last executing test programs: 2.068877379s ago: executing program 2 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r1, &(0x7f00000061c0)={0x2020}, 0x2020) write$P9_RREAD(r0, 0x0, 0xb) (fail_nth: 4) 1.878413502s ago: executing program 2 (id=361): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000200)={0xa, 0x100, 0x4, {0x8001, 0xc4, 0xd2, 0x7}}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000140)='grpquota') setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="75dafa", 0x3}], 0x1) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r6, 0x11c}, 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x800020, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f738078720000"]) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) 1.6988674s ago: executing program 2 (id=369): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x3, &(0x7f0000000040)={0x0, "0a0dffbf000000005c0ecd551ee7b16eab615e6234c7dece48bacf6f78c7da6647"}}) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)=ANY=[@ANYBLOB="0407"], 0x2, 0x0) open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) 1.61841018s ago: executing program 2 (id=371): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x10}, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x6a) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) shutdown(r0, 0x2) 1.617548757s ago: executing program 1 (id=373): syz_usbip_server_init(0x6) r0 = syz_usbip_server_init(0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000000c0)={{r1}, 0x2, &(0x7f0000000000)=[0x52e8, 0x14], 0x3, 0x1}) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0xffff, 0x1, 0x4, 0x0, 0x20}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x2, @win={{0x0, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0}}) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x5c, 0x0, 0x7, 0x0, 0x0, 0x6, 0x64}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x12}, 0x30000050) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x6d) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="440047758f4850be3d885da9a4bbadb486b895cf", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0) 796.648849ms ago: executing program 2 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000008060102000000000000000003000007050001000700000005000100070000000500010007"], 0x2c}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES16], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x22002) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) 729.656501ms ago: executing program 3 (id=394): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000023c0)={'syztnl2\x00', &(0x7f0000002340)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x4, 0x53, {{0xd, 0x4, 0x3, 0x9, 0x34, 0x66, 0x0, 0x5, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@ssrr={0x89, 0xf, 0x7a, [@private=0xa010101, @private=0xa010101, @multicast1]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x41, [@empty, @empty]}]}}}}}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000002480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)=@newchain={0x24, 0x64, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6, 0x7}, {0xc, 0x9}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x7e, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x2c0300, 0x41, 0x6}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000002540)={@id={0x2, 0x0, @b}}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bdev\x00', 0x2010, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619) 627.690984ms ago: executing program 3 (id=397): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r0 = fsopen(&(0x7f0000000380)='nfsd\x00', 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd60b33c8300303a0020010000000000000000000000000002fe80000000000000f1ffffff000000aa010090780000000060e3e62700002c0020010000000000000000000000000002fe8000"/106], 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x235000, 0x1000, 0x0, 0x4}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r5, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) getpgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file0\x00', 0xe1) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r6, 0x2, 0xfffffffc, 0x9000, 0x3, [0x0, 0x0, 0x0], [0x7, 0x0, 0x80, 0x2], [0x0, 0xfffffffe, 0x100, 0xfffffffe], [0x0, 0x0, 0x2287, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9], [0x2b8]}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x11, 0x800000003, 0x0) 548.30529ms ago: executing program 3 (id=399): r0 = memfd_secret(0x80000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@loopback, @remote, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private0, 0x4e21, 0x0, 0x7, 0x1000, 0xa, 0xe0, 0x80, 0x4, r1, 0xffffffffffffffff}, {0xffffffffffffffff, 0x1, 0x3, 0x100000001, 0x4, 0x9, 0xa412, 0x9}, {0x6445, 0x7, 0x4, 0x6}, 0x231, 0x6e6bbc, 0x2, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x4d3, 0x33}, 0xa, @in=@remote, 0x34ff, 0x4, 0x3, 0x5, 0x8, 0x5, 0x4}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x44024010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_newvlan={0x3c, 0x70, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x44, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x404) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000300)) write$binfmt_misc(r0, &(0x7f0000000340)="b6ec89e2e989c08183d40c136fe734d03bef37ee8e61559f69e13dc31a94de272a494106d250d2070c620a46744e54d36d021fb6149865927ca125142a447628b391afadcbb06bfcc6eb31da3069a6a7626f76a73fad05b81f5f7768a97393569a61ccbd1bf0b44e6327aaab499f3658a126663e31f055f7a4a96fa0df69388eb63640917b819ab94efd2d1e1c41ba0cebc9e2f790d01c542d43960138825d491bc6b1b0ac569c14fb328f406d1a2ecfc695e8b44d80cc4fe17bfab8d8d0f848", 0xc0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x274, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_MODES_OURS={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "2b613d472d15da4c98ab63571e13fc97354d5c40701dbffb311333ab"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xf5, 0x5, "f32252db5b72d61007ba18486531dcfe5e7319c4d6ed0013c1a2690c9fb9f5543f5a9da41e2d606066f8abb08fdbf582aa9c4f4cbf693603ca9a145be32e344a9a1de7905a5f5a7ab83ed6f0b7097f27f2149191b0a8512e609f610f9fe20e27083560baa158e2d50f795af5180577675933dd4ea74939a4f9b7be128e5c6ab9c9730f1e6100e69c29db3e0434495ceaa05be331d4779f84dc2ae4187b329872f328609ed965cbe1e49cc233c075d3cc6eac3cc335cd68a11ad266ae1b4ae23d4d2e156fa539a4ab97020ec36a1d7e959919046c7e2bddcda90aa086ac29fce6baf11abe38dc4edc534d85b0566124daa3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9ee8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5b, 0x4, "947ad24d78b12eac9fff92a9bc7963cd123915abbe0a41a06441df5c93714af29cc2d6cf004661e33e45113514261dea050d676422e7dbcf67cff817422bee04e587a2f07bf1c13339d3d030d89f6a2da6acdbe16fcdba"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3eca384d}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000780)={0x0, 0x954, 0x0, 0x5, 0x1}, &(0x7f00000007c0)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000800)={r3, 0xe}, &(0x7f0000000840)=0x8) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x70}}, 0x8800) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e24, 0x33bffe1b, @dev={0xfe, 0x80, '\x00', 0x24}, 0x7}}}, 0x84) r6 = open(&(0x7f0000000ac0)='./file0\x00', 0x0, 0x81) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_FAMILY={0x5, 0xd, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8015) r8 = accept$inet6(r6, &(0x7f0000000c00)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000c40)=0x1c) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000c80)=@generic={0x2, 0x1, 0x7fffffffffffffff}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000cc0)) r9 = syz_clone3(&(0x7f0000001ec0)={0xe241880, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80), {0x2d}, &(0x7f0000000dc0)=""/181, 0xb5, &(0x7f0000000e80)=""/4096, &(0x7f0000001e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r6}}, 0x58) capset(&(0x7f0000001f40)={0x20071026, r9}, &(0x7f0000001f80)={0x0, 0xf84, 0x3, 0x2, 0x4a, 0x1}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044145, &(0x7f0000001fc0)=0x7) r10 = syz_open_dev$mouse(&(0x7f0000002000), 0x6, 0x40) pidfd_getfd(r10, r5, 0x0) sendmsg$nl_route(r5, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)=@ipv6_delrule={0x58, 0x21, 0x400, 0x70bd2c, 0x25dfdbff, {0xa, 0x80, 0x80, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1}, [@FRA_DST={0x14, 0x1, @loopback}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20001}, 0x4000001) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8801020}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x84000}, 0x480c5) 487.082702ms ago: executing program 3 (id=401): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0xf}, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x30}}, 0xc0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x8000000000000004, 0xe00, 0xfffffffffffffffd, 0xffffffffffffffff}) 429.793556ms ago: executing program 3 (id=402): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x62040200) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) write$binfmt_misc(r2, &(0x7f0000000280)="8aefab93786a0bb28c30648c3b5646b51d97e8cf86e24d09735373212e705024c9604b87736d94ed099527541df63dfcd9269d770bdd5607d19370fdc1a0457b5fd60a8e64cbcee9b36066441ea9bfb88fb03e89ba7d29d007b5793a1c0a9da4748e47d734287191cf9f9d705f3bc00fed82ca", 0x73) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x100, 0x200, 0x0, 0x8, 0x7]}, &(0x7f0000000180)=0x54) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x20045005) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x0, [0x16, 0x7, 0x1, 0x3, 0x3b2]}, &(0x7f0000000040)=0x54) 429.286806ms ago: executing program 0 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r1, &(0x7f00000061c0)={0x2020}, 0x2020) write$P9_RREAD(r0, 0x0, 0xb) (fail_nth: 8) 360.023271ms ago: executing program 3 (id=404): socket(0x3, 0x80003, 0x0) timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a2", 0x8}], 0x1}], 0x1, 0x4050) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) timer_gettime(0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x48a82, 0x0) write$sysctl(r3, &(0x7f0000000080)='6\x00', 0x2) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)="0dbce6671c5ecdfd01223386dbefc3190df4844c045df7b122aecf1bf9f6728a0f2bd79f409b195e46e9d6c532588cc19fcfd84b9dd2dd6e1367583ca7e73e40be5f07867983f13961d55a217f9c39d81ed29c669d5da85271db95cded25caa864632fa202a641b62f775e2516ff9aedbee309804b3ae329a05b94601c36", 0x7e, 0x2) timer_delete(r0) 358.849571ms ago: executing program 0 (id=405): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 239.796678ms ago: executing program 1 (id=406): socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xc, 0xa}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa495, 0x7ff, 0x0, 0x0, 0xffffffff}, 0x80, 0x1, 0x3, 0x4, 0x8, 0xd, 0x17, 0x1b, 0x1, 0x81, {0x9, 0x23, 0x0, 0x2, 0xb, 0x1}}}}]}, 0x78}}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) timer_gettime(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000400)={0x0, 0x9f0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) (async) socket(0x10, 0x3, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xc, 0xa}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa495, 0x7ff, 0x0, 0x0, 0xffffffff}, 0x80, 0x1, 0x3, 0x4, 0x8, 0xd, 0x17, 0x1b, 0x1, 0x81, {0x9, 0x23, 0x0, 0x2, 0xb, 0x1}}}}]}, 0x78}}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) timer_gettime(0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000400)={0x0, 0x9f0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) (async) 239.591724ms ago: executing program 0 (id=407): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, 0x11, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x1]}}) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000000), 0x4) 179.784761ms ago: executing program 1 (id=408): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="35012abd7000fcdbdf25010000000034448bfb0a006d8a25"], 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x40040) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8e82, 0x0) 178.927506ms ago: executing program 0 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002c00010026bd7000fcdbdf2504000000080017001d"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x24000000) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90fe8b1c551265406c7f30608e2b9e81c86a3bfb00", [0x0, 0x4000000000]}}) (async) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) (async, rerun: 32) r5 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) (async, rerun: 32) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 32) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r8 = dup3(r7, r6, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (rerun: 32) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x5, 0x1, 0x20000000}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1400}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000080)) (async, rerun: 64) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x7d98) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20090}, 0x0) 118.486021ms ago: executing program 1 (id=410): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0xffffffff, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc005) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0xffff7fff, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c0000000000000800fe8000000000000000000000000000bbe000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101"], 0xb8}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0xffffffff, @local, 0x6}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc005) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0xffff7fff, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c0000000000000800fe8000000000000000000000000000bbe000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101"], 0xb8}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) 118.283884ms ago: executing program 1 (id=411): ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 66.901557ms ago: executing program 2 (id=412): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r1 = socket(0xb, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=@delqdisc={0x280, 0x25, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x3, 0xb}, {0xc, 0x2}, {0xd, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_gred={{0x9}, {0x168, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x1, 0x5, 0x2, 0x9, 0x65ec, 0xffff79ee, 0xd, 0x1, 0x8000, 0xb, 0x8, 0x12, 0x5, 0x7, 0xf}}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0xc, 0x1, 0x8}}, @TCA_GRED_DPS={0x10, 0x3, {0xc, 0x4, 0x0, 0x5}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x19fe}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0xc363, 0x800, 0x2, 0xe4b, 0x4, 0x2}}, {0x8, 0x2, [0x6, 0x100]}}, {{0x1c, 0x1, {0x3, 0x7, 0x7fff, 0x2, 0x1, 0x8, 0x7, 0x8}}, {0x14, 0x2, [0x478, 0x8000, 0x9, 0xfff, 0x8, 0x3fc, 0x0, 0xfc01]}}, {{0x1c, 0x1, {0x4, 0x5, 0x30, 0x1, 0x1, 0x8, 0x7fff, 0x5}}, {0xe, 0x2, [0x5, 0x1, 0x7, 0x3, 0x40]}}, {{0x1c, 0x1, {0x9, 0x1, 0x5, 0xfffffffa, 0x0, 0x3, 0x8e81, 0x6}}, {0x10, 0x2, [0x3, 0x7f, 0x3, 0xd7, 0x2, 0x0]}}, {{0x1c, 0x1, {0x5, 0x5, 0x7be6, 0x7, 0x2, 0x2, 0x4, 0x8}}, {0x14, 0x2, [0x0, 0x8, 0x7, 0x0, 0xfff, 0x2, 0x4fbe, 0x2]}}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x11}, 0x80) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xe, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) 66.224042ms ago: executing program 0 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x97}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000840) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @window={0x3, 0x8, 0x5}, @sack_perm], 0x3) chdir(&(0x7f0000000080)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r4, &(0x7f00000061c0)={0x2020}, 0x2020) write$P9_RREAD(r3, 0x0, 0xb) 66.028876ms ago: executing program 1 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r1, &(0x7f00000061c0)={0x2020}, 