last executing test programs: 20.438640161s ago: executing program 3 (id=103): syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYBLOB="f33fb2ef70351f44a2b11b182945f4e526fab988adaf8652c9c837ee22c05c11581d390289eb795346c45c62ad59d0b4089ab657ede2cbe0c5c65159080ecc09e2113704879207f5e43cfcc0be1702e169f3563a96dd4813fe03ba9ec430c742e510a594d28b4028d8095b9d808cb2905cde5ac7b007ea9b12d2", @ANYRES32=0x41424344, @ANYBLOB="5cf8008700780000f2c5f404073b98a15e31cde214e74e7814b837367c965ec038d20d95f3f2200615c8dad9f5ec160175ed73138307a900c0fc1437c52fc507644d4f7a33cb4da50e619917212b08c9da7745d1c5d9a0e3c3991650c089a024d6cde8bcb19d22ccb46e962685365669bbafce3d092fa8ed5991012099da773723217ffec65f5a7e0aa8b20400e836be239f6a7479953265cc1da2e1c975115bb83f1944fa42f1437aaa9aa5fd28a382ebdf6169ec4fb06efb0f73e2627796ad1167318dd77abf14661accce056aab2492f05e2c5452d25fd0ceac826c8e4f87ce17e9b1faf33226b92b1f2de907c9a087a945d34123d494"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYBLOB="f33fb2ef70351f44a2b11b182945f4e526fab988adaf8652c9c837ee22c05c11581d390289eb795346c45c62ad59d0b4089ab657ede2cbe0c5c65159080ecc09e2113704879207f5e43cfcc0be1702e169f3563a96dd4813fe03ba9ec430c742e510a594d28b4028d8095b9d808cb2905cde5ac7b007ea9b12d2", @ANYRES32=0x41424344, @ANYBLOB="5cf8008700780000f2c5f404073b98a15e31cde214e74e7814b837367c965ec038d20d95f3f2200615c8dad9f5ec160175ed73138307a900c0fc1437c52fc507644d4f7a33cb4da50e619917212b08c9da7745d1c5d9a0e3c3991650c089a024d6cde8bcb19d22ccb46e962685365669bbafce3d092fa8ed5991012099da773723217ffec65f5a7e0aa8b20400e836be239f6a7479953265cc1da2e1c975115bb83f1944fa42f1437aaa9aa5fd28a382ebdf6169ec4fb06efb0f73e2627796ad1167318dd77abf14661accce056aab2492f05e2c5452d25fd0ceac826c8e4f87ce17e9b1faf33226b92b1f2de907c9a087a945d34123d494"], 0x0) (async) 20.438339324s ago: executing program 3 (id=104): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) r4 = io_uring_setup(0x3458, &(0x7f0000000100)={0x0, 0xffffeffa, 0x18, 0x2, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) request_key(&(0x7f0000000540)='blacklist\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(0x3) 20.229573373s ago: executing program 3 (id=110): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000002140)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x8, 0x8, 0x401, 0x8, 0x1}, &(0x7f0000002080)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7d, &(0x7f0000000040)={r3, 0x7}, &(0x7f0000000080)=0x8) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000020c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x78, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x2}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_ID={0x8, 0x1, 0x2}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 20.106463414s ago: executing program 3 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x100000000000, 0x5], 0xffff1000}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x100000000000, 0x5], 0xffff1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, 0x0, &(0x7f0000001c80)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x3, 0x1, 0x8, 0x7}, 0x9, 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x11}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'veth0_virt_wifi\x00', {0x5}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xab, 0x24, "aeaebfccef9bce1fd124c2479745f617049cd64b82629795273b1b27fa25"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x11}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'veth0_virt_wifi\x00', {0x5}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xab, 0x24, "aeaebfccef9bce1fd124c2479745f617049cd64b82629795273b1b27fa25"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') r6 = socket$inet6(0xa, 0x80002, 0x4ecc) sendmmsg$inet6(r6, &(0x7f0000005dc0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @empty, 0xd8}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr_2292={{0x18, 0x29, 0x3b, {0x6c, 0x0, 0x0, 0xc}}}], 0x18}}], 0x1, 0x24009c00) utime(&(0x7f0000000000)='./file0\x00', 0x0) (async) utime(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x8810) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x8810) r8 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_pidfd_open(r8, 0x0) (async) r9 = syz_pidfd_open(r8, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0xff05) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 19.972963035s ago: executing program 3 (id=121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x1dd, 0x3, 0x5, 0xfffffff8}, {0xfffa, 0xb5, 0x5f, 0x40}, {0xc7, 0xf4, 0x3, 0x8}, {0x0, 0xfe, 0x10, 0x4}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 19.746890769s ago: executing program 2 (id=128): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0xc1, 0x7f, 0x20203243, 0x2, [0x2], [0x800, 0x0, 0x80, 0x40], [0xfffffffc, 0x822], [0x40000000000000, 0x7fff]}) 19.689160862s ago: executing program 2 (id=130): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xad, 0x2, 0x1, 0x0, 0xf7}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0xfffffffc}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r3], 0x3c}, 0x1, 0x11}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=0x189) 19.291688735s ago: executing program 2 (id=134): r0 = gettid() r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000002b000bf9dc0adc317e6f48250900000008000200160001000c0001"], 0x28}}, 0x0) r3 = epoll_create(0x7) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read(r4, &(0x7f00000001c0)=""/36, 0x24) ptrace$peeksig(0x4209, r1, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000000340)=[{}, {}, {}, {}]) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 19.120009009s ago: executing program 2 (id=135): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff95}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x4a, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, [0x2]}}) socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000300)=0x101, 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) read$FUSE(r3, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000000540)={0x40, 0xb, 0x9, 0x1, @msf={0x4, 0x9, 0x81}, 0x11}) sendmmsg$unix(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f00000001c0)="29569c889bf8851fd4d2ab76072a236a533893df98cc49978b44041f105c0741953ad14abb5642d490f37e4dbee477eff19281a435282ff58fcb58f74a688e5dbb693cab91c160a6db9ae4255675a42c2a755815d47296c8619dc11d61d396b338f00d3b07bc8d651adf87241acd7a6ea2855dba4c1e519022f19010f847853147e215d96fd0771eac173172615e0e243fd3cb28917fde62ec79db7f6917bf70b046262b6af2696ec0a14bcca653dfbe5383d9d09d245768249651e4bcc5f32ccc38bf86d914a85b3ee24c6a5faeaf637ccc60d2309a822b3733f860d4f3412df02c10fc", 0xe4}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r5, r6}}}], 0x20, 0x800}}], 0x1, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) 19.119641666s ago: executing program 3 (id=136): syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f0000000080)=""/6, 0x6}], 0x3) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$video4linux(0x0, 0xff, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xe2802) 18.777411533s ago: executing program 32 (id=136): syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f0000000080)=""/6, 0x6}], 0x3) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$video4linux(0x0, 0xff, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xe2802) 17.953508856s ago: executing program 2 (id=141): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x0, 0x200804, 0x7}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, 0x0, &(0x7f0000000080)) (async) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, 0x0, &(0x7f0000000080)) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x4010080) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002400010026bd700001dbdf251cf9ffff06000300"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 15.418961564s ago: executing program 2 (id=152): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x2282, &(0x7f0000000180)={"7bd6210000b08df6723d3fd7", 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x5a9d, 0x2, 0x0}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) ftruncate(r4, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 15.144707205s ago: executing program 33 (id=152): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x2282, &(0x7f0000000180)={"7bd6210000b08df6723d3fd7", 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x5a9d, 0x2, 0x0}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) ftruncate(r4, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 4.279516777s ago: executing program 0 (id=192): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0xfffffeb1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000041}, 0x4044) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4000880) 3.95656281s ago: executing program 0 (id=193): socket$nl_rdma(0x10, 0x3, 0x14) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$SO_COOKIE(r2, 0x1, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x8) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) 3.706141926s ago: executing program 0 (id=195): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x8000) 2.823460664s ago: executing program 1 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) 1.900337656s ago: executing program 1 (id=198): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000dd4076d2b24288a6414fbb4281bf8e4faac3dbd9b4806b37ba84d3c84afbdca7c16cf05032602f00dbc47d88a63726ba260a1064862a61519279e0f650556d5b10b2260a437bbbdfbc35852d477daaa2f683f0d9da76fdd98735090a8de5a159e2cb98a5e1eb9c3975846aa2fe0f6d3416e89a54fae779637aa55bcb601e0a27fc976acbf270a348698cb46c432ab428292b16179a13d9714e4f63d724bf80147f59d41c4805bb62afb61b9bbb80af202b1fc500"/210, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES64=r0, @ANYBLOB="08000a00d2316bd93d1229f4b26827090906e1d1864e91d3d514bfe74de2"], 0x44}}, 0x20008040) 1.820875006s ago: executing program 1 (id=199): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 685.969786ms ago: executing program 1 (id=200): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e80), 0x41, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x545d, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095", @ANYRES32=r2, @ANYRES64=r0, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRES16=0x0, @ANYRES16=r1, @ANYBLOB="454ad03c3ddd27a5a08dc3362a746e44f47513a4b132aed6d9f3b5e4c6e158c2d2a9873425104e691340f23910f9f839706c22c504c20de8155642bb7ddcd789116ccf3027570ba9109e5d70c691fdae4f2e5ca1c852c127419eeb2c88a8040cda8710297ee6ce14b9173e10aab4aa3405a292d8f530a171012de2bdfa59958aa6afd5ac30c2738ec0ffce610639be3a8b08940a3f67d5bcbcf8a4d0c497c0a868988e6677f4a9e410c7c42caf192fe14120bc1f11c74acb22c172afa29d8432a69dd89b29701778975778ee00610ae37692664f16ab23d1f138f6a2ee97a49606ed62c23cee075bf79eefa94ced19a55226e93cd75da87c711e3733715fca9d4ff16b4f49a17773ec3d57fe4d4c5df8d5db3c30827d89b7254ff4992f7409e5e601d56598d83b4a821d1c19351a23c45a1d6198463dd9eeb3173ed7f4aaea418a30d25e6fdab4697b73592b4b9fec97cda556b695e58b6eccfc4836bd0b4fca7c570fb33e897d4f33e6ca772ccfbf126a2be15dfcdf17137dacdce73284e4daa1d1417069cb39202d310f1e03f49c1a488840f969d059af4c4bd3e6b5f67e594608fd5d7e63ab89e9c04480bd0c702ca2ad9af9e9fb4bc3fd371ea9976e7b55928b708d2760d97319f2b98e1d7c6cac9d95e46188f18abaeb33d41262f4952b3497d547e7969f0df883749af6e987d350afb25c65da7a2989894fd65080162be3d43258ea2b988fb459180de9e401cecb532edc31bc07b2736629fa4a1536624cb61243e5982cf611e1fbf469a1034c8e1d4965f699133b416a5b46d53dbb66fafb48f34d2d59845b9a5d243ecfc71a3eb4611c2aaae751840ede33b37ea632e29ee29493bc8b2cfb8f3272ab2c4f434090fcc0e5ed605642e8cb9058859191bbf15f066e4a492b546fe6ece02abe5447c396453277b44e7670ec8dfbda7eae8618b8675074796a4daabb9977b3a4ce88a3aac5b0408bec27d4edcd29c2184ab3b3d719e0b81005db3b47c85e41a281f7246365bdc9d1daa1fbb0b3e7b307135b73411424fc7f4ababa95db4b212e2134c8a114aebd525b059d533832b792ef6bdf1629500fbf8bf04eb6feef8061584ba0f3432035f7bb502708bbaa6d17a76ca4ef584d48349e09eb54295b54f8acf5b30528ee08691d2f0884e98b0d380939f0df8553fef40ad93113a833eee30e8de4381f50f6a9caa292cece83096c170baa03abbda21dd38edc0c2c8010777c0d1ece65111c73b07bef2961e7b411354515f594992038e2745e0101aa7c4aebaf1d89a6434739fd439247db96cb6c498519210520e7e030c2d09b372ce8724c54ddce4d4ddce3466695e179a5c67d21269756e94e2e8fbed3f14c1a9ce8d482759411d4f8f8cc8db2b7227a4d421c44523894cd31f7e9ff0cb01ab3a884cd4f9b9b6daae47dabcc958da04bd1ca7b752a3126207859463b1c4a1d1144a2e4359d05d8ff259cd3bcc20ff84e6c6bd6f4e3bc2d1aa3f9a910ae09b526381719b43c51057849d70320d2defdb71df0802c43cafbedbf8d1561a0a3a37bd312e088b8eb4c4560ce287d94280764284a19c6e2bf3c224be9855e24bba0b7b384d8386b3a873467c5549139b7d65741b673c3322061b3fd3d13859276e49303ea009f538e7aec2dad5b794ccfa5d63e66e244e7f710d7d39dcc9498a0b786aa5ee5abfde7364cb00739653ea0034eb5d31b55ea3671610ad808ded598088ca5f50abdb122583bd6af85d2a69e82a59f2e7a9073d59a7f1e422320fd99a403a50b976407e87ec744e645606ff83d168e273354685303be1f5ee8f876512718fe75990418d4f7d66003466e10091747d35cec97e8741eb9b835a2aef70ad756900feccd184721ebe475d44a0b5ebd9dda3f2a74287e652974c921bddb68b949d84c12b5f5e5dea9aa11e81afff3dcd53265024c68ce159d54205919cc4a27f7e48aa36566d5025c5842a5d6862c764b24ca2c44dc5b92d47d9c645e7c8ee131ac3a63687738494fbc665b438d16606fa13bf33a8f3214ceea21b735aa6077d9c5217470291f1761cd7d686e27666e3a8f1675f0550192f4efcedbc8414bcc835f2c4f2973b99b837e7e8883cefff9ef41b62b4fd2a6b7f25b0e91fa30a89f2d21ea1a29adfd7cdec7583f66b245743bce12551d7e29ee9faf251607300a2f69fe0173873237a1509a02a44e8d57cbcdde7b97bf9c6fbd4605f0c21a605d24b42fa7df622cf94917b284c355661a842498ad533f06ac1453e2cd75e0fa26126522a88fc61095294aa71f95b74b7bb38