last executing test programs: 47.379035915s ago: executing program 2 (id=190): r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffed8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7ff}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 47.378168644s ago: executing program 2 (id=192): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000006111680000000000950000000000000068dd253aa0e2332c817c5e9376eaf9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x60, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x64008814}, 0x4000060) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0xb0, r3, 0x104, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x80000e6, 0xffffffffffffffff, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="c00000001300e999000000000080000020010000000000000000000000000002ac1e000100000000000000000000000000000000000004000a00600000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000100030000000008001f000100000064611f60d993af8bc8f1684603fcff76ea89fc888aa51b1a7cb56726e752ea9e1dbbf2b8da044fd6a1c7985ad8b8a256f1248f05"], 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000180)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0xd40800000000, 0x0, 0x8000000000000001, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8001, 0x1000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r6 = socket(0x2a, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, r7, 0x30}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 47.320636514s ago: executing program 2 (id=195): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000007c0)={&(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000780)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r3, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000580)=[r4], &(0x7f0000000480)}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000580)=[r4], &(0x7f0000000480)}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r2, 0xa72eb000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000680)={0x0, &(0x7f00000005c0), &(0x7f0000000800), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000540)={r6}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000540)={r6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000000c0)={0x1, r7, 0x1, 0x9, 0x6, 0x6, 0x4}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) writev(r8, &(0x7f0000000440)=[{&(0x7f00000001c0)="2c1cbf6d78c76cca14f0b1dfd5af514fcc6f5bd69ce4df3145e02c97dd3c0a", 0x1f}], 0x1) (async) writev(r8, &(0x7f0000000440)=[{&(0x7f00000001c0)="2c1cbf6d78c76cca14f0b1dfd5af514fcc6f5bd69ce4df3145e02c97dd3c0a", 0x1f}], 0x1) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r8, 0x4008642a, &(0x7f00000003c0)={r9, 0xb}) (async) ioctl$DRM_IOCTL_LOCK(r8, 0x4008642a, &(0x7f00000003c0)={r9, 0xb}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={r6}) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r12 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$tun(r12, &(0x7f0000000480)=ANY=[], 0xfdef) (async) write$tun(r12, &(0x7f0000000480)=ANY=[], 0xfdef) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') (async) r13 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r13, 0xfffffffffffffffe, 0x1) (async) lseek(r13, 0xfffffffffffffffe, 0x1) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000100)) 47.109240497s ago: executing program 2 (id=198): r0 = syz_open_dev$radio(&(0x7f0000000200), 0x0, 0x2) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x3fe, 0x6, 0x5, 0x9, 0x16}, 0x14) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0x5, 0x7b56}) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x7, 0x145d00) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, r3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0xa391) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 47.10741644s ago: executing program 2 (id=199): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) (async) r3 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) (async) chdir(&(0x7f0000000100)='./cgroup\x00') (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r2, 0x1, 0x70bd2d, 0x1, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}}, 0x48) (async) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) fstat(r0, &(0x7f0000000300)) (async) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) 47.021133043s ago: executing program 2 (id=200): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000080), 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='xfrm0\x00', 0x10) (async) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000224e00000000", 0x58}], 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="cbcd6e", @ANYBLOB="1d3e926856aee709ff1e6dff8731af13b50e4b24aef995ec84026e5161bc995e0f0749edede4dad78b72e3f7b81df3560480c2dede23c9536821f662bdafc7c4193d87830676112a96acc746779e9e3c98c8a181951c6a18cd76177ed8f25bdd313adae6a5ce52f21d1b1e69d787e3ac714fc79b6c74569e924c3c47d77652ab3e59298a1b3f092bba6d325a934eae3a3b57b011f661850540605f4239be7b52a2592c7eb10e385122", @ANYRES32, @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4050) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r5, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x73}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4040) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x0, 0x2, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0) 32.04304476s ago: executing program 32 (id=200): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000080), 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='xfrm0\x00', 0x10) (async) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000224e00000000", 0x58}], 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="cbcd6e", @ANYBLOB="1d3e926856aee709ff1e6dff8731af13b50e4b24aef995ec84026e5161bc995e0f0749edede4dad78b72e3f7b81df3560480c2dede23c9536821f662bdafc7c4193d87830676112a96acc746779e9e3c98c8a181951c6a18cd76177ed8f25bdd313adae6a5ce52f21d1b1e69d787e3ac714fc79b6c74569e924c3c47d77652ab3e59298a1b3f092bba6d325a934eae3a3b57b011f661850540605f4239be7b52a2592c7eb10e385122", @ANYRES32, @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4050) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r5, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x73}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4040) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x0, 0x2, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0) 10.850354457s ago: executing program 4 (id=447): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x18, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) socket$inet6_sctp(0xa, 0x4, 0x84) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x18, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) (async) 10.736015216s ago: executing program 4 (id=449): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 9.876494375s ago: executing program 4 (id=460): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd']) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100fffffffffffffff5000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 9.630582713s ago: executing program 4 (id=466): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000087c0), &(0x7f0000008800)=0x4) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) (rerun: 64) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 64) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r2, 0x1}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x8, 0x100073, 0x100000}, 0x35) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r5 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) (rerun: 32) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000040)={0x0, 0x34343452, 0x280, 0x168, 0x0, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x81}}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x715, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0xfff2}, {0xc, 0xf}, {0x1, 0x8}}}, 0x24}}, 0x20008154) (async) fcntl$dupfd(r0, 0x406, r0) 9.62748862s ago: executing program 4 (id=468): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)="eecab7f41e3e3c16833b85f1a2cee1c8ab91ecb99195eb1b59a2a48a44ffd70d49609cb1fe09f782214636da7801d53b6f49e423266ad326809433932c3023e3b12193b746bbde3a7fcd5a7834881990b406822bf6f5c0d63d35511a9c9536bc86701589e3a319c81ac66e05327172be81807f0b7425c883520da4dc18fcb8ba62451d1660004723728fdf769e77d073f39039d2d82b4c66c75ce3ccb44c15", 0x9f, r3}, 0x68) r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000100)='stack\x00') sendmsg$netlink(r0, &(0x7f0000000300)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000040)={0xc4, 0x3c, 0x10, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x68, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="f25bb3f12af5e269f98e9d528d6a9e3b68a83f5d58896a604928229e3778a5abb86218453e5f0ea203ddd4b80e1b7687ce50cd8721af95a909768bb14a6265b40f419a42aa180fbaf03f4a867073c9a7d5e604955766a925", @typed={0x5, 0x60, 0x0, 0x0, @str='\x00'}, @generic="aa1ceb8a110e4be14c1c34d4cb9910b0d64047d63bc92a1eea9561d1b3c1f00e4fdde6cd74dc0c5944666981b418f25e1c40cd39028d16ba67e5bdeebc", @typed={0xc, 0xe0, 0x0, 0x0, @u64=0x1ed}]}, 0xc4}, {&(0x7f0000000140)={0xe4, 0x3b, 0x200, 0x70bd29, 0x25dfdbfc, "", [@generic="9dd09a186fa4ba99447d120fbbe856cb8f402aff117d505d6717dcc3274ed462c35eb77035cf088da2394a82fe16cee0fb428d54c2429aa61c3d8e7f4060ecdb6cb6ef60525cf1c256a5a9b6cef6b248d5ed406809a40e4dce8543a64d4dd2afb22b24a271b43a60d4835a2b6a2d093e0dde80a18d650ee5446ddcca2913d3b423c5234d82a54e5feb2a49d88c41bf5e0d23a9df95877d3916063c6e96e3b315e4e5657854e925bfa3299ce8e91a4360e43c5303741b1b772b9b1c804fbea7262f637bebbf0e9a0bb092eba8", @typed={0x8, 0xb9, 0x0, 0x0, @pid=r4}]}, 0xe4}, {&(0x7f0000000280)={0x1c, 0x3d, 0x20, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xc, 0x37, 0x0, 0x0, @u64=0x1}]}, 0x1c}, {&(0x7f0000001680)={0x1428, 0x42, 0x200, 0x70bd27, 0x25dfdbfc, "", [@typed={0xc, 0x14a, 0x0, 0x0, @str='s{{{\\\x84@\x00'}, @generic="e5b7bf6f1bc08d25d0d42a123a0359d29d0dd7162e3a0a296f2f2c82cab84c526cefabe1d63e290eff0386728a977be28a72d3312440e34153357bc3ecba6e37965f168ed3d087a13a802bd9420835a12040659508847b1f20924e17cba2f7acbdbd2d086c89db04550c0f1872fd5643eb70d40abe9cad287645b18eab4ecb88a5c3d89118b1e50c7b3270bdcb480d107f5387fbe85949c31fdfeb24fc7581f88f81c2edcfd73ca3324afbca1aef05eb5ef37a55bc33cb3e35f506a4184743398448090e4ed5207e0a90dc58ccb16316c9d7147cf1ffb9ef1b426d9bb268282c5f12d47e24950e803465f569045fdc8e01918818335cfe2e76", @generic="669f9e6ebabbfb33225fc9b80196830fd42a0405f224842a7dacdcae36c7ee9f933a6a0600181bbcfd468fbde64f0308456b57552846a63953df133fbcff0a1400b1d5d657f29e20db6b774ea02b11f76330f72f216a8c14a02f2aa9a4156f199560e20053dfe48c5fec6c8cb79bf249e28ea64314deaab790230c259bf46d4addb5a41d00b8a54a35fe4b013b2b", @nested={0x1b8, 0x11d, 0x0, 0x1, [@generic="917e1a179961fe432481a920d7cf26af924541a4aa1101712f54e64c372725a74eb29a0245352dff0b4b6fd4af29619f00909ab5645f57fec6a98f68dfc5350d12ea9000d938656441cad9cf3e86df10847d4649cd2a30dac2a4a760ac8afbfa9181cbcf3bf330e066d7dbbe2d30327c4301d0be9b6eece669aeefd65a6705178a8bd7030e3d9008a2eeec70b2977e49f9c0d18d6fd11317e099f5395d153a50bee75dc78d4afc5f6b15de1103ad6d0dfc9c15cd74f53a86d1482fc222826f41", @typed={0x8, 0x13c, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x5d}, @typed={0xe7, 0x13e, 0x0, 0x0, @binary="1dbc022fe11332bfbf81f5ba320b292167f8e258972f8fd3eaca8a183f9f37b6ee843f53a26bd6f83ed3e5058efa12aaf35aa297a06465e63e295c4b46cf2494596f4d09ae2fed81efb8c00329fd5bc1b275438c70ea7b2079934bd68a1645422860b32ae0a38982218191ab4189445b4ecc224675e49451d5b798d0a23064696b4542ab286a4367942f84c69f2ddc7c95ea2af81c3e5951307a61fb71b1380875d7e3b1256ab2b8fe242f8784211b672fcfc0a1a6d179036861b2506d643c2e6d40d7f94077f26e745ef223ba8424dcc6cbec268a60fd9ef6455fac9c8317e3a33413"}, @generic]}, @generic="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", @generic="2c78460db828129b52b33e14cc8cfd6d366781461e61fb7f977ade4686aeab49f7e0a9fc9a9bc3f97518a0e7c75043af4d5f928f42e956f328ac715080a19070a2a6bd723bc0e7df1423c67f3acff6b93629ff3871a030f280e42392b81b2a617a6df403d49c2ce0f7227a1645afb94b7560bad466648d705af25a5be0843e9dd18712d74be96bd468dd864a7e3da4cca1cff9758d49b8fba5f7d9c3385f8efdeb7ebc2470bca598676435a641dcb3", @nested={0x19, 0x2b, 0x0, 0x1, [@generic="5de9cb7bef2e235e787bb9ddbbea1205b45c9efe32"]}]}, 0x1428}], 0x4, 0x0, 0x0, 0x8004}, 0x0) socket(0x1f, 0x94e803fdbc8e29d5, 0x400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000010c0)=@security={'security\x00', 0x64, 0x4, 0x558, 0x100000c, 0xc8, 0xc8, 0x0, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [], 0x0, 0x2}}}}, {{@ip={@empty, @private, 0x0, 0x0, 'wg2\x00', 'veth0\x00'}, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x0, 0xf0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2000}, {}, {}, {}, {0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x120}]}}, @common=@ah={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 7.465505368s ago: executing program 4 (id=493): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r2, 0x0, 0x6}, 0x18) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) flock(r4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000002fa048cd11775bc66c27961d01854dfaa7400000000000000000001000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007801800018014000240ff01000000000000000000000000000105000500020000000500010006000000"], 0x68}}, 0x80) write$dsp(r0, &(0x7f0000000040)="e4ba80037671", 