1: partition table partially beyond EOD, truncated [ 79.504362][ T7404] fuse: root generation should be zero [ 79.596324][ T7405] netlink: 'syz.0.440': attribute type 6 has an invalid length. [ 79.641245][ T7417] input: syz1 as /devices/virtual/input/input12 [ 79.967700][ T53] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 80.133326][ T53] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 80.137181][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.140626][ T53] usb 5-1: Product: syz [ 80.142302][ T53] usb 5-1: Manufacturer: syz [ 80.144369][ T53] usb 5-1: SerialNumber: syz [ 80.158436][ T53] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 80.190238][ T840] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 80.400988][ T6120] usb 5-1: USB disconnect, device number 8 [ 80.705049][ T7451] tipc: Enabling of bearer rejected, failed to enable media [ 81.052130][ T7471] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 81.054485][ T7471] syzkaller1: linktype set to 6 [ 81.201506][ T7490] dlm: Unknown command passed to DLM device : 255 [ 81.201506][ T7490] [ 81.247473][ T840] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 81.251591][ T840] ath9k_htc: Failed to initialize the device [ 81.265074][ T6120] usb 5-1: ath9k_htc: USB layer deinitialized [ 81.400244][ T1026] cfg80211: failed to load regulatory.db [ 81.555584][ T7518] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 81.770695][ T7534] xt_l2tp: missing protocol rule (udp|l2tpip) [ 81.791564][ T7537] netlink: 'syz.3.481': attribute type 3 has an invalid length. [ 81.829166][ T7544] netlink: 'syz.3.483': attribute type 5 has an invalid length. [ 81.832092][ T7544] netlink: 'syz.3.483': attribute type 12 has an invalid length. [ 81.897485][ T840] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.932671][ T7552] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 81.937604][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 81.937614][ T40] audit: type=1400 audit(1750611834.541:31448): avc: denied { create } for pid=7547 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 82.067310][ T840] usb 7-1: Using ep0 maxpacket: 16 [ 82.071252][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 82.076881][ T840] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 82.079800][ T840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.082347][ T840] usb 7-1: Product: syz [ 82.083667][ T840] usb 7-1: Manufacturer: syz [ 82.085975][ T840] usb 7-1: SerialNumber: syz [ 82.089456][ T840] usb 7-1: config 0 descriptor?? [ 82.097787][ T840] hub 7-1:0.0: bad descriptor, ignoring hub [ 82.099684][ T840] hub 7-1:0.0: probe with driver hub failed with error -5 [ 82.103363][ T840] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input13 [ 82.139562][ T7560] fuse: Bad value for 'rootmode' [ 82.141706][ T7559] fuse: Bad value for 'rootmode' [ 82.225913][ T7566] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 82.282196][ T5968] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 82.301734][ T7526] input: syz0 as /devices/virtual/input/input14 [ 82.328816][ T9] usb 7-1: USB disconnect, device number 3 [ 82.419458][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.421964][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.427329][ T5968] usb 6-1: device descriptor read/64, error -71 [ 82.466915][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.474161][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.513089][ T7573] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.516421][ T7573] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.523016][ T7573] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.526186][ T7573] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.667536][ T5968] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 82.795090][ T7589] __nla_validate_parse: 14 callbacks suppressed [ 82.795102][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'. [ 82.800068][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 82.808030][ T5968] usb 6-1: device descriptor read/64, error -71 [ 82.838474][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 82.841997][ T7593] bridge_slave_1: left allmulticast mode [ 82.844184][ T7593] bridge_slave_1: left promiscuous mode [ 82.846560][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.861364][ T7593] bridge_slave_0: left allmulticast mode [ 82.864096][ T7593] bridge_slave_0: left promiscuous mode [ 82.865973][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.917364][ T40] audit: type=1400 audit(1750611835.511:31449): avc: denied { append } for pid=7595 comm="syz.2.499" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.928641][ T5968] usb usb6-port1: attempt power cycle [ 83.285468][ T5968] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.308042][ T5968] usb 6-1: device descriptor read/8, error -71 [ 83.385404][ T7610] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 83.425832][ T7614] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 83.459425][ T7616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=7616 comm=syz.3.506 [ 83.547365][ T5968] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 83.569512][ T5968] usb 6-1: device descriptor read/8, error -71 [ 83.675659][ T7622] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 83.687924][ T5968] usb usb6-port1: unable to enumerate USB device [ 83.781602][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 83.784763][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 83.848499][ T40] audit: type=1400 audit(1750611836.451:31450): avc: denied { bind } for pid=7637 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.893454][ T40] audit: type=1400 audit(1750611836.491:31451): avc: denied { setopt } for pid=7632 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.016198][ T7653] loop2: detected capacity change from 0 to 7 [ 84.021299][ T7653] Dev loop2: unable to read RDB block 7 [ 84.023112][ T7653] loop2: unable to read partition table [ 84.025233][ T7653] loop2: partition table beyond EOD, truncated [ 84.028335][ T7653] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 84.035678][ T7653] xfrm0 speed is unknown, defaulting to 1000 [ 84.039916][ T7653] xfrm0 speed is unknown, defaulting to 1000 [ 84.043294][ T7653] xfrm0 speed is unknown, defaulting to 1000 [ 84.049632][ T7653] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.051060][ T7655] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 84.055731][ T7653] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.075967][ T7653] xfrm0 speed is unknown, defaulting to 1000 [ 84.078872][ T7653] xfrm0 speed is unknown, defaulting to 1000 [ 84.092677][ T7653] xfrm0 speed is unknown, defaulting to 1000 [ 84.095535][ T7653] xfrm0 speed is unknown, defaulting to 1000 [ 84.126024][ T40] audit: type=1400 audit(1750611836.721:31452): avc: denied { setattr } for pid=7661 comm="syz.0.520" name="NETLINK" dev="sockfs" ino=18028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.236614][ T7676] netlink: 60 bytes leftover after parsing attributes in process `syz.3.523'. [ 84.244556][ T7678] netlink: 'syz.0.524': attribute type 27 has an invalid length. [ 84.251607][ T7678] bridge1: left promiscuous mode [ 84.268180][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.270903][ T7678] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.275410][ T7678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.283906][ T7678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.524'. [ 84.387823][ T40] audit: type=1400 audit(1750611836.991:31453): avc: denied { getopt } for pid=7680 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.448809][ T7686] netlink: zone id is out of range [ 84.450490][ T7686] netlink: zone id is out of range [ 84.452075][ T7686] netlink: zone id is out of range [ 84.454504][ T7686] netlink: zone id is out of range [ 84.459076][ T7686] netlink: zone id is out of range [ 84.460806][ T7686] netlink: zone