last executing test programs: 2.355193149s ago: executing program 2 (id=797): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 2.353687894s ago: executing program 2 (id=798): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={<r2=>0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r2}) r4 = socket(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800401}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x60, 0x1403, 0x200, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 2.260185012s ago: executing program 2 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000b00000000000c000180060017"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x2000d010) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000009c0), 0x101000, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) 2.259620255s ago: executing program 2 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000240)) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r3, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}], @NL80211_ATTR_PBSS={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r3, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4840}, 0x20000894) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200013, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0}) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08b560f09d33fe5ce65c769529e0eac6899b31e82c776da950"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8d3301f00074000000006b00000008000300", @ANYRES32=r9, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) 2.060521368s ago: executing program 2 (id=801): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @rose}, [@remote, @netrom, @rose, @netrom, @netrom, @bcast, @rose, @rose]}, &(0x7f00000002c0)=0x48, 0x0) fremovexattr(r0, &(0x7f0000000400)=@random={'user.', '\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x3, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x8, 0x4) connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r2, 0x0, {0x1, 0xf1, 0x2}, 0xff}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$can_j1939(r1, &(0x7f0000000280)={&(0x7f0000000140)=@qipcrtr, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000200)=""/37, 0x25}], 0x3}, 0x10100) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) 2.060277948s ago: executing program 2 (id=802): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xdd1ff000) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000340)) 768.751007ms ago: executing program 1 (id=837): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x40010011, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xb4, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x5319) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x30, r4, 0x5, 0x70bd2b, 0x25dfdb00, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x200040c5}, 0x2000a040) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)=0x4) 767.121557ms ago: executing program 1 (id=839): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000006c0)="5aee41dea43e63a3f7fb7ff7a8567c11", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000240)="6f7350de54c92267e8d6c0b626d2393917646639b0bb946d", 0x0, 0x18) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 579.722999ms ago: executing program 1 (id=841): r0 = io_uring_setup(0x7c27, &(0x7f0000000040)={0x0, 0x873b, 0x8000, 0x2, 0x1d0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0x0, 0x1000], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r3=>0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc005}, 0x40005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r4=>0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r4, 0x2, {0x1, 0xf0, 0x2}, 0x1}, 0x18) socketpair(0x2b, 0x80001, 0x0, &(0x7f0000000000)) 579.248479ms ago: executing program 1 (id=842): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006200)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="24c2e2fb6d02ac2707af5fe61d2a9fdb8c8854fed3bfe8c759b0dc529f960ad7c002c29da2a685724c8ef5b614", 0x2d}, {&(0x7f0000000280)="af7bca008b3753746a5a192e30d2a391f6e4ec5e1db94152164e30d5c9548c1a1a29a22635e291", 0x27}], 0x2, 0x0, 0x0, 0x24000844}], 0x1, 0x10008800) recvmmsg(r1, &(0x7f0000005a80)=[{{&(0x7f0000000100)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005940)=[{&(0x7f0000005c00)=""/95, 0x5f}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000580)=""/88, 0x58}], 0x5, &(0x7f0000005f80)=""/264, 0x108}, 0x7}, {{&(0x7f0000000780)=@nfc, 0x80, &(0x7f0000000240)=[{&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000001800)=""/83, 0x53}, {&(0x7f0000001880)=""/106, 0x6a}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x4, &(0x7f0000002900)=""/224, 0xe0}, 0x6}, {{&(0x7f0000002a00)=@phonet, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000500)=""/47, 0x2f}, {&(0x7f0000002a80)=""/87, 0x57}, {&(0x7f0000002b00)=""/140, 0x8c}, {&(0x7f0000002bc0)=""/57, 0x39}, {&(0x7f0000002c00)=""/66, 0x42}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/155, 0x9b}, {&(0x7f0000003d40)=""/135, 0x87}, {&(0x7f0000003e00)=""/55, 0x37}, {&(0x7f0000003e40)=""/20, 0x14}], 0xa}, 0x10000}, {{&(0x7f0000003f40)=@caif=@rfm, 0x80, &(0x7f0000004040)=[{&(0x7f0000003fc0)=""/60, 0x3c}], 0x1, &(0x7f0000004080)=""/78, 0x4e}, 0x1}, {{&(0x7f0000004100)=@sco, 0x80, &(0x7f0000005300), 0x0, &(0x7f0000005340)=""/221, 0xdd}, 0x8000}, {{&(0x7f0000005440)=@hci, 0x80, &(0x7f0000005a00)=[{&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/220, 0xdc}, {&(0x7f00000055c0)=""/108, 0x6c}, {&(0x7f0000005640)=""/221, 0xdd}, {&(0x7f0000005740)=""/246, 0xf6}, {&(0x7f0000005840)=""/193, 0xc1}, {&(0x7f0000005ec0)=""/167, 0xa7}], 0x7}, 0x4a}], 0x6, 0xcb, 0x0) 549.890554ms ago: executing program 1 (id=844): r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f00000003c0)) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503000000000000", @ANYRES32=<r1=>0x41424344], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r6}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r11=>0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="310300000000000000000500000008000300", @ANYRES32=r11], 0x1c}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000240)={0x7, <r12=>r5, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', r11, 0x4, 0x9, 0x2, 0x500, 0x4, @private2, @loopback, 0x40, 0x20, 0x5, 0x1000}}) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r13, &(0x7f0000000980)={0x2020, 0x0, <r14=>0x0}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYRES64=r14], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380)=r8, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 479.625642ms ago: executing program 0 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=<r6=>0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r6, r5, 0x0, 0x115, &(0x7f0000000600)='cgroup\x003e\xbe\xe2t\t\xd0\xf7/Q\x11\x1f\xc2\xdcH4FX\xac\x8d\xa6G\f\xa4^\x93\xad>\xe5\x91y\x01\x17,SO\r\xba\xfdB\x0eT\x1d\x15/\xb0\xe6\xda\xdc\x913\xee\xba\xc2v\x1e\x82\x03\x1c\x15c\x90\x96\xd4\xdf\xcf\xe6~\xe7[Z\xbd\xcc\x06\xde\xd3\xd9\x18\x82\xf3c\x87{\x98d\x87\xe3\x81CrL\xf5\xe8V\xef\x18?I\xe5C\xa1\xfe\x1a\x98h\x1c]\xf4f\xbccu\x04\x99E\xf2\x15\xca\x0e\xda\x14\x87Ng\xc0P\x02\xe2V\xec\x02x\xcb\xa7\xf2\x1a\xed~P\xf2_\x94\n\xa8\x95\xd0\xfc\xad\x05Ij\x180n\x96\xbd\x95L=1\xc0\x8f\xdf\xba\xa2r}=G\xa1{\xe4\xe8\x19\xf2\xc510G\x12\x87\x98\x8e^z\xa2\xe3\xea\xe9u`\x8b\t\x82&\x8c\xac\x9b\x00s\xb7\xc8\x83\x9d\x95\xc7AU\xb9\xfd\x832=c\xd4\xed\x1f\x99\x7f\x100n\x8e\xfa.\xbe\x80~\xc4\x9d\x1eU\xc8k2\xabj\xc8\x99\x88\x93 \xed\x88\x17cD\xfb\a\xb5t\x86\xed\xc0f\xa2\xa7v\x0e\x8awQ\x0e\x81\xean\xe6#{0'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) (async) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000001500)=0x2, 0x12) (async) write$cgroup_int(r8, &(0x7f0000001500)=0x2, 0x12) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x800) (async) r10 = accept4(r9, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r10) r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) fadvise64(r11, 0xe668, 0x0, 0x3) (async) fadvise64(r11, 0xe668, 0x0, 0x3) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) write(r12, &(0x7f0000000080)="f3752c7186147c81e0d53a1395ac0cd607ae695923ab951ca0a7f7a8ac3ba215ed11630e6e81a9cb894864cdf2ae65b47ba21b00dee02caff94d74a38fdae99ef9fff1d508d4d0fe8424a44f4daa2112a0dbe1fd2f15953c5724f37a5dff7f4c5dc318c83c8ec1daa659ce66802d9409d7b8fa080c092fc2cd5f36d2f29b020d4df43424e0a31c147446a94743f0ade11fa8e252d65c48a19f5bdcf03eae5ff347e361b247ea003229ee", 0xaa) (async) write(r12, &(0x7f0000000080)="f3752c7186147c81e0d53a1395ac0cd607ae695923ab951ca0a7f7a8ac3ba215ed11630e6e81a9cb894864cdf2ae65b47ba21b00dee02caff94d74a38fdae99ef9fff1d508d4d0fe8424a44f4daa2112a0dbe1fd2f15953c5724f37a5dff7f4c5dc318c83c8ec1daa659ce66802d9409d7b8fa080c092fc2cd5f36d2f29b020d4df43424e0a31c147446a94743f0ade11fa8e252d65c48a19f5bdcf03eae5ff347e361b247ea003229ee", 0xaa) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2b, 0x99, 0xe, 0x7, 0x22, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0xd3eb0cd689a09793, 0x7, 0x40}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r13=>0x0, 0x2b, 0x99, 0xe, 0x7, 0x22, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0xd3eb0cd689a09793, 0x7, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000440)=@mpls_newroute={0xd4, 0x18, 0x8, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x0, 0x14, 0x9, 0xfd, 0x5, 0xfe, 0x2, 0x500}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}, @RTA_VIA={0x14, 0x12, {0x1a, "9782da60e5c2132bf18cad037f66"}}, @RTA_DST={0x8, 0x1, {0x4}}, @RTA_DST={0x8, 0x1, {0x9}}, @RTA_OIF={0x8, 0x4, r13}, @RTA_NEWDST={0x84, 0x13, [{0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xa5e, 0x0, 0x1}, {0xda, 0x0, 0x1}, {0xe}, {0x9, 0x0, 0x1}, {0xe5c7, 0x0, 0x1}, {0xd000}, {0xa3e, 0x0, 0x1}, {0xf75e, 0x0, 0x1}, {0xae47}, {0xd4}, {0x6}, {0x2}, {0x7fff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2}, {0x8, 0x0, 0x1}, {0xffff8, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x401}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6}, {0x3}, {0x2d, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0xf7fff}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 478.87951ms ago: executing program 3 (id=847): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000700)={@void, @void, @llc={@llc={0x2, 0xaa, 'Kk', "35b67183"}}}, 0x8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x1], 0x0, 0x1}}, 0x40) 478.644205ms ago: executing program 3 (id=848): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x2, 0x54}, 0x9c) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "64f9ff", 0x0, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}}}, 0x0) 429.339502ms ago: executing program 3 (id=849): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e29, 0x0, @remote, 0x38b4}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x1, @private0, 0x5}, @in6={0xa, 0x4e21, 0xc2, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}], 0xc0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @local, 0xfffffffe}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) io_setup(0x7, &(0x7f0000000600)=<r3=>0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x181802) io_submit(r3, 0x1, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/165, 0xa5, 0x10000, 0x0, 0x0) 369.770787ms ago: executing program 1 (id=850): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00', <r4=>0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xd}, {0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40061) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r4, {0x0, 0xfffc}, {}, {0x4, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x854, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x20000000, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x8, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x1, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x3ff, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0xc, 0x8, 0xa, 0x6, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0x90, 0xee, 0x4, 0x9, 0x0, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0x10001, 0x7, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x200, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x44, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x3, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x8, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0x507, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x0, 0xe0ba, 0x4f, 0x3, 0x4, 0x27, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0xb, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x4001, 0xd, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x400002, 0x2, 0x6, 0x400, 0x5, 0x84, 0xffff, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed7, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x6, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x81, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x7, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x3, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x86, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x6, 0x4, 0xffffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x1, 0xfffffffb, 0xf839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x7, 0x20006, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x7, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x2, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x3, 0x0, 0x7, 0x6, 0x2, 0xc6d1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x888}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r4, 0x7800, 0x8, 0x1000, 0x3, {{0x27, 0x4, 0x0, 0x4, 0x9c, 0x65, 0x0, 0xa, 0x29, 0x0, @loopback, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x4c, 0x22, 0x3, 0x1, [{@local, 0xffffff78}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x6}, {@loopback, 0x2}, {@empty, 0xc}, {@loopback, 0x5b}, {@private=0xa010100, 0x3}, {@multicast1, 0xb0}]}, @cipso={0x86, 0x3b, 0x1, [{0x1, 0x11, "325297ce9ab59998d708b97847d590"}, {0x1, 0x5, "906659"}, {0x7, 0x4, "768c"}, {0x0, 0xa, "c2ca80003a19eb94"}, {0x608c6f20517b7498, 0x11, "b19b65e8596981c88fa9c88479d510"}]}]}}}}}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x4001000000) ioctl$EVIOCGMASK(r6, 0x5b02, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1800}, 0x1c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES64=r6], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r9}, 0x38) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000f91000/0x2000)=nil, 0x2000, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r9, &(0x7f0000000300), 0x0}, 0x20) 208.984426ms ago: executing program 0 (id=851): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd2b, 0x0, {{}, {}, {0x1a, 0x17, {0x0, 0xfffffffd, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}}, 0x8044) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x92) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x10000, 0x81, 0x1}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100", @ANYRESDEC], 0x7c}}, 0x6000050) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000100), &(0x7f0000000400)=r1}, 0x20) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x2, 0x1, [0x8]}, 0xa) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000100000008000140000000170800024000000014240001800a000100726564697200000014000280080001400000001708000340000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000240)) 207.530791ms ago: executing program 3 (id=852): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006200)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="24c2e2fb6d02ac2707af5fe61d2a9fdb8c8854fed3bfe8c759b0dc529f960ad7c002c29da2a685724c8ef5b614", 0x2d}, {&(0x7f0000000280)="af7bca008b3753746a5a192e30d2a391f6e4ec5e1db94152164e30d5c9548c1a1a29a22635e291", 0x27}], 0x2, 0x0, 0x0, 0x24000844}], 0x1, 0x10008800) recvmmsg(r1, &(0x7f0000005a80)=[{{&(0x7f0000000100)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005940)=[{&(0x7f0000005c00)=""/95, 0x5f}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000580)=""/88, 0x58}], 0x5, &(0x7f0000005f80)=""/264, 0x108}, 0x7}, {{&(0x7f0000000780)=@nfc, 0x80, &(0x7f0000000240)=[{&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000001800)=""/83, 0x53}, {&(0x7f0000001880)=""/106, 0x6a}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x4, &(0x7f0000002900)=""/224, 0xe0}, 0x6}, {{&(0x7f0000002a00)=@phonet, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000500)=""/47, 0x2f}, {&(0x7f0000002a80)=""/87, 