last executing test programs: 1.710237004s ago: executing program 0 (id=1086): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 1.646898111s ago: executing program 0 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.56191244s ago: executing program 0 (id=1088): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x0) ppoll(&(0x7f0000000200), 0x26, 0x0, 0x0, 0x3) r7 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r7, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000000b80)={0x4, 0x24a4, 0x4, 0x40, 0x8, 0xe, 0x26, "00c5676525603947d0e7c89311388ef2cf98af64", "a475c70d8be84bcd23cfd1dce09b8b74387bf92a"}) 781.028681ms ago: executing program 3 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000010027000000000008000a00a8"], 0x6c}}, 0x0) 652.128236ms ago: executing program 0 (id=1112): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000002d40)=0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0xc048aec8, &(0x7f00000001c0)={0x6}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1ff, 0x4d}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) 651.570365ms ago: executing program 2 (id=1113): r0 = epoll_create1(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x0, 0x4, 0x2, "07000000008000"}, 0x10}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa0028000}) 650.686529ms ago: executing program 2 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x3f, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 64) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') (rerun: 64) 576.246389ms ago: executing program 3 (id=1116): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x300, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200013, 0x0) 575.069162ms ago: executing program 2 (id=1118): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="019b1d35eb66c40f13002f"], 0x34}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000082000040e784b5597b"]) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) lseek(r0, 0x164, 0x0) 574.529808ms ago: executing program 3 (id=1119): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x8d, [0x27e, 0xffff, 0x3, 0x7, 0xc95, 0x9, 0x6, 0x101, 0xa4f, 0x4, 0x0, 0x1, 0x6, 0x7, 0x3, 0x3, 0x4, 0x5, 0x84, 0x9, 0x3, 0x8, 0x0, 0xf69, 0x0, 0xd, 0xfffe, 0x7, 0xd, 0x8, 0xfc00, 0x6, 0x1, 0x40, 0x2795, 0x2, 0x8001, 0x200, 0x6101, 0x7, 0xc, 0x200, 0x6, 0xe66, 0x3, 0xfff, 0x5, 0x1], 0xf}) 574.22606ms ago: executing program 2 (id=1120): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mkdir(&(0x7f0000000100)='./file0\x00', 0xc4) (rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 32) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$sock(r2, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) chdir(&(0x7f0000000140)='./bus\x00') (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0xb, 0x0, &(0x7f0000001740)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 64) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0xd013, 0x10100, 0x40}, &(0x7f0000000000), &(0x7f00000001c0)) (async, rerun: 64) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0xa01) (async, rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x38}}, 0x0) (rerun: 32) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg2\x00'}) (rerun: 64) 573.821532ms ago: executing program 3 (id=1121): syz_emit_ethernet(0x1019, &(0x7f0000004100)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)) (async) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) (async) io_getevents(r3, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0}]) (async) io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0}]) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01012abd700000000025081f0000140008"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) (async) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) 514.37999ms ago: executing program 0 (id=1122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r1 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x85) r2 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000001940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20008801}], 0x1, 0x40800) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0xb, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0x8, 0x6, 0x6}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$getflags(r4, 0x401) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) (async) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000180)) (async) io_setup(0xff, &(0x7f0000000380)=0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r9, &(0x7f00000001c0)="b9566586ee9d243ed4c064", 0xb, 0x5, 0x0, 0x2, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x8, r6, &(0x7f0000000440)="882f2f72ddf3c381f086225330057ef8c21d5beba2aa838295e4628e198105eaf2a47e5140b979d9126bd800151e8fdc9904c6e175a317c9b45184d6c4138ba3aff688a35339c1bd8431a71a1a16adb0e4867527962762bf600ce8bb8bd797f96c93745f7b3bb501ead281674fe1788b1ea85bcfd6a55cd609869ccce3ffb953d7ad2e630b4a2105f914143e988b61e9a12caef661bda7b1b4581ebfe4d28146289c55e55bd1c80268945ad85d056db0a46abdc259c371bee545855521cc71594619857b16231ae85515", 0xca, 0x5, 0x0, 0x1}]) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) (async) io_submit(r7, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0x0, 0x40000000000000}]) 514.02289ms ago: executing program 2 (id=1123): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x980902, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb449, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x1, r2, 0x0, 0x0, 0x0, 0x10120, 0x1}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x1, 0x8, 0x8, @mcast2, @private1, 0x8000, 0x80, 0x4, 0x7f}}) 460.187937ms ago: executing program 1 (id=1124): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400000000000000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x94, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x64, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfffe}, {0xfffd, 0x5}}}]}]}, @TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x4, 0x2, 0x7, {0xfe, 0x0, 0x3ff, 0x5410, 0x9, 0x872d}, {0x2, 0x0, 0x380, 0x0, 0xfff8, 0x6}, 0xfa9a, 0x2, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 455.596513ms ago: executing program 1 (id=1125): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async, rerun: 64) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xffff, 0x2, 0x4}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x21000, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532332c72713d3078303030303030303030303030303030382c72713d3078303030303030303030303030303030332c72713d3078303030303030303030303030303030312c6d6561737572652c646566636f6e746578743d73746166665f756465eb3d5b402c646f6e745f686173682c666f776e65723d00"/167, @ANYRESDEC=r4, @ANYBLOB=',euid=', @ANYRESDEC=r5, @ANYBLOB=',\x00']) 384.248264ms ago: executing program 3 (id=1126): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a1040012000a0014260c600e12100005007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000700)={'virt_wifi0\x00', @random="1274325a5d3c"}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000740)="a5b9bcd755bac1b12e99aa803aff259569059dd42538c32160b61044e59e6b507ffe70a7030121067318fe540faac561547d2c6e3bd619bb6ad09d7e25ae3676a1679e0774493504e8a4ba3850d14fbeeb9894dcde08349fcc6c145f2d07abff78575ddb1f5ecf7a3d13ea55b41d43d0ffe772caf4c83a614565e761a6b3471f8231aa7472d17e6df7794cd6b51960701e4f60c1ed70e0507ad81be5145b608d83caadddbd29f959012427588068171336d7d7f82965cdf0592c26438a50c5dd94c1a95432", 0xc5}, {&(0x7f0000000840)="334d46e9c4210afaa4ddb8b9c9dfb73492da79d9a4dd2c40480f09faafd7d86c5e5e307a3479bcd91b3eadcebfd201c4fde15d140c0edbed280e21e2a969bacf420abae85757b8fe1c2d5898ad79cf4da1928ac92c62481d6b77aaf1605e4355c277682912", 0x65}], 0x2) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80800) sendmsg(r2, &(0x7f00000006c0)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)="0a64bd2da3dac6a320ec21bb1e4b2fcd21b00bef34c6bf8dc3bdcfa38acd402eccfa8bc1e589ca2b9b291cb21ad0395110216f6a2560bca46f0aaf05e057558df48debd17f976d07e42c7e65900da28cae814d3746a61c83a7d5bfc29b870bb4d80be5af4ef66824f83178c72cb40976396f69c2a45405d4638981b8c62f4d13237541559c4339c66e58fd4bcbfe034838f5e9e43dbae6167fa91347a47df5e7c5634be05c8c2a568e0ac68925621394e1548a0778ae6715c8c61303a53bfe49b4a5dc6297675c", 0xc7}, {&(0x7f0000000400)="acbe77bf3ed107fcb053fc8137180a8d7e89018792422b69b4189d4763ee25e6107446781065a0ec6e894fa965de69840ffc466f5681a6a87ce5012965eac1790935ecd2ad39bbe6096ec0455a3395d01fa51fc45fb10858861b02bec85632fb1d6aba04d7c299189e421bc8c905c3a512308648628fc6fcf2af4ef79a17c371acbc622d36d604183411cb21e02dfcf4757760c0ca0297735a962d979eba81c858d7a587c90e7db110c86b57386aa00b2369c28284b8dd342cb64e6c4627d2626121ba9d1f74456550d1c51e560b12c2bc993283112d183449932e66ce", 0xdd}, {&(0x7f0000000280)="b89e4d4d80badc43b4a3a326e9611b067a449189d1c618e958e35ef0d38baa5a328bec00c4043a3b619c6056ca6be61cc220ef2e758c685ba37fe88934a2a549c0238a92984b1b", 0x47}, {&(0x7f0000000500)="d7b7c934ee701b350a34b5b96db989a992f97b4a26ce5797ae8b5a2c946c9cf8889cdd83a3e8500ed4b15e07e4333bd70e3d572a94878d4f4ac87aadf7cbf6c94fb02717dad839683dbf5ec611e9d9bdee428c3bdd49b116420b73c1d16e56e88c5ba6a2b152b6e84ef9f440", 0x6c}], 0x4, &(0x7f00000005c0)=[{0xc8, 0x112, 0xd8d, "a2628f5dec246177516ce3a5e6b695090972f6523683d494bcbd3d3afcd495da4c9e51170b11b63282684278102a14023136d06832263a3791284ca6d50fbfae656b903a4aea768f4e0a5325590159c6c1f202990c4ae29293cda7f99a000a3681acfc3763c437152b12f9ba3914e8797b90fedf991d39c4e4688d1ff276ad82513fe13ace9fb34cb99165a17f795eaf676df4f8010e583fb5f941981ec9970ef8c00257f90e44103ad1fcd3add50fd270ce33"}, {0x28, 0x103, 0x0, "83650494863858465561b713118fd6dc0ba6"}], 0xf0}, 0x20008011) 383.893178ms ago: executing program 1 (id=1127): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYBLOB="000000000700000000000000ae"], 0x20000078}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="11009dc3c639cd6cc2643b3d58d1a92fb66788d2c79e091404b7146b6b7031aaa7c247d205add393b9a1af4aa7cc7f5749c39f45fe66da06d660e458b98ccc737b3405771c3fb914da3585c4f83123ff3d2e2b3a2bce557f62f4632e5d5ec1b1ea17e6270f84a782", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000700000000000000000000008bc7e9385559d457"], 0x48}, 0x1, 0x0, 0x0, 0x20009810}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 383.205308ms ago: executing program 0 (id=1128): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x1e8, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xebf}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x13}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3686}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffb9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2f}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x1e8}}, 0x4040001) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 332.695343ms ago: executing program 3 (id=1129): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) splice(r4, &(0x7f00000000c0), r0, &(0x7f0000000240)=0x81, 0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x3, 0x9, @private2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 225.232786ms ago: executing program 1 (id=1130): r0 = syz_io_uring_setup(0x550a, &(0x7f0000000500)={0x0, 0x8000, 0x400}, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x2, 0x9, 0x8, 0x3ff, 0x17, 0x7ff, 0xe, 0x3, 0x1, 0xb, 0x6, 0xc, 0xfff, 0xe45f, 0x8, 0x7], 0x3000, 0x100}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 218.602248ms ago: executing program 1 (id=1131): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 677.781µs ago: executing program 1 (id=1132): set_tid_address(0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x9, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010b000000000000000005000000fd"], 0x1c}}, 0x40004040) migrate_pages(0x0, 0x8001, &(0x7f0000000800)=0x3, &(0x7f0000000840)=0xffffffffffffffff) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x7, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x12, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x6, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0xb, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x3, 0xa0, 0x4, 0x7, 0x4, 0xe, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x9, 