0x2020) write$P9_RREAD(r0, 0x0, 0xb) (fail_nth: 9) 0s ago: executing program 0 (id=415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000480)="f2a48fe9989a2d810000000f01c4c4e27d2a5d310f0966ba4300ecc4e27935c3c4c1b96a6700660f1bdb2665f20f2dd9", 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x20040000) timerfd_create(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 30.895378][ T39] audit: type=1400 audit(1733230650.672:80): avc: denied { write } for pid=5840 comm="sh" path="pipe:[1992]" dev="pipefs" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 30.901640][ T39] audit: type=1400 audit(1733230650.672:81): avc: denied { rlimitinh } for pid=5840 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.906723][ T39] audit: type=1400 audit(1733230650.672:82): avc: denied { siginh } for pid=5840 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.814342][ T39] audit: type=1400 audit(1733230651.602:83): avc: denied { read } for pid=5331 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.820344][ T39] audit: type=1400 audit(1733230651.602:84): avc: denied { append } for pid=5331 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.826203][ T39] audit: type=1400 audit(1733230651.602:85): avc: denied { open } for pid=5331 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.832206][ T39] audit: type=1400 audit(1733230651.602:86): avc: denied { getattr } for pid=5331 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:56736' (ED25519) to the list of known hosts. [ 31.981573][ T39] audit: type=1400 audit(1733230651.772:87): avc: denied { name_bind } for pid=5844 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.656192][ T5846] cgroup: Unknown subsys name 'net' [ 33.783293][ T5846] cgroup: Unknown subsys name 'cpuset' [ 33.786671][ T5846] cgroup: Unknown subsys name 'rlimit' [ 33.953873][ T5855] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.570608][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.514977][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 36.514992][ T39] audit: type=1400 audit(1733230656.302:105): avc: denied { execmem } for pid=5920 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.710180][ T39] audit: type=1400 audit(1733230656.492:106): avc: denied { create } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.718433][ T39] audit: type=1400 audit(1733230656.492:107): avc: denied { read write } for pid=5924 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.724515][ T39] audit: type=1400 audit(1733230656.492:108): avc: denied { open } for pid=5924 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.731791][ T39] audit: type=1400 audit(1733230656.502:109): avc: denied { ioctl } for pid=5924 comm="syz-executor" path="socket:[6294]" dev="sockfs" ino=6294 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.768386][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.771163][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.773523][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.775934][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.778081][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.778607][ T5934] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.781558][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.781892][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.782258][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.782775][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.783178][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.783587][ T5937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.784288][ T5935] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.784475][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.786202][ T5927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.787145][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.791094][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.801726][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.803504][ T39] audit: type=1400 audit(1733230656.582:110): avc: denied { read } for pid=5924 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.805761][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.806723][ T39] audit: type=1400 audit(1733230656.582:111): avc: denied { open } for pid=5924 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.813176][ T5936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.814949][ T39] audit: type=1400 audit(1733230656.582:112): avc: denied { mounton } for pid=5924 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 36.820975][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.822717][ T5934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.828374][ T5936] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.834783][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.953336][ T39] audit: type=1400 audit(1733230656.742:113): avc: denied { module_request } for pid=5924 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.986700][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 36.999677][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 37.009187][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 37.088160][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 37.149649][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.151686][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.153670][ T5929] bridge_slave_0: entered allmulticast mode [ 37.156125][ T5929] bridge_slave_0: entered promiscuous mode [ 37.179224][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.182075][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.184677][ T5930] bridge_slave_0: entered allmulticast mode [ 37.187672][ T5930] bridge_slave_0: entered promiscuous mode [ 37.199123][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.201880][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.203775][ T5924] bridge_slave_0: entered allmulticast mode [ 37.205843][ T5924] bridge_slave_0: entered promiscuous mode [ 37.208572][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.211661][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.214188][ T5929] bridge_slave_1: entered allmulticast mode [ 37.217119][ T5929] bridge_slave_1: entered promiscuous mode [ 37.224564][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.226326][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.228083][ T5930] bridge_slave_1: entered allmulticast mode [ 37.229966][ T5930] bridge_slave_1: entered promiscuous mode [ 37.243451][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.245214][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.246983][ T5924] bridge_slave_1: entered allmulticast mode [ 37.248956][ T5924] bridge_slave_1: entered promiscuous mode [ 37.293719][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.307121][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.311110][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.322642][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.324506][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.326335][ T5925] bridge_slave_0: entered allmulticast mode [ 37.328247][ T5925] bridge_slave_0: entered promiscuous mode [ 37.332102][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.335567][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.338690][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.349850][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.351831][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.353653][ T5925] bridge_slave_1: entered allmulticast mode [ 37.355669][ T5925] bridge_slave_1: entered promiscuous mode [ 37.404033][ T5930] team0: Port device team_slave_0 added [ 37.419125][ T5924] team0: Port device team_slave_0 added [ 37.424829][ T5929] team0: Port device team_slave_0 added [ 37.437771][ T5930] team0: Port device team_slave_1 added [ 37.440499][ T5924] team0: Port device team_slave_1 added [ 37.443534][ T5929] team0: Port device team_slave_1 added [ 37.446964][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.511987][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.515544][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.518023][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.525119][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.528732][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.531400][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.539766][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.544443][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.546283][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.552865][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.567436][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.569258][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.576086][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.580639][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.583067][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.591731][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.595967][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.597762][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.605262][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.625400][ T5925] team0: Port device team_slave_0 added [ 37.628628][ T5925] team0: Port device team_slave_1 added [ 37.648771][ T5930] hsr_slave_0: entered promiscuous mode [ 37.650881][ T5930] hsr_slave_1: entered promiscuous mode [ 37.692809][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.694696][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.701290][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.720760][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.722942][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.729768][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.742666][ T5924] hsr_slave_0: entered promiscuous mode [ 37.745266][ T5924] hsr_slave_1: entered promiscuous mode [ 37.747095][ T5924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.749351][ T5924] Cannot create hsr debugfs directory [ 37.763675][ T5929] hsr_slave_0: entered promiscuous mode [ 37.765648][ T5929] hsr_slave_1: entered promiscuous mode [ 37.767471][ T5929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.769430][ T5929] Cannot create hsr debugfs directory [ 37.843371][ T5925] hsr_slave_0: entered promiscuous mode [ 37.846132][ T5925] hsr_slave_1: entered promiscuous mode [ 37.848609][ T5925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.851364][ T5925] Cannot create hsr debugfs directory [ 38.018999][ T5924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.024580][ T5924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.027942][ T5924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.033965][ T5924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.053689][ T5929] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.057731][ T5929] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.061642][ T5929] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.064699][ T5929] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.082741][ T5930] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.086663][ T5930] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.093811][ T5930] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.102701][ T5930] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.121969][ T5925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.126389][ T5925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.130925][ T5925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.135280][ T5925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.188487][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.218420][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.228271][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.235926][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.238671][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.251889][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.257164][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.259020][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.276078][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.283898][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.302369][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.304264][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.307264][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.309128][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.318332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.321005][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.327153][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.332648][ T5924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.340705][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.343139][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.362256][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.376898][ T39] audit: type=1400 audit(1733230658.162:114): avc: denied { sys_module } for pid=5924 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.386763][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.388874][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.396995][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.399553][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.455315][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.487273][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.505560][ T5924] veth0_vlan: entered promiscuous mode [ 38.516043][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.519436][ T5924] veth1_vlan: entered promiscuous mode [ 38.524538][ T5929] veth0_vlan: entered promiscuous mode [ 38.543452][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.548129][ T5929] veth1_vlan: entered promiscuous mode [ 38.557798][ T5924] veth0_macvtap: entered promiscuous mode [ 38.562421][ T5924] veth1_macvtap: entered promiscuous mode [ 38.576507][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.588955][ T5930] veth0_vlan: entered promiscuous mode [ 38.596330][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.603825][ T5924] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.606205][ T5924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.608433][ T5924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.612368][ T5924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.623283][ T5930] veth1_vlan: entered promiscuous mode [ 38.630697][ T5929] veth0_macvtap: entered promiscuous mode [ 38.642726][ T5929] veth1_macvtap: entered promiscuous mode [ 38.655485][ T5925] veth0_vlan: entered promiscuous mode [ 38.671899][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.674889][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.678260][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.691743][ T5930] veth0_macvtap: entered promiscuous mode [ 38.694516][ T5925] veth1_vlan: entered promiscuous mode [ 38.701421][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.704131][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.707316][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.711833][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.711874][ T5930] veth1_macvtap: entered promiscuous mode [ 38.714676][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.723690][ T5929] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.725986][ T5929] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.728236][ T5929] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.731235][ T5929] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.753156][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.756561][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.759816][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.763735][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.767942][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.773195][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.776674][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.779945][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.783794][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.787861][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.791704][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.792628][ T5930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.793917][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.796075][ T5930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.800508][ T5930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.802825][ T5930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.829570][ T5925] veth0_macvtap: entered promiscuous mode [ 38.845122][ T5925] veth1_macvtap: entered promiscuous mode [ 38.848152][ T5924] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.848939][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.854749][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.855430][ T5933] Bluetooth: hci1: command tx timeout [ 38.858721][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.858953][ T5936] Bluetooth: hci0: command tx timeout [ 38.860995][ T66] Bluetooth: hci2: command tx timeout [ 38.861673][ T5933] Bluetooth: hci3: command tx timeout [ 38.861816][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.861823][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.861831][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.861835][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.861841][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.862419][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.894772][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.898290][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.902731][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.906282][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.908840][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.912711][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.916795][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.926553][ T5925] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.929754][ T5925] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.932990][ T5925] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.936295][ T5925] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965670][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.968853][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.979208][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.982137][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.014081][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.017241][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.017918][ T5998] ptm ptm22: ldisc open failed (-12), clearing slot 22 [ 39.021723][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.024937][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.046794][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.048872][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.077881][ T6005] ======================================================= [ 39.077881][ T6005] WARNING: The mand mount option has been deprecated and [ 39.077881][ T6005] and is ignored by this kernel. Remove the mand [ 39.077881][ T6005] option from the mount to silence this warning. [ 39.077881][ T6005] ======================================================= [ 39.078939][ T6006] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 39.091075][ T6005] Invalid source name [ 39.093421][ T6005] UBIFS error (pid: 6005): cannot open "/dev/sg0", error -22 [ 39.130163][ T6013] overlayfs: conflicting lowerdir path [ 39.332038][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 39.444056][ T6035] netlink: 703 bytes leftover after parsing attributes in process `syz.1.13'. [ 39.525940][ T5968] IPVS: starting estimator thread 0... [ 39.527341][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 39.610217][ T6044] IPVS: using max 39 ests per chain, 93600 per kthread [ 39.790480][ T6069] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.889336][ T6057] batadv_slave_1: entered promiscuous mode [ 39.918685][ T6071] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.979561][ T6047] batadv_slave_1: left promiscuous mode [ 40.013326][ T6077] netlink: 72 bytes leftover after parsing attributes in process `syz.2.24'. [ 40.022347][ T6077] bridge_slave_0: left allmulticast mode [ 40.024279][ T6077] bridge_slave_0: left promiscuous mode [ 40.026616][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.032639][ T6077] bridge_slave_1: left allmulticast mode [ 40.034189][ T6077] bridge_slave_1: left promiscuous mode [ 40.035577][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.040667][ T6077] bond0: (slave bond_slave_0): Releasing backup interface [ 40.044487][ T6077] bond0: (slave bond_slave_1): Releasing backup interface [ 40.056394][ T6077] team0: Port device team_slave_0 removed [ 40.060868][ T832] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.061099][ T6077] team0: Port device team_slave_1 removed [ 40.066108][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.068718][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.072675][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.075258][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.098055][ T6080] netlink: 'syz.3.25': attribute type 21 has an invalid length. [ 40.220166][ T832] usb 6-1: Using ep0 maxpacket: 32 [ 40.224470][ T832] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 40.227018][ T832] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 40.266158][ T6096] netlink: 'syz.3.29': attribute type 21 has an invalid length. [ 40.268856][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 40.369813][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 40.538968][ T6104] trusted_key: syz.3.32 sent an empty control message without MSG_MORE. [ 40.604500][ T6105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.753337][ T6116] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 40.930492][ T66] Bluetooth: hci3: command tx timeout [ 40.931345][ T5934] Bluetooth: hci0: command tx timeout [ 40.934145][ T5934] Bluetooth: hci1: command tx timeout [ 40.940794][ T5934] Bluetooth: hci2: command tx timeout [ 40.995590][ T6126] cgroup: fork rejected by pids controller in /syz0 [ 41.203160][ T6161] geneve2: entered promiscuous mode [ 41.204460][ T6161] geneve2: entered allmulticast mode [ 42.232578][ T39] kauditd_printk_skb: 117 callbacks suppressed [ 42.232590][ T39] audit: type=1400 audit(1733230662.022:232): avc: denied { create } for pid=6170 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.243424][ T39] audit: type=1400 audit(1733230662.032:233): avc: denied { mount } for pid=6170 comm="syz.2.40" name="/" dev="overlay" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.252278][ T39] audit: type=1400 audit(1733230662.032:234): avc: denied { write } for pid=6170 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.261659][ T6171] overlay: filesystem on ./bus not supported as upperdir [ 42.633116][ T6105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.721203][ T6105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.804777][ T832] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.808311][ T832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.811606][ T832] usb 6-1: Product: 懰鐛നලتߩ﮹닀걬ĉ믂鐤㶲曒⇗ꦷﰥ钠Ϛえꯥ翢뻦規ꃜ륇ꘃ骋呯㬁댍૖ᆜ읓䨃銴螆㙹훏研Č釓৓䝤宵鎩ᔄ콦꓆믡 [ 42.820846][ T832] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 42.824049][ T832] usb 6-1: no configuration chosen from 1 choice [ 42.831728][ T832] usb 6-1: USB disconnect, device number 2 [ 42.836754][ T6176] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.41'. [ 42.839624][ T6176] netlink: zone id is out of range [ 42.841079][ T6176] netlink: zone id is out of range [ 42.842689][ T6176] netlink: zone id is out of range [ 42.844714][ T6176] netlink: zone id is out of range [ 42.846081][ T6176] netlink: zone id is out of range [ 42.849043][ T6176] netlink: zone id is out of range [ 42.948494][ T6105] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.953533][ T6105] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.958641][ T6105] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.963405][ T6105] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.006131][ T39] audit: type=1400 audit(1733230662.792:235): avc: denied { create } for pid=6178 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.011025][ T39] audit: type=1400 audit(1733230662.792:236): avc: denied { getopt } for pid=6178 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.020380][ T5934] Bluetooth: hci2: command tx timeout [ 43.022021][ T5934] Bluetooth: hci3: command tx timeout [ 43.023474][ T66] Bluetooth: hci1: command tx timeout [ 43.023487][ T5934] Bluetooth: hci0: command tx timeout [ 43.038746][ T39] audit: type=1400 audit(1733230662.822:237): avc: denied { create } for pid=6175 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.046964][ T39] audit: type=1400 audit(1733230662.832:238): avc: denied { accept } for pid=6181 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 43.062063][ T39] audit: type=1400 audit(1733230662.832:239): avc: denied { connect } for pid=6181 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.068707][ T39] audit: type=1400 audit(1733230662.842:240): avc: denied { setopt } for pid=6175 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.142631][ T39] audit: type=1400 audit(1733230662.922:241): avc: denied { read append } for pid=6184 comm="syz.3.45" name="video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 43.304715][ T6204] ieee802154 phy0 wpan0: encryption failed: -22 [ 43.376066][ T6212] netlink: 'syz.2.53': attribute type 2 has an invalid length. [ 43.378617][ T6212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.53'. [ 43.484979][ T6223] Bluetooth: MGMT ver 1.23 [ 43.506770][ T6229] ebt_among: src integrity fail: 100 [ 43.511710][ T6230] ebt_among: src integrity fail: 100 [ 43.514561][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 43.518153][ T6231] netlink: 'syz.3.54': attribute type 25 has an invalid length. [ 43.521095][ T6231] netlink: 'syz.3.54': attribute type 15 has an invalid length. [ 43.532160][ T6231] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 62946 - 0 [ 43.535075][ T6231] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 62946 - 0 [ 43.537849][ T6231] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 62946 - 0 [ 43.540828][ T6231] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 62946 - 0 [ 43.545035][ T6231] vxlan0: entered promiscuous mode [ 43.549741][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 43.634564][ T6241] dccp_close: ABORT with 15616 bytes unread [ 43.929320][ T6254] kvm: emulating exchange as write [ 44.240575][ T6253] dummy0: entered promiscuous mode [ 44.243815][ T6253] dummy0: left promiscuous mode [ 44.588872][ T6268] Zero length message leads to an empty skb [ 44.647947][ T6268] bond1: entered promiscuous mode [ 44.653710][ T6268] bond1: entered allmulticast mode [ 44.655774][ T6268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.815473][ T6280] syz.0.74 uses obsolete (PF_INET,SOCK_PACKET) [ 44.818396][ T6280] syzkaller1: entered promiscuous mode [ 44.820615][ T6280] syzkaller1: entered allmulticast mode [ 44.909077][ T6290] netlink: 48 bytes leftover after parsing attributes in process `syz.2.77'. [ 44.922207][ T6292] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 44.929337][ T6292] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 44.931846][ T6292] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 44.933894][ T6292] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 44.935823][ T6292] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 44.937917][ T6292] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 44.939827][ T6292] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 44.942044][ T6292] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 44.944888][ T6292] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 44.947558][ T6292] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 44.974478][ T6284] nfs: Unknown parameter ')' [ 44.985049][ T6297] 9p: Unknown Cache mode or invalid value fsca [ 45.031603][ T6303] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 45.090215][ T5934] Bluetooth: hci1: command tx timeout [ 45.090266][ T5933] Bluetooth: hci0: command tx timeout [ 45.090454][ T5927] Bluetooth: hci3: command tx timeout [ 45.090475][ T5927] Bluetooth: hci2: command tx timeout [ 45.132503][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'. [ 45.255093][ T6328] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.265195][ T6328] vlan2: entered promiscuous mode [ 45.395775][ T6332] program syz.3.89 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.456626][ T6338] input: syz1 as /devices/virtual/input/input5 [ 45.774371][ T6348] 9p: Unknown Cache mode or invalid value fscach [ 45.914639][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 45.917098][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.94'. [ 45.920714][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 46.175234][ T6367] fuse: Bad value for 'max_read' [ 46.276628][ T6370] binder: BINDER_SET_CONTEXT_MGR already set [ 46.278409][ T6370] binder: 6368:6370 ioctl 4018620d 20000040 returned -16 [ 46.281475][ T6370] binder: BINDER_SET_CONTEXT_MGR already set [ 46.282988][ T6370] binder: 6368:6370 ioctl 4018620d 20000280 returned -16 [ 46.363069][ T6380] overlay: ./file0 is not a directory [ 46.435149][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 46.595921][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 46.680342][ T833] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 46.840093][ T833] usb 5-1: Using ep0 maxpacket: 32 [ 46.846937][ T833] usb 5-1: config 1 interface 0 has no altsetting 0 [ 46.856325][ T833] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.40 [ 46.859502][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.862337][ T833] usb 5-1: Product: 騾ྐ̃箴掑뽦뛊ꛃ풳⼻화깻踕뿼율趕旰ૻ뒮䑿歛ࠋ渶ꌐ浣鿆䦍㞩ᔒꐜꥭ䭫ᦱ뵺ᩀȂ兆榔ᙃ퀩䔅껽㱨橙갉⧖鼡Ԝ萢✋吝밈㡉槀﷿轥ꫭ鱢ଗ댘獣더ᙪ髰ﶕ꼪鳌룫ݔ쀡䟜軇鎹扼꫟톡⦸쥠ᢰ䉗Ŝ᝙᭘ⲹ궜佳뭣溡덀믅䤗ᴴ棕࿸｛鑓น摴氪捦봥 [ 46.872749][ T833] usb 5-1: Manufacturer: 䜐뤎코蝁ꏚﳙ챃숬鲋燜鋛赃珊ꐸ䉤檄࿭⯼淵숯ꏁﶛ䃌◲ᙩ閅低 [ 46.876623][ T833] usb 5-1: SerialNumber: 㐊 [ 46.930303][ T66] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 47.110770][ T833] usbhid 5-1:1.0: can't add hid device: -71 [ 47.113189][ T833] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 47.121002][ T833] usb 5-1: USB disconnect, device number 2 [ 47.172357][ T5936] Bluetooth: hci2: command 0x0406 tx timeout [ 47.472436][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 47.643115][ T39] kauditd_printk_skb: 82 callbacks suppressed [ 47.643126][ T39] audit: type=1400 audit(1733230667.432:324): avc: denied { mount } for pid=6421 comm="syz.0.113" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.662884][ T39] audit: type=1400 audit(1733230667.452:325): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.710438][ T6428] xt_cgroup: invalid path, errno=-2 [ 47.713291][ T39] audit: type=1400 audit(1733230667.502:326): avc: denied { append } for pid=6427 comm="syz.0.114" name="v4l-subdev7" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.726833][ T39] audit: type=1400 audit(1733230667.512:327): avc: denied { read append } for pid=6427 comm="syz.0.114" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 47.735321][ T39] audit: type=1400 audit(1733230667.512:328): avc: denied { open } for pid=6427 comm="syz.0.114" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 47.743271][ T39] audit: type=1400 audit(1733230667.522:329): avc: denied { ioctl } for pid=6427 comm="syz.0.114" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 47.857713][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 47.864122][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 47.866154][ T9] usb 7-1: can't read configurations, error -71 [ 48.283637][ T39] audit: type=1400 audit(1733230668.072:330): avc: denied { read write } for pid=6443 comm="syz.1.119" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.289826][ T39] audit: type=1400 audit(1733230668.072:331): avc: denied { open } for pid=6443 comm="syz.1.119" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.299542][ T39] audit: type=1400 audit(1733230668.082:332): avc: denied { sqpoll } for pid=6446 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.309060][ T39] audit: type=1400 audit(1733230668.092:333): avc: denied { ioctl } for pid=6443 comm="syz.1.119" path="/dev/virtual_nci" dev="devtmpfs" ino=709 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.327625][ T6452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 48.350112][ T6457] program syz.0.