0x57}, {&(0x7f0000002b00)=""/140, 0x8c}, {&(0x7f0000002bc0)=""/57, 0x39}, {&(0x7f0000002c00)=""/66, 0x42}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/155, 0x9b}, {&(0x7f0000003d40)=""/135, 0x87}, {&(0x7f0000003e00)=""/55, 0x37}, {&(0x7f0000003e40)=""/20, 0x14}], 0xa}, 0x10000}, {{&(0x7f0000003f40)=@caif=@rfm, 0x80, &(0x7f0000004040)=[{&(0x7f0000003fc0)=""/60, 0x3c}], 0x1, &(0x7f0000004080)=""/78, 0x4e}, 0x1}, {{&(0x7f0000004100)=@sco, 0x80, &(0x7f0000005300), 0x0, &(0x7f0000005340)=""/221, 0xdd}, 0x8000}, {{&(0x7f0000005440)=@hci, 0x80, &(0x7f0000005a00)=[{&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/220, 0xdc}, {&(0x7f00000055c0)=""/108, 0x6c}, {&(0x7f0000005640)=""/221, 0xdd}, {&(0x7f0000005740)=""/246, 0xf6}, {&(0x7f0000005840)=""/193, 0xc1}, {&(0x7f0000005ec0)=""/167, 0xa7}], 0x7}, 0x4a}], 0x6, 0xcb, 0x0) 202.766912ms ago: executing program 0 (id=853): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r3=>0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r4=>0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000140)={0x18, r3, 0x6, 0xffffffff80000001}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1}) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000140)={0x18, r3, 0x6, 0xffffffff80000001}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1}) (async) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) (async) 140.275107ms ago: executing program 3 (id=854): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001200)={0x2, &(0x7f00000000c0)=[{0xef, 0xb, 0x4, 0x10001}, {0x8, 0x6, 0x2}]}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0) timer_settime(r3, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) listen(r4, 0x0) (async, rerun: 64) accept4(r4, 0x0, 0x0, 0x0) (rerun: 64) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) pipe(&(0x7f0000000340)={<r5=>0xffffffffffffffff}) fcntl$getflags(r5, 0x3) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fchmod(r7, 0x20049549e2a2d659) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setpriority(0x0, 0x0, 0x9) r9 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r9, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r9, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) (async, rerun: 32) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) (async, rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) (async) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async, rerun: 64) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r6) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) 88.003949ms ago: executing program 3 (id=855): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x2, 0x5e, 0x5, 0x3, 0x9}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4, 0x2}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r4=>0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@private1, r4}, 0x14) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000040)={0xb821, 0x8, {0xffffffffffffffff}, {0xee00}, 0x8, 0x5e}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000040)={0xb821, 0x8, {<r7=>0xffffffffffffffff}, {0xee00}, 0x8, 0x5e}) tkill(r7, 0x11) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) 86.421323ms ago: executing program 0 (id=856): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x2, 0x0, 0xfffe, 0x0}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000080)={{r1}, "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"}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0) 374.654µs ago: executing program 0 (id=857): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000002c0)=0x3, 0x4) close_range(r0, r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000098d8af97f27052d7018a010fa9d488a6d6f64b3a7c2e6e8b3edc5d2aff35cb55471939466b9ecec24bf524c6b436314ffacb104badb1876f970438f10f67f16faa81bf03c083dfb37e1bd41279092076072a96e47d5940c2178998f9e3482c9b15f1be701a94e3273c9f696963e4b578f04fa93f9052eef7055762d9f9787f323bc6b1178678c163671aa2b0f8f6b838fff305907a4973f9415a8a0a98dd049cb07ef1525de43b341a33620c1d", @ANYRES16=r4, @ANYBLOB="030b29bd7000fbdbdf2508000000"], 0x14}}, 0x40804) close(r2) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000)=0xffffff90, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x50, r0, 0xebe23000) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)) 0s ago: executing program 0 (id=858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @private0, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000290000000b"], 0x18}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): [ 38.208868][ T40] audit: type=1400 audit(1744987488.925:81): avc: denied { rlimitinh } for pid=5848 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.216569][ T40] audit: type=1400 audit(1744987488.925:82): avc: denied { siginh } for pid=5848 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.302137][ T40] audit: type=1400 audit(1744987490.025:83): avc: denied { read } for pid=5337 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.308938][ T40] audit: type=1400 audit(1744987490.025:84): avc: denied { append } for pid=5337 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.316160][ T40] audit: type=1400 audit(1744987490.025:85): avc: denied { open } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.324779][ T40] audit: type=1400 audit(1744987490.025:86): avc: denied { getattr } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:31057' (ED25519) to the list of known hosts. [ 40.194060][ T40] audit: type=1400 audit(1744987490.925:87): avc: denied { name_bind } for pid=5870 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.005393][ T5872] cgroup: Unknown subsys name 'net' [ 42.166114][ T5872] cgroup: Unknown subsys name 'cpuset' [ 42.169940][ T5872] cgroup: Unknown subsys name 'rlimit' [ 42.383757][ T5929] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.132208][ T5872] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.923693][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 45.923707][ T40] audit: type=1400 audit(1744987496.645:105): avc: denied { execmem } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.113465][ T40] audit: type=1400 audit(1744987496.835:106): avc: denied { create } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.122734][ T40] audit: type=1400 audit(1744987496.835:107): avc: denied { read write } for pid=5938 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.130195][ T40] audit: type=1400 audit(1744987496.835:108): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.137605][ T40] audit: type=1400 audit(1744987496.855:109): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="socket:[3795]" dev="sockfs" ino=3795 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.162612][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.165337][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.169204][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.172951][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.174114][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.174895][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.176042][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.176665][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.177431][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.177880][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.179314][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.181349][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.184205][ T5295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.185919][ T40] audit: type=1400 audit(1744987496.915:110): avc: denied { read } for pid=5948 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.188324][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.190173][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.190711][ T40] audit: type=1400 audit(1744987496.915:111): avc: denied { open } for pid=5948 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.191269][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.191931][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.193665][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.194926][ T40] audit: type=1400 audit(1744987496.915:112): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.203434][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.232215][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.367342][ T40] audit: type=1400 audit(1744987497.095:113): avc: denied { module_request } for pid=5938 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.466097][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 46.481488][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 46.536383][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 46.660430][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.664558][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.667721][ T5938] bridge_slave_0: entered allmulticast mode [ 46.671564][ T5938] bridge_slave_0: entered promiscuous mode [ 46.732957][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.735500][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.737754][ T5938] bridge_slave_1: entered allmulticast mode [ 46.740407][ T5938] bridge_slave_1: entered promiscuous mode [ 46.758106][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.807105][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.810142][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.813134][ T5948] bridge_slave_0: entered allmulticast mode [ 46.817489][ T5948] bridge_slave_0: entered promiscuous mode [ 46.868017][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.871890][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.874923][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.878097][ T5948] bridge_slave_1: entered allmulticast mode [ 46.881814][ T5948] bridge_slave_1: entered promiscuous mode [ 46.911093][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.913340][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.915677][ T5941] bridge_slave_0: entered allmulticast mode [ 46.918295][ T5941] bridge_slave_0: entered promiscuous mode [ 46.922119][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.943268][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.946747][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.949630][ T5941] bridge_slave_1: entered allmulticast mode [ 46.954067][ T5941] bridge_slave_1: entered promiscuous mode [ 47.068658][ T5938] team0: Port device team_slave_0 added [ 47.072004][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.106295][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.110507][ T5938] team0: Port device team_slave_1 added [ 47.114217][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.117212][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.119460][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.121689][ T5940] bridge_slave_0: entered allmulticast mode [ 47.124347][ T5940] bridge_slave_0: entered promiscuous mode [ 47.128691][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.174007][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.176532][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.179226][ T5940] bridge_slave_1: entered allmulticast mode [ 47.181710][ T5940] bridge_slave_1: entered promiscuous mode [ 47.203132][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.206480][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.217170][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.286906][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.289154][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.298000][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.304150][ T5948] team0: Port device team_slave_0 added [ 47.309106][ T5948] team0: Port device team_slave_1 added [ 47.312657][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.318517][ T5941] team0: Port device team_slave_0 added [ 47.328291][ T5941] team0: Port device team_slave_1 added [ 47.357553][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.389009][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.391151][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.399034][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.403205][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.406071][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.413773][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.491541][ T5940] team0: Port device team_slave_0 added [ 47.495196][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.498016][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.506901][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.537789][ T5938] hsr_slave_0: entered promiscuous mode [ 47.540174][ T5938] hsr_slave_1: entered promiscuous mode [ 47.547025][ T5940] team0: Port device team_slave_1 added [ 47.549987][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.552203][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.562002][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.713163][ T5948] hsr_slave_0: entered promiscuous mode [ 47.716990][ T5948] hsr_slave_1: entered promiscuous mode [ 47.719171][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.721670][ T5948] Cannot create hsr debugfs directory [ 47.724557][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.726750][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.735823][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.743379][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.745703][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.753810][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.820878][ T5941] hsr_slave_0: entered promiscuous mode [ 47.824159][ T5941] hsr_slave_1: entered promiscuous mode [ 47.827012][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.830083][ T5941] Cannot create hsr debugfs directory [ 47.948586][ T5940] hsr_slave_0: entered promiscuous mode [ 47.951976][ T5940] hsr_slave_1: entered promiscuous mode [ 47.954595][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.957521][ T5940] Cannot create hsr debugfs directory [ 48.188540][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.198323][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.202511][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.206667][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.214518][ T5945] Bluetooth: hci0: command tx timeout [ 48.214540][ T5956] Bluetooth: hci3: command tx timeout [ 48.242273][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.246949][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.251463][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.265031][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.283787][ T5956] Bluetooth: hci1: command tx timeout [ 48.294680][ T5956] Bluetooth: hci2: command tx timeout [ 48.298351][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.304479][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.308680][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.313558][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.348699][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.361418][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.370129][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.374225][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.389019][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.398779][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.419722][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.422702][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.430669][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.432884][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.452845][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.489144][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.500888][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.503100][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.520573][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.524999][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.527424][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.536611][ T40] audit: type=1400 audit(1744987499.265:114): avc: denied { sys_module } for pid=5938 