0x0, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x101, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0xe18, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0xc, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x5, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x100008a, 0xff, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x7, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x3, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x200, 0x8001, 0xfffa, 0xbe}, {0xd9, 0x2, 0x5, 0xffe8, 0xfff}, 0x6, 0x9}}]}]}}]}, 0x478}}, 0x4000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x1f0, 0x60004, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x7, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x25, 0x0, 0x7ffc, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x9}) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=1133): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400000000000000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x94, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x64, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfffe}, {0xfffd, 0x5}}}]}]}, @TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x4, 0x2, 0x7, {0xfe, 0x0, 0x3ff, 0x5410, 0x9, 0x872d}, {0x2, 0x0, 0x380, 0x0, 0xfff8, 0x6}, 0xfa9a, 0x2, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) kernel console output (not intermixed with test programs): 074942.121:112): avc: denied { ioctl } for pid=5953 comm="syz-executor" path="socket:[5649]" dev="sockfs" ino=5649 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.860465][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.866246][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.869288][ T5964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.871967][ T5965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.872334][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.874143][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.877023][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.878356][ T5965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.881087][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.882065][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.883214][ T5966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.884542][ T5965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.885277][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.885518][ T5960] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.887022][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.887338][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.889273][ T5965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.893988][ T40] audit: type=1400 audit(1742074942.191:113): avc: denied { read } for pid=5961 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.894291][ T5960] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.894474][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.896488][ T5965] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.899471][ T5964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.899802][ T5965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.902841][ T40] audit: type=1400 audit(1742074942.191:114): avc: denied { open } for pid=5961 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.907315][ T5964] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.923697][ T5964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.060809][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 45.066388][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 45.151248][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 45.158659][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.161869][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.164161][ T5952] bridge_slave_0: entered allmulticast mode [ 45.166315][ T5952] bridge_slave_0: entered promiscuous mode [ 45.197573][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.199457][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.201375][ T5952] bridge_slave_1: entered allmulticast mode [ 45.203385][ T5952] bridge_slave_1: entered promiscuous mode [ 45.206077][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.208163][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.210378][ T5961] bridge_slave_0: entered allmulticast mode [ 45.213487][ T5961] bridge_slave_0: entered promiscuous mode [ 45.216282][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.218267][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.220462][ T5961] bridge_slave_1: entered allmulticast mode [ 45.223325][ T5961] bridge_slave_1: entered promiscuous mode [ 45.248160][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 45.273910][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.279047][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.283143][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.288534][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.370697][ T5961] team0: Port device team_slave_0 added [ 45.374679][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.376793][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.378821][ T5953] bridge_slave_0: entered allmulticast mode [ 45.381029][ T5953] bridge_slave_0: entered promiscuous mode [ 45.383903][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.386525][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.388914][ T5953] bridge_slave_1: entered allmulticast mode [ 45.392035][ T5953] bridge_slave_1: entered promiscuous mode [ 45.396161][ T5952] team0: Port device team_slave_0 added [ 45.398479][ T5961] team0: Port device team_slave_1 added [ 45.432303][ T5952] team0: Port device team_slave_1 added [ 45.465454][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.486673][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.488754][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.497057][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.500486][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.502753][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.505926][ T5957] bridge_slave_0: entered allmulticast mode [ 45.508085][ T5957] bridge_slave_0: entered promiscuous mode [ 45.510704][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.512580][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.514675][ T5957] bridge_slave_1: entered allmulticast mode [ 45.516662][ T5957] bridge_slave_1: entered promiscuous mode [ 45.519372][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.522161][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.524134][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.531119][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.535250][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.537189][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.544396][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.577832][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.579791][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.586526][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.595181][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.599586][ T5953] team0: Port device team_slave_0 added [ 45.603277][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.616421][ T5953] team0: Port device team_slave_1 added [ 45.671703][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.673571][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.681372][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.698840][ T5952] hsr_slave_0: entered promiscuous mode [ 45.700830][ T5952] hsr_slave_1: entered promiscuous mode [ 45.705655][ T5961] hsr_slave_0: entered promiscuous mode [ 45.707523][ T5961] hsr_slave_1: entered promiscuous mode [ 45.709373][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.711627][ T5961] Cannot create hsr debugfs directory [ 45.713497][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.715562][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.722860][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.730401][ T5957] team0: Port device team_slave_0 added [ 45.758778][ T5957] team0: Port device team_slave_1 added [ 45.812706][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.815245][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.822216][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.827257][ T5953] hsr_slave_0: entered promiscuous mode [ 45.829416][ T5953] hsr_slave_1: entered promiscuous mode [ 45.831231][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.833285][ T5953] Cannot create hsr debugfs directory [ 45.842202][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.844216][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.851157][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.900882][ T5957] hsr_slave_0: entered promiscuous mode [ 45.902875][ T5957] hsr_slave_1: entered promiscuous mode [ 45.905789][ T5957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.907938][ T5957] Cannot create hsr debugfs directory [ 46.098107][ T5961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.105609][ T5961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.110745][ T5961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.115458][ T5961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.136255][ T5953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.140354][ T5953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.143402][ T5953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.147022][ T5953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.190726][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.195616][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.203360][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.209917][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.237894][ T5957] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.244240][ T5957] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.249063][ T5957] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.253501][ T5957] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.266330][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.277291][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.292543][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.296720][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.302398][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.304574][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.316557][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.318682][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.321715][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.323775][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.339202][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.341233][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.346603][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.370423][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.374932][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.377502][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.392780][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.394958][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.407140][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.426619][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.436803][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.439401][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.448395][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.450428][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.487331][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.507650][ T5953] veth0_vlan: entered promiscuous mode [ 46.513874][ T5953] veth1_vlan: entered promiscuous mode [ 46.532592][ T5953] veth0_macvtap: entered promiscuous mode [ 46.538788][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.546650][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.549393][ T5953] veth1_macvtap: entered promiscuous mode [ 46.565826][ T5952] veth0_vlan: entered promiscuous mode [ 46.575172][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.577886][ T5952] veth1_vlan: entered promiscuous mode [ 46.581320][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.588151][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.591629][ T5953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.594365][ T5953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.597282][ T5953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.599813][ T5953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.629448][ T5961] veth0_vlan: entered promiscuous mode [ 46.639677][ T5952] veth0_macvtap: entered promiscuous mode [ 46.654661][ T5957] veth0_vlan: entered promiscuous mode [ 46.658206][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.660878][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.661380][ T5961] veth1_vlan: entered promiscuous mode [ 46.667376][ T5952] veth1_macvtap: entered promiscuous mode [ 46.682157][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.686424][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.690529][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.701117][ T5957] veth1_vlan: entered promiscuous mode [ 46.706561][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.706638][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.710015][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.710808][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.711918][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.717782][ T5952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.722047][ T5952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.725154][ T5952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.728184][ T5952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.732276][ T5961] veth0_macvtap: entered promiscuous mode [ 46.738024][ T5961] veth1_macvtap: entered promiscuous mode [ 46.747648][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.750405][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.753509][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.757615][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.761361][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.769646][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.773226][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.776815][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.780221][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.784277][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.795074][ T5957] veth0_macvtap: entered promiscuous mode [ 46.795164][ T5953] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.802694][ T5961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.805748][ T5961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.809310][ T5961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.811693][ T5961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.816525][ T5957] veth1_macvtap: entered promiscuous mode [ 46.837076][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.839069][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.839264][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.842962][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.842973][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.852568][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.855420][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.858135][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.861638][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.876380][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.879220][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.881873][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.885235][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.887878][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.890566][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.893890][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.896611][ T6018] xt_TPROXY: Can be used only with -p tcp or -p udp [ 46.906752][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.908038][ T5957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.909078][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.911627][ T5957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.916855][ T5964] Bluetooth: hci3: command tx timeout [ 46.919229][ T5957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.922744][ T5957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.925119][ T5964] Bluetooth: hci0: command tx timeout [ 46.925155][ T5956] Bluetooth: hci1: command tx timeout [ 46.958704][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.960948][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.977556][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.979751][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.994477][ T5964] Bluetooth: hci2: command tx timeout [ 47.001046][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.003677][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.008301][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.011002][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.068322][ T6034] fuse: Bad value for 'fd' [ 47.071204][ T63] Process accounting resumed [ 47.813432][ T6026] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 47.815606][ T6026] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 47.819930][ T6026] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 47.822784][ T6026] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 47.825131][ T6026] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 47.828483][ T6026] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 47.830781][ T6026] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 47.832506][ T6026] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 47.835763][ T6026] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 47.838352][ T6026] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 47.840852][ T6026] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 47.844281][ T6026] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 47.879985][ T6046] tc_dump_action: action bad kind [ 47.881824][ T6046] program syz.1.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.896886][ T6050] syz.0.11: attempt to access beyond end of device [ 47.896886][ T6050] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 47.900521][ T6050] syz.0.11: attempt to access beyond end of device [ 47.900521][ T6050] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 47.903827][ T6050] syz.0.11: attempt to access beyond end of device [ 47.903827][ T6050] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 47.904885][ T6048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.908403][ T6050] syz.0.11: attempt to access beyond end of device [ 47.908403][ T6050] loop0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 47.913274][ T6048] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.915399][ T6050] syz.0.11: attempt to access beyond end of device [ 47.915399][ T6050] loop0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 47.923809][ T6050] syz.0.11: attempt to access beyond end of device [ 47.923809][ T6050] loop0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 47.933335][ T6050] VFS: unable to find oldfs superblock on device loop0 [ 48.019722][ T6056] overlay: Unknown parameter 'uid' [ 48.106607][ T6063] trusted_key: syz.0.16 sent an empty control message without MSG_MORE. [ 48.106613][ T6073] netlink: 'syz.3.18': attribute type 2 has an invalid length. [ 48.106641][ T6073] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 48.119326][ T5956] Bluetooth: hci4: sending frame failed (-49) [ 48.123455][ T5964] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 48.153085][ T6078] program syz.3.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.362588][ T6087] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 48.367567][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23'. [ 48.430191][ T6095] xt_hashlimit: size too large, truncated to 1048576 [ 48.527215][ T6104] random: crng reseeded on system resumption [ 48.656648][ T6109] cgroup: Invalid name [ 48.658573][ T6108] delete_channel: no stack [ 48.674202][ T5992] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.711539][ T6100] Unrecognized hibernate image header format! [ 48.713251][ T6100] PM: hibernation: Image mismatch: architecture specific data [ 48.834372][ T5992] usb 8-1: Using ep0 maxpacket: 8 [ 48.839972][ T5992] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 48.842869][ T5992] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 48.845480][ T5992] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 48.847876][ T5992] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.851763][ T5992] usb 8-1: config 0 descriptor?? [ 49.058802][ T5992] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 49.063802][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.39'. [ 49.067330][ T6132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.069954][ T6132] IPv6: NLM_F_CREATE should be set when creating new route [ 49.074025][ T5964] Bluetooth: hci0: command 0x040f tx timeout [ 49.257822][ T6097] iowarrior 8-1:0.0: Error -90 while submitting URB [ 49.260045][ T6097] sctp: [Deprecated]: syz.3.28 (pid 6097) Use of int in max_burst socket option. [ 49.260045][ T6097] Use struct sctp_assoc_value instead [ 49.264632][ T6097] sctp: [Deprecated]: syz.3.28 (pid 6097) Use of int in max_burst socket option. [ 49.264632][ T6097] Use struct sctp_assoc_value instead [ 49.268399][ T6097] sctp: [Deprecated]: syz.3.28 (pid 6097) Use of int in max_burst socket option. [ 49.268399][ T6097] Use struct sctp_assoc_value instead [ 49.272262][ T6097] sctp: [Deprecated]: syz.3.28 (pid 6097) Use of int in max_burst socket option. [ 49.272262][ T6097] Use struct sctp_assoc_value instead [ 49.277242][ T6097] sctp: [Deprecated]: syz.3.28 (pid 6097) Use of int in max_burst socket option. [ 49.277242][ T6097] Use struct sctp_assoc_value instead [ 49.281130][ T6097] sctp: [Deprecated]: syz.3.28 (pid 6097) Use of int in max_burst socket option. [ 49.281130][ T6097] Use struct sctp_assoc_value instead [ 49.286075][ T6097] sctp: [Deprecated]: syz.3.28 (pid 6097) Use of int in max_burst socket option. [ 49.286075][ T6097] Use struct sctp_assoc_value instead [ 49.288589][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 49.290283][ T6097] sctp: [Deprecated]: syz.3.28 (pid 6097) Use of int in max_burst socket option. [ 49.290283][ T6097] Use struct sctp_assoc_value instead [ 49.296508][ T6097] sctp: [Deprecated]: syz.3.28 (pid 6097) Use of int in max_burst socket option. [ 49.296508][ T6097] Use struct sctp_assoc_value instead [ 49.300424][ T6097] sctp: [Deprecated]: syz.3.28 (pid 6097) Use of int in max_burst socket option. [ 49.300424][ T6097] Use struct sctp_assoc_value instead [ 49.310158][ T6012] usb 8-1: USB disconnect, device number 2 [ 49.649404][ T6165] afs: Unknown parameter 'n' [ 49.652523][ T6165] overlayfs: overlapping lowerdir path [ 49.662293][ T40] kauditd_printk_skb: 116 callbacks suppressed [ 49.662302][ T40] audit: type=1400 audit(1742074946.961:231): avc: denied { create } for pid=6164 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 49.669604][ T40] audit: type=1400 audit(1742074946.971:232): avc: denied { ioctl } for pid=6164 comm="syz.0.48" path="socket:[8096]" dev="sockfs" ino=8096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 49.884497][ T5964] Bluetooth: hci1: command 0x040f tx timeout [ 49.884532][ T5956] Bluetooth: hci3: command 0x040f tx timeout [ 49.884613][ T5965] Bluetooth: hci2: command 0x040f tx timeout [ 49.900081][ T40] audit: type=1400 audit(1742074947.201:233): avc: denied { read } for pid=6167 comm="syz.3.49" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.906502][ T40] audit: type=1400 audit(1742074947.201:234): avc: denied { open } for pid=6167 comm="syz.3.49" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.182476][ T6160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.185029][ T6160] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.187375][ T6160] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.189793][ T6160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.240469][ T40] audit: type=1400 audit(1742074947.541:235): avc: denied { create } for pid=6178 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.250652][ T40] audit: type=1400 audit(1742074947.541:236): avc: denied { setopt } for pid=6178 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.354040][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 50.480005][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.60'. [ 50.483080][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.60'. [ 50.615476][ T40] audit: type=1400 audit(1742074947.921:237): avc: denied { write } for pid=6211 comm="syz.1.63" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.642112][ T40] audit: type=1400 audit(1742074947.941:238): avc: denied { create } for pid=6216 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.648563][ T40] audit: type=1400 audit(1742074947.941:239): avc: denied { write } for pid=6216 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.747295][ T40] audit: type=1400 audit(1742074948.051:240): avc: denied { create } for pid=6223 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 50.758523][ T6224] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 51.098957][ T6242] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.299424][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.73'. [ 51.325918][ T6254] kvm: kvm [6253]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x28 [ 51.328507][ T6254] kvm: kvm [6253]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4028 [ 51.335822][ T6254] kvm: kvm [6253]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc [ 51.338274][ T6254] kvm: kvm [6253]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x400c [ 51.351604][ T6254] kvm: kvm [6253]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8c [ 51.355805][ T6254] kvm: kvm [6253]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x408c [ 51.404377][ T5964] Bluetooth: hci0: command 0x040f tx timeout [ 51.517722][ T6278] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.80'. [ 51.566205][ T6280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=6280 comm=syz.2.81 [ 51.674108][ T26] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 51.756809][ T6292] virtio-fs: tag <(null)> not found [ 51.825966][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.831022][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 51.836501][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 51.839849][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.846245][ T26] usb 5-1: config 0 descriptor?? [ 51.849588][ T6273] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.853429][ T10] IPVS: starting estimator thread 0... [ 51.927556][ T6304] netlink: 596 bytes leftover after parsing attributes in process `syz.1.87'. [ 51.930063][ T6304] openvswitch: netlink: Flow key attr not present in new flow. [ 51.956192][ T6302] IPVS: using max 36 ests per chain, 86400 per kthread [ 52.058494][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.063232][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.067356][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 52.069813][ T26] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 52.075458][ T26] usb 5-1: USB disconnect, device number 2 [ 52.194081][ T5956] Bluetooth: hci1: command 0x040f tx timeout [ 52.194819][ T5307] Bluetooth: hci2: command 0x040f tx timeout [ 52.195289][ T5964] Bluetooth: hci3: command 0x040f tx timeout [ 52.245794][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 52.248403][ T6318] Zero length message leads to an empty skb [ 52.269391][ T6319] netem: incorrect ge model size [ 52.271075][ T6319] netem: change failed [ 52.288494][ T6328] bridge0: port 3(syz_tun) entered blocking state [ 52.290780][ T6328] bridge0: port 3(syz_tun) entered disabled state [ 52.292762][ T6328] syz_tun: entered allmulticast mode [ 52.296254][ T6328] syz_tun: entered promiscuous mode [ 52.298206][ T6328] bridge0: port 3(syz_tun) entered blocking state [ 52.300168][ T6328] bridge0: port 3(syz_tun) entered forwarding state [ 52.325457][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.505713][ T6347] random: crng reseeded on system resumption [ 52.731439][ T6347] Unrecognized hibernate image header format! [ 52.737980][ T6347] PM: hibernation: Image mismatch: architecture specific data [ 53.004350][ T6393] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 53.405100][ T6428] __nla_validate_parse: 8 callbacks suppressed [ 53.405111][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 53.475269][ T5965] Bluetooth: hci0: command 0x040f tx timeout [ 53.557489][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 53.730974][ T6472] process 'syz.0.134' launched './file2' with NULL argv: empty string added [ 53.760361][ T6474] xt_hashlimit: size too large, truncated to 1048576 [ 53.833056][ T6478] 9pnet_fd: Insufficient options for proto=fd [ 53.944994][ T26] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.084135][ T63] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.094042][ T26] usb 8-1: Using ep0 maxpacket: 32 [ 54.096597][ T26] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 54.098830][ T26] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 54.101172][ T26] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 54.103621][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.106514][ T26] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 54.114014][ T26] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.117866][ T26] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 54.120281][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.123531][ T26] usb 8-1: config 0 descriptor?? [ 54.132854][ T5965] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 54.254023][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 54.256750][ T63] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.259954][ T63] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 54.262742][ T63] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.265615][ T63] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.269633][ T63] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 54.272198][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.274798][ T5965] Bluetooth: hci3: command 0x040f tx timeout [ 54.274846][ T5307] Bluetooth: hci2: command 0x040f tx timeout [ 54.284144][ T5307] Bluetooth: hci1: command 0x040f tx timeout [ 54.329779][ T26] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 54.333672][ T26] usb 8-1: USB disconnect, device number 3 [ 54.341521][ T26] usblp0: removed [ 54.481265][ T63] usb 6-1: usb_control_msg returned -71 [ 54.485974][ T63] usbtmc 6-1:16.0: can't read capabilities [ 54.491800][ T63] usb 6-1: USB disconnect, device number 2 [ 54.644028][ T26] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 54.646220][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 54.688363][ T6495] netlink: 100 bytes leftover after parsing attributes in process `syz.2.143'. [ 54.802242][ T6504] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 54.814023][ T26] usb 8-1: Using ep0 maxpacket: 32 [ 54.816750][ T26] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 54.819092][ T26] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 54.821482][ T26] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 54.824011][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.826729][ T26] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 54.829381][ T26] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.832964][ T26] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 54.835796][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.839330][ T26] usb 8-1: config 0 descriptor?? [ 54.845384][ T5308] IPVS: starting estimator thread 0... [ 54.954082][ T6509] IPVS: using max 36 ests per chain, 86400 per kthread [ 54.989984][ T6512] netlink: 596 bytes leftover after parsing attributes in process `syz.2.146'. [ 54.992490][ T6512] openvswitch: netlink: Flow key attr not present in new flow. [ 55.009001][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 55.009014][ T40] audit: type=1400 audit(1742074952.311:329): avc: denied { ioctl } for pid=6513 comm="syz.0.147" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.025252][ T40] audit: type=1400 audit(1742074952.331:330): avc: denied { setopt } for pid=6513 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.031320][ T40] audit: type=1400 audit(1742074952.331:331): avc: denied { map } for pid=6513 comm="syz.0.147" path="socket:[12357]" dev="sockfs" ino=12357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 55.042562][ T26] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 55.058230][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'. [ 55.090676][ T5307] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 55.120112][ T6522] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 55.131118][ T6522] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 55.136858][ T6522] ======================================================= [ 55.136858][ T6522] WARNING: The mand mount option has been deprecated and [ 55.136858][ T6522] and is ignored by this kernel. Remove the mand [ 55.136858][ T6522] option from the mount to silence this warning. [ 55.136858][ T6522] ======================================================= [ 55.138999][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 55.206210][ T40] audit: type=1400 audit(1742074952.511:332): avc: denied { getopt } for pid=6536 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.213425][ T40] audit: type=1400 audit(1742074952.511:333): avc: denied { connect } for pid=6536 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.221032][ T40] audit: type=1400 audit(1742074952.511:334): avc: denied { write } for pid=6536 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.228819][ T40] audit: type=1400 audit(1742074952.511:335): avc: denied { create } for pid=6536 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.242659][ T40] audit: type=1400 audit(1742074952.541:336): avc: denied { read write } for pid=6467 comm="syz.3.135" name="lp0" dev="devtmpfs" ino=2814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 55.244061][ C3] usblp0: nonzero read bulk status received: -71 [ 55.244340][ T10] usb 8-1: USB disconnect, device number 4 [ 55.251637][ T40] audit: type=1400 audit(1742074952.541:337): avc: denied { open } for pid=6467 comm="syz.3.135" path="/dev/usb/lp0" dev="devtmpfs" ino=2814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 55.261335][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 55.449269][ T40] audit: type=1400 audit(1742074952.751:338): avc: denied { wake_alarm } for pid=6467 comm="syz.3.135" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.457073][ T6544] usblp0: removed [ 55.477031][ T26] IPVS: starting estimator thread 0... [ 55.554182][ T5307] Bluetooth: hci0: command 0x040f tx timeout [ 55.565384][ T6560] netlink: 596 bytes leftover after parsing attributes in process `syz.3.157'. [ 55.567982][ T6560] openvswitch: netlink: Flow key attr not present in new flow. [ 55.584773][ T6549] IPVS: using max 36 ests per chain, 86400 per kthread [ 55.917285][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.038473][ T6595] capability: warning: `syz.3.173' uses 32-bit capabilities (legacy support in use) [ 56.181796][ T26] IPVS: starting estimator thread 0... [ 56.217298][ T6616] fuse: Unknown parameter 'fd' [ 56.284922][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.179'. [ 56.294241][ T6611] IPVS: using max 36 ests per chain, 86400 per kthread [ 56.354140][ T5307] Bluetooth: hci1: command 0x040f tx timeout [ 56.356472][ T5307] Bluetooth: hci3: command 0x040f tx timeout [ 56.375888][ T6628] fuse: Invalid rootmode [ 56.423205][ T6635] Invalid ELF header magic: != ELF [ 56.485264][ T6642] tmpfs: Unknown parameter '# [ 56.485264][ T6642] DaZ' [ 56.572331][ T6647] can0: slcan on ttyS3. [ 56.575279][ T6647] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 56.744833][ T6650] can0 (unregistered): slcan off ttyS3. [ 56.789724][ T6665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6665 comm=syz.0.191 [ 56.793417][ T6665] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 56.807284][ T6665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.816074][ T6665] bond1: (slave ip6gretap1): making interface the new active one [ 56.818677][ T6665] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 56.825201][ T6665] vlan0: entered promiscuous mode [ 56.826959][ T6665] bond1: entered promiscuous mode [ 56.828457][ T6665] ip6gretap1: entered promiscuous mode [ 56.830501][ T6665] vlan0: entered allmulticast mode [ 56.832361][ T6665] bond1: entered allmulticast mode [ 56.836044][ T6665] ip6gretap1: entered allmulticast mode [ 56.867504][ T5307] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 57.363585][ T6709] overlayfs: failed to clone upperpath [ 57.364270][ T6707] Bluetooth: MGMT ver 1.23 [ 57.364455][ T6710] overlayfs: failed to clone upperpath [ 57.606448][ T6726] program syz.1.