last executing test programs: 47.31989525s ago: executing program 2 (id=36): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) getcwd(&(0x7f0000000200)=""/197, 0xc5) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @rand_addr=0x64010100}]}, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002b80)=ANY=[@ANYRESOCT=r1, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="000000020000008d008000000000edffffffffff3f0000"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000009000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000040008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYBLOB="7f3c9372b4", @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@dev, @dev}, &(0x7f00000000c0)=0xc) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) getcwd(&(0x7f00000025c0)=""/241, 0xf1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0906166d0b09cbd386e129ff8dbcd36ee987d54eadeb822d227394d3e69940b8b5c23485c5b2d616c7405eb628661feb839e613059c7bfce0d8793eaa5a06b0e14a39169fe118c0512c3c0ed711d09bafb020eef36d4028bcec0086b75ca43e0c4d61dc34cf43b95856618406e21f87c9ad9ec1eec2a485899499a3af5d56846d7c321be1a7df22c9a241f7e00027ac0e5bbb8ff72e1bbd5db0b03b1dd72c5aad7c664a1ca5f92e3625144d794b6d83f66e1944ec8251d115b3f342d5a9a545aa1721220862471d4fd6865594fdc9235da6946c599e536f64acac9dbde70ad243202d1", @ANYBLOB="020000004100"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r8}, 0x38) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@overlay={0x80, 0x1, 0x4, 0x0, 0x10000, {0x77359400}, {0x3, 0x2, 0x0, 0x9, 0x4, 0x9, "21e56ada"}, 0x1, 0x3, {}, 0x200, 0x0, r5}) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x10, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) r9 = openat$cgroup_int(r6, &(0x7f0000000080)='io.latency\x00', 0x2, 0x0) r10 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BLKRRPART(r10, 0x125f, 0x0) read$FUSE(r10, &(0x7f0000000580)={0x2020}, 0x2020) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x8) 46.450028499s ago: executing program 2 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20400, 0x2200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xe}]}}}]}, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'veth1_to_batadv\x00', &(0x7f0000000240)=@ethtool_modinfo={0x42, 0x96, 0x3ff}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r2, 0xb, &(0x7f00000000c0)={0xe, 0x1000}, &(0x7f0000000100)) 46.446543449s ago: executing program 2 (id=56): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x7a120]}}], 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x9}, 0x8) 46.360523796s ago: executing program 2 (id=57): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) write$qrtrtun(r0, &(0x7f0000000100)="c2ff4f8d5db2268e", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000037000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000076000000bf91000000000000b7020000000000001400000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x20004010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x2200}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x48}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x20000000) (async) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) r8 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1}}) 46.205432094s ago: executing program 2 (id=61): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f00000000c0)=0x7) r1 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r3, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10010, r0, 0x34c4b000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000480)=0xffff8001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000200)=0x200000000000000a, 0x5, 0x3) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, &(0x7f00000001c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000740)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x4}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200), 0x10c820, &(0x7f0000000300)=ANY=[@ANYBLOB]) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0x1, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x10001}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7fff}, @TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x4}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}]}}]}, 0x78}}, 0x4000010) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[], 0x70}}, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_xen(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x2000004, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d78656e2c76657273696f6e3d3970323030302e4c2c00c2475cf271c33503e9b7df2df2bd71803cc64b7c5782b5a5ff2c433869379cfb564ad23e80a7265f4251d351d51012c8964570dfb206d2d4bd7af869b1a6d797b4e0e1ed3d6632b32027ac9462c8256977403df98ceda302a5ff5402cb4d9acd39c388d98c42c0d4798eae94ed11c0a4a57f81dc42c8fd3af7239151a887613b350b01e166f0a0"]) 2.373246831s ago: executing program 0 (id=357): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) 2.300334187s ago: executing program 0 (id=358): r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 2.190363442s ago: executing program 4 (id=364): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000008c0)=ANY=[@ANYRES32=r0, @ANYBLOB="bd"]) 2.1901135s ago: executing program 0 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_submit(0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x1de, 0x6) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r8, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 2.189874503s ago: executing program 4 (id=367): r0 = syz_open_dev$vbi(&(0x7f0000000540), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000f80)={0x10000, 0x1, 0x4}) 2.139903484s ago: executing program 4 (id=369): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000100)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff110e"]) 1.869651645s ago: executing program 1 (id=374): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x12}}}}}, 0x28}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)='\f', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) connect$llc(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.671746074s ago: executing program 1 (id=377): mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x40000000, 0x1, [0x0], [0x8, 0x7], [0x0, 0x80000002, 0x2, 0x9], [0x80000000005, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000180)={r7}) 1.21997984s ago: executing program 3 (id=384): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x1000000, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.062531623s ago: executing program 3 (id=385): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x40b01) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x0, {0x2, 0x0, 0x7fff, 0xe57}}) 1.000217958s ago: executing program 3 (id=386): r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000380)) 949.864ms ago: executing program 3 (id=387): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 812.740726ms ago: executing program 3 (id=388): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580), 0x1000) 687.888814ms ago: executing program 0 (id=389): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, &(0x7f0000000040)) 687.753306ms ago: executing program 1 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) 687.04757ms ago: executing program 0 (id=391): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x81, 0xff60) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 607.143603ms ago: executing program 0 (id=392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbmon(0x0, 0x0, 0x0) close(0xffffffffffffffff) inotify_init1(0x800) rseq(0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 606.971726ms ago: executing program 1 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000200)=""/179, 0xb3) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 124.43027ms ago: executing program 4 (id=394): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) 50.014726ms ago: executing program 4 (id=395): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x5a, 0x6, 0x0, "3205c5460400000000000000022c1e04f4bf40070700000200"}) 182.442µs ago: executing program 3 (id=396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x30, r1, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x30}}, 0x0) 0s ago: executing program 4 (id=397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0x359f3c1d58ba6241) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 0s ago: executing program 3 (id=398): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7000, 0x4000000}, 0x28) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000400)={0xffffffffffffffff, 0x8, 0xff, 0x2, @vifc_lcl_ifindex=r1, @broadcast}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r6}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000001740)=ANY=[], 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x150, 0x24, 0x10, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x1, 0x371, 0xa, 0x1f, 0x91}}, @TCA_RED_MAX_P={0x8, 0x3, 0x100}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x20004004) kernel console output (not intermixed with test programs): [ 44.112540][ T40] audit: type=1400 audit(1751801721.682:61): avc: denied { siginh } for pid=5903 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:50296' (ED25519) to the list of known hosts. [ 44.918447][ T40] audit: type=1400 audit(1751801722.512:62): avc: denied { name_bind } for pid=5928 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.934803][ T40] audit: type=1400 audit(1751801722.522:63): avc: denied { write } for pid=5929 comm="sh" path="pipe:[1592]" dev="pipefs" ino=1592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.947004][ T40] audit: type=1400 audit(1751801722.532:64): avc: denied { execute } for pid=5929 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.955039][ T40] audit: type=1400 audit(1751801722.542:65): avc: denied { execute_no_trans } for pid=5929 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.950807][ T40] audit: type=1400 audit(1751801724.542:66): avc: denied { mounton } for pid=5929 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.953454][ T5929] cgroup: Unknown subsys name 'net' [ 47.090365][ T5929] cgroup: Unknown subsys name 'cpuset' [ 47.094697][ T5929] cgroup: Unknown subsys name 'rlimit' [ 47.268018][ T5936] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.027622][ T5929] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.960159][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 50.960171][ T40] audit: type=1400 audit(1751801728.552:80): avc: denied { execmem } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.146967][ T40] audit: type=1400 audit(1751801728.732:81): avc: denied { create } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.153019][ T40] audit: type=1400 