a1353c13ce61b055703f14d05641d042077169a9f5140ce3a3a27dc1b28c5999462bb7e862194f0a656015253e03c53af633e7f6995e1d3dcab80bd363c7945ff222c66a732722608ddd1c8fbe63191338282c4ab26dc78749c139f4c5eb1c4a023dfe8562f6542624b52dc8c2ac81d21bf674ee12bdd36fab9435f158018a20d3ad3f08249d56d98c192031afab293fdd942567ede4d93e49fb787decad67edd94042f0221bdd44f7c93edd70769cb1e99b4bd5204b4769fa6e88b55a83459e53d1a565ebea399ac28a3e17ae795e470c2e83848e2f4aa94f58bc268b8e202c4e3aa375238c6796759d5a4c0ee0b1e293030115b288474593a282ee5d9383ca08c55fcf71a145348a98f170c097394b100ad58da11def2665b4a5f5d0f7c64d87d64ae831470fa8670ddd6d425ff1b29a34f8896cd437fd41c2b4c5eb19dd92dee8eb3a7e7fb0b47a5cd3e989ff6c31e4b34e25c8c111cd119c6ecc7efc306c49984ce2c7a3b79cd94f62c6c9785a8a92ac7444e2c32c29aa4f12962b9a11342ebecac2a3cbdb1b3961ea2dca361494f479d3b67bb922529ff1cd591315a213538cc7ce6b1f21c7d0657ec323e41af44ff08745821381fa1cde402143e75a45b340fa5135497a9656e82b0cda174b8b9128d43ca175a27172ab126af7ae0842526ed380bef99e706a28685f310581024aefdd3e44fb4a540c0993c57066246ed3b854d8f841623237e51305ff008a23ba200dd2e2ebb64ed4b4ddea464d440722d976cf449ce24f8561d64bfba3330947f5cc6da7d5d87ac0a33323cefaa24b4d6f68e8f43e29762a2910c4785c303fcd57d54c43c1146b2663b8489145280d6720d71c97892691fc266cb51e4f4e47edb3324206d4876b4f57111543130190b64a84d66e31cd8199cf744099e0c5076806a55420c0f9a5d345355de55e9606b7cae446edae29a02fbc718bcc3c38ea4b7fd78a2c22967b991a6a34ae302e2d323e75fa4be639a6bf4a9702ddc5b9764c383f1d0f08b9263a9ce9730e54482f28c02108ca084f3e9a92ecb21610ede5d677c6b1659827e86be2a654fc98f36a428defff5a2230421d4ad7143c0d280e0a1f9d85144fbb6ca0b0aa6d89349eddf55f85e9cd2c7688d902cc8c53a4944025b65df4fe8f463198319851ca2bdf7133eb7affea1f6c5e182aff320480dd455e4e751b613b73bd18ad176e57fc1648f51d2756ed88f59f0427d488efda8038184cae882a76bf9c46a22c4dacd48cc61e38ab7389068cfe691cb4637544d59bc5aed3f1baa62f1f545e856f6a6783a3e0434123d3e1757402a73ebf4d41907aca05e0bd180f6b3b4c9e78e077fca8727298629f3de3cf6fcafbd123ad08cac0c9a68368cd680fe3e5c1d0c29cef09d835070ae2d8ea23f28814baa3b912e93ca8fc86acb1ec5aef2057fc0fc7c8343162ae4631d09750084ddaa5ca49178d335ad9d36212dc2c5d105d7c2afb9652db5ef470d2de9ed60244dbcd7484d4c03ff6d98c376f6fadf933eb7dc42a6be6e6bf09471cfe9cffa059f080c9675b3e1a511129bfeb34637857abf06fa838efb10da3277d6cd37dbba22ba3066ed22fc06902f01a32a3c7da53e2122ac623d1b3119f1be3151cb634fe1cee27f0dfddd4bbeaa6434951715d919c30835e179022fb3e97c83fe41c59386512fdbbaa97410bc59f84e4f85cabd7baffc004655ef79b911278364e916751a943873fb6348635b4da6973c54f0eb6dc111446be99710b5e8ce19a8af9a9a36a026aa361e671eeea6b2ba3d28ff737cd62a0024f29a0f79d43644aeb9c8a9b91d3b83bf0a27fb13a3862546702e912a81f540a6734bf71c0d41f484c72db97b75049f0a51c9f139e017feb87b5009f3e4ecbc8cd03e8f027d2563faeae389c109d93d50841cd6e85baaca516756b8300557d526ab570a8310083e22b7680c33eb03c7cc036e9c09b384bbd18402e7c4c993c4b0db0152ffeeccd36b92c90ed206e65cf6a73f7796f940a625b4e4e66967eb843c05111c036da8052b5bf897890de45043b5cee61705a0903b3a124f64fd36af9c1f39c6e231c7d0dea8750d3bc43df9a84ad77343a194ceee5dad8098df6f05bbc7c52ced138636ff0b3b82b7b4f96691c4a6f1fdf504787c99a4df828c97cd22705d6b5200e4f1d2946829e668caff192b9e3b6d84a6b73b616d91904824bb4e473250813d9664623d6cde4e3dbbc5cc5380e65f52991875830689d6879fd28fa8d41961e70ea5a0f7a4d1559d1f7eea1f9bce586c494428a9dce908820655c1949b47ba4b79b34051eb33638ca9e84dfae005a8ba323500e7896ee3f59bbd2cf9b95ee317e06da932a94fa39c11e010b3db6eebc264c2ce4b2508c6ae498c1b64132f0b08c8297620b984ef75fd60381eab222e9e6b5c4c62e173578f0767df3ec5a9188edb6ec716f53509946424d19926c9f6e3d5f10d5c4eb32e5e71a037c37bf06401d3e59951ad8f4f7a5e7d03991383d652471b4e14e55545bfe9dadf93f45adb797902ba412d2b30b2675177978019c44a4e33769c51e4d9e368105509a4574d95080aa051d78826c9bb201f96ab8e9e27d5d2b95228da9f608127af636336ce2e6c42c7101d3c2afd31d5f1f6c6c2bf14a24bce9f6b20a87f9e4470852f14a38fb1f7fdf15296064406c660e88faeea4171bf246fe216b559cd505c99f1fd12e9afb7fd2da004e4e795a50ef5ebf23ffb1599e9f93b9c3490589eb04f43ddec10265fadb1d5e7129fec9a11383bfb8bb5d31990cdd9ea89464a230c90292f3337dd8d13b56e145f5b56d36b4ddbcf5d9d4aadf2cafebafe9d591400d2ec25b8c2b74084d76a20ba15bb6748773a12eaa5a8f9997e3816f63aff9b8215b516f17f58727747ac6e632a102d90ae7a0c5f7b09b43ccd91912867610471b15d634a8c1b2ddcecaa8da817dd115b2c7de8f9e163f7674ed26f6795cf77e7e4c399a1245ed4def4d4df8f98c712ec5655602bd2a6e8dc6cefa0c9c1ca54464f6219c2a30574df36c95288727eb76f0fc09d994946ed586b83e3de2b00540e923910ec81a6d3fd904d3153701f99a3dc805050ac02243a04b7778b83ba254ee20f4cda4da1b5908dcb913a540e43bd4c1d9c4a35554e08899ade6a19f4ad2eac7ff6470469136b7c013d77332f981dec95d1e9656cde759c23520afa1883cd25acbfe63d0af3df9c1aa156107d69c8db41d7e81d85858caadf30ce03a1d7cc5ba6461ab2cf1f1a5302278bf39b37ba2d37e4b55ddba4d558ba04fe6a92ef6c5657939b3bead1cb32029a268c8c329e977a53461f7e28892aa0d8eb19b714d5d61de2e9ccc7fd4914dd22eac612d310fa6899ebe940ace9c3491a9f7973a6a6e0b031daa5d5612a09972052301342ecc668276411d67c11311ba236f183d3c114670e32a253e73f2ff3a9ac994b1febb920d838c1545f26256bed91d598cffd06124e7fbceec9"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = dup(r3) landlock_restrict_self(r4, 0x2) 579.921855ms ago: executing program 0 (id=201): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) getrlimit(0xd, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) getrlimit(0xd, &(0x7f0000000040)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) (async) 449.58087ms ago: executing program 1 (id=202): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000192c0)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce\x04\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\xbbGh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5_J\x1en\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe3) close(r0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller1\x00', @ifru_data=0x0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3], 0x1c}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 434.861453ms ago: executing program 0 (id=203): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000680)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x82) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 373.682987ms ago: executing program 4 (id=137): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000d00)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc9, @none, 0x1, 0x8}}}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@gettaction={0x14c, 0x32, 0x1, 0x70bd28, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf63}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x608}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x14c}}, 0x4000052) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) (async) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) getsockname(r3, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) 353.458908ms ago: executing program 5 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utime(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 288.927673ms ago: executing program 0 (id=204): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000200)={0x40, 0xa, 0x95, {0x95, 0xf, "0a3031df9256f35e4d2c5586e254e115e9aa6b077f4d3ea1427a8794ae39465f12a195ac314fe0cf502d7adb97e4a73ce98930bbff63acd4e524b067e5bb2c1169ab7f4f8793e691bad54128afb90c9fc93c3af84d0e34d5481b0661cdfbf041d272b294b0037a8f87f14cf4b6f4232e7cdb8b1afad5ea8a500e4cc8524e4913ffc32d99f8c50dad319e9b656ae154553518d8"}}, &(0x7f00000003c0)={0x0, 0x3, 0xff, @string={0xff, 0x3, "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"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000500)={0x20, 0x6, 0x7d, "0128c877aff643c8e382cedca44666db2c5df953830d909420050b66b0e663b4ad59c46a41103413cc0396fd5ba7f42bb5da1ba03edc7e799fe7aca6b16bbc8616761d0e06e20622729b8f646875adc1af0dcf2dcc3869813ce3b59435d25accc97074b86e2f12631bb8d5d58ffdf2e51b7e49d8d1a4ee026869f225de"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "fd6e"}, &(0x7f00000005c0)={0x20, 0x82, 0x3, "34fb9b"}, &(0x7f0000000600)={0x20, 0x83, 0x3, "033e3f"}, &(0x7f0000000640)={0x20, 0x84, 0x3, "6bab01"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "e132f9"}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x24, 0x1) fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) dup2(r2, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c", 0xd}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x20, r5, 0x1, 0x70bd2a, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) 200.427548ms ago: executing program 4 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) 198.521756ms ago: executing program 1 (id=213): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) close(r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x2) 0s ago: executing program 5 (id=206): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000440)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487391e09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b042a753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e2d2656a32b1b8e86d998f2810cc57ea89c96ec7aed75459f2d6e200d41670a7aaf54434592e6bd0fec", 0xe9, r1) r3 = add_key$user(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r2, r3}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) kernel console output (not intermixed with test programs): [ 38.144417][ T40] audit: type=1400 audit(1744391139.875:81): avc: denied { rlimitinh } for pid=5871 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.151768][ T40] audit: type=1400 audit(1744391139.875:82): avc: denied { siginh } for pid=5871 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.359547][ T40] audit: type=1400 audit(1744391141.105:83): avc: denied { read } for pid=5342 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.368528][ T40] audit: type=1400 audit(1744391141.105:84): avc: denied { append } for pid=5342 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.378067][ T40] audit: type=1400 audit(1744391141.105:85): avc: denied { open } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.386474][ T40] audit: type=1400 audit(1744391141.105:86): avc: denied { getattr } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:25157' (ED25519) to the list of known hosts. [ 39.629027][ T40] audit: type=1400 audit(1744391141.375:87): avc: denied { name_bind } for pid=5891 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.837364][ T5905] cgroup: Unknown subsys name 'net' [ 41.968322][ T5905] cgroup: Unknown subsys name 'cpuset' [ 41.974311][ T5905] cgroup: Unknown subsys name 'rlimit' [ 42.146819][ T5940] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.893214][ T5905] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.808673][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 45.808682][ T40] audit: type=1400 audit(1744391147.555:105): avc: denied { execmem } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.012630][ T40] audit: type=1400 audit(1744391147.755:106): avc: denied { create } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.019271][ T40] audit: type=1400 audit(1744391147.755:107): avc: denied { read write } for pid=5949 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.025938][ T40] audit: type=1400 audit(1744391147.765:108): avc: denied { open } for pid=5949 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.033177][ T40] audit: type=1400 audit(1744391147.765:109): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="socket:[6317]" dev="sockfs" ino=6317 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.063788][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.066019][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.068911][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.070901][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.073093][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.073165][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.076183][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.078078][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.080691][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.081500][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.083740][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.088493][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.091261][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.091860][ T5966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.095840][ T5966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.097958][ T5966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.100118][ T5966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.100205][ T40] audit: type=1400 audit(1744391147.845:110): avc: denied { read } for pid=5949 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.107818][ T5967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.108324][ T40] audit: type=1400 audit(1744391147.845:111): avc: denied { open } for pid=5949 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.114026][ T5967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.119314][ T40] audit: type=1400 audit(1744391147.845:112): avc: denied { mounton } for pid=5949 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.120221][ T5967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.313928][ T40] audit: type=1400 audit(1744391148.065:113): avc: denied { module_request } for pid=5950 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.350859][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 46.381465][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 46.400883][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 46.547423][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 