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.362839][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfd [ 48.459260][ T6462] overlayfs: upper fs does not support tmpfile. [ 48.602999][ T5967] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 48.666311][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.669499][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.760132][ T5967] usb 6-1: device descriptor read/64, error -71 [ 48.940123][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 49.012376][ T5967] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 49.070111][ T25] usb 5-1: device descriptor read/64, error -71 [ 49.140074][ T5967] usb 6-1: device descriptor read/64, error -71 [ 49.260932][ T5967] usb usb6-port1: attempt power cycle [ 49.320235][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.460148][ T25] usb 5-1: device descriptor read/64, error -71 [ 49.572919][ T25] usb usb5-port1: attempt power cycle [ 49.610188][ T5967] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 49.631725][ T5967] usb 6-1: device descriptor read/8, error -71 [ 49.771634][ T6499] /dev/sr0: Can't open blockdev [ 49.880105][ T5967] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 49.910529][ T5967] usb 6-1: device descriptor read/8, error -71 [ 49.920099][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 49.941199][ T25] usb 5-1: device descriptor read/8, error -71 [ 50.023724][ T5967] usb usb6-port1: unable to enumerate USB device [ 50.180186][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.200698][ T25] usb 5-1: device descriptor read/8, error -71 [ 50.312876][ T25] usb usb5-port1: unable to enumerate USB device [ 51.277940][ T6444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.574709][ T6526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'. [ 51.587676][ T6526] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 51.592110][ T6526] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 51.650700][ T6536] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 51.651816][ T6537] fuse: Bad value for 'user_id' [ 51.655048][ T6537] fuse: Bad value for 'user_id' [ 51.707459][ T6543] sctp: [Deprecated]: syz.2.149 (pid 6543) Use of int in max_burst socket option deprecated. [ 51.707459][ T6543] Use struct sctp_assoc_value instead [ 51.960177][ T5967] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 51.963882][ T6565] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 51.971414][ T6565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.989204][ T6565] bond1: (slave gretap1): making interface the new active one [ 51.992054][ T6565] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 52.110119][ T5967] usb 7-1: Using ep0 maxpacket: 32 [ 52.112679][ T5967] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 52.114844][ T5967] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 52.117731][ T5967] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 52.121567][ T5967] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 52.124964][ T5967] usb 7-1: config 0 interface 0 has no altsetting 0 [ 52.129114][ T5967] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 52.131777][ T5967] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 52.133884][ T5967] usb 7-1: Product: syz [ 52.135071][ T5967] usb 7-1: Manufacturer: syz [ 52.136289][ T5967] usb 7-1: SerialNumber: syz [ 52.138562][ T5967] usb 7-1: config 0 descriptor?? [ 52.141765][ T5967] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 52.147490][ T5967] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 52.346383][ T25] usb 7-1: USB disconnect, device number 4 [ 52.347970][ C2] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 52.353507][ T25] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 52.389233][ T6583] unknown channel width for channel at 909000KHz? [ 52.392083][ T6583] unknown channel width for channel at 909000KHz? [ 52.393763][ T6583] unknown channel width for channel at 909000KHz? [ 52.481523][ T6587] netlink: 68 bytes leftover after parsing attributes in process `syz.1.166'. [ 52.487583][ T6587] hugetlbfs: Unknown parameter 'usrquota_bC-loc' [ 52.551042][ T6593] vivid-000: kernel_thread() failed [ 52.556687][ T6543] syz.2.149: vmalloc error: size 3383414784, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 52.566829][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.2.149 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 52.569838][ T6543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.572733][ T6543] Call Trace: [ 52.573581][ T6543] [ 52.574363][ T6543] dump_stack_lvl+0x16c/0x1f0 [ 52.575621][ T6543] warn_alloc+0x24d/0x3a0 [ 52.576758][ T6543] ? __pfx_warn_alloc+0x10/0x10 [ 52.578042][ T6543] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 52.579473][ T6543] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 52.580826][ T6543] ? kasan_save_stack+0x42/0x60 [ 52.582038][ T6543] ? kasan_save_stack+0x33/0x60 [ 52.583215][ T6543] ? kasan_save_track+0x14/0x30 [ 52.584466][ T6543] ? __kasan_kmalloc+0xaa/0xb0 [ 52.585678][ T6543] ? vb2_vmalloc_alloc+0xe2/0x3d0 [ 52.587015][ T6543] ? vb2_core_create_bufs+0x55d/0xab0 [ 52.588434][ T6543] ? vb2_create_bufs+0x566/0x780 [ 52.589682][ T6543] ? v4l_create_bufs+0x156/0x270 [ 52.590937][ T6543] __vmalloc_node_range_noprof+0x10df/0x1530 [ 52.592511][ T6543] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 52.593784][ T6543] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 52.595343][ T6543] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 52.596621][ T6543] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 52.597074][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 52.597952][ T6543] vmalloc_user_noprof+0x6b/0x90 [ 52.602078][ T6543] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 52.603385][ T6543] vb2_vmalloc_alloc+0x11e/0x3d0 [ 52.604608][ T6543] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 52.606029][ T6543] __vb2_queue_alloc+0x896/0x1230 [ 52.607117][ T6600] bond0: option ad_select: unable to set because the bond device is up [ 52.607279][ T6543] vb2_core_create_bufs+0x55d/0xab0 [ 52.611524][ T6543] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 52.613021][ T6543] ? rcu_is_watching+0x12/0xc0 [ 52.614224][ T6543] ? trace_contention_end+0xee/0x140 [ 52.615497][ T6543] vb2_create_bufs+0x566/0x780 [ 52.616694][ T6543] ? __pfx_vb2_create_bufs+0x10/0x10 [ 52.618016][ T6543] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.619474][ T6543] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.620923][ T6543] v4l_create_bufs+0x156/0x270 [ 52.622241][ T6543] __video_do_ioctl+0xaf0/0xf00 [ 52.623439][ T6543] ? __pfx___video_do_ioctl+0x10/0x10 [ 52.624796][ T6543] ? __might_fault+0xe3/0x190 [ 52.626026][ T6543] video_usercopy+0x4d2/0x1620 [ 52.627256][ T6543] ? __pfx___video_do_ioctl+0x10/0x10 [ 52.628655][ T6543] ? __pfx_video_usercopy+0x10/0x10 [ 52.630027][ T6543] v4l2_ioctl+0x1ba/0x250 [ 52.631091][ T6601] netlink: 'syz.3.169': attribute type 4 has an invalid length. [ 52.631206][ T6543] ? __pfx_v4l2_ioctl+0x10/0x10 [ 52.634246][ T6600] netlink: 'syz.3.169': attribute type 4 has an invalid length. [ 52.634844][ T6543] __x64_sys_ioctl+0x190/0x200 [ 52.638034][ T6543] do_syscall_64+0xcd/0x250 [ 52.639187][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.640658][ T6543] RIP: 0033:0x7f0e4657ff19 [ 52.641797][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.646908][ T6543] RSP: 002b:00007f0e47398058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.649102][ T6543] RAX: ffffffffffffffda RBX: 00007f0e46745fa0 RCX: 00007f0e4657ff19 [ 52.651183][ T6543] RDX: 00000000200004c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 52.653245][ T6543] RBP: 00007f0e465f3986 R08: 0000000000000000 R09: 0000000000000000 [ 52.655326][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.657389][ T6543] R13: 0000000000000000 R14: 00007f0e46745fa0 R15: 00007ffd17281c78 [ 52.659515][ T6543] [ 52.663263][ T6543] Mem-Info: [ 52.666011][ T6543] active_anon:7717 inactive_anon:0 isolated_anon:0 [ 52.666011][ T6543] active_file:482 inactive_file:48577 isolated_file:0 [ 52.666011][ T6543] unevictable:1768 dirty:1449 writeback:0 [ 52.666011][ T6543] slab_reclaimable:11257 slab_unreclaimable:70641 [ 52.666011][ T6543] mapped:23777 shmem:2477 pagetables:770 [ 52.666011][ T6543] sec_pagetables:299 bounce:0 [ 52.666011][ T6543] kernel_misc_reclaimable:0 [ 52.666011][ T6543] free:475708 free_pcp:3960 free_cma:0 [ 52.677646][ T6543] Node 0 active_anon:30868kB inactive_anon:0kB active_file:1824kB inactive_file:194216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94948kB dirty:5736kB writeback:0kB shmem:6372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:12176kB pagetables:3204kB sec_pagetables:1196kB all_unreclaimable? no [ 52.687622][ T6543] Node 1 active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:92kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:160kB dirty:60kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 52.689368][ T39] kauditd_printk_skb: 120 callbacks suppressed [ 52.689378][ T39] audit: type=1400 audit(1733230672.472:454): avc: denied { map_read map_write } for pid=6604 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.698303][ T6543] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 52.717346][ T6543] lowmem_reserve[]: 0 1212 0 0 0 [ 52.718599][ T6543] Node 0 DMA32 free:310620kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:30868kB inactive_anon:0kB active_file:1824kB inactive_file:194216kB unevictable:3536kB writepending:5736kB present:2080628kB managed:1269940kB mlocked:0kB bounce:0kB free_pcp:2296kB local_pcp:144kB free_cma:0kB [ 52.729138][ T6543] lowmem_reserve[]: 0 0 0 0 0 [ 52.730675][ T6543] Node 1 Normal free:1577476kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:92kB unevictable:3536kB writepending:60kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:13816kB local_pcp:224kB free_cma:0kB [ 52.738079][ T6543] lowmem_reserve[]: 0 0 0 0 0 [ 52.739330][ T6543] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 52.743009][ T6543] Node 0 DMA32: 364*4kB (UME) 391*8kB (UME) 281*16kB (UME) 133*32kB (UME) 115*64kB (UME) 57*128kB (UME) 31*256kB (UME) 22*512kB (UME) 17*1024kB (UME) 3*2048kB (M) 59*4096kB (UM) = 312408kB [ 52.747804][ T6543] Node 1 Normal: 51*4kB (UM) 14*8kB (UME) 25*16kB (UME) 138*32kB (UME) 48*64kB (UME) 18*128kB (UME) 7*256kB (UME) 5*512kB (UME) 2*1024kB (E) 2*2048kB (ME) 380*4096kB (ME) = 1577484kB [ 52.752600][ T6543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 52.755168][ T6543] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 52.757576][ T6543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 52.760188][ T6543] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 52.762530][ T6543] 51536 total pagecache pages [ 52.763858][ T6543] 0 pages in swap cache [ 52.764915][ T6543] Free swap = 124208kB [ 52.765996][ T6543] Total swap = 124996kB [ 52.767067][ T6543] 1048443 pages RAM [ 52.767971][ T39] audit: type=1400 audit(1733230672.542:455): avc: denied { create } for pid=6611 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.768046][ T6543] 0 pages HighMem/MovableOnly [ 52.768051][ T6543] 281637 pages reserved [ 52.775328][ T6543] 0 pages cma reserved [ 52.777689][ T39] audit: type=1400 audit(1733230672.552:456): avc: denied { bind } for pid=6611 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.787437][ T39] audit: type=1400 audit(1733230672.552:457): avc: denied { setopt } for pid=6611 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.793153][ T39] audit: type=1400 audit(1733230672.552:458): avc: denied { accept } for pid=6611 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.798364][ T39] audit: type=1400 audit(1733230672.562:459): avc: denied { write } for pid=6611 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.805211][ T39] audit: type=1400 audit(1733230672.562:460): avc: denied { mount } for pid=6611 comm="syz.0.172" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.811023][ T39] audit: type=1400 audit(1733230672.572:461): avc: denied { create } for pid=6616 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.815999][ T39] audit: type=1400 audit(1733230672.572:462): avc: denied { create } for pid=6616 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 52.821812][ T39] audit: type=1400 audit(1733230672.582:463): avc: denied { getopt } for pid=6616 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 52.834191][ T6623] Can't find a SQUASHFS superblock on sr0 [ 52.835136][ T6621] overlay: filesystem on ./bus not supported as upperdir [ 52.872196][ T6630] overlayfs: failed to resolve './file0': -2 [ 52.918703][ T6632] evm: overlay not supported [ 52.934146][ T6634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 52.950609][ T832] hid (null): unknown global tag 0xc [ 52.953324][ T832] hid (null): global environment stack underflow [ 52.955810][ T832] hid (null): global environment stack underflow [ 52.958673][ T832] hid (null): invalid report_size 56853 [ 52.961428][ T832] hid (null): unknown global tag 0xc [ 52.963181][ T832] hid (null): unknown global tag 0xd [ 52.965350][ T832] hid (null): report_id 48330 is invalid [ 52.967392][ T832] hid (null): invalid report_size 39879 [ 52.969351][ T832] hid (null): report_id 1530196771 is invalid [ 52.979827][ T832] hid-generic 0380:0004:0008.0002: unknown global tag 0xc [ 52.983012][ T832] hid-generic 0380:0004:0008.0002: item 0 2 1 12 parsing failed [ 52.986036][ T832] hid-generic 0380:0004:0008.0002: probe with driver hid-generic failed with error -22 [ 53.045392][ T6641] libceph: resolve '4' (ret=-3): failed [ 53.426857][ T6655] openvswitch: netlink: IP tunnel dst address not specified [ 53.464286][ T6658] xt_hashlimit: size too large, truncated to 1048576 [ 53.545007][ T6661] [U] v3f"S/4:XTzWtlW= [ 53.547427][ T6661] [U] J"e:" [ 53.696853][ T6668] program syz.1.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.702122][ T6668] gfs2: path_lookup on 6(+dQnB!eUV!