0x6) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000100)=""/62, &(0x7f0000000140)=0x3e) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x0, 0x7fffffff}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00000000000000", @ANYRES32=r6], 0x30}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ppoll(&(0x7f00000000c0)=[{r9, 0x330c}], 0x1, 0x0, 0x0, 0x0) io_uring_setup(0x5237, &(0x7f0000009a80)={0x0, 0x25d1, 0x1, 0x800, 0x210}) add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) 2.220681851s ago: executing program 0 (id=568): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='afs_make_fs_call1\x00', r0, 0x0, 0xfff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) 2.070306239s ago: executing program 0 (id=569): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}]}}]}, 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2.000735815s ago: executing program 3 (id=570): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000008000a000000000000000000001420000100", @ANYRES32=r2], 0x58}}, 0x0) 2.000514019s ago: executing program 3 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0xade) (async) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r3, 0x516, 0x70bd29, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xe}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) 1.860664054s ago: executing program 3 (id=572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00Z\x00\n']) 1.010453062s ago: executing program 3 (id=574): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) (async) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.010320378s ago: executing program 0 (id=575): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) fadvise64(r1, 0xe668, 0x0, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 930.403695ms ago: executing program 3 (id=577): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd']) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000033000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 750.683809ms ago: executing program 3 (id=579): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 750.23384ms ago: executing program 1 (id=580): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1140) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911280000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000a00)=0x40000) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x2) 500.115019ms ago: executing program 1 (id=581): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0x1f, 0x1, 0x8, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@rfm={0x25, 0x8, "49b36774fe0cf8571511d2e8bbbf9aeb"}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06", 0x29}], 0x1}, 0x8001) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@tracing={r3, 0x8000000000000001}}, 0x20) sendfile(r0, r4, &(0x7f00000001c0)=0x2, 0x9) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) ioprio_get$uid(0x2, 0x0) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000004c0)=0x4cc, 0x4) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000280)={0x5}) sync() r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sync() ioctl$TCSBRK(r7, 0x80111500, 0x5) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0), 0x81, 0x0) ioctl$SNDCTL_TMR_STOP(r8, 0x5403) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ff6fffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 300.631731ms ago: executing program 1 (id=582): read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) r0 = io_uring_setup(0x30dc, &(0x7f0000000600)={0x0, 0x0, 0x40, 0x2, 0x300}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000000c0), 0x4f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000000006"], 0x7c}}, 0x80) 268.639472ms ago: executing program 1 (id=583): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000005180)=ANY=[@ANYBLOB="842300002d00090026bd70000000000004000000702318"], 0x2384}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000000000)) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000440)="a551627b542349003e71181c88cd36e4ff9b410126ad2ad23e4df6431668eb8fa1d5aa8f9b34c497eb4be20bb15116f80149a19d09b6e5cb8a30fa5f646b0f775a2ff33070a41ecd7214339d5d882a6122f0d212ac0318fb6e82282963d48eff9c9202c893d4a9b4dd8b9a910dbe88359177f09940c16e9f8964e8582ecb2a883af0587841a830af61f9433e4e412a7b71946eea53ea5eca2e61ee3721eda19714db5471a2d712912b144c9c9d3d46883f13b0e329fa79da6cf51a9c56c52a", 0xbf, 0x40040c2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c) ptrace$setregs(0xd, r3, 0xffffffffffffff05, &(0x7f0000000140)="fbe1a237208f577f913528cc66444f331b27b322d45ef69e52674249cae5aab6fb7200350e6f57cf97e2ee0fa284860b06230a3287c86edc3136f6d2431eb1aef9c0ded6132dc5244651ab472c99d8d5de73dabb09c8d9aa00ab8605eeddcece5b8bbd55feb41f0102864e843e5113dd0e71da4054c6cc75a8b41fbab56effd6cab62620375f564058f70195ab1db4ded86e7e5fb09f91938675f5aa6f9a05e5e54a87e5788657b00e1ce7f1") sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044052) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0x2504, 0x1000, 0xfffffffb, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r1, r1, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 130.794441ms ago: executing program 0 (id=584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@limit={{0x48}, {0x48000000, 0x180}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 130.683197ms ago: executing program 0 (id=585): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r1 = syz_open_dev$video4linux(&(0x7f0000000480), 0x0, 0x40000) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x1, [@default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) 69.742659ms ago: executing program 1 (id=586): openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="f84ce885b5ebb27c5b52dae00eacbc00", 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x2) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000140)='usrquota', &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x2000200000a95c, 0x0, 0x4000010201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs(r3, &(0x7f0000000240)='net/ip_tables_names\x00') getxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)=@known='user.syz\x00', &(0x7f0000000380)=""/19, 0x13) 69.544957ms ago: executing program 0 (id=587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd}}, './file0\x00'}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x8, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x3}], 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x5b23, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=588): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd']) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100003b000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 0s ago: executing program 1 (id=589): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x8) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xff) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xff) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xfe) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000012c0)=ANY=[@ANYRESDEC], &(0x7f0000001300)='GPL\x00'}, 0x94) creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001380)={r3, 0xf, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4801) (async) migrate_pages(0x0, 0x7f, &(0x7f0000001340)=0x8000003, &(0x7f0000000840)=0xffffffffffffffff) (async) r5 = fanotify_init(0x200, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) r6 = dup(r0) fanotify_mark(r5, 0x1, 0x8001053, r6, 0x0) (async) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000200)) kernel console output (not intermixed with test programs): [ 44.080348][ T40] audit: type=1400 audit(1752497160.034:61): avc: denied { siginh } for pid=5925 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:59315' (ED25519) to the list of known hosts. [ 45.209432][ T40] audit: type=1400 audit(1752497161.184:62): avc: denied { name_bind } for pid=5934 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.225840][ T40] audit: type=1400 audit(1752497161.204:63): avc: denied { write } for pid=5935 comm="sh" path="pipe:[1825]" dev="pipefs" ino=1825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.241144][ T40] audit: type=1400 audit(1752497161.214:64): avc: denied { execute } for pid=5935 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.250228][ T40] audit: type=1400 audit(1752497161.214:65): avc: denied { execute_no_trans } for pid=5935 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.309200][ T5935] cgroup: Unknown subsys name 'net' [ 47.312168][ T40] audit: type=1400 audit(1752497163.284:66): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.425290][ T5935] cgroup: Unknown subsys name 'cpuset' [ 47.430152][ T5935] cgroup: Unknown subsys name 'rlimit' [ 47.645066][ T5939] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.306570][ T5935] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.264006][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.264017][ T40] audit: type=1400 audit(1752497167.244:80): avc: denied { execmem } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.455554][ T40] audit: type=1400 audit(1752497167.434:81): avc: denied { create } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.461757][ T40] audit: type=1400 audit(1752497167.434:82): avc: denied { read write } for pid=5947 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.469742][ T40] audit: type=1400 audit(1752497167.434:83): avc: denied { open } for pid=5947 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.481505][ T40] audit: type=1400 audit(1752497167.434:84): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="socket:[5837]" dev="sockfs" ino=5837 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.511160][ T5311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.511840][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.514386][ T5311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.516760][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.519368][ T5311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.521094][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.521263][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.521721][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.521858][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.523122][ T5961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.523242][ T5311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.524438][ T5311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.524556][ T5311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.525398][ T5963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.525753][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.526155][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.526403][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.528189][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.532359][ T40] audit: type=1400 audit(1752497167.504:85): avc: denied { read } for pid=5947 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.545110][ T5311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.546869][ T40] audit: type=1400 audit(1752497167.504:86): avc: denied { open } for pid=5947 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.554937][ T5311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.558002][ T40] audit: type=1400 audit(1752497167.504:87): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.745026][ T40] audit: type=1400 audit(1752497167.724:88): avc: denied { module_request } for pid=5948 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.805559][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 51.834113][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 51.862020][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 51.894095][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 52.022233][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.026060][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.028461][ T5948] bridge_slave_0: entered allmulticast mode [ 52.031135][ T5948] bridge_slave_0: entered promiscuous mode [ 52.065386][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.068255][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.071276][ T5947] bridge_slave_0: entered allmulticast mode [ 52.074547][ T5947] bridge_slave_0: entered promiscuous mode [ 52.077223][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.079402][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.081678][ T5948] bridge_slave_1: entered allmulticast mode [ 52.084488][ T5948] bridge_slave_1: entered promiscuous mode [ 52.107649][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.109909][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.112152][ T5947] bridge_slave_1: entered allmulticast mode [ 52.115323][ T5947] bridge_slave_1: entered promiscuous mode [ 52.209567][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.213553][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.215829][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.218097][ T5958] bridge_slave_0: entered allmulticast mode [ 52.220740][ T5958] bridge_slave_0: entered promiscuous mode [ 52.223857][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.226101][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.228359][ T5958] bridge_slave_1: entered allmulticast mode [ 52.230943][ T5958] bridge_slave_1: entered promiscuous mode [ 