last executing test programs: 2.841422643s ago: executing program 0 (id=496): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2.840519164s ago: executing program 3 (id=497): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"001000", 0xdb, 0x6, 0x3, 0x14625b, 0x3, "000000ff00070000000900", '\x00', "05030400", '\x00', ["9ef806070000007eff7d7f00", "000000000000008a982abd00", "ffffff0200ffff7f00", "00720cfcffffff00e9002000"]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x305, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x18) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x2, @pix_mp={0x800, 0x0, 0x20363159, 0x2, 0xa, [{0x2, 0x4}, {0x655, 0x1}, {0x100, 0x2d}, {}, {0x6, 0x82}, {0x2, 0xf19}, {0x8, 0x4}, {0x6, 0x6}], 0x7, 0x3, 0x4}}) 2.770391227s ago: executing program 3 (id=499): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="c00000001300e999000000000000000000000000000002ac1e000100000000000000000000000000000000000004000a00600000000000a3949021666dfe9dab143141e5eec746034b22ff7d6920b2be99636ceff9e93a568df41b8bfafd978bdedbf7542b96f01a840dbc0df3e09df85261713bd184808993c4c1041536ab9cac7956f022a5594c00341cb12eb8e940b80786abab05d5f1f99ceba92d13b3e5b344a15ab8c7262e112b7ee0a8eade58ff1a0d80"], 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 2.770046013s ago: executing program 0 (id=500): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="03048add8670ac6217e07ea8cd2bc746062129898f7c1af031fdaf430b858f39726056564db27c8abaef1b20401ae7a9f41fe124fa2919fbd72b4c839d82901c543035c50bd43cdfede345e35611e163de74810b2837511d3cd637bb5fb0a0537c95208b5f81acd5e55c4e4392113215c967369bf412bbe55be0b1643d3664b6b394156e099c34cf09467764010d3d601593b30a9f6157efa058598a7afb", 0x9e}, {&(0x7f00000000c0)="301b5491dc06caa3950a9200", 0xc}, {&(0x7f0000000400)="f28e2cd14866cd1cb7c956910300be4a1a9215249311a573fb3f1306d2a5ec8862f76f3c2daccde35e7b29ed084e0fdc06d7291701e8e9f3bf1c9240e7b8d09ef5b97570f6ea05e5ed712ad90fa4b946100ebdc4b81597baab041e1218687e0ce109ea57e2a1c699b08bf888d2ba48d9cb3354705b1a0db309632744c769e62e234d7417bf563190b52ff1eb43250d687ffd52baec7ebed0c6bf4fb200d7a37ed1a05621cd472915cae9a95855e90b9f83d705e8863c260c76a0c910c6006947622fa3c139b2552f1ee5e5ea7b91f7172e17b1e11483b7ac58bdd90c2cafd184c42f3c2f95af549563bf3c40d1a54edaf4272731d914f1", 0xf7}, {&(0x7f0000000100)="fc9254964694c91d7660731b2d5c32d78299f0205fe5cef4427063b3c5b54abe593c8b4f454d42ac51ae85c568a862530703c117c5ad6a56aadb8dd6a892977888185504c33afeb5c1ebc0ab6e909d", 0x4f}], 0x4) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) (async) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="03048add8670ac6217e07ea8cd2bc746062129898f7c1af031fdaf430b858f39726056564db27c8abaef1b20401ae7a9f41fe124fa2919fbd72b4c839d82901c543035c50bd43cdfede345e35611e163de74810b2837511d3cd637bb5fb0a0537c95208b5f81acd5e55c4e4392113215c967369bf412bbe55be0b1643d3664b6b394156e099c34cf09467764010d3d601593b30a9f6157efa058598a7afb", 0x9e}, {&(0x7f00000000c0)="301b5491dc06caa3950a9200", 0xc}, {&(0x7f0000000400)="f28e2cd14866cd1cb7c956910300be4a1a9215249311a573fb3f1306d2a5ec8862f76f3c2daccde35e7b29ed084e0fdc06d7291701e8e9f3bf1c9240e7b8d09ef5b97570f6ea05e5ed712ad90fa4b946100ebdc4b81597baab041e1218687e0ce109ea57e2a1c699b08bf888d2ba48d9cb3354705b1a0db309632744c769e62e234d7417bf563190b52ff1eb43250d687ffd52baec7ebed0c6bf4fb200d7a37ed1a05621cd472915cae9a95855e90b9f83d705e8863c260c76a0c910c6006947622fa3c139b2552f1ee5e5ea7b91f7172e17b1e11483b7ac58bdd90c2cafd184c42f3c2f95af549563bf3c40d1a54edaf4272731d914f1", 0xf7}, {&(0x7f0000000100)="fc9254964694c91d7660731b2d5c32d78299f0205fe5cef4427063b3c5b54abe593c8b4f454d42ac51ae85c568a862530703c117c5ad6a56aadb8dd6a892977888185504c33afeb5c1ebc0ab6e909d", 0x4f}], 0x4) (async) 2.765201934s ago: executing program 3 (id=501): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80041285, &(0x7f0000001080)) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r4, 0x2, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000054}, 0x40000) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x38}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x805) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2.702201947s ago: executing program 0 (id=502): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) open(&(0x7f0000000040)='./bus\x00', 0x2340, 0x40) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES64, @ANYRES8=r3], 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x503b41, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 2.070235422s ago: executing program 3 (id=508): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCGSID(r0, 0x5429, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xc) accept(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 1.823179547s ago: executing program 0 (id=509): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)='3', 0x1}], 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x281}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = accept$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom}, [@null, @rose, @null, @bcast, @default, @bcast, @null, @rose]}, &(0x7f0000000040)=0x48) recvfrom$netrom(r5, &(0x7f0000000280), 0x0, 0x147, &(0x7f00000002c0)={{0x3, @null, 0x2}, [@bcast, @bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}}, 0x0) 1.260884811s ago: executing program 3 (id=516): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000600776c616e31000000000000000000000014000300fe8000000000000000000000000000aa040002"], 0x50}, 0x1, 0x0, 0x0, 0x30}, 0x0) 1.20006249s ago: executing program 3 (id=518): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x40020000, &(0x7f0000000000)="c99a9ae65db32b72", 0x8, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)="d01561f90c86d7a1309520ca49963d160e84a2f927f82840931e4acaef415039f1556b0a5498f34d3f7c46c13b664594") mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='ocfs2\x00', 0x200800, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x2c0142) readv(r2, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/197, 0xc5}], 0x3) 990.131505ms ago: executing program 0 (id=526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0xb, 0x7}, {0x6, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_open_dev$loop(&(0x7f00000012c0), 0x7, 0x844001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, r2, 0x0) read$qrtrtun(r1, &(0x7f00000000c0)=""/167, 0xffffff18) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0]) write$selinux_access(r1, &(0x7f0000000380)={'system_u:object_r:cron_spool_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x7}, 0x47) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80c}}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 422.048864ms ago: executing program 2 (id=543): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_SIOCSIFBR(r4, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0x4, @empty}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r8, &(0x7f0000000180)=""/195, 0xc3, 0x100) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f0000000040)="e5159e1dd1f482f3", 0x8, 0x4040051, 0x0, 0xa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff7f, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r10], 0x40}}, 0x4008054) 421.734133ms ago: executing program 0 (id=544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x188, 0x1}, 0x18) r3 = epoll_create1(0x0) syz_open_dev$media(&(0x7f0000000000), 0x4, 0x62602) close_range(r3, 0xffffffffffffffff, 0x0) fspick(r2, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_disconnect(r1) mmap$binder(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x11, r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e2, &(0x7f0000000080)) 421.568635ms ago: executing program 1 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd2e4d, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 242.159467ms ago: executing program 1 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="0f20e06635020000000f22e00f01df0f01caf30f51cc3e0f08f00fb1677bf20f4e5d00bad104b80500ef0f20d8c4e27ddfb8dc00ffc6", 0x36}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="a905000000007464000100000000000000", 0x11}, {&(0x7f0000000200)="82f57c000200000000000000000000000004ac", 0x13}, {&(0x7f0000000300)="7edd84c485d99c2a", 0x8}], 0x3}}], 0x1, 0x20000044) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) 191.810458ms ago: executing program 2 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff3}}}, 0x24}}, 0x1) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x7, 0x7, 0x7f, 0x6, 0x1b, "af9f1076fefd9422"}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0xe7, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0x7, 0x4) 191.427951ms ago: executing program 2 (id=548): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r6, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r7, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r8, 0x3292e291) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000011) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000240)={0x0, 0xee, 0x8, 0x4, 0x6, "1461265e995f3eeebe23228951b9fd9abbe7f6", 0x3ff, 0x2}) sendmsg$can_raw(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x1d, r11}, 0x10, &(0x7f0000000140)={&(0x7f0000000080)=@canfd={{0x2, 0x1}, 0x39, 0x2, 0x0, 0x0, "48c2666b61df2e7697e21a0f5d655685020758179dd29ff1c785a005a8aac7fc19dbf6e6f74be2457031e5dda98ff01af7117f339732715c07d749ed2e2073c3"}, 0x48}, 0x1, 0x0, 0x0, 0x44008080}, 0x10) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip6_mr_vif\x00') pread64(r14, &(0x7f0000003700)=""/119, 0x77, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="eb9cdffda65830785092b8262601888d60d633b09005c582b3f680acdb4fa050b5d5ec20c4265344b2117edaa14726327c1f380686487ad4fd15e3e0febd5e159fa483970a6a693dd3ed8f20", @ANYRES16=r6, @ANYBLOB="00082bbd7000fcdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="0c009900010000801b0000000600f7000a0000000600eb000100000008009e00000000000a00f500afb39d5e5baa0000080077000000010011002a00250301b70ebd060802110000010000000800770003000000"], 0x70}}, 0x0) 131.170327ms ago: executing program 1 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) chdir(&(0x7f0000000280)='./file0/file0/..\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104480000000000d4700000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 130.978616ms ago: executing program 1 (id=550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='\\}^#\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c000280080014000080"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 130.011183ms ago: executing program 2 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a00180003030f00000000021000700004000300"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="14000008", @ANYRES16=r6, @ANYBLOB="010325bd700000dcdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a00180003030f00000000021000700004000300"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x804) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="14000008", @ANYRES16=r6, @ANYBLOB="010325bd700000dcdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) (async) 50.903412ms ago: executing program 1 (id=552): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x2, 0x10000, 0x4, 0xe, 0x0, 0x3, 0x7, 0xa, 0x1, 0x8001, 0x4, 0xff6b, 0x801, 0xfffffffe, 0xb4c, 0xffffffff, 0x2, 0x3, 0x40000003, 0x10000089, 0xcaa7, 0x1ff, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0xfffffffd, 0xfffffff8, 0x80000]}) 50.624095ms ago: executing program 2 (id=553): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="05c164fd53fcb2e8", 0x8) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x6, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) 433.183µs ago: executing program 1 (id=554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x2}]}}, &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1}, 0x20) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r3}, 0x38) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x4000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async, rerun: 64) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xf66, 0x4, 0x0, [{0x8, 0x9e28, 0x4, '\x00', 0x1}, {0x4ca, 0x2, 0x0, '\x00', 0x1084}, {0x10, 0x7fffffff, 0x2, '\x00', 0x200}, {0x1ff, 0x3, 0x8, '\x00', 0x8}]}) (async, rerun: 64) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000015c0)={"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"}) 0s ago: executing program 2 (id=555): r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0xc) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x10003, &(0x7f00000000c0)='norecovery') fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) (async) fcntl$dupfd(r0, 0x0, r0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0xc) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x10003, &(0x7f00000000c0)='norecovery') (async) kernel console output (not intermixed with test programs): d=5970 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.478349][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 46.573488][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 46.634585][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 46.659428][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.662289][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.665430][ T5970] bridge_slave_0: entered allmulticast mode [ 46.668675][ T5970] bridge_slave_0: entered promiscuous mode [ 46.682264][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.684551][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.687190][ T5970] bridge_slave_1: entered allmulticast mode [ 46.689737][ T5970] bridge_slave_1: entered promiscuous mode [ 46.722014][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 46.746439][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.808410][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.826660][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.828981][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.831277][ T5968] bridge_slave_0: entered allmulticast mode [ 46.834521][ T5968] bridge_slave_0: entered promiscuous mode [ 46.867850][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.870102][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.872447][ T5968] bridge_slave_1: entered allmulticast mode [ 46.874998][ T5968] bridge_slave_1: entered promiscuous mode [ 46.905944][ T5970] team0: Port device team_slave_0 added [ 46.955653][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.960343][ T5970] team0: Port device team_slave_1 added [ 46.975482][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.978359][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.980663][ T5976] bridge_slave_0: entered allmulticast mode [ 46.983255][ T5976] bridge_slave_0: entered promiscuous mode [ 47.001622][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.018769][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.021558][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.024158][ T5976] bridge_slave_1: entered allmulticast mode [ 47.027326][ T5976] bridge_slave_1: entered promiscuous mode [ 47.042736][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.045542][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.049496][ T5982] bridge_slave_0: entered allmulticast mode [ 47.052891][ T5982] bridge_slave_0: entered promiscuous mode [ 47.056377][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.060522][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.063311][ T5982] bridge_slave_1: entered allmulticast mode [ 47.066337][ T5982] bridge_slave_1: entered promiscuous mode [ 47.137820][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.140557][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.150626][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.157134][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.175897][ T5968] team0: Port device team_slave_0 added [ 47.178737][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.180977][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.190167][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.196416][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.201648][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.205863][ T5968] team0: Port device team_slave_1 added [ 47.255484][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.322527][ T5982] team0: Port device team_slave_0 added [ 