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.540052][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.559502][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.561772][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.575633][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.577890][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.587284][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.610524][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.630818][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.633860][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.643326][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.646307][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.657366][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.716260][ T5938] veth0_vlan: entered promiscuous mode [ 48.724580][ T5938] veth1_vlan: entered promiscuous mode [ 48.748943][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.760828][ T5938] veth0_macvtap: entered promiscuous mode [ 48.771331][ T5938] veth1_macvtap: entered promiscuous mode [ 48.789928][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.798792][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.809244][ T5948] veth0_vlan: entered promiscuous mode [ 48.815468][ T5948] veth1_vlan: entered promiscuous mode [ 48.819286][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.822067][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.826022][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.828669][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.857925][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.862841][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.885911][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.888607][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.888952][ T5948] veth0_macvtap: entered promiscuous mode [ 48.917375][ T5948] veth1_macvtap: entered promiscuous mode [ 48.920496][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.923640][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.938137][ T5940] veth0_vlan: entered promiscuous mode [ 48.946536][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.949861][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.954139][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.959516][ T5940] veth1_vlan: entered promiscuous mode [ 48.968786][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.972042][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.977062][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.991415][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.995353][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.998768][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.001798][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.009042][ T5941] veth0_vlan: entered promiscuous mode [ 49.017912][ T5941] veth1_vlan: entered promiscuous mode [ 49.025707][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.046033][ T5940] veth0_macvtap: entered promiscuous mode [ 49.051720][ T5940] veth1_macvtap: entered promiscuous mode [ 49.063187][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.067758][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.070935][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.074603][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.078706][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.095837][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.095891][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.098280][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.108544][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.112601][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.117528][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.123240][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.139744][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.144112][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.147793][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.151381][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.164567][ T5941] veth0_macvtap: entered promiscuous mode [ 49.168858][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.171329][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.172844][ T5941] veth1_macvtap: entered promiscuous mode [ 49.199102][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.202724][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.207628][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.210908][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.214366][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.218273][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.224163][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.235112][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.237454][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.237594][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.241479][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.251724][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.257618][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.261182][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.263806][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5'. [ 49.264790][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.271338][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.289182][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.292016][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.296281][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.299752][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.314489][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.316988][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.351362][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.357723][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.387204][ T6017] autofs: Unknown parameter 'tmpfs' [ 49.389287][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.390075][ T6018] syz.0.6 (6018): /proc/6016/oom_adj is deprecated, please use /proc/6016/oom_score_adj instead. [ 49.391724][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.404341][ T6021] nbd: must specify a device to reconfigure [ 49.409452][ T6021] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 49.411928][ T6021] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3'. [ 49.418606][ T6021] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 49.515497][ T6040] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 49.517994][ T6040] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12'. [ 49.600602][ T6048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.607329][ T6048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.613312][ T6048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.884667][ T6053] netlink: 'syz.2.16': attribute type 10 has an invalid length. [ 49.887121][ T6053] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16'. [ 49.889813][ T6053] team0: entered promiscuous mode [ 49.891410][ T6053] team_slave_0: entered promiscuous mode [ 49.895376][ T6053] team_slave_1: entered promiscuous mode [ 49.897853][ T6053] bridge0: port 3(team0) entered blocking state [ 49.900094][ T6053] bridge0: port 3(team0) entered disabled state [ 49.902104][ T6053] team0: entered allmulticast mode [ 49.904719][ T6053] team_slave_0: entered allmulticast mode [ 49.906454][ T6053] team_slave_1: entered allmulticast mode [ 49.909995][ T6053] bridge0: port 3(team0) entered blocking state [ 49.912088][ T6053] bridge0: port 3(team0) entered forwarding state [ 49.917875][ T6053] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16'. [ 49.933073][ T6053] vlan2: entered allmulticast mode [ 49.935052][ T6053] bond0: entered allmulticast mode [ 49.936769][ T6053] bond_slave_0: entered allmulticast mode [ 49.938657][ T6053] bond_slave_1: entered allmulticast mode [ 49.942565][ T6053] bridge0: port 4(vlan2) entered blocking state [ 49.945812][ T6053] bridge0: port 4(vlan2) entered disabled state [ 49.948888][ T6053] vlan2: entered promiscuous mode [ 49.950592][ T6053] bond0: entered promiscuous mode [ 49.952255][ T6053] bond_slave_0: entered promiscuous mode [ 49.955018][ T6053] bond_slave_1: entered promiscuous mode [ 49.958982][ T6053] bridge0: port 4(vlan2) entered blocking state [ 49.961817][ T6053] bridge0: port 4(vlan2) entered forwarding state [ 50.091942][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.223895][ T6070] tipc: Started in network mode [ 50.225615][ T6070] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 50.228375][ T6070] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 50.283685][ T5956] Bluetooth: hci3: command tx timeout [ 50.284460][ T5945] Bluetooth: hci0: command tx timeout [ 50.363825][ T5945] Bluetooth: hci1: command tx timeout [ 50.365837][ T5945] Bluetooth: hci2: command tx timeout [ 50.371749][ T6089] input: syz0 as /devices/virtual/input/input5 [ 50.467459][ T6100] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27'. [ 50.500649][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.501792][ T6105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 50.583424][ T6114] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 50.587164][ T6114] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 51.269402][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 51.269418][ T40] audit: type=1400 audit(1744987501.995:235): avc: denied { create } for pid=6124 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.289432][ T40] audit: type=1400 audit(1744987502.015:236): avc: denied { read write } for pid=6124 comm="syz.1.40" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 51.302242][ T40] audit: type=1400 audit(1744987502.015:237): avc: denied { open } for pid=6124 comm="syz.1.40" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 51.311411][ T40] audit: type=1400 audit(1744987502.015:238): avc: denied { create } for pid=6124 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.333251][ T6138] netlink: 'syz.1.44': attribute type 1 has an invalid length. [ 51.336191][ T6138] netlink: 224 bytes leftover after parsing attributes in process `syz.1.44'. [ 51.383944][ T6146] netlink: 'syz.1.45': attribute type 2 has an invalid length. [ 51.504232][ T40] audit: type=1400 audit(1744987502.225:239): avc: denied { bind } for pid=6166 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.514881][ T40] audit: type=1400 audit(1744987502.225:240): avc: denied { connect } for pid=6166 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.522192][ T6170] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 51.528615][ T6171] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 51.542244][ T40] audit: type=1400 audit(1744987502.265:241): avc: denied { create } for pid=6169 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.550857][ T40] audit: type=1400 audit(1744987502.265:242): avc: denied { read } for pid=6169 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.607395][ T40] audit: type=1326 audit(1744987502.335:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.2.49" exe="/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7fbf44d2a359 code=0x0 [ 51.660479][ T40] audit: type=1400 audit(1744987502.385:244): avc: denied { create } for pid=6183 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.736847][ T6189] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 6189 comm: syz.2.49) [ 51.819210][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 51.822101][ T6191] erspan0: default FDB implementation only supports local addresses [ 52.318550][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 52.363715][ T5945] Bluetooth: hci0: command tx timeout [ 52.374740][ T5945] Bluetooth: hci3: command tx timeout [ 52.436319][ T6217] capability: warning: `syz.3.61' uses deprecated v2 capabilities in a way that may be insecure [ 52.443827][ T5945] Bluetooth: hci1: command tx timeout [ 52.443884][ T5956] Bluetooth: hci2: command tx timeout [ 52.465954][ T6219] 9pnet_fd: p9_fd_create_unix (6219): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 52.478910][ T6219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26128 sclass=netlink_route_socket pid=6219 comm=syz.3.63 [ 52.499038][ T6174] block nbd1: shutting down sockets [ 52.590218][ T6221] team0 (unregistering): Port device team_slave_0 removed [ 52.595614][ T6221] team0 (unregistering): Port device team_slave_1 removed [ 52.791782][ T6226] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 52.795978][ T6226] SELinux: syz.3.66 (6226) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 52.837637][ T6228] netlink: 'syz.3.67': attribute type 20 has an invalid length. [ 52.843686][ T6003] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 52.881007][ T6231] smc: net device bond0 applied user defined pnetid SYZ0 [ 52.995660][ T6238] warning: `syz.3.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.017118][ T6003] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 53.019584][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 53.022955][ T6003] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.027537][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 53.030963][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 53.036053][ T6003] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 53.048586][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 53.051916][ T6003] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.056019][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 53.059795][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 53.069653][ T6003] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 53.072203][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 53.075685][ T6003] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.079251][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 53.083015][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 53.089764][ T6003] usb 5-1: string descriptor 0 read error: -22 [ 53.091808][ T6003] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 53.094788][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.104896][ T6003] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 53.257543][ T6249] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.293475][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.311955][ T29] usb 5-1: USB disconnect, device number 2 [ 53.453637][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 53.457020][ T34] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 53.462696][ T34] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 53.466638][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.469371][ T34] usb 8-1: Product: syz [ 53.470814][ T34] usb 8-1: Manufacturer: syz [ 53.472396][ T34] usb 8-1: SerialNumber: syz [ 53.475513][ T34] usb 8-1: config 0 descriptor?? [ 53.478550][ T6242] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 53.491775][ T34] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input6 [ 53.603123][ T5956] Bluetooth: hci3: Invalid handle: 0x7376 > 0x0eff [ 53.750147][ T34] usb 8-1: USB disconnect, device number 2 [ 53.752106][ C3] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 53.927901][ T6287] nbd: must specify an index to disconnect [ 54.083347][ T6292] trusted_key: syz.0.87 sent an empty control message without MSG_MORE. [ 54.187265][ T6298] cgroup: fork rejected by pids controller in /syz1 [ 54.445032][ T5956] Bluetooth: hci0: command tx timeout [ 54.523699][ T5956] Bluetooth: hci1: command tx timeout [ 54.740561][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.747677][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.750617][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.754631][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.757458][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.758109][ T6427] Zero length message leads to an empty skb [ 54.768713][ T6427] program syz.3.96 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.781743][ T6427] netlink: 'syz.3.96': attribute type 2 has an invalid length. [ 54.787169][ T6427] block nbd3: not configured, cannot reconfigure [ 54.909820][ T6434] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 54.914743][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.917885][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.928147][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.931278][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.936541][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.939664][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.947724][ T6434] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 