52.240265][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.245722][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.317502][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.346045][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.349051][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.351308][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.355866][ T5949] bridge_slave_0: entered allmulticast mode [ 52.358526][ T5949] bridge_slave_0: entered promiscuous mode [ 52.390141][ T5948] team0: Port device team_slave_0 added [ 52.394092][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.397040][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.399281][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.401548][ T5949] bridge_slave_1: entered allmulticast mode [ 52.404450][ T5949] bridge_slave_1: entered promiscuous mode [ 52.420813][ T5947] team0: Port device team_slave_0 added [ 52.424377][ T5947] team0: Port device team_slave_1 added [ 52.427589][ T5948] team0: Port device team_slave_1 added [ 52.552371][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.555838][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.558052][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.566020][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.570489][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.575648][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.584828][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.589898][ T5958] team0: Port device team_slave_0 added [ 52.594781][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.598085][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.600284][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.608332][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.612240][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.615008][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.623637][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.628434][ T5958] team0: Port device team_slave_1 added [ 52.690290][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.692542][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.700182][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.705669][ T5949] team0: Port device team_slave_0 added [ 52.709558][ T5949] team0: Port device team_slave_1 added [ 52.727217][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.730118][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.740665][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.810292][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.813240][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.823635][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.869575][ T5947] hsr_slave_0: entered promiscuous mode [ 52.872741][ T5947] hsr_slave_1: entered promiscuous mode [ 52.875875][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.878721][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.888756][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.923267][ T5948] hsr_slave_0: entered promiscuous mode [ 52.926368][ T5948] hsr_slave_1: entered promiscuous mode [ 52.929243][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.932101][ T5948] Cannot create hsr debugfs directory [ 53.041085][ T5958] hsr_slave_0: entered promiscuous mode [ 53.044102][ T5958] hsr_slave_1: entered promiscuous mode [ 53.046940][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.049912][ T5958] Cannot create hsr debugfs directory [ 53.108787][ T5949] hsr_slave_0: entered promiscuous mode [ 53.111451][ T5949] hsr_slave_1: entered promiscuous mode [ 53.113573][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.115902][ T5949] Cannot create hsr debugfs directory [ 53.418516][ T5948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.425730][ T5948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.430974][ T5948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.443102][ T5948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.470635][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.475529][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.479758][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.483879][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.533469][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.538090][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.543509][ T5311] Bluetooth: hci0: command tx timeout [ 53.543516][ T5960] Bluetooth: hci2: command tx timeout [ 53.550620][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.569161][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.598303][ T5958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.604024][ T5958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.608156][ T5958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.618799][ T5958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.623212][ T5960] Bluetooth: hci3: command tx timeout [ 53.623236][ T5311] Bluetooth: hci1: command tx timeout [ 53.647638][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.659551][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.683570][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.699551][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.709352][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.711720][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.715794][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.718006][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.723700][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.734112][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.736925][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.755257][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.757521][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.766916][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.789768][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.792156][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.801477][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.805707][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.807964][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.816072][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.843335][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.856882][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.859789][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.859943][ T40] audit: type=1400 audit(1752497169.834:89): avc: denied { sys_module } for pid=5948 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.867752][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.877778][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.880058][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.938168][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.949673][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.980907][ T5947] veth0_vlan: entered promiscuous mode [ 53.991048][ T5948] veth0_vlan: entered promiscuous mode [ 53.993962][ T5947] veth1_vlan: entered promiscuous mode [ 54.001798][ T5948] veth1_vlan: entered promiscuous mode [ 54.009821][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.028727][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.039843][ T5948] veth0_macvtap: entered promiscuous mode [ 54.049105][ T5948] veth1_macvtap: entered promiscuous mode [ 54.053832][ T5947] veth0_macvtap: entered promiscuous mode [ 54.061352][ T5947] veth1_macvtap: entered promiscuous mode [ 54.079100][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.085193][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.090155][ T5949] veth0_vlan: entered promiscuous mode [ 54.095868][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.104569][ T5948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.108274][ T5948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.111836][ T5948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.115862][ T5948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.125882][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.130867][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.134063][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.136782][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.139473][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.150587][ T5949] veth1_vlan: entered promiscuous mode [ 54.165614][ T5958] veth0_vlan: entered promiscuous mode [ 54.181645][ T5958] veth1_vlan: entered promiscuous mode [ 54.208175][ T5949] veth0_macvtap: entered promiscuous mode [ 54.214027][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.216532][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.221128][ T5949] veth1_macvtap: entered promiscuous mode [ 54.240275][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.243149][ T5958] veth0_macvtap: entered promiscuous mode [ 54.243759][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.246916][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.247535][ T5958] veth1_macvtap: entered promiscuous mode [ 54.249818][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.260877][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.277897][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.281910][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.285610][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.288393][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.291073][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.299811][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.301065][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.302343][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.325659][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.325938][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.347069][ T5958] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.350445][ T5958] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.354957][ T5958] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.358037][ T5958] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.426619][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.426677][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.429069][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.436730][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.466742][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.469200][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.475396][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.481405][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.528880][ T6044] erofs (device nbd1): cannot find valid erofs superblock [ 54.634259][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.018140][ T6061] Zero length message leads to an empty skb [ 55.027090][ T6061] dvmrp1: entered allmulticast mode [ 55.375004][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 55.552939][ T6070] syz.2.10 (6070) used greatest stack depth: 20920 bytes left [ 55.622783][ T5964] Bluetooth: hci0: command tx timeout [ 55.624528][ T5960] Bluetooth: hci2: command tx timeout [ 55.681753][ T6090] netlink: 'syz.1.14': attribute type 12 has an invalid length. [ 55.684475][ T6090] netlink: 120 bytes leftover after parsing attributes in process `syz.1.14'. [ 55.704082][ T5960] Bluetooth: hci3: command tx timeout [ 55.704612][ T5964] Bluetooth: hci1: command tx timeout [ 55.759146][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'. [ 56.246082][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 56.272402][ T40] kauditd_printk_skb: 28181 callbacks suppressed [ 56.272412][ T40] audit: type=1326 audit(1752497172.244:28269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.0.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5e18e929 code=0x50000 [ 56.281423][ T40] audit: type=1326 audit(1752497172.244:28268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.0.7" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5f5e18d3df code=0x50000 [ 56.288423][ T40] audit: type=1326 audit(1752497172.244:28270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.0.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5e18e929 code=0x50000 [ 56.291992][ T6127] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.295334][ T40] audit: type=1326 audit(1752497172.244:28271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.0.7" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5f5e18d3df code=0x50000 [ 56.298433][ T6127] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 56.304123][ T40] audit: type=1326 audit(1752497172.244:28272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.0.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5e18e929 code=0x50000 [ 56.306605][ T6127] audit: backlog limit exceeded [ 56.313793][ T40] audit: type=1326 audit(1752497172.244:28273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.0.7" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5f5e18d3df code=0x50000 [ 56.316403][ T6126] syzkaller0: entered promiscuous mode [ 56.322561][ T40] audit: type=1326 audit(1752497172.244:28274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.0.