46.589910][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.591937][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.594947][ T5950] bridge_slave_0: entered allmulticast mode [ 46.597396][ T5950] bridge_slave_0: entered promiscuous mode [ 46.600573][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.602603][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.605011][ T5950] bridge_slave_1: entered allmulticast mode [ 46.607766][ T5950] bridge_slave_1: entered promiscuous mode [ 46.646867][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.648889][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.650876][ T5962] bridge_slave_0: entered allmulticast mode [ 46.653239][ T5962] bridge_slave_0: entered promiscuous mode [ 46.702917][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.705066][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.707036][ T5962] bridge_slave_1: entered allmulticast mode [ 46.709392][ T5962] bridge_slave_1: entered promiscuous mode [ 46.748056][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.780899][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.784274][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.786393][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.788380][ T5949] bridge_slave_0: entered allmulticast mode [ 46.790734][ T5949] bridge_slave_0: entered promiscuous mode [ 46.793517][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.795495][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.797467][ T5949] bridge_slave_1: entered allmulticast mode [ 46.799754][ T5949] bridge_slave_1: entered promiscuous mode [ 46.803166][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.818808][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.915919][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.921439][ T5950] team0: Port device team_slave_0 added [ 46.923272][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.925543][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.927528][ T5955] bridge_slave_0: entered allmulticast mode [ 46.929856][ T5955] bridge_slave_0: entered promiscuous mode [ 46.933499][ T5962] team0: Port device team_slave_0 added [ 46.937057][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.940393][ T5950] team0: Port device team_slave_1 added [ 46.955904][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.957901][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.959875][ T5955] bridge_slave_1: entered allmulticast mode [ 46.962218][ T5955] bridge_slave_1: entered promiscuous mode [ 46.965716][ T5962] team0: Port device team_slave_1 added [ 47.048422][ T5949] team0: Port device team_slave_0 added [ 47.051020][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.053087][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.061843][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.066987][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.083801][ T5949] team0: Port device team_slave_1 added [ 47.086521][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.088727][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.096684][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.101355][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.104204][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.106376][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.115084][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.161854][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.165058][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.174388][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.185050][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.186989][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.194614][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.212200][ T5955] team0: Port device team_slave_0 added [ 47.216224][ T5955] team0: Port device team_slave_1 added [ 47.218466][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.221133][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.230931][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.379375][ T5962] hsr_slave_0: entered promiscuous mode [ 47.381404][ T5962] hsr_slave_1: entered promiscuous mode [ 47.408902][ T5950] hsr_slave_0: entered promiscuous mode [ 47.411659][ T5950] hsr_slave_1: entered promiscuous mode [ 47.416234][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.419314][ T5950] Cannot create hsr debugfs directory [ 47.422309][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.424967][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.434235][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.441700][ T5949] hsr_slave_0: entered promiscuous mode [ 47.443743][ T5949] hsr_slave_1: entered promiscuous mode [ 47.445593][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.447676][ T5949] Cannot create hsr debugfs directory [ 47.464467][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.466389][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.473414][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.621194][ T5955] hsr_slave_0: entered promiscuous mode [ 47.623197][ T5955] hsr_slave_1: entered promiscuous mode [ 47.625307][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.627399][ T5955] Cannot create hsr debugfs directory [ 47.869898][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.878478][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.882768][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.887764][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.920001][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.925537][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.929929][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.934626][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.972909][ T5962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.978079][ T5962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.983838][ T5962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.999119][ T5962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.039818][ T5955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.044146][ T5955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.048189][ T5955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.051660][ T5955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.057719][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.089942][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.104456][ T5954] Bluetooth: hci0: command tx timeout [ 48.105036][ T5967] Bluetooth: hci1: command tx timeout [ 48.108939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.111074][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.116831][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.122149][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.124780][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.136608][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.148478][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.155363][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.157316][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.170732][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.172812][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.177485][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.184044][ T5967] Bluetooth: hci2: command tx timeout [ 48.186534][ T5967] Bluetooth: hci3: command tx timeout [ 48.192783][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.194884][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.206582][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.208610][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.242523][ T40] audit: type=1400 audit(1744391149.985:114): avc: denied { sys_module } for pid=5949 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.251994][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.272058][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.285880][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.287861][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.290808][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.292913][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.320585][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.357734][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.362766][ T5949] veth0_vlan: entered promiscuous mode [ 48.370310][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.386310][ T5949] veth1_vlan: entered promiscuous mode [ 48.399706][ T5950] veth0_vlan: entered promiscuous mode [ 48.410205][ T5949] veth0_macvtap: entered promiscuous mode [ 48.414833][ T5949] veth1_macvtap: entered promiscuous mode [ 48.421037][ T5950] veth1_vlan: entered promiscuous mode [ 48.435984][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.438638][ T5962] veth0_vlan: entered promiscuous mode [ 48.442703][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.448513][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.454057][ T5962] veth1_vlan: entered promiscuous mode [ 48.456710][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.459172][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.461567][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.464135][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.496760][ T5955] veth0_vlan: entered promiscuous mode [ 48.498722][ T5950] veth0_macvtap: entered promiscuous mode [ 48.509068][ T5962] veth0_macvtap: entered promiscuous mode [ 48.512693][ T5955] veth1_vlan: entered promiscuous mode [ 48.515265][ T5950] veth1_macvtap: entered promiscuous mode [ 48.530950][ T5962] veth1_macvtap: entered promiscuous mode [ 48.535246][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.537322][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.537544][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.540385][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.546157][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.554224][ T5955] veth0_macvtap: entered promiscuous mode [ 48.570954][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.574053][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.577507][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.579791][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.582666][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.585609][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.588451][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.591783][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.595197][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.598827][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.602299][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.606301][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.610375][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.613188][ T5955] veth1_macvtap: entered promiscuous mode [ 48.619424][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.621939][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.622369][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.625293][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.630470][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.633301][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.636400][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.639222][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.642511][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.650000][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.652851][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.655888][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.658721][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.661350][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.664417][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.667793][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.671048][ T5950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.673640][ T5950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.676250][ T5950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.678691][ T5950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.685465][ T5955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.687871][ T5955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.690243][ T5955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.692629][ T5955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.696257][ T5962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.698673][ T5962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.701049][ T5962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.703576][ T5962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.751430][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.754775][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.758740][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.780132][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.782305][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.801264][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.805581][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.819550][ T6019] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 48.824343][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.826583][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.841093][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.845314][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.852146][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.855345][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.921154][ T6036] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.928799][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.135193][ T6046] /dev/userio: Can't lookup blockdev [ 49.136894][ T6046] /dev/userio: Can't lookup blockdev [ 49.138519][ T6046] /dev/userio: Can't lookup blockdev [ 49.165005][ T1458] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.177527][ T6054] capability: warning: `syz.3.9' uses deprecated v2 capabilities in a way that may be insecure [ 49.210193][ T6056] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 49.268402][ T6052] fuse: Bad value for 'fd' [ 49.335453][ T6060] NILFS (nbd2): device size too small [ 49.335931][ T1458] usb 5-1: Using ep0 maxpacket: 16 [ 49.344428][ T1458] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 49.348079][ T1458] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 49.350694][ T1458] usb 5-1: Product: syz [ 49.352120][ T1458] usb 5-1: Manufacturer: syz [ 49.354051][ T1458] usb 5-1: SerialNumber: syz [ 49.357768][ T1458] usb 5-1: config 0 descriptor?? [ 49.473628][ T1021] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.572467][ T10] usb 5-1: USB disconnect, device number 2 [ 49.623734][ T1021] usb 8-1: Using ep0 maxpacket: 16 [ 49.628062][ T1021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.631155][ T1021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.634349][ T1021] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 49.637057][ T1021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.643747][ T1021] usb 8-1: config 0 descriptor?? [ 49.703489][ T6012] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.853713][ T6012] usb 7-1: Using ep0 maxpacket: 32 [ 49.857884][ T6012] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 49.861269][ T6012] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 592 [ 49.871685][ T6012] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.874313][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.876467][ T6012] usb 7-1: Product: syz [ 49.877625][ T6012] usb 7-1: Manufacturer: syz [ 49.879033][ T6012] usb 7-1: SerialNumber: syz [ 50.050906][ T1021] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 50.052990][ T1021] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 50.055049][ T1021] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 50.057038][ T1021] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 50.058985][ T1021] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 50.061397][ T1021] appleir 0003:05AC:8241.0002: No inputs registered, leaving [ 50.068164][ T1021] appleir 0003:05AC:8241.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 50.093104][ T6012] cdc_ncm 7-1:1.0: bind() failure [ 50.097359][ T6012] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 50.099409][ T6012] cdc_ncm 7-1:1.1: bind() failure [ 50.114965][ T6012] usb 7-1: USB disconnect, device number 2 [ 50.144569][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 50.147121][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 50.175072][ T6080] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20002 [ 50.186620][ T5967] Bluetooth: hci1: command tx timeout [ 50.258817][ T6083] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 50.273476][ T5967] Bluetooth: hci2: command tx timeout [ 50.274086][ T5954] Bluetooth: hci3: command tx timeout [ 50.305839][ T10] usb 8-1: USB disconnect, device number 2 [ 50.509463][ T6085] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20'. [ 50.840095][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 50.840106][ T40] audit: type=1400 audit(1744391152.585:191): avc: denied { create } for pid=6104 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.842089][ T6105] netlink: 84 bytes leftover after parsing attributes in process `syz.3.25'. [ 50.847541][ T40] audit: type=1400 audit(1744391152.585:192): avc: denied { write } for pid=6104 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.847563][ T40] audit: type=1400 audit(1744391152.585:193): avc: denied { nlmsg_write } for pid=6104 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.853792][ T6012] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.013547][ T6012] usb 6-1: Using ep0 maxpacket: 16 [ 51.019850][ T6012] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 51.023201][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 51.025655][ T6012] usb 6-1: Product: syz [ 51.026875][ T6012] usb 6-1: Manufacturer: syz [ 51.028271][ T6012] usb 6-1: SerialNumber: syz [ 51.031716][ T6012] usb 6-1: config 0 descriptor?? [ 51.246632][ T1458] usb 6-1: USB disconnect, device number 2 [ 51.267032][ T40] audit: type=1400 audit(1744391153.015:194): avc: denied { read } for pid=6114 comm="syz.3.27" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.273308][ T40] audit: type=1400 audit(1744391153.015:195): avc: denied { open } for pid=6114 comm="syz.3.27" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.296374][ T40] audit: type=1400 audit(1744391153.045:196): avc: denied { ioctl } for pid=6114 comm="syz.3.27" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.318638][ T40] audit: type=1400 audit(1744391153.065:197): avc: denied { execute } for pid=6118 comm="syz.3.28" dev="hugetlbfs" ino=8135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 51.318799][ T6119] process 'syz.3.28' launched '/dev/fd/4' with NULL argv: empty string added [ 51.327893][ T40] audit: type=1400 audit(1744391153.075:198): avc: denied { execute_no_trans } for pid=6118 comm="syz.3.28" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=8135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 51.341382][ T40] audit: type=1400 audit(1744391153.085:199): avc: denied { create } for pid=6118 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.347047][ T40] audit: type=1400 audit(1744391153.085:200): avc: denied { setopt } for pid=6118 comm="syz.3.28" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.463495][ T5954] Bluetooth: hci0: command tx timeout [ 51.601999][ T6121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29'. [ 51.696380][ T6124] netlink: 'syz.2.30': attribute type 39 has an invalid length. [ 51.815272][ T6124] veth0_macvtap: left promiscuous mode [ 52.264298][ T5954] Bluetooth: hci1: command tx timeout [ 52.344085][ T5954] Bluetooth: hci3: command tx timeout [ 52.344221][ T5967] Bluetooth: hci2: command tx timeout [ 52.518264][ T6138] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 53.048428][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 53.050879][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 53.054159][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 53.056674][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 53.059902][ T6154] Zero length message leads to an empty skb [ 53.150116][ T6159] syz.0.43: attempt to access beyond end of device [ 53.150116][ T6159] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 53.153794][ T6159] EXT4-fs (nbd0): unable to read superblock [ 53.543785][ T5967] Bluetooth: hci0: command tx timeout [ 53.952540][ T6175] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 53.982096][ T6176] bond1 (unregistering): Released all slaves [ 54.249518][ T6181] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 54.258045][ T6181] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 54.298257][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 54.343947][ T5967] Bluetooth: hci1: command tx timeout [ 54.424113][ T5967] Bluetooth: hci3: command tx timeout [ 54.425943][ T5954] Bluetooth: hci2: command tx timeout [ 54.538083][ T6193] netlink: 'syz.3.53': attribute type 4 has an invalid length. [ 54.540854][ T6193] netlink: 152 bytes leftover after parsing attributes in process `syz.3.53'. [ 54.545689][ T6193] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 55.056165][ T6197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.54'. [ 55.072628][ T6197] netlink: 'syz.1.54': attribute type 5 has an invalid length. [ 55.075259][ T6199] kvm: emulating exchange as write [ 55.913463][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.009704][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 56.009719][ T40] audit: type=1400 audit(1744391157.755:250): avc: denied { create } for pid=6222 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.078970][ T34] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.086448][ T34] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 56.089879][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.092748][ T34] usb 8-1: Product: syz [ 56.094827][ T34] usb 8-1: Manufacturer: syz [ 56.096468][ T34] usb 8-1: SerialNumber: syz [ 56.308959][ T40] audit: type=1400 audit(1744391158.055:251): avc: denied { create } for pid=6230 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.309691][ T6232] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 56.315664][ T34] usbhid 8-1:1.0: can't add hid device: -71 [ 56.320020][ T34] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 56.322977][ T40] audit: type=1400 audit(1744391158.065:252): avc: denied { write } for pid=6230 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.326895][ T34] usb 8-1: USB disconnect, device number 3 [ 56.350589][ T40] audit: type=1400 audit(1744391158.095:253): avc: denied { read write } for pid=6235 comm="syz.0.67" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 56.362204][ T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.363293][ T40] audit: type=1400 audit(1744391158.095:254): avc: denied { open } for pid=6235 comm="syz.0.67" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 56.373487][ T40] audit: type=1400 audit(1744391158.105:255): avc: denied { write } for pid=6235 comm="syz.0.67" path="socket:[10045]" dev="sockfs" ino=10045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 56.382439][ T40] audit: type=1400 audit(1744391158.105:256): avc: denied { nlmsg_read } for pid=6235 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 56.391252][ T40] audit: type=1400 audit(1744391158.115:257): avc: denied { create } for pid=6237 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.397893][ T40] audit: type=1400 audit(1744391158.115:258): avc: denied { create } for pid=6237 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.404403][ T40] audit: type=1400 audit(1744391158.115:259): avc: denied { bind } for pid=6237 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.513860][ T64] usb 6-1: Using ep0 maxpacket: 32 [ 56.525260][ T64] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 56.528394][ T64] usb 6-1: config 0 has no interface number 0 [ 56.533142][ T64] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 56.538113][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.541208][ T64] usb 6-1: Product: syz [ 56.542792][ T64] usb 6-1: Manufacturer: syz [ 56.545502][ T64] usb 6-1: SerialNumber: syz [ 56.551743][ T64] usb 6-1: config 0 descriptor?? [ 56.556699][ T64] smsc95xx v2.0.0 [ 56.558159][ T64] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 56.562113][ T64] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 56.760346][ T6229] netlink: 'syz.1.64': attribute type 4 has an invalid length. [ 56.767463][ T6229] netlink: 'syz.1.64': attribute type 4 has an invalid length. [ 56.823550][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.975881][ T34] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.982512][ T34] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 56.986040][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.989018][ T34] usb 8-1: Product:   [ 56.990593][ T34] usb 8-1: Manufacturer: à°Œ [ 56.992436][ T34] usb 8-1: SerialNumber: à°Š [ 57.202954][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.206466][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.214844][ T34] usbhid 8-1:1.0: can't add hid device: -71 [ 57.216426][ T34] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 57.220448][ T34] usb 8-1: USB disconnect, device number 4 [ 57.479336][ T6265] QAT: Device 7 not found [ 57.763878][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 57.766618][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.79'. [ 57.829498][ T6277] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 57.832020][ T6277] lo: entered promiscuous mode [ 57.835808][ T6277] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 58.525279][ T6271] dccp_close: ABORT with 64 bytes unread [ 58.712143][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 58.714263][ T6305] tmpfs: User quota block hardlimit too large. [ 58.851995][ T6319] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 58.852246][ T6314] IPVS: stopping master sync thread 6319 ... [ 59.060670][ T1021] usb 6-1: USB disconnect, device number 3 [ 59.094094][ T6335] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.098767][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 59.181557][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.96'. [ 59.360002][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.93'. [ 59.635512][ T6377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.746758][ T6391] NILFS (nullb0): couldn't find nilfs on the device [ 59.797514][ T6406] ucma_write: process 70 (syz.1.113) changed security contexts after opening file descriptor, this is not allowed. [ 59.822971][ T6402] evm: overlay not supported [ 59.829960][ T6403] lo: left promiscuous mode [ 59.840942][ T6409] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 59.843229][ T6403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.852997][ T6407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.920280][ T6428] fuse: Bad value for 'user_id' [ 59.921660][ T6428] fuse: Bad value for 'user_id' [ 59.937911][ T6429] 9pnet_virtio: no channels available for device syz [ 59.940154][ T6429] 9pnet_virtio: no channels available for device syz [ 59.942477][ T6429] 9pnet_virtio: no channels available for device syz [ 59.945082][ T6429] 9pnet_virtio: no channels available for device syz [ 59.947817][ T6429] 9pnet_virtio: no channels available for device syz [ 59.949936][ T6429] 9pnet_virtio: no channels available for device syz [ 59.952102][ T6429] 9pnet_virtio: no channels available for device syz [ 59.954694][ T6429] 9pnet_virtio: no channels available for device syz [ 59.956887][ T6429] 9pnet_virtio: no channels available for device syz [ 59.959011][ T6429] 9pnet_virtio: no channels available for device syz [ 59.961068][ T6429] 9pnet_virtio: no channels available for device syz [ 59.963105][ T6429] 9pnet_virtio: no channels available for device syz [ 59.965643][ T6429] 9pnet_virtio: no channels available for device syz [ 59.967686][ T6429] 9pnet_virtio: no channels available for device syz [ 59.969732][ T6429] 9pnet_virtio: no channels available for device syz [ 59.971737][ T6429] 9pnet_virtio: no channels available for device syz [ 59.974246][ T6429] 9pnet_virtio: no channels available for device syz [ 59.976411][ T6429] 9pnet_virtio: no channels available for device syz [ 59.978460][ T6429] 9pnet_virtio: no channels available for device syz [ 59.980482][ T6429] 9pnet_virtio: no channels available for device syz [ 59.982527][ T6429] 9pnet_virtio: no channels available for device syz [ 59.984771][ T6429] 9pnet_virtio: no channels available for device syz [ 59.986779][ T6429] 9pnet_virtio: no channels available for device syz [ 59.988821][ T6429] 9pnet_virtio: no channels available for device syz [ 59.990810][ T6429] 9pnet_virtio: no channels available for device syz [ 59.992873][ T6429] 9pnet_virtio: no channels available for device syz [ 59.995097][ T6429] 9pnet_virtio: no channels available for device syz [ 59.997688][ T6429] 9pnet_virtio: no channels available for device syz [ 59.999705][ T6429] 9pnet_virtio: no channels available for device syz [ 60.001720][ T6429] 9pnet_virtio: no channels available for device syz [ 60.004027][ T6429] 9pnet_virtio: no channels available for device syz [ 60.006837][ T6429] 9pnet_virtio: no channels available for device syz [ 60.180921][ T1177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.189091][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 60.476089][ T1177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.691299][ T6468] netlink: 'syz.0.133': attribute type 7 has an invalid length. [ 60.696404][ T6471] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 60.699500][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 60.752372][ T1177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.805675][ T6466] vlan2: entered allmulticast mode [ 60.990127][ T6474] program syz.2.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.994444][ T6474] ata1.00: non-matching transfer count (32/0) [ 61.146032][ T1177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.180729][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.199814][ T6481] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 61.216781][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.237821][ T6481] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 61.257106][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.352689][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.435509][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.509784][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 61.570130][ T1177] bridge_slave_1: left allmulticast mode [ 61.591227][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 61.591240][ T40] audit: type=1400 audit(1744391163.315:348): avc: denied { append } for pid=6486 comm="syz.0.140" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.605920][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 61.617234][ T1177] bridge_slave_1: left promiscuous mode [ 61.621338][ T5967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.639695][ T34] usb 6-1: config 13 has an invalid interface number: 152 but max is 3 [ 61.677840][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.682273][ T5967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.706923][ T34] usb 6-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 61.728723][ T34] usb 6-1: config 13 has an invalid interface number: 246 but max is 3 [ 61.732032][ T5967] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.747786][ T34] usb 6-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 61.754939][ T34] usb 6-1: config 13 has an invalid interface number: 224 but max is 3 [ 61.764706][ T34] usb 6-1: config 13 has an invalid interface number: 50 but max is 3 [ 61.783943][ T5967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.788591][ T34] usb 6-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 61.792240][ T34] usb 6-1: config 13 has no interface number 0 [ 61.795583][ T5967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.805394][ T34] usb 6-1: config 13 has no interface number 1 [ 61.805413][ T34] usb 6-1: config 13 has no interface number 2 [ 61.805425][ T34] usb 6-1: config 13 has no interface number 3 [ 61.805479][ T34] usb 6-1: config 13 interface 152 altsetting 174 has a duplicate endpoint with address 0x3, skipping [ 61.805495][ T34] usb 6-1: config 13 interface 152 altsetting 174 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 61.805514][ T34] usb 6-1: config 13 interface 152 altsetting 174 has a duplicate endpoint with address 0x3, skipping [ 61.805532][ T34] usb 6-1: config 13 interface 152 altsetting 174 has an invalid descriptor for endpoint zero, skipping [ 61.805548][ T34] usb 6-1: config 13 interface 152 altsetting 174 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 61.805567][ T34] usb 6-1: config 13 interface 152 altsetting 174 has a duplicate endpoint with address 0x8F, skipping [ 61.805585][ T34] usb 6-1: config 13 interface 152 altsetting 174 has a duplicate endpoint with address 0xA, skipping [ 61.805601][ T34] usb 6-1: config 13 interface 152 altsetting 174 has a duplicate endpoint with address 0x8, skipping [ 61.805626][ T34] usb 6-1: config 13 interface 246 altsetting 8 bulk endpoint 0x83 has invalid maxpacket 407 [ 61.805644][ T34] usb 6-1: config 13 interface 246 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 61.805660][ T34] usb 6-1: config 13 interface 246 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 61.805675][ T34] usb 6-1: config 13 interface 246 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 61.805690][ T34] usb 6-1: config 13 interface 246 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 61.805706][ T34] usb 6-1: config 13 interface 246 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 61.805725][ T34] usb 6-1: config 13 interface 246 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 61.805748][ T34] usb 6-1: config 13 interface 224 altsetting 11 has a duplicate endpoint with address 0x4, skipping [ 61.805765][ T34] usb 6-1: config 13 interface 224 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 61.805783][ T34] usb 6-1: config 13 interface 224 altsetting 11 has a duplicate endpoint with address 0x4, skipping [ 61.805800][ T34] usb 6-1: config 13 interface 224 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 61.805816][ T34] usb 6-1: config 13 interface 224 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 61.805833][ T34] usb 6-1: config 13 interface 224 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 61.805851][ T34] usb 6-1: config 13 interface 224 altsetting 11 endpoint 0x9 has invalid wMaxPacketSize 0 [ 61.805868][ T34] usb 6-1: config 13 interface 224 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 61.805884][ T34] usb 6-1: config 13 interface 224 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 61.805907][ T34] usb 6-1: config 13 interface 50 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 61.805922][ T34] usb 6-1: config 13 interface 50 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 61.805939][ T34] usb 6-1: config 13 interface 50 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 61.805954][ T34] usb 6-1: config 13 interface 50 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 61.805969][ T34] usb 6-1: config 13 interface 50 altsetting 7 endpoint 0x86 has an invalid bInterval 101, changing to 7 [ 61.805987][ T34] usb 6-1: config 13 interface 50 altsetting 7 endpoint 0x86 has invalid maxpacket 16435, setting to 1024 [ 61.806007][ T34] usb 6-1: config 13 interface 50 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 61.806023][ T34] usb 6-1: config 13 interface 50 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 61.806037][ T34] usb 6-1: config 13 interface 50 altsetting 7 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 61.806055][ T34] usb 6-1: config 13 interface 152 has no altsetting 0 [ 61.806067][ T34] usb 6-1: config 13 interface 246 has no altsetting 0 [ 61.806080][ T34] usb 6-1: config 13 interface 224 has no altsetting 0 [ 61.806094][ T34] usb 6-1: config 13 interface 50 has no altsetting 0 [ 61.809733][ T34] usb 6-1: New USB device found, idVendor=0403, idProduct=df35, bcdDevice=4d.bd [ 61.809756][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.809771][ T34] usb 6-1: Product: ÑŠ [ 61.809782][ T34] usb 6-1: Manufacturer: 餆數뢰亗㵽ࣔ圬ëªê“§ì±‰ä’¦éž©ä¾‚ï¾²î‚ࢃ퇆㊗摠ïì‘°ì©•ì²è’±ì¢¼áŒæ¡¸æ· ï—è•“â¦îœ‘욣헤奂ॶ瓫î§ã”¡äŽ„㚗鄳퉑ļ㩟湢ퟞ潶쎙曧攋债䑬愹ë¢ãˆší‘”᎙檆碊닷窈ử洙秎ç¸ì¦Œâ¦˜ê²‚銡ⴔ⎻ሔ귿쿷儛ຽï¿â¼ì¡µî®£çŠ¡è¹¢ [ 61.809805][ T34] usb 6-1: SerialNumber: á  [ 61.834377][ T1177] bridge_slave_0: left allmulticast mode [ 61.854592][ T40] audit: type=1400 audit(1744391163.595:349): avc: denied { mounton } for pid=6488 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.936684][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.938343][ T1177] bridge_slave_0: left promiscuous mode [ 61.942378][ T40] audit: type=1400 audit(1744391163.655:350): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.058559][ T6478] 9pnet_fd: p9_fd_create_unix (6478): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 62.082275][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.341013][ T34] ftdi_sio 6-1:13.152: FTDI USB Serial Device converter detected [ 62.348041][ T34] ftdi_sio ttyUSB0: unknown device type: 0x4dbd [ 62.361553][ T34] ftdi_sio 6-1:13.246: FTDI USB Serial Device converter detected [ 62.367265][ T34] ftdi_sio ttyUSB1: unknown device type: 0x4dbd [ 62.375760][ T34] ftdi_sio 6-1:13.224: FTDI USB Serial Device converter detected [ 62.382910][ T34] ftdi_sio ttyUSB2: unknown device type: 0x4dbd [ 62.392119][ T34] ftdi_sio 6-1:13.50: FTDI USB Serial Device converter detected [ 62.400057][ T34] ftdi_sio ttyUSB3: unknown device type: 0x4dbd [ 62.415259][ T34] usb 6-1: USB disconnect, device number 4 [ 62.429322][ T34] ftdi_sio 6-1:13.152: device disconnected [ 62.437578][ T34] ftdi_sio 6-1:13.246: device disconnected [ 62.446116][ T34] ftdi_sio 6-1:13.224: device disconnected [ 62.455646][ T34] ftdi_sio 6-1:13.50: device disconnected [ 62.554883][ C0] vkms_vblank_simulate: vblank timer overrun [ 62.922928][ T40] audit: type=1400 audit(1744391164.665:351): avc: denied { setopt } for pid=6499 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.986304][ T6502] tmpfs: Bad value for 'huge' [ 63.015704][ T40] audit: type=1400 audit(1744391164.755:352): avc: denied { execute } for pid=6501 comm="syz.1.144" path="/30/file0/bus" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.026740][ T40] audit: type=1800 audit(1744391164.755:353): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.144" name="bus" dev="tmpfs" ino=186 res=0 errno=0 [ 63.056803][ T40] audit: type=1400 audit(1744391164.755:354): avc: denied { watch watch_reads } for pid=6501 comm="syz.1.144" path="/30/file1" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.260926][ T40] audit: type=1400 audit(1744391165.005:355): avc: denied { create } for pid=6504 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.271256][ T40] audit: type=1400 audit(1744391165.005:356): avc: denied { setopt } for pid=6504 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.278875][ T40] audit: type=1400 audit(1744391165.005:357): avc: denied { map } for pid=6504 comm="syz.1.146" path="socket:[13586]" dev="sockfs" ino=13586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.390779][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 63.419931][ T6511] Falling back ldisc for ptm0. [ 63.635374][ T6516] loop4: detected capacity change from 0 to 7 [ 63.652853][ T6516] Dev loop4: unable to read RDB block 7 [ 63.661086][ T6516] loop4: unable to read partition table [ 63.665499][ T6516] loop4: partition table beyond EOD, truncated [ 63.670879][ T6516] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 63.868907][ T5954] Bluetooth: hci1: command tx timeout [ 63.898644][ T6520] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 63.905547][ T6520] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 63.949495][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.978343][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 63.992674][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.006054][ T1177] bond0 (unregistering): Released all slaves [ 64.025662][ T1177] bond1 (unregistering): Released all slaves [ 64.116042][ T6523] bridge_slave_0: left allmulticast mode [ 64.146152][ C0] vkms_vblank_simulate: vblank timer overrun [ 64.159733][ T6523] bridge_slave_0: left promiscuous mode [ 64.179238][ C0] vkms_vblank_simulate: vblank timer overrun [ 64.217503][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.307135][ T6523] bridge_slave_1: left allmulticast mode [ 64.335981][ T6523] bridge_slave_1: left promiscuous mode [ 64.346046][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.464184][ C0] vkms_vblank_simulate: vblank timer overrun [ 64.487931][ T6523] bond0: (slave bond_slave_0): Releasing backup interface [ 64.497876][ T6523] bond0: (slave bond_slave_1): Releasing backup interface [ 64.528689][ C0] vkms_vblank_simulate: vblank timer overrun [ 64.539897][ T6523] team0: Port device team_slave_0 removed [ 64.569753][ T6523] team0: Port device team_slave_1 removed [ 64.574227][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.577526][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.614428][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.621637][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.892374][ T6537] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 65.008694][ C0] vkms_vblank_simulate: vblank timer overrun [ 65.349518][ T5967] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.358846][ T5967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.366319][ T5967] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.373683][ T5967] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.408073][ T5967] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.418000][ T6562] netlink: 248 bytes leftover after parsing attributes in process `syz.0.158'. [ 65.647920][ T1177] hsr_slave_0: left promiscuous mode [ 65.656597][ T1177] hsr_slave_1: left promiscuous mode [ 65.659547][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.666869][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.671218][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.675475][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.786122][ T1177] veth1_macvtap: left promiscuous mode [ 65.820051][ T1177] veth0_macvtap: left promiscuous mode [ 65.822499][ T1177] veth1_vlan: left promiscuous mode [ 65.826864][ T1177] veth0_vlan: left promiscuous mode [ 65.944440][ T5967] Bluetooth: hci1: command tx timeout [ 66.412100][ T6582] Unsupported ieee802154 address type: 0 [ 66.415159][ T6582] Unsupported ieee802154 address type: 0 [ 66.417566][ T6582] Unsupported ieee802154 address type: 0 [ 66.419822][ T6582] Unsupported ieee802154 address type: 0 [ 66.434381][ T6582] Unsupported ieee802154 address type: 0 [ 66.436654][ T6582] Unsupported ieee802154 address type: 0 [ 66.438913][ T6582] Unsupported ieee802154 address type: 0 [ 66.463588][ T6582] Unsupported ieee802154 address type: 0 [ 66.472192][ T6582] Unsupported ieee802154 address type: 0 [ 66.479852][ T6582] Unsupported ieee802154 address type: 0 [ 66.494253][ T6582] Unsupported ieee802154 address type: 0 [ 66.496812][ T6582] Unsupported ieee802154 address type: 0 [ 66.499380][ T6582] Unsupported ieee802154 address type: 0 [ 66.510467][ T6582] Unsupported ieee802154 address type: 0 [ 66.520090][ T6582] Unsupported ieee802154 address type: 0 [ 66.522854][ T6582] Unsupported ieee802154 address type: 0 [ 66.526882][ T6581] Unsupported ieee802154 address type: 0 [ 66.528910][ T6581] Unsupported ieee802154 address type: 0 [ 66.530869][ T6581] Unsupported ieee802154 address type: 0 [ 66.533942][ T6581] Unsupported ieee802154 address type: 0 [ 66.536331][ T6581] Unsupported ieee802154 address type: 0 [ 66.538934][ T6581] Unsupported ieee802154 address type: 0 [ 66.541089][ T6581] Unsupported ieee802154 address type: 0 [ 66.546673][ T6581] Unsupported ieee802154 address type: 0 [ 66.548766][ T6581] Unsupported ieee802154 address type: 0 [ 66.551838][ T6581] Unsupported ieee802154 address type: 0 [ 66.556317][ T6581] Unsupported ieee802154 address type: 0 [ 66.560241][ T6581] Unsupported ieee802154 address type: 0 [ 66.570750][ T6582] Unsupported ieee802154 address type: 0 [ 66.574042][ T6581] Unsupported ieee802154 address type: 0 [ 66.576071][ T6581] Unsupported ieee802154 address type: 0 [ 66.579111][ T6581] Unsupported ieee802154 address type: 0 [ 66.582107][ T6581] Unsupported ieee802154 address type: 0 [ 66.585793][ T6582] Unsupported ieee802154 address type: 0 [ 66.589382][ T6582] Unsupported ieee802154 address type: 0 [ 66.592199][ T6582] Unsupported ieee802154 address type: 0 [ 66.599858][ T6581] Unsupported ieee802154 address type: 0 [ 66.603005][ T6581] Unsupported ieee802154 address type: 0 [ 66.611066][ T6581] Unsupported ieee802154 address type: 0 [ 66.628917][ T6581] Unsupported ieee802154 address type: 0 [ 66.632193][ T6581] Unsupported ieee802154 address type: 0 [ 66.637971][ T6581] Unsupported ieee802154 address type: 0 [ 66.640621][ T6582] Unsupported ieee802154 address type: 0 [ 66.643068][ T6582] Unsupported ieee802154 address type: 0 [ 66.646114][ T6581] Unsupported ieee802154 address type: 0 [ 66.648516][ T6582] Unsupported ieee802154 address type: 0 [ 66.651008][ T6581] Unsupported ieee802154 address type: 0 [ 66.654641][ T6581] Unsupported ieee802154 address type: 0 [ 66.660651][ T6581] Unsupported ieee802154 address type: 0 [ 66.666152][ T6582] Unsupported ieee802154 address type: 0 [ 66.668652][ T6582] Unsupported ieee802154 address type: 0 [ 66.670985][ T6582] Unsupported ieee802154 address type: 0 [ 66.686719][ T6582] Unsupported ieee802154 address type: 0 [ 66.688697][ T6582] Unsupported ieee802154 address type: 0 [ 66.690474][ T6582] Unsupported ieee802154 address type: 0 [ 66.705836][ T6582] Unsupported ieee802154 address type: 0 [ 66.708222][ T6582] Unsupported ieee802154 address type: 0 [ 66.714503][ T6582] Unsupported ieee802154 address type: 0 [ 66.741440][ T6582] Unsupported ieee802154 address type: 0 [ 66.745477][ T6582] Unsupported ieee802154 address type: 0 [ 66.747693][ T6582] Unsupported ieee802154 address type: 0 [ 66.750239][ T6582] Unsupported ieee802154 address type: 0 [ 66.753610][ T6582] Unsupported ieee802154 address type: 0 [ 66.762724][ T6582] Unsupported ieee802154 address type: 0 [ 66.771699][ T6582] Unsupported ieee802154 address type: 0 [ 66.774731][ T6582] Unsupported ieee802154 address type: 0 [ 66.777573][ T6581] Unsupported ieee802154 address type: 0 [ 66.779509][ T6581] Unsupported ieee802154 address type: 0 [ 66.781446][ T6581] Unsupported ieee802154 address type: 0 [ 66.789962][ T6581] Unsupported ieee802154 address type: 0 [ 66.802089][ T6581] Unsupported ieee802154 address type: 0 [ 66.805414][ T6581] Unsupported ieee802154 address type: 0 [ 66.816712][ T6581] Unsupported ieee802154 address type: 0 [ 66.819187][ T6581] Unsupported ieee802154 address type: 0 [ 66.821546][ T6581] Unsupported ieee802154 address type: 0 [ 66.835047][ T6581] Unsupported ieee802154 address type: 0 [ 66.837612][ T6581] Unsupported ieee802154 address type: 0 [ 66.854721][ T6581] Unsupported ieee802154 address type: 0 [ 66.857357][ T6581] Unsupported ieee802154 address type: 0 [ 66.859498][ T6581] Unsupported ieee802154 address type: 0 [ 66.861708][ T6581] Unsupported ieee802154 address type: 0 [ 66.888565][ T6581] Unsupported ieee802154 address type: 0 [ 66.890855][ T6581] Unsupported ieee802154 address type: 0 [ 66.901919][ T6581] Unsupported ieee802154 address type: 0 [ 66.904760][ T6581] Unsupported ieee802154 address type: 0 [ 66.907044][ T6581] Unsupported ieee802154 address type: 0 [ 66.909351][ T6581] Unsupported ieee802154 address type: 0 [ 66.913807][ T6581] Unsupported ieee802154 address type: 0 [ 66.916337][ T6581] Unsupported ieee802154 address type: 0 [ 66.935450][ T6581] Unsupported ieee802154 address type: 0 [ 66.939153][ T6581] Unsupported ieee802154 address type: 0 [ 66.942464][ T6581] Unsupported ieee802154 address type: 0 [ 66.963498][ T6581] Unsupported ieee802154 address type: 0 [ 66.965512][ T6581] Unsupported ieee802154 address type: 0 [ 66.967777][ T6581] Unsupported ieee802154 address type: 0 [ 66.969977][ T6581] Unsupported ieee802154 address type: 0 [ 66.985629][ T6582] Unsupported ieee802154 address type: 0 [ 66.988977][ T6582] Unsupported ieee802154 address type: 0 [ 66.991233][ T6582] Unsupported ieee802154 address type: 0 [ 66.997024][ T6582] Unsupported ieee802154 address type: 0 [ 66.999976][ T6582] Unsupported ieee802154 address type: 0 [ 67.019089][ T6582] Unsupported ieee802154 address type: 0 [ 67.021429][ T6582] Unsupported ieee802154 address type: 0 [ 67.046320][ T6582] Unsupported ieee802154 address type: 0 [ 67.048674][ T6581] Unsupported ieee802154 address type: 0 [ 67.051242][ T6582] Unsupported ieee802154 address type: 0 [ 67.053630][ T6581] Unsupported ieee802154 address type: 0 [ 67.055900][ T6582] Unsupported ieee802154 address type: 0 [ 67.057940][ T6582] Unsupported ieee802154 address type: 0 [ 67.060026][ T6582] Unsupported ieee802154 address type: 0 [ 67.072589][ T6582] Unsupported ieee802154 address type: 0 [ 67.079827][ T6582] Unsupported ieee802154 address type: 0 [ 67.104902][ T6582] Unsupported ieee802154 address type: 0 [ 67.107142][ T6582] Unsupported ieee802154 address type: 0 [ 67.114300][ T6582] Unsupported ieee802154 address type: 0 [ 67.132116][ T6582] Unsupported ieee802154 address type: 0 [ 67.134744][ T6582] Unsupported ieee802154 address type: 0 [ 67.139560][ T6582] Unsupported ieee802154 address type: 0 [ 67.141696][ T6582] Unsupported ieee802154 address type: 0 [ 67.148389][ T6582] Unsupported ieee802154 address type: 0 [ 67.150467][ T6582] Unsupported ieee802154 address type: 0 [ 67.158024][ T6582] Unsupported ieee802154 address type: 0 [ 67.161034][ T6582] Unsupported ieee802154 address type: 0 [ 67.175762][ T6581] Unsupported ieee802154 address type: 0 [ 67.177896][ T6581] Unsupported ieee802154 address type: 0 [ 67.180053][ T6581] Unsupported ieee802154 address type: 0 [ 67.183141][ T6581] Unsupported ieee802154 address type: 0 [ 67.186149][ T6581] Unsupported ieee802154 address type: 0 [ 67.189448][ T6581] Unsupported ieee802154 address type: 0 [ 67.194247][ T6581] Unsupported ieee802154 address type: 0 [ 67.451729][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 67.451746][ T40] audit: type=1400 audit(1744391169.195:380): avc: denied { mount } for pid=6588 comm="syz.1.165" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.480425][ T5967] Bluetooth: hci0: command tx timeout [ 68.025254][ T5967] Bluetooth: hci1: command tx timeout [ 68.398940][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 68.615847][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 69.553566][ T5967] Bluetooth: hci0: command tx timeout [ 70.104287][ T5967] Bluetooth: hci1: command tx timeout [ 70.311831][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 70.830646][ T40] audit: type=1400 audit(1744391172.575:381): avc: denied { read } for pid=6617 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.889700][ T40] audit: type=1400 audit(1744391172.635:382): avc: denied { read } for pid=6625 comm="syz.1.173" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.901911][ T40] audit: type=1400 audit(1744391172.635:383): avc: denied { open } for pid=6625 comm="syz.1.173" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.935857][ T40] audit: type=1400 audit(1744391172.635:384): avc: denied { ioctl } for pid=6625 comm="syz.1.173" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.006492][ T40] audit: type=1400 audit(1744391172.755:385): avc: denied { bind } for pid=6629 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.063229][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.069199][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.087778][ T6488] bridge_slave_0: entered allmulticast mode [ 71.096895][ T6488] bridge_slave_0: entered promiscuous mode [ 71.104262][ T40] audit: type=1400 audit(1744391172.855:386): avc: denied { ioctl } for pid=6629 comm="syz.1.175" path="socket:[13753]" dev="sockfs" ino=13753 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.117511][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.145938][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.161655][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.161741][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.168227][ T6488] bridge_slave_1: entered allmulticast mode [ 71.172637][ T6488] bridge_slave_1: entered promiscuous mode [ 71.175633][ T40] audit: type=1400 audit(1744391172.925:387): avc: denied { accept } for pid=6627 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 71.214878][ T40] audit: type=1400 audit(1744391172.965:388): avc: denied { listen } for pid=6627 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.223987][ T40] audit: type=1400 audit(1744391172.965:389): avc: denied { write } for pid=6627 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.569218][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.577566][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.624656][ T5967] Bluetooth: hci0: command tx timeout [ 71.887232][ T6488] team0: Port device team_slave_0 added [ 71.905814][ T6488] team0: Port device team_slave_1 added [ 71.982455][ T6642] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.016747][ T6653] ======================================================= [ 72.016747][ T6653] WARNING: The mand mount option has been deprecated and [ 72.016747][ T6653] and is ignored by this kernel. Remove the mand [ 72.016747][ T6653] option from the mount to silence this warning. [ 72.016747][ T6653] ======================================================= [ 