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.644202][ T5965] Bluetooth: hci0: command 0x040f tx timeout [ 57.647051][ T5307] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 57.768898][ T6740] xt_CT: No such helper "pptp" [ 57.904901][ T6753] openvswitch: netlink: Multiple metadata blocks provided [ 57.954018][ T26] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 57.969320][ T6758] tipc: Started in network mode [ 57.971224][ T6758] tipc: Node identity 40000001, cluster identity 4711 [ 57.973376][ T6758] tipc: Node number set to 1073741825 [ 57.981059][ T6758] netlink: 'syz.0.220': attribute type 10 has an invalid length. [ 57.990578][ T6758] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.993858][ T6758] bond0: (slave team0): Enslaving as an active interface with an up link [ 58.127989][ T26] usb 6-1: not running at top speed; connect to a high speed hub [ 58.137002][ T26] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 58.140182][ T26] usb 6-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.145410][ T26] usb 6-1: config 1 interface 0 has no altsetting 0 [ 58.149730][ T26] usb 6-1: New USB device found, idVendor=046e, idProduct=5577, bcdDevice= 0.40 [ 58.153271][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.156429][ T26] usb 6-1: Product: ఄ [ 58.158100][ T26] usb 6-1: Manufacturer: 驌茢렼钧㮐짇ꞽ肨ୄ淅笣훽ﲶ濼弆㨨䨱㬛궏懓ꫝᵪ畖淏ळ [ 58.162566][ T26] usb 6-1: SerialNumber: 㐙宛諭焿蔜묆᛻b㡌篏଄泹敦ᩥ鸪⼍夗吒ꌑ꨸ᒁ⑕᨜䞡㈟罻㶏ꄱ倏ⷝ証≡먻荂疗䃰秖迶进浏ꠝ簾鼫ᭃȀ὎嬇ⵚ銺כֿ隔虋ش妋䔧浜䂔ꕓ葂劽䀾㮩㼇ﭜ죫3伿Ж㫃豗롁ݐ猿㳏ٕ窘쩻ସ縅嗠Ң낫녑᜞惒 [ 58.174790][ T6734] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.212940][ T6763] hsr_slave_1 (unregistering): left promiscuous mode [ 58.387114][ T26] usbhid 6-1:1.0: can't add hid device: -71 [ 58.389519][ T26] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 58.394104][ T26] usb 6-1: USB disconnect, device number 3 [ 58.434302][ T5307] Bluetooth: hci3: command 0x040f tx timeout [ 58.434327][ T5965] Bluetooth: hci1: command 0x040f tx timeout [ 58.564091][ T1024] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 58.714086][ T1024] usb 8-1: Using ep0 maxpacket: 16 [ 58.718858][ T1024] usb 8-1: config 1 interface 0 has no altsetting 0 [ 58.722111][ T1024] usb 8-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.40 [ 58.724695][ T1024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.726888][ T1024] usb 8-1: Product: ࠐ [ 58.728057][ T1024] usb 8-1: Manufacturer: Є [ 58.729333][ T1024] usb 8-1: SerialNumber: 彻蠽ࠢꡕ뽠尨媄꜔栜᪬鮞Ԑ枆𤋮璉퓼䱍▷ꃪ鍼⦭鼯抒膆許傚탌℠㧼宙Ɛ [ 58.888717][ T6779] __nla_validate_parse: 2 callbacks suppressed [ 58.888728][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 58.943128][ T1024] usbhid 8-1:1.0: can't add hid device: -71 [ 58.946353][ T1024] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 58.953234][ T1024] usb 8-1: USB disconnect, device number 5 [ 58.979224][ T6789] 9pnet_fd: Insufficient options for proto=fd [ 58.983573][ T6785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.987809][ T6785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.081967][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 59.098905][ T6802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.235'. [ 59.102098][ T6802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.235'. [ 59.155115][ T5965] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 59.157576][ T5965] Bluetooth: hci2: Injecting HCI hardware error event [ 59.161595][ T5965] Bluetooth: hci2: hardware error 0x00 [ 59.220861][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 59.296174][ T6824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.243'. [ 59.320336][ T6829] capability: warning: `syz.1.244' uses deprecated v2 capabilities in a way that may be insecure [ 59.420311][ T6832] gre1: entered promiscuous mode [ 59.474292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.493896][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 59.513770][ T6857] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 59.520755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 59.591724][ T6864] nbd: illegal input index -1996488704 [ 59.648295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 59.658887][ T6872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.256'. [ 59.714372][ T5307] Bluetooth: hci0: command 0x040f tx timeout [ 59.808744][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 59.995066][ T6894] netlink: 57 bytes leftover after parsing attributes in process `syz.1.264'. [ 60.097435][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 60.097450][ T40] audit: type=1400 audit(1742074957.401:410): avc: denied { setopt } for pid=6904 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.191296][ T6921] [U] 1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT1WT [ 60.212281][ T40] audit: type=1400 audit(1742074957.511:411): avc: denied { listen } for pid=6908 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.217987][ T40] audit: type=1400 audit(1742074957.511:412): avc: denied { accept } for pid=6908 comm="syz.1.270" lport=58127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.223767][ T40] audit: type=1400 audit(1742074957.511:413): avc: denied { listen } for pid=6925 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.246153][ T40] audit: type=1400 audit(1742074957.541:414): avc: denied { write } for pid=5339 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.252435][ T40] audit: type=1400 audit(1742074957.541:415): avc: denied { remove_name } for pid=5339 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.258796][ T40] audit: type=1400 audit(1742074957.541:416): avc: denied { rename } for pid=5339 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.261997][ T6934] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 60.265024][ T40] audit: type=1400 audit(1742074957.541:417): avc: denied { add_name } for pid=5339 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.276883][ T40] audit: type=1400 audit(1742074957.541:418): avc: denied { unlink } for pid=5339 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.285722][ T40] audit: type=1400 audit(1742074957.541:419): avc: denied { create } for pid=5339 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.517428][ T5307] Bluetooth: hci3: command 0x040f tx timeout [ 60.746737][ T6968] SELinux: failed to load policy [ 61.244872][ T5965] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 61.295879][ T6994] program syz.0.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.379967][ T5965] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 61.588426][ T7030] delete_channel: no stack [ 61.736707][ T7047] tmpfs: Group quota inode hardlimit too large. [ 61.762981][ T7048] tmpfs: Bad value for 'mpol' [ 61.894958][ T7063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.898790][ T7063] bond0: (slave bond3): Enslaving as an active interface with an up link [ 62.056982][ T7084] vti0: entered allmulticast mode [ 62.142137][ T7091] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 62.145227][ T7091] SELinux: failed to load policy [ 62.241580][ T7102] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 62.246840][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.249542][ T7102] bond0: (slave team0): Enslaving as an active interface with an up link [ 62.328558][ T7115] dccp_invalid_packet: pskb_may_pull failed [ 62.647904][ T7164] dvmrp0: entered allmulticast mode [ 62.753881][ T7169] : renamed from hsr0 (while UP) [ 62.884684][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.949092][ T7189] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 62.951403][ T7189] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 62.977521][ T7198] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 62.986014][ T7200] gtp0: entered promiscuous mode [ 62.987636][ T7200] gtp0: entered allmulticast mode [ 62.992873][ T7200] netlink: 'syz.2.360': attribute type 64 has an invalid length. [ 62.995902][ T7200] netlink: 'syz.2.360': attribute type 4 has an invalid length. [ 63.054105][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 63.056782][ T10] usb 6-1: config index 0 descriptor too short (expected 5138, got 18) [ 63.059088][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.061877][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 63.066172][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 63.068742][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.071013][ T10] usb 6-1: Product: syz [ 63.072725][ T10] usb 6-1: Manufacturer: syz [ 63.074260][ T10] usb 6-1: SerialNumber: syz [ 63.077013][ T10] usb 6-1: config 0 descriptor?? [ 63.290650][ T7165] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 63.292893][ T7165] UDF-fs: Scanning with blocksize 2048 failed [ 63.295901][ T7165] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 63.298036][ T7165] UDF-fs: Scanning with blocksize 4096 failed [ 63.304023][ T26] usb 6-1: USB disconnect, device number 4 [ 63.490083][ T7225] tmpfs: Unknown parameter 'indo64' [ 63.578813][ T7230] overlayfs: failed to clone upperpath [ 63.986958][ T7270] __nla_validate_parse: 25 callbacks suppressed [ 63.986974][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.386'. [ 63.992716][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.386'. [ 64.036420][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 64.086870][ T7286] netlink: 'syz.2.391': attribute type 5 has an invalid length. [ 64.092750][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 64.096338][ T7285] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 64.098179][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 64.102051][ T7286] openvswitch: netlink: Flow actions attr not present in new flow. [ 64.114085][ T5307] Bluetooth: hci3: command 0x040f tx timeout [ 64.354771][ T7302] program syz.3.