54.959128][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 54.972393][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.072106][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.074674][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.076903][ T6424] bridge_slave_0: entered allmulticast mode [ 55.079483][ T6424] bridge_slave_0: entered promiscuous mode [ 55.082829][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.086016][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.088271][ T6424] bridge_slave_1: entered allmulticast mode [ 55.090834][ T6424] bridge_slave_1: entered promiscuous mode [ 55.132956][ T6449] syz.3.102: attempt to access beyond end of device [ 55.132956][ T6449] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 55.133704][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 55.137311][ T6449] efs: cannot read volume header [ 55.140991][ T29] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 55.144764][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.149541][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.150653][ T6447] netlink: 'syz.0.101': attribute type 12 has an invalid length. [ 55.154144][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.160760][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.162295][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.165389][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.174456][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 55.178175][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.211236][ T6424] team0: Port device team_slave_0 added [ 55.215535][ T6424] team0: Port device team_slave_1 added [ 55.231362][ T6453] overlayfs: unescaped trailing colons in lowerdir mount option. [ 55.257771][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.259953][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.268432][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.272585][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.274956][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.285388][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.352579][ T6424] hsr_slave_0: entered promiscuous mode [ 55.354912][ T6424] hsr_slave_1: entered promiscuous mode [ 55.357047][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.359426][ T6424] Cannot create hsr debugfs directory [ 55.391681][ T29] usb 7-1: usb_control_msg returned -32 [ 55.393635][ T29] usbtmc 7-1:16.0: can't read capabilities [ 55.464638][ T6424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.532804][ T6424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.604486][ T6424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.693136][ T6424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.807786][ T6465] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 55.814957][ T13] bridge_slave_1: left allmulticast mode [ 55.816993][ T13] bridge_slave_1: left promiscuous mode [ 55.820028][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.827006][ T13] bridge_slave_0: left allmulticast mode [ 55.828939][ T13] bridge_slave_0: left promiscuous mode [ 55.830745][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.156216][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.162443][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.166593][ T13] bond0 (unregistering): Released all slaves [ 56.176634][ T6003] usb 7-1: USB disconnect, device number 2 [ 56.206342][ T6424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.211761][ T6424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.217467][ T6424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.223189][ T6424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.322216][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.333598][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.341463][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.343773][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.350052][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.352284][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.450467][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 56.450477][ T40] audit: type=1400 audit(1744987507.175:294): avc: denied { watch } for pid=6491 comm="syz.0.115" path="/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.465985][ T40] audit: type=1400 audit(1744987507.175:295): avc: denied { watch_sb watch_reads } for pid=6491 comm="syz.0.115" path="/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.480968][ T40] audit: type=1400 audit(1744987507.175:296): avc: denied { write } for pid=6491 comm="syz.0.115" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.489858][ T40] audit: type=1400 audit(1744987507.185:297): avc: denied { ioctl } for pid=6491 comm="syz.0.115" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.491836][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.515581][ T13] hsr_slave_0: left promiscuous mode [ 56.517799][ T13] hsr_slave_1: left promiscuous mode [ 56.520008][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.522548][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.526863][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.529314][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.546310][ T13] veth1_macvtap: left promiscuous mode [ 56.548351][ T13] veth0_macvtap: left promiscuous mode [ 56.550610][ T13] veth1_vlan: left promiscuous mode [ 56.552560][ T13] veth0_vlan: left promiscuous mode [ 56.775485][ T5945] Bluetooth: hci3: command tx timeout [ 57.087353][ T13] team0 (unregistering): Port device team_slave_1 removed [ 57.135606][ T13] team0 (unregistering): Port device team_slave_0 removed [ 57.172380][ T6509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6509 comm=syz.3.117 [ 57.181141][ T6509] 9pnet_fd: p9_fd_create_tcp (6509): problem connecting socket to 127.0.0.1 [ 57.186473][ T6509] netlink: 'syz.3.117': attribute type 1 has an invalid length. [ 57.189421][ T6509] NCSI netlink: No device for ifindex 0 [ 57.191479][ T40] audit: type=1400 audit(1744987507.915:298): avc: denied { setopt } for pid=6506 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.197975][ T40] audit: type=1400 audit(1744987507.915:299): avc: denied { ioctl } for pid=6506 comm="syz.3.117" path="socket:[10767]" dev="sockfs" ino=10767 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.556735][ T6424] veth0_vlan: entered promiscuous mode [ 57.563159][ T6424] veth1_vlan: entered promiscuous mode [ 57.591965][ T6424] veth0_macvtap: entered promiscuous mode [ 57.595739][ T6424] veth1_macvtap: entered promiscuous mode [ 57.599406][ T6512] __nla_validate_parse: 8 callbacks suppressed [ 57.599415][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 57.604710][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.607928][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.611164][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.614426][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.617505][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.618685][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.119'. [ 57.620711][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.627527][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.631767][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.639592][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.642594][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.646043][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.649142][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.652309][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.659178][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.671842][ T6424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.675471][ T6424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.679093][ T6424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.682689][ T6424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.761024][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 57.765499][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 57.773190][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.777805][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.801195][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.804578][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.818209][ T40] audit: type=1400 audit(1744987508.545:300): avc: denied { mounton } for pid=6424 comm="syz-executor" path="/syzkaller.OUr4GT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.830682][ T40] audit: type=1400 audit(1744987508.565:301): avc: denied { mount } for pid=6424 comm="syz-executor" name="/" dev="gadgetfs" ino=6583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 57.861882][ T6533] bond0: option arp_validate: invalid value (1819178241) [ 57.863726][ T40] audit: type=1400 audit(1744987508.595:302): avc: denied { ioctl } for pid=6534 comm="syz.0.126" path="socket:[12493]" dev="sockfs" ino=12493 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 57.870717][ T6537] Unsupported ieee802154 address type: 0 [ 57.871937][ T40] audit: type=1400 audit(1744987508.595:303): avc: denied { ioctl } for pid=6532 comm="syz.3.127" path="socket:[10939]" dev="sockfs" ino=10939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.896461][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.127'. [ 57.907386][ T6535] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 57.941077][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.130'. [ 57.947239][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.130'. [ 57.966421][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.130'. [ 57.969210][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.130'. [ 57.992285][ T6558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26384 sclass=netlink_route_socket pid=6558 comm=syz.2.134 [ 58.037646][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.130'. [ 58.117248][ T6576] netlink: 'syz.0.140': attribute type 7 has an invalid length. [ 58.117260][ T6577] netlink: 'syz.0.140': attribute type 7 has an invalid length. [ 58.119688][ T6576] netlink: 'syz.0.140': attribute type 8 has an invalid length. [ 58.124877][ T6577] netlink: 'syz.0.140': attribute type 8 has an invalid length. [ 58.129601][ T6576] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 58.129601][ T6576] program syz.0.140 not setting count and/or reply_len properly [ 58.156560][ T6579] hugetlbfs: syz.2.141 (6579): Using mlock ulimits for SHM_HUGETLB is obsolete [ 58.193244][ T6587] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 58.331729][ T6614] IPv6: sit1: Disabled Multicast RS [ 58.340901][ T6614] sit1: entered allmulticast mode [ 58.397178][ T6613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.477790][ T6626] Bluetooth: MGMT ver 1.23 [ 58.644155][ T6635] overlay: filesystem on ./bus not supported as upperdir [ 58.822850][ T6641] netlink: 'syz.0.162': attribute type 10 has an invalid length. [ 58.832239][ T6641] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.843664][ T5945] Bluetooth: hci3: command tx timeout [ 58.897841][ T6647] virtiofs: Bad value for 'dax' [ 58.940321][ T6651] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 58.947872][ T6651] ip6erspan0: entered promiscuous mode [ 58.999457][ T6658] Cannot find map_set index 0 as target [ 59.015676][ T6662] sctp: [Deprecated]: syz.0.171 (pid 6662) Use of int in maxseg socket option. [ 59.015676][ T6662] Use struct sctp_assoc_value instead [ 59.268177][ T6702] (unnamed net_device) (uninitialized): option coupled_control: invalid value (2) [ 59.378191][ T6712] syz.0.188 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.534816][ T6734] process 'syz.3.195' launched './file1' with NULL argv: empty string added [ 59.559310][ T6736] bond0: (slave dummy0): Releasing backup interface [ 59.565454][ T6736] batman_adv: batadv0: Adding interface: dummy0 [ 59.567473][ T6736] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.576735][ T6736] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 59.756727][ T6747] xt_l2tp: v2 doesn't support IP mode [ 59.799185][ T6751] syz.3.199: attempt to access beyond end of device [ 59.799185][ T6751] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 59.862842][ T6761] program syz.1.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.862869][ T6762] program syz.1.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.932540][ T6764] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 59.945011][ T6764] ALSA: seq fatal error: cannot create timer (-22) [ 59.965736][ T6777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6777 comm=syz.1.211 [ 59.993374][ T6782] validate_nla: 2 callbacks suppressed [ 59.995553][ T6782] netlink: 'syz.2.212': attribute type 27 has an invalid length. [ 60.928779][ T6801] 9pnet_fd: p9_fd_create_tcp (6801): problem connecting socket to 127.0.0.1 [ 60.987165][ T6854] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 61.124519][ T6879] xt_hashlimit: size too large, truncated to 1048576 [ 61.208439][ T6879] geneve2: entered promiscuous mode [ 61.210184][ T6879] geneve2: entered allmulticast mode [ 61.568883][ T6910] bridge0: port 5(syz_tun) entered blocking state [ 61.572277][ T6910] bridge0: port 5(syz_tun) entered disabled state [ 61.579186][ T6910] syz_tun: entered allmulticast mode [ 61.586786][ T6910] syz_tun: entered promiscuous mode [ 61.591850][ T6910] bridge0: port 5(syz_tun) entered blocking state [ 61.594885][ T6910] bridge0: port 5(syz_tun) entered forwarding state [ 61.602236][ T6910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6910 comm=syz.2.246 [ 61.636061][ T6910] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 61.659694][ T6910] syz.2.246 (6910) used greatest stack depth: 20312 bytes left [ 61.745537][ T5945] Bluetooth: hci1: unexpected event 0x3b length: 0 < 10 [ 61.746823][ T6925] netlink: 'syz.1.249': attribute type 3 has an invalid length. [ 61.751202][ T6925] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 61.767958][ T6925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.781577][ T6925] bond1: (slave gretap1): making interface the new active one [ 61.785882][ T6925] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 61.795773][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 61.795782][ T40] audit: type=1400 audit(1744987512.525:377): avc: denied { rename } for pid=5337 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.812638][ T40] audit: type=1400 audit(1744987512.525:378): avc: denied { unlink } for pid=5337 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.829826][ T40] audit: type=1400 audit(1744987512.525:379): avc: denied { create } for pid=5337 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.959307][ T40] audit: type=1400 audit(1744987512.685:380): avc: denied { write } for pid=6934 comm="syz.1.252" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.993329][ T40] audit: type=1400 audit(1744987512.715:381): avc: denied { bind } for pid=6940 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.034170][ T40] audit: type=1400 audit(1744987512.765:382): avc: denied { watch_mount } for pid=6942 comm="syz.2.254" path="/48" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.103453][ T40] audit: type=1400 audit(1744987512.825:383): avc: denied { create } for pid=6949 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 62.117067][ T40] audit: type=1400 audit(1744987512.845:384): avc: denied { write } for pid=6951 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.133226][ T6954] fuse: Bad value for 'user_id' [ 62.135203][ T6954] fuse: Bad value for 'user_id' [ 62.145700][ T6954] sctp: [Deprecated]: syz.1.258 (pid 6954) Use of int in max_burst socket option. [ 62.145700][ T6954] Use struct sctp_assoc_value instead [ 62.167605][ T40] audit: type=1400 audit(1744987512.895:385): avc: denied { read } for pid=6961 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.171541][ T6959] batman_adv: batadv0: Adding interface: gretap1 [ 62.176819][ T6959] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 62.187300][ T6963] mkiss: ax0: crc mode is auto. [ 62.189750][ T6959] xfrm1: entered allmulticast mode [ 62.191968][ T6963] set match dimension is over the limit! [ 62.195409][ T6963] loop0: detected capacity change from 0 to 7 [ 62.201370][ T6963] Dev loop0: unable to read RDB block 7 [ 62.203230][ T6963] loop0: unable to read partition table [ 62.206970][ T40] audit: type=1400 audit(1744987512.935:386): avc: denied { search } for pid=5655 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.213615][ T6963] loop0: partition table beyond EOD, truncated [ 62.215555][ T6963] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ����� [ 62.215555][ T6963] ) failed (rc=-5) [ 62.219972][ T6963] openvswitch: netlink: Actions may not be safe on all matching packets [ 62.355649][ T6979] netlink: 'syz.1.266': attribute type 11 has an invalid length. [ 62.366173][ T6982] can0: slcan on ptm0. [ 62.496402][ T6994] overlayfs: conflicting options: metacopy=off,verity=on [ 62.508188][ T6982] can0 (unregistered): slcan off ptm0. [ 62.996965][ T7024] usb usb8: usbfs: process 7024 (syz.2.278) did not claim interface 0 before use [ 63.217429][ T7036] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 63.219865][ T7036] nbd: error processing sock list [ 63.227957][ T7036] block nbd0: shutting down sockets [ 63.664113][ T836] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 63.751501][ T7080] __nla_validate_parse: 20 callbacks suppressed [ 63.751514][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 63.813214][ T7082] overlayfs: missing 'lowerdir' [ 63.823667][ T836] usb 8-1: Using ep0 maxpacket: 8 [ 63.827210][ T836] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 63.829643][ T836] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 63.833267][ T836] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.837684][ T836] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.841154][ T836] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 63.846759][ T836] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 63.849113][ T836] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 63.863625][ T836] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.867279][ T836] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.870645][ T836] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 63.874971][ T836] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 63.877269][ T836] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 63.880727][ T836] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.884890][ T836] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.888270][ T836] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 63.893362][ T836] usb 8-1: string descriptor 0 read error: -22 [ 63.895786][ T836] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 63.898565][ T836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.907352][ T836] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 63.969782][ T7102] syz.0.305: attempt to access beyond end of device [ 63.969782][ T7102] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 63.974612][ T7102] EXT4-fs (nbd0): unable to read superblock [ 64.032175][ T836] libceph: connect (1)[c::]:6789 error -101 [ 64.034922][ T836] libceph: mon0 (1)[c::]:6789 connect error [ 64.068377][ T7113] netlink: 'syz.1.306': attribute type 21 has an invalid length. [ 64.070877][ T7113] netlink: 128 bytes leftover after parsing attributes in process `syz.1.306'. [ 64.074701][ T7113] netlink: 'syz.1.306': attribute type 4 has an invalid length. [ 64.077136][ T7113] netlink: 'syz.1.306': attribute type 5 has an invalid length. [ 64.079616][ T7113] netlink: 3 bytes leftover after parsing attributes in process `syz.1.306'. [ 64.083676][ T7107] ceph: No mds server is up or the cluster is laggy [ 64.112412][ T5987] usb 8-1: USB disconnect, device number 3 [ 64.350850][ T7141] netlink: 80 bytes leftover after parsing attributes in process `syz.0.318'. [ 64.375633][ T7143] netlink: 80 bytes leftover after parsing attributes in process `syz.0.319'. [ 64.513158][ T7155] xt_cgroup: path and classid specified [ 64.515651][ T7155] futex_wake_op: syz.0.322 tries to shift op by 32; fix this program [ 64.547631][ T7157] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 64.554601][ T7157] erofs (device nullb0): cannot find valid erofs superblock [ 64.878514][ T7179] xt_hashlimit: invalid interval [ 64.882188][ T7179] netlink: 'syz.3.330': attribute type 15 has an invalid length. [ 65.134902][ T7187] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 65.161849][ T7187] program syz.3.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.169050][ T7193] overlay: filesystem on ./bus is read-only [ 65.194211][ T7198] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 65.221086][ T7198] netlink: 372 bytes leftover after parsing attributes in process `syz.0.337'. [ 65.224355][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 65.249324][ T7204] futex_wake_op: syz.0.339 tries to shift op by -1; fix this program [ 65.314144][ T7207] sg_write: data in/out 184124416/1 bytes for SCSI command 0x65-- guessing data in; [ 65.314144][ T7207] program syz.1.336 not setting count and/or reply_len properly [ 65.332556][ T7207] syzkaller1: entered promiscuous mode [ 65.334846][ T7207] syzkaller1: entered allmulticast mode [ 65.409489][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 65.470634][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.344'. [ 65.487410][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 65.595634][ T7227] 9pnet: Could not find request transport: viz��(���ess=00000000000000016384 [ 65.599595][ T7223] trusted_key: encrypted_key: keylen parameter is missing [ 65.926683][ T7256] fuse: Bad value for 'rootmode' [ 65.932141][ T7256] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 65.959168][ T7258] ./bus: Can't lookup blockdev [ 66.129201][ T7272] mkiss: ax0: crc mode is auto. [ 66.167461][ T7276] ata3.00: invalid multi_count 1 ignored [ 66.579880][ T7300] loop7: detected capacity change from 0 to 16384 [ 66.634206][ T7300] loop7: detected capacity change from 16384 to 16383 [ 66.731890][ T7317] netlink: 'syz.0.372': attribute type 39 has an invalid length. [ 66.853711][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 66.853724][ T40] audit: type=1400 audit(1744987517.585:434): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.867022][ T40] audit: type=1400 audit(1744987517.585:435): avc: denied { open } for pid=5941 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.873086][ T7332] xt_l2tp: wrong L2TP version: 0 [ 66.877093][ T40] audit: type=1400 audit(1744987517.585:436): avc: denied { ioctl } for pid=5941 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.888053][ T40] audit: type=1400 audit(1744987517.595:437): avc: denied { append } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.897280][ T40] audit: type=1400 audit(1744987517.595:438): avc: denied { read } for pid=7330 comm="syz.3.379" dev="nsfs" ino=4026533160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.907010][ T40] audit: type=1400 audit(1744987517.595:439): avc: denied { open } for pid=7330 comm="syz.3.379" path="net:[4026533160]" dev="nsfs" ino=4026533160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.916528][ T40] audit: type=1400 audit(1744987517.595:440): avc: denied { create } for pid=7330 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.924887][ T40] audit: type=1400 audit(1744987517.595:441): avc: denied { ioctl } for pid=7330 comm="syz.3.379" path="socket:[17710]" dev="sockfs" ino=17710 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.935824][ T40] audit: type=1400 audit(1744987517.655:442): avc: denied { allowed } for pid=7333 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.941818][ T40] audit: type=1400 audit(1744987517.655:443): avc: denied { create } for pid=7333 comm="syz.3.380" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.049146][ T7345] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.058686][ T7348] No buffer was provided with the request [ 67.215212][ T7364] random: crng reseeded on system resumption [ 67.464967][ T7378] @: renamed from vlan0 (while UP) [ 67.571568][ T7393] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 67.573815][ T7393] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.576139][ T7394] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 67.578183][ T7394] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.582706][ T7393] vhci_hcd vhci_hcd.0: Device attached [ 67.589141][ T7394] vhci_hcd vhci_hcd.0: Device attached [ 67.598283][ T7393] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 67.600355][ T7393] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.602738][ T7393] vhci_hcd vhci_hcd.0: Device attached [ 67.606123][ T7393] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 67.634282][ T7394] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 67.636603][ T7394] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.639083][ T7394] vhci_hcd vhci_hcd.0: Device attached [ 67.642023][ T7393] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(21) [ 67.644250][ T7393] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.647099][ T7393] vhci_hcd vhci_hcd.0: Device attached [ 67.656521][ T7393] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(23) [ 67.658605][ T7393] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.667549][ T7393] vhci_hcd vhci_hcd.0: Device attached [ 67.673181][ T7394] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(25) [ 67.675289][ T7394] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.683589][ T7394] vhci_hcd vhci_hcd.0: Device attached [ 67.692784][ T7423] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 67.694754][ T7393] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 67.711532][ T7417] vhci_hcd: connection closed [ 67.712854][ T7410] vhci_hcd: connection closed [ 67.713470][ T12] vhci_hcd: stop threads [ 67.713500][ T7412] vhci_hcd: connection closed [ 67.714847][ T7416] vhci_hcd: connection closed [ 67.717091][ T12] vhci_hcd: release socket [ 67.722920][ T12] vhci_hcd: disconnect device [ 67.722991][ T7403] vhci_hcd: connection closed [ 67.723044][ T7400] vhci_hcd: connection closed [ 67.726131][ T7398] vhci_hcd: connection closed [ 67.726217][ T12] vhci_hcd: stop threads [ 67.730837][ T12] vhci_hcd: release socket [ 67.733119][ T12] vhci_hcd: disconnect device [ 67.734614][ T5956] Bluetooth: hci3: command 0x0405 tx timeout [ 67.736812][ T12] vhci_hcd: stop threads [ 67.738163][ T12] vhci_hcd: release socket [ 67.739627][ T12] vhci_hcd: disconnect device [ 67.742539][ T12] vhci_hcd: stop threads [ 67.743962][ T12] vhci_hcd: release socket [ 67.745364][ T12] vhci_hcd: disconnect device [ 67.746986][ T12] vhci_hcd: stop threads [ 67.748308][ T12] vhci_hcd: release socket [ 67.749695][ T12] vhci_hcd: disconnect device [ 67.751498][ T12] vhci_hcd: stop threads [ 67.752794][ T12] vhci_hcd: release socket [ 67.753972][ T5982] vhci_hcd: vhci_device speed not set [ 67.755980][ T12] vhci_hcd: disconnect device [ 67.757561][ T12] vhci_hcd: stop threads [ 67.758890][ T12] vhci_hcd: release socket [ 67.763775][ T12] vhci_hcd: disconnect device [ 67.813673][ T5982] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 67.816786][ T5982] usb 41-1: enqueue for inactive port 0 [ 67.893938][ T5982] vhci_hcd: vhci_device speed not set [ 68.145248][ T7467] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 68.148106][ T7467] nbd: error processing sock list [ 68.151386][ T7467] block nbd0: shutting down sockets [ 68.273264][ T7476] vlan0: entered allmulticast mode [ 68.275060][ T7476] batadv0: entered allmulticast mode [ 68.403839][ T7493] syz.2.418 uses obsolete (PF_INET,SOCK_PACKET) [ 68.507275][ T7502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7502 comm=syz.3.420 [ 68.767255][ T7529] xt_l2tp: missing protocol rule (udp|l2tpip) [ 68.779812][ T7530] xt_l2tp: missing protocol rule (udp|l2tpip) [ 68.946617][ T7547] Invalid ELF header magic: != ELF [ 68.988823][ T7551] program syz.2.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.056070][ T7559] __nla_validate_parse: 7 callbacks suppressed [ 69.056081][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 69.083099][ T7562] netlink: 56 bytes leftover after parsing attributes in process `syz.2.441'. [ 69.089100][ T7562] netlink: 56 bytes leftover after parsing attributes in process `syz.2.441'. [ 69.234945][ T7580] ALSA: mixer_oss: invalid OSS volume '�' [ 69.278655][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 69.443642][ T836] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.613592][ T836] usb 5-1: Using ep0 maxpacket: 32 [ 69.619260][ T836] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.623236][ T836] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 69.627340][ T836] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 69.632020][ T836] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.636553][ T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.639086][ T836] usb 5-1: Product: 距ᖤ⁁ौ锬빚ǜ逺罸勾餬쇿僞㔜盪ㄓ楿쳤崭ﱐ [ 69.641956][ T836] usb 5-1: Manufacturer: 䀁 [ 69.643527][ T836] usb 5-1: SerialNumber: ఇ [ 69.723537][ T57] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 69.877526][ T57] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 69.880386][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.882933][ T57] usb 6-1: Product: syz [ 69.884404][ T57] usb 6-1: Manufacturer: syz [ 69.886006][ T57] usb 6-1: SerialNumber: syz [ 69.891700][ T57] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 69.911825][ T57] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 70.023543][ T6003] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.060655][ T836] cdc_ncm 5-1:1.0: bind() failure [ 70.064496][ T836] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 70.066703][ T836] cdc_ncm 5-1:1.1: bind() failure [ 70.069888][ T836] usb 5-1: USB disconnect, device number 3 [ 70.117022][ T5946] usb 6-1: USB disconnect, device number 2 [ 70.183912][ T6003] usb 8-1: Using ep0 maxpacket: 8 [ 70.191865][ T6003] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 70.194803][ T6003] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 70.198245][ T6003] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.201823][ T6003] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 70.206756][ T6003] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 70.211067][ T6003] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 70.213502][ T6003] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 70.216947][ T6003] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.220573][ T6003] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 70.224060][ T6003] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 70.228879][ T6003] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 70.231727][ T6003] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 70.235825][ T6003] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.239605][ T6003] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 70.242984][ T6003] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 70.256051][ T6003] usb 8-1: string descriptor 0 read error: -22 [ 70.258032][ T6003] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 70.260861][ T6003] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.269908][ T6003] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 70.339263][ T7634] veth1_to_batadv: entered promiscuous mode [ 70.341619][ T7634] macsec1: entered promiscuous mode [ 70.470878][ T5978] usb 8-1: USB disconnect, device number 4 [ 70.933548][ T57] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 70.936004][ T57] ath9k_htc: Failed to initialize the device [ 70.939047][ T5946] usb 6-1: ath9k_htc: USB layer deinitialized [ 71.087558][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.089976][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.179007][ T7675] CUSE: unknown device info "�" [ 71.180587][ T7675] CUSE: zero length info key specified [ 71.207397][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 71.248611][ T5946] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 71.291444][ T7680] sctp: [Deprecated]: syz.2.473 (pid 7680) Use of int in max_burst socket option. [ 71.291444][ T7680] Use struct sctp_assoc_value instead [ 71.383571][ T5946] usb 6-1: device descriptor read/64, error -71 [ 71.518280][ T7691] program syz.0.