47.324861][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.329256][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.338400][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.342903][ T5976] team0: Port device team_slave_0 added [ 47.360391][ T5982] team0: Port device team_slave_1 added [ 47.363007][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.365804][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.375468][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.381333][ T5976] team0: Port device team_slave_1 added [ 47.428858][ T5970] hsr_slave_0: entered promiscuous mode [ 47.431072][ T5970] hsr_slave_1: entered promiscuous mode [ 47.447294][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.449480][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.457828][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.477630][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.479913][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.488491][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.492795][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.494951][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.503601][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.508028][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.510213][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.518268][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.588540][ T5968] hsr_slave_0: entered promiscuous mode [ 47.590713][ T5968] hsr_slave_1: entered promiscuous mode [ 47.592715][ T5968] debugfs: 'hsr0' already exists in 'hsr' [ 47.594535][ T5968] Cannot create hsr debugfs directory [ 47.639112][ T5982] hsr_slave_0: entered promiscuous mode [ 47.641335][ T5982] hsr_slave_1: entered promiscuous mode [ 47.643372][ T5982] debugfs: 'hsr0' already exists in 'hsr' [ 47.645183][ T5982] Cannot create hsr debugfs directory [ 47.724449][ T5976] hsr_slave_0: entered promiscuous mode [ 47.727712][ T5976] hsr_slave_1: entered promiscuous mode [ 47.730332][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 47.732261][ T5976] Cannot create hsr debugfs directory [ 48.067517][ T5970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.073340][ T5970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.077893][ T5970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.088373][ T5970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.115537][ T5968] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.121213][ T5968] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.126955][ T5968] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.131179][ T5968] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.174110][ T5982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.180261][ T5982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.184319][ T5982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.189694][ T5982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.217559][ T5979] Bluetooth: hci3: command tx timeout [ 48.220096][ T5979] Bluetooth: hci0: command tx timeout [ 48.222503][ T5983] Bluetooth: hci1: command tx timeout [ 48.244864][ T5976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.249165][ T5976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.254463][ T5976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.263541][ T5976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.298783][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.307287][ T5983] Bluetooth: hci2: command tx timeout [ 48.323114][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.333144][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.347816][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.350168][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.353910][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.356314][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.373540][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.379157][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.395596][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.397948][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.413610][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.415925][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.423322][ T5970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.431166][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.440911][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.446217][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.449058][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.458129][ T40] audit: type=1400 audit(1757252999.893:89): avc: denied { sys_module } for pid=5970 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.467546][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.470373][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.475532][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.487189][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.489481][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.494469][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.496775][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.552879][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.587035][ T5970] veth0_vlan: entered promiscuous mode [ 48.594676][ T5970] veth1_vlan: entered promiscuous mode [ 48.612735][ T5970] veth0_macvtap: entered promiscuous mode [ 48.616190][ T5970] veth1_macvtap: entered promiscuous mode [ 48.630374][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.638027][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.647368][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.660950][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.663625][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.670662][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.672943][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.686589][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.726042][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.729238][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.731895][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.763709][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.766159][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.766166][ T5976] veth0_vlan: entered promiscuous mode [ 48.774383][ T5968] veth0_vlan: entered promiscuous mode [ 48.783611][ T5976] veth1_vlan: entered promiscuous mode [ 48.786319][ T5968] veth1_vlan: entered promiscuous mode [ 48.792515][ T5982] veth0_vlan: entered promiscuous mode [ 48.802237][ T5982] veth1_vlan: entered promiscuous mode [ 48.807441][ T5970] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.824427][ T5968] veth0_macvtap: entered promiscuous mode [ 48.829042][ T5976] veth0_macvtap: entered promiscuous mode [ 48.839861][ T5982] veth0_macvtap: entered promiscuous mode [ 48.852694][ T5968] veth1_macvtap: entered promiscuous mode [ 48.858584][ T5976] veth1_macvtap: entered promiscuous mode [ 48.865947][ T5982] veth1_macvtap: entered promiscuous mode [ 48.879727][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.895894][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.912830][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.918851][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.930425][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.934266][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.945404][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.949574][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.960652][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.961371][ T6065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 48.963731][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.978750][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.989553][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.993473][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.010246][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.013880][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.026257][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.029992][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.032819][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.076016][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.079110][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.091598][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 49.098663][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.101426][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.112110][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.114540][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.129269][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.132520][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.146036][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.150327][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.158555][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 49.158989][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.167132][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.220276][ T6070] team0: Port device team_slave_0 removed [ 49.231685][ T6072] Bluetooth: MGMT ver 1.23 [ 49.272658][ T6077] syz_tun: entered allmulticast mode [ 49.312101][ T6088] ======================================================= [ 49.312101][ T6088] WARNING: The mand mount option has been deprecated and [ 49.312101][ T6088] and is ignored by this kernel. Remove the mand [ 49.312101][ T6088] option from the mount to silence this warning. [ 49.312101][ T6088] ======================================================= [ 49.332899][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 49.337583][ T6086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6086 comm=syz.0.9 [ 49.444596][ T6114] comedi: valid board names for 8255 driver are: [ 49.447482][ T6114] 8255 [ 49.448777][ T6114] comedi: valid board names for vmk80xx driver are: [ 49.451464][ T6114] vmk80xx [ 49.452753][ T6114] comedi: valid board names for usbduxsigma driver are: [ 49.455303][ T6114] usbduxsigma [ 49.457038][ T6114] comedi: valid board names for usbduxfast driver are: [ 49.459774][ T6114] usbduxfast [ 49.460970][ T6114] comedi: valid board names for usbdux driver are: [ 49.463012][ T6114] usbdux [ 49.463986][ T6114] comedi: valid board names for ni6501 driver are: [ 49.466205][ T6114] ni6501 [ 49.469211][ T6114] comedi: valid board names for dt9812 driver are: [ 49.471680][ T6114] dt9812 [ 49.472711][ T6114] comedi: valid board names for ni_labpc_cs driver are: [ 49.475194][ T6114] ni_labpc_cs [ 49.477688][ T6114] comedi: valid board names for ni_daq_700 driver are: [ 49.479944][ T6114] ni_daq_700 [ 49.481030][ T6114] comedi: valid board names for labpc_pci driver are: [ 49.483374][ T6114] labpc_pci [ 49.484749][ T6114] comedi: valid board names for adl_pci9118 driver are: [ 49.485539][ T6116] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 49.488289][ T6114] pci9118dg [ 49.491864][ T6114] pci9118hg [ 49.493237][ T6114] pci9118hr [ 49.495215][ T6117] netlink: 4884 bytes leftover after parsing attributes in process `syz.0.15'. [ 49.495331][ T6114] comedi: valid board names for 8255_pci driver are: [ 49.495343][ T6114] 8255_pci [ 49.495350][ T6114] comedi: valid board names for s526 driver are: [ 49.495358][ T6114] s526 [ 49.495365][ T6114] comedi: valid board names for multiq3 driver are: [ 49.499488][ T6117] ksmbd: Unknown IPC event: 1, ignore. [ 49.514969][ T6114] multiq3 [ 49.516313][ T6114] comedi: valid board names for pcmuio driver are: [ 49.519588][ T6114] pcmuio48 [ 49.520984][ T6114] pcmuio96 [ 49.522336][ T6114] comedi: valid board names for pcmmio driver are: [ 49.524974][ T6114] pcmmio [ 49.526378][ T6114] comedi: valid board names for pcmda12 driver are: [ 49.529316][ T6114] pcmda12 [ 49.530663][ T6114] comedi: valid board names for pcmad driver are: [ 49.533345][ T6114] pcmad12 [ 49.534639][ T6114] pcmad16 [ 49.536010][ T6114] comedi: valid board names for ni_labpc driver are: [ 49.538807][ T6114] lab-pc-1200 [ 49.540246][ T6114] lab-pc-1200ai [ 49.541749][ T6114] lab-pc+ [ 49.543133][ T6114] comedi: valid board names for atmio16 driver are: [ 49.545896][ T6114] atmio16 [ 49.547431][ T6114] atmio16d [ 49.547514][ T5981] Bluetooth: hci0: unexpected subevent 0x0a length: 107 > 30 [ 49.548666][ T6119] tipc: Enabling of bearer rejected, media not registered [ 49.548786][ T6114] comedi: valid board names for ni_at_ao driver are: [ 49.548797][ T6114] at-ao-6 [ 49.552851][ T5981] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 49.555068][ T6114] at-ao-10 [ 49.555079][ T6114] comedi: valid board names for ni_at_a2150 driver are: [ 49.555087][ T6114] ni_at_a2150 [ 49.555118][ T6114] comedi: valid board names for adq12b driver are: [ 49.555128][ T6114] adq12b [ 49.555134][ T6114] comedi: valid board names for mpc624 driver are: [ 49.555141][ T6114] mpc624 [ 49.555147][ T6114] comedi: valid board names for c6xdigio driver are: [ 49.555155][ T6114] c6xdigio [ 49.555161][ T6114] comedi: valid board names for aio_iiro_16 driver are: [ 49.558386][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 49.558412][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.558425][ T5981] Workqueue: hci0 hci_rx_work [ 49.558451][ T5981] Call Trace: [ 49.558458][ T5981] [ 49.558465][ T5981] dump_stack_lvl+0x16c/0x1f0 [ 49.558489][ T5981] sysfs_warn_dup+0x7f/0xa0 [ 49.558512][ T5981] sysfs_create_dir_ns+0x24b/0x2b0 [ 49.558532][ T5981] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 49.558550][ T5981] ? find_held_lock+0x2b/0x80 [ 49.558578][ T5981] ? do_raw_spin_unlock+0x172/0x230 [ 49.558600][ T5981] kobject_add_internal+0x2c4/0x9b0 [ 49.558631][ T5981] kobject_add+0x16e/0x240 [ 49.558656][ T5981] ? __pfx_kobject_add+0x10/0x10 [ 49.558681][ T5981] ? do_raw_spin_unlock+0x172/0x230 [ 49.558699][ T5981] ? kobject_put+0xab/0x5a0 [ 49.558726][ T5981] device_add+0x288/0x1aa0 [ 49.558752][ T5981] ? __pfx_dev_set_name+0x10/0x10 [ 49.558769][ T5981] ? __pfx_device_add+0x10/0x10 [ 49.558796][ T5981] ? mgmt_send_event_skb+0x2fb/0x460 [ 49.558823][ T5981] hci_conn_add_sysfs+0x17e/0x230 [ 49.558845][ T5981] le_conn_complete_evt+0x1075/0x1d70 [ 49.558873][ T5981] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 49.558891][ T5981] ? bt_warn+0xe4/0x120 [ 49.558906][ T5981] ? __pfx_bt_warn+0x10/0x10 [ 49.558928][ T5981] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 49.558949][ T5981] ? skb_pull_data+0x166/0x210 [ 49.558974][ T5981] hci_le_meta_evt+0x354/0x5e0 [ 49.558994][ T5981] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 49.559033][ T5981] hci_event_packet+0x682/0x11c0 [ 49.559052][ T5981] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 49.559072][ T5981] ? __pfx_hci_event_packet+0x10/0x10 [ 49.559091][ T5981] ? kcov_remote_start+0x3c9/0x6d0 [ 49.559109][ T5981] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.559137][ T5981] hci_rx_work+0x2c5/0x16b0 [ 49.559158][ T5981] ? rcu_is_watching+0x12/0xc0 [ 49.559185][ T5981] process_one_work+0x9cc/0x1b70 [ 49.559219][ T5981] ? __pfx_process_one_work+0x10/0x10 [ 49.559253][ T5981] ? assign_work+0x1a0/0x250 [ 49.559284][ T5981] worker_thread+0x6c8/0xf10 [ 49.559316][ T5981] ? __pfx_worker_thread+0x10/0x10 [ 49.559334][ T5981] kthread+0x3c2/0x780 [ 49.559352][ T5981] ? __pfx_kthread+0x10/0x10 [ 49.559371][ T5981] ? rcu_is_watching+0x12/0xc0 [ 49.559392][ T5981] ? __pfx_kthread+0x10/0x10 [ 49.559411][ T5981] ret_from_fork+0x5d4/0x6f0 [ 49.559429][ T5981] ? __pfx_kthread+0x10/0x10 [ 49.559446][ T5981] ret_from_fork_asm+0x1a/0x30 [ 49.559483][ T5981] [ 49.559507][ T5981] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 49.560030][ T6114] aio_iiro_16 [ 49.563727][ T5981] Bluetooth: hci0: failed to register connection device [ 49.565093][ T6114] comedi: valid board names for aio_aio12_8 driver are: [ 49.680543][ T6114] aio_aio12_8 [ 49.681919][ T6114] aio_ai12_8 [ 49.683322][ T6114] aio_ao12_4 [ 49.684752][ T6114] comedi: valid board names for fl512 driver are: [ 49.687673][ T6114] fl512 [ 49.688909][ T6114] comedi: valid board names for dmm32at driver are: [ 49.691575][ T6114] dmm32at [ 49.692879][ T6114] comedi: valid board names for dt282x driver are: [ 49.695527][ T6114] dt2821 [ 49.696915][ T6114] dt2821-f [ 49.698256][ T6114] dt2821-g [ 49.699598][ T6114] dt2823 [ 49.700846][ T6114] dt2824-pgh [ 49.702238][ T6114] dt2824-pgl [ 49.703660][ T6114] dt2825 [ 49.704907][ T6114] dt2827 [ 49.706153][ T6114] dt2828 [ 49.707471][ T6114] dt2829 [ 49.708733][ T6114] dt21-ez [ 49.710026][ T6114] dt23-ez [ 49.711315][ T6114] dt24-ez [ 49.712610][ T6114] dt24-ez-pgl [ 49.714028][ T6114] comedi: valid board names for dt2817 driver are: [ 49.716888][ T6114] dt2817 [ 49.718177][ T6114] comedi: valid board names for dt2815 driver are: [ 49.720832][ T6114] dt2815 [ 49.722078][ T6114] comedi: valid board names for dt2814 driver are: [ 49.724724][ T6114] dt2814 [ 49.725960][ T6114] comedi: valid board names for dt2811 driver are: [ 49.728749][ T6114] dt2811-pgh [ 49.730160][ T6114] dt2811-pgl [ 49.731568][ T6114] comedi: valid board names for dt2801 driver are: [ 49.734294][ T6114] dt2801 [ 49.735567][ T6114] comedi: valid board names for das6402 driver are: [ 49.739319][ T6114] das6402-12 [ 49.740657][ T6114] das6402-16 [ 49.741799][ T6114] comedi: valid board names for das1800 driver are: [ 49.744036][ T6114] das-1701st [ 49.745114][ T6114] das-1701st-da [ 49.746280][ T6114] das-1702st [ 49.747701][ T6114] das-1702st-da [ 49.749124][ T6114] das-1702hr [ 49.750193][ T6114] das-1702hr-da [ 49.751364][ T6114] das-1701ao [ 49.752448][ T6114] das-1702ao [ 49.753521][ T6114] das-1801st [ 49.754593][ T6114] das-1801st-da [ 49.755780][ T6114] das-1802st [ 49.757115][ T6114] das-1802st-da [ 49.758571][ T6114] das-1802hr [ 49.759623][ T6114] das-1802hr-da [ 49.760752][ T6114] das-1801hc [ 49.761814][ T6114] das-1802hc [ 49.762878][ T6114] das-1801ao [ 49.763953][ T6114] das-1802ao [ 49.765015][ T6114] comedi: valid board names for das800 driver are: [ 49.767237][ T6114] das-800 [ 49.768251][ T6114] cio-das800 [ 49.769347][ T6114] das-801 [ 49.770344][ T6114] cio-das801 [ 49.771419][ T6114] das-802 [ 49.772421][ T6114] cio-das802 [ 49.773495][ T6114] cio-das802/16 [ 49.774637][ T6114] comedi: valid board names for isa-das08 driver are: [ 49.777018][ T6114] isa-das08 [ 49.778435][ T6114] das08-pgm [ 49.779607][ T6114] das08-pgh [ 49.780668][ T6114] das08-pgl [ 49.781713][ T6114] das08-aoh [ 49.782757][ T6114] das08-aol [ 49.783810][ T6114] das08-aom [ 49.784850][ T6114] das08/jr-ao [ 49.786006][ T6114] das08jr-16-ao [ 49.787459][ T6114] pc104-das08 [ 49.788781][ T6114] das08jr/16 [ 49.790047][ T6114] comedi: valid board names for das16m1 driver are: [ 49.792451][ T6114] das16m1 [ 49.793637][ T6114] comedi: valid board names for dac02 driver are: [ 49.796022][ T6114] dac02 [ 49.797295][ T6114] comedi: valid board names for rti802 driver are: [ 49.799503][ T6114] rti802 [ 49.800464][ T6114] comedi: valid board names for rti800 driver are: [ 49.802478][ T6114] rti800 [ 49.803428][ T6114] rti815 [ 49.804380][ T6114] comedi: valid board names for pcm3724 driver are: [ 49.806454][ T6114] pcm3724 [ 49.807668][ T6114] comedi: valid board names for pcl818 driver are: [ 49.809826][ T6114] pcl818l [ 49.810818][ T6114] pcl818h [ 49.811818][ T6114] pcl818hd [ 49.812836][ T6114] pcl818hg [ 49.813851][ T6114] pcl818 [ 49.814812][ T6114] pcl718 [ 49.815789][ T6114] pcm3718 [ 49.817651][ T6114] comedi: valid board names for pcl816 driver are: [ 49.819796][ T6114] pcl816 [ 49.820742][ T6114] pcl814b [ 49.821734][ T6114] comedi: valid board names for pcl812 driver are: [ 49.823763][ T6114] pcl812 [ 49.824710][ T6114] pcl812pg [ 49.825754][ T6114] acl8112pg [ 49.827104][ T6114] acl8112dg [ 49.828224][ T6114] acl8112hg [ 49.829271][ T6114] a821pgl [ 49.830263][ T6114] a821pglnda [ 49.831335][ T6114] a821pgh [ 49.832340][ T6114] a822pgl [ 49.833336][ T6114] a822pgh [ 49.834307][ T6114] a823pgl [ 49.835299][ T6114] a823pgh [ 49.836321][ T6114] pcl813 [ 49.837629][ T6114] pcl813b [ 49.838632][ T6114] acl8113 [ 49.839649][ T6114] iso813 [ 49.840647][ T6114] acl8216 [ 49.841626][ T6114] a826pg [ 49.842648][ T6114] comedi: valid board names for pcl730 driver are: [ 49.844705][ T6114] pcl730 [ 49.845649][ T6114] iso730 [ 49.846714][ T6114] acl7130 [ 49.847870][ T6114] pcm3730 [ 49.848890][ T6114] pcl725 [ 49.849831][ T6114] p8r8dio [ 49.850855][ T6114] acl7225b [ 49.851877][ T6114] p16r16dio [ 49.852914][ T6114] pcl733 [ 49.853860][ T6114] pcl734 [ 49.854806][ T6114] opmm-1616-xt [ 49.855927][ T6114] pearl-mm-p [ 49.857253][ T6114] ir104-pbf [ 49.858430][ T6114] comedi: valid board names for pcl726 driver are: [ 49.860510][ T6114] pcl726 [ 49.861455][ T6114] pcl727 [ 49.862394][ T6114] pcl728 [ 49.863337][ T6114] acl6126 [ 49.864481][ T6114] acl6128 [ 49.865466][ T6114] comedi: valid board names for pcl724 driver are: [ 49.867874][ T6114] pcl724 [ 49.868843][ T6114] pcl722 [ 49.869855][ T6114] pcl731 [ 49.870799][ T6114] acl7122 [ 49.871796][ T6114] acl7124 [ 49.872783][ T6114] pet48dio [ 49.873796][ T6114] pcmio48 [ 49.874779][ T6114] onyx-mm-dio [ 49.875896][ T6114] comedi: valid board names for pcl711 driver are: [ 49.878313][ T6114] pcl711 [ 49.879293][ T6114] pcl711b [ 49.880376][ T6114] acl8112hg [ 49.881970][ T6114] acl8112dg [ 49.883055][ T6114] comedi: valid board names for amplc_pc263 driver are: [ 49.885208][ T6114] pc263 [ 49.886131][ T6114] comedi: valid board names for amplc_pc236 driver are: [ 49.888657][ T6114] pc36at [ 49.889635][ T6114] comedi: valid board names for amplc_dio200 driver are: [ 49.891934][ T6114] pc212e [ 49.892904][ T6114] pc214e [ 49.893872][ T6114] pc215e [ 49.894837][ T6114] pc218e [ 49.895841][ T6114] pc272e [ 49.897033][ T6114] comedi: valid board names for comedi_parport driver are: [ 49.899450][ T6114] comedi_parport [ 49.900672][ T6114] comedi: valid board names for comedi_test driver are: [ 49.902901][ T6114] comedi_test [ 49.904023][ T6114] comedi: valid board names for comedi_bond driver are: [ 49.906208][ T6114] comedi_bond [ 49.907706][ T6114] comedi: valid board names for 8255 driver are: [ 49.910247][ T6114] 8255 [ 49.911440][ T6114] comedi: valid board names for vmk80xx driver are: [ 49.914159][ T6114] vmk80xx [ 49.915413][ T6114] comedi: valid board names for usbduxsigma driver are: [ 49.917846][ T6114] usbduxsigma [ 49.919079][ T6114] comedi: valid board names for usbduxfast driver are: [ 49.921289][ T6114] usbduxfast [ 49.922374][ T6114] comedi: valid board names for usbdux driver are: [ 49.924472][ T6114] usbdux [ 49.925446][ T6114] comedi: valid board names for ni6501 driver are: [ 49.927660][ T6114] ni6501 [ 49.928632][ T6114] comedi: valid board names for dt9812 driver are: [ 49.930696][ T6114] dt9812 [ 49.931688][ T6114] comedi: valid board names for ni_labpc_cs driver are: [ 49.933877][ T6114] ni_labpc_cs [ 49.934992][ T6114] comedi: valid board names for ni_daq_700 driver are: [ 49.937610][ T6114] ni_daq_700 [ 49.938713][ T6114] comedi: valid board names for labpc_pci driver are: [ 49.940926][ T6114] labpc_pci [ 49.942022][ T6114] comedi: valid board names for adl_pci9118 driver are: [ 49.944312][ T6114] pci9118dg [ 49.945391][ T6114] pci9118hg [ 49.946461][ T6114] pci9118hr [ 49.947620][ T6114] comedi: valid board names for 8255_pci driver are: [ 49.949779][ T6114] 8255_pci [ 49.950853][ T6114] comedi: valid board names for s526 driver are: [ 49.952923][ T6114] s526 [ 49.953859][ T6114] comedi: valid board names for multiq3 driver are: [ 49.956057][ T6114] multiq3 [ 49.957286][ T6114] comedi: valid board names for pcmuio driver are: [ 49.959516][ T6114] pcmuio48 [ 49.960548][ T6114] pcmuio96 [ 49.961553][ T6114] comedi: valid board names for pcmmio driver are: [ 49.963596][ T6114] pcmmio [ 49.964553][ T6114] comedi: valid board names for pcmda12 driver are: [ 49.966717][ T6114] pcmda12 [ 49.968020][ T6114] comedi: valid board names for pcmad driver are: [ 49.970233][ T6114] pcmad12 [ 49.971188][ T6114] pcmad16 [ 49.972266][ T6114] comedi: valid board names for ni_labpc driver are: [ 49.974592][ T6114] lab-pc-1200 [ 49.975839][ T6114] lab-pc-1200ai [ 49.977481][ T6114] lab-pc+ [ 49.978573][ T6114] comedi: valid board names for atmio16 driver are: [ 49.980639][ T6114] atmio16 [ 49.981619][ T6114] atmio16d [ 49.982667][ T6114] comedi: valid board names for ni_at_ao driver are: [ 49.985086][ T6114] at-ao-6 [ 49.986088][ T6114] at-ao-10 [ 49.987306][ T6114] comedi: valid board names for ni_at_a2150 driver are: [ 49.989944][ T6114] ni_at_a2150 [ 49.990982][ T6114] comedi: valid board names for adq12b driver are: [ 49.993089][ T6114] adq12b [ 49.994087][ T6114] comedi: valid board names for mpc624 driver are: [ 49.996095][ T6114] mpc624 [ 49.997173][ T6114] comedi: valid board names for c6xdigio driver are: [ 49.999202][ T6114] c6xdigio [ 50.000215][ T6114] comedi: valid board names for aio_iiro_16 driver are: [ 50.002281][ T6114] aio_iiro_16 [ 50.003398][ T6114] comedi: valid board names for aio_aio12_8 driver are: [ 50.005553][ T6114] aio_aio12_8 [ 50.006770][ T6114] aio_ai12_8 [ 50.007836][ T6114] aio_ao12_4 [ 50.008892][ T6114] comedi: valid board names for fl512 driver are: [ 50.010873][ T6114] fl512 [ 50.011797][ T6114] comedi: valid board names for dmm32at driver are: [ 50.013874][ T6114] dmm32at [ 50.014864][ T6114] comedi: valid board names for dt282x driver are: [ 50.017058][ T6114] dt2821 [ 50.018003][ T6114] dt2821-f [ 50.019020][ T6114] dt2821-g [ 50.020034][ T6114] dt2823 [ 50.020970][ T6114] dt2824-pgh [ 50.022023][ T6114] dt2824-pgl [ 50.023129][ T6114] dt2825 [ 50.024116][ T6114] dt2827 [ 50.025544][ T6114] dt2828 [ 50.027029][ T6114] dt2829 [ 50.028265][ T6114] dt21-ez [ 50.029569][ T6114] dt23-ez [ 50.030888][ T6114] dt24-ez [ 50.032224][ T6114] dt24-ez-pgl [ 50.033674][ T6114] comedi: valid board names for dt2817 driver are: [ 50.036357][ T6114] dt2817 [ 50.037789][ T6114] comedi: valid board names for dt2815 driver are: [ 50.040509][ T6114] dt2815 [ 50.041769][ T6114] comedi: valid board names for dt2814 driver are: [ 50.044425][ T6114] dt2814 [ 50.045686][ T6114] comedi: valid board names for dt2811 driver are: [ 50.048437][ T6114] dt2811-pgh [ 50.049812][ T6114] dt2811-pgl [ 50.051162][ T6114] comedi: valid board names for dt2801 driver are: [ 50.053789][ T6114] dt2801 [ 50.054066][ T34] IPVS: starting estimator thread 0... [ 50.054921][ T6114] comedi: valid board names for das6402 driver are: [ 50.054931][ T6114] das6402-12 [ 50.054936][ T6114] das6402-16 [ 50.062700][ T6114] comedi: valid board names for das1800 driver are: [ 50.065331][ T6114] das-1701st [ 50.066874][ T6114] das-1701st-da [ 50.068336][ T6114] das-1702st [ 50.069753][ T6114] das-1702st-da [ 50.071245][ T6114] das-1702hr [ 50.072654][ T6114] das-1702hr-da [ 50.074404][ T6114] das-1701ao [ 50.075897][ T6114] das-1702ao [ 50.077489][ T6114] das-1801st [ 50.079034][ T6114] das-1801st-da [ 50.080721][ T6114] das-1802st [ 50.082149][ T6114] das-1802st-da [ 50.083685][ T6114] das-1802hr [ 50.085902][ T6114] das-1802hr-da [ 50.087547][ T6114] das-1801hc [ 50.088989][ T6114] das-1802hc [ 50.090420][ T6114] das-1801ao [ 50.092551][ T6114] das-1802ao [ 50.093686][ T6114] comedi: valid board names for das800 driver are: [ 50.095886][ T6114] das-800 [ 50.097570][ T6114] cio-das800 [ 50.099069][ T6114] das-801 [ 50.100507][ T6114] cio-das801 [ 50.102041][ T6114] das-802 [ 50.103456][ T6114] cio-das802 [ 50.104955][ T6114] cio-das802/16 [ 50.107188][ T6114] comedi: valid board names for isa-das08 driver are: [ 50.110010][ T6114] isa-das08 [ 50.111513][ T6114] das08-pgm [ 50.112959][ T6114] das08-pgh [ 50.114347][ T6114] das08-pgl [ 50.115733][ T6114] das08-aoh [ 50.120117][ T6114] das08-aol [ 50.121546][ T6114] das08-aom [ 50.122927][ T6114] das08/jr-ao [ 50.124396][ T6114] das08jr-16-ao [ 50.125884][ T6114] pc104-das08 [ 50.127590][ T6114] das08jr/16 [ 50.128691][ T6114] comedi: valid board names for das16m1 driver are: [ 50.130816][ T6114] das16m1 [ 50.131864][ T6114] comedi: valid board names for dac02 driver are: [ 50.133887][ T6114] dac02 [ 50.134850][ T6114] comedi: valid board names for rti802 driver are: [ 50.137762][ T6114] rti802 [ 50.139047][ T6114] comedi: valid board names for rti800 driver are: [ 50.141337][ T6114] rti800 [ 50.142311][ T6114] rti815 [ 50.143292][ T6114] comedi: valid board names for pcm3724 driver are: [ 50.145452][ T6114] pcm3724 [ 50.146880][ T6114] comedi: valid board names for pcl818 driver are: [ 50.149562][ T6114] pcl818l [ 50.150950][ T6114] pcl818h [ 50.152425][ T6114] pcl818hd [ 50.153865][ T6114] pcl818hg [ 50.155305][ T6114] pcl818 [ 50.158892][ T6114] pcl718 [ 50.160314][ T6114] pcm3718 [ 50.161710][ T6114] comedi: valid board names for pcl816 driver are: [ 50.165501][ T6114] pcl816 [ 50.166812][ T6122] IPVS: using max 29 ests per chain, 69600 per kthread [ 50.168563][ T6114] pcl814b [ 50.170970][ T6114] comedi: valid board names for pcl812 driver are: [ 50.172938][ T6114] pcl812 [ 50.173868][ T6114] pcl812pg [ 50.174912][ T6114] acl8112pg [ 50.176014][ T6114] acl8112dg [ 50.178658][ T6114] acl8112hg [ 50.179870][ T6114] a821pgl [ 50.180899][ T6114] a821pglnda [ 50.181953][ T6114] a821pgh [ 50.182977][ T6114] a822pgl [ 50.183996][ T6114] a822pgh [ 50.184962][ T6114] a823pgl [ 50.186033][ T6114] a823pgh [ 50.187312][ T6114] pcl813 [ 50.188612][ T6114] pcl813b [ 50.189707][ T6114] acl8113 [ 50.190788][ T6114] iso813 [ 50.191812][ T6114] acl8216 [ 50.192846][ T6114] a826pg [ 50.193876][ T6114] comedi: valid board names for pcl730 driver are: [ 50.194149][ T6135] binder: 6134:6135 ioctl c018620c 200000000000 returned -22 [ 50.196577][ T6114] pcl730 [ 50.196586][ T6114] iso730 [ 50.196592][ T6114] acl7130 [ 50.196598][ T6114] pcm3730 [ 50.196605][ T6114] pcl725 [ 50.196610][ T6114] p8r8dio [ 50.196616][ T6114] acl7225b [ 50.196621][ T6114] p16r16dio [ 50.196626][ T6114] pcl733 [ 50.210365][ T6114] pcl734 [ 50.211670][ T6114] opmm-1616-xt [ 50.213150][ T6114] pearl-mm-p [ 50.214574][ T6114] ir104-pbf [ 50.215974][ T6114] comedi: valid board names for pcl726 driver are: [ 50.220656][ T6114] pcl726 [ 50.221935][ T6114] pcl727 [ 50.223193][ T6114] pcl728 [ 50.224470][ T6114] acl6126 [ 50.225778][ T6114] acl6128 [ 50.228316][ T6114] comedi: valid board names for pcl724 driver are: [ 50.230676][ T6114] pcl724 [ 50.231611][ T6114] pcl722 [ 50.232566][ T6114] pcl731 [ 50.233513][ T6114] acl7122 [ 50.234471][ T6114] acl7124 [ 50.235435][ T6114] pet48dio [ 50.236550][ T6114] pcmio48 [ 50.237514][ T6114] onyx-mm-dio [ 50.238585][ T6114] comedi: valid board names for pcl711 driver are: [ 50.240652][ T6114] pcl711 [ 50.241593][ T6114] pcl711b [ 50.242573][ T6114] acl8112hg [ 50.243731][ T6114] acl8112dg [ 50.244776][ T6114] comedi: valid board names for amplc_pc263 driver are: [ 50.247740][ T6114] pc263 [ 50.248911][ T6114] comedi: valid board names for amplc_pc236 driver are: [ 50.251597][ T6114] pc36at [ 50.252792][ T6114] comedi: valid board names for amplc_dio200 driver are: [ 50.255597][ T6114] pc212e [ 50.257003][ T6114] pc214e [ 50.258288][ T6114] pc215e [ 50.259582][ T6114] pc218e [ 50.260860][ T6114] pc272e [ 50.262109][ T6114] comedi: valid board names for comedi_parport driver are: [ 50.264833][ T6114] comedi_parport [ 50.266041][ T6114] comedi: valid board names for comedi_test driver are: [ 50.269239][ T6114] comedi_test [ 50.270645][ T6114] comedi: valid board names for comedi_bond driver are: [ 50.273292][ T6114] comedi_bond [ 50.274503][ T6114] comedi: valid board names for 8255 driver are: [ 50.276593][ T6114] 8255 [ 50.277531][ T6114] comedi: valid board names for vmk80xx driver are: [ 50.279587][ T6114] vmk80xx [ 50.280593][ T6114] comedi: valid board names for usbduxsigma driver are: [ 50.282891][ T6114] usbduxsigma [ 50.284007][ T6114] comedi: valid board names for usbduxfast driver are: [ 50.286174][ T6114] usbduxfast [ 50.288615][ T6114] comedi: valid board names for usbdux driver are: [ 50.292259][ T6114] usbdux [ 50.293587][ T6114] comedi: valid board names for ni6501 driver are: [ 50.296436][ T6114] ni6501 [ 50.296688][ T5981] Bluetooth: hci1: command tx timeout [ 50.298094][ T6114] comedi: valid board names for dt9812 driver are: [ 50.299236][ T5981] Bluetooth: hci0: command tx timeout [ 50.301565][ T6114] dt9812 [ 50.302978][ T5981] Bluetooth: hci3: command tx timeout [ 50.304010][ T6114] comedi: valid board names for ni_labpc_cs driver are: [ 50.309493][ T6114] ni_labpc_cs [ 50.310619][ T6114] comedi: valid board names for ni_daq_700 driver are: [ 50.312747][ T6114] ni_daq_700 [ 50.313804][ T6114] comedi: valid board names for labpc_pci driver are: [ 50.316012][ T6114] labpc_pci [ 50.317618][ T6114] comedi: valid board names for adl_pci9118 