id is out of range [ 84.462520][ T7686] netlink: zone id is out of range [ 84.525206][ T7691] netlink: 'syz.0.529': attribute type 3 has an invalid length. [ 84.528661][ T7691] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 84.531086][ T7691] netlink: 216 bytes leftover after parsing attributes in process `syz.0.529'. [ 84.533860][ T7691] NCSI netlink: No device for ifindex 33022 [ 84.536411][ T7691] netlink: 96 bytes leftover after parsing attributes in process `syz.0.529'. [ 84.562757][ T7693] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 84.610092][ T40] audit: type=1400 audit(1750611837.211:31454): avc: denied { listen } for pid=7694 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.616284][ T40] audit: type=1400 audit(1750611837.211:31455): avc: denied { listen } for pid=7694 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.964742][ T40] audit: type=1400 audit(1750611837.561:31456): avc: denied { bind } for pid=7702 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.973087][ T40] audit: type=1400 audit(1750611837.561:31457): avc: denied { listen } for pid=7702 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.976860][ T7703] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 84.984584][ T7703] netlink: 'syz.0.533': attribute type 2 has an invalid length. [ 85.094344][ T7710] netlink: 'syz.3.536': attribute type 10 has an invalid length. [ 85.108767][ T7710] hsr0: entered promiscuous mode [ 85.114927][ T7710] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 85.121664][ T7710] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 85.126848][ T7710] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 85.159875][ T7718] netlink: 60 bytes leftover after parsing attributes in process `syz.1.538'. [ 85.276855][ T7732] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 85.276855][ T7732] The task syz.0.540 (7732) triggered the difference, watch for misbehavior. [ 85.417707][ T7742] No source specified [ 85.504183][ T7744] gretap1: entered allmulticast mode [ 85.507096][ T7744] bridge0: port 3(gretap1) entered blocking state [ 85.511503][ T7744] bridge0: port 3(gretap1) entered disabled state [ 85.514818][ T7744] gretap1: entered promiscuous mode [ 85.517139][ T7744] bridge0: port 3(gretap1) entered blocking state [ 85.519936][ T7744] bridge0: port 3(gretap1) entered forwarding state [ 85.617648][ T7747] xt_l2tp: v2 doesn't support IP mode [ 86.142334][ T7754] xt_NFQUEUE: number of total queues is 0 [ 86.329115][ T7757] can0: slcan on ttyS3. [ 86.378927][ T7756] can0 (unregistered): slcan off ttyS3. [ 86.447392][ T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 86.611150][ T53] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.614243][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.616668][ T53] usb 6-1: Product: syz [ 86.618164][ T53] usb 6-1: Manufacturer: syz [ 86.619539][ T53] usb 6-1: SerialNumber: syz [ 86.623990][ T53] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 86.635948][ T6692] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.677661][ T1026] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 86.737469][ T7777] kvm: pic: non byte write [ 86.837441][ T1026] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 86.837560][ T840] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 86.840728][ T1026] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.843515][ T9] usb 6-1: USB disconnect, device number 8 [ 86.844973][ T1026] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.846865][ T7782] trusted_key: encrypted_key: insufficient parameters specified [ 86.850601][ T1026] usb 7-1: config 0 interface 0 has no altsetting 0 [ 86.851449][ T1026] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.858227][ T1026] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.861544][ T1026] usb 7-1: config 0 interface 0 has no altsetting 0 [ 86.864421][ T1026] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.867231][ T1026] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.871088][ T1026] usb 7-1: config 0 interface 0 has no altsetting 0 [ 86.874144][ T1026] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.876960][ T1026] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.880849][ T1026] usb 7-1: config 0 interface 0 has no altsetting 0 [ 86.884053][ T1026] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.886838][ T1026] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.890863][ T1026] usb 7-1: config 0 interface 0 has no altsetting 0 [ 86.893712][ T1026] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.896441][ T1026] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.901159][ T1026] usb 7-1: config 0 interface 0 has no altsetting 0 [ 86.904557][ T1026] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.907933][ T1026] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.912218][ T1026] usb 7-1: config 0 interface 0 has no altsetting 0 [ 86.916000][ T1026] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.920064][ T1026] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.924414][ T1026] usb 7-1: config 0 interface 0 has no altsetting 0 [ 86.929228][ T1026] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 86.932903][ T1026] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 86.936225][ T1026] usb 7-1: Product: syz [ 86.940535][ T1026] usb 7-1: Manufacturer: syz [ 86.942442][ T1026] usb 7-1: SerialNumber: syz [ 86.946529][ T1026] usb 7-1: config 0 descriptor?? [ 86.952431][ T1026] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 86.967454][ T840] usb 5-1: device descriptor read/64, error -71 [ 87.137573][ T29] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 87.151700][ T1026] usb 7-1: USB disconnect, device number 4 [ 87.158254][ T1026] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 87.217390][ T840] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 87.302247][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 87.302313][ T40] audit: type=1400 audit(1750611839.901:31465): avc: denied { setopt } for pid=7781 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 87.347376][ T840] usb 5-1: device descriptor read/64, error -71 [ 87.364701][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 87.369591][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 87.372530][ T29] usb 8-1: can't read configurations, error -71 [ 87.467597][ T840] usb usb5-port1: attempt power cycle [ 87.692309][ T40] audit: type=1400 audit(1750611840.291:31466): avc: denied { getopt } for pid=7809 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.726617][ T7814] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 87.727441][ T6692] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 87.737501][ T6692] ath9k_htc: Failed to initialize the device [ 87.737683][ T7814] CIFS: Unable to determine destination address [ 87.741558][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 87.807405][ T840] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 87.828081][ T840] usb 5-1: device descriptor read/8, error -71 [ 88.060715][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.066819][ T7837] syz.2.574: attempt to access beyond end of device [ 88.066819][ T7837] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 88.071857][ T7837] syz.2.574: attempt to access beyond end of device [ 88.071857][ T7837] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 88.076867][ T7837] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 88.080510][ T7837] syz.2.574: attempt to access beyond end of device [ 88.080510][ T7837] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 88.087411][ T7837] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 88.087717][ T840] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 88.099008][ T7837] syz.2.574: attempt to access beyond end of device [ 88.099008][ T7837] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 88.106099][ T7837] syz.2.574: attempt to access beyond end