last executing test programs: 7.75530566s ago: executing program 2 (id=535): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000028c1171a619d3a504916cadf5dae00000500070003000000"], 0x34}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0xf5243f7336add92a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000240), 0x1, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.749268284s ago: executing program 2 (id=537): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f00000000c0)) (async) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) pipe2(&(0x7f0000000000), 0x80000) 7.685094693s ago: executing program 2 (id=538): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="a6bea8a120e5f8320c30ce50869c", 0xe, 0x48810, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="e6883490c5fc"}, 0x14) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0xcd, 0x12bd02) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000001c0)={0x0, 0x0, 0x8}) 7.684583196s ago: executing program 2 (id=539): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') lseek(r0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}}, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x9) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x74c00, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd25, 0x25dfdbfe, {0xa, 0x78, 0x141, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x7800, 0x7800, 0xe, 0x10001, {{0x15, 0x4, 0x1, 0x20, 0x54, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, {[@cipso={0x86, 0x3f, 0x0, [{0x0, 0x11, "c9035152262c8afa1a4d062adecfcf"}, {0x6, 0xa, "152e428ff07fe231"}, {0x7, 0x2}, {0x7, 0x6, "3df1bd15"}, {0x5, 0x8, "c68162eeb2f4"}, {0x2, 0xe, "fcfe1ec8e7250b036959c9a6"}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="00042dbd7000fedbdf251000000008000700050000000800070008000000580001801400020065727370616e30000000000000000000140002007866726d30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="14001570f78911670200636169663000007af8f7cf57d68d", @ANYRES32=r8, @ANYBLOB="08000300020000000800080005000000080007007700000008000900020000000800090003000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4890}, 0x10) waitid(0x0, r3, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008d804dd00000000000001090224000100000001000921fffffe0122050009058103"], 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208000, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="e20b05"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x201) io_setup(0x10000, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000002c0)) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000140)={0x1, 0x5, 0x7, &(0x7f00000000c0)={0x44, "05000000000000005ea70100af123f03922182fbb8469efffff7ff00ffffc35dc5"}}) 6.684757155s ago: executing program 0 (id=555): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x359}, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) (async) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) (async) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 6.614422003s ago: executing program 0 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_TXQLEN={0x8, 0xd, 0x200}]}, 0x48}}, 0x0) 6.554813116s ago: executing program 0 (id=558): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x6, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000000c00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}}, 0x8000) 6.55361805s ago: executing program 0 (id=559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r2, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffe88) 6.49548155s ago: executing program 0 (id=560): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7, 0x7, 0x1, 0x80000001}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x0, 0x40}) syz_open_dev$char_usb(0xc, 0xb4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}, 0x94) 6.494285326s ago: executing program 0 (id=561): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x18, 0x4a2499fd4c68d2f3, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x34}}, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x10, 0x4, 0xc9}]}]}}, 0x0, 0x32}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000950000000000000000000006000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz0\x00', {}, 0x26, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x7], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) read$FUSE(r5, 0x0, 0x0) chroot(&(0x7f0000000100)='./bus\x00') syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7, 0xc8, "2a2581acb71c1c08"}}}}, 0xf) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 4.543301294s ago: executing program 2 (id=586): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x29, 0x301, 0x70bd26, 0x25dfdbfb, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f0000000540)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r2, 0x851, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB]) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = dup2(r4, r3) ioctl$BLKCRYPTOIMPORTKEY(r5, 0xc0401289, &(0x7f0000000080)={&(0x7f0000000040)="bc35966fc156fbd06e71d65d17dd9926", 0x10, &(0x7f0000000100)=""/89, 0x59}) ioctl$SNDCTL_FM_4OP_ENABLE(r5, 0x4004510f, &(0x7f0000000380)=0x1) process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/156, 0x9c}], 0x4, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000740)=""/228, 0xe4}, {&(0x7f0000000840)=""/150, 0x96}, {&(0x7f0000000900)=""/66, 0x42}, {&(0x7f0000000980)=""/86, 0x56}], 0x5, 0x0) 4.475258368s ago: executing program 2 (id=588): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x54008000) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) 3.80392688s ago: executing program 3 (id=596): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x3, r4, 0x0, &(0x7f0000000380)="f3", 0x1, 0xfffffffffffffc01}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r2, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000000280)='}', 0x1, 0x7ff}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r2, 0x0, &(0x7f00000003c0)="de", 0x1, 0xd372}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000180)={0x18, r2, 0xc2, 0xffffffff}) ioctl$TCSETSW2(r0, 0x5425, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) 3.245502419s ago: executing program 3 (id=598): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x3, 0x0, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = getpid() sendmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}], 0x20}, 0x0) migrate_pages(r8, 0x4, &(0x7f0000000380)=0xfffffffffffffff7, &(0x7f00000003c0)=0x7) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 3.164239052s ago: executing program 3 (id=599): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}, 0x1, 0x0, 0x6000000}, 0x800) 3.161385981s ago: executing program 3 (id=600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 3.104227284s ago: executing program 3 (id=601): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1060c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCGUSAGES(r3, 0x40305829, &(0x7f0000008340)={{0x1, 0x3, 0x7f, 0x7, 0x1000, 0x40}, 0x2bf, [0xb704, 0x3ff, 0x6, 0x2, 0xfba9, 0x80000001, 0x1c, 0x8, 0x2, 0x80000000, 0x8, 0x8001, 0xffff, 0x1, 0x248b56bb, 0xf734, 0x46a93a47, 0x51e1, 0x6, 0x6, 0xff, 0xffffffff, 0x8, 0x4, 0x4, 0x6, 0xeb09, 0x101, 0x5, 0x6, 0x8, 0x4, 0x3, 0x88, 0x0, 0x0, 0x1000, 0xfb81, 0x8, 0x40, 0x7, 0xf, 0x3ff, 0x401, 0x5, 0x10, 0xfffffffd, 0x1, 0xc6f8, 0x2, 0x80, 0x2, 0x7, 0xa1a, 0x9, 0x6, 0x1, 0x2, 0x0, 0x6, 0x5, 0x8000, 0x6, 0x2, 0x5819, 0x7, 0x6, 0x4f4, 0x3, 0x80000, 0x1000, 0x2, 0xb, 0x4, 0x7, 0x5, 0x1, 0x2, 0x80000000, 0x0, 0x5, 0x2, 0x8, 0x1, 0x0, 0x6, 0xd985, 0x51, 0x1, 0x5, 0x9, 0x6, 0xfffffffe, 0x1000079, 0x2, 0x8, 0xffe00, 0xfffffffb, 0x71172ab, 0x3, 0x6, 0x20006, 0x1, 0xe96, 0x4, 0xa09, 0x2, 0x4, 0x3, 0xa80c, 0x80000001, 0x9, 0xe7, 0x3e, 0x3, 0x0, 0x4, 0x2cdf, 0x1000, 0x3, 0x5, 0xff, 0x0, 0x4, 0x101, 0xff, 0x1400000, 0xfffffff7, 0x8, 0x8, 0x4, 0xffff, 0x2, 0x9, 0xfff, 0xfd93, 0x0, 0x5, 0x21, 0x4, 0x80000001, 0x401, 0x5, 0xfffffffb, 0x48cd, 0x1, 0x7fff, 0x8000, 0xfffffffe, 0x9, 0x1, 0x6, 0x6, 0xf8, 0xfffffffd, 0xa, 0x6, 0x2, 0xfb2, 0x100, 0x10001, 0x1, 0x40, 0x7, 0x8, 0x3e3, 0x0, 0x6, 0x0, 0x9, 0x0, 0x49, 0x3ff, 0x5, 0x1ff, 0x3, 0xbd, 0xfffffff8, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, 0x38, 0xd, 0x6, 0xfffffffa, 0x6, 0xf, 0x25, 0x2, 0x0, 0x4, 0x9, 0x2896, 0x4, 0x3, 0x3, 0x7, 0x0, 0xb, 0x9, 0xa9, 0x400, 0x8001, 0x8, 0x2, 0xc6ab, 0x18, 0x8, 0x2, 0x0, 0x7, 0x1, 0x6, 0x5, 0x400, 0x3, 0x3, 0x4, 0x1, 0x2, 0x2, 0x7, 0x8, 0x0, 0x7, 0x7, 0x0, 0xffffff64, 0x5, 0x2, 0x6, 0x3, 0x5, 0xc7, 0x7, 0x212, 0x7, 0x5, 0xe19b, 0x7, 0x5, 0x67, 0xa, 0xf60b, 0x1, 0x1, 0x4, 0x98a, 0x6, 0x10, 0x2eb, 0x2f7e, 0x0, 0x4, 0x1d21, 0x9, 0x80, 0xb, 0x1ff, 0xfffffff9, 0x0, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0x20000000, 0x8, 0xa, 0x3ff, 0x0, 0x7, 0x68b32c17, 0x339, 0x2, 0xc, 0x5, 0x40, 0x2d, 0x1ff, 0x91, 0x7f, 0x4, 0x7, 0x1, 0x2, 0x3b1, 0x3, 0x2, 0x3, 0x8001, 0x7, 0xfffffffc, 0x8, 0x0, 0x401c, 0x7, 0x200, 0x8, 0x5, 0xab83, 0x73, 0x8001, 0x1, 0x2, 0x8, 0x7, 0x3, 0x4, 0x8, 0x1, 0x74e, 0x88, 0x198, 0x20, 0x2, 0x328, 0xe5, 0x7, 0x9, 0x86a, 0x3, 0x1, 0x2b, 0xfffffffb, 0x6, 0xa, 0xd2e, 0x80000000, 0x7, 0xfffffff8, 0x0, 0x8, 0x569, 0xa, 0x100, 0xac3, 0x5, 0x6, 0xff, 0xe, 0x81, 0xca, 0xfffffffe, 0x7, 0x8, 0x0, 0x7, 0x5, 0x5, 0x4, 0xe, 0x5, 0x9, 0x7fffffff, 0xfffffffe, 0x1, 0x3de, 0x2, 0x1, 0xfb, 0x2, 0xfffffff8, 0x3ff, 0x8, 0x3, 0x8, 0x31eb, 0x7, 0x5, 0x8, 0x4a0000, 0x0, 0x2, 0xb0, 0x4, 0x8000, 0x80, 0xd05, 0x9, 0x5, 0x8, 0x80, 0x2, 0x5, 0xb, 0x7, 0x0, 0x5, 0x6af, 0x4, 0x8, 0x3, 0x580, 0x7, 0x9, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7ff, 0x4, 0xfffffff8, 0x9, 0x2, 0x3, 0x77ae, 0x1, 0x91c, 0x5, 0x6, 0x3, 0x0, 0x80000000, 0x21000000, 0xfffffffa, 0x3ff, 0xb3, 0x4f8c, 0x4, 0x127, 0x1, 0x2bfe1798, 0x10000, 0x1, 0x44c, 0x0, 0x4, 0x895, 0x8, 0xff9, 0xfffffff7, 0x3, 0x2c, 0x3ff, 0x6, 0x8, 0x7, 0x1, 0x1000, 0xc530, 0x5, 0x8f, 0x0, 0x6, 0x8000, 0x400, 0x7, 0x6, 0x9, 0x1, 0x5f66, 0x10001, 0x1, 0x9, 0x8000, 0x5, 0x80000001, 0x81, 0x6, 0x8, 0x75f, 0xab8, 0x4, 0x4, 0xe0b0, 0xffff, 0xf, 0x2, 0x4, 0x9, 0xffffd40a, 0x2, 0x9, 0x6, 0x2, 0xfffffa86, 0x8, 0x6, 0x101, 0x3, 0xa000000, 0x8, 0x7fffffff, 0x2, 0x6, 0x4, 0x101, 0x1, 0x200, 0x800, 0x9, 0x2, 0x3, 0xf5, 0xb30, 0x9, 0x2, 0x1, 0xd, 0x7fffffff, 0x7, 0x8, 0x0, 0x5, 0x4, 0x1, 0x462, 0x80000001, 0x5, 0x7, 0x3e2b, 0x4, 0x7ff, 0x2, 0x9, 0x3ff, 0x9, 0x8, 0x6, 0x2, 0x1, 0x100, 0xa, 0x5, 0x800, 0x80000000, 0x40, 0x1, 0x10000, 0xffffcd67, 0x5af, 0x3, 0x8, 0x7, 0x0, 0x227, 0x0, 0x8, 0x0, 0x1c18, 0x6, 0x7, 0x0, 0x9, 0xff, 0x6, 0x101, 0x7fff, 0x1, 0x101, 0xd7b, 0x2, 0x6, 0x83, 0x1, 0x10001, 0x3, 0x2, 0x2, 0xbfc8, 0x1, 0x101, 0x23b8, 0x7f, 0x8, 0xad9, 0x8, 0x4, 0xd31, 0x3a64ec4a, 0xffffffcf, 0x81, 0x7, 0x0, 0x2, 0x3, 0x0, 0x9, 0x4af7e4bc, 0x7, 0x4, 0x2, 0x2f8, 0x4, 0x4, 0x1, 0x1ff, 0x1c7, 0x80000000, 0xd, 0x8, 0x0, 0x7, 0x1, 0x3, 0x6, 0x10000, 0x89e7, 0xa, 0x6d, 0x4, 0x9, 0x6, 0xf, 0x4, 0x706, 0x800, 0xfffffff2, 0x7, 0x7, 0x5, 0x6, 0x1, 0x91, 0x1f, 0x0, 0xb, 0x3, 0x8, 0x42, 0xd3, 0x0, 0x0, 0xfffffff4, 0x1, 0x3e, 0x7923, 0x7, 0x7, 0x101, 0x7, 0x9a0, 0x9, 0xbff, 0xf26, 0x800, 0xe00000, 0x7, 0x171, 0x5, 0xa7, 0x23, 0x400, 0x5, 0x3, 0x5, 0x5, 0x0, 0x0, 0x5, 0x10, 0x6, 0x7, 0x5, 0x4, 0x1, 0x2, 0x0, 0x3, 0x75, 0x3, 0x5, 0xdec3, 0x7, 0x4, 0xfffffff9, 0x3, 0x6, 0x74b, 0xb126, 0xffffffff, 0xbe25, 0x7, 0x9, 0x9a, 0x6, 0x1800000, 0x76f, 0x4, 0x2, 0x4, 0x1, 0x3, 0xfffffff5, 0x7, 0x6, 0xc, 0x1ff, 0x6a, 0xe3, 0x390e, 0x1, 0x8, 0x7fffffff, 0x47, 0x3, 0x24dc, 0x80000001, 0x3ff, 0xfc, 0x0, 0xfffffffa, 0x4, 0xba, 0x3, 0x3, 0x3ff, 0x3, 0x5, 0xf72, 0x5, 0x8, 0x1258dd22, 0x1, 0x4, 0x88, 0xb5e, 0x4, 0x0, 0x3, 0x9, 0x101, 0xff, 0x3, 0x4, 0x39aa, 0xfffffffd, 0x408, 0x9fb0, 0x400, 0x3, 0xfffffff9, 0x7, 0x8, 0x4, 0xafdb, 0x8001, 0x9, 0x0, 0x2a, 0x40, 0x2e77, 0x0, 0x8, 0x7, 0x6, 0x1, 0x81, 0x10, 0x40, 0x1, 0xef, 0x1, 0x9, 0xc, 0xdd58, 0x0, 0xffff, 0x2, 0x1000, 0x3, 0x1000, 0x3, 0x4, 0x800, 0xfffffffa, 0x800, 0x7, 0x4, 0xfffffffe, 0xfffffff8, 0x81, 0x3ff, 0x7f, 0x4, 0x7, 0xffffffff, 0x0, 0x401, 0xa, 0x468, 0x1, 0xfffffff9, 0x5, 0x7, 0x8000, 0x0, 0x8, 0x5, 0x6, 0x5, 0x2, 0x2, 0x0, 0x10000001, 0xae9, 0xb07b, 0x13d2, 0x4, 0xfffffffe, 0xa1ef, 0x9c76, 0xf, 0x2, 0x6865e652, 0x10001, 0xfffffff8, 0xcb93, 0x1, 0x2df8, 0x2, 0x3, 0x8, 0x7f, 0x43c2, 0x9, 0x24, 0x2, 0x7, 0x3ff, 0x0, 0x5, 0xa000, 0x964, 0x1, 0x8001, 0x1, 0x7f, 0x6, 0x4, 0x0, 0x0, 0x8000, 0x1, 0x100, 0x800, 0x7, 0x2d0f, 0x6ea, 0x1, 0x34cd, 0x8, 0x8, 0x9, 0x10000, 0x7, 0x9, 0x5, 0xfffffffa, 0x9, 0x81, 0x11, 0x2, 0x10000, 0x18, 0xffffffff, 0x6, 0x200, 0x8000, 0xad, 0x9, 0x7fffffff, 0xa5, 0x101, 0x0, 0x7, 0x10, 0xa3, 0x7fffffff, 0x5, 0x5, 0x200, 0x8001, 0x0, 0x3, 0x4, 0xfffffffc, 0x4, 0x7, 0x78e7df4e, 0x5, 0x0, 0x3, 0x0, 0x1, 0x1, 0xa, 0x0, 0x0, 0x75, 0x101, 0x69cba428, 0xfff, 0x9, 0x9, 0xfffffc00, 0x1, 0x2, 0xf, 0x6, 0x8, 0x4, 0xc, 0x2, 0x37e, 0x14000, 0x3, 0x8000, 0x0, 0x0, 0x77ef, 0x800, 0x8, 0xffffffb2, 0xc74, 0x2, 0xc, 0x9, 0xfffff000, 0x7fffffff, 0xffffffff, 0x5, 0x1, 0x1000, 0x1000, 0x10, 0x9, 0x9, 0x1ff, 0x7, 0xfffffff9, 0x3, 0x80000000, 0x7, 0x40, 0x9, 0x1, 0x7, 0x0, 0x352, 0x0, 0xa, 0x3ff, 0x7, 0x2, 0x200001, 0x10001, 0xfffffff7, 0x0, 0x7, 0x8, 0x4, 0x9, 0x1, 0xe3, 0x5e48, 0x7, 0xffffffff, 0x8001, 0x805, 0xfffffff7, 0x9, 0x5, 0x3, 0x9c, 0x1, 0x2c, 0x3, 0x9, 0x7f, 0x35, 0x8d, 0x0, 0xffff, 0x6, 0x81, 0xdae, 0x8, 0x0, 0x8, 0x9, 0x0, 0x7, 0xed9a, 0x800, 0x8, 0x8, 0x8, 0xecc, 0x4622, 0xffffffc0, 0x1, 0x1, 0x1000, 0x101, 0x6, 0x6, 0xfff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x9, 0xf, 0x2, 0x5, 0x0, 0xc, 0x1cd30080, 0x9, 0xf, 0xf5b, 0x9, 0x54, 0xfffffffe, 0x3, 0xbc, 0xe]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.258418064s ago: executing program 1 (id=612): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00'}) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) (async) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) 1.184910966s ago: executing program 1 (id=613): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000007, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000f80)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xce}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x4, 0x2000, 0x1}) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x4}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0xa0008000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0500000022590007c43b6da0000008000300", @ANYRES32=r10], 0x28}}, 0x24000800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) 1.074692646s ago: executing program 1 (id=614): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f00000001c0)=[{r0, 0x4005}], 0x1, 0x0, 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) (async, rerun: 32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0xfffffc2f) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, r2, &(0x7f0000000100)) 1.004991801s