driver are: [ 50.320514][ T6114] pci9118dg [ 50.321891][ T6114] pci9118hg [ 50.323271][ T6114] pci9118hr [ 50.324694][ T6114] comedi: valid board names for 8255_pci driver are: [ 50.328920][ T6114] 8255_pci [ 50.330321][ T6114] comedi: valid board names for s526 driver are: [ 50.333048][ T6114] s526 [ 50.335251][ T6114] comedi: valid board names for multiq3 driver are: [ 50.336622][ T2302] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.341986][ T6114] multiq3 [ 50.342996][ T6114] comedi: valid board names for pcmuio driver are: [ 50.345265][ T6114] pcmuio48 [ 50.346326][ T6114] pcmuio96 [ 50.348765][ T6114] comedi: valid board names for pcmmio driver are: [ 50.350793][ T6114] pcmmio [ 50.351760][ T6114] comedi: valid board names for pcmda12 driver are: [ 50.353812][ T6114] pcmda12 [ 50.354798][ T6114] comedi: valid board names for pcmad driver are: [ 50.356992][ T6114] pcmad12 [ 50.358164][ T6114] pcmad16 [ 50.359282][ T6114] comedi: valid board names for ni_labpc driver are: [ 50.361367][ T6114] lab-pc-1200 [ 50.362471][ T6114] lab-pc-1200ai [ 50.363670][ T6114] lab-pc+ [ 50.364679][ T6114] comedi: valid board names for atmio16 driver are: [ 50.369061][ T6114] atmio16 [ 50.370101][ T6114] atmio16d [ 50.371210][ T6114] comedi: valid board names for ni_at_ao driver are: [ 50.374087][ T6114] at-ao-6 [ 50.375440][ T6114] at-ao-10 [ 50.376740][ T5979] Bluetooth: hci2: command tx timeout [ 50.379293][ T6114] comedi: valid board names for ni_at_a2150 driver are: [ 50.381799][ T6114] ni_at_a2150 [ 50.383233][ T6114] comedi: valid board names for adq12b driver are: [ 50.385887][ T6114] adq12b [ 50.387228][ T6114] comedi: valid board names for mpc624 driver are: [ 50.389875][ T6114] mpc624 [ 50.390992][ T6114] comedi: valid board names for c6xdigio driver are: [ 50.392270][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 50.393407][ T6114] c6xdigio [ 50.396951][ T6114] comedi: valid board names for aio_iiro_16 driver are: [ 50.399718][ T6114] aio_iiro_16 [ 50.401112][ T6114] comedi: valid board names for aio_aio12_8 driver are: [ 50.403860][ T6114] aio_aio12_8 [ 50.405249][ T6114] aio_ai12_8 [ 50.407673][ T6114] aio_ao12_4 [ 50.409032][ T6114] comedi: valid board names for fl512 driver are: [ 50.409134][ T6147] syz_tun: refused to change device tx_queue_len [ 50.411672][ T6114] fl512 [ 50.411681][ T6114] comedi: valid board names for dmm32at driver are: [ 50.417453][ T6114] dmm32at [ 50.418444][ T6114] comedi: valid board names for dt282x driver are: [ 50.420491][ T6114] dt2821 [ 50.421647][ T6114] dt2821-f [ 50.423021][ T6114] dt2821-g [ 50.424387][ T6114] dt2823 [ 50.425685][ T6114] dt2824-pgh [ 50.427108][ T6114] dt2824-pgl [ 50.428190][ T6114] dt2825 [ 50.429124][ T6114] dt2827 [ 50.430057][ T6114] dt2828 [ 50.431077][ T6114] dt2829 [ 50.432343][ T6114] dt21-ez [ 50.433504][ T6114] dt23-ez [ 50.434484][ T6114] dt24-ez [ 50.435469][ T6114] dt24-ez-pgl [ 50.436993][ T6114] comedi: valid board names for dt2817 driver are: [ 50.439709][ T6114] dt2817 [ 50.440670][ T6114] comedi: valid board names for dt2815 driver are: [ 50.442729][ T6114] dt2815 [ 50.443723][ T6114] comedi: valid board names for dt2814 driver are: [ 50.445738][ T6114] dt2814 [ 50.446724][ T6114] comedi: valid board names for dt2811 driver are: [ 50.448640][ T6114] dt2811-pgh [ 50.449674][ T6114] dt2811-pgl [ 50.451035][ T6114] comedi: valid board names for dt2801 driver are: [ 50.453708][ T6114] dt2801 [ 50.454780][ T6114] comedi: valid board names for das6402 driver are: [ 50.457190][ T6114] das6402-12 [ 50.458261][ T6114] das6402-16 [ 50.459329][ T6114] comedi: valid board names for das1800 driver are: [ 50.461591][ T6114] das-1701st [ 50.462982][ T6114] das-1701st-da [ 50.464501][ T6114] das-1702st [ 50.465945][ T6114] das-1702st-da [ 50.467919][ T6114] das-1702hr [ 50.469016][ T6114] das-1702hr-da [ 50.470189][ T6114] das-1701ao [ 50.471601][ T6114] das-1702ao [ 50.472794][ T6114] das-1801st [ 50.473890][ T6114] das-1801st-da [ 50.475028][ T6114] das-1802st [ 50.476406][ T6114] das-1802st-da [ 50.478110][ T6114] das-1802hr [ 50.479552][ T6114] das-1802hr-da [ 50.481076][ T6114] das-1801hc [ 50.482486][ T6114] das-1802hc [ 50.483909][ T6114] das-1801ao [ 50.485319][ T6114] das-1802ao [ 50.486783][ T2302] usb 8-1: Using ep0 maxpacket: 8 [ 50.488936][ T6114] comedi: valid board names for das800 driver are: [ 50.491593][ T6114] das-800 [ 50.492627][ T6114] cio-das800 [ 50.493681][ T6114] das-801 [ 50.494654][ T2302] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 50.494668][ T6114] cio-das801 [ 50.494674][ T6114] das-802 [ 50.499381][ T2302] usb 8-1: config 0 has no interface number 0 [ 50.500738][ T6114] cio-das802 [ 50.502229][ T2302] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 50.503648][ T6114] cio-das802/16 [ 50.507249][ T2302] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 50.508183][ T6114] comedi: valid board names for isa-das08 driver are: [ 50.511732][ T2302] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 50.511747][ T2302] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 50.513877][ T6114] isa-das08 [ 50.517455][ T2302] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 50.522012][ T6114] das08-pgm [ 50.523061][ T2302] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.527058][ T6114] das08-pgh [ 50.531195][ T2302] usb 8-1: config 0 descriptor?? [ 50.535207][ T6114] das08-pgl [ 50.535217][ T6114] das08-aoh [ 50.535224][ T6114] das08-aol [ 50.535230][ T6114] das08-aom [ 50.535236][ T6114] das08/jr-ao [ 50.535242][ T6114] das08jr-16-ao [ 50.535248][ T6114] pc104-das08 [ 50.535254][ T6114] das08jr/16 [ 50.535260][ T6114] comedi: valid board names for das16m1 driver are: [ 50.535268][ T6114] das16m1 [ 50.535274][ T6114] comedi: valid board names for dac02 driver are: [ 50.535281][ T6114] dac02 [ 50.535287][ T6114] comedi: valid board names for rti802 driver are: [ 50.535294][ T6114] rti802 [ 50.535300][ T6114] comedi: valid board names for rti800 driver are: [ 50.535308][ T6114] rti800 [ 50.535314][ T6114] rti815 [ 50.535320][ T6114] comedi: valid board names for pcm3724 driver are: [ 50.535327][ T6114] pcm3724 [ 50.535333][ T6114] comedi: valid board names for pcl818 driver are: [ 50.535341][ T6114] pcl818l [ 50.535347][ T6114] pcl818h [ 50.535353][ T6114] pcl818hd [ 50.535359][ T6114] pcl818hg [ 50.535365][ T6114] pcl818 [ 50.535370][ T6114] pcl718 [ 50.535375][ T6114] pcm3718 [ 50.535381][ T6114] comedi: valid board names for pcl816 driver are: [ 50.535388][ T6114] pcl816 [ 50.535393][ T6114] pcl814b [ 50.541825][ T2302] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 50.542690][ T6114] comedi: valid board names for pcl812 driver are: [ 50.583412][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 50.585390][ T6114] pcl812 [ 50.591733][ T6114] pcl812pg [ 50.591741][ T6114] acl8112pg [ 50.591744][ T6114] acl8112dg [ 50.591748][ T6114] acl8112hg [ 50.591751][ T6114] a821pgl [ 50.591755][ T6114] a821pglnda [ 50.591758][ T6114] a821pgh [ 50.591762][ T6114] a822pgl [ 50.591765][ T6114] a822pgh [ 50.591768][ T6114] a823pgl [ 50.591772][ T6114] a823pgh [ 50.591775][ T6114] pcl813 [ 50.591778][ T6114] pcl813b [ 50.591782][ T6114] acl8113 [ 50.591785][ T6114] iso813 [ 50.591788][ T6114] acl8216 [ 50.591792][ T6114] a826pg [ 50.591796][ T6114] comedi: valid board names for pcl730 driver are: [ 50.591800][ T6114] pcl730 [ 50.591804][ T6114] iso730 [ 50.591807][ T6114] acl7130 [ 50.591811][ T6114] pcm3730 [ 50.591814][ T6114] pcl725 [ 50.591817][ T6114] p8r8dio [ 50.591821][ T6114] acl7225b [ 50.591824][ T6114] p16r16dio [ 50.591827][ T6114] pcl733 [ 50.591831][ T6114] pcl734 [ 50.591834][ T6114] opmm-1616-xt [ 50.591838][ T6114] pearl-mm-p [ 50.591841][ T6114] ir104-pbf [ 50.591845][ T6114] comedi: valid board names for pcl726 driver are: [ 50.591849][ T6114] pcl726 [ 50.591852][ T6114] pcl727 [ 50.591856][ T6114] pcl728 [ 50.591859][ T6114] acl6126 [ 50.591862][ T6114] acl6128 [ 50.591866][ T6114] comedi: valid board names for pcl724 driver are: [ 50.591870][ T6114] pcl724 [ 50.591874][ T6114] pcl722 [ 50.591877][ T6114] pcl731 [ 50.591880][ T6114] acl7122 [ 50.591884][ T6114] acl7124 [ 50.591887][ T6114] pet48dio [ 50.591890][ T6114] pcmio48 [ 50.591894][ T6114] onyx-mm-dio [ 50.591897][ T6114] comedi: valid board names for pcl711 driver are: [ 50.591902][ T6114] pcl711 [ 50.591905][ T6114] pcl711b [ 50.591909][ T6114] acl8112hg [ 50.591912][ T6114] acl8112dg [ 50.591915][ T6114] comedi: valid board names for amplc_pc263 driver are: [ 50.591920][ T6114] pc263 [ 50.591924][ T6114] comedi: valid board names for amplc_pc236 driver are: [ 50.591928][ T6114] pc36at [ 50.591932][ T6114] comedi: valid board names for amplc_dio200 driver are: [ 50.591936][ T6114] pc212e [ 50.591940][ T6114] pc214e [ 50.591943][ T6114] pc215e [ 50.591946][ T6114] pc218e [ 50.591950][ T6114] pc272e [ 50.591953][ T6114] comedi: valid board names for comedi_parport driver are: [ 50.591958][ T6114] comedi_parport [ 50.591961][ T6114] comedi: valid board names for comedi_test driver are: [ 50.591966][ T6114] comedi_test [ 50.591969][ T6114] comedi: valid board names for comedi_bond driver are: [ 50.591974][ T6114] comedi_bond [ 50.737838][ T6174] 9pnet_fd: p9_fd_create_unix (6174): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 50.743942][ T6162] could not allocate digest TFM handle xcbc(sm4-ce) [ 50.893198][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 50.893209][ T40] audit: type=1400 audit(1757253002.323:193): avc: denied { create } for pid=6197 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.903304][ T40] audit: type=1400 audit(1757253002.323:194): avc: denied { read } for pid=6197 comm="syz.1.42" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.913325][ T40] audit: type=1400 audit(1757253002.323:195): avc: denied { open } for pid=6197 comm="syz.1.42" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.048034][ T838] usb 8-1: USB disconnect, device number 2 [ 51.078013][ T838] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 51.086725][ T40] audit: type=1400 audit(1757253002.523:196): avc: denied { connect } for pid=6202 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.114487][ T40] audit: type=1400 audit(1757253002.543:197): avc: denied { create } for pid=6197 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.115327][ T6198] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.256690][ T5983] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 51.651192][ T40] audit: type=1400 audit(1757253003.083:198): avc: denied { read } for pid=6205 comm="syz.3.44" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 51.660624][ T40] audit: type=1400 audit(1757253003.083:199): avc: denied { open } for pid=6205 comm="syz.3.44" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 51.671374][ T40] audit: type=1400 audit(1757253003.093:200): avc: denied { create } for pid=6207 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 51.698943][ T40] audit: type=1400 audit(1757253003.133:201): avc: denied { shutdown } for pid=6207 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.708302][ T40] audit: type=1400 audit(1757253003.133:202): avc: denied { map } for pid=6205 comm="syz.3.44" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 51.744522][ T6212] [SRW: renamed from lo (while UP) [ 51.768223][ T6214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.789886][ T6217] netlink: 'syz.3.48': attribute type 30 has an invalid length. [ 51.912527][ T6224] tmpfs: Unknown parameter 'usrquota' [ 51.915094][ T6224] overlayfs: failed to resolve './file0': -2 [ 51.934484][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 51.991731][ T6233] binder: 6219:6233 ioctl 4b68 200000000280 returned -22 [ 52.016148][ T6235] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 52.241293][ T6247] batman_adv: batadv0: Adding interface: ipvlan2 [ 52.243404][ T6247] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.251325][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.254656][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.257756][ T6247] batman_adv: batadv0: Interface activated: ipvlan2 [ 52.260816][ T6247] [U] [ 52.261734][ T6247] [U] [ 52.262617][ T6247] [U] [ 52.263525][ T6247] [U] [ 52.264545][ T6247] [U] [ 52.265435][ T6247] [U] [ 52.266312][ T6247] [U] [ 52.267192][ T6247] [U] [ 52.268152][ T6246] batman_adv: batadv0: Adding interface: ipvlan3 [ 52.268494][ T6247] [U] [ 52.270753][ T6246] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.271638][ T6247] [U] [ 52.271662][ T6247] [U] [ 52.283389][ T6247] [U] [ 52.283793][ T6246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.285651][ T6247] [U] [ 52.290119][ T6247] [U] [ 52.290656][ T6246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.290985][ T6247] [U] [ 52.294917][ T6246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 52.295737][ T6247] [U] [ 52.299697][ T6246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.304263][ T6246] batman_adv: batadv0: Interface activated: ipvlan3 [ 52.308696][ T6245] [U] [ 52.386688][ T5979] Bluetooth: hci0: command 0x040f tx timeout [ 52.386696][ T5981] Bluetooth: hci1: command tx timeout [ 52.387807][ T5983] Bluetooth: hci3: command tx timeout [ 52.457179][ T5983] Bluetooth: hci2: command tx timeout [ 52.626607][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 52.686835][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 52.690650][ T6263] openvswitch: netlink: Unknown nsh attribute 0 [ 52.692693][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.798330][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 52.801626][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 52.805356][ T24] usb 5-1: config 6 has an invalid interface number: 158 but max is 0 [ 52.808027][ T24] usb 5-1: config 6 has no interface number 0 [ 52.809967][ T24] usb 5-1: config 6 interface 158 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 52.813314][ T24] usb 5-1: config 6 interface 158 has no altsetting 0 [ 52.816998][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 52.819968][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.822518][ T24] usb 5-1: Product: syz [ 52.823905][ T24] usb 5-1: Manufacturer: syz [ 52.825398][ T24] usb 5-1: SerialNumber: syz [ 52.830001][ T6256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.044309][ T24] rtsx_usb 5-1:6.158: probe with driver rtsx_usb failed with error -71 [ 53.052035][ T24] usb 5-1: USB disconnect, device number 2 [ 53.294933][ T6270] netlink: 'syz.2.63': attribute type 39 has an invalid length. [ 53.460898][ T6276] netlink: 596 bytes leftover after parsing attributes in process `syz.2.64'. [ 53.642966][ T6291] syz.1.69 uses obsolete (PF_INET,SOCK_PACKET) [ 53.647981][ T6291] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 53.684383][ T6299] tipc: Started in network mode [ 53.686065][ T6299] tipc: Node identity ffecff00000000000000000000000001, cluster identity 4711 [ 53.690260][ T6299] tipc: Enabling of bearer rejected, failed to enable media [ 53.796360][ T6314] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 53.804251][ T6315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.811657][ T6315] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 53.885201][ T6328] process 'syz.0.80' launched '/dev/fd/3' with NULL argv: empty string added [ 53.921299][ T6335] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 53.927629][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.930865][ T6335] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 53.959828][ T6340] sp0: Synchronizing with TNC [ 54.002334][ T6343] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 54.004667][ T6343] __nla_validate_parse: 2 callbacks suppressed [ 54.004675][ T6343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.83'. [ 54.009895][ T6343] batadv0: entered promiscuous mode [ 54.011975][ T6343] batadv0: entered allmulticast mode [ 54.014614][ T6343] bond0: (slave batadv0): Releasing backup interface [ 54.017498][ T6339] [U] [ 54.022793][ T6343] bridge0: port 3(batadv0) entered blocking state [ 54.025136][ T6343] bridge0: port 3(batadv0) entered disabled state [ 54.043175][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 54.046399][ T6348] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 54.102332][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 54.378513][ T60] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 54.381470][ T60] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 54.457075][ T5983] Bluetooth: hci0: command 0x040f tx timeout [ 54.457426][ T5979] Bluetooth: hci3: command tx timeout [ 54.457783][ T5981] Bluetooth: hci1: command tx timeout [ 54.537352][ T5979] Bluetooth: hci2: command tx timeout [ 54.817138][ T6362] netlink: zone id is out of range [ 54.819127][ T6362] netlink: zone id is out of range [ 54.821057][ T6362] netlink: zone id is out of range [ 54.823010][ T6362] netlink: zone id is out of range [ 54.825023][ T6362] netlink: zone id is out of range [ 54.829309][ T6362] netlink: zone id is out of range [ 54.830865][ T6362] netlink: zone id is out of range [ 54.832550][ T6362] netlink: zone id is out of range [ 54.834064][ T6362] netlink: zone id is out of range [ 54.835746][ T6362] netlink: zone id is out of range [ 54.914166][ T6371] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 54.924556][ T6361] netlink: 72 bytes leftover after parsing attributes in process `syz.2.90'. [ 54.933845][ T6375] netfs: Couldn't get user pages (rc=-14) [ 55.047979][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 55.089744][ T6398] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 55.123616][ T6403] fuse: Bad value for 'fd' [ 55.125493][ T6407] fuse: Bad value for 'fd' [ 55.125713][ T6405] netlink: 'syz.0.99': attribute type 64 has an invalid length. [ 55.129517][ T6405] netlink: 'syz.0.99': attribute type 4 has an invalid length. [ 55.131917][ T6405] netlink: 152 bytes leftover after parsing attributes in process `syz.0.99'. [ 55.166484][ T6400] overlayfs: failed to resolve './file1': -2 [ 55.274370][ T6424] deleting an unspecified loop device is not supported. [ 55.281577][ T6421] Zero length message leads to an empty skb [ 55.345785][ T6434] netlink: 64 bytes leftover after parsing attributes in process `syz.0.115'. [ 55.387513][ T6436] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 55.390674][ T6436] macvtap1: entered allmulticast mode [ 55.392425][ T6436] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 55.395685][ T6436] batman_adv: batadv0: Adding interface: macvtap1 [ 55.398632][ T6436] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.406365][ T6436] batman_adv: batadv0: Interface activated: macvtap1 [ 55.472845][ T6445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.118'. [ 55.709838][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 55.712582][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 56.118757][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 56.118773][ T40] audit: type=1400 audit(1757253007.553:308): avc: denied { create } for pid=6448 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.127511][ T40] audit: type=1400 audit(1757253007.563:309): avc: denied { setopt } for pid=6448 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.133631][ T40] audit: type=1400 audit(1757253007.563:310): avc: denied { write } for pid=6448 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.143004][ T6449] hpfs: hpfs_map_sector(): read error [ 56.220412][ T5979] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 56.358889][ T6457] bridge0: entered promiscuous mode [ 56.360950][ T6457] macsec1: entered promiscuous mode [ 56.520712][ T40] audit: type=1400 audit(1757253007.953:311): avc: denied { create } for pid=6479 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.526585][ T40] audit: type=1400 audit(1757253007.953:312): avc: denied { ioctl } for pid=6479 comm="syz.3.128" path="socket:[9921]" dev="sockfs" ino=9921 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.537600][ T5979] Bluetooth: hci0: command 0x040f tx timeout [ 56.569406][ T6488] vlan2: entered promiscuous mode [ 56.571178][ T6488] vlan2: entered allmulticast mode [ 56.572807][ T6488] hsr_slave_1: entered allmulticast mode [ 56.601185][ T40] audit: type=1400 audit(1757253008.033:313): avc: denied { ioctl } for pid=6491 comm="syz.3.131" path="socket:[10833]" dev="sockfs" ino=10833 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.610373][ T40] audit: type=1400 audit(1757253008.043:314): avc: denied { write } for pid=6491 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.632544][ T6497] capability: warning: `syz.0.133' uses deprecated v2 capabilities in a way that may be insecure [ 56.636125][ T6497] __vm_enough_memory: pid: 6497, comm: syz.0.133, bytes: 21200255168512 not enough memory for the allocation [ 56.815793][ T6509] team0 (unregistering): Port device team_slave_0 removed [ 56.820024][ T6509] team0 (unregistering): Port device team_slave_1 removed [ 56.835292][ T6512] vlan2: entered allmulticast mode [ 56.837452][ T6512] bond0: entered allmulticast mode [ 56.839064][ T6512] bond_slave_0: entered allmulticast mode [ 56.840907][ T6512] bond_slave_1: entered allmulticast mode [ 56.867981][ T40] audit: type=1400 audit(1757253008.303:315): avc: denied { accept } for pid=6513 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.005319][ T40] audit: type=1400 audit(1757253008.433:316): avc: denied { ioctl } for pid=6525 comm="syz.3.142" path="socket:[11632]" dev="sockfs" ino=11632 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.012690][ T40] audit: type=1400 audit(1757253008.433:317): avc: denied { execute_no_trans } for pid=6525 comm="syz.3.142" path="/28/file2" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.566573][ T6037] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.717845][ T6037] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.721992][ T6037] usb 5-1: config 1 interface 0 has no altsetting 0 [ 57.725608][ T6037] usb 5-1: New USB device found, idVendor=1e71, idProduct=2006, bcdDevice= 0.40 [ 57.728694][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.731344][ T6037] usb 5-1: Product: syz [ 57.732753][ T6037] usb 5-1: Manufacturer: syz [ 57.734277][ T6037] usb 5-1: SerialNumber: syz [ 57.848423][ T6536] netlink: 'syz.3.146': attribute type 11 has an invalid length. [ 58.137901][ T6546] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 58.141465][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 58.148510][ T6037] usbhid 5-1:1.0: can't add hid device: -71 [ 58.150478][ T6037] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 58.154212][ T6037] usb 5-1: USB disconnect, device number 3 [ 58.622809][ T6069] IPVS: starting estimator thread 0... [ 58.677100][ T6560] erspan0: entered promiscuous mode [ 58.707932][ T6553] IPVS: using max 43 ests per chain, 103200 per kthread [ 59.174174][ T6580] __nla_validate_parse: 4 callbacks suppressed [ 59.174184][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 59.181197][ T6580] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 59.240242][ T6584] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 59.243373][ T6584] gfs2: error -5 reading superblock [ 59.250530][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 59.317410][ T61] cfg80211: failed to load regulatory.db [ 59.419121][ T6600] capability: warning: `syz.2.166' uses 32-bit capabilities (legacy support in use) [ 59.604561][ T6620] FAULT_INJECTION: forcing a failure. [ 59.604561][ T6620] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.612559][ T6620] CPU: 3 UID: 0 PID: 6620 Comm: syz.2.172 Not tainted syzkaller #0 PREEMPT(full) [ 59.612573][ T6620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.612580][ T6620] Call Trace: [ 59.612584][ T6620] [ 59.612588][ T6620] dump_stack_lvl+0x16c/0x1f0 [ 59.612624][ T6620] should_fail_ex+0x512/0x640 [ 59.612646][ T6620] _copy_from_user+0x2e/0xd0 [ 59.612663][ T6620] copy_msghdr_from_user+0x98/0x160 [ 59.612677][ T6620] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 59.612698][ T6620] ___sys_sendmsg+0xfe/0x1d0 [ 59.612711][ T6620] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.612742][ T6620] __sys_sendmsg+0x16d/0x220 [ 59.612755][ T6620] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.612777][ T6620] do_syscall_64+0xcd/0x4c0 [ 59.612798][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.612809][ T6620] RIP: 0033:0x7f308638ebe9 [ 59.612817][ T6620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.612827][ T6620] RSP: 002b:00007f30872d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.612838][ T6620] RAX: ffffffffffffffda RBX: 00007f30865c5fa0 RCX: 00007f308638ebe9 [ 59.612844][ T6620] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 59.612851][ T6620] RBP: 00007f30872d3090 R08: 0000000000000000 R09: 0000000000000000 [ 59.612857][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.612862][ T6620] R13: 00007f30865c6038 R14: 00007f30865c5fa0 R15: 00007ffe110c4158 [ 59.612876][ T6620] [ 59.667400][ C3] vkms_vblank_simulate: vblank timer overrun [ 60.170450][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'. [ 60.217868][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 60.239875][ T6646] overlayfs: failed to resolve '/%MGL-': -2 [ 60.253150][ T6653] FAULT_INJECTION: forcing a failure. [ 60.253150][ T6653] name failslab, interval 1, probability 0, space 0, times 1 [ 60.257253][ T6653] CPU: 1 UID: 0 PID: 6653 Comm: syz.3.182 Not tainted syzkaller #0 PREEMPT(full) [ 60.257267][ T6653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.257273][ T6653] Call Trace: [ 60.257288][ T6653] [ 60.257292][ T6653] dump_stack_lvl+0x16c/0x1f0 [ 60.257309][ T6653] should_fail_ex+0x512/0x640 [ 60.257323][ T6653] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 60.257336][ T6653] should_failslab+0xc2/0x120 [ 60.257348][ T6653] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 60.257359][ T6653] ? __alloc_skb+0x2b2/0x380 [ 60.257373][ T6653] __alloc_skb+0x2b2/0x380 [ 60.257384][ T6653] ? __pfx___alloc_skb+0x10/0x10 [ 60.257397][ T6653] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 60.257413][ T6653] netlink_alloc_large_skb+0x69/0x130 [ 60.257427][ T6653] netlink_sendmsg+0x6a1/0xdd0 [ 60.257443][ T6653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.257462][ T6653] ____sys_sendmsg+0xa98/0xc70 [ 60.257478][ T6653] ? copy_msghdr_from_user+0x10a/0x160 [ 60.257490][ T6653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.257512][ T6653] ___sys_sendmsg+0x134/0x1d0 [ 60.257525][ T6653] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.257555][ T6653] __sys_sendmsg+0x16d/0x220 [ 60.257568][ T6653] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.257589][ T6653] do_syscall_64+0xcd/0x4c0 [ 60.257604][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.257614][ T6653] RIP: 0033:0x7fddb938ebe9 [ 60.257622][ T6653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.257632][ T6653] RSP: 002b:00007fddba259038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.257641][ T6653] RAX: ffffffffffffffda RBX: 00007fddb95c5fa0 RCX: 00007fddb938ebe9 [ 60.257648][ T6653] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 60.257653][ T6653] RBP: 00007fddba259090 R08: 0000000000000000 R09: 0000000000000000 [ 60.257659][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.257665][ T6653] R13: 00007fddb95c6038 R14: 00007fddb95c5fa0 R15: 00007ffca651b568 [ 60.257678][ T6653] [ 60.734191][ T6711] ipip0: entered promiscuous mode [ 60.740660][ T6714] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 60.788565][ T2302] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.808142][ T6037] Process accounting resumed [ 60.820020][ T6718] Process accounting resumed [ 60.873755][ T6726] net_ratelimit: 26 callbacks suppressed [ 60.873804][ T6726] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 60.938123][ T2302] usb 5-1: Using ep0 maxpacket: 8 [ 60.941863][ T6733] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 60.942602][ T2302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.949095][ T2302] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 60.951945][ T2302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.955575][ T2302] usb 5-1: config 0 descriptor?? [ 61.183970][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.187490][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.260613][ T2302] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 61.268900][ T2302] usb 5-1: USB disconnect, device number 4 [ 61.327878][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 61.327889][ T40] audit: type=1400 audit(1757253012.763:356): avc: denied { getopt } for pid=6742 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.328095][ T6743] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 61.352487][ T6743] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.436896][ T6747] tmpfs: Bad value for 'mpol' [ 61.595496][ T40] audit: type=1400 audit(1757253013.023:357): avc: denied { getopt } for pid=6750 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.621980][ T6753] program syz.1.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.660502][ T6756] binder: 6755:6756 ioctl c0306201 200000000080 returned -14 [ 61.663502][ T40] audit: type=1400 audit(1757253013.093:358): avc: denied { map } for pid=6755 comm="syz.1.216" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.664238][ T6756] binder: 6755:6756 unknown command 0 [ 61.673233][ T6756] binder: 6755:6756 ioctl c0306201 200000000180 returned -22 [ 61.757131][ T40] audit: type=1400 audit(1757253013.193:359): avc: denied { setattr } for pid=6750 comm="syz.3.214" name="SCO" dev="sockfs" ino=13431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.836152][ T40] audit: type=1400 audit(1757253013.263:360): avc: denied { map } for pid=6759 comm="syz.1.217" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.848195][ T6765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.853123][ T6765] FAT-fs (loop0): unable to read boot sector [ 61.892573][ T40] audit: type=1400 audit(1757253013.323:361): avc: denied { unlink } for pid=5968 comm="syz-executor" name="file1" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.895390][ T6765] kvm: MWAIT instruction emulated as NOP! [ 62.015362][ T6777] libceph: resolve ' [ 62.015362][ T6777] -&fYǝa2i [ 62.015362][ T6777] .?&*&' (ret=-3): failed [ 62.019641][ T40] audit: type=1400 audit(1757253013.453:362): avc: denied { setopt } for pid=6778 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.020890][ T6779] libceph: resolve ' [ 62.020890][ T6779] -&fYǝa2i [ 62.020890][ T6779] .?