of device [ 88.106099][ T7837] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 88.113577][ T7837] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 88.118011][ T7837] syz.2.574: attempt to access beyond end of device [ 88.118011][ T7837] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 88.122095][ T7837] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 88.125720][ T7837] syz.2.574: attempt to access beyond end of device [ 88.125720][ T7837] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 88.127931][ T840] usb 5-1: device descriptor read/8, error -71 [ 88.130334][ T7837] syz.2.574: attempt to access beyond end of device [ 88.130334][ T7837] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 88.136506][ T7837] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 88.143899][ T7837] syz.2.574: attempt to access beyond end of device [ 88.143899][ T7837] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 88.149739][ T7837] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 88.153953][ T7837] syz.2.574: attempt to access beyond end of device [ 88.153953][ T7837] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 88.158164][ T7837] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 88.161344][ T7837] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 88.164705][ T7837] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 88.247576][ T840] usb usb5-port1: unable to enumerate USB device [ 88.296412][ T7833] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.300404][ T7833] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.303060][ T7833] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.305686][ T7833] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.353447][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 88.356456][ T7840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.399118][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.565765][ T40] audit: type=1400 audit(1750611841.161:31467): avc: denied { create } for pid=7843 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.652119][ T7847] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 88.740980][ T40] audit: type=1400 audit(1750611841.341:31468): avc: denied { ioctl } for pid=7843 comm="syz.3.578" path="socket:[20499]" dev="sockfs" ino=20499 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.803139][ T40] audit: type=1400 audit(1750611841.401:31469): avc: denied { connect } for pid=7853 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.997400][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 89.127438][ T9] usb 8-1: device descriptor read/64, error -71 [ 89.238851][ T40] audit: type=1400 audit(1750611841.841:31470): avc: denied { mounton } for pid=7870 comm="syz.2.583" path="/proc/410/task" dev="proc" ino=19419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 89.247931][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 89.250811][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 89.253565][ T7871] netlink: 'syz.2.583': attribute type 13 has an invalid length. [ 89.290352][ T40] audit: type=1400 audit(1750611841.891:31471): avc: denied { bind } for pid=7872 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.296224][ T40] audit: type=1400 audit(1750611841.891:31472): avc: denied { node_bind } for pid=7872 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 89.368746][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 89.497408][ T9] usb 8-1: device descriptor read/64, error -71 [ 89.508159][ T40] audit: type=1400 audit(1750611842.111:31473): avc: denied { write } for pid=7886 comm="syz.1.589" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 89.607810][ T9] usb usb8-port1: attempt power cycle [ 89.695450][ T40] audit: type=1400 audit(1750611842.291:31474): avc: denied { setopt } for pid=7902 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.884324][ T7923] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 89.886691][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 89.944000][ T7932] xfrm0 speed is unknown, defaulting to 1000 [ 89.948779][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 89.968454][ T9] usb 8-1: device descriptor read/8, error -71 [ 89.978729][ T7937] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 90.000478][ T7937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.049902][ T7946] IPv6: sit1: Disabled Multicast RS [ 90.052069][ T7946] sit1: entered allmulticast mode [ 90.217370][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 90.238206][ T9] usb 8-1: device descriptor read/8, error -71 [ 90.256670][ T7949] netlink: 'syz.0.608': attribute type 2 has an invalid length. [ 90.259859][ T7949] netlink: 46 bytes leftover after parsing attributes in process `syz.0.608'. [ 90.347559][ T9] usb usb8-port1: unable to enumerate USB device [ 90.353698][ T7956] program syz.2.611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.498456][ T7966] netlink: 44 bytes leftover after parsing attributes in process `syz.2.616'. [ 90.501480][ T7966] netlink: 'syz.2.616': attribute type 6 has an invalid length. [ 90.504260][ T7966] netlink: 'syz.2.616': attribute type 5 has an invalid length. [ 90.507169][ T7966] netlink: 'syz.2.616': attribute type 4 has an invalid length. [ 90.512064][ T7967] netlink: 44 bytes leftover after parsing attributes in process `syz.2.616'. [ 90.515803][ T7967] netlink: 'syz.2.616': attribute type 6 has an invalid length. [ 90.519073][ T7967] netlink: 'syz.2.616': attribute type 5 has an invalid length. [ 90.522310][ T7967] netlink: 'syz.2.616': attribute type 4 has an invalid length. [ 90.527818][ T7966] net_ratelimit: 19 callbacks suppressed [ 90.527829][ T7966] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 90.534698][ T7967] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 90.551438][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 90.554371][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 90.603947][ T7971] netlink: 48 bytes leftover after parsing attributes in process `syz.2.617'. [ 91.191085][ T8021] xt_l2tp: v2 sid > 0xffff: 150994944 [ 91.446192][ T8053] 9pnet_fd: Insufficient options for proto=fd [ 91.487389][ T839] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 91.518393][ T6692] libceph: connect (1)[c::]:6789 error -22 [ 91.518398][ T24] libceph: connect (1)[c::]:6789 error -22 [ 91.518703][ T6692] libceph: mon0 (1)[c::]:6789 connect error [ 91.520491][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 91.526753][ T6692] libceph: connect (1)[c::]:6789 error -22 [ 91.530223][ T6692] libceph: mon0 (1)[c::]:6789 connect error [ 91.532029][ T24] libceph: connect (1)[c::]:6789 error -22 [ 91.533318][ T8064] loop6: detected capacity change from 0 to 63 [ 91.534247][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 91.540666][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.543595][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.546388][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.549345][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.552082][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.554919][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.559896][ T8064] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 91.562616][ T8064] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 91.565362][ T8064] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 91.568506][ T8064] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 91.648701][ T839] usb 5-1: Using ep0 maxpacket: 8 [ 91.662376][ T839] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 91.665839][ T839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.681769][ T839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.694797][ T839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.699904][ T839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.705377][ T839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.709604][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.773350][ T8073] program syz.2.643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.789284][ T6692] libceph: connect (1)[c::]:6789 error -22 [ 91.791348][ T6692] libceph: mon0 (1)[c::]:6789 connect error [ 91.808056][ T24] libceph: connect (1)[c::]:6789 error -22 [ 91.813364][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 91.860166][ T8078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8078 comm=syz.2.644 [ 91.861059][ T8079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8079 comm=syz.2.644 [ 91.928072][ T839] usb 5-1: usb_control_msg returned -32 [ 91.930042][ T839] usbtmc 5-1:16.0: can't read capabilities [ 92.190585][ T8092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.193149][ T8092] IPv6: NLM_F_CREATE should be set when creating new route [ 92.195417][ T8092] IPv6: NLM_F_CREATE should be set when creating new route [ 92.299509][ T6692] libceph: connect (1)[c::]:6789 error -22 [ 92.301436][ T8096] usbtmc 5-1:16.0: usb_bulk_msg returned -71 [ 92.304406][ T6692] libceph: mon0 (1)[c::]:6789 connect error [ 92.327862][ T24] libceph: connect (1)[c::]:6789 error -22 [ 92.330397][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 92.337705][ T8063] ceph: No mds server is up or the cluster is laggy [ 92.337849][ T8062] ceph: No mds server is up or the cluster is laggy [ 92.437368][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 92.437380][ T40] audit: type=1400 audit(1750611845.031:31486): avc: denied { write } for pid=8104 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.476843][ T8112] overlay: ./bus is not a directory [ 92.493034][ T40] audit: type=1400 audit(1750611845.091:31487): avc: denied { execute } for pid=8104 comm="syz.1.651" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.493353][ T8112] JFS: discard option not supported on device [ 92.505301][ T24] usb 5-1: USB disconnect, device number 13 [ 92.513234][ T8112] Mount JFS Failure: -5 [ 92.659300][ T40] audit: type=1400 audit(1750611845.261:31488): avc: denied { bind } for pid=8119 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.702924][ T40] audit: type=1326 audit(1750611845.301:31489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.2.657" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcda0d8e929 code=0x0 [ 92.754295][ T8129] usb usb8: usbfs: process 8129 (syz.2.657) did not claim interface 0 before use [ 93.103793][ T40] audit: type=1400 audit(1750611845.701:31490): avc: denied { associate } for pid=8138 comm="syz.0.662" name="cpu.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.168273][ T29] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 93.327780][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 93.338250][ T29] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 93.341387][ T29] usb 8-1: config 0 has no interface number 0 [ 93.344409][ T29] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.348285][ T29] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 93.352739][ T29] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 93.357910][ T29] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 93.360780][ T29] usb 8-1: Product: syz [ 93.362083][ T29] usb 8-1: SerialNumber: syz [ 93.364752][ T29] usb 8-1: config 0 descriptor?? [ 93.371520][ T29] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 93.374586][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input18 [ 93.578452][ T40] audit: type=1400 audit(1750611846.181:31491): avc: denied { create } for pid=8152 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.581440][ T8153] __nla_validate_parse: 7 callbacks suppressed [ 93.581450][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 93.588118][ T40] audit: type=1400 audit(1750611846.181:31492): avc: denied { write } for pid=8152 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.592020][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'. [ 93.592898][ T40] audit: type=1400 audit(1750611846.181:31493): avc: denied { nlmsg_write } for pid=8152 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.666022][ T8156] kvm: pic: single mode not supported [ 93.666178][ T8156] kvm: pic: level sensitive irq not supported [ 93.677304][ T8156] kvm: pic: level sensitive irq not supported [ 93.681605][ T8156] kvm: pic: single mode not supported [ 93.684210][ T8156] kvm: pic: level sensitive irq not supported [ 93.687588][ T8156] kvm: pic: single mode not supported [ 93.690538][ T8156] kvm: pic: level sensitive irq not supported [ 93.693276][ T8156] kvm: pic: single mode not supported [ 93.695873][ T8156] kvm: pic: level sensitive irq not supported [ 93.699348][ T8156] kvm: pic: single mode not supported [ 93.702217][ T8156] kvm: pic: single mode not supported [ 93.704500][ T8156] kvm: pic: level sensitive irq not supported [ 93.707741][ T8156] kvm: pic: single mode not supported [ 93.710366][ T8156] kvm: pic: level sensitive irq not supported [ 93.714097][ T8156] kvm: pic: single mode not supported [ 93.716652][ T8156] kvm: pic: level sensitive irq not supported [ 93.719454][ T8156] kvm: pic: single mode not supported [ 93.722065][ T8156] kvm: pic: level sensitive irq not supported [ 93.724735][ T8156] kvm: pic: single mode not supported [ 93.727181][ T8156] kvm: pic: level sensitive irq not supported [ 93.916374][ T1147] tipc: Subscription rejected, illegal request [ 93.917043][ T40] audit: type=1400 audit(1750611846.511:31494): avc: denied { read } for pid=8159 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.929438][ T8159] block nbd2: shutting down sockets [ 94.052116][ T8166] fuse: Bad value for 'fd' [ 94.059565][ T8166] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000009 [ 94.115561][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 94.154486][ T8174] netlink: 132 bytes leftover after parsing attributes in process `syz.2.675'. [ 94.187664][ T40] audit: type=1400 audit(1750611846.781:31495): avc: denied { ioctl } for pid=8175 comm="syz.1.677" path="socket:[21918]" dev="sockfs" ino=21918 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.345722][ T8194] netlink: 45 bytes leftover after parsing attributes in process `syz.2.683'. [ 94.352354][ T9] Process accounting resumed [ 95.191754][ T8208] PKCS8: Unsupported PKCS#8 version [ 95.226409][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 95.281312][ T8219] macvlan0: entered promiscuous mode [ 95.283270][ T8219] macvlan0: entered allmulticast mode [ 95.285140][ T8219] veth1_vlan: entered allmulticast mode [ 95.334785][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 95.338653][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.694'. [ 95.524273][ T8215] syzkaller0: entered promiscuous mode [ 95.526303][ T8215] syzkaller0: entered allmulticast mode [ 95.609337][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.700'. [ 95.900001][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.902528][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.905028][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.907353][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.909704][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.912007][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.914202][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.916467][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.919009][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.921348][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.927316][ T29] usb 8-1: USB disconnect, device number 14 [ 95.929183][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 95.945047][ T29] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 96.482656][ T8254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.701'. [ 96.599593][ T8263] openvswitch: netlink: Duplicate or invalid key (type 0). [ 96.601943][ T8263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.613552][ T8263] : renamed from bridge_slave_0 (while UP) [ 96.725130][ T8250] openvswitch: netlink: IP tunnel dst address not specified [ 96.975824][ T8289] : entered promiscuous mode [ 97.107818][ T29] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 97.257627][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 97.260883][ T29] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 97.263343][ T29] usb 8-1: config 0 has no interface number 0 [ 97.265609][ T29] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.269498][ T29] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 97.275403][ T29] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 97.279410][ T29] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 97.284017][ T29] usb 8-1: Product: syz [ 97.285398][ T29] usb 8-1: SerialNumber: syz [ 97.288349][ T29] usb 8-1: config 0 descriptor?? [ 97.291967][ T29] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 97.296350][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input20 [ 97.692690][ T8333] tmpfs: Unknown parameter 'mo000000C/; 鉉7Nk*s00000000000000' [ 97.699647][ T8334] tmpfs: Unknown parameter 'mo000000C/; 鉉7Nk*s00000000000000' [ 97.776781][ T8350] vlan0: entered promiscuous mode [ 97.783855][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 97.783865][ T40] audit: type=1400 audit(1750611850.381:31510): avc: denied { write } for pid=8347 comm="syz.0.727" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.785077][ T8350] loop4: detected capacity change from 0 to 7 [ 97.798464][ T8350] Dev loop4: unable to read RDB block 7 [ 97.800653][ T8350] loop4: unable to read partition table [ 97.802937][ T8350] loop4: partition table beyond EOD, truncated [ 97.805099][ T8350] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 97.890530][ T8370] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 97.914852][ T8374] 9pnet_fd: Insufficient options for proto=fd [ 97.969105][ T8386] validate_nla: 2 callbacks suppressed [ 97.969116][ T8386] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 97.985291][ T8386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.038947][ T40] audit: type=1400 audit(1750611850.641:31511): avc: denied { write } for pid=8395 comm="syz.0.742" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.059558][ T40] audit: type=1400 audit(1750611850.651:31512): avc: denied { ioctl } for pid=8395 comm="syz.0.742" path="/dev/usbmon6" dev="devtmpfs" ino=756 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.113128][ T8396] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 98.276256][ T8414] netpci0: tun_chr_ioctl cmd 1074025672 [ 98.278606][ T8414] netpci0: ignored: set checksum disabled [ 98.287841][ T8414] input: syz0 as /devices/virtual/input/input21 [ 98.398618][ T8418] netlink: 'syz.1.748': attribute type 3 has an invalid length. [ 98.401053][ T8418] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 98.403436][ T8418] NCSI netlink: No device for ifindex 0 [ 98.415081][ T8420] syz_tun: entered allmulticast mode [ 98.423715][ T8420] bio_check_eod: 4 callbacks suppressed [ 98.423726][ T8420] syz.2.749: attempt to access beyond end of device [ 98.423726][ T8420] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 98.431658][ T8420] (syz.2.749,8420,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 98.433941][ T8420] (syz.2.749,8420,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 98.436302][ T8420] (syz.2.749,8420,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 98.441624][ T8420] (syz.2.749,8420,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 98.449693][ T8419] syz_tun: left allmulticast mode [ 98.461920][ T40] audit: type=1400 audit(1750611851.061:31513): avc: denied { getopt } for pid=8421 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.478941][ T40] audit: type=1400 audit(1750611851.081:31514): avc: denied { setattr } for pid=8421 comm="syz.1.750" name="LLC" dev="sockfs" ino=22225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.494975][ T40] audit: type=1400 audit(1750611851.091:31515): avc: denied { ioctl } for pid=8421 comm="syz.1.750" path="socket:[22225]" dev="sockfs" ino=22225 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.859176][ T8442] __nla_validate_parse: 8 callbacks suppressed [ 98.859192][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 98.957317][ T6692] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 99.099286][ T8449] Bluetooth: MGMT ver 1.23 [ 99.101414][ T8449] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 99.104845][ T8450] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 99.113588][ T8449] Invalid source name [ 99.114927][ T8449] UBIFS error (pid: 8449): cannot open "/dev/sg0", error -22 [ 99.117462][ T6692] usb 7-1: Using ep0 maxpacket: 32 [ 99.119038][ T6692] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.119059][ T6692] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.119077][ T6692] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.119113][ T6692] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.119132][ T6692] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.119152][ T6692] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.119186][ T6692] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.119205][ T6692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.122227][ T6692] usb 7-1: config 0 descriptor?? [ 99.282651][ T8452] 9pnet: Could not find request transport: tPp [ 99.365734][ T6692] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 99.527606][ T840] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 99.564221][ T40] audit: type=1400 audit(1750611852.161:31516): avc: denied { read write } for pid=8438 comm="syz.2.755" name="lp0" dev="devtmpfs" ino=3085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 99.571718][ T40] audit: type=1400 audit(1750611852.161:31517): avc: denied { open } for pid=8438 comm="syz.2.755" path="/dev/usb/lp0" dev="devtmpfs" ino=3085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 99.595225][ T29] usb 7-1: USB disconnect, device number 5 [ 99.599392][ T29] usblp0: removed [ 99.678838][ T840] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 99.681402][ T840] usb 5-1: config 0 has no interface number 0 [ 99.683449][ T840] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 99.686950][ T840] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 99.690648][ T840] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 99.694357][ T840] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 99.697952][ T840] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 99.701072][ T840] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.704989][ T840] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 99.707937][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.711694][ T840] usb 5-1: config 0 descriptor?? [ 99.713813][ T8452] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 99.719886][ T840] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 99.810420][ T840] usb 8-1: USB disconnect, device number 15 [ 99.810497][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 99.819357][ T840] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 99.855845][ T8460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.762'. [ 99.921029][ T8452] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 99.926297][ T29] usb 5-1: USB disconnect, device number 14 [ 99.930477][ T29] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 100.003964][ T8461] xfrm0 speed is unknown, defaulting to 1000 [ 100.041123][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.762'. [ 100.091360][ T8468] bond0: entered promiscuous mode [ 100.093186][ T8468] bond_slave_0: entered promiscuous mode [ 100.095208][ T8468] bond_slave_1: entered promiscuous mode [ 100.097638][ T8468] bond0: left promiscuous mode [ 100.099179][ T8468] bond_slave_0: left promiscuous mode [ 100.101084][ T8468] bond_slave_1: left promiscuous mode [ 100.219903][ T8470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.249367][ T8473] program