ago: executing program 1 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xd0d42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c000c80080002"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 865.29572ms ago: executing program 1 (id=616): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0xe, 0x0, 0x3b5, "afa4d89e219235f891700000223a"}) 5.061322ms ago: executing program 1 (id=617): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8000, 0x104}, 0x18) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x1ff, 0xf801}}]}}, 0x11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setrlimit(0x8, &(0x7f0000000140)={0x1000, 0xfffffffffffffe00}) (async) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x1}}, {@canfd={0xd, {{0x4}, 0x1c, 0x2, 0x0, 0x0, "13624c499c3ebc6daaeb9b1020cfc0ba118e4a4c68133dd79f9da34c7740d9837b62a5953f4cfc493f5c79dfef63a77f2ca55a322a1bf79c8f10302922648b1f"}}}}, &(0x7f0000000200)={0x0, 0x3, [0xf5b, 0xe81, 0x44e, 0xac8]}) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000000) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@const={0x8, 0x0, 0x0, 0xa, 0x2}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x1, 0x8}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/116, 0x37, 0x74, 0x5, 0x4}, 0x28) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000400)={0x18, 0x0, {0x1, @remote, 'rose0\x00'}}) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$CDROMPLAYBLK(r3, 0x5317, &(0x7f0000000480)={0x62f3, 0xd}) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) setrlimit(0x4, &(0x7f0000000500)={0x8, 0x6}) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$cgroup_int(r4, &(0x7f0000000540)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) (async) mknod$loop(&(0x7f0000000580)='./file0\x00', 0x100, 0x1) (async) syz_extract_tcp_res(&(0x7f00000005c0), 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000600)={{0x1, 0x6000, 0x10, 0x7, 0x4, 0x8, 0x3, 0x0, 0x3, 0xa, 0x6, 0x6}, {0x3000, 0x8000000, 0xd, 0x62, 0x9, 0x3, 0x5, 0x8, 0x0, 0x2, 0x2, 0xb6}, {0xeeee8000, 0x2000, 0xb, 0x8, 0xfd, 0x8, 0xa7, 0x8, 0x1, 0x4, 0x9, 0x26}, {0x2, 0x3000, 0x3, 0x3, 0x8, 0x5, 0x60, 0xa6, 0x7, 0xa, 0x0, 0x1}, {0x1, 0x80a0000, 0x10, 0x0, 0x0, 0x8, 0x2, 0x20, 0x7f, 0x8, 0xff, 0x3}, {0xf7ff5000, 0x7cb19037afce149a, 0xc, 0x8, 0x1, 0xba, 0x1f, 0x40, 0x4, 0x80, 0x80, 0x10}, {0x10000, 0x2, 0xb, 0xe9, 0x12, 0xf, 0x55, 0x9, 0x2, 0x59, 0xff}, {0x3000, 0x2, 0xf, 0xff, 0x8, 0xac, 0x4, 0xa, 0x81, 0xd, 0x5, 0x5}, {0xeeef0000, 0xfff}, {0x3000}, 0x5, 0x0, 0x2, 0x220060, 0x2, 0x6801, 0x4000, 0x0, [0x101, 0x10, 0x0, 0x8b9]}) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000780), 0x111, 0x8}}, 0x20) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x90000, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r7) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x128, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xb490036e21884a19}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x30}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004014}, 0x48005) 0s ago: executing program 3 (id=618): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x3ffffffffffffe89}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {0x14}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x4, 0xa5}, {}, {}, @connect={{0x2, 0xff}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xa, {0x3, 0x8}, {0x0, 0x2}, @connect={{0x6, 0x71}, {0x7, 0x80}}}, {0x0, 0x1, 0x0, 0x0, @time, {0x0, 0x21}, {}, @quote={{0x0, 0x2}, 0x3ff}}], 0x70) accept(r2, 0x0, &(0x7f0000000280)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x3ff, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000240)={0x8000000000000001, r5}) fchdir(r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r7, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62966' (ED25519) to the list of known hosts. [ 45.710379][ T40] audit: type=1400 audit(1756219469.617:62): avc: denied { name_bind } for pid=5946 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.725713][ T40] audit: type=1400 audit(1756219469.637:63): avc: denied { write } for pid=5947 comm="sh" path="pipe:[7169]" dev="pipefs" ino=7169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.744459][ T40] audit: type=1400 audit(1756219469.657:64): avc: denied { execute } for pid=5947 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.753363][ T40] audit: type=1400 audit(1756219469.657:65): avc: denied { execute_no_trans } for pid=5947 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.822798][ T40] audit: type=1400 audit(1756219471.737:66): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.825533][ T5947] cgroup: Unknown subsys name 'net' [ 47.993550][ T5947] cgroup: Unknown subsys name 'cpuset' [ 47.997708][ T5947] cgroup: Unknown subsys name 'rlimit' [ 48.197286][ T5955] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.922835][ T5947] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.758060][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.758072][ T40] audit: type=1400 audit(1756219476.667:80): avc: denied { execmem } for pid=5959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.993629][ T40] audit: type=1400 audit(1756219476.907:81): avc: denied { create } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.012425][ T40] audit: type=1400 audit(1756219476.907:82): avc: denied { read write } for pid=5963 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.020699][ T40] audit: type=1400 audit(1756219476.917:83): avc: denied { open } for pid=5963 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.028004][ T40] audit: type=1400 audit(1756219476.927:84): avc: denied { ioctl } for pid=5963 comm="syz-executor" path="socket:[6378]" dev="sockfs" ino=6378 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.036517][ T5328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.041098][ T5328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.045457][ T5328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.049686][ T5328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.052943][ T5328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.056842][ T5328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.061388][ T5328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.065513][ T5328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.069757][ T5328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.074734][ T5328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.079345][ T5328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.083070][ T5328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.084335][ T5971] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.085968][ T5328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.088511][ T5971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.095823][ T40] audit: type=1400 audit(1756219477.007:85): avc: denied { read } for pid=5972 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.100623][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.103184][ T40] audit: type=1400 audit(1756219477.007:86): avc: denied { open } for pid=5972 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.107472][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.114730][ T40] audit: type=1400 audit(1756219477.007:87): avc: denied { mounton } for pid=5972 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.121322][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.125230][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.128804][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.340728][ T40] audit: type=1400 audit(1756219477.257:88): avc: denied { module_request } for pid=5968 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.378719][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 53.403393][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 53.586609][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.588830][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.592215][ T5968] bridge_slave_0: entered allmulticast mode [ 53.594878][ T5968] bridge_slave_0: entered promiscuous mode [ 53.598823][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.601222][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.603433][ T5968] bridge_slave_1: entered allmulticast mode [ 53.606030][ T5968] bridge_slave_1: entered promiscuous mode [ 53.683165][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.686136][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.689708][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.693043][ T5972] bridge_slave_0: entered allmulticast mode [ 53.696573][ T5972] bridge_slave_0: entered promiscuous mode [ 53.707020][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 53.714366][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.733764][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.736014][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.738227][ T5972] bridge_slave_1: entered allmulticast mode [ 53.741036][ T5972] bridge_slave_1: entered promiscuous mode [ 53.798035][ T5968] team0: Port device team_slave_0 added [ 53.801602][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.824243][ T5968] team0: Port device team_slave_1 added [ 53.845925][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.853258][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 53.876256][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.878468][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.886787][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.916119][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.918951][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.930575][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.980632][ T5972] team0: Port device team_slave_0 added [ 54.026932][ T5972] team0: Port device team_slave_1 added [ 54.038670][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.040996][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.043463][ T5976] bridge_slave_0: entered allmulticast mode [ 54.046111][ T5976] bridge_slave_0: entered promiscuous mode [ 54.144838][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.147304][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.149611][ T5976] bridge_slave_1: entered allmulticast mode [ 54.152463][ T5976] bridge_slave_1: entered promiscuous mode [ 54.155382][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.157618][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.165868][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.207211][ T5968] hsr_slave_0: entered promiscuous mode [ 54.210590][ T5968] hsr_slave_1: entered promiscuous mode [ 54.244657][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.247058][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.256102][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.261138][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.263336][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.265657][ T5963] bridge_slave_0: entered allmulticast mode [ 54.268435][ T5963] bridge_slave_0: entered promiscuous mode [ 54.271670][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.273861][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.276168][ T5963] bridge_slave_1: entered allmulticast mode [ 54.278749][ T5963] bridge_slave_1: entered promiscuous mode [ 54.351811][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.357239][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.513708][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.518962][ T5972] hsr_slave_0: entered promiscuous mode [ 54.521887][ T5972] hsr_slave_1: entered promiscuous mode [ 54.523950][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 54.525887][ T5972] Cannot create hsr debugfs directory [ 54.533911][ T5976] team0: Port device team_slave_0 added [ 54.538883][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.601757][ T5976] team0: Port device team_slave_1 added [ 54.664963][ T5963] team0: Port device team_slave_0 added [ 54.704101][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.707202][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.722907][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.729457][ T5963] team0: Port device team_slave_1 added [ 54.753595][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.756692][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.767856][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.872429][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.875382][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.886586][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.892734][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.895643][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.905147][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.975595][ T5976] hsr_slave_0: entered promiscuous mode [ 54.977821][ T5976] hsr_slave_1: entered promiscuous mode [ 54.980454][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 54.982968][ T5976] Cannot create hsr debugfs directory [ 55.084543][ T5963] hsr_slave_0: entered promiscuous mode [ 55.087663][ T5963] hsr_slave_1: entered promiscuous mode [ 55.090540][ T5963] debugfs: 'hsr0' already exists in 'hsr' [ 55.092548][ T5963] Cannot create hsr debugfs directory [ 55.110703][ T63] Bluetooth: hci1: command tx timeout [ 55.110782][ T5975] Bluetooth: hci2: command tx timeout [ 55.191385][ T5975] Bluetooth: hci3: command tx timeout [ 55.191436][ T63] Bluetooth: hci0: command tx timeout [ 55.205493][ T5968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.214110][ T5968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.245309][ T5968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.255823][ T5968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.372083][ T5972] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.378103][ T5972] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.385534][ T5972] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.390758][ T5972] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.462984][ T5976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.469162][ T5976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.475779][ T5976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.479929][ T5976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.556373][ T5963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.561165][ T5963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.565500][ T5963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.581896][ T5963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.596790][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.634828][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.638774][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.665288][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.668420][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.687397][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.689868][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.699287][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.713750][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.716421][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.722392][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.736201][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.739182][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.776159][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.791734][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.794308][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.801241][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.804123][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.808282][ T40] audit: type=1400 audit(1756219479.717:89): avc: denied { sys_module } for pid=5968 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.840005][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.878643][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.890411][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.893217][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.909953][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.912854][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.934271][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.990318][ T5968] veth0_vlan: entered promiscuous mode [ 56.000153][ T5968] veth1_vlan: entered promiscuous mode [ 56.012256][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.036641][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.050611][ T5968] veth0_macvtap: entered promiscuous mode [ 56.056905][ T5968] veth1_macvtap: entered promiscuous mode [ 56.101336][ T5972] veth0_vlan: entered promiscuous mode [ 56.106942][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.125135][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.128305][ T5976] veth0_vlan: entered promiscuous mode [ 56.136352][ T5972] veth1_vlan: entered promiscuous mode [ 56.146759][ T74] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.158511][ T74] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.162644][ T74] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.168980][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.186491][ T74] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.189623][ T5976] veth1_vlan: entered promiscuous mode [ 56.201260][ T5972] veth0_macvtap: entered promiscuous mode [ 56.211501][ T5972] veth1_macvtap: entered promiscuous mode [ 56.263411][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.274489][ T5976] veth0_macvtap: entered promiscuous mode [ 56.275066][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.279993][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.280605][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.295094][ T5976] veth1_macvtap: entered promiscuous mode [ 56.299836][ T5963] veth0_vlan: entered promiscuous mode [ 56.317398][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.321834][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.325254][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.327972][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.334511][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.337120][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.338130][ T5963] veth1_vlan: entered promiscuous mode [ 56.346634][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.365748][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.407912][ T5968] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.408114][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.418109][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.437063][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.455344][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.458768][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.459006][ T5963] veth0_macvtap: entered promiscuous mode [ 56.465051][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.485623][ T5963] veth1_macvtap: entered promiscuous mode [ 56.520188][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.523172][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.526125][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.546880][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.556339][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.570110][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.575804][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.582124][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.582143][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.601192][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.644871][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.649922][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.694311][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.698602][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.724665][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.727819][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.914646][ T6087] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 57.073798][ T6101] netlink: 344 bytes leftover after parsing attributes in process `syz.0.16'. [ 57.078307][ T6101] tmpfs: Bad value for 'huge' [ 57.096198][ T6102] kvm: pic: non byte read [ 57.098722][ T6102] kvm: pic: level sensitive irq not supported [ 57.099045][ T6102] kvm: pic: non byte read [ 57.104906][ T6102] kvm: pic: level sensitive irq not supported [ 57.105610][ T6102] kvm: pic: non byte read [ 57.113182][ T6102] kvm: pic: level sensitive irq not supported [ 57.113507][ T6102] kvm: pic: non byte read [ 57.120129][ T6102] kvm: pic: level sensitive irq not supported [ 57.121344][ T6102] kvm: pic: non byte read [ 57.127049][ T6102] kvm: pic: level sensitive irq not supported [ 57.127361][ T6102] kvm: pic: non byte read [ 57.137597][ T6102] kvm: pic: level sensitive irq not supported [ 57.137919][ T6102] kvm: pic: non byte read [ 57.148801][ T6102] kvm: pic: level sensitive irq not supported [ 57.149130][ T6102] kvm: pic: non byte read [ 57.155492][ T6102] kvm: pic: level sensitive irq not supported [ 57.155938][ T6102] kvm: pic: non byte read [ 57.190439][ T63] Bluetooth: hci1: command tx timeout [ 57.190592][ T5975] Bluetooth: hci2: command tx timeout [ 57.211461][ T6108] No buffer was provided with the request [ 57.280977][ T5975] Bluetooth: hci3: command tx timeout [ 57.668220][ T6137] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 57.798180][ T6149] hpfs: Bad magic ... probably not HPFS [ 57.803373][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 57.803383][ T40] audit: type=1400 audit(1756219481.717:160): avc: denied { read } for pid=6148 comm="syz.1.31" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.817012][ T5975] Bluetooth: hci1: unexpected subevent 0x01 length: 37 > 18 [ 57.821395][ T5975] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 57.823616][ T40] audit: type=1400 audit(1756219481.727:161): avc: denied { open } for pid=6148 comm="syz.1.31" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.825035][ T5975] CPU: 3 UID: 0 PID: 5975 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 57.825055][ T5975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.825064][ T5975] Workqueue: hci1 hci_rx_work [ 57.825080][ T5975] Call Trace: [ 57.825085][ T5975] [ 57.825090][ T5975] dump_stack_lvl+0x16c/0x1f0 [ 57.825105][ T5975] sysfs_warn_dup+0x7f/0xa0 [ 57.825120][ T5975] sysfs_create_dir_ns+0x24b/0x2b0 [ 57.825135][ T5975] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 57.825150][ T5975] ? find_held_lock+0x2b/0x80 [ 57.825168][ T5975] ? do_raw_spin_unlock+0x172/0x230 [ 57.825182][ T5975] kobject_add_internal+0x2c4/0x9b0 [ 57.825198][ T5975] kobject_add+0x16e/0x240 [ 57.825212][ T5975] ? __pfx_kobject_add+0x10/0x10 [ 57.825226][ T5975] ? do_raw_spin_unlock+0x172/0x230 [ 57.825238][ T5975] ? kobject_put+0xab/0x5a0 [ 57.825255][ T5975] device_add+0x288/0x1aa0 [ 57.825269][ T5975] ? __pfx_dev_set_name+0x10/0x10 [ 57.825285][ T5975] ? __pfx_device_add+0x10/0x10 [ 57.825299][ T5975] ? mgmt_send_event_skb+0x2fb/0x460 [ 57.825319][ T5975] hci_conn_add_sysfs+0x17e/0x230 [ 57.825331][ T5975] le_conn_complete_evt+0x1075/0x1d70 [ 57.825348][ T5975] ? preempt_count_sub+0xe0/0x160 [ 57.825364][ T5975] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 57.825380][ T5975] ? bt_warn+0xe4/0x120 [ 57.825394][ T5975] ? __pfx_bt_warn+0x10/0x10 [ 57.825412][ T5975] hci_le_conn_complete_evt+0x23c/0x370 [ 57.825432][ T5975] hci_le_meta_evt+0x357/0x5e0 [ 57.825442][ T5975] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 57.825460][ T5975] hci_event_packet+0x682/0x11c0 [ 57.825486][ T5975] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 57.825499][ T5975] ? __pfx_hci_event_packet+0x10/0x10 [ 57.825517][ T5975] ? kcov_remote_start+0x3c9/0x6d0 [ 57.825531][ T5975] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.825547][ T5975] hci_rx_work+0x2c5/0x16b0 [ 57.825558][ T5975] ? rcu_is_watching+0x12/0xc0 [ 57.825575][ T5975] process_one_work+0x9cf/0x1b70 [ 57.825593][ T5975] ? __pfx_process_one_work+0x10/0x10 [ 57.825608][ T5975] ? assign_work+0x1a0/0x250 [ 57.825620][ T5975] worker_thread+0x6c8/0xf10 [ 57.825636][ T5975] ? __kthread_parkme+0x19e/0x250 [ 57.825652][ T5975] ? __pfx_worker_thread+0x10/0x10 [ 57.825664][ T5975] kthread+0x3c5/0x780 [ 57.825675][ T5975] ? __pfx_kthread+0x10/0x10 [ 57.825686][ T5975] ? rcu_is_watching+0x12/0xc0 [ 57.825699][ T5975] ? __pfx_kthread+0x10/0x10 [ 57.825710][ T5975] ret_from_fork+0x5d7/0x6f0 [ 57.825720][ T5975] ? __pfx_kthread+0x10/0x10 [ 57.825731][ T5975] ret_from_fork_asm+0x1a/0x30 [ 57.825751][ T5975] [ 57.825766][ T5975] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 57.862740][ T40] audit: type=1400 audit(1756219481.727:162): avc: denied { ioctl } for pid=6148 comm="syz.1.31" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.865032][ T5975] Bluetooth: hci1: failed to register connection device [ 57.866237][ T40] audit: type=1400 audit(1756219481.727:163): avc: denied { create } for pid=6148 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.910442][ T9] IPVS: starting estimator thread 0... [ 57.916371][ T40] audit: type=1400 audit(1756219481.727:164): avc: denied { bind } for pid=6148 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.971682][ T40] audit: type=1400 audit(1756219481.727:165): avc: denied { listen } for pid=6148 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.971715][ T40] audit: type=1400 audit(1756219481.727:166): avc: denied { accept } for pid=6148 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.971748][ T40] audit: type=1400 audit(1756219481.727:167): avc: denied { mount } for pid=6148 comm="syz.1.31" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.971783][ T40] audit: type=1400 audit(1756219481.797:168): avc: denied { read write } for pid=6154 comm="syz.1.35" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.971814][ T40] audit: type=1400 audit(1756219481.797:169): avc: denied { open } for pid=6154 comm="syz.1.35" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.011322][ T6158] IPVS: using max 41 ests per chain, 98400 per kthread [ 58.031823][ T6168] Bluetooth: MGMT ver 1.23 [ 58.169451][ T6186] Bluetooth: (null): Invalid header checksum [ 58.174189][ T6188] hpfs: Bad magic ... probably not HPFS [ 58.176396][ T6186] ufs: You didn't specify the type of your ufs filesystem [ 58.176396][ T6186] [ 58.176396][ T6186] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 58.176396][ T6186] [ 58.176396][ T6186] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 58.187633][ T6186] ufs: failed to set blocksize [ 58.188830][ T63] Bluetooth: hci2: unexpected subevent 0x01 length: 37 > 18 [ 58.193102][ T63] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 58.196028][ T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 58.196046][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.196055][ T63] Workqueue: hci2 hci_rx_work [ 58.196072][ T63] Call Trace: [ 58.196077][ T63] [ 58.196082][ T63] dump_stack_lvl+0x16c/0x1f0 [ 58.196099][ T63] sysfs_warn_dup+0x7f/0xa0 [ 58.196117][ T63] sysfs_create_dir_ns+0x24b/0x2b0 [ 58.196136][ T63] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 58.196150][ T63] ? find_held_lock+0x2b/0x80 [ 58.196166][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 58.196178][ T63] kobject_add_internal+0x2c4/0x9b0 [ 58.196194][ T63] kobject_add+0x16e/0x240 [ 58.196207][ T63] ? __pfx_kobject_add+0x10/0x10 [ 58.196221][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 58.196233][ T63] ? kobject_put+0xab/0x5a0 [ 58.196249][ T63] device_add+0x288/0x1aa0 [ 58.196264][ T63] ? __pfx_dev_set_name+0x10/0x10 [ 58.196280][ T63] ? __pfx_device_add+0x10/0x10 [ 58.196294][ T63] ? mgmt_send_event_skb+0x2fb/0x460 [ 58.196315][ T63] hci_conn_add_sysfs+0x17e/0x230 [ 58.196326][ T63] le_conn_complete_evt+0x1075/0x1d70 [ 58.196343][ T63] ? preempt_count_sub+0xe0/0x160 [ 58.196359][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 58.196375][ T63] ? bt_warn+0xe4/0x120 [ 58.196389][ T63] ? __pfx_bt_warn+0x10/0x10 [ 58.196407][ T63] hci_le_conn_complete_evt+0x23c/0x370 [ 58.196426][ T63] hci_le_meta_evt+0x357/0x5e0 [ 58.196438][ T63] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 58.196456][ T63] hci_event_packet+0x682/0x11c0 [ 58.196472][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 58.196483][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 58.196501][ T63] ? kcov_remote_start+0x3c9/0x6d0 [ 58.196513][ T63] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.196527][ T63] hci_rx_work+0x2c5/0x16b0 [ 58.196538][ T63] ? rcu_is_watching+0x12/0xc0 [ 58.196553][ T63] process_one_work+0x9cf/0x1b70 [ 58.196571][ T63] ? __pfx_process_one_work+0x10/0x10 [ 58.196586][ T63] ? assign_work+0x1a0/0x250 [ 58.196598][ T63] worker_thread+0x6c8/0xf10 [ 58.196615][ T63] ? __pfx_worker_thread+0x10/0x10 [ 58.196627][ T63] kthread+0x3c5/0x780 [ 58.196638][ T63] ? __pfx_kthread+0x10/0x10 [ 58.196649][ T63] ? rcu_is_watching+0x12/0xc0 [ 58.196663][ T63] ? __pfx_kthread+0x10/0x10 [ 58.196674][ T63] ret_from_fork+0x5d7/0x6f0 [ 58.196684][ T63] ? __pfx_kthread+0x10/0x10 [ 58.196695][ T63] ret_from_fork_asm+0x1a/0x30 [ 58.196715][ T63] [ 58.196729][ T63] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 58.273825][ T6096] Set syz1 is full, maxelem 65536 reached [ 58.276007][ T63] Bluetooth: hci2: failed to register connection device [ 58.323246][ T6202] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 58.376139][ T6202] veth3: entered promiscuous mode [ 58.380078][ T6205] veth1_macvtap: left promiscuous mode [ 58.382882][ T6205] macsec0: entered promiscuous mode [ 