last executing test programs: 6.526027598s ago: executing program 0 (id=176): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r1 = io_uring_setup(0x4d63, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) getpid() openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0x88, 0x4, 0x370, 0xffffffff, 0x1b8, 0xd0, 0x1b8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'pim6reg0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@private1, @remote, [], [], 'veth0_vlan\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r9, 0x3, r7, 0x5}) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="92001fdb", @ANYRES16=r2, @ANYBLOB="270e00000000fcffffff04070200"], 0x14}, 0x1, 0x40030000000000}, 0x0) 4.443845043s ago: executing program 0 (id=190): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa8800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) epoll_create1(0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) shutdown(r3, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'caif0\x00', @broadcast}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c298", 0x8}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.452581516s ago: executing program 0 (id=200): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_CAPBSET_DROP(0x1c, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x9) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040f0406000704b16664d9732e8bb90b2597a4b0c5240ab5288866604e3ec883b30152267752346c775e2980e43456d01b31a2e7b2e3edf4efa7a067b306f00d590beb1e1a26197e8f43a825afc4ec99bcb74d883b7b2df93da4deab6bbc6b65e519373fc1d8fa8a594f7d82788d8d19e326766548672337d0a0c283f493b64e5fbdb5332aab4c1b4c3986702062667ab0672f1ca4cbdb082f19ac6f4f25c1d6033bb043b1fd8d3f2c0b5e328af2d3a1cd2625db1d0e12fcc1e36d43e7f7a8c0aa9fcdf124f4aa08b2b9b7cd00521c8ed4ecb016e1a6292bc44534175b3048513a7583cc00007a51110e40e89d66471ee48a57e5db39b531af5bc5c8cf43ee32b36ea578802041da35c3c4098564151f19f8201758a274432490df01ed5b9b4e7ee4bb4f20c75858e423fd5937cfa1a4d900550d8f24130b385c0703e89dc678e234c253de39cd0054df0561bf6379dff8e2504a8a228a4c82ae412dffc7f99956ba6d114784d093a2f4dab5970e"], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040)=0x10010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8040080) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x80) io_setup(0x20, &(0x7f0000001140)) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004d2000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0xa, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.729668304s ago: executing program 1 (id=205): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 2.524314217s ago: executing program 1 (id=208): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) 2.423077344s ago: executing program 1 (id=209): syz_emit_vhci(0x0, 0x22) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0xfffffffffffffebc, &(0x7f0000000040)) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xe}}}]}, 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x3, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f05fe7f7028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.422537801s ago: executing program 0 (id=210): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2db, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000380)={0xffffffffffffc951, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001cc0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 2.30631802s ago: executing program 1 (id=211): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000940)="1a", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)="53fb7ce9bca5b4c6c82fb997acc6b0361e5c15be43144f1d9cb2f738c0dcd881c2bd734b3a0d325847ea3aa2d8ef64bfd77363d3ee", 0x35}, {&(0x7f0000000640)="1bd811741a607159fda051b57d4c01e9986c2e65426807ac72604e001af6eba2fedb368d816a109958c47842f8f56a1c6fe296617bede164ba1802cd81f0d41cc77aadb91f6de5a0d05e3edd3b260afc80732ab70609c96107211530a57108325d22154b5a20a367309333edfcb7f835cae30f79c90707141097ef32c02724e039f2d610c0469b693da78e2e43cad8bdfa37546c443ece681d", 0x99}, {&(0x7f0000001e40)="a4c237fe1e955e0b4d62d671e290ed757b3bd16bc22c8d5f7382616cf3d8285ced401cd0b6eafd0067ae8231b3946c49935d657c5b6cd0cdd3b2a16361798d72b0dfdf40a0f52f35edfbd2c71b98556bb7f278d91a81969882139ddfd9e2545f1ac87cbf596ba24df1652d6a7b66d7f60bfce17090e35aec34c994d838f15cd3f25a5f06cbe86ca048c8b55e7386eeeeb3caa85ae9d8020f7e3aeca070bb35737728ef0cf9027ee56784c9cbd7c69bd73179aa323b9ebde9619f97ccb01ab6993194625b137f83400dae9ef708e298afcad6d9c2e4631fe3347c5b09e57eedf757081a963ea1ffa481dded5d96ea0d1914db375a44169fc7483091391a7c5f9e69d01b68a09f9048efe9989c1907e71bb447dc7f2d217bf3222273f03f4c5c525021ee1b9818368f7e3a769c083bb6240d16861f3023dc0226844678e2abb6ca0cca77b0093256f917679d1de293fb3748d7e0fbeda37d67618a61dd00ed66315724bf9dbf458604c1234c40f694444f52d0d5f947290e94ca48d21254bec4e3d21a45d09d945ed73a9baf23a805ee75ea0240be8a3a243153b2cd8f70cbeec4cadbedf130a58294eba1a183bac2a3a5a84c48b8d7578f243a5e9c5cb5ca07fe9dc9f91a71c8612d809986d3ab370b2760cc31e4854bc09e840ad324cbffabc059498923428ad1c1771074d445638bfa77816bbb9a36271fb333b3e6767d476afdcd691cf8c0929e8eb6a1ceb48ca3f77f52b8e3e4d7e3dedfc5dd4a8f57ca8c965516f444f0b2901e97d304e27fac2fa3025016513591ff6c44e12deafb2cb12375858cffb0cfa456b90f9595b53dc9eb3c16aafc1252d87464dbb7c5724da0fa80d6ff914cafcbca37fb446eee62e16c288f82ca4ca4fa8722903f181ef132906ea08be4442a75434d7a86a6c00757413897a13c6d613289dcfe119d36789e55ca42e0b3ba70122c257ae927c636a6b743b40772c73e04a788817a650f21bd6d250ca22479a5818968c917c38cc113fb7e398afeccb595f71571bec5080bfd82c0d3fdccf1eb0866396946aabaee5f8b01a473fc459a4ffc63b1e5907ad70322678e65be181c8ea37dfe8aac125478e4a8ffa4bab6a9f43e258251e86b26d58ce2adcb626718f08d7dbde52d270794626f17fb5763d4e70d79a1b983d0760338be998fb750d913dc59a17717f715408d5bcfcaa29f7818d5e8f22a11f453a79a06a4b7498d5a42c20c00f4bfad8d02e8d6ff03200d3fd1ed3d283a91ca41b2035b44289a00db2335fdbf997bce43fe48168ed1aec14651f98ac65c325d8a1422b8e8a0d39367799927fae1a4996dc07636c630843122d19c8e037bd68ef78eca76e1734df9ccff27f4c8770faa5e738e431f53cc330e70ca5c7a1dd68770942e404ed71e5ca3f031a7391ac4b37df600c27f5e38f1223ebb34c9d912997eb83a79f3d4187fd985f09de66ba7331f7f4f6b2065bc4d3d56ed3fd9b355b411f241ddc2716c1be32a8dc4f92e89f39287a1bdc6321622069cfa61a189e5d9e860deec935a8528254bf8814ee61c0fcaee85a47a33c5de708d468f3f18f45e62120df777c78a353e06ce76b7a7b7b4ebd3fa53e9888e2d6c39079f57904c89392457feca44f4d39d5d69c1420bba3dfae5b55471955e2c004767172ba994a8806773cda28d827e659d0a091f5b12702776503862e5b3256bdbdd74dec053f23968414c35577c33fdec0997d37169387063b659f9abc0f1f35322b834e19600dceee22fce0397f6a851bd44e320dddedfb1ccc6e28b45808e2dcc2fb9d6513c52d3c043a33219a8034f64361df09f483f35fcef81659c5783810e71184b7ac9f08da45b0d45df61cfc7beb6579c4017c70c707b68c13d21b1db3fff83bf3694f1144875bb9324022b6dd664a84c43d3387462825f909f207821aea967df61f412ed561309384ce16c130a", 0x569}], 0x3, 0x0, 0x0, 0xff0110b0}}], 0x1, 0x0) 1.728899021s ago: executing program 2 (id=212): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7ffffffd, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000002d40)={0xcb, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1.646396033s ago: executing program 2 (id=214): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, 0x0) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 1.645706407s ago: executing program 3 (id=215): eventfd(0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000004c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.556270992s ago: executing program 3 (id=216): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2db, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000380)={0xffffffffffffc951, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001cc0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 1.555888226s ago: executing program 2 (id=217): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r1 = io_uring_setup(0x4d63, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) getpid() openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0x88, 0x4, 0x370, 0xffffffff, 0x1b8, 0xd0, 0x1b8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'pim6reg0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@private1, @remote, [], [], 'veth0_vlan\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r9, 0x3, r7, 0x5}) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="92001fdb", @ANYRES16=r2, @ANYBLOB="270e00000000fcffffff04070200"], 0x14}, 0x1, 0x40030000000000}, 0x0) 1.395994801s ago: executing program 1 (id=218): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2db, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f00000002c0)) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000380)={0xffffffffffffc951, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 1.076034741s ago: executing program 0 (id=219): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_CAPBSET_DROP(0x1c, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x9) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040)=0x10010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8040080) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x80) io_setup(0x20, &(0x7f0000001140)) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004d2000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0xa, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 515.814353ms ago: executing program 1 (id=220): io_setup(0x8, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) clock_gettime(0x0, &(0x7f0000000040)={0x0}) io_getevents(0x0, 0x5, 0x0, 0x0, &(0x7f0000000080)={r0, 0x0}) getpid() syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x20000000000002d7, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe80}, 0x90) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x20480, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 379.877344ms ago: executing program 3 (id=221): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fchdir(r0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x1000, 0x10, &(0x7f0000000240)) r1 = syz_io_uring_setup(0x524d, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0xffffffff, 0x2f3}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b2, &(0x7f0000000140)={0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 262.156654ms ago: executing program 3 (id=222): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001080)={0x980912, 0x80ff, '\x00', @string=0x0}}) 260.926326ms ago: executing program 2 (id=223): socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'streebog512-generic\x00'}}}, 0xe0}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x266c, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) 260.723091ms ago: executing program 3 (id=224): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@getsa={0x44, 0x12, 0x0, 0x0, 0x0, {@in=@local}, [@replay_esn_val={0x1c}]}, 0x44}}, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc0c0583b, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="6ea2a9e85c9e10bd"}}) 260.350496ms ago: executing program 2 (id=225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) fchdir(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, 0x0, &(0x7f0000000140)) 164.994336ms ago: executing program 3 (id=226): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 164.767015ms ago: executing program 2 (id=227): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 0 (id=228): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): [ 45.584270][ T39] audit: type=1400 audit(1722596909.749:82): avc: denied { siginh } for pid=5244 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.943045][ T39] audit: type=1400 audit(1722596911.129:83): avc: denied { read } for pid=4805 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 46.952245][ T39] audit: type=1400 audit(1722596911.129:84): avc: denied { append } for pid=4805 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.962004][ T39] audit: type=1400 audit(1722596911.129:85): avc: denied { open } for pid=4805 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.971568][ T39] audit: type=1400 audit(1722596911.129:86): avc: denied { getattr } for pid=4805 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:54714' (ED25519) to the list of known hosts. [ 48.222238][ T39] audit: type=1400 audit(1722596912.409:87): avc: denied { name_bind } for pid=5308 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.835568][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 50.835583][ T39] audit: type=1400 audit(1722596915.029:90): avc: denied { mounton } for pid=5311 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.841113][ T5311] cgroup: Unknown subsys name 'net' [ 50.846679][ T39] audit: type=1400 audit(1722596915.029:91): avc: denied { mount } for pid=5311 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.862019][ T39] audit: type=1400 audit(1722596915.049:92): avc: denied { unmount } for pid=5311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.002741][ T5311] cgroup: Unknown subsys name 'rlimit' [ 51.130417][ T39] audit: type=1400 audit(1722596915.319:93): avc: denied { setattr } for pid=5311 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.138700][ T39] audit: type=1400 audit(1722596915.319:94): avc: denied { create } for pid=5311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.147561][ T39] audit: type=1400 audit(1722596915.319:95): avc: denied { write } for pid=5311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.156560][ T39] audit: type=1400 audit(1722596915.319:96): avc: denied { read } for pid=5311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.165457][ T39] audit: type=1400 audit(1722596915.329:97): avc: denied { mounton } for pid=5311 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.175576][ T39] audit: type=1400 audit(1722596915.329:98): avc: denied { mount } for pid=5311 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.184997][ T39] audit: type=1400 audit(1722596915.339:99): avc: denied { read } for pid=5043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.209855][ T5320] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 52.317992][ T5311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.443793][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 56.443809][ T39] audit: type=1400 audit(1722596920.629:106): avc: denied { mounton } for pid=5326 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 56.456293][ T39] audit: type=1400 audit(1722596920.639:107): avc: denied { mount } for pid=5326 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 56.466123][ T39] audit: type=1400 audit(1722596920.639:108): avc: denied { create } for pid=5326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.474067][ T39] audit: type=1400 audit(1722596920.639:109): avc: denied { read write } for pid=5326 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.489230][ T39] audit: type=1400 audit(1722596920.639:110): avc: denied { open } for pid=5326 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.498552][ T5331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.499583][ T39] audit: type=1400 audit(1722596920.649:111): avc: denied { ioctl } for pid=5326 comm="syz-executor" path="socket:[1478]" dev="sockfs" ino=1478 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.503283][ T5331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.512086][ T5333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.512631][ T5333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.513349][ T5333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.517234][ T5331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.520278][ T5333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.522731][ T5331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.524889][ T5333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.525189][ T5339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.526383][ T5339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.526859][ T5339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.528851][ T5339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.529457][ T5342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.530107][ T5342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.530493][ T5342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.531617][ T5333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.541017][ T39] audit: type=1400 audit(1722596920.729:112): avc: denied { read } for pid=5336 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.544619][ T5333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.545206][ T5335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.547016][ T39] audit: type=1400 audit(1722596920.729:113): avc: denied { open } for pid=5336 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.549890][ T5333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.553221][ T39] audit: type=1400 audit(1722596920.729:114): avc: denied { mounton } for pid=5336 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.555148][ T5333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.565582][ T5331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.600918][ T5331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.604185][ T5331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.912299][ T39] audit: type=1400 audit(1722596921.099:115): avc: denied { module_request } for pid=5326 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.953734][ T5326] chnl_net:caif_netlink_parms(): no params data found [ 56.967795][ T5327] chnl_net:caif_netlink_parms(): no params data found [ 57.002676][ T5336] chnl_net:caif_netlink_parms(): no params data found [ 57.239929][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.243973][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.247522][ T5327] bridge_slave_0: entered allmulticast mode [ 57.251789][ T5327] bridge_slave_0: entered promiscuous mode [ 57.263409][ T5326] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.267252][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.270639][ T5326] bridge_slave_0: entered allmulticast mode [ 57.274117][ T5326] bridge_slave_0: entered promiscuous mode [ 57.277901][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 57.298526][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.301454][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.304000][ T5327] bridge_slave_1: entered allmulticast mode [ 57.307264][ T5327] bridge_slave_1: entered promiscuous mode [ 57.354581][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.357209][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.359666][ T5326] bridge_slave_1: entered allmulticast mode [ 57.363859][ T5326] bridge_slave_1: entered promiscuous mode [ 57.491523][ T5326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.502077][ T5327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.509038][ T5327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.512869][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.515727][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.519037][ T5336] bridge_slave_0: entered allmulticast mode [ 57.521734][ T5336] bridge_slave_0: entered promiscuous mode [ 57.525930][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.528799][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.531757][ T5336] bridge_slave_1: entered allmulticast mode [ 57.535648][ T5336] bridge_slave_1: entered promiscuous mode [ 57.541668][ T5326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.698134][ T5327] team0: Port device team_slave_0 added [ 57.702981][ T5327] team0: Port device team_slave_1 added [ 57.708148][ T5336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.714355][ T5326] team0: Port device team_slave_0 added [ 57.763019][ T5336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.769406][ T5326] team0: Port device team_slave_1 added [ 57.812096][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.815866][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.818309][ T5337] bridge_slave_0: entered allmulticast mode [ 57.821184][ T5337] bridge_slave_0: entered promiscuous mode [ 57.891924][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.896642][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.899425][ T5337] bridge_slave_1: entered allmulticast mode [ 57.902696][ T5337] bridge_slave_1: entered promiscuous mode [ 57.906549][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.909310][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.919573][ T5327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.954876][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.957348][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.967156][ T5326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.004769][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.007766][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.018419][ T5327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.026401][ T5336] team0: Port device team_slave_0 added [ 58.029569][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.032554][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.043671][ T5326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.057361][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.069191][ T5336] team0: Port device team_slave_1 added [ 58.120506][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.185585][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.188522][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.199690][ T5336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.235174][ T5337] team0: Port device team_slave_0 added [ 58.260178][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.263142][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.273337][ T5336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.302409][ T5337] team0: Port device team_slave_1 added [ 58.365325][ T5326] hsr_slave_0: entered promiscuous mode [ 58.369108][ T5326] hsr_slave_1: entered promiscuous mode [ 58.378306][ T5327] hsr_slave_0: entered promiscuous mode [ 58.382519][ T5327] hsr_slave_1: entered promiscuous mode [ 58.386177][ T5327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.389809][ T5327] Cannot create hsr debugfs directory [ 58.424137][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.427006][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.437457][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.443072][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.445803][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.455449][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.573896][ T5336] hsr_slave_0: entered promiscuous mode [ 58.580596][ T5336] hsr_slave_1: entered promiscuous mode [ 58.583096][ T5336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.585399][ T5340] Bluetooth: hci1: command tx timeout [ 58.585440][ T5331] Bluetooth: hci2: command tx timeout [ 58.586133][ T5336] Cannot create hsr debugfs directory [ 58.664551][ T5340] Bluetooth: hci3: command tx timeout [ 58.674732][ T5340] Bluetooth: hci0: command tx timeout [ 58.700335][ T5337] hsr_slave_0: entered promiscuous mode [ 58.703560][ T5337] hsr_slave_1: entered promiscuous mode [ 58.706742][ T5337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.709998][ T5337] Cannot create hsr debugfs directory [ 59.118592][ T5327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.126237][ T5327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.132314][ T5327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.138971][ T5327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.213820][ T5326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.226030][ T5326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.234501][ T5326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.241790][ T5326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.304986][ T5336] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.317511][ T5336] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.324279][ T5336] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.331918][ T5336] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.400542][ T5337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.419963][ T5337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.425782][ T5337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.431604][ T5337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.449467][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.506279][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.534823][ T2787] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.538011][ T2787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.562086][ T5326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.587280][ T2787] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.590352][ T2787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.626736][ T5326] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.640839][ T5336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.654314][ T5364] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.657693][ T5364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.683961][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.686831][ T5328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.702963][ T5336] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.726552][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.729374][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.749354][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.752437][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.766263][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.805530][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.828082][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.831406][ T5328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.839613][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.842719][ T5328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.909316][ T5327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.946214][ T5326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.979293][ T5327] veth0_vlan: entered promiscuous mode [ 59.997423][ T5327] veth1_vlan: entered promiscuous mode [ 60.013038][ T5326] veth0_vlan: entered promiscuous mode [ 60.026536][ T5326] veth1_vlan: entered promiscuous mode [ 60.046484][ T5336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.061292][ T5327] veth0_macvtap: entered promiscuous mode [ 60.070845][ T5327] veth1_macvtap: entered promiscuous mode [ 60.090661][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.099570][ T5326] veth0_macvtap: entered promiscuous mode [ 60.113692][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.122947][ T5326] veth1_macvtap: entered promiscuous mode [ 60.141357][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.147405][ T5327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.151658][ T5327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.158419][ T5327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.161431][ T5327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.176774][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.181229][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.186854][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.224542][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.229199][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.234970][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.241400][ T5326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.245263][ T5326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.248962][ T5326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.252739][ T5326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.303073][ T5337] veth0_vlan: entered promiscuous mode [ 60.314030][ T5336] veth0_vlan: entered promiscuous mode [ 60.329920][ T5336] veth1_vlan: entered promiscuous mode [ 60.345196][ T5337] veth1_vlan: entered promiscuous mode [ 60.366736][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.370423][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.397119][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.400385][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.422251][ T5336] veth0_macvtap: entered promiscuous mode [ 60.444521][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.446800][ T5336] veth1_macvtap: entered promiscuous mode [ 60.447977][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.459327][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.462644][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.471554][ T5337] veth0_macvtap: entered promiscuous mode [ 60.481158][ T5337] veth1_macvtap: entered promiscuous mode [ 60.492042][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.496760][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.500554][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.508736][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.514093][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.524268][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.530335][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.534977][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.538670][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.544007][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.551474][ T5336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.555764][ T5336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.559559][ T5336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.563299][ T5336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.576234][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.580370][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.584151][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.588116][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.591280][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.594295][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.601184][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.608516][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.612410][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.617681][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.623195][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.629791][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.634242][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.642243][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.665593][ T5340] Bluetooth: hci1: command tx timeout [ 60.667864][ T5340] Bluetooth: hci2: command tx timeout [ 60.668401][ T5337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.674128][ T5337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.678306][ T5337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.682131][ T5337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.745518][ T5340] Bluetooth: hci0: command tx timeout [ 60.745791][ T5331] Bluetooth: hci3: command tx timeout [ 60.758555][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.762070][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.784227][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.790857][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.824016][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.832688][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.843858][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.848153][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.348527][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 61.351929][ T5444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 61.446964][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 61.446979][ T39] audit: type=1400 audit(1722596925.639:148): avc: denied { sqpoll } for pid=5450 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.463915][ T39] audit: type=1400 audit(1722596925.639:149): avc: denied { create } for pid=5450 comm="syz.1.24" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.532786][ T5458] sctp: [Deprecated]: syz.2.27 (pid 5458) Use of int in maxseg socket option. [ 61.532786][ T5458] Use struct sctp_assoc_value instead [ 61.566328][ T5462] sctp: [Deprecated]: syz.1.26 (pid 5462) Use of int in maxseg socket option. [ 61.566328][ T5462] Use struct sctp_assoc_value instead [ 61.697161][ T39] audit: type=1400 audit(1722596925.889:150): avc: denied { read } for pid=5470 comm="syz.0.33" dev="nsfs" ino=4026532929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.697628][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 61.718313][ T39] audit: type=1400 audit(1722596925.889:151): avc: denied { open } for pid=5470 comm="syz.0.33" path="net:[4026532929]" dev="nsfs" ino=4026532929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.763265][ T39] audit: type=1400 audit(1722596925.949:152): avc: denied { execute } for pid=5475 comm="syz.2.35" name="file1" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.763405][ T5476] process 'syz.2.35' launched './file1' with NULL argv: empty string added [ 61.777993][ T39] audit: type=1400 audit(1722596925.969:153): avc: denied { execute_no_trans } for pid=5475 comm="syz.2.35" path="/16/file1" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.881956][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 62.744553][ T5331] Bluetooth: hci1: command tx timeout [ 62.746185][ T5340] Bluetooth: hci2: command tx timeout [ 62.825982][ T5340] Bluetooth: hci0: command tx timeout [ 62.826919][ T5331] Bluetooth: hci3: command tx timeout [ 63.154095][ T39] audit: type=1400 audit(1722596927.339:154): avc: denied { read } for pid=5536 comm="syz.2.58" name="cec0" dev="devtmpfs" ino=894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.164747][ T39] audit: type=1400 audit(1722596927.339:155): avc: denied { open } for pid=5536 comm="syz.2.58" path="/dev/cec0" dev="devtmpfs" ino=894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.174708][ T39] audit: type=1400 audit(1722596927.349:156): avc: denied { ioctl } for pid=5536 