audit(1751801728.732:82): avc: denied { read write } for pid=5945 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.160929][ T40] audit: type=1400 audit(1751801728.732:83): avc: denied { open } for pid=5945 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.168331][ T40] audit: type=1400 audit(1751801728.752:84): avc: denied { ioctl } for pid=5945 comm="syz-executor" path="socket:[6033]" dev="sockfs" ino=6033 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.205377][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.209737][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.212437][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.214453][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.215242][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.219748][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.220778][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.223220][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.223318][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.223628][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.224538][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.226818][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.228509][ T40] audit: type=1400 audit(1751801728.822:85): avc: denied { read } for pid=5957 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.229113][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.229287][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.229778][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.231487][ T40] audit: type=1400 audit(1751801728.822:86): avc: denied { open } for pid=5957 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.231536][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.231794][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.236475][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.241302][ T40] audit: type=1400 audit(1751801728.822:87): avc: denied { mounton } for pid=5957 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.247173][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.269573][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.410339][ T40] audit: type=1400 audit(1751801729.002:88): avc: denied { module_request } for pid=5945 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.484401][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 51.543655][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 51.553381][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 51.610505][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.613258][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.615630][ T5945] bridge_slave_0: entered allmulticast mode [ 51.618824][ T5945] bridge_slave_0: entered promiscuous mode [ 51.622524][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.624761][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.627253][ T5945] bridge_slave_1: entered allmulticast mode [ 51.629882][ T5945] bridge_slave_1: entered promiscuous mode [ 51.726590][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.729781][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.732803][ T5957] bridge_slave_0: entered allmulticast mode [ 51.736660][ T5957] bridge_slave_0: entered promiscuous mode [ 51.742234][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.769648][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.772654][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.775650][ T5957] bridge_slave_1: entered allmulticast mode [ 51.779807][ T5957] bridge_slave_1: entered promiscuous mode [ 51.785343][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.885494][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.888324][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.890881][ T5952] bridge_slave_0: entered allmulticast mode [ 51.893607][ T5952] bridge_slave_0: entered promiscuous mode [ 51.898855][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.903547][ T5945] team0: Port device team_slave_0 added [ 51.907156][ T5945] team0: Port device team_slave_1 added [ 51.909270][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.911489][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.913713][ T5952] bridge_slave_1: entered allmulticast mode [ 51.916433][ T5952] bridge_slave_1: entered promiscuous mode [ 51.936285][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.953315][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 52.012652][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.014815][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.022925][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.030245][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.065773][ T5957] team0: Port device team_slave_0 added [ 52.069162][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.071949][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.082206][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.089194][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.141057][ T5957] team0: Port device team_slave_1 added [ 52.202248][ T5952] team0: Port device team_slave_0 added [ 52.213266][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.215480][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.224032][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.228735][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.230957][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.239809][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.245469][ T5952] team0: Port device team_slave_1 added [ 52.359244][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.361624][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.364192][ T5947] bridge_slave_0: entered allmulticast mode [ 52.369177][ T5947] bridge_slave_0: entered promiscuous mode [ 52.376021][ T5945] hsr_slave_0: entered promiscuous mode [ 52.379109][ T5945] hsr_slave_1: entered promiscuous mode [ 52.408318][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.410463][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.418291][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.422902][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.425083][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.427664][ T5947] bridge_slave_1: entered allmulticast mode [ 52.430203][ T5947] bridge_slave_1: entered promiscuous mode [ 52.477859][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.480513][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.490297][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.524835][ T5957] hsr_slave_0: entered promiscuous mode [ 52.528134][ T5957] hsr_slave_1: entered promiscuous mode [ 52.531157][ T5957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.533612][ T5957] Cannot create hsr debugfs directory [ 52.558307][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.598585][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.706373][ T5947] team0: Port device team_slave_0 added [ 52.743956][ T5947] team0: Port device team_slave_1 added [ 52.749326][ T5952] hsr_slave_0: entered promiscuous mode [ 52.751522][ T5952] hsr_slave_1: entered promiscuous mode [ 52.753502][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.755770][ T5952] Cannot create hsr debugfs directory [ 52.814112][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.816234][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.823965][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.855696][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.858817][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.869358][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.984074][ T5947] hsr_slave_0: entered promiscuous mode [ 52.986194][ T5947] hsr_slave_1: entered promiscuous mode [ 52.989502][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.991843][ T5947] Cannot create hsr debugfs directory [ 53.111909][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.126727][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.145748][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.151605][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.205969][ T5957] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.210616][ T5957] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.215769][ T5957] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.220007][ T5957] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.258284][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.263015][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.269088][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.279341][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.298113][ T63] Bluetooth: hci3: command tx timeout [ 53.298119][ T5954] Bluetooth: hci1: command tx timeout [ 53.298322][ T5954] Bluetooth: hci2: command tx timeout [ 53.298922][ T5309] Bluetooth: hci0: command tx timeout [ 53.324952][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.329607][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.334071][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.338156][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.385688][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.421560][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.429037][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.433891][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.447439][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.449968][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.457762][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.460076][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.468384][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.480893][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.489598][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.492543][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.510131][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.513130][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.517903][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.520407][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.523888][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.526108][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.574913][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.600634][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.610653][ T40] audit: type=1400 audit(1751801731.202:89): avc: denied { sys_module } for pid=5945 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.620834][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.623067][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.629258][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.632264][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.641207][ T5957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.716528][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.755232][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.767942][ T5945] veth0_vlan: entered promiscuous mode [ 53.774298][ T5945] veth1_vlan: entered promiscuous mode [ 53.786251][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.806480][ T5947] veth0_vlan: entered promiscuous mode [ 53.817578][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.832170][ T5947] veth1_vlan: entered promiscuous mode [ 53.834614][ T5945] veth0_macvtap: entered promiscuous mode [ 53.842222][ T5945] veth1_macvtap: entered promiscuous mode [ 53.857341][ T5957] veth0_vlan: entered promiscuous mode [ 53.867054][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.870843][ T5957] veth1_vlan: entered promiscuous mode [ 53.877607][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.891515][ T5945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.894207][ T5945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.897243][ T5945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.900304][ T5945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.908229][ T5947] veth0_macvtap: entered promiscuous mode [ 53.912736][ T5947] veth1_macvtap: entered promiscuous mode [ 53.926321][ T5952] veth0_vlan: entered promiscuous mode [ 53.934015][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.950060][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.953516][ T5957] veth0_macvtap: entered promiscuous mode [ 53.960651][ T5957] veth1_macvtap: entered promiscuous mode [ 53.964977][ T5952] veth1_vlan: entered promiscuous mode [ 53.976293][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.980860][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.984237][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.987821][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.010296][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.012353][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.013561][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.031424][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.053958][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.054502][ T5957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.057983][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.060129][ T5957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.064614][ T5957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.067354][ T5957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.093351][ T5952] veth0_macvtap: entered promiscuous mode [ 54.099868][ T5952] veth1_macvtap: entered promiscuous mode [ 54.113304][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.115771][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.125826][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.131052][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.137025][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.148989][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.151957][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.167117][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.168073][ T5952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.169823][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.172200][ T5952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.179081][ T5952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.181625][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.216136][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.218659][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.242466][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 54.245238][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 54.248991][ T6039] netlink: 'syz.0.1': attribute type 7 has an invalid length. [ 54.250832][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.253699][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.278555][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.281190][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.295009][ T6041] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 54.342110][ T6049] befs: (nullb0): No write support. Marking filesystem read-only [ 54.347204][ T6049] befs: (nullb0): invalid magic header [ 54.361916][ T6053] Zero length message leads to an empty skb [ 54.363979][ T6053] capability: warning: `syz.1.9' uses deprecated v2 capabilities in a way that may be insecure [ 54.367984][ T6053] __vm_enough_memory: pid: 6053, comm: syz.1.9, bytes: 21200377085952 not enough memory for the allocation [ 54.395250][ T6059] fuse: Bad value for 'fd' [ 54.472241][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 54.484689][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 54.618435][ T6072] /dev/sr0: Can't open blockdev [ 54.628204][ T6079] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 54.635309][ T6079] vlan2: entered allmulticast mode [ 54.637261][ T6079] veth1: entered allmulticast mode [ 54.648616][ T6073] block device autoloading is deprecated and will be removed. [ 54.700600][ T6073] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 54.704543][ T6073] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 54.708546][ T6073] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 54.741988][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 54.779631][ T6092] batadv_slave_1: entered promiscuous mode [ 54.808728][ T6096] sp0: Synchronizing with TNC [ 55.079312][ T6014] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 55.140953][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 55.143577][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 55.237233][ T6014] usb 6-1: Invalid ep0 maxpacket: 32 [ 55.298583][ T6149] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 55.305715][ T6149] ipvlan0: entered allmulticast mode [ 55.309103][ T6149] veth0_vlan: entered allmulticast mode [ 55.367005][ T6014] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 55.376966][ T5954] Bluetooth: hci3: command tx timeout [ 55.377222][ T5961] Bluetooth: hci2: command tx timeout [ 55.379071][ T5954] Bluetooth: hci0: command tx timeout [ 55.380397][ T5961] Bluetooth: hci1: command tx timeout [ 55.421993][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 55.425192][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'. [ 55.429296][ T6170] syz.3.39: attempt to access beyond end of device [ 55.429296][ T6170] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 55.433855][ T6170] EXT4-fs (nbd3): unable to read superblock [ 55.456603][ T6170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6170 comm=syz.3.39 [ 55.537084][ T6014] usb 6-1: Invalid ep0 maxpacket: 32 [ 55.539942][ T6014] usb usb6-port1: attempt power cycle [ 55.657095][ T6150] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.669275][ T6176] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 55.817141][ T6150] usb 5-1: Using ep0 maxpacket: 32 [ 55.820841][ T6150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.824069][ T6150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.827042][ T6150] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 55.831462][ T6150] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 55.834149][ T6150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.838539][ T6150] usb 5-1: config 0 descriptor?? [ 55.843617][ T6150] usbhid 5-1:0.0: can't add hid device: -22 [ 55.845498][ T6150] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 55.877274][ T6014] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 55.897398][ T6014] usb 6-1: Invalid ep0 maxpacket: 32 [ 56.027108][ T6014] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 56.038714][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 56.038728][ T40] audit: type=1400 audit(1751801733.632:222): avc: denied { create } for pid=6194 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.048810][ T6150] usb 5-1: USB disconnect, device number 2 [ 56.051861][ T40] audit: type=1400 audit(1751801733.632:223): avc: denied { write } for pid=6194 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.052694][ T6014] usb 6-1: Invalid ep0 maxpacket: 32 [ 56.052982][ T6014] usb usb6-port1: unable to enumerate USB device [ 56.072184][ T40] audit: type=1400 audit(1751801733.662:224): avc: denied { ioctl } for pid=6194 comm="syz.3.47" path="socket:[9581]" dev="sockfs" ino=9581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.104027][ T6199] overlayfs: conflicting options: nfs_export=on,index=off [ 56.108306][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 56.112265][ T40] audit: type=1400 audit(1751801733.702:225): avc: denied { mount } for pid=6198 comm="syz.3.49" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.118729][ T6199] ======================================================= [ 56.118729][ T6199] WARNING: The mand mount option has been deprecated and [ 56.118729][ T6199] and is ignored by this kernel. Remove the mand [ 56.118729][ T6199] option from the mount to silence this warning. [ 56.118729][ T6199] ======================================================= [ 56.120376][ T40] audit: type=1400 audit(1751801733.712:226): avc: denied { remount } for pid=6198 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.139850][ T40] audit: type=1400 audit(1751801733.722:227): avc: denied { write } for pid=6198 comm="syz.3.49" path="socket:[7910]" dev="sockfs" ino=7910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.147076][ T40] audit: type=1400 audit(1751801733.722:228): avc: denied { read } for pid=6198 comm="syz.3.49" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.153567][ T40] audit: type=1400 audit(1751801733.742:229): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.167994][ T6204] Bluetooth: (null): Invalid header checksum [ 56.178674][ T6204] block device autoloading is deprecated and will be removed. [ 56.293194][ T40] audit: type=1400 audit(1751801733.882:230): avc: denied { create } for pid=6214 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.295053][ T24] IPVS: starting estimator thread 0... [ 56.313286][ T40] audit: type=1400 audit(1751801733.892:231): avc: denied { write } for pid=6214 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.387178][ T6221] IPVS: using max 44 ests per chain, 105600 per kthread [ 56.422649][ T6230] netlink: 'syz.0.58': attribute type 4 has an invalid length. [ 56.432186][ T6230] netlink: 'syz.0.58': attribute type 4 has an invalid length. [ 56.584406][ T6250] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 56.587437][ T6250] netlink: 'syz.2.61': attribute type 21 has an invalid length. [ 56.589856][ T6250] netlink: 'syz.2.61': attribute type 6 has an invalid