last executing test programs: 3.570859304s ago: executing program 1 (id=411): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = creat(0x0, 0x0) syncfs(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x93, 0x0, 0x0, @binary}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x2c}], 0x1}, 0x0) 1.991089333s ago: executing program 1 (id=414): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0xa1ca2524ed8fb647, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, 0xa0}}, 0x0) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 1.990453047s ago: executing program 0 (id=415): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x2) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0xffffffff87e73960) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[], 0x14}}, 0x850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x200008) r4 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r4, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40186f40, 0x20000502) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x0, 0xffffffff, 0x8, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xfffffffffffffdfc, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38e80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002c00), 0x0, 0x0) 1.780221887s ago: executing program 2 (id=417): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 1.698527289s ago: executing program 2 (id=418): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703700000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x20000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000840)={0x0, 0x0, 0x8, 0x1, 0x55}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) syz_80211_inject_frame(0x0, 0x0, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.100614703s ago: executing program 0 (id=422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85c}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.100454041s ago: executing program 1 (id=423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x42a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.100236076s ago: executing program 2 (id=424): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)="00214717a70700000000030600710a069d317ebb906c", 0xa1}], 0x1, 0x0, 0x0) 1.057661215s ago: executing program 3 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0c00991993000000390000000600ab00000000000500e40000000000"], 0x38}}, 0x0) 1.000537562s ago: executing program 3 (id=426): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 1.000122227s ago: executing program 2 (id=427): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 999.896953ms ago: executing program 3 (id=428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900000000040002801400"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="15019b942cdc", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x9, 0x0, 0x80000001}]}}}}}}}, 0x0) 911.089641ms ago: executing program 3 (id=429): r0 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab", 0xed}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0xa, 0x80) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000401, 0x0, 0x0) 831.512871ms ago: executing program 2 (id=430): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000780)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x80002000}) 781.34893ms ago: executing program 2 (id=431): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x2) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0xffffffff87e73960) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[], 0x14}}, 0x850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x200008) r4 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r4, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40186f40, 0x20000502) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x0, 0xffffffff, 0x8, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xfffffffffffffdfc, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38e80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002c00), 0x0, 0x0) 204.147894ms ago: executing program 0 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000700)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="b8"], 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') 151.386708ms ago: executing program 1 (id=433): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}}], 0x1, 0x0) 98.491545ms ago: executing program 0 (id=434): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r2, @ANYBLOB="14000500feffffffff9b5a0e5200000000000000"], 0x3c}}, 0x0) 98.221156ms ago: executing program 0 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31}, 0x24}}, 0x0) 98.075931ms ago: executing program 1 (id=436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x2a, 0x7714e0102f648d2d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x4, 0xfff1}}}, 0x24}}, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) 54.07568ms ago: executing program 3 (id=437): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 50.159234ms ago: executing program 0 (id=438): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 493.421µs ago: executing program 1 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900000000040002801400000011"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="15019b942cdc", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x9, 0x0, 0x80000001}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85c}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 38.561709][ T39] audit: type=1400 audit(1727408266.220:83): avc: denied { read } for pid=4817 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.567639][ T39] audit: type=1400 audit(1727408266.220:84): avc: denied { append } for pid=4817 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.574320][ T39] audit: type=1400 audit(1727408266.220:85): avc: denied { open } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.580189][ T39] audit: type=1400 audit(1727408266.220:86): avc: denied { getattr } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:32294' (ED25519) to the list of known hosts. [ 40.209855][ T39] audit: type=1400 audit(1727408267.870:87): avc: denied { name_bind } for pid=5321 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.354543][ T5323] cgroup: Unknown subsys name 'net' [ 42.446554][ T5323] cgroup: Unknown subsys name 'cpuset' [ 42.452174][ T5323] cgroup: Unknown subsys name 'rlimit' [ 42.689766][ T5328] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.437265][ T5323] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.452963][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 46.452975][ T39] audit: type=1400 audit(1727408274.110:105): avc: denied { execmem } for pid=5334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.938156][ T39] audit: type=1400 audit(1727408274.590:106): avc: denied { mounton } for pid=5338 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 46.947694][ T39] audit: type=1400 audit(1727408274.590:107): avc: denied { mount } for pid=5338 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 46.959654][ T39] audit: type=1400 audit(1727408274.590:108): avc: denied { create } for pid=5338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.965887][ T39] audit: type=1400 audit(1727408274.590:109): avc: denied { read write } for pid=5338 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.972839][ T39] audit: type=1400 audit(1727408274.590:110): avc: denied { open } for pid=5338 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.982420][ T5341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.985670][ T39] audit: type=1400 audit(1727408274.590:111): avc: denied { ioctl } for pid=5338 comm="syz-executor" path="socket:[5686]" dev="sockfs" ino=5686 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.986285][ T5344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.001095][ T5345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.006386][ T5341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.010087][ T5341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.013156][ T5341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.016187][ T5341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.017626][ T5352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.018348][ T5341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.021255][ T5352] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.022292][ T5341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.025246][ T5352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.025867][ T5341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.028617][ T5352] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.030697][ T5349] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.032136][ T5352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.035954][ T5349] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 47.036377][ T5352] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 47.038734][ T5349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.041074][ T5352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 47.045130][ T5352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.045410][ T5344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.047410][ T39] audit: type=1400 audit(1727408274.700:112): avc: denied { read } for pid=5346 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.057087][ T39] audit: type=1400 audit(1727408274.700:113): avc: denied { open } for pid=5346 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.063863][ T39] audit: type=1400 audit(1727408274.700:114): avc: denied { mounton } for pid=5346 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.071910][ T4773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 47.075930][ T4773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.340819][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 47.352948][ T5342] chnl_net:caif_netlink_parms(): no params data found [ 47.359873][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 47.518800][ T5338] chnl_net:caif_netlink_parms(): no params data found [ 47.564692][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.569622][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.572601][ T5347] bridge_slave_0: entered allmulticast mode [ 47.576435][ T5347] bridge_slave_0: entered promiscuous mode [ 47.603042][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.605965][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.609670][ T5347] bridge_slave_1: entered allmulticast mode [ 47.613253][ T5347] bridge_slave_1: entered promiscuous mode [ 47.631933][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.634098][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.636319][ T5342] bridge_slave_0: entered allmulticast mode [ 47.638691][ T5342] bridge_slave_0: entered promiscuous mode [ 47.664250][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.666437][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.670035][ T5346] bridge_slave_0: entered allmulticast mode [ 47.673109][ T5346] bridge_slave_0: entered promiscuous mode [ 47.697091][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.700207][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.702588][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.706345][ T5342] bridge_slave_1: entered allmulticast mode [ 47.710106][ T5342] bridge_slave_1: entered promiscuous mode [ 47.721876][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.725071][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.728411][ T5346] bridge_slave_1: entered allmulticast mode [ 47.731844][ T5346] bridge_slave_1: entered promiscuous mode [ 47.767751][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.781361][ T5342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.830113][ T5342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.835951][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.840761][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.859494][ T5347] team0: Port device team_slave_0 added [ 47.915282][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.917419][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.919792][ T5338] bridge_slave_0: entered allmulticast mode [ 47.922317][ T5338] bridge_slave_0: entered promiscuous mode [ 47.927464][ T5347] team0: Port device team_slave_1 added [ 47.943996][ T5342] team0: Port device team_slave_0 added [ 47.948969][ T5346] team0: Port device team_slave_0 added [ 47.951425][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.953636][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.956110][ T5338] bridge_slave_1: entered allmulticast mode [ 47.958786][ T5338] bridge_slave_1: entered promiscuous mode [ 47.984624][ T5342] team0: Port device team_slave_1 added [ 47.987906][ T5346] team0: Port device team_slave_1 added [ 48.007501][ T5338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.010913][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.013637][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.024493][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.074137][ T5338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.088606][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.090535][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.097358][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.104913][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.107771][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.117568][ T5342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.123592][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.126224][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.135950][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.158533][ T5338] team0: Port device team_slave_0 added [ 48.164843][ T5338] team0: Port device team_slave_1 added [ 48.168259][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.170948][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.181591][ T5342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.190820][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.192935][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.201621][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.239636][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.241774][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.249099][ T5338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.298733][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.300661][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.307753][ T5338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.318894][ T5347] hsr_slave_0: entered promiscuous mode [ 48.321211][ T5347] hsr_slave_1: entered promiscuous mode [ 48.343262][ T5342] hsr_slave_0: entered promiscuous mode [ 48.345672][ T5342] hsr_slave_1: entered promiscuous mode [ 48.348139][ T5342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.350555][ T5342] Cannot create hsr debugfs directory [ 48.394251][ T5346] hsr_slave_0: entered promiscuous mode [ 48.396966][ T5346] hsr_slave_1: entered promiscuous mode [ 48.399272][ T5346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.401357][ T5346] Cannot create hsr debugfs directory [ 48.405062][ T5338] hsr_slave_0: entered promiscuous mode [ 48.406962][ T5338] hsr_slave_1: entered promiscuous mode [ 48.409571][ T5338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.412158][ T5338] Cannot create hsr debugfs directory [ 48.697543][ T5342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.705531][ T5342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.712076][ T5342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.716859][ T5342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.743341][ T5338] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.752819][ T5338] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.758634][ T5338] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.765172][ T5338] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.799636][ T5347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.804057][ T5347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.808828][ T5347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.823594][ T5347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.852088][ T5346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.858511][ T5346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.864069][ T5346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.867948][ T5346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.924840][ T5342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.957844][ T5342] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.990452][ T5338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.003043][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.005903][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.019461][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.021806][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.040939][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.071770][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.080321][ T5338] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.086004][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.107574][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.109845][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.115726][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.118340][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.128826][ T67] Bluetooth: hci3: command tx timeout [ 49.131318][ T4773] Bluetooth: hci1: command tx timeout [ 49.133726][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.136096][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.140354][ T4773] Bluetooth: hci0: command tx timeout [ 49.140513][ T67] Bluetooth: hci2: command tx timeout [ 49.142174][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.142247][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.145221][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.164107][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.166753][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.178693][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.180849][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.197615][ T5346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.281814][ T5342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.318039][ T5342] veth0_vlan: entered promiscuous mode [ 49.337462][ T5342] veth1_vlan: entered promiscuous mode [ 49.346745][ T5338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.362652][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.376619][ T5342] veth0_macvtap: entered promiscuous mode [ 49.383518][ T5342] veth1_macvtap: entered promiscuous mode [ 49.394366][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.412477][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.422596][ T5338] veth0_vlan: entered promiscuous mode [ 49.426952][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.436101][ T5342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.441391][ T5342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.444997][ T5342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.448426][ T5342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.462530][ T5338] veth1_vlan: entered promiscuous mode [ 49.469158][ T5346] veth0_vlan: entered promiscuous mode [ 49.485126][ T5346] veth1_vlan: entered promiscuous mode [ 49.540386][ T5347] veth0_vlan: entered promiscuous mode [ 49.544868][ T5338] veth0_macvtap: entered promiscuous mode [ 49.557462][ T5346] veth0_macvtap: entered promiscuous mode [ 49.565140][ T5346] veth1_macvtap: entered promiscuous mode [ 49.573458][ T5338] veth1_macvtap: entered promiscuous mode [ 49.586140][ T5347] veth1_vlan: entered promiscuous mode [ 49.617493][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.622778][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.627534][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.633983][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.635395][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.637141][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.642507][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.649813][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.663382][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.666425][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.670037][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.673538][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.677424][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.686405][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.690319][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.693603][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.696509][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.699888][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.706216][ T5338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.710020][ T5338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.713110][ T5338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.715500][ T5338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.732084][ T5346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.735597][ T5346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.739095][ T5346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.742756][ T5346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.750723][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.755149][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.764919][ T5347] veth0_macvtap: entered promiscuous mode [ 49.777665][ T5347] veth1_macvtap: entered promiscuous mode [ 49.811518][ T5342] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.833600][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.837705][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.843497][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.847694][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.853846][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.856748][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.861554][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.874383][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.876963][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.894932][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.897965][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.902141][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.906049][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.910287][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.914050][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.919429][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.932002][ T5347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.934627][ T5347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.937220][ T5347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.940975][ T5347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.946994][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.949791][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.975884][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.981654][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.003505][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.007618][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.055518][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.064693][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.228322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.402629][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.405061][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.430762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.437849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.441094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.070446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.208486][ T4773] Bluetooth: hci1: command tx timeout [ 51.212963][ T67] Bluetooth: hci2: command tx timeout [ 51.217752][ T67] Bluetooth: hci3: command tx timeout [ 51.223540][ T67] Bluetooth: hci0: command tx timeout [ 51.565002][ T39] kauditd_printk_skb: 35 callbacks suppressed [ 51.566506][ T39] audit: type=1400 audit(1727408535.219:150): avc: denied { name_bind } for pid=5425 comm="syz.1.8" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 51.602190][ T39] audit: type=1400 audit(1727408535.229:151): avc: denied { read } for pid=5428 comm="syz.0.9" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.644460][ T39] audit: type=1400 audit(1727408535.229:152): avc: denied { open } for pid=5428 comm="syz.0.9" path="/dev/ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.716447][ T39] audit: type=1400 audit(1727408535.229:153): avc: denied { ioctl } for pid=5428 comm="syz.0.9" path="/dev/ppp" dev="devtmpfs" ino=714 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.774599][ T39] audit: type=1400 audit(1727408535.279:154): avc: denied { create } for pid=5428 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.809342][ T39] audit: type=1400 audit(1727408535.449:155): avc: denied { create } for pid=5433 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.824272][ T39] audit: type=1400 audit(1727408535.449:156): avc: denied { bind } for pid=5433 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.859455][ T39] audit: type=1400 audit(1727408535.519:157): avc: denied { connect } for pid=5433 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.110152][ T39] audit: type=1400 audit(1727408535.769:158): avc: denied { create } for pid=5433 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.123943][ T39] audit: type=1400 audit(1727408535.779:159): avc: denied { read } for pid=5433 comm="syz.2.10" name="ubi_ctrl" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.131635][ T5436] ubi0: attaching mtd0 [ 52.138433][ T5436] ubi0: scanning is finished [ 