comm="syz.2.58" path="/dev/cec0" dev="devtmpfs" ino=894 ioctlcmd=0x6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.345051][ T39] audit: type=1400 audit(1722596927.539:157): avc: denied { mounton } for pid=5555 comm="syz.2.65" path="/27/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.426328][ T5601] netlink: 76 bytes leftover after parsing attributes in process `syz.1.80'. [ 64.665804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.824664][ T5331] Bluetooth: hci2: command tx timeout [ 64.824855][ T5340] Bluetooth: hci1: command tx timeout [ 64.905609][ T5340] Bluetooth: hci3: command tx timeout [ 64.905875][ T5331] Bluetooth: hci0: command tx timeout [ 65.284842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.311249][ T5620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.85'. [ 65.414883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.443876][ T5629] pimreg: entered allmulticast mode [ 65.451302][ T5629] pimreg: left allmulticast mode [ 65.478552][ T5627] Zero length message leads to an empty skb [ 65.545491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 65.636276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.749319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 65.753489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.829027][ T5656] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 65.855756][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.858499][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.014531][ T5364] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.216326][ T5364] usb 8-1: Using ep0 maxpacket: 32 [ 66.220907][ T5364] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 66.224176][ T5364] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 66.228191][ T5364] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.234943][ T5364] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.238884][ T5364] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.242208][ T5364] usb 8-1: Product: syz [ 66.244016][ T5364] usb 8-1: Manufacturer: syz [ 66.246201][ T5364] usb 8-1: SerialNumber: syz [ 66.368252][ T5660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 66.462534][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.468473][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.480590][ T5655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.100'. [ 66.572897][ T5364] usb 8-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 66.576919][ T5364] usb 8-1: found format II with max.bitrate = 0, frame size=0 [ 66.580347][ T5364] usb 8-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 66.598100][ T5364] usb 8-1: found format II with max.bitrate = 0, frame size=0 [ 66.639905][ T5364] usb 8-1: USB disconnect, device number 2 [ 66.784753][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.906267][ T5668] udevd[5668]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.942140][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 66.942153][ T39] audit: type=1400 audit(1722596931.129:195): avc: denied { write } for pid=5674 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.987943][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 66.991771][ T39] audit: type=1400 audit(1722596931.179:196): avc: denied { connect } for pid=5678 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.996389][ T30] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 67.000133][ T39] audit: type=1400 audit(1722596931.189:197): avc: denied { write } for pid=5678 comm="syz.0.107" path="socket:[10294]" dev="sockfs" ino=10294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.003864][ T30] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 67.020939][ T30] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.029929][ T30] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.033760][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.037600][ T30] usb 7-1: Product: syz [ 67.039484][ T30] usb 7-1: Manufacturer: syz [ 67.041561][ T30] usb 7-1: SerialNumber: syz [ 67.062964][ T39] audit: type=1400 audit(1722596931.249:198): avc: denied { create } for pid=5678 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.072634][ T39] audit: type=1400 audit(1722596931.249:199): avc: denied { ioctl } for pid=5678 comm="syz.0.107" path="socket:[7909]" dev="sockfs" ino=7909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.264206][ T5664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.268460][ T5664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.285813][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 67.358996][ T5340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.363771][ T5340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.369732][ T5340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.369950][ T5664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 67.373807][ T5340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.384681][ T5340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.389924][ T5340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.392070][ T39] audit: type=1400 audit(1722596931.579:200): avc: denied { relabelfrom } for pid=5684 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 67.401795][ T39] audit: type=1400 audit(1722596931.579:201): avc: denied { relabelto } for pid=5684 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 67.406580][ T30] usb 7-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 67.413497][ T39] audit: type=1400 audit(1722596931.579:202): avc: denied { ioctl } for pid=5684 comm="syz.3.109" path="socket:[9237]" dev="sockfs" ino=9237 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 67.414131][ T30] usb 7-1: found format II with max.bitrate = 0, frame size=0 [ 67.427726][ T30] usb 7-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 67.428192][ T39] audit: type=1400 audit(1722596931.619:203): avc: denied { mounton } for pid=5682 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 67.431292][ T30] usb 7-1: found format II with max.bitrate = 0, frame size=0 [ 67.448031][ T5685] syzkaller0: entered promiscuous mode [ 67.450177][ T5685] syzkaller0: entered allmulticast mode [ 67.476543][ T30] usb 7-1: USB disconnect, device number 2 [ 67.747457][ T5411] udevd[5411]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.797514][ T5677] syz.1.106 (5677): drop_caches: 1 [ 67.832323][ T5677] syz.1.106 (5677): drop_caches: 1 [ 68.164529][ T5399] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.264085][ T5691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 68.288454][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.312493][ T39] audit: type=1400 audit(1722596932.499:204): avc: denied { ioctl } for pid=5692 comm="syz.2.112" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9260 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.313359][ T5693] syz.2.112 uses obsolete (PF_INET,SOCK_PACKET) [ 68.364539][ T5399] usb 6-1: Using ep0 maxpacket: 16 [ 68.366687][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.376223][ T5399] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 68.383165][ T5399] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 68.388205][ T5399] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 68.391800][ T5399] usb 6-1: Manufacturer: syz [ 68.393895][ T5399] usb 6-1: SerialNumber: syz [ 68.402911][ T5399] usb 6-1: config 0 descriptor?? [ 68.408980][ T5399] em28xx 6-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 68.414643][ T5399] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 68.443558][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.460879][ T5682] chnl_net:caif_netlink_parms(): no params data found [ 68.534128][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.568453][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.571225][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.573954][ T5682] bridge_slave_0: entered allmulticast mode [ 68.577486][ T5682] bridge_slave_0: entered promiscuous mode [ 68.582257][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.586571][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.589964][ T5682] bridge_slave_1: entered allmulticast mode [ 68.593396][ T5682] bridge_slave_1: entered promiscuous mode [ 68.613091][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.617312][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.656314][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.667410][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.722891][ T5682] team0: Port device