72.096496][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.099674][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.136884][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.195863][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.205533][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.235774][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.268789][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 72.289119][ T6660] netlink: 'syz.0.181': attribute type 2 has an invalid length. [ 72.411018][ T6659] macsec0: entered promiscuous mode [ 72.624660][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 72.624677][ T40] audit: type=1400 audit(1744391174.365:394): avc: denied { write } for pid=6669 comm="syz.1.183" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.636601][ T40] audit: type=1400 audit(1744391174.365:395): avc: denied { ioctl } for pid=6669 comm="syz.1.183" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.769680][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 72.876196][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.043558][ T6488] hsr_slave_0: entered promiscuous mode [ 73.049577][ T6488] hsr_slave_1: entered promiscuous mode [ 73.066210][ T6488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.071534][ T6488] Cannot create hsr debugfs directory [ 73.873170][ T6692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32870 sclass=netlink_route_socket pid=6692 comm=syz.0.187 [ 73.891097][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.913045][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.920073][ T6556] bridge_slave_0: entered allmulticast mode [ 73.932252][ T6556] bridge_slave_0: entered promiscuous mode [ 74.032356][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.036780][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.040676][ T6556] bridge_slave_1: entered allmulticast mode [ 74.052319][ T6556] bridge_slave_1: entered promiscuous mode [ 74.065167][ T40] audit: type=1400 audit(1744391175.815:396): avc: denied { write } for pid=6696 comm="syz.0.188" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.309575][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.324542][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.499816][ T6556] team0: Port device team_slave_0 added [ 74.577740][ T6556] team0: Port device team_slave_1 added [ 74.599235][ T40] audit: type=1400 audit(1744391176.345:397): avc: denied { create } for pid=6704 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 74.654666][ T40] audit: type=1400 audit(1744391176.405:398): avc: denied { read } for pid=6704 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 74.709104][ T6706] syz.0.190: attempt to access beyond end of device [ 74.709104][ T6706] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 74.717509][ T6706] befs: (nbd0): unable to read superblock [ 74.782862][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.785567][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.802481][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.834763][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.843849][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.870800][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.926341][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 74.928822][ T5967] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.011846][ T6488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.165877][ T6556] hsr_slave_0: entered promiscuous mode [ 75.168975][ T6556] hsr_slave_1: entered promiscuous mode [ 75.172768][ T6556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.178576][ T6556] Cannot create hsr debugfs directory [ 75.180923][ T6488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.242739][ T6488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.261611][ T6488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.263508][ T40] audit: type=1400 audit(1744391177.005:399): avc: denied { search } for pid=5342 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.682541][ T40] audit: type=1400 audit(1744391177.435:400): avc: denied { write } for pid=6722 comm="syz.0.192" name="/" dev="9p" ino=36831356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.721120][ T40] audit: type=1400 audit(1744391177.435:401): avc: denied { add_name } for pid=6722 comm="syz.0.192" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.757404][ T6725] 9pnet_virtio: no channels available for device syz [ 75.775311][ T40] audit: type=1400 audit(1744391177.435:402): avc: denied { create } for pid=6722 comm="syz.0.192" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.800191][ T6556] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.842306][ T40] audit: type=1400 audit(1744391177.435:403): avc: denied { associate } for pid=6722 comm="syz.0.192" name="pids.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.857403][ T6556] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.878629][ T6556] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.911917][ T6556] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.031007][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.167394][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.223009][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.227022][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.277642][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.282393][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.291222][ T6735] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 76.294370][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 76.439965][ T6488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.530599][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.576361][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.602417][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.608409][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.640907][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.660556][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.819422][ T6556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.828837][ T6556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.858002][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.070048][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.311063][ T6764] netlink: 'syz.1.197': attribute type 10 has an invalid length. [ 77.316812][ T6764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'. [ 77.403000][ T6769] 9p: Unknown Cache mode or invalid value fs [ 77.418671][ T6764] team0: Port device geneve0 added [ 77.549248][ T6488] veth0_vlan: entered promiscuous mode [ 77.634999][ T6488] veth1_vlan: entered promiscuous mode [ 77.749399][ T6556] veth0_vlan: entered promiscuous mode [ 77.765641][ T6488] veth0_macvtap: entered promiscuous mode [ 77.800387][ T6488] veth1_macvtap: entered promiscuous mode [ 77.824384][ T6556] veth1_vlan: entered promiscuous mode [ 77.907252][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.913009][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.918383][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.925418][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.931906][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.953278][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.957903][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.964368][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.971357][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.986024][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.991786][ T6488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.005760][ T6488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.017483][ T6488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.021370][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.198'. [ 78.022194][ T6488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.042970][ T6556] veth0_macvtap: entered promiscuous mode [ 78.074995][ T6556] veth1_macvtap: entered promiscuous mode [ 78.227688][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.242304][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.254714][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.262286][ T6792] syz.1.199: attempt to access beyond end of device [ 78.262286][ T6792] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 78.279323][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.279446][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.295360][ T6792] syz.1.199: attempt to access beyond end of device [ 78.295360][ T6792] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 78.313721][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.351405][ T6792] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 78.351679][ T6792] syz.1.199: attempt to access beyond end of device [ 78.351679][ T6792] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 78.351733][ T6792] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 78.387487][ T6792] syz.1.199: attempt to access beyond end of device [ 78.387487][ T6792] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 78.428763][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.480926][ T6792] syz.1.199: attempt to access beyond end of device [ 78.480926][ T6792] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 78.487129][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.527289][ T6792] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 78.539762][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.539778][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.539791][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.539809][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.539820][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.541118][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.544339][ T6556] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.544367][ T6556] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.544388][ T6556] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.544408][ T6556] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.576919][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.594452][ T6792] syz.1.199: attempt to access beyond end of device [ 78.594452][ T6792] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 78.636587][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.637787][ T6792] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 78.701750][ T6792] syz.1.199: attempt to access beyond end of device [ 78.701750][ T6792] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 78.710165][ T6792] syz.1.199: attempt to access beyond end of device [ 78.710165][ T6792] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 78.717555][ T6792] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 78.724837][ T6792] syz.1.199: attempt to access beyond end of device [ 78.724837][ T6792] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 78.732728][ T6792] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 78.741772][ T6792] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 78.751874][ T6792] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 78.757804][ T6792] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 79.079478][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.094425][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.161943][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 79.161959][ T40] audit: type=1400 audit(1744391180.915:411): avc: denied { setrlimit } for pid=6797 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 79.202086][ T40] audit: type=1400 audit(1744391180.935:412): avc: denied { mounton } for pid=6488 comm="syz-executor" path="/syzkaller.44dVio/syz-tmp" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 79.238487][ T40] audit: type=1400 audit(1744391180.935:413): avc: denied { mounton } for pid=6488 comm="syz-executor" path="/syzkaller.44dVio/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 79.288001][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.291040][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.422085][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.427790][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.870817][ T6827] netlink: 'syz.4.205': attribute type 10 has an invalid length. [ 79.888240][ T6827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.205'. [ 79.947604][ T6829] 9p: Unknown Cache mode or invalid value fs [ 79.950124][ T6829] 9pnet: Tag 65535 still in use [ 79.968477][ C3] ------------[ cut here ]------------ [ 79.971215][ C3] refcount_t: underflow; use-after-free. [ 79.978544][ C3] WARNING: CPU: 3 PID: 6828 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 79.989344][ C3] Modules linked in: [ 79.991057][ C3] CPU: 3 UID: 0 PID: 6828 Comm: rm Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 80.001692][ T1021] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.011662][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.011696][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 80.011719][ C3] Code: ff 89 de e8 08 ab eb fc 84 db 0f 85 66 ff ff ff e8 1b b0 eb fc c6 05 5e 26 9f 0b 01 90 48 c7 c7 40 0f f4 8b e8 f7 40 ab fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 f8 af eb fc 0f b6 1d 39 26 9f 0b 31 [ 80.011733][ C3] RSP: 0018:ffffc900006f8d90 EFLAGS: 00010082 [ 80.011747][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817acff8 [ 80.011756][ C3] RDX: ffff88802471a440 RSI: ffffffff817ad005 RDI: 0000000000000001 [ 80.011765][ C3] RBP: ffff88804e46e118 