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.488735][ T5965] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 65.633482][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 65.633492][ T40] audit: type=1400 audit(1742074963.928:467): avc: denied { read write } for pid=7365 comm="syz.1.414" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 65.635807][ T5992] hid (null): global environment stack underflow [ 65.636209][ T40] audit: type=1400 audit(1742074963.928:468): avc: denied { open } for pid=7365 comm="syz.1.414" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 65.643570][ T5992] hid (null): report_id 3841936294 is invalid [ 65.643600][ T5992] hid (null): report_id 56548 is invalid [ 65.643612][ T5992] hid (null): invalid report_size 36697 [ 65.643620][ T5992] hid (null): report_id 0 is invalid [ 65.643634][ T5992] hid (null): unknown global tag 0xc [ 65.646735][ T5992] hid-generic 0006:0101:80000000.0002: unknown main item tag 0xe [ 65.666001][ T5992] hid-generic 0006:0101:80000000.0002: unknown main item tag 0x4 [ 65.668174][ T5992] hid-generic 0006:0101:80000000.0002: unknown main item tag 0x4 [ 65.670305][ T5992] hid-generic 0006:0101:80000000.0002: collection stack underflow [ 65.672443][ T5992] hid-generic 0006:0101:80000000.0002: item 0 1 0 12 parsing failed [ 65.675023][ T5992] hid-generic 0006:0101:80000000.0002: probe with driver hid-generic failed with error -22 [ 65.878959][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 65.932201][ T7388] input: syz1 as /devices/virtual/input/input6 [ 65.938962][ T40] audit: type=1400 audit(1742074964.238:469): avc: denied { read } for pid=5342 comm="acpid" name="event4" dev="devtmpfs" ino=2830 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.947935][ T40] audit: type=1400 audit(1742074964.238:470): avc: denied { open } for pid=5342 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2830 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.954737][ T40] audit: type=1400 audit(1742074964.238:471): avc: denied { ioctl } for pid=5342 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2830 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.018030][ T7390] omfs: Invalid superblock (0) [ 66.101266][ T7396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 66.123599][ T7398] vlan0: entered promiscuous mode [ 66.233781][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 66.330445][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 66.365141][ T5965] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 66.369226][ T40] audit: type=1400 audit(1742074964.668:472): avc: denied { getopt } for pid=7423 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.268236][ T40] audit: type=1400 audit(1742074965.568:473): avc: denied { create } for pid=7445 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 67.275812][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 67.313319][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 67.390117][ T40] audit: type=1400 audit(1742074965.688:474): avc: denied { write } for pid=7453 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.417025][ T7456] rtc_cmos 00:05: Alarms can be up to one day in the future [ 67.443721][ T40] audit: type=1400 audit(1742074965.738:475): avc: denied { create } for pid=7460 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.449441][ T40] audit: type=1400 audit(1742074965.748:476): avc: denied { ioctl } for pid=7460 comm="syz.3.446" path="socket:[14172]" dev="sockfs" ino=14172 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.835910][ T7484] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.149487][ T7512] kvm: pic: non byte write [ 68.151102][ T7512] kvm: pic: non byte write [ 68.153130][ T7512] kvm: pic: non byte write [ 68.156091][ T7512] kvm: pic: non byte write [ 68.158259][ T7512] kvm: pic: non byte write [ 68.159787][ T7512] kvm: pic: non byte write [ 68.161804][ T7512] kvm: pic: non byte write [ 68.163433][ T7512] kvm: pic: non byte write [ 68.163816][ T7515] No such timeout policy "/dsp" [ 68.165489][ T7512] kvm: pic: non byte write [ 68.167641][ T7512] kvm: pic: non byte write [ 68.588784][ T7544] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 68.632147][ T7548] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 68.756948][ T7554] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 69.071490][ T7562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.163033][ T7569] __nla_validate_parse: 9 callbacks suppressed [ 69.163048][ T7569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.479'. [ 69.212859][ T7571] dccp_v6_rcv: dropped packet with invalid checksum [ 69.229695][ T7577] ipvlan1: entered allmulticast mode [ 69.231213][ T7577] veth0_vlan: entered allmulticast mode [ 69.237382][ T7577] netlink: 'syz.0.482': attribute type 10 has an invalid length. [ 69.244813][ T7577] netlink: 'syz.0.482': attribute type 10 has an invalid length. [ 69.275619][ T7577] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 69.308717][ T7579] overlayfs: maximum fs stacking depth exceeded [ 69.316043][ T7581] overlayfs: maximum fs stacking depth exceeded [ 69.351602][ T7583] No such timeout policy "syz1" [ 69.760588][ T7598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.489'. [ 69.805772][ T7602] xt_l2tp: v2 doesn't support IP mode [ 69.815117][ T7602] QAT: Stopping all acceleration devices. [ 69.817610][ T7604] kvm: kvm [7603]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x6161616161616021 [ 69.824431][ T7602] sp0: Synchronizing with TNC [ 69.889089][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 69.891575][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.493'. [ 70.325863][ T7622] tmpfs: Bad value for 'mpol' [ 70.328609][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 70.759379][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 70.759392][ T40] audit: type=1400 audit(1742074969.058:492): avc: denied { read } for pid=7654 comm="syz.2.496" path="socket:[16268]" dev="sockfs" ino=16268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.775899][ T7661] CIFS mount error: No usable UNC path provided in device string! [ 70.775899][ T7661] [ 70.779001][ T7661] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 70.783305][ T40] audit: type=1400 audit(1742074969.078:493): avc: denied { listen } for pid=7659 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.805122][ T7664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.499'. [ 70.942283][ T7671] qnx6: unable to set blocksize [ 71.077398][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.079373][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.216529][ T40] audit: type=1400 audit(1742074969.518:494): avc: denied { getopt } for pid=7676 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.302380][ T40] audit: type=1400 audit(1742074969.598:495): avc: denied { connect } for pid=7686 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.307225][ T40] audit: type=1400 audit(1742074969.608:496): avc: denied { ioctl } for pid=7686 comm="syz.3.507" path="socket:[16746]" dev="sockfs" ino=16746 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 71.393402][ T5965] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 71.448016][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.509'. [ 71.479754][ T40] audit: type=1400 audit(1742074969.778:497): avc: denied { bind } for pid=7694 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.489482][ T7695] ALSA: seq fatal error: cannot create timer (-16) [ 71.684853][ T7703] netlink: 700 bytes leftover after parsing attributes in process `syz.2.513'. [ 71.862951][ T40] audit: type=1400 audit(1742074970.158:498): avc: denied { connect } for pid=7706 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 71.863120][ T7707] ax25_connect(): syz.1.515 uses autobind, please contact jreuter@yaina.de [ 71.880140][ T7707] netlink: 376 bytes leftover after parsing attributes in process `syz.1.515'. [ 71.882634][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.515'. [ 71.954883][ T7712] hfs: can't find a HFS filesystem on dev sr0 [ 71.958191][ T7712] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 71.994011][ T40] audit: type=1400 audit(1742074970.288:499): avc: denied { read } for pid=7713 comm="syz.1.518" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 72.002260][ T40] audit: type=1400 audit(1742074970.288:500): avc: denied { open } for pid=7713 comm="syz.1.518" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 72.018326][ T40] audit: type=1400 audit(1742074970.288:501): avc: denied { ioctl } for pid=7713 comm="syz.1.518" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 72.112362][ T7725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.114552][ T7725] IPv6: NLM_F_CREATE should be set when creating new route [ 72.116614][ T7725] IPv6: NLM_F_CREATE should be set when creating new route [ 72.176436][ T7728] geneve2: entered promiscuous mode [ 72.177939][ T7728] geneve2: entered allmulticast mode [ 72.191496][ T7730] tmpfs: Invalid uid '0x00000000ffffffff' [ 72.195840][ T7730] netlink: 'syz.2.523': attribute type 2 has an invalid length. [ 72.296875][ T7733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.501497][ T7740] netlink: 'syz.0.527': attribute type 7 has an invalid length. [ 72.504062][ T7740] netlink: 'syz.0.527': attribute type 8 has an invalid length. [ 72.642483][ T7740] netlink: 'syz.0.527': attribute type 3 has an invalid length. [ 73.302913][ T7790] netlink: 'syz.1.546': attribute type 30 has an invalid length. [ 73.486584][ T7798] tmpfs: User quota block hardlimit too large. [ 73.556331][ T7805] fuse: Bad value for 'user_id' [ 73.557819][ T7805] fuse: Bad value for 'user_id' [ 74.097851][ T7822] SELinux: security policydb version 18 (MLS) not backwards compatible [ 74.100222][ T7822] SELinux: failed to load policy [ 74.201383][ T7824] overlayfs: missing 'lowerdir' [ 74.340219][ T7832] __nla_validate_parse: 10 callbacks suppressed [ 74.340231][ T7832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 74.559750][ T7838] overlayfs: failed to resolve './bus/file0': -2 [ 74.578399][ T7840] netlink: 224 bytes leftover after parsing attributes in process `syz.1.562'. [ 74.703065][ T7846] usb usb8: usbfs: process 7846 (syz.0.564) did not claim interface 0 before use [ 74.706661][ T7846] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.724703][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 74.756152][ T7846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7846 comm=syz.0.564 [ 74.833997][ T5965] Bluetooth: hci1: command 0x040f tx timeout [ 74.880624][ T7855] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 74.890263][ T7855] netlink: 16138 bytes leftover after parsing attributes in process `syz.0.567'. [ 74.902419][ T7855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.567'. [ 74.905033][ T7855] netlink: 264 bytes leftover after parsing attributes in process `syz.0.567'. [ 74.907559][ T7855] netlink: 56 bytes leftover after parsing attributes in process `syz.0.567'. [ 74.936636][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.570'. [ 75.047304][ T7872] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7872 comm=syz.2.573 [ 75.051186][ T7872] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7872 comm=syz.2.573 [ 75.288268][ T7877] overlayfs: failed to clone upperpath [ 75.695638][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 75.698608][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 75.872723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.894100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.024057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.026443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.184554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.244122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.247106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.769317][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 76.769328][ T40] audit: type=1400 audit(1742074975.068:523): avc: denied { create } for pid=7924 comm="syz.3.592" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 76.771657][ T7925] 9pnet_virtio: no channels available for device syz [ 76.777727][ T40] audit: type=1400 audit(1742074975.068:524): avc: denied { mounton } for pid=7924 comm="syz.3.592" path="/146/file0/file0" dev="9p" ino=40894519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.785778][ T40] audit: type=1400 audit(1742074975.078:525): avc: denied { rename } for pid=7924 comm="syz.3.592" name="file0" dev="9p" ino=40894519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.787431][ T7925] xt_hashlimit: max too large, truncated to 1048576 [ 76.795644][ T7925] xt_bpf: check failed: parse error [ 77.205828][ T7936] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 77.224205][ T7936] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 77.228038][ T7936] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 77.235684][ T7936] bond1: (slave vcan1): making interface the new active one [ 77.238943][ T7936] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 77.757353][ T36] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 77.914589][ T36] usb 5-1: no configurations [ 77.916523][ T36] usb 5-1: can't read configurations, error -22 [ 78.044105][ T36] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 78.136110][ T7962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.138891][ T7962] IPv6: NLM_F_CREATE should be set when creating new route [ 78.190020][ T7964] vxcan1: tx drop: invalid da for name 0x000000000000efff [ 78.197618][ T36] usb 5-1: no configurations [ 78.199506][ T36] usb 5-1: can't read configurations, error -22 [ 78.203220][ T36] usb usb5-port1: attempt power cycle [ 78.239738][ T40] audit: type=1400 audit(1742074976.538:526): avc: denied { connect } for pid=7965 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.365573][ T40] audit: type=1400 audit(1742074976.668:527): avc: denied { listen } for pid=7968 comm="syz.2.607" path=2F3231302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 78.513298][ T40] audit: type=1400 audit(1742074976.808:528): avc: denied { write } for pid=7982 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.574562][ T36] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 78.595188][ T36] usb 5-1: no configurations [ 78.597041][ T36] usb 5-1: can't read configurations, error -22 [ 78.601308][ T7991] tmpfs: Invalid uid '0x00000000ffffffff' [ 78.603087][ T40] audit: type=1400 audit(1742074976.898:529): avc: denied { ioctl } for pid=7990 comm="syz.3.616" path="socket:[17736]" dev="sockfs" ino=17736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 78.612521][ T40] audit: type=1400 audit(1742074976.898:530): avc: denied { read } for pid=7990 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.649773][ T40] audit: type=1400 audit(1742074976.948:531): avc: denied { ioctl } for pid=7993 comm="syz.3.617" path="socket:[18993]" dev="sockfs" ino=18993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.715837][ T7997] xt_HMARK: spi-set and port-set can't be combined [ 78.724084][ T36] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 78.745672][ T36] usb 5-1: no configurations [ 78.747467][ T36] usb 5-1: can't read configurations, error -22 [ 78.750175][ T36] usb usb5-port1: unable to enumerate USB device [ 78.789535][ T40] audit: type=1800 audit(1742074977.088:532): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.620" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 78.870203][ T8011] program syz.3.623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.351555][ T8033] __nla_validate_parse: 14 callbacks suppressed [ 79.351569][ T8033] netlink: 124 bytes leftover after parsing attributes in process `syz.2.628'. [ 80.333416][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 80.548009][ T8046] tmpfs: Unknown parameter 'subj_type' [ 80.554542][ T8048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8048 comm=syz.0.634 [ 80.558184][ T8048] netlink: 172 bytes leftover after parsing attributes in process `syz.0.634'. [ 80.734527][ T8065] veth0_to_batadv: entered promiscuous mode [ 80.736252][ T8065] veth0_to_batadv: entered allmulticast mode [ 80.765004][ T8067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.789701][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 80.849566][ T8078] : entered promiscuous mode [ 80.878524][ T8083] netlink: 'syz.1.647': attribute type 4 has an invalid length. [ 80.899888][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 80.932084][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 81.057603][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 81.152081][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 81.194468][ T8104] overlayfs: failed to resolve 'fowner=00000000000000000000': -2 [ 81.381285][ T8118] netlink: 'syz.2.659': attribute type 1 has an invalid length. [ 81.412046][ T8122] netlink: 'syz.2.660': attribute type 11 has an invalid length. [ 81.455899][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 81.586098][ T8132] netlink: 68 bytes leftover after parsing attributes in process `syz.0.665'. [ 81.998811][ T8158] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 82.007785][ T31] cfg80211: failed to load regulatory.db [ 82.046510][ T8161] netlink: zone id is out of range [ 82.048705][ T8161] netlink: zone id is out of range [ 82.051371][ T8161] netlink: zone id is out of range [ 82.053440][ T8161] netlink: zone id is out of range [ 82.054058][ T5965] Bluetooth: hci0: adv larger than maximum supported [ 82.055412][ T8161] netlink: zone id is out of range [ 82.055523][ T5965] Bluetooth: hci0: Malformed LE Event: 0x0d [ 82.058763][ T8161] netlink: zone id is out of range [ 82.064004][ T8161] netlink: zone id is out of range [ 82.066004][ T8161] netlink: zone id is out of range [ 82.200401][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 82.200411][ T40] audit: type=1400 audit(1742074980.457:553): avc: denied { setopt } for pid=8165 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.208104][ T40] audit: type=1400 audit(1742074980.457:554): avc: denied { create } for pid=8167 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 82.214178][ T40] audit: type=1400 audit(1742074980.466:555): avc: denied { sys_admin } for pid=8167 comm="syz.1.678" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 82.250236][ T40] audit: type=1400 audit(1742074980.513:556): avc: denied { module_request } for pid=8171 comm="syz.1.679" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.319726][ T40] audit: type=1400 audit(1742074980.569:557): avc: denied { bind } for pid=8179 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.699068][ T40] audit: type=1400 audit(1742074980.925:558): avc: denied { accept } for pid=8201 comm="syz.1.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 82.719041][ T40] audit: type=1400 audit(1742074980.934:559): avc: denied { link } for pid=8201 comm="syz.1.689" name="#a" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.719066][ T40] audit: type=1400 audit(1742074980.934:560): avc: denied { rename } for pid=8201 comm="syz.1.689" name="#b" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.719082][ T40] audit: type=1400 audit(1742074980.943:561): avc: denied { ioctl } for pid=8201 comm="syz.1.689" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.019461][ T8221] gretap0: entered allmulticast mode [ 83.591369][ T8239] netlink: 'syz.3.699': attribute type 14 has an invalid length. [ 83.759241][ T8260] tmpfs: Bad value for 'mpol' [ 83.770951][ T8259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23837 sclass=netlink_route_socket pid=8259 comm=syz.3.705 [ 83.881319][ T8269] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 84.052844][ T8275] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 84.140726][ T40] audit: type=1400 audit(1742074982.272:562): avc: denied { bind } for pid=8279 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.181608][ T8282] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 84.189946][ T8282] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 84.192091][ T8282] gretap1: entered promiscuous mode [ 84.193562][ T8282] gretap1: entered allmulticast mode [ 84.221542][ T8285] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 84.224205][ T8287] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 84.226804][ T8287] bridge0: port 3(syz_tun) entered disabled state [ 84.233499][ T8287] bridge0: port 3(syz_tun) entered blocking state [ 84.235372][ T8287] bridge0: port 3(syz_tun) entered forwarding state [ 84.238883][ T8287] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 84.330054][ T8292] x_tables: duplicate underflow at hook 2 [ 84.609023][ T8319] 9pnet_rdma: rdma_create_trans (8319): problem binding to privport: 13 [ 84.871587][ T8338] __nla_validate_parse: 2 callbacks suppressed [ 84.871602][ T8338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.730'. [ 85.379939][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 85.384371][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 85.697588][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.830259][ T5965] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.891522][ T8375] netlink: 'syz.0.738': attribute type 11 has an invalid length. [ 85.993095][ T8377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.739'. [ 86.295766][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.741'. [ 86.343117][ T8387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.742'. [ 86.543652][ T8405] netlink: 'syz.0.747': attribute type 142 has an invalid length. [ 86.545817][ T8405] netlink: 96 bytes leftover after parsing attributes in process `syz.0.747'. [ 86.550290][ T5965] Bluetooth: hci3: ACL packet for unknown connection handle 136 [ 86.553010][ T8405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.747'. [ 86.555753][ T8405] netlink: 276 bytes leftover after parsing attributes in process `syz.0.747'. [ 86.631973][ C1] sched: DL replenish lagged too much [ 87.158548][ T26] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.326965][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 87.330172][ T26] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 87.332977][ T26] usb 6-1: config 0 has no interface number 0 [ 87.339884][ T26] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 87.343019][ T26] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 87.345258][ T26] usb 6-1: Product: syz [ 87.346378][ T26] usb 6-1: Manufacturer: syz [ 87.347629][ T26] usb 6-1: SerialNumber: syz [ 87.351509][ T26] usb 6-1: config 0 descriptor?? [ 87.359461][ T26] smsc95xx v2.0.0 [ 87.381129][ T8417] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 87.384139][ T8417] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 87.386695][ T8417] netlink: 500 bytes leftover after parsing attributes in process `syz.2.751'. [ 87.688169][ T5965] Bluetooth: hci3: ACL packet too small [ 87.957723][ T1024] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 87.977695][ T8435] net_ratelimit: 6 callbacks suppressed [ 87.977709][ T8435] dccp_invalid_packet: P.Data Offset(111) too large [ 88.000588][ T8412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.003104][ T8412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.029152][ T26] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 88.032214][ T26] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 88.035661][ T26] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 88.039705][ T26] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 88.050915][ T26] usb 6-1: USB disconnect, device number 5 [ 88.096660][ T1024] usb 5-1: device descriptor read/64, error -71 [ 88.363954][ T1024] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.502963][ T1024] usb 5-1: device descriptor read/64, error -71 [ 88.606847][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 88.606858][ T40] audit: type=1400 audit(1742074986.453:579): avc: denied { mounton } for pid=8442 comm="syz.1.761" path="/170/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 88.614527][ T40] audit: type=1400 audit(1742074986.462:580): avc: denied { getattr } for pid=8442 comm="syz.1.761" path="socket:[21069]" dev="sockfs" ino=21069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.621876][ T1024] usb usb5-port1: attempt power cycle [ 88.640829][ T40] audit: type=1400 audit(1742074986.481:581): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 88.996209][ T1024] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 89.019308][ T1024] usb 5-1: device descriptor read/8, error -71 [ 89.272686][ T1024] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 89.295206][ T1024] usb 5-1: device descriptor read/8, error -71 [ 89.416623][ T1024] usb usb5-port1: unable to enumerate USB device [ 89.708960][ T8455] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 89.717504][ T8455] overlay: ./bus is not a directory [ 89.750098][ T8459] nfs: Unknown parameter '' [ 89.782793][ T8469] Cannot find add_set index 1 as target [ 89.818900][ T8475] netlink: 'syz.3.771': attribute type 29 has an invalid length. [ 89.829148][ T8475] netlink: 'syz.3.771': attribute type 29 has an invalid length. [ 89.831400][ T8475] netlink: 'syz.3.771': attribute type 29 has an invalid length. [ 89.836029][ T8475] netlink: 'syz.3.771': attribute type 29 has an invalid length. [ 89.859946][ T40] audit: type=1400 audit(1742074987.622:582): avc: denied { create } for pid=8480 comm="syz.2.773" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.865382][ T8475] netlink: 'syz.3.771': attribute type 29 has an invalid length. [ 89.867206][ T8475] netlink: 'syz.3.771': attribute type 29 has an invalid length. [ 89.870034][ T8475] netlink: 'syz.3.771': attribute type 29 has an invalid length. [ 89.873475][ T40] audit: type=1400 audit(1742074987.641:583): avc: denied { mounton } for pid=8480 comm="syz.2.773" path="/276/file0" dev="tmpfs" ino=1494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.973371][ T40] audit: type=1400 audit(1742074987.734:584): avc: denied { unlink } for pid=5957 