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5e18e929 code=0x50000 [ 56.323935][ T6126] syzkaller0: entered allmulticast mode [ 56.337700][ T6126] capability: warning: `syz.1.28' uses 32-bit capabilities (legacy support in use) [ 56.375227][ T6127] binder: 6125:6127 ioctl c0306201 200000000040 returned -14 [ 56.662491][ T5311] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 56.665349][ T5964] Bluetooth: hci4: command 0x1003 tx timeout [ 57.061011][ T6131] batadv_slave_1: entered promiscuous mode [ 57.069158][ T6129] batadv_slave_1: left promiscuous mode [ 57.134717][ T6140] dlm: no locking on control device [ 57.177030][ T6137] ======================================================= [ 57.177030][ T6137] WARNING: The mand mount option has been deprecated and [ 57.177030][ T6137] and is ignored by this kernel. Remove the mand [ 57.177030][ T6137] option from the mount to silence this warning. [ 57.177030][ T6137] ======================================================= [ 57.191182][ T6137] netlink: 152 bytes leftover after parsing attributes in process `syz.3.31'. [ 57.195727][ T6137] tipc: Started in network mode [ 57.197639][ T6137] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 57.202667][ T6137] tipc: Enabled bearer , priority 10 [ 57.332972][ T6144] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 57.403661][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'. [ 57.474256][ T6158] netlink: 'syz.3.37': attribute type 12 has an invalid length. [ 57.477335][ T6158] netlink: 120 bytes leftover after parsing attributes in process `syz.3.37'. [ 57.703334][ T5964] Bluetooth: hci0: command tx timeout [ 57.705507][ T5311] Bluetooth: hci2: command tx timeout [ 57.739905][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 57.782492][ T5964] Bluetooth: hci1: command tx timeout [ 57.784255][ T5311] Bluetooth: hci3: command tx timeout [ 57.790031][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.43'. [ 57.800302][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.43'. [ 57.806184][ T6170] program syz.2.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.870142][ T6175] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 57.995961][ T6187] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 57.997527][ T6186] Bluetooth: MGMT ver 1.23 [ 58.212822][ T6205] could not allocate digest TFM handle ghash-ce-sync [ 58.300304][ T6219] process 'syz.1.61' launched './file1' with NULL argv: empty string added [ 58.313342][ T840] tipc: Node number set to 4269801514 [ 58.389265][ T6228] block device autoloading is deprecated and will be removed. [ 58.429484][ T6237] Invalid source name [ 58.430800][ T6237] UBIFS error (pid: 6237): cannot open "./file0", error -22 [ 58.562211][ T6256] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 58.722067][ T6270] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6270 comm=syz.1.78 [ 58.815643][ T6290] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.818355][ T6290] overlayfs: failed to set xattr on upper [ 58.820482][ T6290] overlayfs: ...falling back to redirect_dir=nofollow. [ 58.823215][ T6290] overlayfs: ...falling back to index=off. [ 58.825079][ T6290] overlayfs: ...falling back to uuid=null. [ 58.838468][ T6295] syz.1.83: attempt to access beyond end of device [ 58.838468][ T6295] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 58.844096][ T6295] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 58.871709][ T6299] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.964097][ T6297] /dev/sr0: Can't open blockdev [ 59.066595][ T6309] netlink: 'syz.3.89': attribute type 9 has an invalid length. [ 59.077147][ T6309] usb usb8: usbfs: process 6309 (syz.3.89) did not claim interface 0 before use [ 59.115383][ T6314] program syz.3.90 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.456861][ T6321] ip6erspan0: tun_chr_ioctl cmd 1074025675 [ 59.459142][ T6321] ip6erspan0: persist enabled [ 59.460804][ T6321] ip6erspan0: tun_chr_ioctl cmd 1074025675 [ 59.465635][ T6321] ip6erspan0: persist disabled [ 59.470310][ T6321] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 59.474204][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 59.783725][ T5964] Bluetooth: hci2: command tx timeout [ 59.783763][ T5960] Bluetooth: hci0: command tx timeout [ 59.800407][ T6341] ieee802154 phy0 wpan0: encryption failed: -22 [ 59.862634][ T5960] Bluetooth: hci3: command tx timeout [ 59.862749][ T5964] Bluetooth: hci1: command tx timeout [ 59.941068][ T6350] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 60.782436][ T54] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 60.913576][ T54] usb 6-1: device descriptor read/64, error -71 [ 61.162441][ T54] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 61.292404][ T54] usb 6-1: device descriptor read/64, error -71 [ 61.403260][ T54] usb usb6-port1: attempt power cycle [ 61.542451][ T5964] Bluetooth: hci4: command 0x1003 tx timeout [ 61.545161][ T5311] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.659017][ T40] kauditd_printk_skb: 40756 callbacks suppressed [ 61.659027][ T40] audit: type=1400 audit(1752497177.634:69028): avc: denied { mounton } for pid=6378 comm="syz.3.111" path="/32/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 61.668796][ T40] audit: type=1400 audit(1752497177.634:69029): avc: denied { create } for pid=6378 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.675736][ T40] audit: type=1400 audit(1752497177.634:69030): avc: denied { getopt } for pid=6378 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.697519][ T40] audit: type=1400 audit(1752497177.674:69031): avc: denied { ioctl } for pid=6382 comm="syz.0.112" path="ipc:[4026532879]" dev="nsfs" ino=4026532879 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.772375][ T54] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 61.792858][ T54] usb 6-1: device descriptor read/8, error -71 [ 61.828194][ T40] audit: type=1400 audit(1752497177.804:69032): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 61.865469][ T6392] netlink: 'syz.3.115': attribute type 11 has an invalid length. [ 61.868082][ T6392] netlink: 'syz.3.115': attribute type 11 has an invalid length. [ 61.870489][ T6392] __nla_validate_parse: 6 callbacks suppressed [ 61.870496][ T6392] netlink: 224 bytes leftover after parsing attributes in process `syz.3.115'. [ 61.901897][ T40] audit: type=1400 audit(1752497177.874:69033): avc: denied { search } for pid=5663 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.910094][ T40] audit: type=1400 audit(1752497177.874:69034): avc: denied { search } for pid=5663 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.919526][ T6395] binder: 6389:6395 ioctl c0306201 200000000640 returned -22 [ 61.922409][ T40] audit: type=1400 audit(1752497177.874:69035): avc: denied { search } for pid=5663 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.940078][ T40] audit: type=1400 audit(1752497177.874:69036): avc: denied { read } for pid=5663 comm="dhcpcd" name="n104" dev="tmpfs" ino=2429 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.948891][ T40] audit: type=1400 audit(1752497177.874:69037): avc: denied { open } for pid=5663 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=2429 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.964940][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.116'. [ 61.967993][ T6399] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 61.970430][ T6399] netlink: 'syz.3.116': attribute type 2 has an invalid length. [ 61.973011][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.116'. [ 62.008986][ T6403] tmpfs: Bad value for 'mpol' [ 62.062559][ T54] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 62.084125][ T54] usb 6-1: device descriptor read/8, error -71 [ 62.193330][ T54] usb usb6-port1: unable to enumerate USB device [ 62.260902][ T6423] dvmrp1: entered allmulticast mode [ 62.551739][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.129'. [ 62.554774][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 63.102459][ T6209] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.130727][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 63.252395][ T6209] usb 7-1: Using ep0 maxpacket: 16 [ 63.255251][ T6209] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.258211][ T6209] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 63.261743][ T6209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.268409][ T6209] usb 7-1: config 0 descriptor?? [ 63.476802][ T6467] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.134'. [ 63.485264][ T6467] batadv_slave_1: entered promiscuous mode [ 63.490889][ T6209] usbhid 7-1:0.0: can't add hid device: -71 [ 63.493332][ T6209] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 63.497387][ T6209] usb 7-1: USB disconnect, device number 2 [ 63.702438][ T5964] Bluetooth: hci3: command 0x0405 tx timeout [ 64.258038][ T6508] syzkaller1: entered promiscuous mode [ 64.260220][ T6508] syzkaller1: entered allmulticast mode [ 64.263740][ T6507] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56317 sclass=netlink_xfrm_socket pid=6507 comm=syz.2.149 [ 64.410671][ T6525] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.470296][ T6531] pimreg: entered allmulticast mode [ 64.476184][ T6531] pimreg: left allmulticast mode [ 64.522183][ T6535] netlink: 'syz.3.155': attribute type 4 has an invalid length. [ 64.530763][ T6535] netlink: 'syz.3.155': attribute type 4 has an invalid length. [ 64.540302][ T6535] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.543287][ T6535] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.545982][ T6535] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.548682][ T6535] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.584081][ T6538] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 64.874204][ T6554] /dev/sr0: Can't open blockdev [ 64.876723][ T6566] gfs2: gfs2 mount does not exist [ 64.937764][ T6573] input: syz0 as /devices/virtual/input/input5 [ 64.980890][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.294919][ T6609] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 65.309871][ T6609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.322136][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.173'. [ 65.325570][ T6609] netlink: 52 bytes leftover after parsing attributes in process `syz.3.173'. [ 65.685193][ T6671] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 65.794410][ T6679] netlink: 68 bytes leftover after parsing attributes in process `syz.2.192'. [ 65.795654][ T6681] ceph: Path missing in source [ 65.828734][ T6687] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 65.837471][ T6687] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 66.759886][ T5311] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 67.062865][ T6036] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 67.064944][ T6036] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 67.292564][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 67.292580][ T40] audit: type=1400 audit(1752497183.264:69106): avc: denied { getopt } for pid=6724 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.325867][ T6731] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 67.378845][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.208'. [ 67.388296][ T40] audit: type=1400 audit(1752497183.364:69107): avc: denied { setopt } for pid=6734 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.412530][ T6736] warning: `syz.1.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.485860][ T40] audit: type=1400 audit(1752497183.464:69108): avc: denied { wake_alarm } for pid=6737 comm="syz.0.209" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.528328][ T6743] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 67.536261][ T40] audit: type=1400 audit(1752497183.514:69109): avc: denied { bind } for pid=6744 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.562626][ T6746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6746 comm=syz.1.212 [ 67.568282][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.212'. [ 67.572385][ T40] audit: type=1400 audit(1752497183.544:69110): avc: denied { execute } for pid=6744 comm="syz.1.212" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 67.647336][ T40] audit: type=1400 audit(1752497183.624:69111): avc: denied { append } for pid=6753 comm="syz.3.214" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.649181][ T6754] loop6: detected capacity change from 0 to 524287487 [ 67.657049][ T40] audit: type=1400 audit(1752497183.634:69112): avc: denied { watch } for pid=6756 comm="syz.1.215" path="/45/net_prio.prioidx" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.660943][ T6754] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.685169][ T40] audit: type=1400 audit(1752497183.634:69113): avc: denied { watch_sb watch_reads } for pid=6756 comm="syz.1.215" path="/45/net_prio.prioidx" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.692484][ T6754] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.696201][ T6754] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.701515][ T6754] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.707205][ T6754] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.710558][ T6754] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.714014][ T6754] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.717373][ T6754] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.720612][ T6754] ldm_validate_partition_table(): Disk read failed. [ 67.722821][ T6754] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.725607][ T6754] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.728545][ T6754] Dev