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.633613][ T5946] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.644689][ T7700] sctp: [Deprecated]: syz.3.480 (pid 7700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.644689][ T7700] Use struct sctp_sack_info instead [ 71.683722][ T7702] use of bytesused == 0 is deprecated and will be removed in the future, [ 71.688019][ T7702] use the actual size instead. [ 71.773564][ T5946] usb 6-1: device descriptor read/64, error -71 [ 71.803681][ T5983] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.847823][ T7713] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 71.851633][ T7713] macsec1: entered allmulticast mode [ 71.853733][ T7713] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 71.858047][ T7713] batman_adv: batadv0: Adding interface: macsec1 [ 71.860091][ T7713] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.869508][ T7713] batman_adv: batadv0: Interface activated: macsec1 [ 71.876607][ T40] kauditd_printk_skb: 165 callbacks suppressed [ 71.876616][ T40] audit: type=1400 audit(1744987522.605:609): avc: denied { create } for pid=7712 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.884994][ T40] audit: type=1400 audit(1744987522.605:610): avc: denied { ioctl } for pid=7712 comm="syz.3.484" path="socket:[19481]" dev="sockfs" ino=19481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.895166][ T5946] usb usb6-port1: attempt power cycle [ 71.907438][ T40] audit: type=1400 audit(1744987522.635:611): avc: denied { ioctl } for pid=7715 comm="syz.3.485" path="socket:[18639]" dev="sockfs" ino=18639 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 71.956307][ T5983] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 71.959318][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.962454][ T5983] usb 5-1: Product: syz [ 71.964018][ T5983] usb 5-1: Manufacturer: syz [ 71.965550][ T5983] usb 5-1: SerialNumber: syz [ 71.968529][ T5983] usb 5-1: config 0 descriptor?? [ 72.153459][ T836] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 72.176114][ T40] audit: type=1400 audit(1744987522.905:612): avc: denied { setopt } for pid=7697 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.178161][ T7719] syz_tun: left allmulticast mode [ 72.183146][ T4220] usb 5-1: USB disconnect, device number 4 [ 72.184760][ T7719] syz_tun: left promiscuous mode [ 72.187485][ T7719] bridge0: port 5(syz_tun) entered disabled state [ 72.192633][ T7719] team0: left allmulticast mode [ 72.194483][ T7719] team_slave_0: left allmulticast mode [ 72.196199][ T7719] team_slave_1: left allmulticast mode [ 72.198004][ T7719] bridge0: port 3(team0) entered disabled state [ 72.204459][ T7719] bridge_slave_0: left allmulticast mode [ 72.206328][ T7719] bridge_slave_0: left promiscuous mode [ 72.208156][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.213126][ T7719] bridge_slave_1: left promiscuous mode [ 72.216955][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.221102][ T7719] bond0: (slave bond_slave_0): Releasing backup interface [ 72.224709][ T7719] bond_slave_0: left promiscuous mode [ 72.226522][ T7719] bond_slave_0: left allmulticast mode [ 72.230608][ T7719] bond0: (slave bond_slave_1): Releasing backup interface [ 72.234119][ T5946] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.235415][ T7719] bond_slave_1: left promiscuous mode [ 72.238764][ T7719] bond_slave_1: left allmulticast mode [ 72.244332][ T7719] team_slave_0: left promiscuous mode [ 72.254457][ T5946] usb 6-1: device descriptor read/8, error -71 [ 72.256489][ T7719] team0: Port device team_slave_0 removed [ 72.259635][ T7719] team_slave_1: left promiscuous mode [ 72.270637][ T7719] team0: Port device team_slave_1 removed [ 72.274078][ T7719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.277080][ T7719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.281274][ T7719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.284732][ T7719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.291099][ T7719] vlan2: left promiscuous mode [ 72.292663][ T7719] bond0: left promiscuous mode [ 72.294493][ T7719] bridge0: port 4(vlan2) entered disabled state [ 72.297968][ T7719] batman_adv: batadv0: Removing interface: gretap1 [ 72.304823][ T836] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 72.308270][ T836] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 72.311408][ T836] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 72.316939][ T836] usb 8-1: string descriptor 0 read error: -22 [ 72.318928][ T836] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.321708][ T836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.326597][ T7716] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 72.426367][ T40] audit: type=1400 audit(1744987523.155:613): avc: denied { setopt } for pid=7723 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.428792][ T7727] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 72.429716][ T7725] IPVS: stopping master sync thread 7727 ... [ 72.494349][ T5946] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 72.514005][ T5946] usb 6-1: device descriptor read/8, error -71 [ 72.536719][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.541003][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.544785][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.547783][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.565838][ T40] audit: type=1400 audit(1744987523.295:614): avc: denied { connect } for pid=7730 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.625677][ T5946] usb usb6-port1: unable to enumerate USB device [ 72.632376][ T836] cdc_ncm 8-1:1.0: bind() failure [ 72.636137][ T836] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 72.638290][ T836] cdc_ncm 8-1:1.1: bind() failure [ 72.641847][ T836] usb 8-1: USB disconnect, device number 5 [ 72.746923][ T7740] capability: warning: `syz.0.490' uses 32-bit capabilities (legacy support in use) [ 72.750929][ T40] audit: type=1400 audit(1744987523.475:615): avc: denied { read } for pid=7739 comm="syz.0.490" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.761403][ T40] audit: type=1400 audit(1744987523.475:616): avc: denied { open } for pid=7739 comm="syz.0.490" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.771963][ T40] audit: type=1400 audit(1744987523.475:617): avc: denied { ioctl } for pid=7739 comm="syz.0.490" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.830371][ T40] audit: type=1400 audit(1744987523.555:618): avc: denied { connect } for pid=7744 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 73.472025][ T7783] vxfs: WRONG superblock magic 00000000 at 1 [ 73.474748][ T7783] vxfs: WRONG superblock magic 00000000 at 8 [ 73.476609][ T7783] vxfs: can't find superblock. [ 73.520750][ T7762] bond0: entered promiscuous mode [ 73.524818][ T7762] bond_slave_0: entered promiscuous mode [ 73.528839][ T7762] bond_slave_1: entered promiscuous mode [ 73.531413][ T7762] bridge0: entered promiscuous mode [ 73.592749][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.500'. [ 73.595788][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.500'. [ 73.653292][ T7801] bond2: entered promiscuous mode [ 73.655096][ T7801] bond2: entered allmulticast mode [ 73.656859][ T7801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.679168][ T7805] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.700267][ T7807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.508'. [ 73.724793][ T7811] syzkaller1: entered promiscuous mode [ 73.733953][ T7811] syzkaller1: entered allmulticast mode [ 73.812730][ T7818] dvmrp5: entered allmulticast mode [ 73.816745][ T7818] dvmrp5: left allmulticast mode [ 74.048709][ T7846] SELinux: security_context_str_to_sid (E�) failed with errno=-22 [ 74.441880][ T7888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.530'. [ 74.444802][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.530'. [ 74.447631][ T7888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.530'. [ 74.450509][ T7888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.530'. [ 74.523513][ T5987] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.573170][ T7892] dlm: no locking on control device [ 74.683525][ T5987] usb 7-1: Using ep0 maxpacket: 32 [ 74.687939][ T5987] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 74.691130][ T5987] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 74.694885][ T5987] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 74.698358][ T5987] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 74.702661][ T5987] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.707223][ T5987] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 74.710090][ T5987] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 74.713580][ T5987] usb 7-1: Product: syz [ 74.714939][ T5987] usb 7-1: Manufacturer: syz [ 74.716506][ T5987] usb 7-1: SerialNumber: syz [ 74.719952][ T5987] usb 7-1: config 0 descriptor?? [ 74.723320][ T5987] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 74.728208][ T5987] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.762929][ T7900] IPv6: syztnl0: Disabled Multicast RS [ 74.866666][ T7917] No source specified [ 75.048915][ T7912] cgroup: fork rejected by pids controller in /syz0 [ 75.241582][ T7965] openvswitch: netlink: Actions may not be safe on all matching packets [ 75.288456][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.292633][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.483339][ T5946] usb 7-1: USB disconnect, device number 3 [ 75.487452][ T5946] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 75.974133][ T8024] fuse: Unknown parameter '' [ 76.032416][ T8029] fuse: Bad value for 'group_id' [ 76.034672][ T8029] fuse: Bad value for 'group_id' [ 76.171995][ T8039] ERROR: device name not specified. [ 76.252403][ T8052] afs: Unknown parameter 'dyn' [ 76.920777][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 77.204374][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 77.204388][ T40] audit: type=1400 audit(1744987527.935:681): avc: denied { read } for pid=8087 comm="syz.1.574" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.209960][ T8091] netlink: 'syz.3.575': attribute type 4 has an invalid length. [ 77.216738][ T40] audit: type=1400 audit(1744987527.935:682): avc: denied { open } for pid=8087 comm="syz.1.574" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.219001][ T8091] netlink: 152 bytes leftover after parsing attributes in process `syz.3.575'. [ 77.236696][ T8091] : renamed from bond0 (while UP) [ 77.289301][ T8105] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 77.292841][ T40] audit: type=1400 audit(1744987528.015:683): avc: denied { create } for pid=8106 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.302777][ T40] audit: type=1400 audit(1744987528.025:684): avc: denied { read } for pid=8106 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.490352][ T40] audit: type=1400 audit(1744987528.215:685): avc: denied { read } for pid=8138 comm="syz.3.589" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.499784][ T40] audit: type=1400 audit(1744987528.215:686): avc: denied { open } for pid=8138 comm="syz.3.589" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.509463][ T40] audit: type=1400 audit(1744987528.225:687): avc: denied { ioctl } for pid=8138 comm="syz.3.589" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.523171][ T40] audit: type=1400 audit(1744987528.245:688): avc: denied { write } for pid=8144 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.526684][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'. [ 77.532645][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'. [ 77.536130][ T8145] ref_ctr_offset mismatch. inode: 0x2f1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 77.537718][ T8147] overlayfs: workdir and upperdir must reside under the same mount [ 77.728520][ T40] audit: type=1400 audit(1744987528.455:689): avc: denied { create } for pid=8151 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 77.738068][ T40] audit: type=1400 audit(1744987528.465:690): avc: denied { bind } for pid=8151 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.844449][ T8168] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 77.856568][ T8168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.867743][ T8168] bond2: (slave gretap2): making interface the new active one [ 77.871894][ T8168] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 77.995732][ T8185] xt_hashlimit: size too large, truncated to 1048576 [ 78.010724][ T8187] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.019842][ T8187] netlink: 104 bytes leftover after parsing attributes in process `syz.3.603'. [ 78.277017][ T8209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.328971][ T8220] vlan2: entered allmulticast mode [ 78.387085][ T8210] mmap: syz.3.611 (8210) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.484713][ T8235] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 78.939633][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.627'. [ 78.993658][ T4220] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.163576][ T4220] usb 8-1: Using ep0 maxpacket: 8 [ 79.170419][ T4220] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.178183][ T4220] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.181022][ T4220] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 79.185478][ T4220] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.195531][ T4220] hub 8-1:1.0: bad descriptor, ignoring hub [ 79.197427][ T4220] hub 8-1:1.0: probe with driver hub failed with error -5 [ 79.318335][ T8296] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 79.322346][ T8296] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 79.503601][ T4220] usb 8-1: USB disconnect, device number 6 [ 79.591959][ T8313] tty tty4: ldisc open failed (-12), clearing slot 3 [ 79.620673][ T8318] vxcan1: tx address claim with dlc 0 [ 79.843508][ T4220] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 79.929683][ T8330] overlay: ./file1 is not a directory [ 79.994037][ T4220] usb 8-1: Using ep0 maxpacket: 8 [ 79.998207][ T4220] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.002344][ T4220] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.006238][ T4220] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 80.009900][ T4220] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.019036][ T4220] hub 8-1:1.0: bad descriptor, ignoring hub [ 80.021857][ T4220] hub 8-1:1.0: probe with driver hub failed with error -5 [ 80.136105][ T8346] netlink: 'syz.1.655': attribute type 16 has an invalid length. [ 80.139485][ T8346] netlink: 'syz.1.655': attribute type 17 has an invalid length. [ 80.152797][ T8346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.167483][ T8346] __nla_validate_parse: 3 callbacks suppressed [ 80.167492][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 80.220169][ T8351] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 80.223906][ T8352] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 80.227422][ T8351] team0: Cannot enslave team device to itself [ 80.323821][ T24] usb 8-1: USB disconnect, device number 7 [ 80.338472][ T8361] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 80.403669][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 80.478480][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 80.560422][ T8375] hsr_slave_1 (unregistering): left promiscuous mode [ 80.604519][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.671'. [ 80.608073][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.671'. [ 80.617105][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.671'. [ 80.620959][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.671'. [ 80.783057][ T8404] overlayfs: missing 'lowerdir' [ 80.894441][ T8423] tmpfs: User quota inode hardlimit too large. [ 81.273495][ T4220] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 81.328633][ T1462] cfg80211: failed to load regulatory.db [ 81.455376][ T4220] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.458984][ T4220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 81.462529][ T4220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 81.463563][ T5983] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.466688][ T4220] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.473370][ T4220] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.476272][ T4220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.479988][ T4220] usb 7-1: config 0 descriptor?? [ 81.482059][ T8437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 81.623775][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 81.624642][ T8478] netlink: 32 bytes leftover after parsing attributes in