&*&' (ret=-3): failed [ 62.028641][ T6780] macvlan2: entered promiscuous mode [ 62.031480][ T6780] macvlan2: entered allmulticast mode [ 62.103538][ T40] audit: type=1400 audit(1757253013.533:363): avc: denied { ioctl } for pid=6784 comm="syz.0.227" path="socket:[12981]" dev="sockfs" ino=12981 ioctlcmd=0x81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.212469][ T6793] syz_tun: entered allmulticast mode [ 62.230447][ T6793] syz_tun: left allmulticast mode [ 62.250675][ T6760] syz.1.217 (6760): drop_caches: 2 [ 62.293092][ T40] audit: type=1400 audit(1757253013.723:364): avc: denied { setopt } for pid=6803 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.327152][ T6811] FAULT_INJECTION: forcing a failure. [ 62.327152][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 62.331752][ T6811] CPU: 2 UID: 0 PID: 6811 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 62.331775][ T6811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.331785][ T6811] Call Trace: [ 62.331791][ T6811] [ 62.331798][ T6811] dump_stack_lvl+0x16c/0x1f0 [ 62.331841][ T6811] should_fail_ex+0x512/0x640 [ 62.331867][ T6811] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 62.331888][ T6811] should_failslab+0xc2/0x120 [ 62.331909][ T6811] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 62.331931][ T6811] ? __alloc_skb+0x2b2/0x380 [ 62.331955][ T6811] __alloc_skb+0x2b2/0x380 [ 62.331973][ T6811] ? __pfx___alloc_skb+0x10/0x10 [ 62.332002][ T6811] netlink_ack+0x15d/0xb80 [ 62.332024][ T6811] ? avc_has_perm_noaudit+0x149/0x3b0 [ 62.332049][ T6811] netlink_rcv_skb+0x332/0x420 [ 62.332071][ T6811] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 62.332090][ T6811] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 62.332124][ T6811] ? ns_capable+0xd7/0x110 [ 62.332147][ T6811] nfnetlink_rcv+0x1b3/0x430 [ 62.332162][ T6811] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 62.332176][ T6811] ? netlink_deliver_tap+0x1ae/0xd30 [ 62.332201][ T6811] netlink_unicast+0x5aa/0x870 [ 62.332226][ T6811] ? __pfx_netlink_unicast+0x10/0x10 [ 62.332243][ T6811] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 62.332260][ T6811] netlink_sendmsg+0x8d1/0xdd0 [ 62.332276][ T6811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.332294][ T6811] ____sys_sendmsg+0xa98/0xc70 [ 62.332310][ T6811] ? copy_msghdr_from_user+0x10a/0x160 [ 62.332323][ T6811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.332344][ T6811] ___sys_sendmsg+0x134/0x1d0 [ 62.332357][ T6811] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.332385][ T6811] __sys_sendmsg+0x16d/0x220 [ 62.332398][ T6811] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.332419][ T6811] do_syscall_64+0xcd/0x4c0 [ 62.332440][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.332450][ T6811] RIP: 0033:0x7fe606f8ebe9 [ 62.332460][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.332470][ T6811] RSP: 002b:00007fe607dcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.332479][ T6811] RAX: ffffffffffffffda RBX: 00007fe6071c5fa0 RCX: 00007fe606f8ebe9 [ 62.332485][ T6811] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 62.332491][ T6811] RBP: 00007fe607dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 62.332497][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.332502][ T6811] R13: 00007fe6071c6038 R14: 00007fe6071c5fa0 R15: 00007ffcd954a778 [ 62.332515][ T6811] [ 62.446613][ T40] audit: type=1400 audit(1757253013.873:365): avc: denied { setcheckreqprot } for pid=6819 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.454976][ T10] hid-generic 0004:00A0:0007.0002: item fetching failed at offset 5/9 [ 62.458053][ T10] hid-generic 0004:00A0:0007.0002: probe with driver hid-generic failed with error -22 [ 62.597403][ T6828] netlink: 'syz.2.239': attribute type 2 has an invalid length. [ 62.830816][ T6839] syz.1.243 (6839) used obsolete PPPIOCDETACH ioctl [ 62.968046][ T6850] lo: entered allmulticast mode [ 63.056313][ T6849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.061374][ T6849] batadv_slave_0: entered promiscuous mode [ 63.066896][ T6852] bond0: entered promiscuous mode [ 63.068552][ T6852] bond_slave_0: entered promiscuous mode [ 63.070550][ T6852] bond_slave_1: entered promiscuous mode [ 63.072880][ T6852] bond0: entered allmulticast mode [ 63.074821][ T6852] bond_slave_0: entered allmulticast mode [ 63.077026][ T6852] bond_slave_1: entered allmulticast mode [ 63.098332][ T6856] 9pnet_virtio: no channels available for device syz [ 63.155503][ T6870] FAULT_INJECTION: forcing a failure. [ 63.155503][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 63.162828][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.3.256 Not tainted syzkaller #0 PREEMPT(full) [ 63.162848][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.162857][ T6870] Call Trace: [ 63.162861][ T6870] [ 63.162867][ T6870] dump_stack_lvl+0x16c/0x1f0 [ 63.162888][ T6870] should_fail_ex+0x512/0x640 [ 63.162908][ T6870] should_failslab+0xc2/0x120 [ 63.162924][ T6870] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 63.162939][ T6870] ? skb_clone+0x190/0x3f0 [ 63.162965][ T6870] skb_clone+0x190/0x3f0 [ 63.162982][ T6870] netlink_deliver_tap+0xabd/0xd30 [ 63.163005][ T6870] netlink_unicast+0x71f/0x870 [ 63.163025][ T6870] ? __pfx_netlink_unicast+0x10/0x10 [ 63.163050][ T6870] netlink_ack+0x696/0xb80 [ 63.163074][ T6870] netlink_rcv_skb+0x332/0x420 [ 63.163091][ T6870] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 63.163107][ T6870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.163134][ T6870] ? ns_capable+0xd7/0x110 [ 63.163152][ T6870] nfnetlink_rcv+0x1b3/0x430 [ 63.163165][ T6870] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 63.163177][ T6870] ? netlink_deliver_tap+0x1ae/0xd30 [ 63.163197][ T6870] netlink_unicast+0x5aa/0x870 [ 63.163218][ T6870] ? __pfx_netlink_unicast+0x10/0x10 [ 63.163235][ T6870] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 63.163258][ T6870] netlink_sendmsg+0x8d1/0xdd0 [ 63.163279][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.163304][ T6870] ____sys_sendmsg+0xa98/0xc70 [ 63.163325][ T6870] ? copy_msghdr_from_user+0x10a/0x160 [ 63.163342][ T6870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.163371][ T6870] ___sys_sendmsg+0x134/0x1d0 [ 63.163388][ T6870] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.163430][ T6870] __sys_sendmsg+0x16d/0x220 [ 63.163446][ T6870] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.163476][ T6870] do_syscall_64+0xcd/0x4c0 [ 63.163496][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.163532][ T6870] RIP: 0033:0x7fddb938ebe9 [ 63.163544][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.163556][ T6870] RSP: 002b:00007fddba259038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.163570][ T6870] RAX: ffffffffffffffda RBX: 00007fddb95c5fa0 RCX: 00007fddb938ebe9 [ 63.163578][ T6870] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 63.163586][ T6870] RBP: 00007fddba259090 R08: 0000000000000000 R09: 0000000000000000 [ 63.163593][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.163601][ T6870] R13: 00007fddb95c6038 R14: 00007fddb95c5fa0 R15: 00007ffca651b568 [ 63.163619][ T6870] [ 63.294506][ T6879] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 63.319840][ T6882] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.260'. [ 63.340302][ T6884] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 63.349696][ T6884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.261'. [ 63.378805][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 63.430951][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 63.435742][ T6894] ata1.00: invalid multi_count 1 ignored [ 63.608530][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 63.611216][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.667487][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.765458][ T6914] block nbd0: shutting down sockets [ 64.054984][ T6941] batadv_slave_1: entered promiscuous mode [ 64.065467][ T6940] batadv_slave_1: left promiscuous mode [ 64.093501][ T6944] binder: 6943:6944 ioctl c0306201 200000000680 returned -14 [ 64.096117][ T6944] binder: 6943:6944 ioctl 5609 200000001480 returned -22 [ 64.278005][ T6962] [U] ^R [ 64.336151][ T6964] ceph: No source [ 64.355546][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 64.596715][ T837] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.635569][ T6982] kvm: emulating exchange as write [ 64.768744][ T837] usb 8-1: config 0 interface 0 altsetting 244 endpoint 0x81 has an invalid bInterval 194, changing to 11 [ 64.772913][ T837] usb 8-1: config 0 interface 0 altsetting 244 endpoint 0x81 has invalid maxpacket 50732, setting to 1024 [ 64.778894][ T837] usb 8-1: config 0 interface 0 has no altsetting 0 [ 64.781365][ T837] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 64.784662][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.789258][ T837] usb 8-1: config 0 descriptor?? [ 64.792368][ T6964] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 65.288622][ T7003] 9pnet_fd: p9_fd_create_tcp (7003): problem binding to privport [ 65.398528][ T7005] max out of range [ 65.551695][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 65.558473][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 65.561811][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 66.016344][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 66.026272][ T7067] mkiss: ax0: crc mode is auto. [ 66.030509][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 66.100980][ T7076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.325'. [ 66.152901][ T7082] vxcan1 speed is unknown, defaulting to 1000 [ 66.155960][ T7082] vxcan1 speed is unknown, defaulting to 1000 [ 66.160286][ T7082] vxcan1 speed is unknown, defaulting to 1000 [ 66.163877][ T7080] netlink: 'syz.2.329': attribute type 13 has an invalid length. [ 66.166896][ T7080] netlink: 'syz.2.329': attribute type 17 has an invalid length. [ 66.197647][ T7080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.242051][ T7082] infiniband syz2: set active [ 66.244020][ T7082] infiniband syz2: added vxcan1 [ 66.244474][ T1024] vxcan1 speed is unknown, defaulting to 1000 [ 66.265977][ T7082] RDS/IB: syz2: added [ 66.268859][ T7082] smc: adding ib device syz2 with port count 1 [ 66.271195][ T7082] smc: ib device syz2 port 1 has pnetid [ 66.275021][ T7082] vxcan1 speed is unknown, defaulting to 1000 [ 66.277936][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 66.315000][ T7088] netlink: 76 bytes leftover after parsing attributes in process `syz.2.331'. [ 66.360991][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.333'. [ 66.363459][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 66.368936][ T7090] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 66.379958][ T7082] vxcan1 speed is unknown, defaulting to 1000 [ 66.433921][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 66.433931][ T40] audit: type=1400 audit(1757253017.863:425): avc: denied { ioctl } for pid=7099 comm="syz.1.335" path="socket:[18925]" dev="sockfs" ino=18925 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.487178][ T7082] vxcan1 speed is unknown, defaulting to 1000 [ 66.569185][ T7082] vxcan1 speed is unknown, defaulting to 1000 [ 66.586058][ T7106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 66.588175][ T7106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.592347][ T7106] vhci_hcd vhci_hcd.0: Device attached [ 66.597648][ T40] audit: type=1400 audit(1757253018.033:426): avc: denied { block_suspend } for pid=7105 comm="syz.2.337" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.686873][ T7110] netlink: 'syz.0.338': attribute type 1 has an invalid length. [ 66.689490][ T7110] NCSI netlink: No device for ifindex 0 [ 66.692341][ T40] audit: type=1400 audit(1757253018.123:427): avc: denied { write } for pid=7109 comm="syz.0.338" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 66.836748][ T61] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 66.841013][ T6069] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 66.844820][ T7118] binder: BINDER_SET_CONTEXT_MGR already set [ 66.847009][ T7118] binder: 7117:7118 ioctl 4018620d 2000000001c0 returned -16 [ 66.986614][ T6069] usb 7-1: Invalid ep0 maxpacket: 32 [ 67.106614][ T6037] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 67.116569][ T6069] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 67.257361][ T6037] usb 5-1: Using ep0 maxpacket: 8 [ 67.263937][ T837] usbhid 8-1:0.0: can't add hid device: -71 [ 67.264231][ T6037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.265864][ T837] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 67.269585][ T6037] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.274862][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.275505][ T837] usb 8-1: USB disconnect, device number 3 [ 67.276608][ T6069] usb 7-1: Invalid ep0 maxpacket: 32 [ 67.282451][ T6069] usb usb7-port1: attempt power cycle [ 67.283165][ T6037] usb 5-1: config 0 descriptor?? [ 67.351527][ T7124] unsupported nla_type 4111 [ 67.360567][ T7124] netlink: 'syz.1.343': attribute type 2 has an invalid length. [ 67.363062][ T7124] nbd: must specify a device to reconfigure [ 67.491714][ T6037] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 67.574419][ T7124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 67.586689][ T837] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.618542][ T6069] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 67.637705][ T6069] usb 7-1: Invalid ep0 maxpacket: 32 [ 67.684013][ T40] audit: type=1400 audit(1757253019.113:428): avc: denied { read open } for pid=7137 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.693908][ T40] audit: type=1400 audit(1757253019.113:429): avc: denied { getattr } for pid=7137 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.704212][ T40] audit: type=1400 audit(1757253019.123:430): avc: denied { add_name } for pid=7135 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.711701][ T40] audit: type=1400 audit(1757253019.123:431): avc: denied { create } for pid=7135 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.721082][ T40] audit: type=1400 audit(1757253019.123:432): avc: denied { write } for pid=7135 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan2.link" dev="tmpfs" ino=3243 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.731113][ T40] audit: type=1400 audit(1757253019.123:433): avc: denied { append } for pid=7135 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" dev="tmpfs" ino=3243 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.743436][ T40] audit: type=1400 audit(1757253019.163:434): avc: denied { remove_name } for pid=7139 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=3243 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.746610][ T837] usb 8-1: Using ep0 maxpacket: 32 [ 67.754727][ T837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.759515][ T837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.763685][ T837] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 67.767797][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.775052][ T837] usb 8-1: config 0 descriptor?? [ 67.777056][ T6069] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 67.798312][ T6069] usb 7-1: Invalid ep0 maxpacket: 32 [ 67.800280][ T6069] usb usb7-port1: unable to enumerate USB device [ 68.148536][ T7156] snd_dummy snd_dummy.0: control 1:96:0:syz0:211 is already present [ 68.192406][ T837] savu 0003:1E7D:2D5A.0003: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 68.389935][ T7122] syzkaller1: entered promiscuous mode [ 68.391995][ T7122] syzkaller1: entered allmulticast mode [ 68.399161][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.402000][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.477461][ T837] usb 8-1: USB disconnect, device number 4 [ 68.782422][ T7163] warning: `syz.1.349' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.833440][ T7165] vxcan1 speed is unknown, defaulting to 1000 [ 68.979801][ T7166] vxcan1 speed is unknown, defaulting to 1000 [ 69.065483][ T7172] netlink: 'syz.3.352': attribute type 19 has an invalid length. [ 69.279276][ T5979] block nbd0: Receive control failed (result -32) [ 69.407119][ T7206] sp0: Synchronizing with TNC [ 69.473200][ T7203] bridge_slave_0: default FDB implementation only supports local addresses [ 69.529515][ T7212] unknown channel width for channel at 909000KHz? [ 69.599022][ T7107] vhci_hcd: connection reset by peer [ 69.602415][ T46] vhci_hcd: stop threads [ 69.604679][ T46] vhci_hcd: release socket [ 69.608340][ T46] vhci_hcd: disconnect device [ 69.674273][ T7225] netlink: 'syz.2.369': attribute type 21 has an invalid length. [ 69.677201][ T7225] __nla_validate_parse: 7 callbacks suppressed [ 69.677210][ T7225] netlink: 156 bytes leftover after parsing attributes in process `syz.2.369'. [ 69.685203][ T7227] ALSA: seq fatal error: cannot create timer (-22) [ 69.771095][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.375'. [ 69.789490][ T7240] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 69.793881][ T7240] Error validating options; rc = [-22] [ 69.806610][ T1024] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 69.882774][ T6148] usb 5-1: USB disconnect, device number 5 [ 69.949819][ T7256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'. [ 69.953699][ T7256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.956642][ T1024] usb 8-1: Using ep0 maxpacket: 8 [ 69.960406][ T1024] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 69.961490][ T7256] openvswitch: netlink: Missing key (keys=40, expected=100) [ 69.963824][ T1024] usb 8-1: config 179 has no interface number 0 [ 69.963863][ T1024] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 69.973304][ T1024] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 69.978805][ T1024] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 101, changing to 10 [ 69.982703][ T1024] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24697, setting to 1024 [ 69.986265][ T1024] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 69.990437][ T1024] usb 8-1: config 179 interface 65 has no altsetting 0 [ 69.992640][ T1024] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 69.995475][ T1024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.997109][ T7259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=7259 comm=syz.2.380 [ 70.011501][ T1024] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input9 [ 70.056800][ T5367] input input9: unable to receive magic message: -110 [ 70.062218][ T5367] input input9: unable to receive magic message: -32 [ 70.066128][ T5367] input input9: unable to receive magic message: -32 [ 70.070985][ T5367] input input9: unable to receive magic message: -32 [ 70.079038][ T5974] input input9: unable to receive magic message: -32 [ 70.092008][ T5367] input input9: unable to receive magic message: -32 [ 70.096071][ T5367] input input9: unable to receive magic message: -32 [ 70.194974][ T7272] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 70.201420][ T7272] netlink: 'syz.2.384': attribute type 7 has an invalid length. [ 70.202563][ T7217] input input9: unable to receive magic message: -32 [ 70.203822][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 70.212021][ T7272] overlayfs: failed to resolve './file1': -2 [ 70.212478][ T24] usb 8-1: USB disconnect, device number 5 [ 70.213969][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 70.597343][ T7282] /dev/sg0: Can't lookup blockdev [ 70.655227][ T7283] netlink: 'syz.2.387': attribute type 7 has an invalid length. [ 70.658308][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 70.685747][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 70.688635][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'. [ 70.692882][ T7285] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 70.793039][ T7297] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 70.797071][ T7297] netlink: 108 bytes leftover after parsing attributes in process `syz.1.392'. [ 70.799892][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 70.839592][ T7299] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 70.856302][ T7299] bond2: (slave geneve2): making interface the new active one [ 70.860094][ T7299] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 70.864319][ T7300] netlink: 'syz.1.393': attribute type 8 has an invalid length. [ 70.868472][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'. [ 70.868696][ T46] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.876651][ T7299] bond2: entered promiscuous mode [ 70.878317][ T7299] geneve2: entered promiscuous mode [ 70.880204][ T7299] bond2: entered allmulticast mode [ 70.881834][ T7299] geneve2: entered allmulticast mode [ 70.884289][ T7299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.886878][ T46] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.890143][ T46] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.893869][ T46] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.913029][ T7304] No source specified [ 70.913881][ T7306] dns_resolver: Unsupported content type (215) [ 71.012104][ T7314] veth2: entered promiscuous mode [ 71.013728][ T7314] veth2: entered allmulticast mode [ 71.183096][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.186227][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.507236][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 71.507252][ T40] audit: type=1400 audit(1757253022.943:500): avc: denied { read write } for pid=7336 comm="syz.2.405" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.519340][ T40] audit: type=1400 audit(1757253022.943:501): avc: denied { open } for pid=7336 comm="syz.2.405" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.575910][ T7289] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.578994][ T7289] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.584012][ T7289] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.587052][ T7289] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.590965][ T7289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.593298][ T7289] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.596749][ T7289] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.601174][ T7289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.603669][ T7289] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.608718][ T7289] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.612181][ T7289] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.614706][ T7289] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 71.620064][ T7289] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 71.625635][ T7289] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.653837][ T40] audit: type=1400 audit(1757253023.083:502): avc: denied { prog_load } for pid=7338 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.671325][ T40] audit: type=1400 audit(1757253023.083:503): avc: denied { bpf } for pid=7338 comm="syz.2.407" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.673483][ T1144] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 71.679206][ T40] audit: type=1400 audit(1757253023.093:504): avc: denied { create } for pid=7338 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.688088][ T40] audit: type=1400 audit(1757253023.093:505): avc: denied { write } for pid=7338 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.692208][ T1144] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 71.694723][ T40] audit: type=1400 audit(1757253023.093:506): avc: denied { nlmsg_write } for pid=7338 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.700161][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 71.706075][ T40] audit: type=1400 audit(1757253023.113:507): avc: denied { prog_run } for pid=7344 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.718010][ T40] audit: type=1400 audit(1757253023.153:508): avc: denied { create } for pid=7344 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.721066][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 71.732201][ T40] audit: type=1400 audit(1757253023.153:509): avc: denied { setopt } for pid=7344 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.732976][ T7345] erspan0: entered promiscuous mode [ 71.771610][ T7359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7359 comm=syz.1.412 [ 71.828451][ T7347] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.873662][ T7369] fuse: Bad value for 'fd' [ 71.884251][ T7369] macvlan3: entered allmulticast mode [ 71.885989][ T7369] veth1_vlan: entered allmulticast mode [ 71.975511][ T7375] loop6: detected capacity change from 0 to 524287999 [ 71.978540][ T61] vhci_hcd: vhci_device speed not set [ 72.016569][ T837] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 72.176667][ T837] usb 8-1: Using ep0 maxpacket: 8 [ 72.179744][ T837] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 72.182682][ T837] usb 8-1: config 179 has no interface number 0 [ 72.185036][ T837] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 72.190012][ T837] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 72.193906][ T837] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 101, changing to 10 [ 72.198189][ T837] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24697, setting to 1024 [ 72.201903][ T837] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 72.206708][ T837] usb 8-1: config 179 interface 65 has no altsetting 0 [ 72.208951][ T837] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 72.211887][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.222912][ T837] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input10 [ 72.246738][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 72.276819][ T5367] input input10: unable to receive magic message: -110 [ 72.281570][ T5367] input input10: unable to receive magic message: -32 [ 72.287412][ T5367] input input10: unable to receive magic message: -32 [ 72.290224][ T5367] input input10: unable to receive magic message: -32 [ 72.294353][ T5367] input input10: unable to receive magic message: -32 [ 72.304665][ T5367] input input10: unable to receive magic message: -32 [ 72.310724][ T5367] input input10: unable to receive magic message: -32 [ 72.316666][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 72.420488][ T7361] input input10: unable to receive magic message: -32 [ 72.437619][ T837] usb 8-1: USB disconnect, device number 6 [ 72.439724][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 72.579827][ T7402] random: crng reseeded on system resumption [ 72.681069][ T7404] Bluetooth: MGMT ver 1.23 [ 72.857464][ T5979] Bluetooth: hci0: command 0x040f tx timeout [ 72.865001][ T7410] "syz.2.429" (7410) uses obsolete ecb(arc4) skcipher [ 73.014120][ T7421] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 73.017785][ T7421] overlayfs: overlapping lowerdir path [ 73.047322][ T7424] netlink: 'syz.1.433': attribute type 21 has an invalid length. [ 73.049799][ T7424] netlink: 'syz.1.433': attribute type 4 has an invalid length. [ 73.052170][ T7424] netlink: 'syz.1.433': attribute type 5 has an invalid length. [ 73.103196][ T7437] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 73.366579][ T837] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 73.516689][ T837] usb 8-1: Using ep0 maxpacket: 8 [ 73.519937][ T837] usb 8-1: config 1 interface 0 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 64 [ 73.523748][ T837] usb 8-1: config 1 interface 0 has no altsetting 0 [ 73.527620][ T837] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 73.530584][ T837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.533064][ T837] usb 8-1: Product: syz [ 73.534379][ T837] usb 8-1: Manufacturer: syz [ 73.536037][ T837] usb 8-1: SerialNumber: syz [ 73.542354][ T7441] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.597326][ T7453] netlink: 'syz.2.442': attribute type 3 has an invalid length. [ 73.599797][ T7453] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 73.602258][ T7453] NCSI netlink: No device for ifindex 33022 [ 73.643822][ T7455] mmap: syz.2.443 (7455) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.656843][ T5983] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.656879][ T5981] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.656898][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.867470][ T7474] netlink: 'syz.0.449': attribute type 1 has an invalid length. [ 73.870252][ T7474] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 73.950225][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.957907][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.958516][ T7487] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 73.963454][ T7487] SELinux: failed to load policy [ 73.970420][ T837] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 14 proto 1 vid 0x04B8 pid 0x0202 [ 73.975754][ T837] usb 8-1: USB disconnect, device number 7 [ 73.981021][ T837] usblp0: removed [ 74.234649][ T7499] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.371836][ T7503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7503 comm=syz.0.458 [ 74.605494][ T7509] sp0: Synchronizing with TNC [ 74.670975][ T7518] tipc: Started in network mode [ 74.673219][ T7518] tipc: Node identity ffffffffffff00000000000000000001, cluster identity 4711 [ 74.677040][ T7518] tipc: Enabling of bearer rejected, failed to enable media [ 74.748950][ T7527] GUP no longer grows the stack in syz.0.468 (7527): 200000007000-20000000a000 (200000004000) [ 74.752461][ T7527] CPU: 3 UID: 0 PID: 7527 Comm: syz.0.468 Not tainted syzkaller #0 PREEMPT(full) [ 74.752475][ T7527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.752482][ T7527] Call Trace: [ 74.752486][ T7527] [ 74.752491][ T7527] dump_stack_lvl+0x16c/0x1f0 [ 74.752516][ T7527] gup_vma_lookup+0x1d2/0x220 [ 74.752535][ T7527] __get_user_pages+0x243/0x34a0 [ 74.752553][ T7527] ? xsk_setsockopt+0x6db/0x9a0 [ 74.752563][ T7527] ? do_sock_setsockopt+0xf3/0x1d0 [ 74.752577][ T7527] ? __sys_setsockopt+0x1a0/0x230 [ 74.752589][ T7527] ? __x64_sys_setsockopt+0xbd/0x160 [ 74.752601][ T7527] ? __pfx___get_user_pages+0x10/0x10 [ 74.752618][ T7527] __gup_longterm_locked+0x2dd/0x17e0 [ 74.752632][ T7527] ? __lock_acquire+0xb80/0x1ce0 [ 74.752651][ T7527] ? __pfx___gup_longterm_locked+0x10/0x10 [ 74.752672][ T7527] pin_user_pages+0x13c/0x160 [ 74.752686][ T7527] ? __pfx_pin_user_pages+0x10/0x10 [ 74.752702][ T7527] ? xdp_umem_create+0x652/0x1270 [ 74.752716][ T7527] xdp_umem_create+0x73c/0x1270 [ 74.752731][ T7527] xsk_setsockopt+0x6db/0x9a0 [ 74.752741][ T7527] ? __pfx_xsk_setsockopt+0x10/0x10 [ 74.752751][ T7527] ? find_held_lock+0x2b/0x80 [ 74.752766][ T7527] ? selinux_socket_setsockopt+0x6a/0x80 [ 74.752780][ T7527] ? __pfx_xsk_setsockopt+0x10/0x10 [ 74.752791][ T7527] do_sock_setsockopt+0xf3/0x1d0 [ 74.752807][ T7527] __sys_setsockopt+0x1a0/0x230 [ 74.752825][ T7527] __x64_sys_setsockopt+0xbd/0x160 [ 74.752836][ T7527] ? do_syscall_64+0x91/0x4c0 [ 74.752849][ T7527] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.752861][ T7527] do_syscall_64+0xcd/0x4c0 [ 74.752875][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.752902][ T7527] RIP: 0033:0x7efe4bf8ebe9 [ 74.752911][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.752922][ T7527] RSP: 002b:00007efe4ce14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.752934][ T7527] RAX: ffffffffffffffda RBX: 00007efe4c1c5fa0 RCX: 00007efe4bf8ebe9 [ 74.752941][ T7527] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 74.752947][ T7527] RBP: 00007efe4c011e19 R08: 0000000000000020 R09: 0000000000000000 [ 74.752953][ T7527] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 74.752960][ T7527] R13: 00007efe4c1c6038 R14: 00007efe4c1c5fa0 R15: 00007ffede0584a8 [ 74.752975][ T7527] [ 74.946622][ T5979] Bluetooth: hci0: command 0x040f tx timeout [ 75.002745][ T6069] IPVS: starting estimator thread 0... [ 75.067968][ T7570] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 75.069056][ T7571] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.076335][ T7571] overlayfs: failed to set xattr on upper [ 75.078828][ T7571] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.081517][ T7571] overlayfs: ...falling back to index=off. [ 75.083129][ T7574] block nbd0: Dead connection, failed to find a fallback [ 75.083800][ T7571] overlayfs: ...falling back to uuid=null. [ 75.083836][ T7571] overlayfs: conflicting lowerdir path [ 75.087209][ T7574] block nbd0: shutting down sockets [ 75.092133][ T7574] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.095503][ T7574] (syz.0.481,7574,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 75.099705][ T7574] (syz.0.481,7574,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 75.102105][ T7574] (syz.0.481,7574,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 75.104961][ T7574] (syz.0.481,7574,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 75.116845][ T7556] IPVS: using max 43 ests per chain, 103200 per kthread [ 75.134397][ T7578] __nla_validate_parse: 9 callbacks suppressed [ 75.134408][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 75.332693][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 75.372932][ T7598] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.489'. [ 75.411538][ T7605] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 75.417917][ T7607] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 75.422231][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 75.613928][ T7620] SELinux: policydb magic number 0x140 does not match expected magic number 0xf97cff8c [ 75.617458][ T7620] SELinux: failed to load policy [ 75.716736][ T61] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 75.736692][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.736732][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.740002][ T5983] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.843213][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 75.849772][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 75.854567][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 75.868035][ T61] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.871841][ T61] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 75.875134][ T61] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.878653][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 75.882020][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 75.888574][ T61] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.891699][ T61] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.894216][ T61] usb 7-1: Product: syz [ 75.895671][ T61] usb 7-1: Manufacturer: syz [ 75.900898][ T61] cdc_wdm 7-1:1.0: skipping garbage [ 75.902575][ T61] cdc_wdm 