loop6: unable to read RDB block 0 [ 67.730582][ T6754] loop6: unable to read partition table [ 67.732885][ T6754] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 67.790606][ T40] audit: type=1400 audit(1752497183.764:69114): avc: denied { read } for pid=6769 comm="syz.1.217" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 67.801319][ T40] audit: type=1400 audit(1752497183.764:69115): avc: denied { open } for pid=6769 comm="syz.1.217" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 67.834844][ T5361] ldm_validate_partition_table(): Disk read failed. [ 67.837638][ T5361] Dev loop6: unable to read RDB block 0 [ 67.839640][ T5361] loop6: unable to read partition table [ 67.946595][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 67.956875][ T6780] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 67.959394][ T6780] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.964830][ T6780] vhci_hcd vhci_hcd.0: Device attached [ 67.967335][ T6782] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 67.970862][ T72] vhci_hcd: stop threads [ 67.974476][ T72] vhci_hcd: release socket [ 67.975949][ T72] vhci_hcd: disconnect device [ 68.491023][ T6798] random: crng reseeded on system resumption [ 68.647524][ T6809] /dev/sg0: Can't lookup blockdev [ 68.778382][ T6814] trusted_key: syz.0.233 sent an empty control message without MSG_MORE. [ 69.140037][ T6818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.235'. [ 69.151650][ T6820] netlink: 72 bytes leftover after parsing attributes in process `syz.1.236'. [ 69.382385][ T5311] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.382618][ T6036] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 69.386413][ T6036] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 69.402976][ T6826] 9pnet_fd: Insufficient options for proto=fd [ 69.436299][ T6828] netlink: 'syz.3.240': attribute type 10 has an invalid length. [ 69.439020][ T6828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.240'. [ 69.462469][ T6695] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 69.530658][ T6828] team0: Port device geneve0 added [ 69.572814][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 69.587113][ T6833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.594482][ T99] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 69.614008][ T6695] usb 6-1: Using ep0 maxpacket: 8 [ 69.617033][ T6695] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 69.620921][ T6695] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 69.624602][ T6695] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 69.627593][ T6695] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 69.631137][ T6695] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.639490][ T6695] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.642991][ T6695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.656473][ T6695] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 69.904901][ T6849] bridge_slave_0: left allmulticast mode [ 69.907405][ T6849] bridge_slave_0: left promiscuous mode [ 69.910309][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.917701][ T6849] bridge_slave_1: left allmulticast mode [ 69.920116][ T6849] bridge_slave_1: left promiscuous mode [ 69.925003][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.931952][ T6849] bond0: (slave bond_slave_0): Releasing backup interface [ 69.998315][ T6849] bond0: (slave bond_slave_1): Releasing backup interface [ 70.050301][ T6849] team0: Port device team_slave_0 removed [ 70.055295][ T6849] team0: Port device team_slave_1 removed [ 70.057973][ T6849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.060830][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.066519][ T6849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.069417][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.157131][ T6849] team0: Port device geneve0 removed [ 70.587389][ T6869] syz.3.253: attempt to access beyond end of device [ 70.587389][ T6869] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 70.594185][ T6869] XFS (nbd3): SB validate failed with error -5. [ 70.615444][ T6869] 9pnet_fd: p9_fd_create_unix (6869): problem connecting socket: ./cgroup/file0: -2 [ 70.867284][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.256'. [ 70.870365][ T6880] netlink: 92 bytes leftover after parsing attributes in process `syz.3.256'. [ 70.874749][ T6880] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 70.932059][ T6883] loop3: detected capacity change from 0 to 1 [ 70.937497][ T6883] Dev loop3: unable to read RDB block 1 [ 70.939670][ T6883] loop3: unable to read partition table [ 70.941909][ T6883] loop3: partition table beyond EOD, truncated [ 70.944480][ T6883] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 71.068046][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.070065][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.702678][ T5311] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.705066][ T6036] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 71.707408][ T6036] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 72.233393][ T5957] usb 6-1: USB disconnect, device number 6 [ 73.712441][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 74.022387][ T6036] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 74.022480][ T5311] Bluetooth: hci3: command 0x0405 tx timeout [ 74.024897][ T6036] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 75.545571][ T6925] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 75.649383][ T6939] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6939 comm=syz.3.270 [ 75.680956][ T6947] xt_hashlimit: size too large, truncated to 1048576 [ 75.836890][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 75.836901][ T40] audit: type=1400 audit(1752497191.814:69135): avc: denied { bind } for pid=6945 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.841250][ T6947] netlink: 'syz.3.272': attribute type 4 has an invalid length. [ 75.845299][ T40] audit: type=1400 audit(1752497191.824:69136): avc: denied { accept } for pid=6969 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.850352][ T6947] netlink: 'syz.3.272': attribute type 4 has an invalid length. [ 76.054732][ T6984] overlayfs: failed to get inode (-116) [ 76.057298][ T6984] overlayfs: failed to get inode (-116) [ 76.108333][ T40] audit: type=1400 audit(1752497192.084:69137): avc: denied { setopt } for pid=6992 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.115706][ T40] audit: type=1326 audit(1752497192.084:69138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6992 comm="syz.0.282" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f5e18e929 code=0x0 [ 76.125115][ T6997] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 76.127567][ T6997] netlink: 224 bytes leftover after parsing attributes in process `syz.1.283'. [ 76.131394][ T40] audit: type=1400 audit(1752497192.094:69139): avc: denied { create } for pid=6996 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 76.138007][ T40] audit: type=1400 audit(1752497192.094:69140): avc: denied { ioctl } for pid=6996 comm="syz.1.283" path="socket:[14697]" dev="sockfs" ino=14697 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 76.145484][ T40] audit: type=1400 audit(1752497192.094:69141): avc: denied { getopt } for pid=6996 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.151333][ T40] audit: type=1400 audit(1752497192.104:69142): avc: denied { sqpoll } for pid=6996 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.420062][ T40] audit: type=1400 audit(1752497192.394:69143): avc: denied { accept } for pid=7009 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.527312][ T40] audit: type=1400 audit(1752497192.504:69144): avc: denied { read } for pid=7009 comm="syz.0.287" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 76.609882][ T7024] overlayfs: missing 'lowerdir' [ 76.653120][ T7027] fusectl: Unknown parameter 'inode32' [ 76.735886][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 76.740175][ T7030] 9pnet: p9_errstr2errno: server reported unknown error @ [ 77.227851][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 77.236596][ T7037] macsec0: entered promiscuous mode [ 77.422572][ T7049] hpfs: hpfs_map_sector(): read error [ 77.509841][ T7057] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 77.511944][ T7057] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 77.517321][ T7057] vhci_hcd vhci_hcd.0: Device attached [ 77.520862][ T7058] vhci_hcd: unknown pdu 2 [ 77.525619][ T60] vhci_hcd: stop threads [ 77.525618][ T7057] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 77.527069][ T60] vhci_hcd: release socket [ 77.529097][ T7057] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 77.533452][ T60] vhci_hcd: disconnect device [ 77.535528][ T7057] vhci_hcd vhci_hcd.0: Device attached [ 77.538880][ T7060] vhci_hcd: connection closed [ 77.539228][ T1153] vhci_hcd: stop threads [ 77.542139][ T1153] vhci_hcd: release socket [ 77.543750][ T1153] vhci_hcd: disconnect device [ 78.074818][ T7063] tipc: Trying to set illegal importance in message [ 78.183169][ T7069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.302'. [ 78.585610][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 78.589520][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 79.278795][ T7113] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.285806][ T7113] dlm: no local IP address has been set [ 79.288299][ T7113] dlm: cannot start dlm midcomms -107 [ 79.298857][ T7113] evm: overlay not supported [ 79.446536][ T7115] new mount options do not match the existing superblock, will be ignored [ 79.505549][ T7116] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 80.224339][ T7132] @: renamed from vlan0 (while UP) [ 80.660523][ T7165] syz.0.332: attempt to access beyond end of device [ 80.660523][ T7165] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 80.670489][ T7165] (syz.0.332,7165,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 80.676169][ T7165] (syz.0.332,7165,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 80.679277][ T7165] (syz.0.332,7165,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 80.682909][ T7165] (syz.0.332,7165,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 80.847008][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 80.847017][ T40] audit: type=1400 audit(1752497196.824:69169): avc: denied { listen } for pid=7169 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.131770][ T40] audit: type=1400 audit(1752497197.104:69170): avc: denied { execute } for pid=7178 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.134382][ T7180] xfs: Unknown parameter 'usrquota#' [ 81.134500][ T7179] xfs: Unknown parameter 'usrquota#' [ 81.141685][ T40] audit: type=1400 audit(1752497197.104:69171): avc: denied { execute_no_trans } for pid=7178 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.264438][ T5964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.267598][ T5964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.270421][ T5964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.273627][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.276698][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.283304][ T5311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.292507][ T5311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.295208][ T5311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.297943][ T5311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.301090][ T5311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.303926][ T1028] cfg80211: failed to load regulatory.db [ 81.344602][ T40] audit: type=1400 audit(1752497197.324:69172): avc: denied { connect } for pid=7181 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.715560][ T7198] usb usb8: usbfs: process 7198 (syz.3.341) did not claim interface 0 before use [ 82.504364][ T7194] tipc: Enabled bearer , priority 10 [ 82.582421][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 82.585448][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.593527][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'. [ 82.632150][ T40] audit: type=1400 audit(1752497198.604:69173): avc: denied { ioctl } for pid=7208 comm="syz.1.345" path="socket:[15441]" dev="sockfs" ino=15441 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.643816][ T40] audit: type=1400 audit(1752497198.614:69174): avc: denied { ioctl } for pid=7208 comm="syz.1.345" path="socket:[14287]" dev="sockfs" ino=14287 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.651944][ T40] audit: type=1400 audit(1752497198.614:69175): avc: denied { map } for pid=7208 comm="syz.1.345" path="socket:[14287]" dev="sockfs" ino=14287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.661460][ T40] audit: type=1400 audit(1752497198.614:69176): avc: denied { accept } for pid=7208 comm="syz.1.345" path="socket:[14287]" dev="sockfs" ino=14287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.670984][ T40] audit: type=1400 audit(1752497198.614:69177): avc: denied { ioctl } for pid=7208 comm="syz.1.345" path="socket:[14288]" dev="sockfs" ino=14288 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.680631][ T40] audit: type=1400 audit(1752497198.654:69178): avc: denied { ioctl } for pid=7211 comm="syz.1.346" path="socket:[14293]" dev="sockfs" ino=14293 