52.139987][ T5436] ubi0: empty MTD device detected [ 52.788298][ T5436] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 53.132035][ T5462] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18'. [ 53.227643][ T5464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.308198][ T5345] Bluetooth: hci1: command tx timeout [ 53.308269][ T67] Bluetooth: hci3: command tx timeout [ 53.310026][ T5345] Bluetooth: hci2: command tx timeout [ 53.312547][ T4773] Bluetooth: hci0: command tx timeout [ 53.684733][ T5472] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 54.466094][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 54.576123][ T5506] trusted_key: encrypted_key: insufficient parameters specified [ 54.889969][ T5400] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.058563][ T5400] usb 8-1: Using ep0 maxpacket: 16 [ 55.065447][ T5400] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.069051][ T5400] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.071957][ T5400] usb 8-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 55.074814][ T5400] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.082086][ T5400] usb 8-1: config 0 descriptor?? [ 55.298764][ T5509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.317428][ T5509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.372485][ T4773] Bluetooth: hci2: command tx timeout [ 55.372573][ T67] Bluetooth: hci0: command tx timeout [ 55.374632][ T5345] Bluetooth: hci3: command tx timeout [ 55.376777][ T5352] Bluetooth: hci1: command tx timeout [ 55.426582][ T5524] xt_SECMARK: invalid security context 'unconfined' [ 55.558175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.046085][ T5400] usbhid 8-1:0.0: can't add hid device: -71 [ 56.051256][ T5400] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 56.057328][ T5400] usb 8-1: USB disconnect, device number 2 [ 56.180177][ T5563] trusted_key: encrypted_key: insufficient parameters specified [ 56.208297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.930826][ T39] kauditd_printk_skb: 50 callbacks suppressed [ 56.930950][ T39] audit: type=1400 audit(1727408540.569:210): avc: denied { mount } for pid=5583 comm="syz.1.62" name="/" dev="gadgetfs" ino=8167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 57.408048][ T5609] sctp: [Deprecated]: syz.2.70 (pid 5609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 57.408048][ T5609] Use struct sctp_sack_info instead [ 57.429852][ T39] audit: type=1400 audit(1727408541.089:211): avc: denied { setopt } for pid=5608 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.499024][ T39] audit: type=1400 audit(1727408541.159:212): avc: denied { unmount } for pid=5342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.518311][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.612765][ T5617] Zero length message leads to an empty skb [ 57.648316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.678360][ T5400] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.681643][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 57.688541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 57.691211][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.695499][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.699748][ T9] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 57.703323][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.708362][ T9] usb 5-1: config 0 descriptor?? [ 57.715530][ T39] audit: type=1400 audit(1727408541.369:213): avc: denied { read write } for pid=5618 comm="syz.3.75" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.726423][ T39] audit: type=1400 audit(1727408541.369:214): avc: denied { open } for pid=5618 comm="syz.3.75" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.858188][ T5400] usb 7-1: Using ep0 maxpacket: 8 [ 57.860899][ T5400] usb 7-1: New USB device found, idVendor=13d3, idProduct=3335, bcdDevice=b9.77 [ 57.863597][ T5400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.868164][ T5400] usb 7-1: config 0 descriptor?? [ 57.873451][ T5400] r8712u: register rtl8712_netdev_ops to netdev_ops [ 57.875750][ T5400] usb 7-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 57.920884][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.924935][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.988996][ T5621] xt_SECMARK: invalid security context 'unconfined' [ 58.075604][ T5400] usb 7-1: r8712u: Boot from EFUSE: Autoload Failed [ 58.078675][ T5400] usb 7-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 58.081850][ T5400] usb 7-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 58.098147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.104432][ T5400] usb 7-1: USB disconnect, device number 2 [ 58.236306][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.525867][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 58.529893][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 58.537597][ T9] usb 5-1: USB disconnect, device number 2 [ 58.587716][ T39] audit: type=1400 audit(1727408542.239:215): avc: denied { create } for pid=5635 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.774104][ T39] audit: type=1400 audit(1727408542.429:216): avc: denied { ioctl } for pid=5642 comm="syz.2.84" path="/dev/sg0" dev="devtmpfs" ino=705 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.183625][ T39] audit: type=1400 audit(1727408542.839:217): avc: denied { read write } for pid=5656 comm="syz.0.89" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.194495][ T39] audit: type=1400 audit(1727408542.839:218): avc: denied { open } for pid=5656 comm="syz.0.89" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.619970][ T39] audit: type=1400 audit(1727408543.279:219): avc: denied { sys_module } for pid=5670 comm="syz.1.95" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.989122][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.195072][ T5771] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.284694][ T5783] ubi0: attaching mtd0 [ 62.286641][ T5783] ubi0: scanning is finished [ 62.372956][ T5783] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 62.378374][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 62.378388][ T39] audit: type=1400 audit(1727408546.029:231): avc: denied { mounton } for pid=5788 comm="syz.2.141" path="/40/file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.387681][ T5783] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 62.390612][ T5783] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 62.393353][ T5783] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 62.396172][ T5783] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 62.400949][ T5783] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 62.403587][ T5783] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2196162885 [ 62.407191][ T5783] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 62.413746][ T5790] ubi0: background thread "ubi_bgt0d" started, PID 5790 [ 62.661590][ T39] audit: type=1400 audit(1727408546.319:232): avc: denied { write } for pid=5791 comm="syz.1.142" name="uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.666038][ T5792] input: syz1 as /devices/virtual/input/input6 [ 62.679882][ T39] audit: type=1400 audit(1727408546.339:233): avc: denied { read } for pid=4820 comm="acpid" name="event4" dev="devtmpfs" ino=2395 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.686898][ T39] audit: type=1400 audit(1727408546.339:234): avc: denied { open } for pid=4820 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2395 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.694972][ T39] audit: type=1400 audit(1727408546.339:235): avc: denied { ioctl } for pid=4820 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2395 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.815416][ T39] audit: type=1400 audit(1727408546.469:236): avc: denied { getopt } for pid=5795 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.945593][ T39] audit: type=1400 audit(1727408546.599:237): avc: denied { read } for pid=5797 comm="syz.1.145" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.956554][ T39] audit: type=1400 audit(1727408546.599:238): avc: denied { open } for pid=5797 comm="syz.1.145" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.968331][ T39] audit: type=1400 audit(1727408546.599:239): avc: denied { ioctl } for pid=5797 comm="syz.1.145" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.981307][ T39] audit: type=1400 audit(1727408546.609:240): avc: denied { write } for pid=5797 comm="syz.1.145" name="tcp6" dev="proc" ino=4026533051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.461520][ T5814] kvm: kvm [5813]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 63.480239][ T5814] kvm: kvm [5813]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 63.520125][ T5814] kvm: kvm [5813]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 64.064529][ T5824] ubi: mtd0 is already attached to ubi0 [ 65.048288][ T4773] Bluetooth: hci3: command 0x0405 tx timeout [ 65.290845][ T5885] ubi: mtd0 is already attached to ubi0 [ 65.948246][ T5348] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.019806][ T4773] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 66.023881][ T4773] Bluetooth: hci1: Injecting HCI hardware error event [ 66.029883][ T5352] Bluetooth: hci1: hardware error 0x00 [ 66.108155][ T5348] usb 7-1: Using ep0 maxpacket: 16 [ 66.120421][ T5348] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.123697][ T5348] usb 7-1: config 0 has no interfaces? [ 66.125424][ T5348] usb 7-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 66.127956][ T5348] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.132928][ T5348] usb 7-1: config 0 descriptor?? [ 66.355761][ T831] usb 7-1: USB disconnect, device number 3 [ 66.981639][ T5933] ubi: mtd0 is already attached to ubi0 [ 67.492190][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 67.492214][ T39] audit: type=1400 audit(1727408551.139:252): avc: denied { create } for pid=5954 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.521761][ T39] audit: type=1400 audit(1727408551.139:253): avc: denied { bind } for pid=5954 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.536418][ T39] audit: type=1400 audit(1727408551.139:254): avc: denied { listen } for pid=5954 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.548590][ T39] audit: type=1400 audit(1727408551.149:255): avc: denied { connect } for pid=5954 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.556362][ T39] audit: type=1400 audit(1727408551.159:256): avc: denied { accept } for pid=5954 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.773040][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.837168][ T39] audit: type=1400 audit(1727408551.489:257): avc: denied { execute } for pid=5973 comm="syz.2.212" path="/51/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.042419][ T39] audit: type=1400 audit(1727408551.699:258): avc: denied { setopt } for pid=5993 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.088255][ T5400] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.092253][ T5352] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 68.109479][ T6001] ubi: mtd0 is already attached to ubi0 [ 68.157667][ T39] audit: type=1400 audit(1727408551.809:259): avc: denied { setopt } for pid=6003 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.248306][ T5400] usb 5-1: Using ep0 maxpacket: 8 [ 68.267653][ T5400] usb 5-1: config 0 has no interfaces? [ 68.283587][ T5400] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 68.287178][ T5400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.295260][ T5400] usb 5-1: Product: syz [ 68.296849][ T5400] usb 5-1: Manufacturer: syz [ 68.298191][ T5400] usb 5-1: SerialNumber: syz [ 68.311261][ T39] audit: type=1400 audit(1727408551.969:260): avc: denied { mount } for pid=6003 comm="syz.3.226" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.329712][ T5400] usb 5-1: config 0 descriptor?? [ 68.665017][ T30] usb 5-1: USB disconnect, device number 3 [ 69.008326][ T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 69.376858][ T39] audit: type=1400 audit(1727408553.029:261): avc: denied { bind } for pid=6040 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.389888][ T6043] netlink: 'syz.0.238': attribute type 4 has an invalid length. [ 69.449297][ T6043] mmap: syz.0.238 (6043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.671945][ T35] usb 8-1: unable to get BOS descriptor or descriptor too short [ 69.677547][ T35] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 69.680227][ T35] usb 8-1: can't read configurations, error -71 [ 69.829053][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'. [ 70.245663][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 70.402888][ T6090] ubi: mtd0 is already attached to ubi0 [ 70.428416][ T5400] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.588220][ T5400] usb 6-1: Using ep0 maxpacket: 8 [ 70.593658][ T5400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.596698][ T5400] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 70.601402][ T5400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.609009][ T5400] usb 6-1: config 0 descriptor?? [ 70.859813][ T5400] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 71.533023][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.535674][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.616804][ T5400] usb 6-1: USB disconnect, device number 2 [ 71.632328][ T5400] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 71.638271][ T831] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 71.821220][ T6139] ubi: mtd0 is already attached to ubi0 [ 71.856142][ T831] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.868618][ T831] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.880608][ T831] usb 8-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 71.884359][ T831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.888461][ T831] usb 8-1: Product: syz [ 71.890959][ T831] usb 8-1: Manufacturer: syz [ 71.893392][ T831] usb 8-1: SerialNumber: syz [ 71.902624][ T831] usb 8-1: config 0 descriptor?? [ 71.909189][ T831] pn533_usb 8-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 72.521336][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 72.521348][ T39] audit: type=1326 audit(1727408556.179:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.2.279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54d97df39 code=0x7ffc0000 [ 72.531719][ T39] audit: type=1326 audit(1727408556.179:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.2.279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54d97df39 code=0x7ffc0000 [ 72.541022][ T39] audit: type=1326 audit(1727408556.179:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.2.279" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc54d97df39 code=0x7ffc0000 [ 72.551016][ T6158] netlink: 72 bytes leftover after parsing attributes in process `syz.2.279'. [ 72.556675][ T39] audit: type=1326 audit(1727408556.179:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.2.279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54d97df39 code=0x7ffc0000 [ 72.563628][ T39] audit: type=1326 audit(1727408556.179:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.2.279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54d97df39 code=0x7ffc0000 [ 72.570271][ T39] audit: type=1326 audit(1727408556.189:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.2.279" exe="/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc54d97df39 code=0x7ffc0000 [ 72.577485][ T39] audit: type=1326 audit(1727408556.189:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.2.279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54d97df39 code=0x7ffc0000 [ 72.586641][ T39] audit: type=1326 audit(1727408556.189:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.2.279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54d97df39 code=0x7ffc0000 [ 72.599992][ T39] audit: type=1326 audit(1727408556.189:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.2.279" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc54d97df39 code=0x7ffc0000 [ 72.608862][ T39] audit: type=1326 audit(1727408556.189:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.2.279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54d97df39 code=0x7ffc0000 [ 73.581655][ T6185] overlayfs: missing 'lowerdir' [ 73.704203][ T6189] ubi: mtd0 is already attached to ubi0 [ 74.259417][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 74.338470][ T35] usb 8-1: USB disconnect, device number 5 [ 74.717933][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 74.765765][ T6234] netlink: 'syz.2.307': attribute type 4 has an invalid length. [ 74.770235][ T6234] netlink: 17 bytes leftover after parsing attributes in process `syz.2.307'. [ 75.238332][ T58] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.400497][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 75.415128][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.418344][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.421305][ T58] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 75.423968][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.452638][ T58] usb 7-1: config 0 descriptor?? [ 75.460631][ T58] hub 7-1:0.0: USB hub found [ 75.559506][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 75.707967][ T58] hub 7-1:0.0: 1 port detected [ 75.864529][ T58] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 75.867070][ T58] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 75.886860][ T58] usbhid 7-1:0.0: can't add hid device: -71 [ 75.888984][ T58] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 75.919422][ T58] usb 7-1: USB disconnect, device number 4 [ 76.896130][ T6310] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 77.038309][ T5400] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 77.188314][ T5400] usb 6-1: Using ep0 maxpacket: 32 [ 77.193626][ T5400] usb 6-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 77.205595][ T5400] usb 6-1: config 1 interface 0 has no altsetting 0 [ 77.214852][ T5400] usb 6-1: string descriptor 0 read error: -71 [ 77.216781][ T5400] usb 6-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.40 [ 77.222937][ T5400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.235612][ T5400] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 77.241679][ T5400] usb 6-1: no configuration chosen from 1 choice [ 77.248536][ T5400] usb 6-1: USB disconnect, device number 3 [ 77.858289][ T4773] Bluetooth: hci3: command 0x0405 tx timeout [ 78.095110][ T39] kauditd_printk_skb: 81 callbacks suppressed [ 78.095163][ T39] audit: type=1400 audit(1727408561.749:362): avc: denied { connect } for pid=6339 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.103438][ T39] audit: type=1400 audit(1727408561.749:363): avc: denied { mount } for pid=6339 comm="syz.2.341" name="/" dev="gadgetfs" ino=14581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.118711][ T39] audit: type=1400 audit(1727408561.749:364): avc: denied { mounton } for pid=6339 comm="syz.2.341" path="/96/file1" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.126976][ T39] audit: type=1400 audit(1727408561.759:365): avc: denied { mount } for pid=6339 comm="syz.2.341" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.370752][ T39] audit: type=1400 audit(1727408562.029:366): avc: denied { create } for pid=6371 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.428922][ T39] audit: type=1400 audit(1727408562.089:367): avc: denied { setopt } for pid=6381 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.589584][ T39] audit: type=1400 audit(1727408562.249:368): avc: denied { remount } for pid=6390 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.605051][ T39] audit: type=1400 audit(1727408562.259:369): avc: denied { unmount } for pid=5338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.638464][ T5352] Bluetooth: Wrong link type (-71) [ 79.322603][ T5352] Bluetooth: Wrong link type (-71) [ 79.685764][ T39] audit: type=1400 audit(1727408563.339:370): avc: denied { write } for pid=6444 comm="syz.3.378" path="socket:[12748]" dev="sockfs" ino=12748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.685791][ T6445] Bluetooth: MGMT ver 1.23 [ 79.708205][ T6445] Bluetooth: hci3: unsupported parameter 65535 [ 79.709930][ T6445] Bluetooth: hci3: invalid length 0, exp 2 for type 16 [ 79.792368][ T5352] Bluetooth: Wrong link type (-71) [ 79.889698][ T39] audit: type=1400 audit(1727408563.549:371): avc: denied { read write } for pid=6455 comm="syz.1.383" name="uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.892540][ T6456] input: syz0 as /devices/virtual/input/input8 [ 79.913034][ T6459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.992027][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 79.995066][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 80.110319][ T6468] xt_hashlimit: size too large, truncated to 1048576 [ 80.128227][ T831] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.211816][ T5352] Bluetooth: Wrong link type (-71) [ 80.488745][ T829] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 80.638264][ T829] usb 8-1: Using ep0 maxpacket: 8 [ 80.643496][ T829] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 80.645837][ T829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.649183][ T829] usb 8-1: config 0 descriptor?? [ 80.689744][ T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.693152][ T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.697096][ T831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.702002][ T831] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.705498][ T831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.714892][ T831] usb 7-1: config 0 descriptor?? [ 81.032341][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 81.037220][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 81.126286][ T5352] Bluetooth: Wrong link type (-71) [ 81.135367][ T831] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.140878][ T831] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 81.160704][ T831] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 81.257511][ T829] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 81.261622][ T829] asix 8-1:0.0: probe with driver asix failed with error -32 [ 81.313144][ T6514] binder: 6508:6514 ioctl c0306201 0 returned -14 [ 81.526111][ T829] usb 7-1: USB disconnect, device number 5 [ 81.526432][ T6460] usb 7-1: string descriptor 0 read error: -71 [ 81.544240][ T6517] ubi: mtd0 is already attached to ubi0 [ 81.774847][ T830] cfg80211: failed to load regulatory.db [ 82.137638][ T6528] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 82.149899][ T6528] syzkaller0: entered promiscuous mode [ 82.151583][ T6528] syzkaller0: entered allmulticast mode [ 83.259185][ T831] usb 8-1: USB disconnect, device number 6 [ 83.559574][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 83.559611][ T39] audit: type=1400 audit(1727408567.219:392): avc: denied { write } for pid=6541 comm="syz.3.413" name="if_inet6" dev="proc" ino=4026533404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.778886][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.784459][ T6540] batadv_slave_0: entered promiscuous mode [ 83.900528][ T6551] ubi: mtd0 is already attached to ubi0 [ 84.122244][ T39] audit: type=1400 audit(1727408567.779:393): avc: denied { setopt } for pid=6557 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.129636][ T39] audit: type=1400 audit(1727408567.789:394): avc: denied { write } for pid=6557 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.159052][ T6557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.315344][ T39] audit: type=1400 audit(1727408567.969:395): avc: denied { append } for pid=6559 comm="syz.3.419" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.636826][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.420'. [ 84.709904][ T39] audit: type=1400 audit(1727408568.359:396): avc: denied { write } for pid=6568 comm="syz.2.424" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.717979][ T6572] Bluetooth: hci3: invalid len left 7, exp >= 51 [ 84.756507][ T6567] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 85.098273][ T6601] ubi: mtd0 is already attached to ubi0 [ 85.860572][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.874803][ C0] ------------[ cut here ]------------ [ 85.876655][ C0] WARNING: CPU: 0 PID: 6622 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 85.879741][ C0] Modules linked in: [ 85.880996][ C0] CPU: 0 UID: 0 PID: 6622 Comm: syz.3.440 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 85.886174][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.889860][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 85.892551][ C0] Code: 02 48 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 0d 00 00 c6 43 7f 00 e9 22 f0 ff ff 48 8b ac 24 a0 00 00 00 e8 ca bb 8c f6 90 <0f> 0b 90 e9 49 f3 ff ff e8 bc bb 8c f6 90 0f 0b 90 e9 df f0 ff ff [ 85.898533][ C0] RSP: 0018:ffffc90000007408 EFLAGS: 00010246 [ 85.900179][ C0] RAX: 0000000000000000 RBX: 00000000000081e5 RCX: ffffffff8b002892 [ 85.902319][ C0] RDX: ffff888027760000 RSI: ffffffff8b0035f6 RDI: 0000000000000004 [ 85.904495][ C0] RBP: ffffc90000007528 R08: 0000000000000004 R09: 00000000000081e5 [ 85.906753][ C0] R10: 00000000000055f0 R11: 0000000000000000 R12: ffff888048e32668 [ 85.909011][ C0] R13: 0000000000000001 R14: ffff888048e32580 R15: dffffc0000000000 [ 85.911224][ C0] FS: 00007fc483e8e6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 85.913696][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.915605][ C0] CR2: 00000000200e2000 CR3: 0000000048ab2000 CR4: 0000000000350ef0 [ 85.917895][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.920275][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 85.922509][ C0] Call Trace: [ 85.923459][ C0] [ 85.924261][ C0] ? __warn+0xea/0x3d0 [ 85.925419][ C0] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 85.927299][ C0] ? report_bug+0x3c0/0x580 [ 85.928855][ C0] ? handle_bug+0x54/0xa0 [ 85.930110][ C0] ? exc_invalid_op+0x17/0x50 [ 85.931473][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 85.932872][ C0] ? __mptcp_move_skbs_from_subflow+0x8c2/0x24d0 [ 85.934611][ C0] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 85.936509][ C0] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 85.938490][ C0] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 85.940387][ C0] mptcp_data_ready+0x30e/0x8e0 [ 85.941775][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 85.943334][ C0] subflow_data_ready+0x51d/0x7d0 [ 85.944089][ T39] audit: type=1400 audit(1727408569.599:397): avc: denied { create } for pid=6628 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 85.944783][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 85.951797][ T39] audit: type=1400 audit(1727408569.599:398): avc: denied { write } for pid=6628 comm="syz.2.442" path="socket:[14102]" dev="sockfs" ino=14102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 85.951809][ C0] ? __pfx_tcp_grow_window+0x10/0x10 [ 85.960239][ T39] audit: type=1400 audit(1727408569.599:399): avc: denied { nlmsg_read } for pid=6628 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 85.961428][ C0] tcp_data_ready+0x146/0x5b0 [ 85.968515][ C0] ? tcp_event_data_recv+0xb6e/0x1410 [ 85.970151][ C0] ? __pfx_tcp_data_ready+0x10/0x10 [ 85.971638][ C0] tcp_data_queue+0x1a6f/0x5280 [ 85.973177][ C0] ? tcp_urg+0x110/0xb80 [ 85.974376][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 85.976014][ C0] ? tcp_send_dupack+0x7c0/0x810 [ 85.977980][ C0] ? ktime_get+0xfb/0x1a0 [ 85.979371][ C0] tcp_rcv_established+0x8b1/0x21c0 [ 85.981094][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 85.982792][ C0] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 85.984411][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 85.986009][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 85.987461][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 85.989020][ C0] tcp_v4_do_rcv+0x5ca/0xa90 [ 85.990520][ C0] tcp_v4_rcv+0x33a8/0x4390 [ 85.991799][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 85.993166][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 85.994749][ C0] ? read_tsc+0x9/0x20 [ 85.996035][ C0] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 85.997804][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 85.999491][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 86.001163][ C0] ip_local_deliver_finish+0x316/0x570 [ 86.002731][ C0] ip_local_deliver+0x18e/0x1f0 [ 86.004110][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 86.005553][ C0] ip_rcv+0x2c3/0x5d0 [ 86.006664][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 86.007895][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 86.009526][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 86.011266][ C0] ? process_backlog+0x3f1/0x15f0 [ 86.011559][ T6634] capability: warning: `syz.0.444' uses deprecated v2 capabilities in a way that may be insecure [ 86.012603][ C0] ? __pfx_lock_release+0x10/0x10 [ 86.017294][ C0] ? mark_held_locks+0x9f/0xe0 [ 86.018803][ C0] ? process_backlog+0x3f1/0x15f0 [ 86.020388][ C0] __netif_receive_skb+0x1d/0x160 [ 86.021834][ C0] process_backlog+0x443/0x15f0 [ 86.023364][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 86.025314][ C0] net_rx_action+0xa92/0x1010 [ 86.027064][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 86.028923][ C0] ? __pfx_mark_lock+0x10/0x10 [ 86.030563][ C0] ? lock_acquire+0x1b1/0x560 [ 86.032106][ C0] ? find_held_lock+0x2d/0x110 [ 86.033414][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 86.034862][ C0] ? sched_clock+0x38/0x60 [ 86.036091][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 86.037416][ C0] ? mark_held_locks+0x9f/0xe0 [ 86.038617][ T39] audit: type=1400 audit(1727408569.699:400): avc: denied { create } for pid=6625 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.038813][ C0] handle_softirqs+0x213/0x8f0 [ 86.045511][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 86.045516][ T39] audit: type=1400 audit(1727408569.699:401): avc: denied { connect } for pid=6625 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.053239][ C0] ? mptcp_check_send_data_fin+0x24a/0x450 [ 86.055145][ C0] do_softirq+0xb2/0xf0 [ 86.056362][ C0] [ 86.057192][ C0] [ 86.058017][ C0] __local_bh_enable_ip+0x100/0x120 [ 86.059511][ C0] mptcp_check_send_data_fin+0x24a/0x450 [ 86.061092][ C0] __mptcp_close+0x928/0xbf0 [ 86.062417][ C0] ? __pfx_lock_release+0x10/0x10 [ 86.063883][ C0] ? __pfx___mptcp_close+0x10/0x10 [ 86.065446][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 86.067028][ C0] mptcp_close+0x28/0xe0 [ 86.068376][ C0] inet_release+0x13c/0x280 [ 86.069864][ C0] inet6_release+0x4f/0x70 [ 86.071319][ C0] __sock_release+0xb0/0x270 [ 86.072797][ C0] ? __pfx_sock_close+0x10/0x10 [ 86.074299][ C0] sock_close+0x1c/0x30 [ 86.075590][ C0] __fput+0x3f6/0xb60 [ 86.076829][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.078371][ C0] task_work_run+0x14e/0x250 [ 86.079660][ C0] ? __pfx_task_work_run+0x10/0x10 [ 86.081058][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 86.082678][ C0] do_syscall_64+0xda/0x250 [ 86.084016][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.085874][ C0] RIP: 0033:0x7fc48317df39 [ 86.087401][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.095027][ C0] RSP: 002b:00007fc483e8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 86.097318][ C0] RAX: 0000000000000000 RBX: 00007fc483335f80 RCX: 00007fc48317df39 [ 86.099701][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 86.101794][ C0] RBP: 00007fc4831f0216 R08: 0000000000000000 R09: 0000000000000000 [ 86.103961][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.106277][ C0] R13: 0000000000000000 R14: 00007fc483335f80 R15: 00007ffddda57568 [ 86.108608][ C0] [ 86.109481][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.111514][ C0] CPU: 0 UID: 0 PID: 6622 Comm: syz.3.440 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 86.114549][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.117689][ C0] Call Trace: [ 86.118659][ C0] [ 86.119493][ C0] dump_stack_lvl+0x3d/0x1f0 [ 86.120773][ C0] panic+0x71d/0x800 [ 86.121851][ C0] ? __pfx_panic+0x10/0x10 [ 86.123088][ C0] ? show_trace_log_lvl+0x29d/0x3d0 [ 86.124531][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 86.126110][ C0] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 86.128167][ C0] check_panic_on_warn+0xab/0xb0 [ 86.129891][ C0] __warn+0xf6/0x3d0 [ 86.131182][ C0] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 86.132991][ C0] report_bug+0x3c0/0x580 [ 86.134194][ C0] handle_bug+0x54/0xa0 [ 86.135361][ C0] exc_invalid_op+0x17/0x50 [ 86.136562][ C0] asm_exc_invalid_op+0x1a/0x20 [ 86.137857][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 86.139807][ C0] Code: 02 48 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 0d 00 00 c6 43 7f 00 e9 22 f0 ff ff 48 8b ac 24 a0 00 00 00 e8 ca bb 8c f6 90 <0f> 0b 90 e9 49 f3 ff ff e8 bc bb 8c f6 90 0f 0b 90 e9 df f0 ff ff [ 86.145178][ C0] RSP: 0018:ffffc90000007408 EFLAGS: 00010246 [ 86.146910][ C0] RAX: 0000000000000000 RBX: 00000000000081e5 RCX: ffffffff8b002892 [ 86.149301][ C0] RDX: ffff888027760000 RSI: ffffffff8b0035f6 RDI: 0000000000000004 [ 86.151963][ C0] RBP: ffffc90000007528 R08: 0000000000000004 R09: 00000000000081e5 [ 86.154233][ C0] R10: 00000000000055f0 R11: 0000000000000000 R12: ffff888048e32668 [ 86.156409][ C0] R13: 0000000000000001 R14: ffff888048e32580 R15: dffffc0000000000 [ 86.158578][ C0] ? __mptcp_move_skbs_from_subflow+0x8c2/0x24d0 [ 86.160349][ C0] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 86.162101][ C0] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 86.163999][ C0] mptcp_data_ready+0x30e/0x8e0 [ 86.165367][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 86.166917][ C0] subflow_data_ready+0x51d/0x7d0 [ 86.168477][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 86.170302][ C0] ? __pfx_tcp_grow_window+0x10/0x10 [ 86.171977][ C0] tcp_data_ready+0x146/0x5b0 [ 86.173401][ C0] ? tcp_event_data_recv+0xb6e/0x1410 [ 86.174917][ C0] ? __pfx_tcp_data_ready+0x10/0x10 [ 86.176466][ C0] tcp_data_queue+0x1a6f/0x5280 [ 86.177882][ C0] ? tcp_urg+0x110/0xb80 [ 86.179096][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 86.180556][ C0] ? tcp_send_dupack+0x7c0/0x810 [ 86.181957][ C0] ? ktime_get+0xfb/0x1a0 [ 86.183189][ C0] tcp_rcv_established+0x8b1/0x21c0 [ 