`: 8DSE y|YT{-,mb/ returned error -2 [ 53.859374][ T6670] mmap: syz.1.187 (6670) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.896557][ T6674] nla_validate_range_unsigned: 55 callbacks suppressed [ 53.896567][ T6674] netlink: 'syz.0.188': attribute type 11 has an invalid length. [ 54.023729][ T6687] vivid-001: disconnect [ 54.027652][ T6686] vivid-001: reconnect [ 54.033613][ T6690] netlink: 44 bytes leftover after parsing attributes in process `syz.1.193'. [ 54.038613][ T6688] ALSA: mixer_oss: invalid OSS volume '' [ 54.133373][ T6703] : entered promiscuous mode [ 54.137345][ T6703] netlink: 277 bytes leftover after parsing attributes in process `syz.0.197'. [ 54.189745][ T6704] process 'syz.1.196' launched '/dev/fd/5' with NULL argv: empty string added [ 54.190995][ T6710] cgroup: release_agent respecified [ 54.362624][ T6729] netlink: 'syz.0.203': attribute type 4 has an invalid length. [ 54.628356][ T6756] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 54.686755][ T6768] pty pty24: ldisc open failed (-12), clearing slot 24 [ 54.799890][ T6787] SELinux: policydb string SlAnux does not match my string SE Linux [ 54.803625][ T6787] SELinux: failed to load policy [ 54.901469][ T6796] overlayfs: missing 'workdir' [ 54.903950][ T6797] overlayfs: missing 'workdir' [ 54.993106][ T6804] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 55.056704][ T6810] xt_l2tp: v2 doesn't support IP mode [ 55.102072][ T6811] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 55.102072][ T6811] program syz.2.228 not setting count and/or reply_len properly [ 55.156126][ T6814] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 55.320182][ T6814] netlink: 'syz.0.229': attribute type 2 has an invalid length. [ 55.460394][ T5942] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 55.636394][ T5942] usb 8-1: config 3 has an invalid interface number: 48 but max is 3 [ 55.639472][ T5942] usb 8-1: config 3 has an invalid interface number: 170 but max is 3 [ 55.642399][ T5942] usb 8-1: config 3 has an invalid interface number: 6 but max is 3 [ 55.646557][ T5942] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 55.660524][ T5942] usb 8-1: config 3 has 3 interfaces, different from the descriptor's value: 4 [ 55.663942][ T5942] usb 8-1: config 3 has no interface number 0 [ 55.666127][ T5942] usb 8-1: config 3 has no interface number 1 [ 55.668243][ T5942] usb 8-1: config 3 has no interface number 2 [ 55.670817][ T5942] usb 8-1: config 3 interface 170 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 55.674742][ T5942] usb 8-1: config 3 interface 170 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 55.678537][ T5942] usb 8-1: config 3 interface 6 altsetting 6 has an invalid endpoint descriptor of length 3, skipping [ 55.682392][ T5942] usb 8-1: config 3 interface 6 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 55.686637][ T5942] usb 8-1: config 3 interface 48 has no altsetting 0 [ 55.689002][ T5942] usb 8-1: config 3 interface 170 has no altsetting 0 [ 55.691546][ T5942] usb 8-1: config 3 interface 6 has no altsetting 0 [ 55.877233][ T56] libceph: connect (1)[b::]:6789 error -101 [ 55.879170][ T56] libceph: mon0 (1)[b::]:6789 connect error [ 55.918850][ T9] libceph: connect (1)[b::]:6789 error -101 [ 55.921128][ T9] libceph: mon0 (1)[b::]:6789 connect error [ 55.948603][ T6853] ip6t_REJECT: ECHOREPLY is not supported [ 56.009366][ T6862] netlink: 204 bytes leftover after parsing attributes in process `syz.2.244'. [ 56.142995][ T56] libceph: connect (1)[b::]:6789 error -101 [ 56.145044][ T56] libceph: mon0 (1)[b::]:6789 connect error [ 56.183933][ T9] libceph: connect (1)[b::]:6789 error -101 [ 56.186065][ T9] libceph: mon0 (1)[b::]:6789 connect error [ 56.651237][ T56] libceph: connect (1)[b::]:6789 error -101 [ 56.653184][ T56] libceph: mon0 (1)[b::]:6789 connect error [ 56.671970][ T6842] ceph: No mds server is up or the cluster is laggy [ 56.672142][ T6850] ceph: No mds server is up or the cluster is laggy [ 56.694258][ T9] libceph: connect (1)[b::]:6789 error -101 [ 56.696468][ T9] libceph: mon0 (1)[b::]:6789 connect error [ 56.746891][ T6868] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 56.749720][ T6868] overlayfs: missing 'lowerdir' [ 56.818443][ T6874] capability: warning: `syz.0.247' uses 32-bit capabilities (legacy support in use) [ 56.886626][ C3] dccp_check_seqno: Step 6 failed for CLOSE packet, (LSWL(46809729403589) <= P.seqno(46809729403588) <= S.SWH(46809729403663)) and (P.ackno exists or LAWL(80981012925609) <= P.ackno(80981012925609) <= S.AWH(80981012925609), sending SYNC... [ 56.911598][ T6874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.913510][ T6874] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.931573][ T6874] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.935182][ T6874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.937460][ T6874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.944237][ T6874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.945064][ T6881] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.952273][ T6874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.955118][ T6874] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.962805][ T6874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.964483][ T6874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.968256][ T6874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.969149][ T6882] 9pnet_virtio: no channels available for device syz [ 57.009728][ T6887] program syz.0.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.086111][ T66] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 57.087108][ T66] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 57.091987][ T66] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 57.136035][ T6906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.257'. [ 57.223216][ T6916] netlink: 100 bytes leftover after parsing attributes in process `syz.2.260'. [ 57.224277][ T6917] fuse: Bad value for 'group_id' [ 57.228132][ T6917] fuse: Bad value for 'group_id' [ 57.230713][ T6917] fuse: Bad value for 'group_id' [ 57.232401][ T6917] fuse: Bad value for 'group_id' [ 57.234048][ T6917] fuse: Bad value for 'group_id' [ 57.235482][ T6917] fuse: Bad value for 'group_id' [ 57.236998][ T6917] fuse: Bad value for 'group_id' [ 57.238410][ T6917] fuse: Bad value for 'group_id' [ 57.243316][ T6917] fuse: Bad value for 'group_id' [ 57.244828][ T6917] fuse: Bad value for 'group_id' [ 57.247763][ T6917] fuse: Bad value for 'group_id' [ 57.249299][ T6917] fuse: Bad value for 'group_id' [ 57.251970][ T6917] fuse: Bad value for 'group_id' [ 57.253410][ T6917] fuse: Bad value for 'group_id' [ 57.255340][ T6917] fuse: Bad value for 'group_id' [ 57.256745][ T6917] fuse: Bad value for 'group_id' [ 57.258536][ T6917] fuse: Bad value for 'group_id' [ 57.260425][ T6917] fuse: Bad value for 'group_id' [ 57.263069][ T6917] fuse: Bad value for 'group_id' [ 57.264931][ T6917] fuse: Bad value for 'group_id' [ 57.266963][ T6917] fuse: Bad value for 'group_id' [ 57.268841][ T6917] fuse: Bad value for 'group_id' [ 57.271015][ T6917] fuse: Bad value for 'group_id' [ 57.273285][ T6917] fuse: Bad value for 'group_id' [ 57.275231][ T6917] fuse: Bad value for 'group_id' [ 57.276993][ T6917] fuse: Bad value for 'group_id' [ 57.278862][ T6917] fuse: Bad value for 'group_id' [ 57.280662][ T6917] fuse: Bad value for 'group_id' [ 57.282893][ T6917] fuse: Bad value for 'group_id' [ 57.284655][ T6917] fuse: Bad value for 'group_id' [ 57.286670][ T6917] fuse: Bad value for 'group_id' [ 57.288470][ T6917] fuse: Bad value for 'group_id' [ 57.290485][ T6917] fuse: Bad value for 'group_id' [ 57.292242][ T6917] fuse: Bad value for 'group_id' [ 57.294800][ T6917] fuse: Bad value for 'group_id' [ 57.296608][ T6917] fuse: Bad value for 'group_id' [ 57.298284][ T6917] fuse: Bad value for 'group_id' [ 57.300150][ T6917] fuse: Bad value for 'group_id' [ 57.302659][ T6917] fuse: Bad value for 'group_id' [ 57.304362][ T6917] fuse: Bad value for 'group_id' [ 57.305912][ T6917] fuse: Bad value for 'group_id' [ 57.307300][ T6917] fuse: Bad value for 'group_id' [ 57.308824][ T6917] fuse: Bad value for 'group_id' [ 57.310269][ T6917] fuse: Bad value for 'group_id' [ 57.312224][ T6917] fuse: Bad value for 'group_id' [ 57.313617][ T6917] fuse: Bad value for 'group_id' [ 57.316963][ T6917] fuse: Bad value for 'group_id' [ 57.318362][ T6917] fuse: Bad value for 'group_id' [ 57.319856][ T6917] fuse: Bad value for 'group_id' [ 57.322027][ T6917] fuse: Bad value for 'group_id' [ 57.324082][ T6917] fuse: Bad value for 'group_id' [ 57.325764][ T6917] fuse: Bad value for 'group_id' [ 57.327324][ T6917] fuse: Bad value for 'group_id' [ 57.328753][ T6917] fuse: Bad value for 'group_id' [ 57.334802][ T6917] fuse: Bad value for 'group_id' [ 57.336899][ T6917] fuse: Bad value for 'group_id' [ 57.338969][ T6917] fuse: Bad value for 'group_id' [ 57.340646][ T6917] fuse: Bad value for 'group_id' [ 57.342218][ T6917] fuse: Bad value for 'group_id' [ 57.343540][ T6917] fuse: Bad value for 'group_id' [ 57.345327][ T6917] fuse: Bad value for 'group_id' [ 57.346688][ T6917] fuse: Bad value for 'group_id' [ 57.348198][ T6917] fuse: Bad value for 'group_id' [ 57.349628][ T6917] fuse: Bad value for 'group_id' [ 57.351277][ T6917] fuse: Bad value for 'group_id' [ 57.352637][ T6917] fuse: Bad value for 'group_id' [ 57.354791][ T6917] fuse: Bad value for 'group_id' [ 57.356283][ T6917] fuse: Bad value for 'group_id' [ 57.357757][ T6917] fuse: Bad value for 'group_id' [ 57.359193][ T6917] fuse: Bad value for 'group_id' [ 57.361548][ T6917] fuse: Bad value for 'group_id' [ 57.364015][ T6917] fuse: Bad value for 'group_id' [ 57.366004][ T6917] fuse: Bad value for 'group_id' [ 57.367830][ T6917] fuse: Bad value for 'group_id' [ 57.369718][ T6917] fuse: Bad value for 'group_id' [ 57.371773][ T6917] fuse: Bad value for 'group_id' [ 57.373120][ T6917] fuse: Bad value for 'group_id' [ 57.374334][ T6917] fuse: Bad value for 'group_id' [ 57.375615][ T6917] fuse: Bad value for 'group_id' [ 57.376826][ T6917] fuse: Bad value for 'group_id' [ 57.378188][ T6917] fuse: Bad value for 'group_id' [ 57.379397][ T6917] fuse: Bad value for 'group_id' [ 57.381543][ T6917] fuse: Bad value for 'group_id' [ 57.383062][ T6917] fuse: Bad value for 'group_id' [ 57.386708][ T6917] fuse: Bad value for 'group_id' [ 57.387914][ T6917] fuse: Bad value for 'group_id' [ 57.389278][ T6917] fuse: Bad value for 'group_id' [ 57.390990][ T6917] fuse: Bad value for 'group_id' [ 57.392289][ T6917] fuse: Bad value for 'group_id' [ 57.393548][ T6917] fuse: Bad value for 'group_id' [ 57.394972][ T6917] fuse: Bad value for 'group_id' [ 57.396266][ T6917] fuse: Bad value for 'group_id' [ 57.397648][ T6917] fuse: Bad value for 'group_id' [ 57.399015][ T6917] fuse: Bad value for 'group_id' [ 57.400983][ T6917] fuse: Bad value for 'group_id' [ 57.402341][ T6917] fuse: Bad value for 'group_id' [ 57.403654][ T6917] fuse: Bad value for 'group_id' [ 57.405032][ T6917] fuse: Bad value for 'group_id' [ 57.406430][ T6917] fuse: Bad value for 'group_id' [ 57.407748][ T6917] fuse: Bad value for 'group_id' [ 57.410433][ T6917] fuse: Bad value for 'group_id' [ 57.411777][ T6917] fuse: Bad value for 'group_id' [ 57.413216][ T6917] fuse: Bad value for 'group_id' [ 57.414545][ T6917] fuse: Bad value for 'group_id' [ 57.415560][ T6931] (syz.1.264,6931,2):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "grpquotaP" or missing value [ 57.417303][ T6917] fuse: Bad value for 'group_id' [ 57.420734][ T6931] (syz.1.264,6931,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 57.421323][ T6917] fuse: Bad value for 'group_id' [ 57.421446][ T6917] fuse: Bad value for 'group_id' [ 57.426598][ T6917] fuse: Bad value for 'group_id' [ 57.428009][ T6917] fuse: Bad value for 'group_id' [ 57.429318][ T6917] fuse: Bad value for 'group_id' [ 57.431134][ T6917] fuse: Bad value for 'group_id' [ 57.432747][ T6917] fuse: Bad value for 'group_id' [ 57.434362][ T6917] fuse: Bad value for 'group_id' [ 57.435650][ T6917] fuse: Bad value for 'group_id' [ 57.437044][ T6917] fuse: Bad value for 'group_id' [ 57.438352][ T6917] fuse: Bad value for 'group_id' [ 57.439747][ T6917] fuse: Bad value for 'group_id' [ 57.441684][ T6917] fuse: Bad value for 'group_id' [ 57.443191][ T6917] fuse: Bad value for 'group_id' [ 57.444494][ T6917] fuse: Bad value for 'group_id' [ 57.445945][ T6917] fuse: Bad value for 'group_id' [ 57.447253][ T6917] fuse: Bad value for 'group_id' [ 57.448847][ T6917] fuse: Bad value for 'group_id' [ 57.450937][ T6917] fuse: Bad value for 'group_id' [ 57.452472][ T6917] fuse: Bad value for 'group_id' [ 57.453791][ T6917] fuse: Bad value for 'group_id' [ 57.455246][ T6917] fuse: Bad value for 'group_id' [ 57.456546][ T6917] fuse: Bad value for 'group_id' [ 57.457977][ T6917] fuse: Bad value for 'group_id' [ 57.459276][ T6917] fuse: Bad value for 'group_id' [ 57.621956][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.270'. [ 57.660189][ T6958] [U] ]wcwY [ 57.661447][ T6958] [U] еAk1 ̧1\B\$ʞ&#?إ@v$~9= [ 57.684833][ T6956] [U] ? [ 57.747257][ T39] kauditd_printk_skb: 125 callbacks suppressed [ 57.747267][ T39] audit: type=1400 audit(1733230677.532:589): avc: denied { ioctl } for pid=6967 comm="syz.0.275" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 57.756038][ T39] audit: type=1400 audit(1733230677.532:590): avc: denied { mount } for pid=6967 comm="syz.0.275" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.771212][ T39] audit: type=1400 audit(1733230677.562:591): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.821387][ T39] audit: type=1400 audit(1733230677.612:592): avc: denied { append } for pid=6970 comm="syz.0.276" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.844631][ T39] audit: type=1400 audit(1733230677.632:593): avc: denied { create } for pid=6970 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.849812][ T5942] usb 8-1: New USB device found, idVendor=0403, idProduct=a5ad, bcdDevice=93.66 [ 57.853282][ T5942] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.855320][ T5942] usb 8-1: Product: ခ [ 57.856383][ T5942] usb 8-1: Manufacturer: ቂ [ 57.865050][ T5942] usb 8-1: can't set config #3, error -71 [ 57.865641][ T39] audit: type=1400 audit(1733230677.632:594): avc: denied { ioctl } for pid=6970 comm="syz.0.276" path="socket:[18466]" dev="sockfs" ino=18466 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.867067][ T5942] usb 8-1: USB disconnect, device number 2 [ 57.885567][ T6975] gre1: entered promiscuous mode [ 57.887577][ T6975] team0: Device gre1 is of different type [ 58.115737][ T39] audit: type=1400 audit(1733230677.902:595): avc: denied { write } for pid=6987 comm="syz.0.281" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.128841][ T39] audit: type=1400 audit(1733230677.902:596): avc: denied { open } for pid=6987 comm="syz.0.281" path="/80/bus" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.137184][ T39] audit: type=1400 audit(1733230677.912:597): avc: denied { mount } for pid=6989 comm="syz.3.282" name="/" dev="rpc_pipefs" ino=17782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 58.146279][ T39] audit: type=1400 audit(1733230677.932:598): avc: denied { connect } for pid=6989 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.360120][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 58.468101][ T7008] binder: 7001:7008 ioctl c00c6211 0 returned -14 [ 58.510135][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 58.513512][ T9] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 58.516437][ T9] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 58.519591][ T9] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 58.524657][ T9] usb 5-1: config 250 has no interface number 0 [ 58.527089][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 58.532297][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 58.536122][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.539822][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 58.550093][ T9] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 58.555100][ T9] usb 5-1: config 250 interface 228 has no altsetting 0 [ 58.559092][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 58.563058][ T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 58.565994][ T9] usb 5-1: Product: syz [ 58.567532][ T9] usb 5-1: SerialNumber: syz [ 58.572843][ T9] hub 5-1:250.228: bad descriptor, ignoring hub [ 58.575122][ T9] hub 5-1:250.228: probe with driver hub failed with error -5 [ 58.575523][ T7011] netlink: 160 bytes leftover after parsing attributes in process `syz.1.289'. [ 58.613684][ T7013] ebt_among: src integrity fail: 100 [ 58.780881][ T9] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 59.010169][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 59.012252][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 59.014299][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 