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.707044][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.794483][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 82.874257][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.994019][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.022586][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.025437][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.028384][ T7183] bridge_slave_0: entered allmulticast mode [ 83.031910][ T7183] bridge_slave_0: entered promiscuous mode [ 83.035467][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.037828][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.040143][ T7183] bridge_slave_1: entered allmulticast mode [ 83.045165][ T7183] bridge_slave_1: entered promiscuous mode [ 83.062075][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 83.085686][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.089804][ T7236] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 83.090412][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.093772][ T7236] netlink: 216 bytes leftover after parsing attributes in process `syz.1.353'. [ 83.164151][ T7183] team0: Port device team_slave_0 added [ 83.167732][ T7183] team0: Port device team_slave_1 added [ 83.168875][ T7241] Cannot find add_set index 0 as target [ 83.248640][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.250828][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.260962][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.265308][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.267520][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.276627][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.327669][ T46] bridge_slave_1: left allmulticast mode [ 83.329665][ T46] bridge_slave_1: left promiscuous mode [ 83.332278][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.339384][ T46] bridge_slave_0: left allmulticast mode [ 83.341254][ T46] bridge_slave_0: left promiscuous mode [ 83.343426][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.382978][ T5964] Bluetooth: hci1: command tx timeout [ 83.698608][ T7264] xt_hashlimit: max too large, truncated to 1048576 [ 83.701910][ T7264] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 85.304552][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.344602][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.424437][ T46] bond0 (unregistering): Released all slaves [ 85.435113][ T7183] hsr_slave_0: entered promiscuous mode [ 85.437672][ T7183] hsr_slave_1: entered promiscuous mode [ 85.439810][ T7183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.442177][ T7183] Cannot create hsr debugfs directory [ 85.444245][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 85.472403][ T5964] Bluetooth: hci1: command tx timeout [ 85.520372][ T7282] capability: warning: `syz.0.368' uses deprecated v2 capabilities in a way that may be insecure [ 85.733527][ T10] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 85.741307][ T7293] pimreg: entered allmulticast mode [ 85.743190][ T7293] pimreg: left allmulticast mode [ 85.744807][ T7293] dvmrp1: left allmulticast mode [ 85.882812][ T10] usb 6-1: device descriptor read/64, error -71 [ 85.884356][ T7304] tipc: Trying to set illegal importance in message [ 85.947759][ T7183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.953929][ T7183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.957902][ T7183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.961675][ T7183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.058014][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.067522][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.076415][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.079033][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.087737][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.090391][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.144646][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 86.177207][ T46] hsr_slave_0: left promiscuous mode [ 86.180970][ T46] hsr_slave_1: left promiscuous mode [ 86.183435][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.185848][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.188952][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.191281][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.209993][ T46] batadv_slave_1: left promiscuous mode [ 86.211932][ T46] veth1_macvtap: left promiscuous mode [ 86.213920][ T46] veth0_macvtap: left promiscuous mode [ 86.215706][ T46] veth1_vlan: left promiscuous mode [ 86.217906][ T46] veth0_vlan: left promiscuous mode [ 86.282482][ T10] usb 6-1: device descriptor read/64, error -71 [ 86.392604][ T10] usb usb6-port1: attempt power cycle [ 86.752430][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 86.782746][ T10] usb 6-1: device descriptor read/8, error -71 [ 87.022397][ T10] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 87.043776][ T10] usb 6-1: device descriptor read/8, error -71 [ 87.153498][ T10] usb usb6-port1: unable to enumerate USB device [ 87.552455][ T5964] Bluetooth: hci1: command tx timeout [ 88.604332][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 88.604343][ T40] audit: type=1400 audit(1752497204.584:69187): avc: denied { mount } for pid=7326 comm="syz.1.376" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.609017][ T7327] tmpfs: Cannot disable swap on remount [ 88.651692][ T40] audit: type=1400 audit(1752497204.624:69188): avc: denied { unlink } for pid=7329 comm="syz.1.377" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.693041][ T40] audit: type=1400 audit(1752497204.674:69189): avc: denied { create } for pid=7331 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.701652][ T40] audit: type=1400 audit(1752497204.674:69190): avc: denied { listen } for pid=7331 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.718743][ T40] audit: type=1400 audit(1752497204.694:69191): avc: denied { read } for pid=7331 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.727404][ T40] audit: type=1400 audit(1752497204.694:69192): avc: denied { write } for pid=7331 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 89.622524][ T5964] Bluetooth: hci1: command tx timeout [ 92.716327][ T46] team0 (unregistering): Port device team_slave_1 removed [ 93.506548][ T46] team0 (unregistering): Port device team_slave_0 removed [ 98.582559][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 99.204063][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 99.387936][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.389477][ T40] audit: type=1400 audit(1752497215.364:69193): avc: denied { watch } for pid=7354 comm="syz.0.382" path="/84/file0" dev="9p" ino=36047806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.399043][ T40] audit: type=1400 audit(1752497215.364:69194): avc: denied { add_name } for pid=7354 comm="syz.0.382" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.407329][ T40] audit: type=1400 audit(1752497215.364:69195): avc: denied { create } for pid=7354 comm="syz.0.382" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.422527][ T40] audit: type=1400 audit(1752497215.364:69196): avc: denied { associate } for pid=7354 comm="syz.0.382" name="hugetlb.2MB.usage_in_bytes" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.429813][ T40] audit: type=1400 audit(1752497215.374:69197): avc: denied { append } for pid=7354 comm="syz.0.382" path="/84/file0/hugetlb.2MB.usage_in_bytes" dev="9p" ino=36047882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.434290][ T7364] syz.3.385: attempt to access beyond end of device [ 99.434290][ T7364] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 99.441485][ T7364] XFS (nbd3): SB validate failed with error -5. [ 99.497471][ T7382] netlink: 'syz.1.388': attribute type 2 has an invalid length. [ 99.499649][ T40] audit: type=1400 audit(1752497215.474:69198): avc: denied { setattr } for pid=7381 comm="syz.1.388" name="SCO" dev="sockfs" ino=15172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.501416][ T7382] tmpfs: Unknown parameter 'grpqtaSinode_hardlimit' [ 99.508700][ T40] audit: type=1400 audit(1752497215.484:69199): avc: denied { write } for pid=7383 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.556949][ T7183] veth0_vlan: entered promiscuous mode [ 99.562017][ T7183] veth1_vlan: entered promiscuous mode [ 99.575051][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 99.639206][ T7400] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 99.641612][ T40] audit: type=1400 audit(1752497215.614:69200): avc: denied { watch_mount } for pid=7402 comm="syz.0.389" path="/85" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 99.644245][ T40] audit: type=1400 audit(1752497215.624:69201): avc: denied { watch_reads } for pid=7402 comm="syz.0.389" path="/85" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 99.756571][ T7183] veth0_macvtap: entered promiscuous mode [ 99.770810][ T7183] veth1_macvtap: entered promiscuous mode [ 99.780786][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.787267][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.791828][ T7183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.795361][ T7183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.798485][ T7183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.801686][ T7183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.977142][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.984059][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.005587][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.008059][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.021090][ T40] audit: type=1400 audit(1752497215.994:69202): avc: denied { mounton } for pid=7183 comm="syz-executor" path="/syzkaller.MBGhOR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 100.115945][ T7426] Bluetooth: MGMT ver 1.23 [ 100.131955][ T7428] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 100.138967][ T7428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.338'. [ 100.240825][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.403'. [ 100.327837][ T7459] netlink: 9 bytes leftover after parsing attributes in process `syz.1.405'. [ 100.331748][ T7459] 0: renamed from hsr0 (while UP) [ 100.338845][ T7459] 0: entered allmulticast mode [ 100.340464][ T7459] hsr_slave_0: entered allmulticast mode [ 100.342289][ T7459] hsr_slave_1: entered allmulticast mode [ 100.346582][ T7459] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 100.363839][ T7459] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.371324][ T7463] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.374801][ T7463] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.378070][ T7463] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.382177][ T7463] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.442142][ T7470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7470 comm=syz.0.407 [ 100.443120][ T7459] geneve1: entered allmulticast mode [ 100.631347][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 100.729130][ T7499] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 100.741196][ T7499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.752274][ T7499] bond3: (slave ip6erspan0): making interface the new active one [ 100.756343][ T7499] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 100.798270][ T7508] ALSA: seq fatal error: cannot create timer (-22) [ 100.801804][ T7507] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 100.811247][ T7507] cramfs: wrong magic [ 100.853286][ T7511] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 101.019955][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.026315][ T7524] bond0: (slave rose0): Enslaving as an active interface with an up link [ 101.127867][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 101.162375][ T837] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 101.291617][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.428'. [ 101.312705][ T837] usb 6-1: Using ep0 maxpacket: 16 [ 101.319026][ T837] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 101.324110][ T837] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.328761][ T837] usb 6-1: config 1 interface 0 has no altsetting 0 [ 101.333391][ T837] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 101.337093][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.339991][ T837] usb 6-1: Product: 篏⬏碩箎哳胵࡯㵝閿骖┷뜸됗⹳ỡ퉩䣭ᱟ坝㘓㈐㧪ⱀ柞敤铿ꔥ﮼㠿̖ᇏ鵕⠞伖뵂삨溛䲝鉑แ駉狳쇙쭸✍ꅈ㖗佬륃Ⴀ瀆펳噾侰겶઒昝벚䓲귢ٖ倣傛뭰蛅慖壥ᢊ㫣꒍竘᫠䠯毪➓౗億ꖗ㠌ෝ뎎 [ 101.351589][ T837] usb 6-1: Manufacturer: 䪇ﶿ랕喟臨啚쮶朌涹蛅ꞧˏ↯辑㪺碀ϛ㶽㻠᜺㊅뺭ᑺ’᯻뵯ᅡ둈됄Ⲇⵒ⤊ᭀ엂寜躝싏睥﫷ꎚ [ 101.358106][ T837] usb 6-1: SerialNumber: ᙄ滦糜ྦྷĉ텱纰↡뷔礆酱방兿嬖ঈ䦂쿚䏞䇜푿㟕ጥ븜꙳識ﰢ⦫Ղ퐘籦뮍䆤ㆧ拃嚾ኜ踈荊ଭ甿⮝腹䙒 [ 101.367694][ T7520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.408742][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.411240][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.414352][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.417433][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.420721][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.422482][ T7560] sp0: Synchronizing with TNC [ 