7-1:1.0: skipping garbage [ 75.906191][ T61] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 75.909821][ T61] cdc_wdm 7-1:1.0: Unknown control protocol [ 75.944097][ T7647] 9pnet_fd: Insufficient options for proto=fd [ 76.066620][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 76.107793][ T1024] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 76.205579][ T7659] futex_wake_op: syz.1.506 tries to shift op by 32; fix this program [ 76.213051][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.506'. [ 76.271413][ T1024] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 76.272716][ T7662] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 76.274213][ T1024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.279706][ T1024] usb 8-1: Product: syz [ 76.281056][ T1024] usb 8-1: Manufacturer: syz [ 76.282495][ T1024] usb 8-1: SerialNumber: syz [ 76.524755][ T40] kauditd_printk_skb: 165 callbacks suppressed [ 76.524765][ T40] audit: type=1400 audit(1757253027.953:675): avc: denied { create } for pid=7667 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.532623][ T40] audit: type=1400 audit(1757253027.953:676): avc: denied { listen } for pid=7667 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.538701][ T40] audit: type=1400 audit(1757253027.953:677): avc: denied { accept } for pid=7667 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.553042][ T1024] rtl8150 8-1:1.0: couldn't reset the device [ 76.555186][ T1024] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 76.567548][ T1024] usb 8-1: USB disconnect, device number 8 [ 76.584150][ T40] audit: type=1400 audit(1757253028.013:678): avc: denied { create } for pid=7667 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.688183][ T837] usb 7-1: USB disconnect, device number 6 [ 76.774016][ T7672] random: crng reseeded on system resumption [ 76.809223][ T7672] Unrecognized hibernate image header format! [ 76.819560][ T7672] PM: hibernation: Image mismatch: architecture specific data [ 76.893919][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 76.926774][ T40] audit: type=1400 audit(1757253028.353:679): avc: denied { create } for pid=7676 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.957230][ T40] audit: type=1400 audit(1757253028.393:680): avc: denied { listen } for pid=7676 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.973570][ T40] audit: type=1400 audit(1757253028.393:681): avc: denied { accept } for pid=7676 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.016796][ T5983] Bluetooth: hci0: command 0x040f tx timeout [ 77.226612][ T40] audit: type=1400 audit(1757253028.653:682): avc: denied { write } for pid=7681 comm="syz.1.512" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 77.278983][ T7686] overlayfs: overlapping lowerdir path [ 77.375769][ T7698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.516'. [ 77.413356][ T7708] netlink: 'syz.2.519': attribute type 2 has an invalid length. [ 77.447111][ T10] hid-generic 0004:000E:14000.0004: collection stack underflow [ 77.449601][ T10] hid-generic 0004:000E:14000.0004: item 0 0 0 12 parsing failed [ 77.452907][ T10] hid-generic 0004:000E:14000.0004: probe with driver hid-generic failed with error -22 [ 77.459922][ T40] audit: type=1400 audit(1757253028.893:683): avc: denied { map } for pid=7715 comm="syz.2.522" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.487590][ T40] audit: type=1400 audit(1757253028.923:684): avc: denied { setopt } for pid=7717 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.636590][ T1024] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 77.722240][ T7733] netlink: 'syz.2.527': attribute type 7 has an invalid length. [ 77.731642][ T7733] : entered promiscuous mode [ 77.798257][ T1024] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.802102][ T1024] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.806338][ T1024] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.810555][ T1024] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 77.814469][ T1024] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 77.814596][ T7743] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 77.817137][ T5983] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.818064][ T5983] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.818086][ T5983] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.821181][ T1024] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.830677][ T1024] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.833083][ T1024] usb 8-1: Product: syz [ 77.834382][ T1024] usb 8-1: Manufacturer: syz [ 77.842043][ T1024] cdc_wdm 8-1:1.0: skipping garbage [ 77.843603][ T1024] cdc_wdm 8-1:1.0: skipping garbage [ 77.846103][ T1024] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 77.851356][ T1024] cdc_wdm 8-1:1.0: Unknown control protocol [ 77.968135][ T7754] dummy0: entered promiscuous mode [ 77.971616][ T7754] dummy0: left promiscuous mode [ 78.050539][ T7764] bond5: entered promiscuous mode [ 78.052588][ T7764] 8021q: adding VLAN 0 to HW filter on device bond5 [ 78.067720][ T7764] 8021q: adding VLAN 0 to HW filter on device bond5 [ 78.070437][ T7764] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 78.075140][ T7764] bond5: (slave vcan0): Error -95 calling set_mac_address [ 78.252856][ T7781] macvlan1: entered promiscuous mode [ 78.255350][ T7781] ipvlan0: entered promiscuous mode [ 78.257685][ T7781] ipvlan0: left promiscuous mode [ 78.259461][ T7781] macvlan1: left promiscuous mode [ 78.410426][ T7794] vxcan1 speed is unknown, defaulting to 1000 [ 78.454249][ T7800] block nbd3: Attempted send on invalid socket [ 78.459531][ T7800] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.463171][ T7800] (syz.3.518,7800,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.465498][ T7800] (syz.3.518,7800,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.467858][ T7800] (syz.3.518,7800,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.470426][ T7800] (syz.3.518,7800,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.508487][ T7805] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1768980480) [ 78.512284][ T7805] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 78.566900][ T7813] comedi comedi3: comedi_config --init_data is deprecated [ 78.639070][ T7824] block nbd2: Attempted send on invalid socket [ 78.641212][ T7824] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 78.644199][ T7824] gfs2: error -5 reading superblock [ 78.700289][ T63] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN NOPTI [ 78.703842][ T63] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 78.707458][ T63] CPU: 2 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 78.711057][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.714225][ T63] Workqueue: hci2 hci_rx_work [ 78.715678][ T63] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 78.717459][ T63] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 8e 58 75 09 66 66 2e 0f 1f 84 00 00 00 [ 78.723209][ T63] RSP: 0018:ffffc90000b0f720 EFLAGS: 00010286 [ 78.725062][ T63] RAX: dffffc0000000000 RBX: 0000000000000258 RCX: 0000000000000000 [ 78.727459][ T63] RDX: 0000000000000000 RSI: ffffffff89656f21 RDI: dffffc000000004b [ 78.729863][ T63] RBP: 0000000000000258 R08: 0000000000000001 R09: 0000000000000000 [ 78.732282][ T63] R10: ffffc90000b0f810 R11: 0000000000000000 R12: ffffffff89656f21 [ 78.734737][ T63] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.737134][ T63] FS: 0000000000000000(0000) GS:ffff8880d68b5000(0000) knlGS:0000000000000000 [ 78.739815][ T63] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.741807][ T63] CR2: 00007f30872d1568 CR3: 000000005f2f6000 CR4: 0000000000352ef0 [ 78.744220][ T63] Call Trace: [ 78.745252][ T63] [ 78.746179][ T63] __kasan_check_byte+0x13/0x50 [ 78.747686][ T63] lock_acquire+0xfc/0x350 [ 78.749060][ T63] lock_sock_nested+0x41/0xf0 [ 78.750526][ T63] ? l2cap_sock_new_connection_cb+0x4c/0x240 [ 78.752375][ T63] l2cap_sock_new_connection_cb+0x4c/0x240 [ 78.754198][ T63] l2cap_connect_cfm+0x4c7/0xf80 [ 78.755870][ T63] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 78.757566][ T63] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 78.759281][ T63] le_conn_complete_evt+0x1662/0x1d70 [ 78.760998][ T63] ? trace_contention_end+0xdd/0x130 [ 78.762655][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 78.764472][ T63] ? hci_event_packet+0x459/0x11c0 [ 78.766113][ T63] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 78.767987][ T63] ? skb_pull_data+0x166/0x210 [ 78.769494][ T63] hci_le_meta_evt+0x354/0x5e0 [ 78.771008][ T63] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 78.773009][ T63] hci_event_packet+0x682/0x11c0 [ 78.774563][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 78.776225][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 78.777908][ T63] ? kcov_remote_start+0x3c9/0x6d0 [ 78.779541][ T63] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.781184][ T63] hci_rx_work+0x2c5/0x16b0 [ 78.782620][ T63] ? rcu_is_watching+0x12/0xc0 [ 78.784147][ T63] process_one_work+0x9cc/0x1b70 [ 78.785710][ T63] ? __pfx_process_one_work+0x10/0x10 [ 78.787401][ T63] ? assign_work+0x1a0/0x250 [ 78.788857][ T63] worker_thread+0x6c8/0xf10 [ 78.790318][ T63] ? __pfx_worker_thread+0x10/0x10 [ 78.791932][ T63] kthread+0x3c2/0x780 [ 78.793221][ T63] ? __pfx_kthread+0x10/0x10 [ 78.794674][ T63] ? rcu_is_watching+0x12/0xc0 [ 78.796147][ T63] ? __pfx_kthread+0x10/0x10 [ 78.797590][ T63] ret_from_fork+0x5d4/0x6f0 [ 78.799026][ T63] ? __pfx_kthread+0x10/0x10 [ 78.800444][ T63] ret_from_fork_asm+0x1a/0x30 [ 78.801918][ T63] [ 78.802907][ T63] Modules linked in: [ 78.804400][ T63] ---[ end trace 0000000000000000 ]--- [ 78.806402][ T63] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 78.808635][ T63] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 8e 58 75 09 66 66 2e 0f 1f 84 00 00 00 [ 78.814563][ T63] RSP: 0018:ffffc90000b0f720 EFLAGS: 00010286 [ 78.816479][ T63] RAX: dffffc0000000000 RBX: 0000000000000258 RCX: 0000000000000000 [ 78.819036][ T63] RDX: 0000000000000000 RSI: ffffffff89656f21 RDI: dffffc000000004b [ 78.821512][ T63] RBP: 0000000000000258 R08: 0000000000000001 R09: 0000000000000000 [ 78.823981][ T63] R10: ffffc90000b0f810 R11: 0000000000000000 R12: ffffffff89656f21 [ 78.826450][ T63] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.829190][ T63] FS: 0000000000000000(0000) GS:ffff8880d66b5000(0000) knlGS:0000000000000000 [ 78.831995][ T63] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.834053][ T63] CR2: 00007f308728ff98 CR3: 000000005f2f6000 CR4: 0000000000352ef0 [ 78.836552][ T63] Kernel panic - not syncing: Fatal exception [ 78.838901][ T63] Kernel Offset: disabled [ 78.840267][ T63] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:50:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000054658000 RBX=0000000000000000 RCX=ffffffff816cb6ee RDX=ffff8880588c4880 RSI=ffffffff816cb6f8 RDI=0000000000000007 RBP=ffff88805631d280 RSP=ffffc9000e33fa78 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888054658000 R13=0000000000000003 R14=0000000000000000 R15=ffff88805631f2b8 RIP=ffffffff81512c9d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f30872d36c0 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f308728ff98 CR3=000000005f2f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe110c4666 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe110c4666 00007ffe110c466c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3086412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3086412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3086412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3086412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3086412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3086412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30865974a8 00007f30865974a0 00007f3086597498 00007f3086597470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30870fd100 00007f3086597460 00007f3086597478 00007f30865974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30865974b8 00007f30865974b0 00007f30865974a8 00007f30865974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=0000000000000001 RCX=1ffffffff35cc410 RDX=dffffc0000000000 RSI=ffffffff8c162d00 RDI=0000000000000001 RBP=00000030df624842 RSP=ffffc90000aefab8 R8 =0000000000000001 R9 =00000000000075bc R10=ffff88816dd42007 R11=0000000000000000 R12=0000000000000001 R13=00000000000032c9 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8188885d RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2d9bb1 CR3=0000000028e85000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555f8e2930 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555f8d8973 000055555f8d8870 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555f8e239c 000055555f8e2230 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800010000000806 0a016fd610080001 8003000800041000 041000060070e20a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff f10850030204004c 0316040048030210 b880840046030010 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66030010b0808400 66030401e0808084 0064030804006003 006576656e656701 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001ffffffff fffffffff3087003 0204006c03140400 68030210b8808400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001de0030010001d d0030010001dc003 0210001db0030180 1000189003000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0120100002800401 0000000806060104 9002d40200028e03 280200028c032802 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00028a0302d80200 02880302b8c80484 0002840304040002 80030010001d8004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000208060601 68e02008001de003 0010001dd0030010 001dc0030210001d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b003018010001890 0300000000000001 ffffffffffffffff f30870030204006c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646975 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90000b0f090 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b115060 R15=ffffffff85646910 RIP=ffffffff8564699f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f30872d1568 CR3=000000005f2f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ba0bcecb10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7587f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326c978bc7483 737326cc23784059 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaf75e844417731e 7373737628d3cf88 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303438333a326963 682f326963682f68 746f6f7465756c62 2f6c617574726976 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d9842df73764006d 000055bf506f09f6 00000000000002f1 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772c30362c41352c 39352c38352c3135 2c303566736c6d2c 352c342c332c322c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3061722c3332 322c3232322c3132 322c3032322c4533 312c4433312c4333 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c4233312c4133 312c3733312c3633 312c3433312c3333 312c3133312c3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 316b2c35312c332c 312c30652d303030 3065343030307042 4132317633303030 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888056a37710 RCX=ffffffff823c3a23 RDX=ffff888029654880 RSI=ffffffff823c398e RDI=0000000000000006 RBP=ffffc9000ff6efb8 RSP=ffffc9000ff6ef80 R8 =0000000000000006 R9 =0000000007fb11e3 R10=0000000007fb11e3 R11=0000000000000000 R12=0000000068bd8da6 R13=0000000000000000 R14=0000000007fb11e3 R15=0000000007fb11e3 RIP=ffffffff81bb8e91 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fddba2386c0 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555718b5808 CR3=000000003b4af000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffede058830 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffede0589b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffede0589b6 00007ffede0589bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe4c012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe4c012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe4c012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe4c012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe4c012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe4c012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000