process `syz.3.691'. [ 81.626660][ T5983] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.631334][ T5983] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.634516][ T5983] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 81.637190][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.643909][ T5983] hub 6-1:1.0: bad descriptor, ignoring hub [ 81.646229][ T5983] hub 6-1:1.0: probe with driver hub failed with error -5 [ 81.702792][ T8485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.693'. [ 81.842259][ T8493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8493 comm=syz.0.697 [ 81.854864][ T8500] program syz.3.699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.890354][ T4220] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 81.894376][ T4220] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 81.903372][ T4220] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 81.903703][ T1110] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 81.907581][ T1110] ata1.00: irq_stat 0x40000000 [ 81.907596][ T1110] ata1.00: failed command: ZAC MANAGEMENT OUT [ 81.907602][ T1110] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 17 [ 81.907602][ T1110] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 81.907630][ T1110] ata1.00: status: { DRDY ERR } [ 81.919949][ T1110] ata1.00: error: { ABRT } [ 81.921338][ T1110] ata1.00: device reported invalid CHS sector 0 [ 81.952129][ T8505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.700'. [ 81.953672][ T5982] usb 6-1: USB disconnect, device number 7 [ 82.089624][ T5987] usb 7-1: USB disconnect, device number 4 [ 82.226386][ T8511] can: request_module (can-proto-0) failed. [ 82.283543][ T6003] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 82.375129][ T8519] cdrom: dropping to single frame dma [ 82.433534][ T6003] usb 6-1: Using ep0 maxpacket: 8 [ 82.437652][ T6003] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.440849][ T6003] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.444048][ T6003] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 82.447448][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.454981][ T6003] hub 6-1:1.0: bad descriptor, ignoring hub [ 82.456983][ T6003] hub 6-1:1.0: probe with driver hub failed with error -5 [ 82.677898][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 82.677913][ T40] audit: type=1400 audit(1744987533.405:734): avc: denied { read } for pid=8525 comm="syz.0.705" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.690798][ T40] audit: type=1400 audit(1744987533.405:735): avc: denied { open } for pid=8525 comm="syz.0.705" path="/dev/usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.763796][ T6003] usb 6-1: USB disconnect, device number 8 [ 82.858281][ T40] audit: type=1400 audit(1744987533.585:736): avc: denied { create } for pid=8527 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.865489][ T40] audit: type=1400 audit(1744987533.585:737): avc: denied { getopt } for pid=8527 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.085811][ T40] audit: type=1400 audit(1744987533.815:738): avc: denied { write } for pid=8536 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 83.115796][ T40] audit: type=1400 audit(1744987533.845:739): avc: denied { map } for pid=8541 comm="syz.0.710" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.123030][ T40] audit: type=1400 audit(1744987533.845:740): avc: denied { execute } for pid=8541 comm="syz.0.710" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.131291][ T40] audit: type=1400 audit(1744987533.845:741): avc: denied { ioctl } for pid=8541 comm="syz.0.710" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.207491][ T40] audit: type=1400 audit(1744987533.935:742): avc: denied { getopt } for pid=8553 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.251757][ T40] audit: type=1400 audit(1744987533.975:743): avc: denied { write } for pid=8564 comm="syz.3.718" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.261550][ T8567] block nbd0: Unsupported socket: shutdown callout must be supported. [ 83.269624][ T8567] SET target dimension over the limit! [ 83.335657][ T8563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8563 comm=syz.1.717 [ 83.431111][ T8581] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 83.471386][ T8581] netlink: 'syz.1.723': attribute type 10 has an invalid length. [ 83.503282][ T8580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.526635][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 83.773528][ T5946] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 83.934489][ T1110] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 83.934706][ T5946] usb 8-1: Using ep0 maxpacket: 8 [ 83.937388][ T1110] ata1: failed to read log page 10h (errno=-5) [ 83.941600][ T1110] ata1.00: exception Emask 0x1 SAct 0x20000000 SErr 0x0 action 0x0 [ 83.942650][ T5946] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.945046][ T1110] ata1.00: irq_stat 0x40000000 [ 83.948048][ T5946] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.948071][ T5946] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.948090][ T5946] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 83.948101][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.950168][ T1110] ata1.00: failed command: WRITE FPDMA QUEUED [ 83.957277][ T5946] hub 8-1:1.0: bad descriptor, ignoring hub [ 83.958610][ T1110] ata1.00: cmd 61/00:e8:3a:11:0a/01:00:00:00:00/40 tag 29 ncq dma 131072 out [ 83.958610][ T1110] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 83.961063][ T5946] hub 8-1:1.0: probe with driver hub failed with error -5 [ 83.966031][ T1110] ata1.00: status: { DRDY } [ 83.978298][ T1110] ata1.00: configured for UDMA/100 [ 83.980109][ T1110] ata1: EH complete [ 84.030476][ T8606] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 84.143703][ T8574] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 84.272694][ T6003] usb 8-1: USB disconnect, device number 8 [ 84.468831][ T8629] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 84.490016][ T8632] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 84.502197][ T8632] openvswitch: netlink: IPv6 tunnel dst address is zero [ 84.624077][ T4220] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 84.652512][ T8651] netlink: 'syz.1.740': attribute type 1 has an invalid length. [ 84.773500][ T4220] usb 8-1: Using ep0 maxpacket: 8 [ 84.776787][ T4220] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.780454][ T4220] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.783264][ T4220] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.787531][ T4220] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.790464][ T4220] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.797362][ T4220] hub 8-1:1.0: bad descriptor, ignoring hub [ 84.799318][ T4220] hub 8-1:1.0: probe with driver hub failed with error -5 [ 85.105278][ T4220] usb 8-1: USB disconnect, device number 9 [ 85.324729][ T5945] Bluetooth: hci3: command 0x0405 tx timeout [ 85.525659][ T8675] __nla_validate_parse: 11 callbacks suppressed [ 85.525671][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 85.531397][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 85.733243][ T8691] can0: slcan on ptm0. [ 85.843306][ T8701] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 85.923817][ T8690] can0 (unregistered): slcan off ptm0. [ 86.067531][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 86.070374][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.755'. [ 86.244223][ T8734] xt_hashlimit: max too large, truncated to 1048576 [ 86.248363][ T8734] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 86.277132][ T8739] netlink: 576 bytes leftover after parsing attributes in process `syz.2.765'. [ 86.293534][ T5983] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 86.337908][ T8748] openvswitch: netlink: Flow actions attr not present in new flow. [ 86.370283][ T8750] tmpfs: Bad value for 'mpol' [ 86.397946][ T8741] tmpfs: Unknown parameter 'mode000000000000000000' [ 86.397972][ T8753] tmpfs: Unknown parameter 'mode000000000000000000' [ 86.444993][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 86.448041][ T5983] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.451194][ T5983] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.454337][ T5983] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.458402][ T5983] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 86.461264][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.468084][ T5983] hub 6-1:1.0: bad descriptor, ignoring hub [ 86.468288][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'. [ 86.470213][ T5983] hub 6-1:1.0: probe with driver hub failed with error -5 [ 86.512442][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 86.521907][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 86.563645][ T1462] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.713891][ T1462] usb 5-1: Using ep0 maxpacket: 32 [ 86.717532][ T1462] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 86.725328][ T1462] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 86.729120][ T1462] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 86.732055][ T1462] usb 5-1: Product: syz [ 86.734042][ T1462] usb 5-1: Manufacturer: syz [ 86.735984][ T1462] usb 5-1: SerialNumber: syz [ 86.739971][ T1462] usb 5-1: config 0 descriptor?? [ 86.742032][ T8746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 86.745090][ T1462] hub 5-1:0.0: bad descriptor, ignoring hub [ 86.746996][ T1462] hub 5-1:0.0: probe with driver hub failed with error -5 [ 86.773726][ T5983] usb 6-1: USB disconnect, device number 9 [ 86.851833][ T8782] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 86.856717][ T8782] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 87.123583][ T5983] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 87.273462][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 87.276398][ T5983] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.279641][ T5983] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.282517][ T5983] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.287335][ T5983] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 87.291018][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.300534][ T5983] hub 6-1:1.0: bad descriptor, ignoring hub [ 87.303196][ T5983] hub 6-1:1.0: probe with driver hub failed with error -5 [ 87.603807][ T5983] usb 6-1: USB disconnect, device number 10 [ 87.712547][ T8794] --map-set only usable from mangle table [ 87.717131][ T6003] usb 5-1: USB disconnect, device number 5 [ 87.721901][ T8794] delete_channel: no stack [ 87.817367][ T8805] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.788'. [ 87.820313][ T8805] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.788'. [ 87.853475][ T6003] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 87.889536][ T8813] netlink: 'syz.3.790': attribute type 28 has an invalid length. [ 87.892179][ T8813] netlink: 'syz.3.790': attribute type 3 has an invalid length. [ 88.074609][ T6003] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.079541][ T6003] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 88.081916][ T6003] usb 5-1: can't read configurations, error -71 [ 88.242437][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 88.242448][ T40] audit: type=1400 audit(1744987538.965:768): avc: denied { recv } for pid=5872 comm="syz-executor" saddr=127.0.0.1 src=60374 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 88.254025][ T40] audit: type=1400 audit(1744987538.985:769): avc: denied { create } for pid=8839 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 88.276402][ T8840] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 88.280672][ T40] audit: type=1400 audit(1744987539.005:770): avc: denied { ioctl } for pid=8839 comm="syz.1.796" path="socket:[22944]" dev="sockfs" ino=22944 ioctlcmd=0x8991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 88.294334][ T40] audit: type=1400 audit(1744987539.015:771): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60374 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 88.315423][ T40] audit: type=1400 audit(1744987539.045:772): avc: denied { getopt } for pid=8845 comm="syz.2.798" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.355861][ T8848] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 88.409372][ T8850] syz.2.800: attempt to access beyond end of device [ 88.409372][ T8850] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 88.414342][ T8850] MINIX-fs: unable to read superblock [ 88.557903][ T8852] Bluetooth: MGMT ver 1.23 [ 88.644620][ T8859] x_tables: duplicate underflow at hook 1 [ 88.646550][ T8859] x_tables: duplicate underflow at hook 1 [ 88.648353][ T8859] x_tables: duplicate underflow at hook 1 [ 88.650165][ T8859] x_tables: duplicate underflow at hook 1 [ 88.716772][ T8868] ip6t_srh: unknown srh match flags 4000 [ 88.716916][ T8869] ip6t_srh: unknown srh match flags 4000 [ 88.742947][ T8872] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 88.742947][ T8872] program syz.0.807 not setting count and/or reply_len properly [ 88.823664][ T8879] netlink: 'syz.0.810': attribute type 10 has an invalid length. [ 88.826942][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.829472][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.961845][ T5987] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 89.123532][ T5987] usb 7-1: Using ep0 maxpacket: 8 [ 89.130535][ T5987] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.135989][ T5987] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.139760][ T5987] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.145445][ T5987] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 89.149178][ T5987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.162445][ T5987] hub 7-1:1.0: bad descriptor, ignoring hub [ 89.173496][ T5987] hub 7-1:1.0: probe with driver hub failed with error -5 [ 89.230321][ T8914] vlan2: entered allmulticast mode [ 89.437714][ T8945] ======================================================= [ 89.437714][ T8945] WARNING: The mand mount option has been deprecated and [ 89.437714][ T8945] and is ignored by this kernel. Remove the mand [ 89.437714][ T8945] option from the mount to silence this warning. [ 89.437714][ T8945] ======================================================= [ 89.438185][ T40] audit: type=1400 audit(1744987540.165:773): avc: denied { remount } for pid=8932 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.473800][ T4220] usb 7-1: USB disconnect, device number 5 [ 89.598153][ T8951] netlink: 'syz.3.825': attribute type 29 has an invalid length. [ 89.722213][ T8973] Cannot find set identified by id 0 to match [ 89.806232][ T40] audit: type=1400 audit(1744987540.535:774): avc: denied { nosuid_transition } for pid=8978 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 89.814639][ T4220] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 89.815719][ T40] audit: type=1400 audit(1744987540.535:775): avc: denied { transition } for pid=8978 comm="syz.1.834" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C88548580C05179993868AA9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 89.826961][ T40] audit: type=1400 audit(1744987540.535:776): avc: denied { entrypoint } for pid=8978 comm="syz.1.834" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C88548580C05179993868AA9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1107 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.836305][ T40] audit: type=1400 audit(1744987540.535:777): avc: denied { noatsecure } for pid=8978 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 89.851464][ T8989] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 89.983523][ T4220] usb 7-1: Using ep0 maxpacket: 8 [ 89.986944][ T4220] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.990478][ T4220] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.994153][ T4220] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.999373][ T4220] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 90.002450][ T4220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.007437][ T4220] hub 7-1:1.0: bad descriptor, ignoring hub [ 90.010020][ T4220] hub 7-1:1.0: probe with driver hub failed with error -5 [ 90.323835][ T5987] usb 7-1: USB disconnect, device number 6 [ 90.534222][ T5946] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 