syz.3.765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.300490][ T8482] : entered promiscuous mode [ 100.371797][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'. [ 100.399374][ T8495] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=62 sclass=netlink_audit_socket pid=8495 comm=syz.3.773 [ 100.498575][ T8505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.777'. [ 100.517951][ T8501] netlink: 'syz.0.776': attribute type 7 has an invalid length. [ 100.520312][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 100.598794][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.782'. [ 100.638856][ T8530] netlink: 'syz.2.785': attribute type 1 has an invalid length. [ 100.641413][ T8530] NCSI netlink: No device for ifindex 0 [ 100.647962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.686095][ T40] audit: type=1400 audit(1750611853.281:31518): avc: denied { read } for pid=8534 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.692840][ T40] audit: type=1400 audit(1750611853.281:31519): avc: denied { write } for pid=8534 comm="syz.3.788" path="socket:[23301]" dev="sockfs" ino=23301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.007778][ T8568] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 101.009948][ T8568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.013279][ T8568] vhci_hcd vhci_hcd.0: Device attached [ 101.016046][ T8569] vhci_hcd: connection closed [ 101.017001][ T1147] vhci_hcd: stop threads [ 101.022886][ T1147] vhci_hcd: release socket [ 101.024345][ T1147] vhci_hcd: disconnect device [ 101.060532][ T8577] netlink: 'syz.0.801': attribute type 1 has an invalid length. [ 101.063828][ T8577] netlink: 'syz.0.801': attribute type 3 has an invalid length. [ 101.066410][ T8577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.801'. [ 101.069892][ T8577] NCSI netlink: No device for ifindex 0 [ 101.386327][ T8596] batadv_slave_1: entered promiscuous mode [ 101.390237][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 101.462559][ T8595] team0 (unregistering): Port device team_slave_0 removed [ 101.468346][ T8595] team0 (unregistering): Port device team_slave_1 removed [ 101.541046][ T8594] batadv_slave_1: left promiscuous mode [ 101.593467][ T8609] syz.3.809 (8609): /proc/8608/oom_adj is deprecated, please use /proc/8608/oom_score_adj instead. [ 101.668978][ T8613] xt_hashlimit: size too large, truncated to 1048576 [ 101.672386][ T8615] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 101.882273][ T8632] xfrm0 speed is unknown, defaulting to 1000 [ 101.956840][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 101.967382][ T840] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 102.025923][ T8648] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 102.148870][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.152357][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.155402][ T840] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.159948][ T840] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.162792][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.167031][ T840] usb 7-1: config 0 descriptor?? [ 102.381321][ T840] usbhid 7-1:0.0: can't add hid device: -71 [ 102.385179][ T840] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 102.393243][ T840] usb 7-1: USB disconnect, device number 6 [ 102.489540][ T8666] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.570977][ T8671] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 102.582307][ T8671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.595947][ T8671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.599184][ T8671] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 102.603243][ T8671] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 102.603706][ T8674] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 102.746117][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x1 [ 102.782370][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.786661][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.790644][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.793449][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.796634][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.800433][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x4 [ 102.802928][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.805488][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.808333][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.811009][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x2 [ 102.813415][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.816122][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.819416][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x4 [ 102.822104][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.824709][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.827340][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x2 [ 102.829869][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.832309][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.834733][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.837133][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.840385][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.842759][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.845109][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.847775][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.850082][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.852417][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.852895][ T8697] bond0: (slave syz_tun): Releasing backup interface [ 102.854744][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.859700][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.862036][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.864403][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.866709][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.869619][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.870336][ T8697] : left allmulticast mode [ 102.872107][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.873568][ T8697] : left promiscuous mode [ 102.875858][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.878436][ T8697] bridge0: port 1() entered disabled state [ 102.880227][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.884422][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.886833][ T24] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 102.888962][ T8697] bridge_slave_1: left allmulticast mode [ 102.890986][ T8697] bridge_slave_1: left promiscuous mode [ 102.892501][ T24] hid-generic 0000:0000:20000000.0003: hidraw1: HID v0.01 Device [syz0] on syz1 [ 102.892803][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.908404][ T8697] bond0: (slave bond_slave_0): Releasing backup interface [ 102.921258][ T8697] bond0: (slave bond_slave_1): Releasing backup interface [ 102.925713][ T8700] fido_id[8700]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.939047][ T8697] team0: Port device team_slave_0 removed [ 102.950035][ T8697] team0: Port device team_slave_1 removed [ 102.952461][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.954840][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.959608][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.961857][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.969745][ T8697] gretap1: left promiscuous mode [ 102.971429][ T8697] bridge0: port 3(gretap1) entered disabled state [ 103.000391][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 103.000403][ T40] audit: type=1400 audit(1750611855.601:31539): avc: denied { write } for pid=8691 comm="syz.1.833" path="socket:[24671]" dev="sockfs" ino=24671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 103.056233][ T8714] fuse: Bad value for 'fd' [ 103.088447][ T40] audit: type=1400 audit(1750611855.691:31540): avc: denied { mounton } for pid=8719 comm="syz.3.840" path="/175/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 