R08: 0000000000000001 R09: 0000000000000000 [ 80.011773][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804e46e118 [ 80.011782][ C3] R13: ffff88802a1edc00 R14: 0000000000000015 R15: 1ffff110209f380c [ 80.011791][ C3] FS: 0000000000000000(0000) GS:ffff8880d6cb3000(0000) knlGS:0000000000000000 [ 80.011816][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.011827][ C3] CR2: 00007f8fe2a47108 CR3: 00000000518ec000 CR4: 0000000000352ef0 [ 80.011835][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.011843][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.011852][ C3] Call Trace: [ 80.011858][ C3] [ 80.011865][ C3] p9_req_put+0x1ec/0x250 [ 80.011885][ C3] req_done+0x1dc/0x2e0 [ 80.011903][ C3] ? __pfx_req_done+0x10/0x10 [ 80.011918][ C3] ? sched_clock_cpu+0x6c/0x530 [ 80.011937][ C3] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 80.011954][ C3] ? __pfx_req_done+0x10/0x10 [ 80.011968][ C3] vring_interrupt+0x31b/0x400 [ 80.011985][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 80.012001][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 80.012023][ C3] handle_irq_event+0xab/0x1e0 [ 80.012040][ C3] handle_edge_irq+0x263/0xd10 [ 80.012060][ C3] __common_interrupt+0xdf/0x250 [ 80.012075][ C3] common_interrupt+0xba/0xe0 [ 80.012094][ C3] [ 80.012098][ C3] [ 80.012105][ C3] asm_common_interrupt+0x26/0x40 [ 80.012119][ C3] RIP: 0010:stack_depot_save_flags+0x4/0xa50 [ 80.012134][ C3] Code: 01 0f 85 10 ff ff ff 90 0f 0b 90 e9 07 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <83> f9 03 0f 87 96 03 00 00 41 57 41 56 49 89 fe 41 55 41 54 41 89 [ 80.012147][ C3] RSP: 0018:ffffc9000392f5d0 EFLAGS: 00000283 [ 80.012158][ C3] RAX: 000000000000000d RBX: ffffc9000392f5d8 RCX: 0000000000000001 [ 80.012167][ C3] RDX: 0000000000000cc0 RSI: 000000000000000d RDI: ffffc9000392f5d8 [ 80.012175][ C3] RBP: 0000000000000cc0 R08: 0000000000000001 R09: 0000000000000000 [ 80.012183][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 80.012191][ C3] R13: 0000000000000cc0 R14: 0000000000000100 R15: 0000000000000000 [ 80.012210][ C3] kasan_save_stack+0x42/0x60 [ 80.012223][ C3] ? kasan_save_stack+0x33/0x60 [ 80.012234][ C3] ? kasan_save_track+0x14/0x30 [ 80.012245][ C3] ? __kasan_slab_alloc+0x89/0x90 [ 80.012258][ C3] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 80.012271][ C3] ? vm_area_alloc+0x1f/0x160 [ 80.012287][ C3] ? __mmap_region+0xfd0/0x27c0 [ 80.012300][ C3] ? mmap_region+0x1ab/0x3f0 [ 80.012312][ C3] ? do_mmap+0xd8e/0x11b0 [ 80.012328][ C3] ? vm_mmap_pgoff+0x281/0x450 [ 80.012345][ C3] ? ksys_mmap_pgoff+0x32c/0x5c0 [ 80.012361][ C3] ? __x64_sys_mmap+0x125/0x190 [ 80.012375][ C3] ? do_syscall_64+0xcd/0x260 [ 80.012391][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.012456][ C3] kasan_save_track+0x14/0x30 [ 80.012469][ C3] __kasan_slab_alloc+0x89/0x90 [ 80.012484][ C3] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 80.012497][ C3] ? vma_merge_new_range+0x3f8/0xc10 [ 80.012509][ C3] ? vm_area_alloc+0x1f/0x160 [ 80.012529][ C3] vm_area_alloc+0x1f/0x160 [ 80.012545][ C3] __mmap_region+0xfd0/0x27c0 [ 80.012561][ C3] ? __pfx___mmap_region+0x10/0x10 [ 80.012574][ C3] ? __lock_acquire+0x5ca/0x1ba0 [ 80.012625][ C3] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 80.012651][ C3] mmap_region+0x1ab/0x3f0 [ 80.012669][ C3] do_mmap+0xd8e/0x11b0 [ 80.012690][ C3] ? __pfx_do_mmap+0x10/0x10 [ 80.012707][ C3] ? __pfx_down_write_killable+0x10/0x10 [ 80.012732][ C3] vm_mmap_pgoff+0x281/0x450 [ 80.012753][ C3] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 80.012773][ C3] ? __fget_files+0x20e/0x3c0 [ 80.012791][ C3] ksys_mmap_pgoff+0x32c/0x5c0 [ 80.012808][ C3] ? __pfx___x64_sys_pread64+0x10/0x10 [ 80.012824][ C3] __x64_sys_mmap+0x125/0x190 [ 80.012841][ C3] do_syscall_64+0xcd/0x260 [ 80.012860][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.012873][ C3] RIP: 0033:0x7f8fe2a71b74 [ 80.012885][ C3] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 80.012897][ C3] RSP: 002b:00007ffeae8187d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 80.012910][ C3] RAX: ffffffffffffffda RBX: 00007ffeae818888 RCX: 00007f8fe2a71b74 [ 80.012919][ C3] RDX: 0000000000000003 RSI: 0000000000006000 RDI: 00007f8fe2976000 [ 80.012928][ C3] RBP: 00007ffeae818f70 R08: 0000000000000003 R09: 000000000019d000 [ 80.012936][ C3] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f8fe2a4c8d0 [ 80.012945][ C3] R13: 00007ffeae818ff8 R14: 000000000019d264 R15: 0000000000000000 [ 80.012965][ C3] [ 80.012972][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.012983][ C3] CPU: 3 UID: 0 PID: 6828 Comm: rm Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 80.013001][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.013009][ C3] Call Trace: [ 80.013014][ C3] [ 80.013019][ C3] dump_stack_lvl+0x3d/0x1f0 [ 80.013038][ C3] panic+0x71c/0x800 [ 80.013051][ C3] ? __pfx_panic+0x10/0x10 [ 80.013064][ C3] ? show_trace_log_lvl+0x29b/0x3e0 [ 80.013089][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 80.013104][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 80.013119][ C3] check_panic_on_warn+0xab/0xb0 [ 80.013133][ C3] __warn+0xf6/0x3c0 [ 80.013145][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 80.013161][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 80.013177][ C3] report_bug+0x3c3/0x580 [ 80.013193][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 80.013209][ C3] handle_bug+0x184/0x210 [ 80.013228][ C3] exc_invalid_op+0x17/0x50 [ 80.013247][ C3] asm_exc_invalid_op+0x1a/0x20 [ 80.013259][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 80.013274][ C3] Code: ff 89 de e8 08 ab eb fc 84 db 0f 85 66 ff ff ff e8 1b b0 eb fc c6 05 5e 26 9f 0b 01 90 48 c7 c7 40 0f f4 8b e8 f7 40 ab fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 f8 af eb fc 0f b6 1d 39 26 9f 0b 31 [ 80.013286][ C3] RSP: 0018:ffffc900006f8d90 EFLAGS: 00010082 [ 80.013297][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817acff8 [ 80.013305][ C3] RDX: ffff88802471a440 RSI: ffffffff817ad005 RDI: 0000000000000001 [ 80.013314][ C3] RBP: ffff88804e46e118 R08: 0000000000000001 R09: 0000000000000000 [ 80.013322][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804e46e118 [ 80.013330][ C3] R13: ffff88802a1edc00 R14: 0000000000000015 R15: 1ffff110209f380c [ 80.013346][ C3] ? __warn_printk+0x198/0x350 [ 80.013358][ C3] ? __warn_printk+0x1a5/0x350 [ 80.013374][ C3] p9_req_put+0x1ec/0x250 [ 80.013393][ C3] req_done+0x1dc/0x2e0 [ 80.013409][ C3] ? __pfx_req_done+0x10/0x10 [ 80.013422][ C3] ? sched_clock_cpu+0x6c/0x530 [ 80.013438][ C3] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 80.013453][ C3] ? __pfx_req_done+0x10/0x10 [ 80.013466][ C3] vring_interrupt+0x31b/0x400 [ 80.013481][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 80.013496][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 80.013515][ C3] handle_irq_event+0xab/0x1e0 [ 80.013531][ C3] handle_edge_irq+0x263/0xd10 [ 80.013549][ C3] __common_interrupt+0xdf/0x250 [ 80.013562][ C3] common_interrupt+0xba/0xe0 [ 80.013574][ C3] [ 80.013578][ C3] [ 80.013584][ C3] asm_common_interrupt+0x26/0x40 [ 80.013596][ C3] RIP: 0010:stack_depot_save_flags+0x4/0xa50 [ 80.013609][ C3] Code: 01 0f 85 10 ff ff ff 90 0f 0b 90 e9 07 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <83> f9 03 0f 87 96 03 00 00 41 57 41 56 49 89 fe 41 55 41 54 41 89 [ 80.013621][ C3] RSP: 0018:ffffc9000392f5d0 EFLAGS: 00000283 [ 80.013631][ C3] RAX: 000000000000000d RBX: ffffc9000392f5d8 RCX: 0000000000000001 [ 80.013639][ C3] RDX: 0000000000000cc0 RSI: 000000000000000d RDI: ffffc9000392f5d8 [ 80.013646][ C3] RBP: 0000000000000cc0 R08: 0000000000000001 R09: 0000000000000000 [ 80.013654][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 80.013661][ C3] R13: 0000000000000cc0 R14: 0000000000000100 R15: 0000000000000000 [ 80.013679][ C3] kasan_save_stack+0x42/0x60 [ 80.013690][ C3] ? kasan_save_stack+0x33/0x60 [ 80.013701][ C3] ? kasan_save_track+0x14/0x30 [ 80.013712][ C3] ? __kasan_slab_alloc+0x89/0x90 [ 80.013723][ C3] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 80.013735][ C3] ? vm_area_alloc+0x1f/0x160 [ 80.013749][ C3] ? __mmap_region+0xfd0/0x27c0 [ 80.013761][ C3] ? mmap_region+0x1ab/0x3f0 [ 80.013772][ C3] ? do_mmap+0xd8e/0x11b0 [ 80.013786][ C3] ? vm_mmap_pgoff+0x281/0x450 [ 80.013800][ C3] ? ksys_mmap_pgoff+0x32c/0x5c0 [ 80.013815][ C3] ? __x64_sys_mmap+0x125/0x190 [ 80.013827][ C3] ? do_syscall_64+0xcd/0x260 [ 80.013842][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.013878][ C3] kasan_save_track+0x14/0x30 [ 80.013890][ C3] __kasan_slab_alloc+0x89/0x90 [ 80.013904][ C3] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 80.013917][ C3] ? vma_merge_new_range+0x3f8/0xc10 [ 80.013928][ C3] ? vm_area_alloc+0x1f/0x160 [ 80.013946][ C3] vm_area_alloc+0x1f/0x160 [ 80.013962][ C3] __mmap_region+0xfd0/0x27c0 [ 80.013977][ C3] ? __pfx___mmap_region+0x10/0x10 [ 80.013989][ C3] ? __lock_acquire+0x5ca/0x1ba0 [ 80.014037][ C3] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 80.014061][ C3] mmap_region+0x1ab/0x3f0 [ 80.014081][ C3] do_mmap+0xd8e/0x11b0 [ 80.014101][ C3] ? __pfx_do_mmap+0x10/0x10 [ 80.014118][ C3] ? __pfx_down_write_killable+0x10/0x10 [ 80.014140][ C3] vm_mmap_pgoff+0x281/0x450 [ 80.014160][ C3] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 80.014180][ C3] ? __fget_files+0x20e/0x3c0 [ 80.014197][ C3] ksys_mmap_pgoff+0x32c/0x5c0 [ 80.014212][ C3] ? __pfx___x64_sys_pread64+0x10/0x10 [ 80.014227][ C3] __x64_sys_mmap+0x125/0x190 [ 80.014244][ C3] do_syscall_64+0xcd/0x260 [ 80.014261][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.014273][ C3] RIP: 0033:0x7f8fe2a71b74 [ 80.014283][ C3] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 80.014294][ C3] RSP: 002b:00007ffeae8187d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 80.014305][ C3] RAX: ffffffffffffffda RBX: 00007ffeae818888 RCX: 00007f8fe2a71b74 [ 80.014313][ C3] RDX: 0000000000000003 RSI: 0000000000006000 RDI: 00007f8fe2976000 [ 80.014321][ C3] RBP: 00007ffeae818f70 R08: 0000000000000003 R09: 000000000019d000 [ 80.014329][ C3] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f8fe2a4c8d0 [ 80.014337][ C3] R13: 00007ffeae818ff8 R14: 000000000019d264 R15: 0000000000000000 [ 80.014356][ C3] [ 80.015274][ C3] Kernel Offset: disabled VM DIAGNOSIS: 17:06:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff815f95a0 RDX=ffff88802a192440 RSI=ffffffff815f95e8 RDI=ffffffff93abce80 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27579d0 R10=ffffffff93abce87 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815f95e9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880d69b3000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000000e182000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd181ae2a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46cf00f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46cf00f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46cf00f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46cf00f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46cf00fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46cf00faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000070 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff815f95a0 RDX=ffff888026ac0000 RSI=ffffffff815f95e8 RDI=ffffffff93abce80 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27579d0 R10=ffffffff93abce87 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815f95e9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c26f6be CR3=0000000022650000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc07e4b110 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12e5e0f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12e5e0f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12e5e0f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12e5e0f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12e5e0fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12e5e0faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010201 RBX=0000000000000000 RCX=ffffffff815f95a0 RDX=ffff8880278ba440 RSI=ffffffff815f95e8 RDI=ffffffff93abce80 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27579d0 R10=ffffffff93abce87 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815f95e9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3bb82d7d60 CR3=000000000e182000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bb777d6a3 00007f3bb777d6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc07d2c6f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557bb57114 000055557bb56b50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557bb4d478 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557bb56100 000055557bb55e20 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10a80300080010a0 030fffffffffffff 0410900300000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0110800403f21000 0980040780042e10 000a013cc0000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001ffff ffffffffffffbf08 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10a80300080010a0 030fffffffffffff 0410900300000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854dfe45 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc900006f87e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000065646f43 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ae254a0 R15=ffffffff854dfde0 RIP=ffffffff854dfe6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8fe2a47108 CR3=00000000518ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000