58.385100][ T6205] macsec0: entered allmulticast mode [ 58.393829][ T6205] veth1_macvtap: entered promiscuous mode [ 58.396209][ T6205] veth1_macvtap: entered allmulticast mode [ 58.399124][ T6205] macsec0: left promiscuous mode [ 58.401810][ T6205] macsec0: left allmulticast mode [ 58.403934][ T6205] veth1_macvtap: left allmulticast mode [ 58.437100][ T6211] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 58.444684][ T6212] veth1_macvtap: left promiscuous mode [ 58.450901][ T6212] macsec0: entered promiscuous mode [ 58.452758][ T6212] macsec0: entered allmulticast mode [ 58.457883][ T6212] veth1_macvtap: entered promiscuous mode [ 58.459703][ T6212] veth1_macvtap: entered allmulticast mode [ 58.462441][ T6212] macsec0: left promiscuous mode [ 58.463788][ T6215] hpfs: Bad magic ... probably not HPFS [ 58.464114][ T6212] macsec0: left allmulticast mode [ 58.468040][ T6212] veth1_macvtap: left allmulticast mode [ 58.475900][ T63] Bluetooth: hci0: unexpected subevent 0x01 length: 37 > 18 [ 58.479212][ T63] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 58.485112][ T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 58.485139][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.485152][ T63] Workqueue: hci0 hci_rx_work [ 58.485176][ T63] Call Trace: [ 58.485182][ T63] [ 58.485190][ T63] dump_stack_lvl+0x16c/0x1f0 [ 58.485216][ T63] sysfs_warn_dup+0x7f/0xa0 [ 58.485244][ T63] sysfs_create_dir_ns+0x24b/0x2b0 [ 58.485269][ T63] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 58.485293][ T63] ? find_held_lock+0x2b/0x80 [ 58.485321][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 58.485345][ T63] kobject_add_internal+0x2c4/0x9b0 [ 58.485374][ T63] kobject_add+0x16e/0x240 [ 58.485399][ T63] ? __pfx_kobject_add+0x10/0x10 [ 58.485423][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 58.485446][ T63] ? kobject_put+0xab/0x5a0 [ 58.485476][ T63] device_add+0x288/0x1aa0 [ 58.485504][ T63] ? __pfx_dev_set_name+0x10/0x10 [ 58.485532][ T63] ? __pfx_device_add+0x10/0x10 [ 58.485557][ T63] ? mgmt_send_event_skb+0x2fb/0x460 [ 58.485593][ T63] hci_conn_add_sysfs+0x17e/0x230 [ 58.485616][ T63] le_conn_complete_evt+0x1075/0x1d70 [ 58.485643][ T63] ? preempt_count_sub+0xe0/0x160 [ 58.485673][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 58.485701][ T63] ? bt_warn+0xe4/0x120 [ 58.485726][ T63] ? __pfx_bt_warn+0x10/0x10 [ 58.485759][ T63] hci_le_conn_complete_evt+0x23c/0x370 [ 58.485794][ T63] hci_le_meta_evt+0x357/0x5e0 [ 58.485814][ T63] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 58.485847][ T63] hci_event_packet+0x682/0x11c0 [ 58.485876][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 58.485895][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 58.485926][ T63] ? kcov_remote_start+0x3c9/0x6d0 [ 58.485949][ T63] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.485985][ T63] hci_rx_work+0x2c5/0x16b0 [ 58.486009][ T63] ? rcu_is_watching+0x12/0xc0 [ 58.486057][ T63] process_one_work+0x9cf/0x1b70 [ 58.486098][ T63] ? __pfx_process_one_work+0x10/0x10 [ 58.486129][ T63] ? assign_work+0x1a0/0x250 [ 58.486151][ T63] worker_thread+0x6c8/0xf10 [ 58.486185][ T63] ? __pfx_worker_thread+0x10/0x10 [ 58.486207][ T63] kthread+0x3c5/0x780 [ 58.486227][ T63] ? __pfx_kthread+0x10/0x10 [ 58.486247][ T63] ? rcu_is_watching+0x12/0xc0 [ 58.486273][ T63] ? __pfx_kthread+0x10/0x10 [ 58.486293][ T63] ret_from_fork+0x5d7/0x6f0 [ 58.486312][ T63] ? __pfx_kthread+0x10/0x10 [ 58.486331][ T63] ret_from_fork_asm+0x1a/0x30 [ 58.486368][ T63] [ 58.520415][ T63] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 58.548875][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 58.549943][ T63] Bluetooth: hci0: failed to register connection device [ 58.552791][ T6221] netlink: 'syz.0.56': attribute type 21 has an invalid length. [ 58.586014][ T6224] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.58'. [ 58.659750][ T6233] capability: warning: `syz.3.57' uses deprecated v2 capabilities in a way that may be insecure [ 58.798907][ T6247] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 58.806032][ T6247] netlink: 'syz.2.64': attribute type 6 has an invalid length. [ 58.813227][ T6247] netlink: 'syz.2.64': attribute type 6 has an invalid length. [ 58.818243][ T6247] libceph: resolve '4' (ret=-3): failed [ 58.857380][ T6253] hpfs: Bad magic ... probably not HPFS [ 58.898701][ T6258] ======================================================= [ 58.898701][ T6258] WARNING: The mand mount option has been deprecated and [ 58.898701][ T6258] and is ignored by this kernel. Remove the mand [ 58.898701][ T6258] option from the mount to silence this warning. [ 58.898701][ T6258] ======================================================= [ 58.965577][ T6255] cgroup: Invalid name [ 58.991012][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.2.70'. [ 59.030340][ T5975] Bluetooth: hci0: command tx timeout [ 59.036504][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 59.041103][ T6269] netlink: 'syz.2.71': attribute type 21 has an invalid length. [ 59.144406][ T6274] pim6reg: entered allmulticast mode [ 59.145610][ T6273] Zero length message leads to an empty skb [ 59.151253][ T6274] pim6reg: left allmulticast mode [ 59.270315][ T5975] Bluetooth: hci2: command tx timeout [ 59.270482][ T63] Bluetooth: hci1: command tx timeout [ 59.361005][ T63] Bluetooth: hci3: command tx timeout [ 59.405945][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.409001][ T6284] batadv_slave_0: entered promiscuous mode [ 59.825095][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 59.954237][ T5975] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 60.053255][ T6327] hpfs: Bad magic ... probably not HPFS [ 60.428869][ T6346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.549875][ T6354] process 'syz.1.99' launched './file0' with NULL argv: empty string added [ 60.555831][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 60.683438][ T6353] fuse: Bad value for 'fd' [ 60.921287][ T6364] netlink: 68 bytes leftover after parsing attributes in process `syz.3.102'. [ 61.010348][ T5964] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 61.173615][ T5964] usb 5-1: config 0 has no interfaces? [ 61.177916][ T5964] usb 5-1: New USB device found, idVendor=ed40, idProduct=b12a, bcdDevice= 1.42 [ 61.183331][ T5964] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 61.187499][ T5964] usb 5-1: Manufacturer: syz [ 61.218140][ T5964] usb 5-1: config 0 descriptor?? [ 61.256594][ T6381] trusted_key: syz.2.109 sent an empty control message without MSG_MORE. [ 61.296691][ T6383] hpfs: Bad magic ... probably not HPFS [ 61.360915][ T5975] Bluetooth: hci2: command tx timeout [ 61.386921][ T6386] tmpfs: Bad value for 'mpol' [ 61.390931][ T6386] 9pnet_virtio: no channels available for device syz [ 61.423269][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.428278][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.441550][ T5975] Bluetooth: hci3: command tx timeout [ 61.449834][ T6391] netlink: 112 bytes leftover after parsing attributes in process `syz.3.111'. [ 61.457510][ T6049] usb 5-1: USB disconnect, device number 2 [ 61.620932][ T5975] Bluetooth: hci0: Malformed LE Event: 0x1b [ 61.830579][ T63] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 62.178134][ T6401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.282027][ T6401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.287351][ T6405] netlink: 76 bytes leftover after parsing attributes in process `syz.0.115'. [ 62.346422][ T6405] bond0: entered promiscuous mode [ 62.348196][ T6405] bond_slave_0: entered promiscuous mode [ 62.350135][ T6405] bond_slave_1: entered promiscuous mode [ 62.354575][ T6405] bond0: entered allmulticast mode [ 62.356371][ T6405] bond_slave_0: entered allmulticast mode [ 62.358246][ T6405] bond_slave_1: entered allmulticast mode [ 62.374392][ T6401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.465549][ T6401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.473309][ T6419] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.564798][ T6423] hpfs: Bad magic ... probably not HPFS [ 62.624535][ T5975] Bluetooth: hci2: unexpected subevent 0x01 length: 37 > 18 [ 62.626991][ T5975] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 62.629911][ T5975] CPU: 3 UID: 0 PID: 5975 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 62.629925][ T5975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.629933][ T5975] Workqueue: hci2 hci_rx_work [ 62.629948][ T5975] Call Trace: [ 62.629952][ T5975] [ 62.629957][ T5975] dump_stack_lvl+0x16c/0x1f0 [ 62.629973][ T5975] sysfs_warn_dup+0x7f/0xa0 [ 62.629989][ T5975] sysfs_create_dir_ns+0x24b/0x2b0 [ 62.630004][ T5975] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 62.630018][ T5975] ? find_held_lock+0x2b/0x80 [ 62.630036][ T5975] ? do_raw_spin_unlock+0x172/0x230 [ 62.630051][ T5975] kobject_add_internal+0x2c4/0x9b0 [ 62.630067][ T5975] kobject_add+0x16e/0x240 [ 62.630080][ T5975] ? __pfx_kobject_add+0x10/0x10 [ 62.630094][ T5975] ? do_raw_spin_unlock+0x172/0x230 [ 62.630107][ T5975] ? kobject_put+0xab/0x5a0 [ 62.630124][ T5975] device_add+0x288/0x1aa0 [ 62.630139][ T5975] ? __pfx_dev_set_name+0x10/0x10 [ 62.630154][ T5975] ? __pfx_device_add+0x10/0x10 [ 62.630169][ T5975] ? mgmt_send_event_skb+0x2fb/0x460 [ 62.630190][ T5975] hci_conn_add_sysfs+0x17e/0x230 [ 62.630201][ T5975] le_conn_complete_evt+0x1075/0x1d70 [ 62.630230][ T5975] ? preempt_count_sub+0xe0/0x160 [ 62.630248][ T5975] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 62.630264][ T5975] ? bt_warn+0xe4/0x120 [ 62.630278][ T5975] ? __pfx_bt_warn+0x10/0x10 [ 62.630296][ T5975] hci_le_conn_complete_evt+0x23c/0x370 [ 62.630316][ T5975] hci_le_meta_evt+0x357/0x5e0 [ 62.630327][ T5975] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 62.630346][ T5975] hci_event_packet+0x682/0x11c0 [ 62.630365][ T5975] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 62.630376][ T5975] ? __pfx_hci_event_packet+0x10/0x10 [ 62.630394][ T5975] ? kcov_remote_start+0x3c9/0x6d0 [ 62.630406][ T5975] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.630420][ T5975] hci_rx_work+0x2c5/0x16b0 [ 62.630432][ T5975] ? rcu_is_watching+0x12/0xc0 [ 62.630447][ T5975] process_one_work+0x9cf/0x1b70 [ 62.630465][ T5975] ? __pfx_process_one_work+0x10/0x10 [ 62.630481][ T5975] ? assign_work+0x1a0/0x250 [ 62.630493][ T5975] worker_thread+0x6c8/0xf10 [ 62.630509][ T5975] ? __kthread_parkme+0x19e/0x250 [ 62.630525][ T5975] ? __pfx_worker_thread+0x10/0x10 [ 62.630537][ T5975] kthread+0x3c5/0x780 [ 62.630547][ T5975] ? __pfx_kthread+0x10/0x10 [ 62.630559][ T5975] ? rcu_is_watching+0x12/0xc0 [ 62.630572][ T5975] ? __pfx_kthread+0x10/0x10 [ 62.630583][ T5975] ret_from_fork+0x5d7/0x6f0 [ 62.630593][ T5975] ? __pfx_kthread+0x10/0x10 [ 62.630604][ T5975] ret_from_fork_asm+0x1a/0x30 [ 62.630624][ T5975] [ 62.633319][ T74] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.637361][ T5975] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 62.646960][ T74] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.647436][ T5975] Bluetooth: hci2: failed to register connection device [ 62.649710][ T74] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.730633][ T5964] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 62.735752][ T74] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.898958][ T5964] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.903875][ T5964] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 62.908720][ T5964] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 62.914763][ T5964] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.920938][ T5964] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.925070][ T5964] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.932457][ T5964] usb 8-1: config 0 descriptor?? [ 62.940872][ T6419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.972658][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 62.972677][ T40] audit: type=1400 audit(1756219742.892:249): avc: denied { execute } for pid=6434 comm="syz.2.124" path="/34/cpuacct.usage_user" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.986881][ T6437] netlink: 41 bytes leftover after parsing attributes in process `syz.2.124'. [ 62.994702][ T40] audit: type=1400 audit(1756219742.912:250): avc: denied { read } for pid=6434 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.003748][ T40] audit: type=1400 audit(1756219742.912:251): avc: denied { write } for pid=6434 comm="syz.2.124" path="socket:[12315]" dev="sockfs" ino=12315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.368228][ T5964] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 63.384023][ T5964] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 63.428900][ T40] audit: type=1400 audit(1756219743.342:252): avc: denied { bind } for pid=6440 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.431164][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 63.510572][ T5970] Bluetooth: hci3: command 0x206a tx timeout [ 63.627642][ T5964] usb 8-1: USB disconnect, device number 2 [ 63.741776][ T40] audit: type=1400 audit(1756219743.662:253): avc: denied { append } for pid=6454 comm="syz.0.131" name="userio" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.833786][ T40] audit: type=1400 audit(1756219743.752:254): avc: denied { read } for pid=6462 comm="syz.0.134" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.833817][ T40] audit: type=1400 audit(1756219743.752:255): avc: denied { open } for pid=6462 comm="syz.0.134" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.834397][ T40] audit: type=1400 audit(1756219743.752:256): avc: denied { ioctl } for pid=6462 comm="syz.0.134" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.843125][ T6463] binder: 6462:6463 ioctl 89e1 200000000000 returned -22 [ 63.854357][ T40] audit: type=1400 audit(1756219743.752:257): avc: denied { set_context_mgr } for pid=6462 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 63.884104][ T6468] ubi0: attaching mtd0 [ 63.884146][ T6468] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042) [ 63.957501][ T6476] NILFS (sr0): couldn't find nilfs on the device [ 64.220352][ T5964] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.258681][ T40] audit: type=1400 audit(1756219744.172:258): avc: denied { watch } for pid=6489 comm="syz.0.153" path="/50" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.365185][ T5964] usb 7-1: device descriptor read/64, error -71 [ 64.610411][ T5964] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.710448][ T63] Bluetooth: hci2: command tx timeout [ 64.740417][ T5964] usb 7-1: device descriptor read/64, error -71 [ 64.819178][ T6522] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.822750][ T1244] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.860778][ T5964] usb usb7-port1: attempt power cycle [ 65.200435][ T5964] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.231193][ T5964] usb 7-1: device descriptor read/8, error -71 [ 65.239742][ T6524] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 65.241876][ T6524] [U] J"—e:ÀÆ" [ 65.269430][ T6527] netlink: 5856 bytes leftover after parsing attributes in process `syz.3.157'. [ 65.273423][ T6527] openvswitch: netlink: Flow key attr not present in new flow. [ 65.280326][ T6527] binder: 6526:6527 ioctl c0306201 200000000080 returned -14 [ 65.453119][ T6536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6630 sclass=netlink_route_socket pid=6536 comm=syz.0.160 [ 65.493079][ T6540] hpfs: Bad magic ... probably not HPFS [ 65.500365][ T5964] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 65.521051][ T5964] usb 7-1: device descriptor read/8, error -71 [ 65.590507][ T5970] Bluetooth: hci3: command 0x206a tx timeout [ 65.633499][ T5964] usb usb7-port1: unable to enumerate USB device [ 66.054457][ T6545] kvm: kvm [6544]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 66.057985][ T6545] kvm: kvm [6544]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 66.870462][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 66.870618][ T5970] Bluetooth: hci4: command 0x1003 tx timeout [ 66.945939][ T6568] mkiss: ax0: crc mode is auto. [ 67.163200][ T6577] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 67.337547][ T6591] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 67.387688][ T6597] syz.3.181(6597): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 67.406098][ T6597] netlink: 292 bytes leftover after parsing attributes in process `syz.3.181'. [ 67.430793][ T6049] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 67.505183][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 67.516917][ T6616] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.602192][ T6049] usb 6-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 67.606651][ T6049] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 67.612771][ T6049] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 67.615920][ T6049] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.623288][ T6049] usb 6-1: string descriptor 0 read error: -22 [ 67.625628][ T6049] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.628647][ T6049] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.643992][ T6581] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.663331][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.187'. [ 67.743583][ T6632] netlink: 124 bytes leftover after parsing attributes in process `syz.2.189'. [ 67.744290][ T6633] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 67.745115][ T6634] binder: 6631:6634 unknown command 0 [ 67.745133][ T6634] binder: 6631:6634 ioctl c0306201 200000000080 returned -22 [ 67.747318][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 67.850448][ T6049] cdc_ncm 6-1:1.0: bind() failure [ 67.857220][ T6049] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 67.860025][ T6049] cdc_ncm 6-1:1.1: bind() failure [ 67.868885][ T6049] usb 6-1: USB disconnect, device number 2 [ 67.969411][ T6643] hpfs: Bad magic ... probably not HPFS [ 68.031690][ T63] Bluetooth: hci0: unexpected subevent 0x01 length: 37 > 18 [ 68.063286][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.195'. [ 68.066316][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'. [ 68.176384][ T6650] smb3: Unknown parameter 'rdma8' [ 68.300872][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 68.339085][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 68.339099][ T40] audit: type=1400 audit(1756219748.252:301): avc: denied { ioctl } for pid=6654 comm="syz.0.197" path="socket:[12162]" dev="sockfs" ino=12162 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.349352][ T40] audit: type=1400 audit(1756219748.252:302): avc: denied { ioctl } for pid=6654 comm="syz.0.197" path="socket:[13602]" dev="sockfs" ino=13602 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.359536][ T40] audit: type=1400 audit(1756219748.262:303): avc: denied { setattr } for pid=6654 comm="syz.0.197" name="RFCOMM" dev="sockfs" ino=12158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.394507][ T40] audit: type=1400 audit(1756219748.312:304): avc: denied { mount } for pid=6660 comm="syz.2.199" name="/" dev="autofs" ino=12165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 68.402286][ T40] audit: type=1400 audit(1756219748.322:305): avc: denied { lock } for pid=6662 comm="syz.1.200" path="/dev/nbd1" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.403247][ T40] audit: type=1400 audit(1756219748.322:306): avc: denied { create } for pid=6662 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 68.404008][ T6663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.200'. [ 68.406106][ T40] audit: type=1400 audit(1756219748.322:307): avc: denied { read } for pid=6662 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.434008][ T40] audit: type=1400 audit(1756219748.352:308): avc: denied { create } for pid=6664 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.448808][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 68.470777][ T40] audit: type=1400 audit(1756219748.382:309): avc: denied { create } for pid=6660 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.486211][ T40] audit: type=1400 audit(1756219748.382:310): avc: denied { ioctl } for pid=6660 comm="syz.2.199" path="socket:[12174]" dev="sockfs" ino=12174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.620956][ T61] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 69.631949][ T6702] netlink: 'syz.1.212': attribute type 5 has an invalid length. [ 69.632303][ T6701] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 69.655791][ T6701] bond1: entered promiscuous mode [ 69.658169][ T6701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.685227][ T6701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.688441][ T6701] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 69.694733][ T6701] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 69.701928][ T6701] bond1: (slave ip6gre1): making interface the new active one [ 69.706071][ T6701] ip6gre1: entered promiscuous mode [ 69.710504][ T6701] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 69.740925][ T63] Bluetooth: hci1: Malformed LE Event: 0x1b [ 69.762660][ T6717] hpfs: Bad magic ... probably not HPFS [ 69.822290][ T63] Bluetooth: hci3: unexpected subevent 0x01 length: 37 > 18 [ 70.000404][ T6011] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.080369][ T5970] Bluetooth: hci0: command tx timeout [ 70.160822][ T6011] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 70.165029][ T6011] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 70.169545][ T6011] usb 8-1: config 0 interface 0 has no altsetting 0 [ 70.174866][ T6011] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.178846][ T6011] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 70.182646][ T6011] usb 8-1: Product: syz [ 70.184774][ T6011] usb 8-1: Manufacturer: syz [ 70.186267][ T6736] autofs: Unknown parameter '@' [ 70.187253][ T6011] usb 8-1: SerialNumber: syz [ 70.190072][ T6011] usb 8-1: config 0 descriptor?? [ 70.198277][ T6011] hub 8-1:0.0: bad descriptor, ignoring hub [ 70.204270][ T6011] hub 8-1:0.0: probe with driver hub failed with error -5 [ 70.211720][ T6011] usb 8-1: selecting invalid altsetting 0 [ 70.667097][ T6756] fuse: Invalid rootmode [ 70.667320][ T6757] fuse: Invalid rootmode [ 71.028347][ T6774] autofs4:pid:6774:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 71.032797][ T6774] autofs4:pid:6774:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 71.041477][ T9] usb 8-1: USB disconnect, device number 3 [ 71.065937][ T6777] hpfs: Bad magic ... probably not HPFS [ 71.096908][ T6779] Illegal XDP return value 4294967274 on prog (id 25) dev syz_tun, expect packet loss! [ 71.128788][ T5970] Bluetooth: hci0: unexpected subevent 0x01 length: 37 > 18 [ 71.133849][ T5970] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 71.157428][ T6786] capability: warning: `syz.0.240' uses 32-bit capabilities (legacy support in use) [ 71.198128][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.201517][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.242379][ T6784] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.471120][ T6804] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.472299][ T6807] overlayfs: workdir and upperdir must reside under the same mount [ 71.475336][ T6804] block device autoloading is deprecated and will be removed. [ 71.532453][ T6801] md2: using deprecated bitmap file support [ 71.535349][ T6801] md2: error: failed to get bitmap file [ 71.538200][ T6804] md2: using deprecated bitmap file support [ 71.540983][ T6804] md2: error: failed to get bitmap file [ 71.830651][ T5970] Bluetooth: hci3: command 0x206a tx timeout [ 71.930078][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.981957][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.147638][ T6833] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 72.540992][ T6011] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.568219][ T6845] autofs: Unknown parameter '@' [ 72.703970][ T6011] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 72.707387][ T6011] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.709971][ T6011] usb 8-1: Product: syz [ 72.711512][ T6011] usb 8-1: Manufacturer: syz [ 72.713096][ T6011] usb 8-1: SerialNumber: syz [ 72.929764][ T6011] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 72.934009][ T6011] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 72.937704][ T6011] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 72.943207][ T6011] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 72.949657][ T6011] usb 8-1: USB disconnect, device number 4 [ 73.090941][ T6850] pim6reg1: entered promiscuous mode [ 73.093200][ T6850] pim6reg1: entered allmulticast mode [ 73.222836][ T6855] hpfs: Bad magic ... probably not HPFS [ 73.242090][ T6859] netlink: 'syz.1.262': attribute type 2 has an invalid length. [ 73.279907][ T5970] Bluetooth: hci2: unexpected subevent 0x01 length: 37 > 18 [ 73.282676][ T5970] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 73.375880][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 73.375890][ T40] audit: type=1400 audit(1756219753.292:339): avc: denied { map } for pid=6872 comm="syz.2.268" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 73.385581][ T40] audit: type=1400 audit(1756219753.292:340): avc: denied { map } for pid=6872 comm="syz.2.268" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 73.433710][ T40] audit: type=1400 audit(1756219753.352:341): avc: denied { read write } for pid=6872 comm="syz.2.268" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.441191][ T40] audit: type=1400 audit(1756219753.352:342): avc: denied { read write } for pid=6872 comm="syz.2.268" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.444210][ T6864] block nbd1: shutting down sockets [ 73.448939][ T40] audit: type=1400 audit(1756219753.352:343): avc: denied { open } for pid=6872 comm="syz.2.268" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.507973][ T6877] sctp: [Deprecated]: syz.1.269 (pid 6877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.507973][ T6877] Use struct sctp_sack_info instead [ 73.684875][ T40] audit: type=1400 audit(1756219753.602:344): avc: denied { mount } for pid=6879 comm="syz.1.270" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 73.729740][ T40] audit: type=1400 audit(1756219753.642:345): avc: denied { write } for pid=6879 comm="syz.1.270" path="socket:[13941]" dev="sockfs" ino=13941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.929439][ T40] audit: type=1400 audit(1756219753.842:346): avc: denied { write } for pid=6886 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.964466][ T40] audit: type=1400 audit(1756219753.882:347): avc: denied { execute_no_trans } for pid=6891 comm="syz.3.275" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.994294][ T40] audit: type=1400 audit(1756219753.912:348): avc: denied { read } for pid=6895 comm="syz.3.276" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.100597][ T6906] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 74.378808][ T5970] Bluetooth: hci3: unexpected event 0x04 length: 4 < 10 [ 74.379203][ T6938] __nla_validate_parse: 7 callbacks suppressed [ 74.379212][ T6938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.290'. [ 74.388167][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 74.460324][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.555394][ T6947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=6947 comm=syz.1.289 [ 74.560714][ T6947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6947 comm=syz.1.289 [ 74.630874][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 74.636786][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 74.641623][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 74.646223][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.650749][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.656640][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.660577][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.873507][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 74.875670][ T9] usbtmc 5-1:16.0: can't read capabilities [ 75.030421][ T1331] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 75.079512][ T2301] usb 5-1: USB disconnect, device number 3 [ 75.184090][ T1331] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 75.188281][ T1331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.191014][ T1331] usb 7-1: Product: syz [ 75.192584][ T1331] usb 7-1: Manufacturer: syz [ 75.194086][ T1331] usb 7-1: SerialNumber: syz [ 75.199695][ T1331] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 75.227508][ T24] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.240836][ T6962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.635085][ T2301] usb 7-1: USB disconnect, device number 6 [ 75.668849][ T6978] netlink: 'syz.3.303': attribute type 7 has an invalid length. [ 75.675846][ T6978] netlink: 'syz.3.303': attribute type 8 has an invalid length. [ 75.681848][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 75.958026][ T6990] syz.3.306 uses obsolete (PF_INET,SOCK_PACKET) [ 76.310477][ T24] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 76.313347][ T24] ath9k_htc: Failed to initialize the device [ 76.316108][ T2301] usb 7-1: ath9k_htc: USB layer deinitialized [ 76.339830][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'. [ 76.416098][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 76.420031][ T7008] netlink: 264 bytes leftover after