team_slave_0 added [ 68.733785][ T5682] team0: Port device team_slave_1 added [ 68.796694][ T1102] bridge_slave_1: left allmulticast mode [ 68.799356][ T1102] bridge_slave_1: left promiscuous mode [ 68.802912][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.808276][ T5399] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 68.813359][ T1102] bridge_slave_0: left allmulticast mode [ 68.816032][ T1102] bridge_slave_0: left promiscuous mode [ 68.818830][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.887643][ T5399] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 68.893059][ T5399] em28xx 6-1:0.0: board has no eeprom [ 68.974577][ T5399] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 68.978105][ T5399] em28xx 6-1:0.0: dvb set to bulk mode. [ 68.980842][ T5364] em28xx 6-1:0.0: Binding DVB extension [ 68.995856][ T5399] usb 6-1: USB disconnect, device number 2 [ 69.001135][ T5399] em28xx 6-1:0.0: Disconnecting em28xx [ 69.027704][ T5364] em28xx 6-1:0.0: Registering input extension [ 69.031190][ T5399] em28xx 6-1:0.0: Closing input extension [ 69.048675][ T5399] em28xx 6-1:0.0: Freeing device [ 69.121844][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.132372][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.141499][ T1102] bond0 (unregistering): Released all slaves [ 69.152857][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.156808][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.167865][ T5682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.181989][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.184530][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.193854][ T5682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.218406][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 69.272771][ T5682] hsr_slave_0: entered promiscuous mode [ 69.279639][ T5682] hsr_slave_1: entered promiscuous mode [ 69.283613][ T5682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.286950][ T5682] Cannot create hsr debugfs directory [ 69.308661][ T5713] netlink: 80 bytes leftover after parsing attributes in process `syz.1.117'. [ 69.394487][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 69.399613][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.403880][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.408486][ T8] usb 8-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 69.412032][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.417701][ T8] usb 8-1: config 0 descriptor?? [ 69.431634][ T5714] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 69.464853][ T5331] Bluetooth: hci1: command tx timeout [ 69.525058][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.528477][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.581239][ T1102] hsr_slave_0: left promiscuous mode [ 69.584723][ T1102] hsr_slave_1: left promiscuous mode [ 69.589592][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.592390][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.596829][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.600160][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.637965][ T1102] veth1_macvtap: left promiscuous mode [ 69.641479][ T1102] veth0_macvtap: left promiscuous mode [ 69.643962][ T1102] veth1_vlan: left promiscuous mode [ 69.646582][ T1102] veth0_vlan: left promiscuous mode [ 69.842250][ T8] uclogic 0003:5543:0005.0002: No inputs registered, leaving [ 69.853329][ T8] uclogic 0003:5543:0005.0002: hidraw1: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0 [ 70.031499][ T8] usb 8-1: USB disconnect, device number 3 [ 70.289442][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 70.307573][ T5723] autofs4:pid:5723:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1000000.1), cmd(0xc018937e) [ 70.313271][ T5723] autofs4:pid:5723:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 70.358652][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 70.864673][ T5364] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.914799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.918829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.060820][ T5364] usb 8-1: Using ep0 maxpacket: 16 [ 71.067258][ T5364] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 71.072982][ T5364] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 71.078556][ T5364] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 71.082284][ T5364] usb 8-1: Manufacturer: syz [ 71.084139][ T5364] usb 8-1: SerialNumber: syz [ 71.088453][ T5364] usb 8-1: config 0 descriptor?? [ 71.094090][ T5364] em28xx 8-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 71.098348][ T5364] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 71.146603][ T5739] caif0: entered promiscuous mode [ 71.148776][ T5739] caif0: entered allmulticast mode [ 71.312543][ T5736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.316670][ T5736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.492297][ T5682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.510425][ T5682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.516048][ T5682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.522791][ T5682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.546068][ T5331] Bluetooth: hci1: command tx timeout [ 71.555629][ T5364] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 71.574966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.628806][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.631746][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.656603][ T5364] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 71.659379][ T5364] em28xx 8-1:0.0: board has no eeprom [ 71.752641][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.756192][ T5364] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 71.759343][ T5364] em28xx 8-1:0.0: dvb set to bulk mode. [ 71.764446][ T2787] em28xx 8-1:0.0: Binding DVB extension [ 71.774779][ T5682] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.784996][ T5364] usb 8-1: USB disconnect, device number 4 [ 71.785269][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.791017][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.793347][ T5364] em28xx 8-1:0.0: Disconnecting em28xx [ 71.819938][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.823213][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.828928][ T2787] em28xx 8-1:0.0: Registering input extension [ 71.831806][ T5364] em28xx 8-1:0.0: Closing input extension [ 71.843214][ T5364] em28xx 8-1:0.0: Freeing device [ 71.998947][ T5682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.070898][ T5682] veth0_vlan: entered promiscuous mode [ 72.084342][ T5682] veth1_vlan: entered promiscuous mode [ 72.109735][ T5682] veth0_macvtap: entered promiscuous mode [ 72.118217][ T5682] veth1_macvtap: entered promiscuous mode [ 72.132367][ T5682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.137304][ T5682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.141435][ T5682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.147582][ T5682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.151825][ T5682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.156995][ T5682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.162838][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.172863][ T5682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.177497][ T5682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.181608][ T5682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.186856][ T5682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.190999][ T5682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.196748][ T5682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.203496][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.215595][ T5682] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.219947][ T5682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.222989][ T5682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.226763][ T5682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.290195][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.293807][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.310012][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.313738][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.322903][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 72.322916][ T39] audit: type=1400 audit(1722596936.509:228): avc: denied { mounton } for pid=5682 comm="syz-executor" path="/syzkaller.59AFcx/syz-tmp" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.335770][ T39] audit: type=1400 audit(1722596936.509:229): avc: denied { mount } for pid=5682 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.419608][ T39] audit: type=1400 audit(1722596936.609:230): avc: denied { read write } for pid=5775 comm="syz.0.130" name="uinput" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.430370][ T39] audit: type=1400 audit(1722596936.609:231): avc: denied { open } for pid=5775 comm="syz.0.130" path="/dev/uinput" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.160270][ T39] audit: type=1400 audit(1722596937.349:232): avc: denied { shutdown } for pid=5781 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 73.170109][ T5788] caif0: entered promiscuous mode [ 73.172066][ T5788] caif0: entered allmulticast mode [ 73.203698][ T39] audit: type=1400 audit(1722596937.349:233): avc: denied { read } for pid=5781 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 73.569512][ T39] audit: type=1400 audit(1722596937.759:234): avc: denied { create } for pid=5792 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.597285][ T5793] warning: `syz.0.