59.243851][ T7003] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.246138][ T7003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.248768][ T7003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.251149][ T7003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.288543][ T7037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.400673][ T5969] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 59.407714][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 59.411022][ T6988] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 59.419590][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 59.448491][ T7049] xt_hashlimit: size too large, truncated to 1048576 [ 59.503755][ T7046] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 59.689652][ T7069] syz_tun: entered promiscuous mode [ 59.697337][ T7069] batadv_slave_0: entered promiscuous mode [ 59.701611][ T7069] hsr1: entered allmulticast mode [ 59.703481][ T7069] syz_tun: entered allmulticast mode [ 59.705382][ T7069] batadv_slave_0: entered allmulticast mode [ 59.786029][ T6988] usb 5-1: failed to restore interface 228 altsetting 255 (error=-71) [ 59.790967][ T56] usb 5-1: USB disconnect, device number 7 [ 59.798591][ T56] usblp0: removed [ 59.950099][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.080204][ T9] usb 7-1: device descriptor read/64, error -71 [ 60.320458][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 60.450197][ T9] usb 7-1: device descriptor read/64, error -71 [ 60.532024][ T5936] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.561223][ T9] usb usb7-port1: attempt power cycle [ 60.910190][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 60.932672][ T9] usb 7-1: device descriptor read/8, error -71 [ 61.180368][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 61.201012][ T9] usb 7-1: device descriptor read/8, error -71 [ 61.250255][ T5936] Bluetooth: hci2: command 0x0406 tx timeout [ 61.250363][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.310969][ T9] usb usb7-port1: unable to enumerate USB device [ 61.330150][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 62.610252][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.330422][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.410219][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 64.690323][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.860690][ T7091] qnx4: no qnx4 filesystem (no root dir). [ 65.983682][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 65.983697][ T39] audit: type=1400 audit(1733230685.772:622): avc: denied { getopt } for pid=7101 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.993093][ T39] audit: type=1400 audit(1733230685.772:623): avc: denied { write } for pid=7115 comm="syz.2.312" path="socket:[18567]" dev="sockfs" ino=18567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.091964][ T39] audit: type=1326 audit(1733230685.882:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.0.314" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30b4b7ff19 code=0x0 [ 66.099676][ T39] audit: type=1400 audit(1733230685.882:625): avc: denied { accept } for pid=7123 comm="syz.2.317" lport=39697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 66.138507][ T7129] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 66.144543][ T7129] afs: Unknown parameter 'lGШ _wKIO@qh"Siakd?+<:H[>^' [ 66.160178][ T5942] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 66.198879][ T39] audit: type=1400 audit(1733230685.982:626): avc: denied { name_connect } for pid=7128 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 66.255502][ T7129] netlink: 48 bytes leftover after parsing attributes in process `syz.2.318'. [ 66.320209][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 66.323987][ T5942] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 66.326252][ T5942] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 66.328551][ T5942] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 66.331026][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.333520][ T5942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 66.336048][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 66.339503][ T5942] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 66.342932][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.346477][ T5942] usb 6-1: config 0 descriptor?? [ 66.396122][ T7139] xt_ipcomp: unknown flags 12 [ 66.468990][ T7142] cgroup: fork rejected by pids controller in /syz3 [ 66.558437][ T5942] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 66.577219][ T39] audit: type=1400 audit(1733230686.362:627): avc: denied { ioctl } for pid=7325 comm="syz.3.322" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.583629][ T5942] usb 6-1: USB disconnect, device number 7 [ 66.585632][ T39] audit: type=1400 audit(1733230686.372:628): avc: denied { connect } for pid=7325 comm="syz.3.322" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.595529][ T5942] usblp0: removed [ 66.651147][ T39] audit: type=1400 audit(1733230686.442:629): avc: denied { create } for pid=7327 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.656124][ T39] audit: type=1400 audit(1733230686.442:630): avc: denied { setopt } for pid=7327 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.661126][ T39] audit: type=1400 audit(1733230686.442:631): avc: denied { write } for pid=7327 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.973495][ T7340] netfs: Couldn't get user pages (rc=-14) [ 66.990943][ T5942] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 67.008267][ T7343] Cache volume key already in use (9p,syz,) [ 67.028136][ T7343] FAULT_INJECTION: forcing a failure. [ 67.028136][ T7343] name failslab, interval 1, probability 0, space 0, times 1 [ 67.034148][ T7343] CPU: 3 UID: 0 PID: 7343 Comm: syz.2.326 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 67.038011][ T7343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.041541][ T7343] Call Trace: [ 67.042781][ T7343] [ 67.043862][ T7343] dump_stack_lvl+0x16c/0x1f0 [ 67.045587][ T7343] should_fail_ex+0x497/0x5b0 [ 67.047319][ T7343] ? fs_reclaim_acquire+0xae/0x150 [ 67.049232][ T7343] should_failslab+0xc2/0x120 [ 67.050980][ T7343] __kmalloc_cache_noprof+0x68/0x410 [ 67.052943][ T7343] ? v9fs_fid_find+0x2b9/0x360 [ 67.054673][ T7343] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 67.056834][ T7343] p9_fid_create+0x45/0x470 [ 67.058512][ T7343] p9_client_xattrwalk+0x47/0x290 [ 67.060336][ T7343] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 67.062462][ T7343] v9fs_fid_xattr_get+0x108/0x300 [ 67.064340][ T7343] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 67.066365][ T7343] ? __pfx_v9fs_fid_find+0x10/0x10 [ 67.068298][ T7343] ? v9fs_fid_lookup+0xe9/0xec0 [ 67.070103][ T7343] ? __pfx___lock_acquire+0x10/0x10 [ 67.071972][ T7343] v9fs_xattr_handler_get+0x6b/0x120 [ 67.073886][ T7343] __vfs_getxattr+0x13b/0x1a0 [ 67.075567][ T7343] ? __pfx___vfs_getxattr+0x10/0x10 [ 67.077361][ T7343] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 67.079223][ T7343] cap_inode_need_killpriv+0x40/0x60 [ 67.080998][ T7343] security_inode_need_killpriv+0x1b9/0x1e0 [ 67.083047][ T7343] file_remove_privs_flags+0x3a0/0x5c0 [ 67.084896][ T7343] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 67.087054][ T7343] ? generic_write_checks+0x312/0x480 [ 67.089056][ T7343] ? __pfx_generic_write_checks+0x10/0x10 [ 67.091141][ T7343] netfs_unbuffered_write_iter+0x1d6/0x6d0 [ 67.093290][ T7343] v9fs_file_write_iter+0xbf/0x100 [ 67.095165][ T7343] vfs_write+0x5ae/0x1150 [ 67.096678][ T7343] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 67.098239][ T7343] ? __pfx___mutex_lock+0x10/0x10 [ 67.099669][ T7343] ? __pfx_vfs_write+0x10/0x10 [ 67.101384][ T7343] ksys_write+0x12b/0x250 [ 67.102921][ T7343] ? __pfx_ksys_write+0x10/0x10 [ 67.104667][ T7343] do_syscall_64+0xcd/0x250 [ 67.106277][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.108388][ T7343] RIP: 0033:0x7f0e4657ff19 [ 67.110015][ T7343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.116853][ T7343] RSP: 002b:00007f0e47398058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.119821][ T7343] RAX: ffffffffffffffda RBX: 00007f0e46745fa0 RCX: 00007f0e4657ff19 [ 67.122237][ T7343] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 67.124339][ T7343] RBP: 00007f0e473980a0 R08: 0000000000000000 R09: 0000000000000000 [ 67.126653][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.129078][ T7343] R13: 0000000000000000 R14: 00007f0e46745fa0 R15: 00007ffd17281c78 [ 67.131851][ T7343] [ 67.139513][ T7343] netfs: Couldn't get user pages (rc=-14) [ 67.195578][ T7347] bridge_slave_0: left allmulticast mode [ 67.197113][ T7347] bridge_slave_0: left promiscuous mode [ 67.198751][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.203042][ T7347] bridge_slave_1: left allmulticast mode [ 67.204690][ T7347] bridge_slave_1: left promiscuous mode [ 67.206775][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.215680][ T7347] bond0: (slave bond_slave_0): Releasing backup interface [ 67.220906][ T7347] bond0: (slave bond_slave_1): Releasing backup interface [ 67.222975][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 67.228192][ T5942] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 67.232200][ T5942] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 67.235429][ T5942] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 67.238578][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.242282][ T5942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.246643][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 67.248029][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 67.251589][ T5942] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 67.257071][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.261532][ T5942] usb 6-1: config 0 descriptor?? [ 67.266142][ T7347] team0: Port device team_slave_0 removed [ 67.273129][ T7347] team0: Port device team_slave_1 removed [ 67.275734][ T7347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.278324][ T7347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.282065][ T7347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.284603][ T7347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.312307][ T7356] team0: Mode changed to "loadbalance" [ 67.421616][ T5988] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 67.467965][ T5942] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 67.558514][ T7368] devtmpfs: Cannot change global quota limit on remount [ 67.573473][ T5988] usb 8-1: not running at top speed; connect to a high speed hub [ 67.578266][ T5988] usb 8-1: config 172 has an invalid interface number: 211 but max is 2 [ 67.581653][ T5988] usb 8-1: config 172 has an invalid interface number: 134 but max is 2 [ 67.584806][ T5988] usb 8-1: config 172 has 2 interfaces, different from the descriptor's value: 3 [ 67.587856][ T5988] usb 8-1: config 172 has no interface number 0 [ 67.590190][ T5988] usb 8-1: config 172 has no interface number 1 [ 67.592357][ T5988] usb 8-1: config 172 interface 211 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 67.596121][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has a duplicate endpoint with address 0xA, skipping [ 67.598984][ T7375] vlan2: entered promiscuous mode [ 67.600808][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has an invalid descriptor for endpoint zero, skipping [ 67.601566][ T7375] vlan2: entered allmulticast mode [ 67.605490][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has an invalid descriptor for endpoint zero, skipping [ 67.606599][ T7375] hsr_slave_1: entered allmulticast mode [ 67.610893][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has an invalid descriptor for endpoint zero, skipping [ 67.616090][ T5988] usb 8-1: config 172 interface 134 altsetting 185 endpoint 0x2 has invalid maxpacket 2047, setting to 64 [ 67.617543][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 67.619844][ T5988] usb 8-1: config 172 interface 134 altsetting 185 endpoint 0xB has invalid wMaxPacketSize 0 [ 67.625571][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has a duplicate endpoint with address 0xA, skipping [ 67.629265][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has a duplicate endpoint with address 0xC, skipping [ 67.633007][ T5988] usb 8-1: config 172 interface 134 altsetting 185 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 67.636785][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has a duplicate endpoint with address 0x2, skipping [ 67.640989][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has a duplicate endpoint with address 0x1, skipping [ 67.645117][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has a duplicate endpoint with address 0x4, skipping [ 67.648944][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has an invalid descriptor for endpoint zero, skipping [ 67.653298][ T5988] usb 8-1: config 172 interface 134 altsetting 185 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 67.657003][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has a duplicate endpoint with address 0x1, skipping [ 67.661378][ T5988] usb 8-1: config 172 interface 134 altsetting 185 has 19 endpoint descriptors, different from the interface descriptor's value: 11 [ 67.666348][ T5988] usb 8-1: config 172 interface 211 has no altsetting 0 [ 67.668774][ T5988] usb 8-1: config 172 interface 134 has no altsetting 0 [ 67.688974][ T5942] usb 6-1: USB disconnect, device number 8 [ 67.699877][ T5988] usb 8-1: Dual-Role OTG device on HNP port [ 67.702043][ T5942] usblp0: removed [ 67.703642][ T5988] usb 8-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=38.95 [ 67.710959][ T5988] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.720087][ T5988] usb 8-1: Product: Э [ 67.721552][ T5988] usb 8-1: Manufacturer: ࠧ [ 67.723205][ T5988] usb 8-1: SerialNumber: syz [ 67.758219][ T7374] hsr_slave_1 (unregistering): left allmulticast mode [ 67.780738][ T7374] hsr_slave_1 (unregistering): left promiscuous mode [ 67.872787][ T7382] tmpfs: Unknown parameter 'mp' [ 67.874830][ T7382] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 67.942702][ T5988] usb 8-1: USB disconnect, device number 3 [ 67.976339][ T7386] veth1: entered promiscuous mode [ 67.978115][ T7386] veth1: entered allmulticast mode [ 67.998387][ T7390] FAULT_INJECTION: forcing a failure. [ 67.998387][ T7390] name failslab, interval 1, probability 0, space 0, times 0 [ 68.003104][ T7390] CPU: 3 UID: 0 PID: 7390 Comm: syz.0.338 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 68.006471][ T7390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.009818][ T7390] Call Trace: [ 68.010869][ T7390] [ 68.011909][ T7390] dump_stack_lvl+0x16c/0x1f0 [ 68.013448][ T7390] should_fail_ex+0x497/0x5b0 [ 68.014974][ T7390] ? fs_reclaim_acquire+0xae/0x150 [ 68.016710][ T7390] should_failslab+0xc2/0x120 [ 68.018228][ T7390] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 68.019934][ T7390] ? __pfx_mark_lock+0x10/0x10 [ 68.021448][ T7390] ? p9_tag_alloc+0x9c/0x870 [ 68.022931][ T7390] p9_tag_alloc+0x9c/0x870 [ 68.024310][ T7390] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 68.026187][ T7390] ? __pfx_p9_tag_alloc+0x10/0x10 [ 68.027760][ T7390] ? __lock_acquire+0x15a9/0x3c40 [ 68.029367][ T7390] p9_client_prepare_req+0x19f/0x4d0 [ 68.030992][ T7390] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 68.032869][ T7390] ? hlock_class+0x4e/0x130 [ 68.034302][ T7390] ? mark_lock+0xb5/0xc60 [ 68.035640][ T7390] ? __pfx___lock_acquire+0x10/0x10 [ 68.037248][ T7390] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 68.039080][ T7390] p9_client_rpc+0x1c3/0xc10 [ 68.040543][ T7390] ? __pfx_p9_client_rpc+0x10/0x10 [ 68.042142][ T7390] ? p9_fid_create+0x26a/0x470 [ 68.043749][ T7390] ? __pfx_lock_release+0x10/0x10 [ 68.045351][ T7390] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 68.047224][ T7390] ? mark_held_locks+0x9f/0xe0 [ 68.048727][ T7390] ? rcu_is_watching+0x12/0xc0 [ 68.050270][ T7390] ? trace_9p_fid_ref+0x179/0x1f0 [ 68.051848][ T7390] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 68.053690][ T7390] p9_client_xattrwalk+0xc0/0x290 [ 68.055235][ T7390] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 68.057081][ T7390] v9fs_fid_xattr_get+0x108/0x300 [ 68.058674][ T7390] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 68.060412][ T7390] ? __pfx_v9fs_fid_find+0x10/0x10 [ 68.062037][ T7390] ? v9fs_fid_lookup+0xe9/0xec0 [ 68.063556][ T7390] ? __pfx___lock_acquire+0x10/0x10 [ 68.065138][ T7390] v9fs_xattr_handler_get+0x6b/0x120 [ 68.066793][ T7390] __vfs_getxattr+0x13b/0x1a0 [ 68.068275][ T7390] ? __pfx___vfs_getxattr+0x10/0x10 [ 68.069913][ T7390] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 68.071672][ T7390] cap_inode_need_killpriv+0x40/0x60 [ 68.073305][ T7390] security_inode_need_killpriv+0x1b9/0x1e0 [ 68.075166][ T7390] file_remove_privs_flags+0x3a0/0x5c0 [ 68.076876][ T7390] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 68.078792][ T7390] ? generic_write_checks+0x312/0x480 [ 68.080475][ T7390] ? __pfx_generic_write_checks+0x10/0x10 [ 68.082274][ T7390] netfs_unbuffered_write_iter+0x1d6/0x6d0 [ 68.084015][ T7390] v9fs_file_write_iter+0xbf/0x100 [ 68.085603][ T7390] vfs_write+0x5ae/0x1150 [ 68.086970][ T7390] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 68.088762][ T7390] ? __pfx___mutex_lock+0x10/0x10 [ 68.090353][ T7390] ? __pfx_vfs_write+0x10/0x10 [ 68.091870][ T7390] ksys_write+0x12b/0x250 [ 68.093225][ T7390] ? __pfx_ksys_write+0x10/0x10 [ 68.094761][ T7390] do_syscall_64+0xcd/0x250 [ 68.096201][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.098059][ T7390] RIP: 0033:0x7f30b4b7ff19 [ 68.099464][ T7390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.105422][ T7390] RSP: 002b:00007f30b5a32058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.108020][ T7390] RAX: ffffffffffffffda RBX: 00007f30b4d45fa0 RCX: 00007f30b4b7ff19 [ 68.110522][ T7390] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 68.113121][ T7390] RBP: 00007f30b5a320a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.115606][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.118053][ T7390] R13: 0000000000000000 R14: 00007f30b4d45fa0 R15: 00007fffb8d1a8f8 [ 68.120490][ T7390] [ 68.125717][ T7390] netfs: Couldn't get user pages (rc=-14) [ 68.295232][ T7394] netfs: Couldn't get user pages (rc=-14) [ 68.382511][ T7396] netlink: 84 bytes leftover after parsing attributes in process `syz.1.341'. [ 68.385144][ T7396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.341'. [ 68.631337][ T7416] FAULT_INJECTION: forcing a failure. [ 68.631337][ T7416] name failslab, interval 1, probability 0, space 0, times 0 [ 68.634846][ T7416] CPU: 1 UID: 0 PID: 7416 Comm: syz.1.348 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 68.637508][ T7416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.640210][ T7416] Call Trace: [ 68.641090][ T7416] [ 68.641901][ T7416] dump_stack_lvl+0x16c/0x1f0 [ 68.643131][ T7416] should_fail_ex+0x497/0x5b0 [ 68.644351][ T7416] ? fs_reclaim_acquire+0xae/0x150 [ 68.646075][ T7416] should_failslab+0xc2/0x120 [ 68.647295][ T7416] __kmalloc_noprof+0xcb/0x510 [ 68.648535][ T7416] ? rcu_is_watching+0x12/0xc0 [ 68.649740][ T7416] p9_fcall_init+0x97/0x260 [ 68.650920][ T7416] p9_tag_alloc+0x17a/0x870 [ 68.652081][ T7416] ? __pfx_p9_tag_alloc+0x10/0x10 [ 68.653417][ T7416] p9_client_prepare_req+0x19f/0x4d0 [ 68.654794][ T7416] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 68.656317][ T7416] ? hlock_class+0x4e/0x130 [ 68.657507][ T7416] ? mark_lock+0xb5/0xc60 [ 68.658660][ T7416] ? __pfx___lock_acquire+0x10/0x10 [ 68.660010][ T7416] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 68.661554][ T7416] p9_client_rpc+0x1c3/0xc10 [ 68.662857][ T7416] ? __pfx_p9_client_rpc+0x10/0x10 [ 68.664187][ T7416] ? p9_fid_create+0x26a/0x470 [ 68.665437][ T7416] ? __pfx_lock_release+0x10/0x10 [ 68.666774][ T7416] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 68.668325][ T7416] ? mark_held_locks+0x9f/0xe0 [ 68.669607][ T7416] ? rcu_is_watching+0x12/0xc0 [ 68.670888][ T7416] ? trace_9p_fid_ref+0x179/0x1f0 [ 68.672199][ T7416] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 68.674278][ T7416] p9_client_xattrwalk+0xc0/0x290 [ 68.675926][ T7416] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 68.677463][ T7416] v9fs_fid_xattr_get+0x108/0x300 [ 68.678836][ T7416] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 68.680210][ T7416] ? __pfx_v9fs_fid_find+0x10/0x10 [ 68.681525][ T7416] ? v9fs_fid_lookup+0xe9/0xec0 [ 68.682930][ T7416] ? __pfx___lock_acquire+0x10/0x10 [ 68.684221][ T7416] v9fs_xattr_handler_get+0x6b/0x120 [ 68.685599][ T7416] __vfs_getxattr+0x13b/0x1a0 [ 68.687000][ T7416] ? __pfx___vfs_getxattr+0x10/0x10 [ 68.688409][ T7416] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 68.689886][ T7416] cap_inode_need_killpriv+0x40/0x60 [ 68.691262][ T7416] security_inode_need_killpriv+0x1b9/0x1e0 [ 68.692931][ T7416] file_remove_privs_flags+0x3a0/0x5c0 [ 68.694664][ T7416] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 68.696209][ T7416] ? generic_write_checks+0x312/0x480 [ 68.697602][ T7416] ? __pfx_generic_write_checks+0x10/0x10 [ 68.699065][ T7416] netfs_unbuffered_write_iter+0x1d6/0x6d0 [ 68.700583][ T7416] v9fs_file_write_iter+0xbf/0x100 [ 68.701930][ T7416] vfs_write+0x5ae/0x1150 [ 68.703080][ T7416] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 68.704549][ T7416] ? __pfx___mutex_lock+0x10/0x10 [ 68.705861][ T7416] ? __pfx_vfs_write+0x10/0x10 [ 68.707111][ T7416] ksys_write+0x12b/0x250 [ 68.708246][ T7416] ? __pfx_ksys_write+0x10/0x10 [ 68.709545][ T7416] do_syscall_64+0xcd/0x250 [ 68.710751][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.712276][ T7416] RIP: 0033:0x7ff8c537ff19 [ 68.713560][ T7416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.719435][ T7416] RSP: 002b:00007ff8c61dd058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.721448][ T7416] RAX: ffffffffffffffda RBX: 00007ff8c5545fa0 RCX: 00007ff8c537ff19 [ 68.723413][ T7416] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 68.725459][ T7416] RBP: 00007ff8c61dd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.727473][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.729511][ T7416] R13: 0000000000000000 R14: 00007ff8c5545fa0 R15: 00007fff75bdce98 [ 68.731624][ T7416] [ 68.744770][ T7416] netfs: Couldn't get user pages (rc=-14) [ 69.072793][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 69.259270][ T7471] binder: 7470:7471 unknown command 0 [ 69.260789][ T7471] binder: 7470:7471 ioctl c0306201 20000340 returned -22 [ 69.289063][ T7475] FAULT_INJECTION: forcing a failure. [ 69.289063][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 69.294243][ T7475] CPU: 2 UID: 0 PID: 7475 Comm: syz.2.358 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 69.295933][ T7479] netlink: 732 bytes leftover after parsing attributes in process `syz.0.359'. [ 69.297979][ T7475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.298014][ T7475] Call Trace: [ 69.302985][ T7479] netlink: 732 bytes leftover after parsing attributes in process `syz.0.359'. [ 69.304157][ T7475] [ 69.309159][ T7475] dump_stack_lvl+0x16c/0x1f0 [ 69.310860][ T7475] should_fail_ex+0x497/0x5b0 [ 69.312622][ T7475] ? fs_reclaim_acquire+0xae/0x150 [ 69.314504][ T7475] should_failslab+0xc2/0x120 [ 69.316149][ T7475] __kmalloc_noprof+0xcb/0x510 [ 69.317827][ T7475] ? rcu_is_watching+0x12/0xc0 [ 69.319488][ T7475] p9_fcall_init+0x97/0x260 [ 69.321198][ T7475] p9_tag_alloc+0x21c/0x870 [ 69.322821][ T7475] ? __pfx_p9_tag_alloc+0x10/0x10 [ 69.324572][ T7475] p9_client_prepare_req+0x19f/0x4d0 [ 69.326401][ T7475] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 69.328423][ T7475] ? hlock_class+0x4e/0x130 [ 69.329783][ T7475] ? mark_lock+0xb5/0xc60 [ 69.330959][ T7475] ? __pfx___lock_acquire+0x10/0x10 [ 69.332458][ T7475] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 69.334159][ T7475] p9_client_rpc+0x1c3/0xc10 [ 69.335413][ T7475] ? __pfx_p9_client_rpc+0x10/0x10 [ 69.336784][ T7475] ? p9_fid_create+0x26a/0x470 [ 69.338088][ T7475] ? __pfx_lock_release+0x10/0x10 [ 69.339449][ T7475] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 69.341013][ T7475] ? mark_held_locks+0x9f/0xe0 [ 69.342265][ T7475] ? rcu_is_watching+0x12/0xc0 [ 69.343675][ T7475] ? trace_9p_fid_ref+0x179/0x1f0 [ 69.345044][ T7475] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 69.346678][ T7475] p9_client_xattrwalk+0xc0/0x290 [ 69.347922][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 69.348029][ T7475] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 69.348044][ T7475] v9fs_fid_xattr_get+0x108/0x300 [ 69.353556][ T7475] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 69.355151][ T7475] ? __pfx_v9fs_fid_find+0x10/0x10 [ 69.356537][ T7475] ? v9fs_fid_lookup+0xe9/0xec0 [ 69.357833][ T7475] ? __pfx___lock_acquire+0x10/0x10 [ 69.359223][ T7475] v9fs_xattr_handler_get+0x6b/0x120 [ 69.360844][ T7475] __vfs_getxattr+0x13b/0x1a0 [ 69.362506][ T7475] ? __pfx___vfs_getxattr+0x10/0x10 [ 69.364306][ T7475] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 69.366384][ T7475] cap_inode_need_killpriv+0x40/0x60 [ 69.368345][ T7475] security_inode_need_killpriv+0x1b9/0x1e0 [ 69.370420][ T7475] file_remove_privs_flags+0x3a0/0x5c0 [ 69.372309][ T7475] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 69.374398][ T7475] ? generic_write_checks+0x312/0x480 [ 69.376264][ T7475] ? __pfx_generic_write_checks+0x10/0x10 [ 69.378279][ T7475] netfs_unbuffered_write_iter+0x1d6/0x6d0 [ 69.380291][ T7475] v9fs_file_write_iter+0xbf/0x100 [ 69.382054][ T7475] vfs_write+0x5ae/0x1150 [ 69.383549][ T7475] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 69.385535][ T7475] ? __pfx___mutex_lock+0x10/0x10 [ 69.387238][ T7475] ? __pfx_vfs_write+0x10/0x10 [ 69.388939][ T7475] ksys_write+0x12b/0x250 [ 69.390474][ T7475] ? __pfx_ksys_write+0x10/0x10 [ 69.392186][ T7475] do_syscall_64+0xcd/0x250 [ 69.393814][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.395347][ T7475] RIP: 0033:0x7f0e4657ff19 [ 69.396477][ T7475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.401415][ T7475] RSP: 002b:00007f0e47398058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.403598][ T7475] RAX: ffffffffffffffda RBX: 00007f0e46745fa0 RCX: 00007f0e4657ff19 [ 69.405629][ T7475] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 69.407673][ T7475] RBP: 00007f0e473980a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.409729][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.411855][ T7475] R13: 0000000000000000 R14: 00007f0e46745fa0 R15: 00007ffd17281c78 [ 69.413905][ T7475] [ 69.418755][ T7475] netfs: Couldn't get user pages (rc=-14) [ 69.546264][ T7507] devpts: called with bogus options [ 69.629192][ T7507] devtmpfs: Unknown parameter 'nosxr' [ 69.660548][ T7422] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 69.696681][ T7536] netfs: Couldn't get user pages (rc=-14) [ 69.725184][ T7542] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 69.727571][ T7542] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 69.734379][ T7542] vhci_hcd vhci_hcd.0: Device attached [ 69.744318][ T7542] vhci_hcd vhci_hcd.0: port 0 already used [ 69.805785][ T7549] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 69.806483][ T25] IPVS: starting estimator thread 0... [ 69.812196][ T7549] input: syz0 as /devices/virtual/input/input11 [ 69.892056][ T7557] netlink: 'syz.0.375': attribute type 11 has an invalid length. [ 69.910054][ T7553] IPVS: using max 39 ests per chain, 93600 per kthread [ 70.000529][ T9] usb 40-1: SetAddress Request (2) to port 0 [ 70.002445][ T9] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 70.042292][ T7579] FAULT_INJECTION: forcing a failure. [ 70.042292][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 70.045704][ T7579] CPU: 0 UID: 0 PID: 7579 Comm: syz.3.382 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 70.048558][ T7579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.051403][ T7579] Call Trace: [ 70.052275][ T7579] [ 70.053042][ T7579] dump_stack_lvl+0x116/0x1f0 [ 70.054390][ T7579] should_fail_ex+0x497/0x5b0 [ 70.055643][ T7579] should_failslab+0xc2/0x120 [ 70.056881][ T7579] __kmalloc_noprof+0xcb/0x510 [ 70.058175][ T7579] ? lock_acquire.part.0+0x11b/0x380 [ 70.059756][ T7579] virtqueue_add_sgs+0x724/0x1b10 [ 70.061232][ T7579] ? __virt_addr_valid+0x1a4/0x590 [ 70.062479][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 70.062726][ T7579] ? __pfx_virtqueue_add_sgs+0x10/0x10 [ 70.066640][ T7579] ? __virt_addr_valid+0x5e/0x590 [ 70.067953][ T7579] ? __phys_addr+0xc6/0x150 [ 70.069179][ T7579] ? pack_sg_list.constprop.0+0x255/0x2b0 [ 70.070689][ T7579] p9_virtio_request+0x271/0x6a0 [ 70.070877][ T7581] bridge0: port 1(macvlan3) entered blocking state [ 70.071961][ T7579] ? __pfx_p9_virtio_request+0x10/0x10 [ 70.071974][ T7579] ? p9_client_prepare_req+0x111/0x4d0 [ 70.071987][ T7579] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 70.072000][ T7579] ? hlock_class+0x4e/0x130 [ 70.073813][ T7581] bridge0: port 1(macvlan3) entered disabled state [ 70.075184][ T7579] ? __pfx___lock_acquire+0x10/0x10 [ 70.075204][ T7579] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 70.076792][ T7581] macvlan3: entered allmulticast mode [ 70.078219][ T7579] p9_client_rpc+0x33d/0xc10 [ 70.078240][ T7579] ? __pfx_p9_client_rpc+0x10/0x10 [ 70.079419][ T7581] bridge0: entered allmulticast mode [ 70.081087][ T7579] ? p9_fid_create+0x26a/0x470 [ 70.081101][ T7579] ? __pfx_lock_release+0x10/0x10 [ 70.081114][ T7579] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 70.081127][ T7579] ? mark_held_locks+0x9f/0xe0 [ 70.081139][ T7579] ? rcu_is_watching+0x12/0xc0 [ 70.081152][ T7579] ? trace_9p_fid_ref+0x179/0x1f0 [ 70.081165][ T7579] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 70.081178][ T7579] p9_client_xattrwalk+0xc0/0x290 [ 70.081193][ T7579] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 70.081206][ T7579] v9fs_fid_xattr_get+0x108/0x300 [ 70.081218][ T7579] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 70.081231][ T7579] ? __pfx_v9fs_fid_find+0x10/0x10 [ 70.081247][ T7579] ? v9fs_fid_lookup+0xe9/0xec0 [ 70.107688][ T7579] ? __pfx___lock_acquire+0x10/0x10 [ 70.109074][ T7579] v9fs_xattr_handler_get+0x6b/0x120 [ 70.110541][ T7579] __vfs_getxattr+0x13b/0x1a0 [ 70.111816][ T7579] ? __pfx___vfs_getxattr+0x10/0x10 [ 70.113187][ T7579] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 70.114813][ T7579] cap_inode_need_killpriv+0x40/0x60 [ 70.116202][ T7579] security_inode_need_killpriv+0x1b9/0x1e0 [ 70.117771][ T7579] file_remove_privs_flags+0x3a0/0x5c0 [ 70.119384][ T7582] xt_socket: unknown flags 0x8 [ 70.119475][ T7579] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 70.122758][ T7579] ? generic_write_checks+0x312/0x480 [ 70.124151][ T7579] ? __pfx_generic_write_checks+0x10/0x10 [ 70.125613][ T7579] netfs_unbuffered_write_iter+0x1d6/0x6d0 [ 70.127132][ T7579] v9fs_file_write_iter+0xbf/0x100 [ 70.128513][ T7579] vfs_write+0x5ae/0x1150 [ 70.129637][ T7579] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 70.131172][ T7579] ? __pfx___mutex_lock+0x10/0x10 [ 70.132477][ T7579] ? __pfx_vfs_write+0x10/0x10 [ 70.133971][ T7579] ksys_write+0x12b/0x250 [ 70.135103][ T7579] ? __pfx_ksys_write+0x10/0x10 [ 70.136382][ T7579] do_syscall_64+0xcd/0x250 [ 70.137653][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.139547][ T7579] RIP: 0033:0x7ffba917ff19 [ 70.140709][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.145718][ T7579] RSP: 002b:00007ffba9fb1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.147881][ T7579] RAX: ffffffffffffffda RBX: 00007ffba9345fa0 RCX: 00007ffba917ff19 [ 