103.226542][ T40] audit: type=1400 audit(1750611855.821:31541): avc: denied { unlink } for pid=5934 comm="syz-executor" name="file0" dev="tmpfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.747005][ T40] audit: type=1400 audit(1750611856.341:31542): avc: denied { read } for pid=8844 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.879704][ T40] audit: type=1400 audit(1750611856.481:31543): avc: denied { create } for pid=8856 comm="syz.3.903" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.895047][ T40] audit: type=1400 audit(1750611856.491:31544): avc: denied { link } for pid=8856 comm="syz.3.903" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.914843][ T40] audit: type=1400 audit(1750611856.511:31545): avc: denied { rename } for pid=8856 comm="syz.3.903" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.736424][ T40] audit: type=1400 audit(1750611857.331:31546): avc: denied { bind } for pid=8915 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.936339][ T40] audit: type=1400 audit(1750611857.531:31547): avc: denied { listen } for pid=8940 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.942778][ T40] audit: type=1400 audit(1750611857.541:31548): avc: denied { accept } for pid=8940 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.079725][ T8967] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 105.085745][ T8969] loop6: detected capacity change from 0 to 63 [ 105.089515][ T8967] pimreg3: entered allmulticast mode [ 105.092505][ T8969] buffer_io_error: 3 callbacks suppressed [ 105.092514][ T8969] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 105.097161][ T8969] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 105.101692][ T8969] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 105.104515][ T8969] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 105.107152][ T8969] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 105.110207][ T8969] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 105.112987][ T8969] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 105.118190][ T8969] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 105.137522][ T8969] ALSA: mixer_oss: invalid OSS volume '' [ 105.207939][ T8985] ipt_ECN: cannot use operation on non-tcp rule [ 105.270756][ T8995] ------------[ cut here ]------------ [ 105.272500][ T8995] WARNING: CPU: 3 PID: 8995 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.275658][ T8995] Modules linked in: [ 105.277208][ T8995] CPU: 3 UID: 0 PID: 8995 Comm: syz.2.963 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 105.282852][ T8995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.286700][ T8995] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.288877][ T8995] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 8f f0 6c 09 83 fe 0a 0f 86 0a fe ff ff 80 3d c3 68 7a 0e 00 75 0b c6 05 ba 68 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 105.294829][ T8995] RSP: 0018:ffffc9000f0674f8 EFLAGS: 00010246 [ 105.296787][ T8995] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 105.299283][ T8995] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000040dc0 [ 105.301827][ T8995] RBP: 0000000004000000 R08: 0000000000000005 R09: 0000000000000000 [ 105.304260][ T8995] R10: 0000000000800000 R11: 0000000000000001 R12: 000000000000000e [ 105.304282][ T8997] binder: 8996:8997 ioctl c0306201 2000000003c0 returned -14 [ 105.306638][ T8995] R13: 1ffff92001e0ceb4 R14: 0000000004000000 R15: 000000000000000e [ 105.311386][ T8997] 9pnet_virtio: no channels available for device syz [ 105.311758][ T8997] binder: 8996:8997 ioctl 8008330e 200000000100 returned -22 [ 105.313381][ T8995] FS: 00007fcda1ca06c0(0000) GS:ffff8880d6a53000(0000) knlGS:0000000000000000 [ 105.318774][ T8995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.320842][ T8995] CR2: 000000110c2faec4 CR3: 0000000066350000 CR4: 0000000000352ef0 [ 105.323318][ T8995] Call Trace: [ 105.324417][ T8995] [ 105.325383][ T8995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 105.327517][ T8995] ? rcu_is_watching+0x12/0xc0 [ 105.329172][ T8995] ? trace_kmem_cache_alloc+0x28/0xc0 [ 105.330853][ T8995] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 105.332772][ T8995] ? hashtab_init+0x1b1/0x290 [ 105.334266][ T8995] __alloc_pages_noprof+0xb/0x1b0 [ 105.335828][ T8995] ___kmalloc_large_node+0x84/0x1e0 [ 105.337514][ T8995] ? hashtab_init+0x1b1/0x290 [ 105.339181][ T8995] __kmalloc_large_node_noprof+0x1c/0x70 [ 105.340919][ T8995] ? __pfx_ebitmap_read+0x10/0x10 [ 105.342504][ T8995] __kmalloc_noprof.cold+0xc/0x61 [ 105.344073][ T8995] hashtab_init+0x1b1/0x290 [ 105.345502][ T8995] ? __asan_memcpy+0x3c/0x60 [ 105.347108][ T8995] policydb_read+0x7b4/0x3220 [ 105.348660][ T8995] ? __pfx_policydb_read+0x10/0x10 [ 105.350574][ T8995] security_load_policy+0x15c/0x12c0 [ 105.352547][ T8995] ? __pfx_security_load_policy+0x10/0x10 [ 105.354342][ T8995] ? find_held_lock+0x2b/0x80 [ 105.355799][ T8995] ? __might_fault+0xe3/0x190 [ 105.357332][ T8995] ? __might_fault+0xe3/0x190 [ 105.358762][ T8995] ? __might_fault+0x13b/0x190 [ 105.360266][ T8995] sel_write_load+0x332/0x1bd0 [ 105.361758][ T8995] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.363475][ T8995] ? __lock_acquire+0xb8a/0x1c90 [ 105.364971][ T8995] ? __pfx_sel_write_load+0x10/0x10 [ 105.366564][ T8995] ? __pfx_sel_write_load+0x10/0x10 [ 105.368259][ T8995] vfs_write+0x29d/0x1150 [ 105.369660][ T8995] ? __pfx___mutex_lock+0x10/0x10 [ 105.371497][ T8995] ? __pfx_vfs_write+0x10/0x10 [ 105.373018][ T8995] ? __fget_files+0x20e/0x3c0 [ 105.374539][ T8995] ksys_write+0x12a/0x250 [ 105.375899][ T8995] ? __pfx_ksys_write+0x10/0x10 [ 105.377495][ T8995] do_syscall_64+0xcd/0x4c0 [ 105.379084][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.380893][ T8995] RIP: 0033:0x7fcda0d8e929 [ 105.382360][ T8995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.388360][ T8995] RSP: 002b:00007fcda1ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.390925][ T8995] RAX: ffffffffffffffda RBX: 00007fcda0fb6160 RCX: 00007fcda0d8e929 [ 105.393779][ T8995] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 105.396656][ T8995] RBP: 00007fcda0e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 105.399217][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.401656][ T8995] R13: 0000000000000000 R14: 00007fcda0fb6160 R15: 00007ffe183a4028 [ 105.404433][ T8995] [ 105.405419][ T8995] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.407697][ T8995] CPU: 3 UID: 0 PID: 8995 Comm: syz.2.963 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 105.411455][ T8995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.414888][ T8995] Call Trace: [ 105.415937][ T8995] [ 105.416841][ T8995] dump_stack_lvl+0x3d/0x1f0 [ 105.418250][ T8995] panic+0x71c/0x800 [ 105.419471][ T8995] ? __pfx_panic+0x10/0x10 [ 105.420807][ T8995] ? show_trace_log_lvl+0x29b/0x3e0 [ 105.422375][ T8995] ? check_panic_on_warn+0x1f/0xb0 [ 105.423934][ T8995] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.426001][ T8995] check_panic_on_warn+0xab/0xb0 [ 105.427518][ T8995] __warn+0xf6/0x3c0 [ 105.428707][ T8995] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.430544][ T8995] report_bug+0x3c3/0x580 [ 105.431895][ T8995] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.433760][ T8995] handle_bug+0x184/0x210 [ 105.435208][ T8995] exc_invalid_op+0x17/0x50 [ 105.436980][ T8995] asm_exc_invalid_op+0x1a/0x20 [ 105.438573][ T8995] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.440669][ T8995] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 8f f0 6c 09 83 fe 0a 0f 86 0a fe ff ff 80 3d c3 68 7a 0e 00 75 0b c6 05 ba 68 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 105.446563][ T8995] RSP: 0018:ffffc9000f0674f8 EFLAGS: 00010246 [ 105.448389][ T8995] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 105.450769][ T8995] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000040dc0 [ 105.453191][ T8995] RBP: 0000000004000000 R08: 0000000000000005 R09: 0000000000000000 [ 105.455656][ T8995] R10: 0000000000800000 R11: 0000000000000001 R12: 000000000000000e [ 105.458327][ T8995] R13: 1ffff92001e0ceb4 R14: 0000000004000000 R15: 000000000000000e [ 105.460780][ T8995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 105.462743][ T8995] ? rcu_is_watching+0x12/0xc0 [ 105.464268][ T8995] ? trace_kmem_cache_alloc+0x28/0xc0 [ 105.465928][ T8995] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 105.467730][ T8995] ? hashtab_init+0x1b1/0x290 [ 105.469179][ T8995] __alloc_pages_noprof+0xb/0x1b0 [ 105.470738][ T8995] ___kmalloc_large_node+0x84/0x1e0 [ 105.472484][ T8995] ? hashtab_init+0x1b1/0x290 [ 105.473950][ T8995] __kmalloc_large_node_noprof+0x1c/0x70 [ 105.475722][ T8995] ? __pfx_ebitmap_read+0x10/0x10 [ 105.477289][ T8995] __kmalloc_noprof.cold+0xc/0x61 [ 105.479117][ T8995] hashtab_init+0x1b1/0x290 [ 105.480551][ T8995] ? __asan_memcpy+0x3c/0x60 [ 105.481992][ T8995] policydb_read+0x7b4/0x3220 [ 105.483426][ T8995] ? __pfx_policydb_read+0x10/0x10 [ 105.485009][ T8995] security_load_policy+0x15c/0x12c0 [ 105.486608][ T8995] ? __pfx_security_load_policy+0x10/0x10 [ 105.488544][ T8995] ? find_held_lock+0x2b/0x80 [ 105.490128][ T8995] ? __might_fault+0xe3/0x190 [ 105.491528][ T8995] ? __might_fault+0xe3/0x190 [ 105.492973][ T8995] ? __might_fault+0x13b/0x190 [ 105.494452][ T8995] sel_write_load+0x332/0x1bd0 [ 105.495936][ T8995] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.497549][ T8995] ? __lock_acquire+0xb8a/0x1c90 [ 105.499111][ T8995] ? __pfx_sel_write_load+0x10/0x10 [ 105.500773][ T8995] ? __pfx_sel_write_load+0x10/0x10 [ 105.502371][ T8995] vfs_write+0x29d/0x1150 [ 105.503865][ T8995] ? __pfx___mutex_lock+0x10/0x10 [ 105.505431][ T8995] ? __pfx_vfs_write+0x10/0x10 [ 105.506909][ T8995] ? __fget_files+0x20e/0x3c0 [ 105.508366][ T8995] ksys_write+0x12a/0x250 [ 105.509759][ T8995] ? __pfx_ksys_write+0x10/0x10 [ 105.511347][ T8995] do_syscall_64+0xcd/0x4c0 [ 105.512773][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.514590][ T8995] RIP: 0033:0x7fcda0d8e929 [ 105.515999][ T8995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.522562][ T8995] RSP: 002b:00007fcda1ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.525263][ T8995] RAX: ffffffffffffffda RBX: 00007fcda0fb6160 RCX: 00007fcda0d8e929 [ 105.527819][ T8995] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 105.530326][ T8995] RBP: 00007fcda0e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 105.532811][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.535478][ T8995] R13: 0000000000000000 R14: 00007fcda0fb6160 R15: 00007ffe183a4028 [ 105.537930][ T8995] [ 105.539475][ T8995] Kernel Offset: disabled [ 105.540841][ T8995] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:04:18 Registers: info registers vcpu 0 CPU#0 RAX=ffff888029224880 RBX=ffffffff8e5c47c0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff822e968c RDI=fffffbfff1cb88f8 RBP=0000000000000002 RSP=ffffc900034f7398 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000001000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81987dd3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556ce4500 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000045000 CR3=0000000052ce5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000020000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda0e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda0e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda0e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda0e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda0e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda0e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda0f84488 00007fcda0f84480 00007fcda0f84478 00007fcda0f84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda1aed100 00007fcda0f84440 00007fcda0f84458 00007fcda0f844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda0f84498 00007fcda0f84490 00007fcda0f84488 00007fcda0f84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff815fe790 RBX=0000000000000000 RCX=ffffffff81a98916 RDX=ffff8880258ac880 RSI=ffffffff81a98923 RDI=ffffffff8e3c72a0 RBP=0000000000004e46 RSP=ffffc90003617b88 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000001846c1bc1c R13=dffffc0000000000 R14=0000000000000001 R15=ffff88806a527d00 RIP=ffffffff815fe794 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555585a9b500 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f831817e2d8 CR3=000000002556c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585aae730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585ac42d0 0000555585ac1e40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585abf99e 0000555585abf200 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001801 a208328003328004 0390031608000388 032208000380033c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001ffffffffffff ffffcf0808f00322 a4080008e8030180 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01a0100008800401 00000e0806060176 e000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ae2000000000000 0000000000316e61 6c7701ffffffffff ffffffdf08018003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01da081680030008 0006100020100006 01709201800404a4 e608000108000601 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011680040c080001 00000c080606010e f09ede05c1264b05 a845c9eaefdbca4f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfcaf2aad64dc531 98ee1970a15aec0b febdaf5688047d8f 8cc02e2baba28cf2 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 033757e866ecf19c a37e81c415a20168 f5c2c81bff6b05b1 2d8c59a34cfe1e6c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58b8e80000000c1b 9c4cf29813c15687 309c1c2746cd7af7 1ce91b9186cf01da ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffff110078048cf RBX=000000000000000f RCX=ffff88803c024608 RDX=0000000000000001 RSI=dffffc0000000000 RDI=ffffffff8d13f4e1 RBP=0000000000000000 RSP=ffffc9000ec67b28 R8 =0000000000000005 R9 =0000000000000003 R10=0000000000000001 R11=0000000000000001 R12=000000000000000e R13=0000000000000000 R14=0000000000000300 R15=0000555556d05fff RIP=ffffffff8b7695a5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555556ce4500 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555556ce47d0 CR3=00000000663cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006f6c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378f611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378f611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378f611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378f611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378f611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378f611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378f784488 00007f378f784480 00007f378f784478 00007f378f784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37902ed100 00007f378f784440 00007f378f780004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378f784498 00007f378f784490 00007f378f784488 00007f378f784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b80d5 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc9000f066e60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b0872e0 R15=ffffffff855b8070 RIP=ffffffff855b80ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fcda1ca06c0 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2faec4 CR3=0000000066350000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=00000000000000ff Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda0f84488 00007fcda0f84480 00007fcda0f84478 00007fcda0f84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda1aed100 00007fcda0f84440 00007fcda0f84458 00007fcda0f844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda0f84498 00007fcda0f84490 00007fcda0f84488 00007fcda0f84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000