90.538838][ T9054] loop2: detected capacity change from 0 to 7 [ 90.542914][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.546856][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 90.550257][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.553301][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 90.555933][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.559126][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 90.561884][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.565691][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 90.569154][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.572007][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 90.574636][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.577696][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 90.580313][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.584114][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 90.588726][ T9054] ldm_validate_partition_table(): Disk read failed. [ 90.592550][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.596421][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 90.599936][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.603301][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 90.613319][ T9061] xt_socket: unknown flags 0x8 [ 90.620701][ T9061] kAFS: No cell specified [ 90.644821][ T9055] [ 90.646075][ T9055] ====================================================== [ 90.648984][ T9055] WARNING: possible circular locking dependency detected [ 90.651997][ T9055] 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 Not tainted [ 90.655516][ T9055] ------------------------------------------------------ [ 90.659177][ T9055] syz.3.855/9055 is trying to acquire lock: [ 90.661623][ T9055] ffff88801c68e1e0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 90.665832][ T9055] [ 90.665832][ T9055] but task is already holding lock: [ 90.668797][ T9055] ffff8881070cb168 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 90.673226][ T9055] [ 90.673226][ T9055] which lock already depends on the new lock. [ 90.673226][ T9055] [ 90.677516][ T9055] [ 90.677516][ T9055] the existing dependency chain (in reverse order) is: [ 90.681193][ T9055] [ 90.681193][ T9055] -> #3 (&q->q_usage_counter(io)#19){++++}-{0:0}: [ 90.684103][ T9055] blk_alloc_queue+0x619/0x760 [ 90.685702][ T9055] blk_mq_alloc_queue+0x179/0x290 [ 90.687421][ T9055] __blk_mq_alloc_disk+0x29/0x120 [ 90.689137][ T9055] loop_add+0x496/0xb70 [ 90.690748][ T9055] loop_init+0x164/0x270 [ 90.692716][ T9055] do_one_initcall+0x120/0x6e0 [ 90.693789][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 90.694667][ T9055] kernel_init_freeable+0x5c2/0x900 [ 90.694687][ T9055] kernel_init+0x1c/0x2b0 [ 90.694703][ T9055] ret_from_fork+0x45/0x80 [ 90.702220][ T9055] ret_from_fork_asm+0x1a/0x30 [ 90.704125][ T9055] [ 90.704125][ T9055] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 90.706374][ T9055] fs_reclaim_acquire+0x102/0x150 [ 90.708587][ T9055] kmem_cache_alloc_noprof+0x53/0x3b0 [ 90.710979][ T9055] __kernfs_iattrs+0xbc/0x3f0 [ 90.713125][ T9055] __kernfs_setattr+0x4d/0x3c0 [ 90.715089][ T5946] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 90.715320][ T9055] kernfs_iop_setattr+0xda/0x120 [ 90.715339][ T9055] notify_change+0x6a6/0x1230 [ 90.718936][ T5946] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.721011][ T9055] do_truncate+0x15b/0x220 [ 90.721031][ T9055] path_openat+0x2761/0x2d40 [ 90.721046][ T9055] do_filp_open+0x20b/0x470 [ 90.723336][ T5946] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.727073][ T9055] do_sys_openat2+0x11b/0x1d0 [ 90.727090][ T9055] __x64_sys_openat+0x174/0x210 [ 90.727102][ T9055] do_syscall_64+0xcd/0x260 [ 90.727116][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.727126][ T9055] [ 90.727126][ T9055] -> #1 (iattr_mutex){+.+.}-{4:4}: [ 90.727142][ T9055] __mutex_lock+0x199/0xb90 [ 90.727155][ T9055] __kernfs_iattrs+0x2b/0x3f0 [ 90.727164][ T9055] __kernfs_setattr+0x4d/0x3c0 [ 90.727173][ T9055] kernfs_iop_setattr+0xda/0x120 [ 90.727181][ T9055] notify_change+0x6a6/0x1230 [ 90.727195][ T9055] do_truncate+0x15b/0x220 [ 90.727203][ T9055] path_openat+0x2761/0x2d40 [ 90.727211][ T9055] do_filp_open+0x20b/0x470 [ 90.727220][ T9055] do_sys_openat2+0x11b/0x1d0 [ 90.727231][ T9055] __x64_sys_openat+0x174/0x210 [ 90.727242][ T9055] do_syscall_64+0xcd/0x260 [ 90.727255][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.727264][ T9055] [ 90.727264][ T9055] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 90.727278][ T9055] __lock_acquire+0x1173/0x1ba0 [ 90.727287][ T9055] lock_acquire+0x179/0x350 [ 90.727295][ T9055] down_read+0x9b/0x480 [ 90.727308][ T9055] kernfs_iop_getattr+0x9c/0xf0 [ 90.727316][ T9055] vfs_getattr_nosec+0x29a/0x3a0 [ 90.727327][ T9055] vfs_getattr+0x4a/0x60 [ 90.727339][ T9055] loop_query_min_dio_size.isra.0+0x120/0x260 [ 90.727360][ T9055] lo_ioctl+0x1ce0/0x26d0 [ 90.727373][ T9055] blkdev_ioctl+0x274/0x6d0 [ 90.727394][ T9055] __x64_sys_ioctl+0x190/0x200 [ 90.727413][ T9055] do_syscall_64+0xcd/0x260 [ 90.727432][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.727447][ T9055] [ 90.727447][ T9055] other info that might help us debug this: [ 90.727447][ T9055] [ 90.727452][ T9055] Chain exists of: [ 90.727452][ T9055] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#19 [ 90.727452][ T9055] [ 90.727485][ T9055] Possible unsafe locking scenario: [ 90.727485][ T9055] [ 90.727490][ T9055] CPU0 CPU1 [ 90.727494][ T9055] ---- ---- [ 90.727499][ T9055] lock(&q->q_usage_counter(io) [ 90.734907][ T5946] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.737760][ T9055] #19); [ 90.737774][ T9055] lock(fs_reclaim); [ 90.737787][ T9055] lock(&q->q_usage_counter(io)#19); [ 90.737803][ T9055] rlock( [ 90.740125][ T5946] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.742265][ T9055] &root->kernfs_iattr_rwsem); [ 90.742279][ T9055] [ 90.742279][ T9055] *** DEADLOCK *** [ 90.742279][ T9055] [ 90.742283][ T9055] 3 locks held by syz.3.855/9055: [ 90.742293][ T9055] #0: ffff888025d2b368 ( [ 90.745173][ T5946] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.746774][ T9055] &lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x2a9/0x26d0 [ 90.746810][ T9055] #1: ffff8881070cb168 [ 90.749861][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.751648][ T9055] (&q->q_usage_counter(io)#19){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 90.751683][ T9055] #2: ffff8881070cb1a0 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 90.866504][ T9055] [ 90.866504][ T9055] stack backtrace: [ 90.868942][ T9055] CPU: 0 UID: 0 PID: 9055 Comm: syz.3.855 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 90.868964][ T9055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.868975][ T9055] Call Trace: [ 90.868981][ T9055] <TASK> [ 90.868988][ T9055] dump_stack_lvl+0x116/0x1f0 [ 90.869013][ T9055] print_circular_bug+0x275/0x350 [ 90.869039][ T9055] check_noncircular+0x14c/0x170 [ 90.869065][ T9055] __lock_acquire+0x1173/0x1ba0 [ 90.869084][ T9055] lock_acquire+0x179/0x350 [ 90.869098][ T9055] ? kernfs_iop_getattr+0x9c/0xf0 [ 90.869113][ T9055] ? __pfx___might_resched+0x10/0x10 [ 90.869137][ T9055] down_read+0x9b/0x480 [ 90.869159][ T9055] ? kernfs_iop_getattr+0x9c/0xf0 [ 90.869172][ T9055] ? find_held_lock+0x2b/0x80 [ 90.869191][ T9055] ? __pfx_down_read+0x10/0x10 [ 90.869212][ T9055] ? kernfs_root+0xee/0x2a0 [ 90.869229][ T9055] kernfs_iop_getattr+0x9c/0xf0 [ 90.869245][ T9055] vfs_getattr_nosec+0x29a/0x3a0 [ 90.869264][ T9055] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 90.869279][ T9055] vfs_getattr+0x4a/0x60 [ 90.869297][ T9055] loop_query_min_dio_size.isra.0+0x120/0x260 [ 90.869315][ T9055] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 90.869332][ T9055] ? mark_held_locks+0x49/0x80 [ 90.869350][ T9055] ? __pfx_autoremove_wake_function+0x10/0x10 [ 90.869382][ T9055] ? blk_freeze_queue_start+0xec/0x140 [ 90.869408][ T9055] lo_ioctl+0x1ce0/0x26d0 [ 90.869427][ T9055] ? __lock_acquire+0x5ca/0x1ba0 [ 90.869442][ T9055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.869462][ T9055] ? __pfx_lo_ioctl+0x10/0x10 [ 90.869479][ T9055] ? find_held_lock+0x2b/0x80 [ 90.869498][ T9055] ? avc_has_extended_perms+0x33a/0x1090 [ 90.869516][ T9055] ? avc_has_extended_perms+0x47c/0x1090 [ 90.869534][ T9055] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 90.869551][ T9055] ? kasan_quarantine_put+0x10a/0x240 [ 90.869566][ T9055] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.869588][ T9055] ? find_held_lock+0x2b/0x80 [ 90.869610][ T9055] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.869628][ T9055] ? blkdev_common_ioctl+0x1dd/0x2250 [ 90.869650][ T9055] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.869667][ T9055] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 90.869691][ T9055] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 90.869714][ T9055] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 90.869738][ T9055] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 90.869762][ T9055] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 90.869791][ T9055] ? __pfx_lo_ioctl+0x10/0x10 [ 90.869808][ T9055] blkdev_ioctl+0x274/0x6d0 [ 90.869830][ T9055] ? __pfx_blkdev_ioctl+0x10/0x10 [ 90.869852][ T9055] ? selinux_file_ioctl+0x180/0x270 [ 90.869874][ T9055] ? selinux_file_ioctl+0xb4/0x270 [ 90.869896][ T9055] ? __pfx_blkdev_ioctl+0x10/0x10 [ 90.869919][ T9055] __x64_sys_ioctl+0x190/0x200 [ 90.869939][ T9055] do_syscall_64+0xcd/0x260 [ 90.869961][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.869977][ T9055] RIP: 0033:0x7fbe59d8e169 [ 90.869990][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.870005][ T9055] RSP: 002b:00007fbe5ac02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.870022][ T9055] RAX: ffffffffffffffda RBX: 00007fbe59fb6080 RCX: 00007fbe59d8e169 [ 90.870055][ T9055] RDX: 000000000000000a RSI: 0000000000004c06 RDI: 0000000000000009 [ 90.870066][ T9055] RBP: 00007fbe59e10a68 R08: 0000000000000000 R09: 0000000000000000 [ 90.870075][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.870085][ T9055] R13: 0000000000000000 R14: 00007fbe59fb6080 R15: 00007ffe45e28778 [ 90.870100][ T9055] </TASK> [ 91.013500][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.017273][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 91.020661][ T9054] Dev loop2: unable to read RDB block 0 [ 91.024108][ T9054] loop2: unable to read partition table [ 91.025932][ T9054] loop2: partition table beyond EOD, truncated [ 91.028368][ T9054] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5) [ 91.033277][ T9055] ldm_validate_partition_table(): Disk read failed. [ 91.036000][ T9055] Dev loop2: unable to read RDB block 0 [ 91.037873][ T9055] loop2: unable to read partition table [ 91.040027][ T9055] loop2: partition table beyond EOD, truncated [ 91.042615][ T9055] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5) [ 91.077077][ T5946] usb 6-1: usb_control_msg returned -32 [ 91.079375][ T5946] usbtmc 6-1:16.0: can't read capabilities [ 91.430678][ T9070] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 91.434801][ T9031] __nla_validate_parse: 3 callbacks suppressed [ 91.434814][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 91.442538][ T6003] usb 6-1: USB disconnect, device number 11 VM DIAGNOSIS: 14:45:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000067 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e1e15 RDI=ffffffff9ae28460 RBP=ffffffff9ae28420 RSP=ffffc90003d3efa8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e35312e36 R12=0000000000000000 R13=0000000000000067 R14=ffffffff9ae28420 R15=ffffffff854e1db0 RIP=ffffffff854e1e3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbe5ac026c0 ffffffff 00c00000 GS =0000 ffff8880d69b0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a42a4 CR3=0000000031392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe45e28b00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe59e11a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe59e11a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe59e11a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe59e11a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe59e11aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe59e11bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000006dc04 RBX=0000000000000001 RCX=ffffffff8b729439 RDX=ffffed100d4a65be RSI=ffffffff8bf46580 RDI=ffffffff8191a751 RBP=ffffed1003ad1488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d68a440 R14=ffffffff90866810 R15=0000000000000000 RIP=ffffffff8b727ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fec4f4e56c0 CR3=00000000292bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=901b3064901b3064 901b3064901b3064 901b3064901b3064 901b3064901b3064 901b3064901b3064 901b3064901b3064 901b3064901b3064 901b3064901b3064 ZMM22=6e16d9586e16d958 6e16d9586e16d958 6e16d9586e16d958 6e16d9586e16d958 6e16d9586e16d958 6e16d9586e16d958 6e16d9586e16d958 6e16d9586e16d958 ZMM23=d87a648ad87a648a d87a648ad87a648a d87a648ad87a648a d87a648ad87a648a d87a648ad87a648a d87a648ad87a648a d87a648ad87a648a d87a648ad87a648a ZMM24=b29daa48b29daa48 b29daa48b29daa48 b29daa48b29daa48 b29daa48b29daa48 b29daa48b29daa48 b29daa48b29daa48 b29daa48b29daa48 b29daa48b29daa48 ZMM25=3dfe94473dfe9447 3dfe94473dfe9447 3dfe94473dfe9447 3dfe94473dfe9447 3dfe94473dfe9447 3dfe94473dfe9447 3dfe94473dfe9447 3dfe94473dfe9447 ZMM26=aef22839aef22839 aef22839aef22839 aef22839aef22839 aef22839aef22839 aef22839aef22839 aef22839aef22839 aef22839aef22839 aef22839aef22839 ZMM27=4a8437f34a8437f3 4a8437f34a8437f3 4a8437f34a8437f3 4a8437f34a8437f3 4a8437f34a8437f3 4a8437f34a8437f3 4a8437f34a8437f3 4a8437f34a8437f3 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ad040000ad040000 ad040000ad040000 ad040000ad040000 ad040000ad040000 ad040000ad040000 ad040000ad040000 ad040000ad040000 ad040000ad040000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a4415a0 RCX=ffffffff81af2699 RDX=ffff8880277d8000 RSI=ffffffff81af2673 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900032af7f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4882b5 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a63b040 RIP=ffffffff81af2675 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555762bc500 ffffffff 00c00000 GS =0000 ffff8880d6bb0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555762d75c8 CR3=0000000024cba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044000001 Opmask01=000000000000001f Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff271b89d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d25203a7325206b 6e696c6d79732065 7461657263206f74 2064656c69614600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4800051f5600054e 4b4c49485c560540 5144405746054a51 054140494c444600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000041 000000302f716d00 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00302f302f353232 3d544355444f5250 000039373536313d 4d554e5145530034 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 437169626a617c7b 3d31203c322a3670 646955564358581d 61262b2429327614 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 77737b7f6f777e7f 7d7f3f3f7e3f7f7f 757b5f5e5f5d7b7f 7f7f7f7f7f7f7f1d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 373d454400303d49 4400494d00373d45 4f4a414d00300030 4955555f3d454d41 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00302f3000303232 3d00003700303d45 000039370000002f 302f393d3d450034 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=00000000000864f4 RBX=0000000000000003 RCX=ffffffff8b729439 RDX=ffffed100d4e65be RSI=ffffffff8bf46580 RDI=ffffffff8191a751 RBP=ffffed1003bd4000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dea0000 R14=ffffffff90866810 R15=0000000000000000 RIP=ffffffff8b727ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000005018a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcf9f3ea0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60e1011a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60e1011a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60e1011a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60e1011a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60e1011aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60e1011bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000