parsing attributes in process `syz.2.315'. [ 76.424144][ T7008] netlink: 56 bytes leftover after parsing attributes in process `syz.2.315'. [ 76.524618][ T7023] dvmrp1: entered allmulticast mode [ 76.540670][ T7025] binder: BINDER_SET_CONTEXT_MGR already set [ 76.543772][ T7025] binder: 7024:7025 ioctl 4018620d 200000000100 returned -16 [ 76.557019][ T7023] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.594041][ T7028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.606589][ T7030] tmpfs: Unknown parameter '_pol' [ 76.644554][ T24] IPVS: starting estimator thread 0... [ 76.648006][ T7035] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 76.684578][ T7035] 9pnet: Could not find request transport: fW¥ÅV[>NT0x0000000000000005 [ 76.693027][ T7041] hpfs: Bad magic ... probably not HPFS [ 76.730366][ T7037] IPVS: using max 41 ests per chain, 98400 per kthread [ 76.753380][ T5970] Bluetooth: hci2: unexpected subevent 0x01 length: 37 > 18 [ 76.756314][ T5970] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 76.838043][ T7066] input: syz0 as /devices/virtual/input/input7 [ 77.010573][ T2301] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 77.037141][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 77.073382][ T7089] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.343'. [ 77.173336][ T2301] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.177637][ T2301] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.183848][ T2301] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.188067][ T2301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.403539][ T2301] usb 6-1: usb_control_msg returned -32 [ 77.405943][ T2301] usbtmc 6-1:16.0: can't read capabilities [ 77.523292][ T7108] ptrace attach of "/syz-executor exec"[7111] was attempted by "/syz-executor exec"[7108] [ 77.764075][ T6011] usb 6-1: USB disconnect, device number 3 [ 77.871929][ T7134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.357'. [ 77.957748][ T7144] block nbd1: Attempted send on invalid socket [ 77.960000][ T7144] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 77.966223][ T7144] SQUASHFS error: Failed to read block 0x0: -5 [ 77.969056][ T7144] unable to read squashfs_super_block [ 77.985548][ T7147] dlm: non-version read from control device 50 [ 78.122260][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.128403][ T7158] netlink: 'syz.2.367': attribute type 20 has an invalid length. [ 78.150560][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.154195][ T7158] netlink: 'syz.2.367': attribute type 20 has an invalid length. [ 78.158300][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.162925][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.165746][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.505123][ T7196] atomic_op ffff888056c20198 conn xmit_atomic 0000000000000000 [ 78.512774][ T7193] sp0: Synchronizing with TNC [ 78.695938][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 78.695953][ T40] audit: type=1400 audit(1756219758.612:408): avc: denied { ioctl } for pid=7208 comm="syz.3.387" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 78.747653][ T40] audit: type=1400 audit(1756219758.662:409): avc: denied { create } for pid=7208 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 78.758727][ T40] audit: type=1400 audit(1756219758.662:410): avc: denied { getopt } for pid=7208 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.884518][ T7228] tipc: Can't bind to reserved service type 2 [ 78.903921][ T7236] hpfs: Bad magic ... probably not HPFS [ 78.966112][ T63] Bluetooth: hci1: unexpected subevent 0x01 length: 37 > 18 [ 78.969182][ T7243] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 78.969671][ T63] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 78.974246][ T7243] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 78.976752][ T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 78.976780][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.976793][ T63] Workqueue: hci1 hci_rx_work [ 78.976896][ T63] Call Trace: [ 78.976905][ T63] [ 78.976913][ T63] dump_stack_lvl+0x16c/0x1f0 [ 78.976939][ T63] sysfs_warn_dup+0x7f/0xa0 [ 78.976977][ T63] sysfs_create_dir_ns+0x24b/0x2b0 [ 78.977001][ T63] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 78.977023][ T63] ? find_held_lock+0x2b/0x80 [ 78.977048][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 78.977073][ T63] kobject_add_internal+0x2c4/0x9b0 [ 78.977098][ T63] kobject_add+0x16e/0x240 [ 78.977121][ T63] ? __pfx_kobject_add+0x10/0x10 [ 78.977144][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 78.977166][ T63] ? kobject_put+0xab/0x5a0 [ 78.977194][ T63] device_add+0x288/0x1aa0 [ 78.977244][ T63] ? __pfx_dev_set_name+0x10/0x10 [ 78.977274][ T63] ? __pfx_device_add+0x10/0x10 [ 78.977303][ T63] ? mgmt_send_event_skb+0x2fb/0x460 [ 78.977344][ T63] hci_conn_add_sysfs+0x17e/0x230 [ 78.977367][ T63] le_conn_complete_evt+0x1075/0x1d70 [ 78.977396][ T63] ? preempt_count_sub+0xe0/0x160 [ 78.977426][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 78.977453][ T63] ? bt_warn+0xe4/0x120 [ 78.977474][ T63] ? __pfx_bt_warn+0x10/0x10 [ 78.977507][ T63] hci_le_conn_complete_evt+0x23c/0x370 [ 78.977536][ T63] hci_le_meta_evt+0x357/0x5e0 [ 78.977556][ T63] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 78.977596][ T63] hci_event_packet+0x682/0x11c0 [ 78.977631][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 78.977652][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 78.977683][ T63] ? kcov_remote_start+0x3c9/0x6d0 [ 78.977706][ T63] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.977746][ T63] hci_rx_work+0x2c5/0x16b0 [ 78.977770][ T63] ? rcu_is_watching+0x12/0xc0 [ 78.977797][ T63] process_one_work+0x9cf/0x1b70 [ 78.977828][ T63] ? __pfx_process_one_work+0x10/0x10 [ 78.977856][ T63] ? assign_work+0x1a0/0x250 [ 78.977879][ T63] worker_thread+0x6c8/0xf10 [ 78.977913][ T63] ? __pfx_worker_thread+0x10/0x10 [ 78.977934][ T63] kthread+0x3c5/0x780 [ 78.977955][ T63] ? __pfx_kthread+0x10/0x10 [ 78.977976][ T63] ? rcu_is_watching+0x12/0xc0 [ 78.977999][ T63] ? __pfx_kthread+0x10/0x10 [ 78.978020][ T63] ret_from_fork+0x5d7/0x6f0 [ 78.978039][ T63] ? __pfx_kthread+0x10/0x10 [ 78.978058][ T63] ret_from_fork_asm+0x1a/0x30 [ 78.978096][ T63] [ 78.978145][ T63] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 78.979519][ T7243] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 78.983402][ T63] Bluetooth: hci1: failed to register connection device [ 78.997476][ T7243] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 79.089187][ T7254] Invalid logical block size (2) [ 79.120889][ T7256] binder: 7255:7256 unknown command 0 [ 79.122987][ T7256] binder: 7255:7256 ioctl c0306201 200000000080 returned -22 [ 79.127528][ T7256] binder: 7255:7256 ioctl c0306201 2000000001c0 returned -14 [ 79.345230][ T63] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 79.404735][ T7280] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 79.415944][ T7283] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 79.461091][ T7283] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 79.519598][ T63] Bluetooth: hci3: unexpected cc 0x0c7b length: 1 < 5 [ 79.522646][ T63] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 79.525908][ T63] Bluetooth: hci3: unexpected cc 0x0c7b length: 1 < 5 [ 79.529160][ T63] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 79.640694][ T7303] netlink: 'syz.2.414': attribute type 9 has an invalid length. [ 79.643333][ T7303] __nla_validate_parse: 6 callbacks suppressed [ 79.643345][ T7303] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.414'. [ 79.650162][ T7303] hpfs: Bad magic ... probably not HPFS [ 79.654398][ T7304] hpfs: Bad magic ... probably not HPFS [ 79.682251][ T40] audit: type=1400 audit(1756219759.602:411): avc: denied { remount } for pid=7307 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.728258][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 79.772486][ T40] audit: type=1400 audit(1756219759.692:412): avc: denied { create } for pid=7314 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 79.772577][ T7316] tmpfs: Invalid uid '0x00000000ffffffff' [ 79.781618][ T40] audit: type=1400 audit(1756219759.692:413): avc: denied { getopt } for pid=7314 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 79.814549][ T7321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=7321 comm=syz.0.420 [ 79.821296][ T40] audit: type=1400 audit(1756219759.742:414): avc: denied { listen } for pid=7320 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 79.829279][ T40] audit: type=1400 audit(1756219759.742:415): avc: denied { read append } for pid=7315 comm="syz.1.418" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.840157][ T40] audit: type=1400 audit(1756219759.742:416): avc: denied { open } for pid=7315 comm="syz.1.418" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.886643][ T7324] netlink: zone id is out of range [ 79.888924][ T7324] netlink: zone id is out of range [ 79.891747][ T7324] netlink: zone id is out of range [ 79.893959][ T7324] netlink: zone id is out of range [ 79.897045][ T7324] netlink: zone id is out of range [ 79.899221][ T7324] netlink: zone id is out of range [ 79.901838][ T7324] netlink: zone id is out of range [ 79.905184][ T7324] netlink: zone id is out of range [ 79.907357][ T7324] netlink: zone id is out of range [ 79.949964][ T40] audit: type=1400 audit(1756219759.862:417): avc: denied { write } for pid=7325 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.060645][ T7335] fuse: Bad value for 'fd' [ 80.205296][ T7347] /dev/nullb0: Can't open blockdev [ 80.318131][ T63] Bluetooth: hci3: unexpected subevent 0x01 length: 37 > 18 [ 80.321828][ T63] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 80.429825][ T7319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.433305][ T7319] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.441249][ T7319] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.447391][ T7319] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.452205][ T7319] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.457780][ T7319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.461351][ T7319] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.469198][ T7319] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.479289][ T7319] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.482019][ T7319] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.484136][ T7319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.486086][ T7319] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.489518][ T7319] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.492404][ T7319] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.495091][ T7319] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.498028][ T7319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.499989][ T7319] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.503108][ T7319] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.508801][ T7319] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.718665][ T7360] bond1: entered promiscuous mode [ 80.817390][ T7375] netlink: 76 bytes leftover after parsing attributes in process `syz.0.437'. [ 80.953856][ T7395] input: syz0 as /devices/virtual/input/input8 [ 81.024748][ T7402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.197202][ T7410] UHID_CREATE from different security context by process 320 (syz.3.446), this is not allowed. [ 81.202819][ T7410] overlay: Bad value for 'workdir' [ 81.250396][ T7414] netlink: 'syz.2.448': attribute type 10 has an invalid length. [ 81.270002][ T7414] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.347479][ T7419] netlink: 52 bytes leftover after parsing attributes in process `syz.2.450'. [ 81.441448][ T54] cfg80211: failed to load regulatory.db [ 81.568090][ T7430] /dev/nullb0: Can't open blockdev [ 81.626296][ T63] Bluetooth: hci1: unexpected subevent 0x01 length: 37 > 18 [ 81.743352][ T5970] Bluetooth: hci2: Malformed Event: 0x13 [ 81.751783][ T13] tipc: Subscription rejected, illegal request [ 81.754435][ T7438] netlink: 700 bytes leftover after parsing attributes in process `syz.0.457'. [ 81.809751][ T7439] warning: `syz.0.457' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.006932][ T7424] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.009256][ T7424] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.011474][ T7424] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.014154][ T7424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.016272][ T7424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.063136][ T7442] input: syz0 as /devices/virtual/input/input9 [ 82.065509][ T7442] input: failed to attach handler leds to device input9, error: -6 [ 82.072056][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.460'. [ 82.076687][ T7443] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 82.113426][ T5978] block nbd64: NBD_DISCONNECT [ 82.123146][ T7443] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 82.126864][ T7443] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 82.130199][ T7443] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 82.208802][ T5965] udevd[5965]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 82.356476][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 82.498723][ T7471] netlink: 'syz.0.468': attribute type 16 has an invalid length. [ 82.510747][ T7471] netlink: 'syz.0.468': attribute type 17 has an invalid length. [ 82.556836][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.560607][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.573052][ T7471] bond0: left promiscuous mode [ 82.575209][ T7471] bond_slave_0: left promiscuous mode [ 82.577753][ T7471] bond_slave_1: left promiscuous mode [ 82.580193][ T7471] bond0: left allmulticast mode [ 82.582789][ T7471] bond_slave_0: left allmulticast mode [ 82.585117][ T7471] bond_slave_1: left allmulticast mode [ 82.650667][ T7471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.659704][ T7471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.728773][ T7471] veth3: left promiscuous mode [ 82.732735][ T7471] bond1: left promiscuous mode [ 82.734834][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.744926][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.749507][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.754029][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.793521][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 82.833596][ T63] Bluetooth: hci0: unexpected event for opcode 0x0c0d [ 82.843834][ T7483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 82.995413][ T7492] netlink: 'syz.3.475': attribute type 10 has an invalid length. [ 83.004819][ T7492] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 