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.624634][ T5331] Bluetooth: hci1: command tx timeout [ 74.039333][ T5811] caif0: entered promiscuous mode [ 74.041166][ T5811] caif0: entered allmulticast mode [ 74.068571][ T39] audit: type=1400 audit(1722596938.259:235): avc: denied { read append } for pid=5812 comm="syz.3.141" name="fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 74.079723][ T39] audit: type=1400 audit(1722596938.259:236): avc: denied { open } for pid=5812 comm="syz.3.141" path="/dev/fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 74.346374][ T5328] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 74.538111][ T5328] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.541804][ T5328] usb 8-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 74.638659][ T5328] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.642497][ T5328] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.650322][ T5328] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.653756][ T5328] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.656579][ T5328] usb 8-1: Product: syz [ 74.658971][ T5328] usb 8-1: Manufacturer: syz [ 74.663938][ T5328] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 74.901313][ T831] usb 8-1: USB disconnect, device number 5 [ 75.124564][ T5364] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.305012][ T5364] usb 6-1: Using ep0 maxpacket: 8 [ 75.309646][ T5364] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 75.313233][ T5364] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.317018][ T5364] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.320647][ T5364] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.323962][ T5364] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.328939][ T5364] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.332602][ T5364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.547334][ T5364] usb 6-1: usb_control_msg returned -32 [ 75.549764][ T5364] usbtmc 6-1:16.0: can't read capabilities [ 75.649870][ T5830] autofs4:pid:5830:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1000000.1), cmd(0xc018937e) [ 75.659390][ T5830] autofs4:pid:5830:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 75.704727][ T5331] Bluetooth: hci1: command tx timeout [ 75.800783][ T39] audit: type=1400 audit(1722596939.989:237): avc: denied { create } for pid=5833 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.857361][ T5364] usb 6-1: USB disconnect, device number 3 [ 78.047674][ T5872] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.845036][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 79.891364][ T5909] caif0: entered promiscuous mode [ 79.893740][ T5909] caif0: entered allmulticast mode [ 80.034899][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 80.039749][ T58] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 80.043831][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.048738][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.055277][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.060356][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.067474][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.072017][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.294606][ T58] usb 7-1: usb_control_msg returned -32 [ 80.299632][ T58] usbtmc 7-1:16.0: can't read capabilities [ 81.869788][ T56] cfg80211: failed to load regulatory.db [ 82.584291][ T5609] usb 7-1: USB disconnect, device number 3 [ 82.637129][ T5972] netlink: 64 bytes leftover after parsing attributes in process `syz.1.193'. [ 83.490827][ T5995] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.889015][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 83.889030][ T39] audit: type=1400 audit(1722596948.069:240): avc: denied { create } for pid=5999 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.928024][ T39] audit: type=1400 audit(1722596948.119:241): avc: denied { setopt } for pid=5993 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.942265][ T39] audit: type=1400 audit(1722596948.129:242): avc: denied { unmount } for pid=5336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.558511][ T39] audit: type=1400 audit(1722596948.749:243): avc: denied { setopt } for pid=6022 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.643849][ T39] audit: type=1400 audit(1722596950.829:244): avc: denied { create } for pid=6062 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 86.688605][ T39] audit: type=1400 audit(1722596950.879:245): avc: denied { mounton } for pid=6064 comm="syz.3.224" path="/proc/131/task" dev="proc" ino=11160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 86.745969][ T5760] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.962451][ T5760] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.968416][ T5760] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 86.972369][ T5760] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.976361][ T5760] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.983766][ T5760] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.992692][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.996327][ T5760] usb 6-1: Product: syz [ 86.998145][ T5760] usb 6-1: Manufacturer: syz [ 86.999130][ T6071] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 87.003451][ T5760] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 87.005294][ T6071] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 87.005310][ T6071] CPU: 3 UID: 0 PID: 6071 Comm: syz.2.227 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 87.005329][ T6071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.005339][ T6071] RIP: 0010:__lock_acquire+0xe1/0x3cb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 87.024644][ T6071] Code: d0 7c 08 84 d2 0f 85 78 14 00 00 8b 0d a0 c0 aa 0e 85 c9 0f 84 dd 0d 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 e4 2c 00 00 49 8b 04 24 48 3d a0 01 26 93 0f 84 [ 87.032353][ T6071] RSP: 0018:ffffc9000328f398 EFLAGS: 00010006 [ 87.034770][ T6071] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 87.037991][ T6071] RDX: 0000000000000003 RSI: 1ffff92000651e85 RDI: 0000000000000018 [ 87.042563][ T6071] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 87.044474][ T5311] syz-executor (5311) used greatest stack depth: 21200 bytes left [ 87.045819][ T6071] R10: ffffffff9012b4df R11: 0000000000000000 R12: 0000000000000018 [ 87.052777][ T6071] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888022fe4880 [ 87.056106][ T6071] FS: 0000000000000000(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 87.059950][ T6071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.062851][ T6071] CR2: 00005555945f5808 CR3: 000000002081e000 CR4: 0000000000350ef0 [ 87.066323][ T6071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.069822][ T6071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.073317][ T6071] Call Trace: [ 87.074782][ T6071] [ 87.076050][ T6071] ? show_regs+0x8c/0xa0 [ 87.077557][ T6071] ? die_addr+0x4f/0xd0 [ 87.078972][ T6071] ? exc_general_protection+0x155/0x230 [ 87.081118][ T6071] ? asm_exc_general_protection+0x26/0x30 [ 87.083411][ T6071] ? __lock_acquire+0xe1/0x3cb0 [ 87.085453][ T6071] ? __pfx___lock_acquire+0x10/0x10 [ 87.087439][ T6071] ? __pfx___lock_acquire+0x10/0x10 [ 87.089534][ T6071] ? __pfx___lock_acquire+0x10/0x10 [ 87.091772][ T6071] lock_acquire+0x1b1/0x560 [ 87.093730][ T6071] ? __pte_offset_map_lock+0xf1/0x300 [ 87.096060][ T6071] ? __pfx_lock_acquire+0x10/0x10 [ 87.098109][ T6071] ? find_held_lock+0x2d/0x110 [ 87.100084][ T6071] ? rcu_is_watching+0x12/0xc0 [ 87.102159][ T6071] _raw_spin_lock+0x2e/0x40 [ 87.104107][ T6071] ? __pte_offset_map_lock+0xf1/0x300 [ 87.106411][ T6071] __pte_offset_map_lock+0xf1/0x300 [ 87.108648][ T6071] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 87.110823][ T6071] ? __pfx___might_resched+0x10/0x10 [ 87.112793][ T6071] ? zap_huge_pmd+0x244/0xea0 [ 87.114514][ T6071] unmap_page_range+0x7e5/0x3c10 [ 87.116323][ T6071] ? __pfx_unmap_page_range+0x10/0x10 [ 87.118340][ T6071] ? uprobe_munmap+0x20/0x5d0 [ 87.120364][ T6071] unmap_single_vma+0x194/0x2b0 [ 87.122371][ T6071] unmap_vmas+0x22f/0x490 [ 87.123961][ T6071] ? __pfx_unmap_vmas+0x10/0x10 [ 87.125993][ T6071] ? __pfx_lock_release+0x10/0x10 [ 87.127926][ T6071] ? lru_add_drain_cpu+0x454/0x860 [ 87.130161][ T6071] exit_mmap+0x1b8/0xb20 [ 87.131730][ T6071] ? __pfx_exit_mmap+0x10/0x10 [ 87.133754][ T6071] __mmput+0x12a/0x480 [ 87.135554][ T6071] mmput+0x62/0x70 [ 87.137226][ T6071] do_exit+0x9bf/0x2bb0 [ 87.139106][ T6071] ? get_signal+0x8f2/0x2770 [ 87.141171][ T6071] ? __pfx_do_exit+0x10/0x10 [ 87.143223][ T6071] ? do_raw_spin_lock+0x12d/0x2c0 [ 87.145257][ T6071] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.147306][ T6071] do_group_exit+0xd3/0x2a0 [ 87.149135][ T6071] get_signal+0x25fd/0x2770 [ 87.150904][ T6071] ? __pfx_get_signal+0x10/0x10 [ 87.153191][ T6071] ? __pfx_do_futex+0x10/0x10 [ 87.154908][ T6071] arch_do_signal_or_restart+0x90/0x7e0 [ 87.156820][ T6071] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.159331][ T6071] syscall_exit_to_user_mode+0x150/0x2a0 [ 87.161595][ T6071] do_syscall_64+0xda/0x250 [ 87.163263][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.165717][ T6071] RIP: 0033:0x7fc3843773b9 [ 87.167397][ T6071] Code: Unable to access opcode bytes at 0x7fc38437738f. [ 87.170114][ T6071] RSP: 002b:00007fc3852170f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.173521][ T6071] RAX: fffffffffffffe00 RBX: 00007fc384505f88 RCX: 00007fc3843773b9 [ 87.176928][ T6071] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc384505f88 [ 87.180260][ T6071] RBP: 00007fc384505f80 R08: 00007fc3852176c0 R09: 00007fc3852176c0 [ 87.183625][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc384505f8c [ 87.186954][ T6071] R13: 000000000000000b R14: 00007ffed5290f30 R15: 00007ffed5291018 [ 87.190236][ T6071] [ 87.191552][ T6071] Modules linked in: [ 87.193201][ T6071] ---[ end trace 0000000000000000 ]--- [ 87.195286][ T6071] RIP: 0010:__lock_acquire+0xe1/0x3cb0 [ 87.197447][ T6071] Code: d0 7c 08 84 d2 0f 85 78 14 00 00 8b 0d a0 c0 aa 0e 85 c9 0f 84 dd 0d 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 e4 2c 00 00 49 8b 04 24 48 3d a0 01 26 93 0f 84 [ 87.205300][ T6071] RSP: 0018:ffffc9000328f398 EFLAGS: 00010006 [ 87.207392][ T6071] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 87.210448][ T6071] RDX: 0000000000000003 RSI: 1ffff92000651e85 RDI: 0000000000000018 [ 87.213352][ T6071] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 87.216453][ T6071] R10: ffffffff9012b4df R11: 0000000000000000 R12: 0000000000000018 [ 87.219412][ T6071] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888022fe4880 [ 87.222642][ T6071] FS: 0000000000000000(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 87.226701][ T6071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.229593][ T6071] CR2: 00005555945f5808 CR3: 000000002081e000 CR4: 0000000000350ef0 [ 87.233019][ T6071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.236405][ T6071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.239733][ T6071] Kernel panic - not syncing: Fatal exception [ 87.242840][ T6071] Kernel Offset: disabled [ 87.244691][ T6071] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:09:11 Registers: info registers vcpu 0 CPU#0 RAX=00000035ea89b4dc RBX=ffff88806b0283c0 RCX=00000000000006e0 RDX=0000000000000035 RSI=ffff88806b0283c0 RDI=0000000000000145 RBP=0000000000000145 RSP=ffffc9000333fa00 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffffffff8b4f5160 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000019 R15=ffffed100d60507d RIP=ffffffff813a4235 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f08398846c0 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc3851f6d58 CR3=0000000022a2c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0838be56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0838be56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0838be56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0838be56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0838be5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0838be5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0838cd5488 00007f0838cd5480 00007f0838cd5478 00007f0838cd5450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f083983d100 00007f0838cd5440 00007f0838cd5458 00007f0838cd54a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0838cd5498 00007f0838cd5490 00007f0838cd5488 00007f0838cd5480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc900034ffef0 RCX=ffffc900034ff524 RDX=ffff888048d30000 RSI=ffffffff813cd339 RDI=ffffc900034ffef0 RBP=0000000000000001 RSP=ffffc900034ff458 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff913036a0 R13=ffffc900034ffef8 R14=ffffffff913036a4 R15=0000000000000001 RIP=ffffffff818a7b88 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555945f5500 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2051acf2d8 CR3=000000002081e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000041004040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6da06170 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003a800000006 00000260000001c8 0000013000000098 0000000000000260 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c69614600646574 7563657845006574 7563657845006465 74746f687370616e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5300796461655200 656b616873646e61 48006c616974696e 4900656c676e616d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff81f63db5 RBX=ffffc9002683f658 RCX=1ffff92004d07ed4 RDX=dffffc0000000000 RSI=ffffffff813cd339 RDI=ffffc9002683fe68 RBP=0000000000000001 RSP=ffffc9002683f5d8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff90b1a0a6 R13=ffffc9002683fe70 R14=ffffffff90b1a0aa R15=0000000000000001 RIP=ffffffff813cecd9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcc2eba5280 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2051acf2d8 CR3=0000000028f02000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcff0000 Opmask01=0000000000000000 Opmask02=00000000fffffdff Opmask03=2040000404420020 Opmask04=00000000ffdfffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056262e1da010 000056262e1d7e70 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056262e1d7df0 000056262e1da010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe1751fd0 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 956fc420b975512b 737325503f0c750a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737222 73451f1f1a181573 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265706f204d4554 5359534255532064 696c61766e69004d 4554535953425553 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c393230302c38 3230302c37323030 2c36323030003731 3d5145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe1752648 006b636f6c622f73 73616c632f2e2e2f 2e2e2f2e2e2f2e2e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756d006469766976 000056262e1daebe 0000000000000051 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056262e1c8c80 000056262e1bcf00 0000000000000031 000000000000302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e61cb753ca062258 000056234c7e466b 00000000000000f1 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 6930382432273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe2765 RDI=ffffffff9519a720 RBP=ffffffff9519a6e0 RSP=ffffc9000328ed58 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=000000000000002d R14=ffffffff84fe2700 R15=0000000000000000 RIP=ffffffff84fe278f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555945f5808 CR3=000000002081e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6da06170 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20519e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000