length. [ 57.386376][ T6320] netlink: 'syz.3.71': attribute type 2 has an invalid length. [ 57.391057][ T6320] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 57.457300][ T5954] Bluetooth: hci0: command tx timeout [ 57.467047][ T5954] Bluetooth: hci1: command tx timeout [ 57.468116][ T63] Bluetooth: hci2: command tx timeout [ 57.468390][ T5961] Bluetooth: hci3: command tx timeout [ 57.604531][ T6328] kvm: emulating exchange as write [ 57.869821][ T6337] comedi comedi0: comedi_test: 236 microvolt, 100000 microsecond waveform attached [ 57.970502][ T6337] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.973112][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 4076 [ 57.976658][ T6337] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.987482][ T6337] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.002524][ T6337] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.004605][ T6337] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.010651][ T6337] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.014298][ T6337] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.016197][ T6337] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.023418][ T6337] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.028739][ T6337] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.030648][ T6337] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.039325][ T6337] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.417794][ T6368] tmpfs: Unknown parameter 'subj_role' [ 58.474325][ T6374] Unsupported ieee802154 address type: 0 [ 58.622249][ T6385] Bluetooth: MGMT ver 1.23 [ 59.489119][ T6420] fuseblk: Bad value for 'group_id' [ 59.490869][ T6420] fuseblk: Bad value for 'group_id' [ 59.539095][ T6422] sctp: [Deprecated]: syz.0.99 (pid 6422) Use of int in maxseg socket option. [ 59.539095][ T6422] Use struct sctp_assoc_value instead [ 59.586848][ T6426] dlm: non-version read from control device 0 [ 60.027017][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.027209][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.031920][ T5954] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.056841][ T6435] process 'syz.1.103' launched './file1' with NULL argv: empty string added [ 60.097329][ T5954] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.254483][ T6443] ufs: You didn't specify the type of your ufs filesystem [ 60.254483][ T6443] [ 60.254483][ T6443] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 60.254483][ T6443] [ 60.254483][ T6443] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 60.269533][ T6443] ufs: ufstype=old is supported read-only [ 60.271916][ T6443] syz.1.106: attempt to access beyond end of device [ 60.271916][ T6443] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 60.300422][ T6443] syz.1.106: attempt to access beyond end of device [ 60.300422][ T6443] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 60.304894][ T6443] gfs2: error -5 reading superblock [ 60.597639][ T6451] __nla_validate_parse: 6 callbacks suppressed [ 60.597651][ T6451] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.109'. [ 60.682018][ T6453] netlink: 'syz.0.110': attribute type 2 has an invalid length. [ 60.795398][ T6463] netlink: 'syz.0.113': attribute type 15 has an invalid length. [ 60.831841][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 60.835393][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 60.839802][ T6467] netlink: 'syz.0.115': attribute type 13 has an invalid length. [ 61.110252][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 61.110264][ T40] audit: type=1400 audit(1751801738.702:322): avc: denied { open } for pid=6489 comm="syz.0.121" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.155113][ T6494] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.122'. [ 61.163178][ T6496] bond0: entered allmulticast mode [ 61.164866][ T6496] bond_slave_0: entered allmulticast mode [ 61.166693][ T6496] bond_slave_1: entered allmulticast mode [ 61.335143][ T5954] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 61.344207][ T40] audit: type=1400 audit(1751801738.932:323): avc: denied { accept } for pid=6503 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.359542][ T6506] netpci0: tun_chr_ioctl cmd 1074025672 [ 61.361357][ T6506] netpci0: ignored: set checksum disabled [ 61.372160][ T40] audit: type=1400 audit(1751801738.962:324): avc: denied { write } for pid=6505 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.378690][ T6506] rdma_op ffff8880383d49f0 conn xmit_rdma 0000000000000000 [ 61.391777][ T6506] bridge0: port 3(vlan2) entered blocking state [ 61.394500][ T6506] bridge0: port 3(vlan2) entered disabled state [ 61.398345][ T6506] vlan2: entered allmulticast mode [ 61.400730][ T6506] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 61.407213][ T6506] vlan2: entered promiscuous mode [ 61.409303][ T6506] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 61.422701][ T40] audit: type=1400 audit(1751801739.012:325): avc: denied { read write } for pid=6507 comm="syz.3.127" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.430441][ T40] audit: type=1400 audit(1751801739.012:326): avc: denied { open } for pid=6507 comm="syz.3.127" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.450365][ T5954] Bluetooth: hci0: unexpected subevent 0x0a length: 91 > 30 [ 61.542273][ T6515] netlink: 100 bytes leftover after parsing attributes in process `syz.1.130'. [ 61.545195][ T6516] netlink: 100 bytes leftover after parsing attributes in process `syz.1.130'. [ 61.655164][ T40] audit: type=1400 audit(1751801739.242:327): avc: denied { ioctl } for pid=6521 comm="syz.1.133" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.798769][ T40] audit: type=1400 audit(1751801739.392:328): avc: denied { setopt } for pid=6527 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.837526][ T40] audit: type=1400 audit(1751801739.432:329): avc: denied { getopt } for pid=6527 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.839219][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 61.850305][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 62.097053][ T5961] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.097523][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.097556][ T5309] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.172622][ T6542] dlm: non-version read from control device 56 [ 62.177781][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.256303][ T40] audit: type=1400 audit(1751801739.842:330): avc: denied { create } for pid=6544 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 62.267985][ T40] audit: type=1400 audit(1751801739.842:331): avc: denied { setopt } for pid=6544 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 62.487217][ T6551] netlink: 'syz.3.143': attribute type 30 has an invalid length. [ 62.897188][ T6032] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.047031][ T6032] usb 5-1: Using ep0 maxpacket: 32 [ 63.050595][ T6032] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 63.053644][ T6032] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 63.058125][ T6032] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 63.062257][ T6032] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 63.067271][ T6032] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.071711][ T6032] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 63.075271][ T6032] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 63.078694][ T6032] usb 5-1: Product: syz [ 63.080315][ T6032] usb 5-1: Manufacturer: syz [ 63.082029][ T6032] usb 5-1: SerialNumber: syz [ 63.087124][ T6032] usb 5-1: config 0 descriptor?? [ 63.092653][ T6032] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 63.100954][ T6032] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 63.346361][ T9] usb 5-1: USB disconnect, device number 3 [ 63.346390][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 63.354410][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 63.530097][ T6572] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 63.543749][ T6572] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 63.546326][ T6572] hsr_slave_0: entered allmulticast mode [ 63.550152][ T6572] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 63.557242][ T6563] netlink: 760 bytes leftover after parsing attributes in process `syz.0.147'. [ 63.561308][ T6563] ldusb: No device or device unplugged -19 [ 63.563509][ T6563] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6563 comm=syz.0.147 [ 63.710206][ T6580] netlink: 92 bytes leftover after parsing attributes in process `syz.3.153'. [ 63.778727][ T6584] raw_sendmsg: syz.3.155 forgot to set AF_INET. Fix it! [ 63.813387][ T6587] trusted_key: syz.3.156 sent an empty control message without MSG_MORE. [ 63.936971][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.937133][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 64.006052][ T6592] program syz.1.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.092119][ T6592] program syz.1.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.096646][ T6592] program syz.1.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.176995][ T5954] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.187167][ T5954] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.188271][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.257077][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.318107][ T6613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2051 sclass=netlink_tcpdiag_socket pid=6613 comm=syz.0.165 [ 64.877990][ T6626] __vm_enough_memory: pid: 6626, comm: syz.0.169, bytes: 21200023277568 not enough memory for the allocation [ 64.911486][ T6626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6626 comm=syz.0.169 [ 65.079060][ T6638] CUSE: unknown device info "" [ 65.081243][ T6638] CUSE: zero length info key specified [ 65.134458][ T6630] capability: warning: `syz.0.171' uses 32-bit capabilities (legacy support in use) [ 65.579235][ T6650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.881693][ T6667] openvswitch: netlink: Missing valid actions attribute. [ 65.884787][ T6667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.071227][ T6674] tipc: Started in network mode [ 66.072889][ T6674] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 66.075181][ T6674] tipc: Enabled bearer , priority 0 [ 66.117102][ T6677] __nla_validate_parse: 2 callbacks suppressed [ 66.117112][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.185'. [ 66.144022][ T6677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6677 comm=syz.3.185 [ 66.147216][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 66.147230][ T40] audit: type=1400 audit(1751801743.742:361): avc: denied { read write } for pid=6680 comm="syz.0.187" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.161053][ T40] audit: type=1400 audit(1751801743.742:362): avc: denied { open } for pid=6680 comm="syz.0.187" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.172362][ T40] audit: type=1400 audit(1751801743.742:363): avc: denied { ioctl } for pid=6680 comm="syz.0.187" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.195489][ T6688] usb usb9: usbfs: process 6688 (syz.1.188) did not claim interface 0 before use [ 66.233776][ T40] audit: type=1400 audit(1751801743.822:364): avc: denied { accept } for pid=6695 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.240335][ T40] audit: type=1400 audit(1751801743.822:365): avc: denied { setattr } for pid=6695 comm="syz.1.191" path="/dev/adsp1" dev="devtmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 66.256184][ T6699] tmpfs: Bad value for 'mpol' [ 66.261396][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.276574][ T40] audit: type=1400 audit(1751801743.862:366): avc: denied { mount } for pid=6700 comm="syz.1.193" name="/" dev="configfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 66.285193][ T6701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.193'. [ 66.288436][ T40] audit: type=1400 audit(1751801743.872:367): avc: denied { search } for pid=6700 comm="syz.1.193" name="/" dev="configfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.290857][ T6701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.193'. [ 66.315146][ T40] audit: type=1400 audit(1751801743.902:368): avc: denied { setopt } for pid=6702 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.321447][ T6703] netlink: 76 bytes leftover after parsing attributes in process `syz.0.194'. [ 66.321642][ T6032] e1000 0000:00:06.0 eth0: Reset adapter [ 66.328603][ T40] audit: type=1400 audit(1751801743.922:369): avc: denied { connect } for pid=6702 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.434350][ T6032] e1000 0000:00:06.0 eth0: Reset adapter [ 67.068117][ T6150] tipc: Node number set to 11578026 [ 68.580468][ T6032] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 71.142591][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.145245][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.831601][ T40] audit: type=1400 audit(1751801750.422:370): avc: denied { execute } for pid=6729 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.838897][ T40] audit: type=1400 audit(1751801750.422:371): avc: denied { execute_no_trans } for pid=6729 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 73.155828][ T1143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.229843][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.359818][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.456445][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.561385][ T1143] bridge_slave_1: left allmulticast mode [ 73.563286][ T1143] bridge_slave_1: left promiscuous mode [ 73.565653][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.571211][ T1143] bridge_slave_0: left allmulticast mode [ 73.573212][ T1143] bridge_slave_0: left promiscuous mode [ 73.575169][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.802652][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.807683][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.812416][ T1143] bond0 (unregistering): Released all slaves [ 74.105993][ T1143] hsr_slave_0: left promiscuous mode [ 74.110739][ T1143] hsr_slave_1: left promiscuous mode [ 74.113593][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.116534][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.119875][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.122558][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.149695][ T1143] veth1_macvtap: left promiscuous mode [ 74.151648][ T1143] veth0_macvtap: left promiscuous mode [ 74.153521][ T1143] veth1_vlan: left promiscuous mode [ 74.155247][ T1143] veth0_vlan: left promiscuous mode [ 74.653568][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 74.708085][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 81.380346][ T59] cfg80211: failed to load regulatory.db [ 83.345502][ T6827] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.350346][ T40] audit: type=1400 audit(1751801760.942:372): avc: denied { setopt } for pid=6825 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.413450][ T40] audit: type=1400 audit(1751801761.002:373): avc: denied { bind } for pid=6825 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.428142][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.432917][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.436510][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.439928][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.442889][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.527699][ T6836] hub 8-0:1.0: USB hub found [ 83.529382][ T6836] hub 8-0:1.0: 1 port detected [ 83.805566][ T6832] chnl_net:caif_netlink_parms(): no params data found [ 83.942939][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.945263][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.953403][ T6832] bridge_slave_0: entered allmulticast mode [ 83.956110][ T6832] bridge_slave_0: entered promiscuous mode [ 83.961873][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.967323][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.971081][ T6832] bridge_slave_1: entered allmulticast mode [ 83.978323][ T6832] bridge_slave_1: entered promiscuous mode [ 83.987467][ T40] audit: type=1400 audit(1751801761.562:374): avc: denied { mount } for pid=6841 comm="syz.3.203" name="/" dev="autofs" ino=11074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 83.994677][ T40] audit: type=1400 audit(1751801761.562:375): avc: denied { mounton } for pid=6841 comm="syz.3.203" path="/64/file1/file0" dev="autofs" ino=11075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 84.161682][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.170355][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.257840][ T6832] team0: Port device team_slave_0 added [ 84.263028][ T6832] team0: Port device team_slave_1 added [ 84.328031][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.330895][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.341184][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.347556][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.350481][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.360198][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.365654][ T40] audit: type=1400 audit(1751801761.952:376): avc: denied { write } for pid=6855 comm="syz.0.206" path="socket:[13515]" dev="sockfs" ino=13515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.413666][ T6832] hsr_slave_0: entered promiscuous mode [ 84.415982][ T6832] hsr_slave_1: entered promiscuous mode [ 84.418225][ T6832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.421209][ T6832] Cannot create hsr debugfs directory [ 84.557670][ T6832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.559361][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 84.566281][ T6832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.571069][ T6832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.575327][ T6832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.602244][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.604583][ T6832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.607519][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.609803][ T6832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.639740][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.651078][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.655614][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.675009][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.689578][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.692644][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.699510][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.702256][ T40] audit: type=1400 audit(1751801762.292:377): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.702697][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.784918][ T6878] netlink: 76 bytes leftover after parsing attributes in process `syz.3.212'. [ 84.928707][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.023585][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 85.092230][ T6832] veth0_vlan: entered promiscuous mode [ 85.101001][ T6832] veth1_vlan: entered promiscuous mode [ 85.123632][ T6832] veth0_macvtap: entered promiscuous mode [ 85.127425][ T6832] veth1_macvtap: entered promiscuous mode [ 85.136272][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.153196][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.160660][ T6832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.163675][ T6832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.168073][ T6832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.171743][ T6832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.173911][ T40] audit: type=1400 audit(1751801762.762:378): avc: denied { read } for pid=6904 comm="syz.3.219" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.181650][ T40] audit: type=1400 audit(1751801762.762:379): avc: denied { open } for pid=6904 comm="syz.3.219" path="/69/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.222952][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.225531][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.243517][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.245977][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.257627][ T40] audit: type=1400 audit(1751801762.852:380): avc: denied { mounton } for pid=6832 comm="syz-executor" path="/syzkaller.tHhimB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 85.418858][ T40] audit: type=1400 audit(1751801763.012:381): avc: denied { read } for pid=6921 comm="syz.4.223" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.458826][ T5954] Bluetooth: hci3: command tx timeout [ 85.495546][ T6032] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 85.517144][ T6013] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.648873][ T6032] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.652052][ T6032] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.656540][ T6032] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 85.662202][ T6032] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.664645][ T6032] usb 8-1: Product: syz [ 85.665984][ T6032] usb 8-1: Manufacturer: syz [ 85.668057][ T6032] usb 8-1: SerialNumber: syz [ 85.683305][ T6032] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 85.687144][ T6032] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 85.697144][ T6013] usb 6-1: Using ep0 maxpacket: 16 [ 85.707938][ T6013] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 85.713720][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.718376][ T6013] usb 6-1: Product: syz [ 85.719711][ T6013] usb 6-1: Manufacturer: syz [ 85.721074][ T6013] usb 6-1: SerialNumber: syz [ 85.725716][ T6013] usb 6-1: config 0 descriptor?? [ 85.732320][ T6013] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 85.883710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.884857][ T6032] usb 8-1: USB disconnect, device number 2 [ 85.986962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.006989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.017566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 86.046978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.066987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 86.087212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 86.157290][ T6013] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 86.197667][ T6013] visor 6-1:0.0: probe with driver visor failed with error -71 [ 86.498484][ T6013] usb 6-1: USB disconnect, device number 7 [ 86.907299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.957018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.059407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.847139][ T5954] Bluetooth: hci3: command tx timeout [ 88.004072][ T6923] kexec: Could not allocate control_code_buffer [ 88.147308][ T6032] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 88.243644][ T6999] tmpfs: Unknown parameter '' [ 88.326232][ T6032] usb 8-1: Using ep0 maxpacket: 16 [ 88.339946][ T6032] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 88.363530][ T6032] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 89.108494][ T6032] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 89.112144][ T6032] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.117686][ T6032] usb 8-1: Product: syz [ 89.119117][ T6032] usb 8-1: Manufacturer: syz [ 89.120571][ T6032] usb 8-1: SerialNumber: syz [ 89.123714][ T6032] usb 8-1: config 0 descriptor?? [ 89.127660][ T6032] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 89.130553][ T6032] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 89.136715][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 89.684349][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 89.684360][ T40] audit: type=1400 audit(1751801767.272:388): avc: denied { setopt } for pid=7053 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.731706][ T6032] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 89.734152][ T6032] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 89.857171][ T5954] Bluetooth: hci3: command tx timeout [ 89.938340][ T6032] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 89.940623][ T6032] em28xx 8-1:0.0: No AC97 audio processor [ 90.028111][ T40] audit: type=1400 audit(1751801767.622:389): avc: denied { listen } for pid=7068 comm="syz.4.258" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.147451][ T40] audit: type=1400 audit(1751801767.732:390): avc: denied { create } for pid=7072 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.165861][ T6150] libceph: connect (1)[c::]:6789 error -101 [ 90.168885][ T6150] libceph: mon0 (1)[c::]:6789 connect error [ 90.198456][ T40] audit: type=1400 audit(1751801767.792:391): avc: denied { bind } for pid=7077 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.206348][ T40] audit: type=1400 audit(1751801767.792:392): avc: denied { getopt } for pid=7077 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.265772][ T40] audit: type=1400 audit(1751801767.852:393): avc: denied { setopt } for pid=7082 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.286294][ T7084] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 90.337618][ T7087] sp0: Synchronizing with TNC [ 90.430611][ T6150] libceph: connect (1)[c::]:6789 error -101 [ 90.437167][ T6150] libceph: mon0 (1)[c::]:6789 connect error [ 90.931864][ T40] audit: type=1400 audit(1751801768.522:394): avc: denied { name_bind } for pid=7108 comm="syz.0.272" src=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 90.950466][ T6150] libceph: connect (1)[c::]:6789 error -101 [ 90.952453][ T6150] libceph: mon0 (1)[c::]:6789 connect error [ 90.976032][ T6150] usb 8-1: USB disconnect, device number 3 [ 90.979686][ T6150] em28xx 8-1:0.0: Disconnecting em28xx [ 90.986047][ T6150] em28xx 8-1:0.0: Freeing device [ 91.094382][ T7074] ceph: No mds server is up or the cluster is laggy [ 91.777023][ T6150] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 91.938567][ T6150] usb 9-1: config index 0 descriptor too short (expected 1051, got 27) [ 91.941783][ T6150] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 91.944273][ T6150] usb 9-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 91.947078][ T5954] Bluetooth: hci3: command tx timeout [ 91.949617][ T6150] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 91.952363][ T6150] usb 9-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.956200][ T6150] usb 9-1: config 0 interface 0 has no altsetting 0 [ 91.960919][ T6150] usb 9-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 91.963784][ T6150] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.966166][ T6150] usb 9-1: Product: syz [ 91.969021][ T6150] usb 9-1: Manufacturer: syz [ 91.970958][ T6150] usb 9-1: SerialNumber: syz [ 91.974184][ T6150] usb 9-1: config 0 descriptor?? [ 92.427092][ T40] audit: type=1400 audit(1751801770.002:395): avc: denied { ioctl } for pid=7124 comm="syz.4.279" path="socket:[14592]" dev="sockfs" ino=14592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.668244][ T40] audit: type=1400 audit(1751801771.262:396): avc: denied { watch } for pid=7196 comm="syz.0.303" path="/99/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 93.821775][ T40] audit: type=1400 audit(1751801771.412:397): avc: denied { override_creds } for pid=7198 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.867056][ T53] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 94.028315][ T53] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 94.030963][ T53] usb 6-1: config 0 has no interface number 0 [ 94.032934][ T53] usb 6-1: config 0 interface 202 has no altsetting 0 [ 94.036809][ T53] usb 6-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice=46.b9 [ 94.039791][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.042295][ T53] usb 6-1: Product: syz [ 94.043665][ T53] usb 6-1: Manufacturer: syz [ 94.045168][ T53] usb 6-1: SerialNumber: syz [ 94.049215][ T53] usb 6-1: config 0 descriptor?? [ 94.056058][ T53] appletouch 6-1:0.202: Could not find int-in endpoint [ 94.059079][ T53] appletouch 6-1:0.202: probe with driver appletouch failed with error -5 [ 94.062155][ T53] usbhid 6-1:0.202: couldn't find an input interrupt endpoint [ 94.256327][ T53] usb 6-1: USB disconnect, device number 8 [ 94.553697][ T6150] keyspan 9-1:0.0: Keyspan 4 port adapter converter detected [ 94.556855][ T6150] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87 [ 94.560818][ T6150] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7 [ 94.567825][ T6150] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81 [ 94.570313][ T6150] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1 [ 94.591341][ T6150] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 94.595610][ T6150] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 82 [ 94.605383][ T6150] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2 [ 94.613616][ T6150] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 94.616794][ T6150] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83 [ 94.620510][ T6150] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 3 [ 94.623514][ T6150] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 94.630599][ T6150] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 84 [ 94.633127][ T6150] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4 [ 94.636233][ T6150] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 94.642031][ T6150] usb 9-1: USB disconnect, device number 2 [ 94.647174][ T6150] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 94.651864][ T6150] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 94.656067][ T6150] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 94.664218][ T6150] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 94.667514][ T6150] keyspan 9-1:0.0: device disconnected [ 94.742359][ T40] audit: type=1400 audit(1751801772.332:398): avc: denied { ioctl } for pid=7213 comm="syz.3.309" path="socket:[15656]" dev="sockfs" ino=15656 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.886971][ T40] audit: type=1400 audit(1751801772.472:399): avc: denied { ioctl } for pid=7210 comm="syz.0.308" path="socket:[14149]" dev="sockfs" ino=14149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.968056][ T6150] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 95.141112][ T6150] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.144383][ T6150] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 95.147437][ T6150] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.153871][ T6150] usb 9-1: config 0 descriptor?? [ 95.159944][ T6150] pwc: Askey VC010 type 2 USB webcam detected. [ 95.562919][ T6150] pwc: recv_control_msg error -32 req 02 val 2b00 [ 95.565496][ T6150] pwc: recv_control_msg error -32 req 02 val 2700 [ 95.568264][ T6150] pwc: recv_control_msg error -32 req 02 val 2c00 [ 95.570793][ T6150] pwc: recv_control_msg error -32 req 04 val 1000 [ 95.573258][ T6150] pwc: recv_control_msg error -32 req 04 val 1300 [ 95.575658][ T6150] pwc: recv_control_msg error -32 req 04 val 1400 [ 95.599371][ T40] audit: type=1400 audit(1751801773.192:400): avc: denied { shutdown } for pid=7232 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.607012][ T59] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 95.626166][ T40] audit: type=1400 audit(1751801773.212:401): avc: denied { bind } for pid=7235 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.632576][ T40] audit: type=1400 audit(1751801773.222:402): avc: denied { setopt } for pid=7235 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.755032][ T7241] use of bytesused == 0 is deprecated and will be removed in the future, [ 95.757969][ T7241] use the actual size instead. [ 95.767104][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 95.771183][ T59] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 95.774820][ T59] usb 6-1: config 0 has no interface number 0 [ 95.779522][ T6150] pwc: recv_control_msg error -71 req 02 val 2100 [ 95.781908][ T6150] pwc: recv_control_msg error -71 req 04 val 1500 [ 95.784156][ T6150] pwc: recv_control_msg error -71 req 02 val 2500 [ 95.784239][ T59] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 95.786369][ T6150] pwc: recv_control_msg error -71 req 02 val 2400 [ 95.791006][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.792917][ T6150] pwc: recv_control_msg error -71 req 02 val 2600 [ 95.796961][ T59] usb 6-1: Product: syz [ 95.798128][ T6150] pwc: recv_control_msg error -71 req 02 val 2900 [ 95.799630][ T59] usb 6-1: Manufacturer: syz [ 95.801851][ T6150] pwc: recv_control_msg error -71 req 02 val 2800 [ 95.803660][ T59] usb 6-1: SerialNumber: syz [ 95.807719][ T6150] pwc: recv_control_msg error -71 req 04 val 1100 [ 95.809935][ T6150] pwc: recv_control_msg error -71 req 04 val 1200 [ 95.816301][ T6150] pwc: Registered as video103. [ 95.823039][ T59] usb 6-1: config 0 descriptor?? [ 95.824957][ T6150] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb9/9-1/input/input6 [ 95.833524][ T6150] usb 9-1: USB disconnect, device number 3 [ 95.844903][ T59] smsc95xx v2.0.0 [ 95.891072][ T40] audit: type=1400 audit(1751801773.482:403): avc: denied { ioctl } for pid=7243 comm="syz.3.320" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.899196][ T40] audit: type=1400 audit(1751801773.482:404): avc: denied { set_context_mgr } for pid=7243 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 95.945392][ T40] audit: type=1400 audit(1751801773.532:405): avc: denied { write } for pid=7247 comm="syz.3.322" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.945559][ T7248] random: crng reseeded on system resumption [ 95.952756][ T40] audit: type=1400 audit(1751801773.532:406): avc: denied { ioctl } for pid=7247 comm="syz.3.322" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.420810][ T7250] xt_ecn: cannot match TCP bits for non-tcp packets [ 96.440751][ T59] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 96.445223][ T59] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 96.448865][ T59] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 96.452485][ T59] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 96.461090][ T59] usb 6-1: USB disconnect, device number 9 [ 96.640697][ T7262] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.680315][ T7263] netlink: 156 bytes leftover after parsing attributes in process `syz.4.324'. [ 97.664127][ T40] audit: type=1400 audit(1751801775.252:407): avc: denied { read } for pid=7271 comm="syz.3.331" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 97.954522][ T7284] tmpfs: Bad value for 'mpol' [ 97.969783][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 99.522836][ T7312] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.654170][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 99.788347][ T5954] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 100.177423][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 100.189275][ T5954] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 100.209123][ T40] audit: type=1400 audit(1751801777.762:413): avc: denied { remount } for pid=7338 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 100.428074][ T40] audit: type=1400 audit(1751801778.022:414): avc: denied { create } for pid=7357 comm="syz.3.361" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.430479][ T7358] evm: overlay not supported [ 100.434565][ T40] audit: type=1400 audit(1751801778.022:415): avc: denied { link } for pid=7357 comm="syz.3.361" name="file1" dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.443950][ T40] audit: type=1400 audit(1751801778.022:416): avc: denied { setattr } for pid=7357 comm="syz.3.361" name="file0" dev="overlay" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.451104][ T40] audit: type=1400 audit(1751801778.022:417): avc: denied { rename } for pid=7357 comm="syz.3.361" name="#d" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.618992][ T40] audit: type=1400 audit(1751801778.212:418): avc: denied { bind } for pid=7382 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.786974][ T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 100.818795][ T40] audit: type=1400 audit(1751801778.402:419): avc: denied { firmware_load } for pid=7387 comm="syz.1.374" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 100.948701][ T7388] syz.1.374 (7388) used greatest stack depth: 19640 bytes left [ 100.977241][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 100.988830][ T7396] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.376'. [ 101.035681][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.039879][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.043255][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.046249][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 101.050061][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.054815][ T29] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 101.057825][ T29] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 101.060456][ T29] usb 9-1: Manufacturer: syz [ 101.064480][ T29] usb 9-1: config 0 descriptor?? [ 101.330253][ T7406] kernel read not supported for file /eth0 (pid: 7406 comm: syz.3.380) [ 101.333959][ T40] audit: type=1800 audit(1751801778.922:420): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.380" name="eth0" dev="mqueue" ino=14317 res=0 errno=0 [ 101.347004][ T29] rc_core: IR keymap rc-hauppauge not found [ 101.348966][ T29] Registered IR keymap rc-empty [ 101.350747][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.366993][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.387779][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 101.392846][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input7 [ 101.399736][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.417081][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.439493][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.457264][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.483185][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.497053][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.517008][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.539563][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.557036][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.577017][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 101.599156][ T29] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 101.602023][ T29] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 101.774056][ T29] usb 9-1: USB disconnect, device number 4 [ 102.662862][ T40] audit: type=1400 audit(1751801780.252:421): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 102.743669][ T7449] ------------[ cut here ]------------ [ 102.745518][ T7449] Please remove unsupported % in format string [ 102.747973][ T7449] WARNING: CPU: 0 PID: 7449 at lib/vsprintf.c:2724 format_decode+0xac6/0xd40 [ 102.750748][ T7449] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 102.752267][ T7449] CPU: 0 UID: 0 PID: 7449 Comm: syz.3.398 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 102.757267][ T7449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.760588][ T7449] RIP: 0010:format_decode+0xac6/0xd40 [ 102.762270][ T7449] Code: ea 03 0f b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 c2 01 00 00 41 0f b6 75 00 48 c7 c7 e0 e2 14 8d e8 cb 03 f6 f5 90 <0f> 0b 90 90 e9 d8 fa ff ff 49 bc 00 00 00 00 00 fc ff df 31 db e8 [ 102.768429][ T7449] RSP: 0018:ffffc900046976b8 EFLAGS: 00010282 [ 102.770347][ T7449] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90007af3000 [ 102.772797][ T7449] RDX: 0000000000080000 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 102.775259][ T7449] RBP: ffffc90004697758 R08: 0000000000000001 R09: 0000000000000000 [ 102.777736][ T7449] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 102.780181][ T7449] R13: ffffc9000469795c R14: ffffc900046977e8 R15: 0000000000000000 [ 102.782584][ T7449] FS: 00007f1a6ea476c0(0000) GS:ffff8880d6715000(0000) knlGS:0000000000000000 [ 102.785349][ T7449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.787467][ T7449] CR2: 000000110c27e0e1 CR3: 000000004fe59000 CR4: 0000000000352ef0 [ 102.790041][ T7449] DR0: 0000000000000000 DR1: 0000000000020000 DR2: 0000400000000000 [ 102.792505][ T7449] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 102.794987][ T7449] Call Trace: [ 102.796054][ T7449] [ 102.797078][ T7449] ? __pfx_format_decode+0x10/0x10 [ 102.798710][ T7449] ? is_bpf_text_address+0x8a/0x1a0 [ 102.800368][ T7449] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.802238][ T7449] bstr_printf+0x168/0x10a0 [ 102.803703][ T7449] ? __pfx_bstr_printf+0x10/0x10 [ 102.805297][ T7449] ? __lock_acquire+0x622/0x1c90 [ 102.806846][ T7449] bpf_trace_printk+0x10a/0x190 [ 102.808376][ T7449] ? __pfx_bpf_trace_printk+0x10/0x10 [ 102.810171][ T7449] ? ktime_get+0x200/0x310 [ 102.811611][ T7449] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.813246][ T7449] ? read_tsc+0x9/0x20 [ 102.814549][ T7449] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 102.816248][ T7449] bpf_test_run+0x5cf/0xa70 [ 102.817749][ T7449] ? __pfx_bpf_test_run+0x10/0x10 [ 102.819355][ T7449] ? __asan_memset+0x23/0x50 [ 102.820815][ T7449] bpf_prog_test_run_skb+0xb92/0x2280 [ 102.822517][ T7449] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 102.824348][ T7449] ? fput+0x70/0xf0 [ 102.825576][ T7449] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 102.827489][ T7449] __sys_bpf+0x1488/0x4d80 [ 102.828882][ T7449] ? __pfx___sys_bpf+0x10/0x10 [ 102.830415][ T7449] ? errseq_sample+0x53/0x70 [ 102.831904][ T7449] ? file_init_path+0x4fe/0x760 [ 102.833382][ T7449] ? do_futex+0x122/0x350 [ 102.834722][ T7449] ? __pfx_do_futex+0x10/0x10 [ 102.836200][ T7449] ? __sys_socket+0xac/0x260 [ 102.837740][ T7449] ? xfd_validate_state+0x61/0x180 [ 102.839407][ T7449] __x64_sys_bpf+0x78/0xc0 [ 102.840791][ T7449] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.842378][ T7449] do_syscall_64+0xcd/0x4c0 [ 102.843785][ T7449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.845600][ T7449] RIP: 0033:0x7f1a6db8e929 [ 102.847043][ T7449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.853006][ T7449] RSP: 002b:00007f1a6ea47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.855594][ T7449] RAX: ffffffffffffffda RBX: 00007f1a6ddb5fa0 RCX: 00007f1a6db8e929 [ 102.858164][ T7449] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 102.860641][ T7449] RBP: 00007f1a6dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 102.863107][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.865559][ T7449] R13: 0000000000000000 R14: 00007f1a6ddb5fa0 R15: 00007ffda64e3618 [ 102.868133][ T7449] [ 102.869094][ T7449] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.871231][ T7449] CPU: 0 UID: 0 PID: 7449 Comm: syz.3.398 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 102.874788][ T7449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.878034][ T7449] Call Trace: [ 102.879090][ T7449] [ 102.879989][ T7449] dump_stack_lvl+0x3d/0x1f0 [ 102.881644][ T7449] panic+0x71c/0x800 [ 102.883011][ T7449] ? __pfx_panic+0x10/0x10 [ 102.884385][ T7449] ? show_trace_log_lvl+0x29b/0x3e0 [ 102.885975][ T7449] ? format_decode+0xac6/0xd40 [ 102.887462][ T7449] check_panic_on_warn+0xab/0xb0 [ 102.889043][ T7449] __warn+0xf6/0x3c0 [ 102.890279][ T7449] ? format_decode+0xac6/0xd40 [ 102.891788][ T7449] report_bug+0x3c3/0x580 [ 102.893155][ T7449] ? format_decode+0xac6/0xd40 [ 102.894656][ T7449] handle_bug+0x184/0x210 [ 102.896019][ T7449] exc_invalid_op+0x17/0x50 [ 102.897452][ T7449] asm_exc_invalid_op+0x1a/0x20 [ 102.898994][ T7449] RIP: 0010:format_decode+0xac6/0xd40 [ 102.900664][ T7449] Code: ea 03 0f b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 c2 01 00 00 41 0f b6 75 00 48 c7 c7 e0 e2 14 8d e8 cb 03 f6 f5 90 <0f> 0b 90 90 e9 d8 fa ff ff 49 bc 00 00 00 00 00 fc ff df 31 db e8 [ 102.906562][ T7449] RSP: 0018:ffffc900046976b8 EFLAGS: 00010282 [ 102.908485][ T7449] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90007af3000 [ 102.910934][ T7449] RDX: 0000000000080000 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 102.913376][ T7449] RBP: ffffc90004697758 R08: 0000000000000001 R09: 0000000000000000 [ 102.915825][ T7449] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 102.918266][ T7449] R13: ffffc9000469795c R14: ffffc900046977e8 R15: 0000000000000000 [ 102.920746][ T7449] ? __warn_printk+0x1a5/0x350 [ 102.922263][ T7449] ? format_decode+0xac5/0xd40 [ 102.923778][ T7449] ? __pfx_format_decode+0x10/0x10 [ 102.925378][ T7449] ? is_bpf_text_address+0x8a/0x1a0 [ 102.926995][ T7449] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.928794][ T7449] bstr_printf+0x168/0x10a0 [ 102.930213][ T7449] ? __pfx_bstr_printf+0x10/0x10 [ 102.931762][ T7449] ? __lock_acquire+0x622/0x1c90 [ 102.933326][ T7449] bpf_trace_printk+0x10a/0x190 [ 102.934861][ T7449] ? __pfx_bpf_trace_printk+0x10/0x10 [ 102.936537][ T7449] ? ktime_get+0x200/0x310 [ 102.937947][ T7449] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.939584][ T7449] ? read_tsc+0x9/0x20 [ 102.940879][ T7449] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 102.942591][ T7449] bpf_test_run+0x5cf/0xa70 [ 102.944030][ T7449] ? __pfx_bpf_test_run+0x10/0x10 [ 102.945607][ T7449] ? __asan_memset+0x23/0x50 [ 102.947068][ T7449] bpf_prog_test_run_skb+0xb92/0x2280 [ 102.948726][ T7449] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 102.950549][ T7449] ? fput+0x70/0xf0 [ 102.951745][ T7449] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 102.953526][ T7449] __sys_bpf+0x1488/0x4d80 [ 102.954918][ T7449] ? __pfx___sys_bpf+0x10/0x10 [ 102.956400][ T7449] ? errseq_sample+0x53/0x70 [ 102.957824][ T7449] ? file_init_path+0x4fe/0x760 [ 102.959365][ T7449] ? do_futex+0x122/0x350 [ 102.960714][ T7449] ? __pfx_do_futex+0x10/0x10 [ 102.962169][ T7449] ? __sys_socket+0xac/0x260 [ 102.963634][ T7449] ? xfd_validate_state+0x61/0x180 [ 102.965245][ T7449] __x64_sys_bpf+0x78/0xc0 [ 102.966706][ T7449] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.968356][ T7449] do_syscall_64+0xcd/0x4c0 [ 102.969799][ T7449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.971668][ T7449] RIP: 0033:0x7f1a6db8e929 [ 102.973076][ T7449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.978992][ T7449] RSP: 002b:00007f1a6ea47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.981568][ T7449] RAX: ffffffffffffffda RBX: 00007f1a6ddb5fa0 RCX: 00007f1a6db8e929 [ 102.984033][ T7449] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 102.986504][ T7449] RBP: 00007f1a6dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 102.988987][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.991475][ T7449] R13: 0000000000000000 R14: 00007f1a6ddb5fa0 R15: 00007ffda64e3618 [ 102.993906][ T7449] [ 102.995492][ T7449] Kernel Offset: disabled [ 102.996806][ T7449] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:36:20 Registers: info registers vcpu 0 CPU#0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bed55 RDI=ffffffff9b0c52e0 RBP=ffffffff9b0c52a0 RSP=ffffc90004697020 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000005b R14=ffffffff9b0c52a0 R15=ffffffff855becf0 RIP=ffffffff855bed7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f1a6ea476c0 ffffffff 00c00000 GS =0000 ffff8880d6715000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c27e0e1 CR3=000000004fe59000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000020000 DR2=0000400000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6dc11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6dc11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6dc11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6dc11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6dc11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6dc11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6dd85488 00007f1a6dd85480 00007f1a6dd85478 00007f1a6dd85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6e8ed100 00007f1a6dd85440 00007f1a6dd85458 00007f1a6dd854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6dd85498 00007f1a6dd85490 00007f1a6dd85488 00007f1a6dd85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffea00009c60c0 RCX=ffffffff82373c2e RDX=1ffffd4000138c19 RSI=ffffffff82378887 RDI=ffff888012429c00 RBP=ffff888012429c00 RSP=ffffc9000174fb78 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=dffffc0000000000 R14=ffffea00009c60c8 R15=0000000000003fae RIP=ffffffff823788be RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc20f38e300 ffffffff 00c00000 GS =0000 ffff8880d6815000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1a6db25b20 CR3=00000000344b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000020000 DR2=0000400000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0cad5ce9545f2162 520212503237df3e 0cad5ce9545f2162 520212503237df3e 0cad5ce9545f2162 520212503237df3e 0cad5ce9545f2162 520212503237df3e ZMM18=c83396577c7f744f f49ee8089f703297 c83396577c7f744f f49ee8089f703297 c83396577c7f744f f49ee8089f703297 c83396577c7f744f f49ee8089f703297 ZMM19=fa04000000000000 0000000000000005 fa04000000000000 0000000000000004 fa04000000000000 0000000000000003 fa04000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0700000000000000 000001001c000000 2828080180030180 040003000409a003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000990030fff ffffffffff040980 030804a002050480 0404a4e608000100 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080606013b9a 0000000000000000 0030656764697262 01ffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040003000409a003 0008000990030fff ffffffffff040980 030804a002050480 ZMM25=0546fe6a0546fe6a 0546fe6a0546fe6a 0546fe6a0546fe6a 0546fe6a0546fe6a 0546fe6a0546fe6a 0546fe6a0546fe6a 0546fe6a0546fe6a 0546fe6a0546fe6a ZMM26=5278ee1a5278ee1a 5278ee1a5278ee1a 5278ee1a5278ee1a 5278ee1a5278ee1a 5278ee1a5278ee1a 5278ee1a5278ee1a 5278ee1a5278ee1a 5278ee1a5278ee1a ZMM27=9d0ab0e69d0ab0e6 9d0ab0e69d0ab0e6 9d0ab0e69d0ab0e6 9d0ab0e69d0ab0e6 9d0ab0e69d0ab0e6 9d0ab0e69d0ab0e6 9d0ab0e69d0ab0e6 9d0ab0e69d0ab0e6 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=cc020000cc020000 cc020000cc020000 cc020000cc020000 cc020000cc020000 cc020000cc020000 cc020000cc020000 cc020000cc020000 cc020000cc020000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000001861b20911 RDX=ffff8880293ca440 RSI=ffffffff822e9abe RDI=ffffea0001213080 RBP=ffffea0001213080 RSP=ffffc90003cd7318 R8 =0000000000000000 R9 =fffff94000242616 R10=ffffea00012130b7 R11=0000000000000001 R12=ffffea0001213080 R13=00000017ec99799c R14=0000000000000000 R15=ffffea0001213080 RIP=ffffffff81bc20e6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6915000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f39d20e7d60 CR3=0000000064b30000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816010cb ffffffff816010cb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816010cb ffffffff816010cb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff816010cb ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a1211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a1211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a1211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a1211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a1211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a1211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82073789 ffffffff8207372e ffffffff81e95cb9 ffffffff8160abae ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a1eed100 00007f10a1385440 00007f1000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a1385498 00007f10a1385490 00007f10a1385488 00007f10a1385480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff88806a727d00 RCX=ffffffff81a8cadf RDX=1ffff1100d4e4fa9 RSI=ffffffff81a8e917 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900006f8e40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88806a727c80 R13=00000017e51159d6 R14=ffffc90003557d78 R15=ffff88806a727c80 RIP=ffffffff81a8e943 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f500261b6c0 ffffffff 00c00000 GS =0000 ffff8880d6a15000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000005af000 CR3=0000000058bad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000020000 DR2=0000400000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5706a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5706a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5706a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5706a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5706a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5706a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000067bf 00000000000026bc 0000000000000095 000000000001033d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000005bf 7800000000000616 0000000300000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000751f 0040004c00000707 00000002fff40765 000000000000650f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4fbaeeba55743ef8 f4115e3d3c29d602 52ac9f4626df5050 860503e75fb0d6d2 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 069571bf7c73fddb 95b6dc36b220e88b 7855dd437fcbf283 21d71987d58329a8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e368c01e4388993e 2568d591d59b4d00 0000000000009500 0000000000000500 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000009500 000000000143ad09 f900030000050700 000000000054bf00 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000