70.149969][ T7579] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 70.152026][ T7579] RBP: 00007ffba9fb10a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.154058][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.156078][ T7579] R13: 0000000000000000 R14: 00007ffba9345fa0 R15: 00007ffd998e1058 [ 70.158159][ T7579] [ 70.160949][ T7579] netfs: Couldn't get user pages (rc=-14) [ 70.161030][ T7581] macvlan3: left allmulticast mode [ 70.164067][ T7581] bridge0: left allmulticast mode [ 70.345711][ T7600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=7600 comm=syz.0.385 [ 70.471435][ T7615] program syz.0.389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.478464][ T7617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.537017][ T7621] netfs: Couldn't get user pages (rc=-14) [ 70.556617][ T7543] vhci_hcd: connection reset by peer [ 70.561866][ T7230] vhci_hcd: stop threads [ 70.563423][ T7230] vhci_hcd: release socket [ 70.565568][ T7230] vhci_hcd: disconnect device [ 70.641690][ T7632] overlayfs: failed to resolve './file0': -2 [ 70.739348][ T7638] netlink: 'syz.0.396': attribute type 6 has an invalid length. [ 70.781922][ T7643] fuse: Unknown parameter '' [ 70.790369][ T7645] capability: warning: `syz.3.399' uses deprecated v2 capabilities in a way that may be insecure [ 70.820187][ T5969] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 70.850308][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.923295][ T7653] netfs: Couldn't get user pages (rc=-14) [ 70.980363][ T5969] usb 7-1: Using ep0 maxpacket: 8 [ 70.983724][ T5969] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 70.985894][ T5969] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.988536][ T5969] usb 7-1: config 0 has no interface number 0 [ 70.990235][ T5969] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.994184][ T5969] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 70.997082][ T5969] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 70.999621][ T5969] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.003086][ T5969] usb 7-1: config 0 interface 52 has no altsetting 0 [ 71.004885][ T5969] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 71.007255][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.010836][ T5969] usb 7-1: config 0 descriptor?? [ 71.015571][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.017234][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.111023][ T39] kauditd_printk_skb: 40 callbacks suppressed [ 71.111073][ T39] audit: type=1400 audit(1733230690.892:672): avc: denied { read } for pid=7667 comm="syz.0.407" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.123488][ T39] audit: type=1400 audit(1733230690.912:673): avc: denied { append } for pid=7667 comm="syz.0.407" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.217748][ T5969] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.52/input/input12 [ 71.226250][ T5969] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 71.232557][ T5334] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 71.248456][ T5969] input: failed to attach handler mousedev to device input12, error: -5 [ 71.251561][ T5334] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 71.258321][ T5969] usb 7-1: USB disconnect, device number 9 [ 71.261946][ T5334] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 71.275502][ T7688] 9pnet_virtio: no channels available for device syz [ 71.310889][ T7691] FAULT_INJECTION: forcing a failure. [ 71.310889][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 71.316730][ T7691] CPU: 3 UID: 0 PID: 7691 Comm: syz.1.414 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 71.319457][ T7691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.322177][ T7691] Call Trace: [ 71.323074][ T7691] [ 71.323960][ T7691] dump_stack_lvl+0x16c/0x1f0 [ 71.325424][ T7691] should_fail_ex+0x497/0x5b0 [ 71.326641][ T7691] ? fs_reclaim_acquire+0xae/0x150 [ 71.328030][ T7691] should_failslab+0xc2/0x120 [ 71.329266][ T7691] __kmalloc_cache_noprof+0x68/0x410 [ 71.330641][ T7691] ? __pfx___folio_start_writeback+0x10/0x10 [ 71.332225][ T7691] ? do_raw_spin_lock+0x12d/0x2c0 [ 71.333617][ T7691] netfs_buffer_make_space+0x432/0x6b0 [ 71.335137][ T7691] netfs_buffer_append_folio+0x298/0x360 [ 71.336625][ T7691] netfs_write_folio+0x540/0x1930 [ 71.338224][ T7691] netfs_writepages+0x29a/0x9d0 [ 71.339766][ T7691] ? __pfx_netfs_writepages+0x10/0x10 [ 71.341402][ T7691] ? mark_held_locks+0x9f/0xe0 [ 71.342737][ T7691] ? __pfx___lock_acquire+0x10/0x10 [ 71.344136][ T7691] ? kasan_quarantine_put+0x10a/0x240 [ 71.345846][ T7691] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.347411][ T7691] ? __pfx_netfs_writepages+0x10/0x10 [ 71.348894][ T7691] do_writepages+0x1b3/0x820 [ 71.350154][ T7691] ? __pfx_do_writepages+0x10/0x10 [ 71.351734][ T7691] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 71.353351][ T7691] ? __pfx_lock_release+0x10/0x10 [ 71.354756][ T7691] ? do_raw_spin_lock+0x12d/0x2c0 [ 71.356097][ T7691] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.357500][ T7691] ? lock_acquire+0x2f/0xb0 [ 71.358685][ T7691] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 71.360280][ T7691] ? do_raw_spin_unlock+0x172/0x230 [ 71.361784][ T7691] filemap_fdatawrite_wbc+0x104/0x160 [ 71.363209][ T7691] __filemap_fdatawrite_range+0xb3/0xf0 [ 71.364756][ T7691] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 71.366470][ T7691] ? generic_write_checks+0x312/0x480 [ 71.367890][ T7691] ? inode_needs_update_time.part.0+0x191/0x270 [ 71.369571][ T7691] filemap_write_and_wait_range+0xa3/0x130 [ 71.371132][ T7691] netfs_unbuffered_write_iter+0x272/0x6d0 [ 71.372723][ T7691] v9fs_file_write_iter+0xbf/0x100 [ 71.374110][ T7691] vfs_write+0x5ae/0x1150 [ 71.375356][ T7691] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 71.376889][ T7691] ? __pfx___mutex_lock+0x10/0x10 [ 71.378258][ T7691] ? __pfx_vfs_write+0x10/0x10 [ 71.379543][ T7691] ksys_write+0x12b/0x250 [ 71.380685][ T7691] ? __pfx_ksys_write+0x10/0x10 [ 71.382232][ T7691] do_syscall_64+0xcd/0x250 [ 71.383498][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.385111][ T7691] RIP: 0033:0x7ff8c537ff19 [ 71.386357][ T7691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.391245][ T7691] RSP: 002b:00007ff8c61dd058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.393402][ T7691] RAX: ffffffffffffffda RBX: 00007ff8c5545fa0 RCX: 00007ff8c537ff19 [ 71.395600][ T7691] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 71.397623][ T7691] RBP: 00007ff8c61dd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.399720][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.401796][ T7691] R13: 0000000000000000 R14: 00007ff8c5545fa0 R15: 00007fff75bdce98 [ 71.403901][ T7691] [ 71.404870][ C3] vkms_vblank_simulate: vblank timer overrun [ 71.410840][ T7200] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 71.415111][ T7200] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 71.418903][ T7200] CPU: 0 UID: 0 PID: 7200 Comm: kworker/u32:24 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 71.422946][ T7200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.426336][ T7200] Workqueue: events_unbound netfs_write_collection_worker [ 71.428567][ T7200] RIP: 0010:netfs_write_collection_worker+0x1cd1/0x47d0 [ 71.430882][ T7200] Code: 39 f3 0f 83 37 04 00 00 e8 4c d5 52 ff 44 8b 6c 24 08 41 83 fd 1e 0f 87 79 23 00 00 4a 8d 44 ed 08 48 89 44 24 30 48 c1 e8 03 <42> 80 3c 38 00 0f 85 e4 23 00 00 4a 8b 5c ed 08 48 89 df e8 b7 d1 [ 71.437293][ T7200] RSP: 0018:ffffc900042e7ae0 EFLAGS: 00010202 [ 71.439343][ T7200] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff82472e1a [ 71.441995][ T7200] RDX: ffff8880501ec880 RSI: ffffffff824730c4 RDI: 0000000000000005 [ 71.444668][ T7200] RBP: 0000000000000000 R08: 0000000000000005 R09: ffff888029cd5b00 [ 71.447312][ T7200] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888029cd5a00 [ 71.449973][ T7200] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 71.452530][ T7200] FS: 0000000000000000(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 71.455441][ T7200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.457660][ T7200] CR2: 00007f30b5a11d58 CR3: 000000004e374000 CR4: 0000000000352ef0 [ 71.460387][ T7200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.463035][ T7200] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.465688][ T7200] Call Trace: [ 71.466861][ T7200] [ 71.467864][ T7200] ? die_addr+0x3b/0xa0 [ 71.469299][ T7200] ? exc_general_protection+0x155/0x230 [ 71.471189][ T7200] ? asm_exc_general_protection+0x26/0x30 [ 71.473113][ T7200] ? netfs_write_collection_worker+0x1a0a/0x47d0 [ 71.475255][ T7200] ? netfs_write_collection_worker+0x1cb4/0x47d0 [ 71.477357][ T7200] ? netfs_write_collection_worker+0x1cd1/0x47d0 [ 71.479432][ T7200] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 71.481633][ T7200] ? rcu_is_watching+0x12/0xc0 [ 71.483269][ T7200] ? trace_lock_acquire+0x14e/0x1f0 [ 71.485040][ T7200] ? process_one_work+0x921/0x1ba0 [ 71.486776][ T7200] ? lock_acquire+0x2f/0xb0 [ 71.488317][ T7200] ? process_one_work+0x921/0x1ba0 [ 71.490049][ T7200] process_one_work+0x9c5/0x1ba0 [ 71.491718][ T7200] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 71.493603][ T7200] ? __pfx_process_one_work+0x10/0x10 [ 71.495160][ T7200] ? rcu_is_watching+0x12/0xc0 [ 71.496424][ T7200] ? assign_work+0x1a0/0x250 [ 71.497618][ T7200] worker_thread+0x6c8/0xf00 [ 71.498824][ T7200] ? __pfx_worker_thread+0x10/0x10 [ 71.500139][ T7200] kthread+0x2c1/0x3a0 [ 71.501213][ T7200] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.502587][ T7200] ? __pfx_kthread+0x10/0x10 [ 71.503777][ T7200] ret_from_fork+0x45/0x80 [ 71.504933][ T7200] ? __pfx_kthread+0x10/0x10 [ 71.506172][ T7200] ret_from_fork_asm+0x1a/0x30 [ 71.507392][ T7200] [ 71.508206][ T7200] Modules linked in: [ 71.509437][ T7200] ---[ end trace 0000000000000000 ]--- [ 71.511191][ T7200] RIP: 0010:netfs_write_collection_worker+0x1cd1/0x47d0 [ 71.512984][ T7200] Code: 39 f3 0f 83 37 04 00 00 e8 4c d5 52 ff 44 8b 6c 24 08 41 83 fd 1e 0f 87 79 23 00 00 4a 8d 44 ed 08 48 89 44 24 30 48 c1 e8 03 <42> 80 3c 38 00 0f 85 e4 23 00 00 4a 8b 5c ed 08 48 89 df e8 b7 d1 [ 71.517951][ T7200] RSP: 0018:ffffc900042e7ae0 EFLAGS: 00010202 [ 71.519508][ T7200] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff82472e1a [ 71.521623][ T7200] RDX: ffff8880501ec880 RSI: ffffffff824730c4 RDI: 0000000000000005 [ 71.523650][ T7200] RBP: 0000000000000000 R08: 0000000000000005 R09: ffff888029cd5b00 [ 71.525696][ T7200] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888029cd5a00 [ 71.527725][ T7200] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 71.529796][ T7200] FS: 0000000000000000(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 71.532113][ T7200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.533804][ T7200] CR2: 00007f30b5a11d58 CR3: 000000004e374000 CR4: 0000000000352ef0 [ 71.536077][ T7200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.538099][ T7200] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.540174][ T7200] Kernel panic - not syncing: Fatal exception [ 71.542284][ T7200] Kernel Offset: disabled [ 71.543394][ T7200] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:58:11 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c9955 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc900042e74c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=000000000000002d R14=ffffffff851c98f0 R15=0000000000000000 RIP=ffffffff851c997f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f30b5a11d58 CR3=000000004e374000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0069636e5f6c6175 747269762f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30b4bf4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30b4bf483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30b4bf4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30b4bf484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30b4bf48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30b4bf49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30b4d10488 00007f30b4d10480 00007f30b4d10478 00007f30b4d10450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30b587d100 00007f30b4d10440 00007f30b4d10004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30b4d10498 00007f30b4d10490 00007f30b4d10488 00007f30b4d10480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000005f2cc RBX=0000000000000001 RCX=ffffffff8b29c759 RDX=ffffed100d4e6fee RSI=ffffffff8bd1b3e0 RDI=ffffffff817086b9 RBP=ffffed10039de910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cef4880 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3fe589 CR3=0000000024938000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555865c14d8 00005555865bf3c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555586559bfc 0000555586559a70 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000033353835 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1280031280040c90 034010000c800306 8004088285b98c08 0001000002080606 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79e2c4ec0043ba66 090f315d2a7de2c4 c4010f000000812d 9a98e98fa4f26008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0601080010014ea8 6010000ca003d92d 0ff26526db1b0f66 00676ab9c1c4c335 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04080604011ab600 100003ffffffff04 0010000210000c80 0400040100000408 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001000004080606 011ac20010000010 00040150b80480a0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080100003ffffff ff04010800060138 ce03ffffffff0418 80e5bbc008000108 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060119d803ffff ffff040580040e10 00000800080131e8 0010000590030010 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005800305bab408 0001000004080604 011ab600100003ff ffffff0400100002 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=ffff88802fdf6e80 RCX=0000000000000001 RDX=ffff888031564880 RSI=ffffffff846055ff RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffc90004737710 R8 =0000000000000000 R9 =0000000000000007 R10=0000000000000000 R11=00000000000a4001 R12=ffffc90004737808 R13=ffff888106ebdb90 R14=0000000000000007 R15=0000000000000000 RIP=ffffffff819a064b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff7eb1b4280 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c30c5ae CR3=0000000031be8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0ff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffdfffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4166f430 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf8313dd341169e8 7373737613f2a567 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737072 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bcf060ae47621a9b 0000560d7de3b35a 0000000000000081 000032326c6c696b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056081d66d3c8 000056081d66d3c8 0000000000000041 000056080032352e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68303e3b3a38253b 3a253e3a6e68303b 21383b657a687438 2739243c3b243b27 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 69303a2433273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88806a93fdc0 RCX=ffffffff818e14f4 RDX=ffff88801cef0000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90000167d78 RSP=ffffc90000167c98 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c38ce6 R12=1ffff9200002cf98 R13=0000000000000001 R14=0000000000000003 R15=ffffed100d527fb9 RIP=ffffffff819a0850 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c30c5ae CR3=0000000027f5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000000044a0 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf307ddb0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 643a735f6d3a746f 6f723d747865746e 6f6373203436363d 616e692022725f6d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000