83.016838][ T7498] bpf: Bad value for 'mode' [ 83.208158][ T63] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 83.209920][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.482'. [ 83.437734][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.486'. [ 84.080380][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.081404][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.401858][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 84.401871][ T40] audit: type=1400 audit(1756219764.322:453): avc: denied { map } for pid=7553 comm="syz.2.494" path="/dev/vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 84.414316][ T40] audit: type=1400 audit(1756219764.322:454): avc: denied { execute } for pid=7553 comm="syz.2.494" path="/dev/vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 84.445151][ T40] audit: type=1400 audit(1756219764.362:455): avc: denied { validate_trans } for pid=7557 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.445956][ T7548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.456831][ T7548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.459383][ T7548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.466625][ T7548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.472202][ T7562] tipc: Started in network mode [ 84.473854][ T7562] tipc: Node identity ffecff00000000000000000000000001, cluster identity 4711 [ 84.476780][ T7562] tipc: Enabling of bearer rejected, failed to enable media [ 84.481868][ T7562] netlink: 'syz.2.497': attribute type 2 has an invalid length. [ 84.501915][ T7556] net_ratelimit: 3 callbacks suppressed [ 84.501927][ T7556] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 84.547048][ T40] audit: type=1400 audit(1756219764.462:456): avc: denied { mount } for pid=7566 comm="syz.1.501" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 84.570305][ T7573] binder: 7572:7573 ioctl 890c 200000000280 returned -22 [ 84.602900][ T7576] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.606138][ T7576] qnx4: unable to read the superblock [ 84.606356][ T40] audit: type=1400 audit(1756219764.522:457): avc: denied { name_bind 0x1000000 } for pid=7575 comm="syz.2.505" path="socket:[19248]" dev="sockfs" ino=19248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 84.645330][ T7575] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 84.659027][ T7583] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 84.684157][ T40] audit: type=1400 audit(1756219764.602:458): avc: denied { mount } for pid=7584 comm="syz.2.508" name="/" dev="hugetlbfs" ino=19263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 84.687140][ T7585] fuse: Bad value for 'user_id' [ 84.696131][ T7585] fuse: Bad value for 'user_id' [ 84.704825][ T40] audit: type=1400 audit(1756219764.622:459): avc: denied { mounton } for pid=7584 comm="syz.2.508" path="/140/file0" dev="hugetlbfs" ino=19263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 84.733218][ T40] audit: type=1400 audit(1756219764.652:460): avc: denied { unmount } for pid=5976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 84.795561][ T7587] netlink: 'syz.1.509': attribute type 10 has an invalid length. [ 84.798722][ T7587] __nla_validate_parse: 3 callbacks suppressed [ 84.798732][ T7587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.509'. [ 84.804873][ T7587] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 84.813817][ T7601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.926272][ T7609] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.937805][ T7609] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 84.940674][ T7609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.513'. [ 84.943964][ T7609] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 84.953933][ T7610] overlay: filesystem on ./bus not supported as upperdir [ 84.954068][ T7611] overlayfs: missing 'lowerdir' [ 84.955024][ T40] audit: type=1400 audit(1756219764.872:461): avc: denied { mounton } for pid=7608 comm="syz.1.513" path="/newroot/105/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 84.980094][ T40] audit: type=1400 audit(1756219764.892:462): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.035791][ T7616] netlink: 'syz.1.515': attribute type 30 has an invalid length. [ 85.042293][ T7616] Bluetooth: MGMT ver 1.23 [ 85.517511][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.518'. [ 85.522882][ T5964] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 85.647565][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 85.653843][ T7631] IPv6: sit1: Disabled Multicast RS [ 85.656217][ T7631] sit1: entered allmulticast mode [ 85.680381][ T5964] usb 6-1: Using ep0 maxpacket: 16 [ 85.684235][ T5964] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 85.686125][ T5975] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 85.687956][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.696959][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.702432][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.707440][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.712445][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.717457][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.722124][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.726410][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.731212][ T7635] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 85.731581][ T5964] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 85.738318][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 85.740924][ T5964] usb 6-1: SerialNumber: syz [ 85.744493][ T5964] usb 6-1: config 0 descriptor?? [ 85.751760][ T5964] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 85.759735][ T7635] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 85.786606][ T7635] veth3: entered promiscuous mode [ 85.790803][ T7635] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 85.901107][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 85.913878][ T7653] geneve2: entered promiscuous mode [ 85.916145][ T7653] geneve2: entered allmulticast mode [ 85.918762][ T46] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.923270][ T46] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.926259][ T46] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.931597][ T46] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.978167][ T7651] netlink: 48 bytes leftover after parsing attributes in process `syz.2.528'. [ 85.979928][ T7624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.986150][ T7624] input: syz1 as /devices/virtual/input/input11 [ 85.990856][ T7651] MINIX-fs: blocksize too small for device [ 86.006664][ T5362] bcm5974 6-1:0.0: could not read from device [ 86.017892][ T5362] bcm5974 6-1:0.0: could not read from device [ 86.026039][ T5964] usb 6-1: USB disconnect, device number 4 [ 86.032927][ T5362] bcm5974 6-1:0.0: could not read from device [ 86.070330][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.113482][ T7670] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3663400886 (468915313408 ns) > initial count (101983626112 ns). Using initial count to start timer. [ 86.122569][ T7672] binder: 7671:7672 ioctl c0306201 2000000003c0 returned -14 [ 86.127349][ T7672] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 86.131853][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 86.134929][ T7670] kvm: pic: level sensitive irq not supported [ 86.136277][ T7670] kvm: pic: non byte read [ 86.388260][ T7693] comedi comedi4: bad chanlist[0]=0x00000090 chan=144 range length=2 [ 86.432608][ T7698] ceph: Path missing in source [ 86.470423][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.470477][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.551458][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 86.584855][ T7709] XFS (nullb0): Invalid superblock magic number [ 86.642855][ T7729] netlink: 'syz.1.548': attribute type 21 has an invalid length. [ 86.645535][ T7729] netlink: 'syz.1.548': attribute type 6 has an invalid length. [ 86.648193][ T7729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.548'. [ 86.649379][ T63] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 86.702320][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 86.705492][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.709494][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.713158][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 86.716388][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.724211][ T9] usb 7-1: config 0 descriptor?? [ 86.928871][ T7691] block nbd2: Attempted send on invalid socket [ 86.931171][ T7691] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.934344][ T7691] exFAT-fs (nbd2): unable to read boot sector [ 86.936457][ T7691] exFAT-fs (nbd2): failed to read boot sector [ 86.938355][ T7691] exFAT-fs (nbd2): failed to recognize exfat type [ 87.081269][ T7747] 9p: Unknown uid 00000000004294967295 [ 87.131307][ T7748] overlayfs: failed lookup in lower (newroot/152, name='file1', err=-40): overlapping layers [ 87.235951][ T7753] netlink: 'syz.3.556': attribute type 12 has an invalid length. [ 87.238856][ T7753] netlink: 'syz.3.556': attribute type 29 has an invalid length. [ 87.241741][ T7753] netlink: 148 bytes leftover after parsing attributes in process `syz.3.556'. [ 87.244730][ T7753] netlink: 51 bytes leftover after parsing attributes in process `syz.3.556'. [ 87.483949][ T7770] netlink: 'syz.0.561': attribute type 2 has an invalid length. [ 87.760613][ T6031] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.932172][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.937165][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.940941][ T6031] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.945065][ T6031] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.948342][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.953107][ T6031] usb 5-1: config 0 descriptor?? [ 88.020491][ T7793] nbd0: detected capacity change from 0 to 63 [ 88.038515][ T63] block nbd0: Receive control failed (result -104) [ 88.150738][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.249610][ T7808] geneve3: entered allmulticast mode [ 88.363204][ T6031] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 88.365640][ T6031] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 88.368060][ T6031] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 88.370846][ T6031] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 88.373256][ T6031] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 88.375609][ T6031] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 88.378221][ T6031] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 88.380641][ T6031] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 88.382954][ T6031] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 88.385400][ T6031] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 88.390611][ T53] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 88.392063][ T6031] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 88.550752][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.550774][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.565201][ T7769] input: syz0 as /devices/virtual/input/input12 [ 88.570318][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 88.581208][ T53] usb 6-1: config 3 has an invalid interface number: 198 but max is 0 [ 88.585052][ T53] usb 6-1: config 3 has no interface number 0 [ 88.589847][ T53] usb 6-1: config 3 interface 198 has no altsetting 0 [ 88.596344][ T53] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=3c.e7 [ 88.602036][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.605748][ T53] usb 6-1: Product: syz [ 88.607619][ T53] usb 6-1: Manufacturer: syz [ 88.609521][ T53] usb 6-1: SerialNumber: syz [ 88.689556][ T5975] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 88.819554][ T53] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 88.824379][ T53] gspca_sonixj: reg_w1 err -71 [ 88.826084][ T53] sonixj 6-1:3.198: probe with driver sonixj failed with error -71 [ 88.831869][ T53] usb 6-1: USB disconnect, device number 5 [ 89.110973][ T6031] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 89.262930][ T6031] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.266461][ T6031] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 89.269483][ T6031] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 89.272613][ T6031] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.276962][ T6031] usb 8-1: config 0 descriptor?? [ 89.280911][ T6031] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 89.283280][ T6031] dvb-usb: bulk message failed: -22 (3/0) [ 89.290668][ T6031] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 89.293859][ T6031] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 89.296302][ T6031] usb 8-1: media controller created [ 89.300153][ T6031] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.307516][ T6031] dvb-usb: bulk message failed: -22 (6/0) [ 89.310010][ T6031] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 89.315974][ T6031] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input13 [ 89.324488][ T6031] dvb-usb: schedule remote query interval to 150 msecs. [ 89.326922][ T6031] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 89.333781][ T53] usb 7-1: USB disconnect, device number 7 [ 89.481198][ T7837] IPVS: set_ctl: invalid protocol: 60 172.20.20.66:20001 [ 89.487548][ T6031] usb 8-1: USB disconnect, device number 5 [ 89.503608][ T6031] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 89.683556][ T7863] validate_nla: 3 callbacks suppressed [ 89.683569][ T7863] netlink: 'syz.1.593': attribute type 10 has an invalid length. [ 89.698799][ T7863] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.703666][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.810892][ T53] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 90.193160][ T7874] bridge2: entered promiscuous mode [ 90.230346][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.252234][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 90.252247][ T40] audit: type=1326 audit(1756219770.172:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.1.597" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb07498ebe9 code=0x0 [ 90.630436][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.630522][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.754091][ T7886] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 91.135107][ T7893] __nla_validate_parse: 5 callbacks suppressed [ 91.135118][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.603'. [ 91.145320][ T7894] pimreg: entered allmulticast mode [ 91.505120][ T7903] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 91.861887][ T40] audit: type=1400 audit(1756219771.782:483): avc: denied { read } for pid=7915 comm="syz.1.611" dev="sockfs" ino=21037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.863953][ T7917] vlan0: entered promiscuous mode [ 91.875718][ T7917] team0: Port device vlan0 added [ 92.310450][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.703773][ T40] audit: type=1400 audit(1756219772.622:484): avc: denied { execmem } for pid=7924 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 92.710427][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.710458][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.722538][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 92.830422][ T40] audit: type=1400 audit(1756219772.742:485): avc: denied { execute } for pid=7926 comm="syz.1.614" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 92.887341][ T7931] netlink: 'syz.1.615': attribute type 2 has an invalid length. [ 92.889741][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.615'. [ 92.898148][ T7931] bridge0: entered promiscuous mode [ 92.900112][ T7931] macsec1: entered promiscuous mode [ 92.903711][ T7931] bridge0: port 3(macsec1) entered blocking state [ 92.906188][ T7931] bridge0: port 3(macsec1) entered disabled state [ 92.908649][ T7931] macsec1: entered allmulticast mode [ 92.910879][ T7931] bridge0: entered allmulticast mode [ 92.914388][ T7931] macsec1: left allmulticast mode [ 92.916082][ T7931] bridge0: left allmulticast mode [ 92.919364][ T7931] bridge0: left promiscuous mode [ 93.884993][ T5975] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 93.930900][ T40] audit: type=1400 audit(1756219773.842:486): avc: denied { append } for pid=7940 comm="syz.3.618" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.934969][ T7941] ------------[ cut here ]------------ [ 93.941696][ T7941] WARNING: CPU: 2 PID: 7941 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 93.944969][ T7941] Modules linked in: [ 93.946634][ T7941] CPU: 2 UID: 0 PID: 7941 Comm: syz.3.618 Not tainted syzkaller #0 PREEMPT(full) [ 93.951631][ T7941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.955611][ T7941] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 93.957756][ T7941] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f bd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 2d aa 7e 0e 00 75 0b c6 05 24 aa 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 93.963817][ T7941] RSP: 0018:ffffc9000ed1f7d0 EFLAGS: 00010246 [ 93.965805][ T7941] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 93.968504][ T7941] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 93.971136][ T7941] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 93.973837][ T7941] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 93.976388][ T7941] R13: 1ffff92001da3f0f R14: ffffffff9ae7ba24 R15: 0000000000000016 [ 93.978906][ T7941] FS: 00007fcdba11b6c0(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 93.981828][ T7941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.983973][ T7941] CR2: 000000110c2a34f5 CR3: 0000000033214000 CR4: 0000000000352ef0 [ 93.986734][ T7941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.989477][ T7941] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 93.992463][ T7941] Call Trace: [ 93.993586][ T7941] [ 93.994604][ T7941] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 93.996599][ T7941] ? is_bpf_text_address+0x94/0x1a0 [ 93.998279][ T7941] ? kernel_text_address+0x8d/0x100 [ 93.999967][ T7941] ? __kernel_text_address+0xd/0x40 [ 94.001705][ T7941] ? unwind_get_return_address+0x59/0xa0 [ 94.003548][ T7941] ? arch_stack_walk+0xa6/0x100 [ 94.005151][ T7941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 94.007227][ T7941] ? stack_depot_save_flags+0x29/0x9c0 [ 94.009015][ T7941] ? __lock_acquire+0xb97/0x1ce0 [ 94.010735][ T7941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.012677][ T7941] ? policy_nodemask+0xea/0x4e0 [ 94.014306][ T7941] alloc_pages_mpol+0x1fb/0x550 [ 94.015911][ T7941] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 94.017662][ T7941] ? drm_syncobj_array_find+0x35/0x3c0 [ 94.019438][ T7941] ___kmalloc_large_node+0xed/0x160 [ 94.021213][ T7941] ? drm_syncobj_array_find+0x35/0x3c0 [ 94.023002][ T7941] __kmalloc_large_node_noprof+0x1c/0x70 [ 94.024870][ T7941] ? avc_has_extended_perms+0x47c/0x1090 [ 94.026695][ T7941] __kmalloc_noprof.cold+0xc/0x61 [ 94.028565][ T7941] drm_syncobj_array_find+0x35/0x3c0 [ 94.029586][ T40] audit: type=1400 audit(1756219773.942:487): avc: denied { create } for pid=7940 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.030445][ T7941] ? kasan_quarantine_put+0x10a/0x240 [ 94.030463][ T7941] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 94.030484][ T7941] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 94.042624][ T7941] ? drm_dev_exit+0x41/0x60 [ 94.044129][ T7941] drm_ioctl_kernel+0x1f4/0x3e0 [ 94.045720][ T7941] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 94.047866][ T7941] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 94.049536][ T7941] drm_ioctl+0x5c9/0xc30 [ 94.050921][ T7941] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 94.053067][ T7941] ? __pfx_drm_ioctl+0x10/0x10 [ 94.054657][ T7941] ? selinux_file_ioctl+0x180/0x270 [ 94.056348][ T7941] ? selinux_file_ioctl+0xb4/0x270 [ 94.058003][ T7941] ? __pfx_drm_ioctl+0x10/0x10 [ 94.059568][ T7941] __x64_sys_ioctl+0x18b/0x210 [ 94.061179][ T7941] do_syscall_64+0xcd/0x4c0 [ 94.062669][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.064666][ T7941] RIP: 0033:0x7fcdb938ebe9 [ 94.066119][ T7941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.072507][ T7941] RSP: 002b:00007fcdba11b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.075308][ T7941] RAX: ffffffffffffffda RBX: 00007fcdb95b5fa0 RCX: 00007fcdb938ebe9 [ 94.077807][ T7941] RDX: 0000200000000080 RSI: 00000000c01864cd RDI: 0000000000000003 [ 94.080380][ T7941] RBP: 00007fcdb9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 94.082902][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.085399][ T7941] R13: 00007fcdb95b6038 R14: 00007fcdb95b5fa0 R15: 00007ffc6b6042e8 [ 94.087931][ T7941] [ 94.088966][ T7941] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.091234][ T7941] CPU: 2 UID: 0 PID: 7941 Comm: syz.3.618 Not tainted syzkaller #0 PREEMPT(full) [ 94.094077][ T7941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.097431][ T7941] Call Trace: [ 94.098495][ T7941] [ 94.099443][ T7941] dump_stack_lvl+0x3d/0x1f0 [ 94.100899][ T7941] vpanic+0x6e8/0x7a0 [ 94.102169][ T7941] ? __pfx_vpanic+0x10/0x10 [ 94.103648][ T7941] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 94.105562][ T7941] panic+0xca/0xd0 [ 94.106760][ T7941] ? __pfx_panic+0x10/0x10 [ 94.108190][ T7941] check_panic_on_warn+0xab/0xb0 [ 94.109735][ T7941] __warn+0xf6/0x3c0 [ 94.111097][ T7941] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 94.113152][ T7941] report_bug+0x3c3/0x580 [ 94.114595][ T7941] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 94.116503][ T7941] handle_bug+0x184/0x210 [ 94.117879][ T7941] exc_invalid_op+0x17/0x50 [ 94.119339][ T7941] asm_exc_invalid_op+0x1a/0x20 [ 94.120878][ T7941] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 94.122955][ T7941] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f bd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 2d aa 7e 0e 00 75 0b c6 05 24 aa 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 94.128941][ T7941] RSP: 0018:ffffc9000ed1f7d0 EFLAGS: 00010246 [ 94.130854][ T7941] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 94.133407][ T7941] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 94.135887][ T7941] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 94.138348][ T7941] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 94.140826][ T7941] R13: 1ffff92001da3f0f R14: ffffffff9ae7ba24 R15: 0000000000000016 [ 94.143370][ T7941] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 94.145405][ T7941] ? is_bpf_text_address+0x94/0x1a0 [ 94.147102][ T7941] ? kernel_text_address+0x8d/0x100 [ 94.148813][ T7941] ? __kernel_text_address+0xd/0x40 [ 94.150465][ T7941] ? unwind_get_return_address+0x59/0xa0 [ 94.152221][ T7941] ? arch_stack_walk+0xa6/0x100 [ 94.153843][ T7941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 94.155854][ T7941] ? stack_depot_save_flags+0x29/0x9c0 [ 94.157565][ T7941] ? __lock_acquire+0xb97/0x1ce0 [ 94.159136][ T7941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.161006][ T7941] ? policy_nodemask+0xea/0x4e0 [ 94.162543][ T7941] alloc_pages_mpol+0x1fb/0x550 [ 94.164079][ T7941] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 94.165764][ T7941] ? drm_syncobj_array_find+0x35/0x3c0 [ 94.167486][ T7941] ___kmalloc_large_node+0xed/0x160 [ 94.169108][ T7941] ? drm_syncobj_array_find+0x35/0x3c0 [ 94.170789][ T7941] __kmalloc_large_node_noprof+0x1c/0x70 [ 94.172492][ T7941] ? avc_has_extended_perms+0x47c/0x1090 [ 94.174322][ T7941] __kmalloc_noprof.cold+0xc/0x61 [ 94.175929][ T7941] drm_syncobj_array_find+0x35/0x3c0 [ 94.177590][ T7941] ? kasan_quarantine_put+0x10a/0x240 [ 94.179283][ T7941] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 94.181293][ T7941] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 94.183416][ T7941] ? drm_dev_exit+0x41/0x60 [ 94.184888][ T7941] drm_ioctl_kernel+0x1f4/0x3e0 [ 94.186430][ T7941] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 94.188551][ T7941] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 94.190210][ T7941] drm_ioctl+0x5c9/0xc30 [ 94.191617][ T7941] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 94.193818][ T7941] ? __pfx_drm_ioctl+0x10/0x10 [ 94.195381][ T7941] ? selinux_file_ioctl+0x180/0x270 [ 94.197019][ T7941] ? selinux_file_ioctl+0xb4/0x270 [ 94.198631][ T7941] ? __pfx_drm_ioctl+0x10/0x10 [ 94.200166][ T7941] __x64_sys_ioctl+0x18b/0x210 [ 94.201781][ T7941] do_syscall_64+0xcd/0x4c0 [ 94.203372][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.205704][ T7941] RIP: 0033:0x7fcdb938ebe9 [ 94.207614][ T7941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.214695][ T7941] RSP: 002b:00007fcdba11b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.217298][ T7941] RAX: ffffffffffffffda RBX: 00007fcdb95b5fa0 RCX: 00007fcdb938ebe9 [ 94.219759][ T7941] RDX: 0000200000000080 RSI: 00000000c01864cd RDI: 0000000000000003 [ 94.222199][ T7941] RBP: 00007fcdb9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 94.224685][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.227135][ T7941] R13: 00007fcdb95b6038 R14: 00007fcdb95b5fa0 R15: 00007ffc6b6042e8 [ 94.229622][ T7941] [ 94.231445][ T7941] Kernel Offset: disabled [ 94.232812][ T7941] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:45:18 Registers: info registers vcpu 0 CPU#0 RAX=00000000000f5487 RBX=0000000000000000 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50218 RDI=ffffffff8c162900 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb075712f98 CR3=00000000508e7000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc1a47430 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc1a475b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc1a475b6 00007fffc1a475bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb074a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb074a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb074a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb074a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb074a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb074a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000009c905 RBX=0000000000000001 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50218 RDI=ffffffff8c162900 RBP=ffffed1003bdc488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801dee2440 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31a23ffc CR3=0000000025d22000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555563ecf484 0000555563ecf020 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555563ed76a9 0000555563ed7510 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 86030002004e8403 0002004e82030c02 004e800300040004 94840800000401c7 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000080449c8006c 6f72746e6f632d6d 6c642f7665642f01 ffffffffffffffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dd08000300100007 8004040207b40073 666d617201ffffff fffffffffff30807 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030280041881c3 939a080001000000 0806060117940008 0002a8037fffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 92fe080001000000 0806060117820008 00080364b4861000 0410000d80040600 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffa92080002 a0030fffffffffff ff04029003018004 02800300041880c3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030280041881c3 939a080001000000 0806060117940008 0002a8037fffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104808080801000 0780040100000608 0606015da8028008 0007e00300100007 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc9000ed1f140 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000007a R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fcdba11b6c0 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2a34f5 CR3=0000000033214000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6b6047f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6b6047f6 00007ffc6b6047fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdb9412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdb9412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdb9412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdb9412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdb9412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdb9412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000008c7c1 RBX=0000000000000003 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50218 RDI=ffffffff8c162900 RBP=ffffed1003bdf000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801def8000 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcdb93729a0 CR3=0000000029d92000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055791de11600 000055791de11600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed944aad0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d2d2d2d205d3134 393754205b5d3936 393433392e333920 20205b203a6c656e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6563697665645f69 72643a725f746365 6a626f3a755f6d65 747379733d747865 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e6f637420745f 6d64617379733a72 5f6d64617379733a 746f6f723d747865 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e6f6373203933 363d6f6e69202273 66706d7476656422 3d76656420223264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726163223d656d61 6e20223831362e33 2e7a7973223d6d6d 6f6320303439373d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000