86.184692][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 86.186247][ C0] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 86.187813][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 86.189402][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 86.190959][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 86.192496][ C0] tcp_v4_do_rcv+0x5ca/0xa90 [ 86.193868][ C0] tcp_v4_rcv+0x33a8/0x4390 [ 86.195430][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 86.196832][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 86.198402][ C0] ? read_tsc+0x9/0x20 [ 86.199572][ C0] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 86.201153][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 86.202488][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 86.204009][ C0] ip_local_deliver_finish+0x316/0x570 [ 86.205609][ C0] ip_local_deliver+0x18e/0x1f0 [ 86.207104][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 86.208695][ C0] ip_rcv+0x2c3/0x5d0 [ 86.209833][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 86.211144][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 86.212716][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 86.214405][ C0] ? process_backlog+0x3f1/0x15f0 [ 86.215748][ C0] ? __pfx_lock_release+0x10/0x10 [ 86.217129][ C0] ? mark_held_locks+0x9f/0xe0 [ 86.218482][ C0] ? process_backlog+0x3f1/0x15f0 [ 86.219949][ C0] __netif_receive_skb+0x1d/0x160 [ 86.221375][ C0] process_backlog+0x443/0x15f0 [ 86.222797][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 86.224598][ C0] net_rx_action+0xa92/0x1010 [ 86.226148][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 86.227642][ C0] ? __pfx_mark_lock+0x10/0x10 [ 86.229053][ C0] ? lock_acquire+0x1b1/0x560 [ 86.230359][ C0] ? find_held_lock+0x2d/0x110 [ 86.231705][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 86.233208][ C0] ? sched_clock+0x38/0x60 [ 86.234537][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 86.236160][ C0] ? mark_held_locks+0x9f/0xe0 [ 86.237600][ C0] handle_softirqs+0x213/0x8f0 [ 86.238985][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 86.240573][ C0] ? mptcp_check_send_data_fin+0x24a/0x450 [ 86.242278][ C0] do_softirq+0xb2/0xf0 [ 86.243533][ C0] [ 86.244375][ C0] [ 86.245353][ C0] __local_bh_enable_ip+0x100/0x120 [ 86.246992][ C0] mptcp_check_send_data_fin+0x24a/0x450 [ 86.248640][ C0] __mptcp_close+0x928/0xbf0 [ 86.249968][ C0] ? __pfx_lock_release+0x10/0x10 [ 86.251469][ C0] ? __pfx___mptcp_close+0x10/0x10 [ 86.252936][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 86.254394][ C0] mptcp_close+0x28/0xe0 [ 86.255570][ C0] inet_release+0x13c/0x280 [ 86.256841][ C0] inet6_release+0x4f/0x70 [ 86.258098][ C0] __sock_release+0xb0/0x270 [ 86.259449][ C0] ? __pfx_sock_close+0x10/0x10 [ 86.260903][ C0] sock_close+0x1c/0x30 [ 86.262106][ C0] __fput+0x3f6/0xb60 [ 86.263312][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.264765][ C0] task_work_run+0x14e/0x250 [ 86.266043][ C0] ? __pfx_task_work_run+0x10/0x10 [ 86.267455][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 86.268806][ C0] do_syscall_64+0xda/0x250 [ 86.270420][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.272268][ C0] RIP: 0033:0x7fc48317df39 [ 86.273847][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.280374][ C0] RSP: 002b:00007fc483e8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 86.283450][ C0] RAX: 0000000000000000 RBX: 00007fc483335f80 RCX: 00007fc48317df39 [ 86.286369][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 86.289131][ C0] RBP: 00007fc4831f0216 R08: 0000000000000000 R09: 0000000000000000 [ 86.291312][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.293582][ C0] R13: 0000000000000000 R14: 00007fc483335f80 R15: 00007ffddda57568 [ 86.296129][ C0] [ 86.298273][ C0] Kernel Offset: disabled [ 86.300165][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:38:33 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85098320 RDI=ffffffff9aad2b80 RBP=ffffffff9aad2b40 RSP=ffffc90000006d10 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff355a5c2 R15=dffffc0000000000 RIP=ffffffff85098347 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fc483e8e6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200e2000 CR3=0000000048ab2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4831f103a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4831f1047 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4831f1041 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4831f1055 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4831f10db ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4831f11b9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc48330a488 00007fc48330a480 00007fc48330a478 00007fc48330a450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc483e6d100 00007fc48330a440 00007fc48330a458 00007fc48330a4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc48330a498 00007fc48330a490 00007fc48330a488 00007fc48330a480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88802bf90000 RCX=1ffffffff20bd941 RDX=ffff88802bf90ad8 RSI=0000000000000006 RDI=ffff88802bf90ad8 RBP=ffffffffffffffff RSP=ffffc90005bbfd88 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff905f0c4f R11=0000000000000000 R12=ffff88802bf90000 R13=0000000000000096 R14=ffff88806a73ff28 R15=ffff88806a73fee0 RIP=ffffffff8169b29e RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6fae181280 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc54db05678 CR3=000000001f8c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558ddf2f1c70 0000558ddf2f84c0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe090f8f60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe090f8500 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 776f702f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 776f702f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5021b5900500cfa6 0000558887f2e4fd 00000000000001d1 00007265776f702f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000454d414e 0000558887f1358a 0000000000000021 000000000000302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 757371216175647e 2b3a010a014b3625 6928286c524f5e5a 11113e303b3d2425 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d7f7f3f7b7f7d7f 7f7f7d7f2d7f7f7f 6f7d7d7d7f7f5f7f 7f7f7f757f7f3f3d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030304e56303000 3730303d4d553300 353900302f003639 3033313d00353030 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030303331303000 3730303d003d3300 353000002f003033 3030303000303030 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000134705 RBX=0000000000000002 RCX=ffffffff8b1fda69 RDX=0000000000000000 RSI=ffffffff8b6ccc40 RDI=ffffffff8bd196e0 RBP=ffffed1003bd1000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801de88000 R14=ffffffff905f0c48 R15=0000000000000000 RIP=ffffffff8b1fee4f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c4068f0 CR3=000000002dea6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35eb5f103a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35eb5f1047 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35eb5f1041 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35eb5f1055 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35eb5f10db ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35eb5f11b9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35eb70a488 00007f35eb70a480 00007f35eb70a478 00007f35eb70a450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35ec26d100 00007f35eb70a440 00007f35eb700004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35eb70a498 00007f35eb70a490 00007f35eb70a488 00007f35eb70a480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000038128 RCX=ffffffff816a099b RDX=1ffffffff1b4bd73 RSI=ffffffff8bd19660 RDI=ffffffff8da5eb98 RBP=0000000000000003 RSP=ffffc90003c0f828 R8 =0000000000000000 R9 =fffffbfff20be189 R10=ffffffff905f0c4f R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff8e1b7ec0 R15=0000000000000000 RIP=ffffffff8172df11 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7c6d947500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7c6daef5c0 CR3=0000000020376000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000102 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6a595260 0000003000000008 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6a595260 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572696420746f 6f722065676e6168 632074276e616300 7269646863660027 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4640574c4105514a 4a570540424b444d 460551024b444600 574c414d46430002 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000