101.424688][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.428485][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.431007][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.436493][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.439027][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.441545][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.444206][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.446710][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.449274][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.451947][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.454717][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.457184][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.459589][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.462159][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.465317][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.467666][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.470032][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.472702][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.475131][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.477743][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.480616][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.484283][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.487448][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.490527][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.494054][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.496672][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.499005][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.501702][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.505238][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.508433][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.511632][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.516767][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.519998][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.523114][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.526270][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.529254][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.532509][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.535600][ T838] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 101.543141][ T838] hid-generic 0000:007F:FFFFFFFE.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 101.570141][ T7565] fido_id[7565]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.583949][ T837] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 101.593041][ T837] usb 6-1: USB disconnect, device number 11 [ 101.602837][ T837] usblp0: removed [ 101.915345][ T7582] input: syz1 as /devices/virtual/input/input7 [ 101.984888][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 102.171011][ T7596] 9pnet_virtio: no channels available for device syz [ 102.218036][ T7609] overlayfs: failed to resolve './file0': -2 [ 102.221479][ T7607] overlayfs: failed to resolve './file0': -2 [ 102.285933][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.446'. [ 102.383647][ T7602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.411229][ T7624] 9pnet_virtio: no channels available for device syz [ 103.000535][ T7644] vivid-000: disconnect [ 103.002646][ T7644] vivid-000: reconnect [ 103.127848][ T7649] xt_SECMARK: invalid mode: 0 [ 103.369665][ T7667] kvm: emulating exchange as write [ 103.375895][ T7667] No source specified [ 103.479075][ T7683] block device autoloading is deprecated and will be removed. [ 103.519148][ T7689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=7689 comm=syz.0.465 [ 104.121108][ T7710] x_tables: duplicate underflow at hook 2 [ 104.310949][ T7726] __nla_validate_parse: 5 callbacks suppressed [ 104.310964][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'. [ 104.642519][ T5957] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.792376][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 104.795361][ T5957] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 104.797978][ T5957] usb 5-1: config 0 has no interface number 0 [ 104.799902][ T5957] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.804294][ T5957] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 104.807870][ T5957] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 104.811300][ T5957] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.817105][ T5957] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 104.819903][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.822492][ T5957] usb 5-1: Product: syz [ 104.823821][ T5957] usb 5-1: Manufacturer: syz [ 104.825283][ T5957] usb 5-1: SerialNumber: syz [ 104.828019][ T5957] usb 5-1: config 0 descriptor?? [ 104.866683][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 104.866695][ T40] audit: type=1400 audit(1752497476.840:69240): avc: denied { map } for pid=7748 comm="syz.1.484" path="socket:[17239]" dev="sockfs" ino=17239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.877400][ T40] audit: type=1400 audit(1752497476.840:69241): avc: denied { read } for pid=7748 comm="syz.1.484" path="socket:[17239]" dev="sockfs" ino=17239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.037321][ T5957] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 105.180765][ T7764] syz.1.487: attempt to access beyond end of device [ 105.180765][ T7764] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 105.185038][ T7764] (syz.1.487,7764,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 105.187432][ T7764] (syz.1.487,7764,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 105.189732][ T7764] (syz.1.487,7764,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 105.192506][ T7764] (syz.1.487,7764,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 105.244717][ T838] usb 5-1: USB disconnect, device number 2 [ 105.622552][ T5964] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.685041][ T40] audit: type=1400 audit(1752497477.660:69242): avc: denied { getopt } for pid=7781 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.733164][ T40] audit: type=1400 audit(1752497477.710:69243): avc: denied { lock } for pid=7779 comm="syz.4.493" path="socket:[17330]" dev="sockfs" ino=17330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.776640][ T40] audit: type=1400 audit(1752497477.750:69244): avc: denied { read } for pid=7791 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.794275][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 105.802235][ T40] audit: type=1400 audit(1752497477.770:69245): avc: denied { read write } for pid=7798 comm="syz.0.497" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.631938][ T7799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.634700][ T7799] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.641436][ T7799] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.685762][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 106.688556][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'. [ 106.694688][ T7823] netlink: 'syz.3.502': attribute type 9 has an invalid length. [ 106.697595][ T7823] netlink: 80 bytes leftover after parsing attributes in process `syz.3.502'. [ 106.701483][ T7826] netlink: 80 bytes leftover after parsing attributes in process `syz.3.502'. [ 106.788770][ T7845] netlink: 'syz.0.506': attribute type 1 has an invalid length. [ 106.791517][ T7845] NCSI netlink: No device for ifindex 0 [ 106.793592][ T40] audit: type=1400 audit(1752497478.760:69246): avc: denied { bind } for pid=7844 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.815018][ T40] audit: type=1400 audit(1752497478.790:69247): avc: denied { accept } for pid=7849 comm="syz.1.508" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.815191][ T7851] IPVS: set_ctl: invalid protocol: 8 100.1.1.1:20001 [ 106.826057][ T7855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.509'. [ 106.853822][ T7859] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 106.883337][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 106.886820][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 107.172811][ T837] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 107.186983][ T40] audit: type=1400 audit(1752497479.160:69248): avc: denied { create } for pid=7879 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 107.261131][ T40] audit: type=1400 audit(1752497479.230:69249): avc: denied { create } for pid=7889 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.292753][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'. [ 107.334890][ T837] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.338360][ T837] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.341475][ T837] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.345676][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.350524][ T7869] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.356201][ T837] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.554579][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.559478][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.569076][ T838] usb 8-1: USB disconnect, device number 3 [ 107.678017][ T7913] kvm: MWAIT instruction emulated as NOP! [ 107.682590][ T7913] batman_adv: batadv0: Adding interface: dummy0 [ 107.685429][ T7913] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.694559][ T7913] batman_adv: batadv0: Interface activated: dummy0 [ 107.703142][ T7913] batadv0: mtu less than device minimum [ 107.705595][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.709465][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.713292][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.717041][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.720771][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.724490][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.728205][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.731895][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.735745][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.749261][ T7918] tmpfs: Bad value for 'mpol' [ 108.103370][ T5964] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.256152][ T7937] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 108.260129][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.263566][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.270876][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.274152][ T7937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.278341][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.281452][ T7937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.288596][ T7937] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.419287][ T7945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.907608][ T7958] program syz.1.541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.257085][ T7960] sctp: [Deprecated]: syz.0.542 (pid 7960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.257085][ T7960] Use struct sctp_sack_info instead [ 109.294289][ T7962] overlay: Unknown parameter 'hash' [ 109.297513][ T7962] overlay: filesystem on ./bus not supported as upperdir [ 109.297581][ T7963] overlay: Unknown parameter 'hash' [ 109.397246][ T7968] usb usb8: usbfs: process 7968 (syz.3.545) did not claim interface 0 before use [ 109.523795][ T7978] sctp: [Deprecated]: syz.3.549 (pid 7978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.523795][ T7978] Use struct sctp_sack_info instead [ 109.566427][ T7980] 8021q: VLANs not supported on ip6tnl0 [ 109.662384][ T840] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 109.750894][ T7985] __nla_validate_parse: 1 callbacks suppressed [ 109.750904][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 109.815458][ T840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.818250][ T840] usb 5-1: not running at top speed; connect to a high speed hub [ 109.821438][ T840] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.827047][ T840] usb 5-1: config 1 interface 0 has no altsetting 0 [ 109.830655][ T840] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.833955][ T840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.836474][ T840] usb 5-1: Product: syz [ 109.837814][ T840] usb 5-1: Manufacturer: syz [ 109.839275][ T840] usb 5-1: SerialNumber: syz [ 109.971688][ T7993] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20001 [ 110.047838][ T7975] ip6t_srh: unknown srh match flags B153 [ 110.051127][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.052022][ T7994] ip6t_srh: unknown srh match flags B153 [ 110.054954][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.076513][ T840] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 110.086868][ T840] usb 5-1: USB disconnect, device number 3 [ 110.097049][ T8002] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 110.182780][ T5964] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.362655][ T837] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 110.442171][ T8016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'. [ 110.492816][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 110.492831][ T40] audit: type=1400 audit(1752497482.460:69261): avc: denied { write } for pid=8021 comm="syz.0.561" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.525786][ T837] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.529936][ T837] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.533962][ T837] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.538531][ T837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.543280][ T837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.547732][ T837] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 110.551424][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.559260][ T8005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.564552][ T837] hub 6-1:1.0: bad descriptor, ignoring hub [ 110.567107][ T837] hub 6-1:1.0: probe with driver hub failed with error -5 [ 110.570359][ T837] cdc_wdm 6-1:1.0: skipping garbage [ 110.574094][ T837] cdc_wdm 6-1:1.0: skipping garbage [ 110.582815][ T837] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 110.585337][ T837] cdc_wdm 6-1:1.0: Unknown control protocol [ 110.716540][ T8037] netlink: 84 bytes leftover after parsing attributes in process `syz.3.564'. [ 110.725535][ T8037] netlink: 36 bytes leftover after parsing attributes in process `syz.3.564'. [ 110.752850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.758911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.769840][ T40] audit: type=1400 audit(1752497482.740:69262): avc: denied { read write } for pid=8004 comm="syz.1.557" name="cdc-wdm0" dev="devtmpfs" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 110.781567][ T40] audit: type=1400 audit(1752497482.740:69263): avc: denied { open } for pid=8004 comm="syz.1.557" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 110.819976][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 110.857221][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.860095][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.863326][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.866041][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.868951][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 110.875183][ T8039] netlink: 'syz.3.566': attribute type 178 has an invalid length. [ 111.012850][ T837] usb 6-1: USB disconnect, device number 12 [ 111.138302][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.570'. [ 111.181099][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 111.186812][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 111.189579][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 111.328270][ T8062] program syz.3.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.244626][ T40] audit: type=1400 audit(1752497484.220:69264): avc: denied { execmem } for pid=8077 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 112.272558][ T5964] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.642492][ T6036] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 112.802488][ T6036] usb 8-1: Using ep0 maxpacket: 8 [ 112.809312][ T6036] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 112.812277][ T6036] usb 8-1: config 0 has no interface number 0 [ 112.814383][ T6036] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.817752][ T6036] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 112.822534][ T6036] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.826726][ T6036] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.831063][ T6036] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 112.835094][ T6036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.840462][ T6036] usb 8-1: config 0 descriptor?? [ 112.850742][ T6036] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 112.876603][ T8087] netlink: 'syz.1.582': attribute type 29 has an invalid length. [ 112.879046][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.582'. [ 113.016193][ T8092] xt_limit: Overflow, try lower: 1207959552/384 [ 113.049587][ T8094] Sensor A: ================= START STATUS ================= [ 113.052462][ T8094] Sensor A: Test Pattern: 75% Colorbar [ 113.054514][ T8094] Sensor A: Show Information: All [ 113.056130][ T8094] Sensor A: Vertical Flip: false [ 113.057698][ T8094] Sensor A: Horizontal Flip: false [ 113.059291][ T8094] Sensor A: Brightness: 128 [ 113.060706][ T8094] Sensor A: Contrast: 128 [ 113.062088][ T8094] Sensor A: Hue: 0 [ 113.062134][ T6036] usb 8-1: USB disconnect, device number 4 [ 113.063807][ T8094] Sensor A: Saturation: 128 [ 113.063835][ T8094] Sensor A: ================== END STATUS ================== [ 113.071959][ T6036] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 113.324436][ T8109] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 113.328225][ T8109] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 113.333572][ T8109] CPU: 3 UID: 0 PID: 8109 Comm: syz.1.589 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 113.337697][ T8109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.341338][ T8109] RIP: 0010:h5_recv+0x104/0x910 [ 113.343143][ T8109] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 01 5c 4d f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 113.350915][ T8109] RSP: 0018:ffffc9000377fc00 EFLAGS: 00010293 [ 113.353454][ T8109] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff886e963a [ 113.356194][ T8109] RDX: ffff8880567d2440 RSI: ffffffff886e967f RDI: 0000000000000005 [ 113.359082][ T8109] RBP: ffffc9000377fd88 R08: 0000000000000005 R09: 0000000000000000 [ 113.362310][ T8109] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 113.365551][ T8109] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb36c00 [ 113.368468][ T8109] FS: 00007fe1ffb706c0(0000) GS:ffff8880d6a13000(0000) knlGS:0000000000000000 [ 113.372097][ T8109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.374784][ T8109] CR2: 00007fe1ffb6ff98 CR3: 0000000063fcf000 CR4: 0000000000352ef0 [ 113.378090][ T8109] DR0: 0000000000000004 DR1: 0000000000000006 DR2: 0000000000000004 [ 113.381367][ T8109] DR3: 0000000000001000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 113.384299][ T8109] Call Trace: [ 113.385382][ T8109] [ 113.386330][ T8109] ? __pfx_h5_recv+0x10/0x10 [ 113.387819][ T8109] hci_uart_tty_receive+0x254/0x7e0 [ 113.389437][ T8109] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 113.391215][ T8109] tty_ioctl+0x583/0x1640 [ 113.392586][ T8109] ? __pfx_tty_ioctl+0x10/0x10 [ 113.394085][ T8109] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 113.396712][ T8109] ? hook_file_ioctl_common+0x145/0x410 [ 113.398448][ T8109] ? selinux_file_ioctl+0x180/0x270 [ 113.400118][ T8109] ? selinux_file_ioctl+0xb4/0x270 [ 113.401709][ T8109] ? __pfx_tty_ioctl+0x10/0x10 [ 113.403541][ T8109] __x64_sys_ioctl+0x18e/0x210 [ 113.405524][ T8109] do_syscall_64+0xcd/0x4c0 [ 113.407449][ T8109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.409879][ T8109] RIP: 0033:0x7fe1fed8e929 [ 113.411766][ T8109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.419329][ T8109] RSP: 002b:00007fe1ffb70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.422772][ T8109] RAX: ffffffffffffffda RBX: 00007fe1fefb6160 RCX: 00007fe1fed8e929 [ 113.425908][ T8109] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000006 [ 113.429199][ T8109] RBP: 00007fe1fee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 113.432460][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.435705][ T8109] R13: 0000000000000000 R14: 00007fe1fefb6160 R15: 00007ffcd7e12608 [ 113.438980][ T8109] [ 113.440251][ T8109] Modules linked in: [ 113.441964][ C3] vkms_vblank_simulate: vblank timer overrun [ 113.444929][ T8109] ---[ end trace 0000000000000000 ]--- [ 113.445633][ T40] audit: type=1400 audit(1752497485.420:69265): avc: denied { read } for pid=5343 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 113.448152][ T8109] RIP: 0010:h5_recv+0x104/0x910 [ 113.454159][ T40] audit: type=1400 audit(1752497485.420:69266): avc: denied { search } for pid=5343 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.456204][ T8109] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 01 5c 4d f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 113.462921][ T40] audit: type=1400 audit(1752497485.420:69267): avc: denied { search } for pid=5343 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.462955][ T40] audit: type=1400 audit(1752497485.420:69268): avc: denied { add_name } for pid=5343 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.462975][ T40] audit: type=1400 audit(1752497485.420:69269): avc: denied { create } for pid=5343 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.462991][ T40] audit: type=1400 audit(1752497485.420:69270): avc: denied { append open } for pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.473539][ T8107] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.480607][ T8109] RSP: 0018:ffffc9000377fc00 EFLAGS: 00010293 [ 113.504743][ T8109] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff886e963a [ 113.507220][ T8109] RDX: ffff8880567d2440 RSI: ffffffff886e967f RDI: 0000000000000005 [ 113.509650][ T8109] RBP: ffffc9000377fd88 R08: 0000000000000005 R09: 0000000000000000 [ 113.512090][ T8109] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 113.514595][ T8109] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb36c00 [ 113.517079][ T8109] FS: 00007fe1ffb706c0(0000) GS:ffff8880d6a13000(0000) knlGS:0000000000000000 [ 113.519826][ T8109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.521896][ T8109] CR2: 00007fe1ffb6ff98 CR3: 0000000063fcf000 CR4: 0000000000352ef0 [ 113.524441][ T8109] DR0: 0000000000000004 DR1: 0000000000000006 DR2: 0000000000000004 [ 113.526908][ T8109] DR3: 0000000000001000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 113.529350][ T8109] Kernel panic - not syncing: Fatal exception [ 113.531923][ T8109] Kernel Offset: disabled [ 113.533412][ T8109] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:47:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000076eb4 RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=ffffed100d486646 RSI=ffffffff8c158e60 RDI=ffffffff81920e71 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe1ffb90f98 CR3=000000004f687000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf43003a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9490011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9490011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9490011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9490011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9490011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9490011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000023c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 000000000000023c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000072914 RBX=0000000000000001 RCX=ffffffff8b885c99 RDX=ffffed100d4a6646 RSI=ffffffff8c158e60 RDI=ffffffff81920e71 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000000 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe1ffb70d58 CR3=000000003384b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=1bb6abe7a5c4ff5c 60a623b5d02be419 1bb6abe7a5c4ff5c 60a623b5d02be419 1bb6abe7a5c4ff5c 60a623b5d02be419 1bb6abe7a5c4ff5c 60a623b5d02be419 ZMM18=3cb6372a8a46fd12 8e0053af25e82de7 3cb6372a8a46fd12 8e0053af25e82de7 3cb6372a8a46fd12 8e0053af25e82de7 3cb6372a8a46fd12 8e0053af25e82de7 ZMM19=ee05000000000000 0000000000000005 ee05000000000000 0000000000000004 ee05000000000000 0000000000000003 ee05000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0680040100000008 060601688c048082 080006e003001000 06d00300100006c0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302100006b00330 1000089003ae0004 0000000100000000 0000000003010024 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000182e080c80 030c800408800308 800406a003000800 0690030fffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffce00000000 0300000000000008 ffffffbe000003e6 ZMM25=7311a0a17311a0a1 7311a0a17311a0a1 7311a0a17311a0a1 7311a0a17311a0a1 7311a0a17311a0a1 7311a0a17311a0a1 7311a0a17311a0a1 7311a0a17311a0a1 ZMM26=ab5da10fab5da10f ab5da10fab5da10f ab5da10fab5da10f ab5da10fab5da10f ab5da10fab5da10f ab5da10fab5da10f ab5da10fab5da10f ab5da10fab5da10f ZMM27=cbcd9882cbcd9882 cbcd9882cbcd9882 cbcd9882cbcd9882 cbcd9882cbcd9882 cbcd9882cbcd9882 cbcd9882cbcd9882 cbcd9882cbcd9882 cbcd9882cbcd9882 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9903000099030000 9903000099030000 9903000099030000 9903000099030000 9903000099030000 9903000099030000 9903000099030000 9903000099030000 info registers vcpu 2 CPU#2 RAX=000000000009f364 RBX=0000000000000002 RCX=ffffffff8b885c99 RDX=ffffed100d4c6646 RSI=ffffffff8c158e60 RDI=ffffffff81920e71 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000000 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556a8f4808 CR3=0000000050686000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd7e12990 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000001c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc9000377f600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe1ffb706c0 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe1ffb6ff98 CR3=0000000063fcf000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000006 DR2=0000000000000004 DR3=0000000000001000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fee11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fef85488 00007fe1fef85480 00007fe1fef85478 00007fe1fef85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ffaed100 00007fe1fef85440 00007fe1fef85458 00007fe1fef854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1fef85498 00007fe1fef85490 00007fe1fef85488 00007fe1fef85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000001c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000