comm="syz-executor" name="file0" dev="tmpfs" ino=1494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.006546][ T8491] 8021q: VLANs not supported on lo [ 90.444318][ T8519] __nla_validate_parse: 1 callbacks suppressed [ 90.444327][ T8519] netlink: 132 bytes leftover after parsing attributes in process `syz.2.784'. [ 90.578486][ T8531] overlayfs: failed to clone lowerpath [ 90.638035][ T8535] IPv6: addrconf: prefix option has invalid lifetime [ 90.642317][ T40] audit: type=1400 audit(1742074988.361:585): avc: denied { getopt } for pid=8534 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.731474][ T40] audit: type=1400 audit(1742074988.436:586): avc: denied { name_connect } for pid=8538 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 90.739109][ T40] audit: type=1400 audit(1742074988.436:587): avc: denied { getopt } for pid=8538 comm="syz.3.790" lport=54785 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 91.179726][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.799'. [ 91.229039][ T1024] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 91.410734][ T1024] usb 6-1: Using ep0 maxpacket: 8 [ 91.413375][ T1024] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 91.415659][ T1024] usb 6-1: config 0 has no interface number 0 [ 91.417785][ T1024] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.420887][ T1024] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 91.424385][ T1024] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.427256][ T1024] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 91.429860][ T1024] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.433791][ T1024] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 91.436213][ T1024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.441018][ T1024] usb 6-1: config 0 descriptor?? [ 91.445632][ T1024] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 91.664312][ T8557] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 91.694258][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 91.697470][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 91.960965][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 91.966071][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 92.230569][ T26] usb 6-1: USB disconnect, device number 6 [ 92.237325][ T26] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 92.258673][ T40] audit: type=1400 audit(1742074989.867:588): avc: denied { listen } for pid=8576 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.270419][ T8577] validate_nla: 20 callbacks suppressed [ 92.270432][ T8577] netlink: 'syz.1.802': attribute type 29 has an invalid length. [ 92.805592][ T8609] netlink: 'syz.2.814': attribute type 9 has an invalid length. [ 92.808916][ T8609] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 92.811376][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 92.825495][ T8611] binfmt_misc: register: failed to install interpreter file ./file0 [ 93.196229][ T8651] netlink: 'syz.0.829': attribute type 10 has an invalid length. [ 93.289720][ T8659] overlayfs: failed to clone upperpath [ 93.438528][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.832'. [ 93.465678][ T26] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 93.589711][ T8664] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.833'. [ 93.638644][ T26] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.652696][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 93.657149][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 93.661341][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.666190][ T26] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.670199][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.672364][ T8668] netlink: 48 bytes leftover after parsing attributes in process `syz.2.835'. [ 93.674865][ T26] usb 5-1: config 0 descriptor?? [ 93.678977][ T8653] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.752910][ T8670] vlan2: entered allmulticast mode [ 93.901979][ T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 93.905261][ T26] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 93.911888][ T26] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 93.947906][ T8673] netlink: 'syz.2.837': attribute type 1 has an invalid length. [ 94.084462][ T5965] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 94.095383][ T8682] Illegal XDP return value 4294967262 on prog (id 123) dev N/A, expect packet loss! [ 94.219606][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 94.219616][ T40] audit: type=1400 audit(1742074991.700:594): avc: denied { getopt } for pid=8685 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.304204][ T8688] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 94.335143][ T40] audit: type=1400 audit(1742074991.813:595): avc: denied { write } for pid=8650 comm="syz.0.829" name="xfrm_stat" dev="proc" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 94.844177][ T8704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8704 comm=syz.2.847 [ 94.925833][ T8711] ipvlan0: entered promiscuous mode [ 94.927648][ T8711] ipvlan0: entered allmulticast mode [ 94.931190][ T8711] veth0_vlan: entered allmulticast mode [ 94.939361][ T8711] mmap: syz.2.849 (8711) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.052749][ T40] audit: type=1400 audit(1742074992.477:596): avc: denied { mounton } for pid=8715 comm="syz.1.851" path="/196/file0" dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 95.304140][ T8720] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 95.322168][ T8720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.329847][ T8720] team0: Port device batadv0 added [ 95.592163][ T10] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 95.685118][ T40] audit: type=1400 audit(1742074993.066:597): avc: denied { setattr } for pid=8732 comm="syz.1.855" name="RAWv6" dev="sockfs" ino=21612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.740489][ T10] usb 5-1: device descriptor read/64, error -32 [ 95.829736][ T8736] __nla_validate_parse: 4 callbacks suppressed [ 95.829748][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 95.834453][ T8736] openvswitch: netlink: Flow actions attr not present in new flow. [ 95.998092][ T10] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 96.017217][ T8740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.022595][ T8740] bond0: (slave rose0): Enslaving as an active interface with an up link [ 96.136708][ T10] usb 5-1: device descriptor read/64, error -32 [ 96.403382][ T10] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 96.446124][ T10] usb 5-1: device descriptor read/8, error -71 [ 96.781514][ T40] audit: type=1400 audit(1742074994.086:598): avc: denied { ioctl } for pid=8770 comm="syz.2.864" path="socket:[21712]" dev="sockfs" ino=21712 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.010893][ T40] audit: type=1400 audit(1742074994.310:599): avc: denied { accept } for pid=8787 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 97.105543][ T8793] overlayfs: failed to clone upperpath [ 97.113000][ T8793] overlayfs: failed to clone upperpath [ 97.123387][ T8793] overlayfs: failed to clone upperpath [ 97.133320][ T8793] overlayfs: failed to clone upperpath [ 97.137166][ T8793] overlayfs: failed to clone upperpath [ 97.141970][ T8793] overlayfs: failed to clone upperpath [ 97.152447][ T8793] overlayfs: failed to clone upperpath [ 97.162991][ T8793] overlayfs: failed to clone upperpath [ 97.224644][ T8804] tmpfs: Unknown parameter '' [ 97.226143][ T8804] tmpfs: Unknown parameter '' [ 97.228758][ T8804] tmpfs: Unknown parameter '' [ 97.230260][ T8804] tmpfs: Unknown parameter '' [ 97.231776][ T8804] tmpfs: Unknown parameter '' [ 97.233300][ T8804] tmpfs: Unknown parameter '' [ 97.234830][ T8804] tmpfs: Unknown parameter '' [ 97.248961][ T8804] tmpfs: Unknown parameter '' [ 97.250499][ T8804] tmpfs: Unknown parameter '' [ 97.252054][ T8804] tmpfs: Unknown parameter '' [ 97.253563][ T8804] tmpfs: Unknown parameter '' [ 97.255054][ T8804] tmpfs: Unknown parameter '' [ 97.256532][ T8804] tmpfs: Unknown parameter '' [ 97.258001][ T8804] tmpfs: Unknown parameter '' [ 97.260357][ T8804] tmpfs: Unknown parameter '' [ 97.261873][ T8804] tmpfs: Unknown parameter '' [ 97.263348][ T8804] tmpfs: Unknown parameter '' [ 97.264882][ T8804] tmpfs: Unknown parameter '' [ 97.266361][ T8804] tmpfs: Unknown parameter '' [ 97.267858][ T8804] tmpfs: Unknown parameter '' [ 97.269824][ T8804] tmpfs: Unknown parameter '' [ 97.271390][ T8804] tmpfs: Unknown parameter '' [ 97.272886][ T8804] tmpfs: Unknown parameter '' [ 97.274403][ T8804] tmpfs: Unknown parameter '' [ 97.275882][ T8804] tmpfs: Unknown parameter '' [ 97.277372][ T8804] tmpfs: Unknown parameter '' [ 97.278843][ T8804] tmpfs: Unknown parameter '' [ 97.280791][ T8804] tmpfs: Unknown parameter '' [ 97.282342][ T8804] tmpfs: Unknown parameter '' [ 97.283838][ T8804] tmpfs: Unknown parameter '' [ 97.285342][ T8804] tmpfs: Unknown parameter '' [ 97.286804][ T8804] tmpfs: Unknown parameter '' [ 97.288287][ T8804] tmpfs: Unknown parameter '' [ 97.416938][ T5993] usb 5-1: USB disconnect, device number 11 [ 97.594731][ T8750] loop2: detected capacity change from 0 to 7 [ 97.606217][ T8750] Dev loop2: unable to read RDB block 7 [ 97.608289][ T8750] loop2: AHDI p1 p2 p3 [ 97.611593][ T8831] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.614340][ T8831] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.616919][ T8831] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.620326][ T8831] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.632794][ T8750] loop2: partition table partially beyond EOD, truncated [ 97.637489][ T8750] loop2: p1 start 1601398130 is beyond EOD, truncated [ 97.639585][ T8750] loop2: p2 start 1702059890 is beyond EOD, truncated [ 97.640160][ T8831] vxlan0: entered promiscuous mode [ 97.655045][ T8831] vxlan0: entered allmulticast mode [ 97.684786][ T8750] GUP no longer grows the stack in syz.1.860 (8750): 400000004000-40000000a000 (400000002000) [ 97.690389][ T8750] CPU: 0 UID: 0 PID: 8750 Comm: syz.1.860 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 97.690414][ T8750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.690424][ T8750] Call Trace: [ 97.690429][ T8750] [ 97.690436][ T8750] dump_stack_lvl+0x16c/0x1f0 [ 97.690485][ T8750] gup_vma_lookup+0x1d2/0x220 [ 97.690515][ T8750] __get_user_pages+0x236/0x36f0 [ 97.690539][ T8750] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 97.690557][ T8750] ? __gup_longterm_locked+0x124/0x1870 [ 97.690576][ T8750] ? __gup_longterm_locked+0x124/0x1870 [ 97.690596][ T8750] ? __pfx___get_user_pages+0x10/0x10 [ 97.690610][ T8750] ? down_read_killable+0xcc/0x380 [ 97.690634][ T8750] ? __pfx_down_read_killable+0x10/0x10 [ 97.690659][ T8750] ? mark_lock+0xb5/0xc60 [ 97.690681][ T8750] ? find_held_lock+0x2d/0x110 [ 97.690701][ T8750] __gup_longterm_locked+0x212/0x1870 [ 97.690718][ T8750] ? __pfx_lock_release+0x10/0x10 [ 97.690741][ T8750] ? trace_lock_acquire+0x14e/0x1f0 [ 97.690766][ T8750] ? __pfx___gup_longterm_locked+0x10/0x10 [ 97.690780][ T8750] ? gup_fast_fallback+0x84c/0x2690 [ 97.690796][ T8750] ? __pfx_lock_release+0x10/0x10 [ 97.690822][ T8750] ? mark_held_locks+0x9f/0xe0 [ 97.690848][ T8750] gup_fast_fallback+0x1802/0x2690 [ 97.690880][ T8750] ? __pfx_gup_fast_fallback+0x10/0x10 [ 97.690902][ T8750] ? hlock_class+0x4e/0x130 [ 97.690923][ T8750] get_user_pages_fast+0xa8/0x100 [ 97.690939][ T8750] ? __pfx_get_user_pages_fast+0x10/0x10 [ 97.690957][ T8750] ? __mutex_trylock_common+0xea/0x250 [ 97.690985][ T8750] __iov_iter_get_pages_alloc+0x8ed/0x2280 [ 97.691017][ T8750] ? trace_contention_end+0xee/0x140 [ 97.691043][ T8750] ? __mutex_lock+0x1cc/0xb10 [ 97.691066][ T8750] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 97.691085][ T8750] ? pipe_lock+0x64/0x80 [ 97.691100][ T8750] ? __fget_files+0x1fc/0x3a0 [ 97.691118][ T8750] ? __pfx___mutex_lock+0x10/0x10 [ 97.691138][ T8750] ? import_ubuf+0x1b6/0x220 [ 97.691160][ T8750] iov_iter_get_pages2+0xa4/0x100 [ 97.691177][ T8750] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 97.691196][ T8750] ? wait_for_space+0x224/0x2d0 [ 97.691229][ T8750] __do_sys_vmsplice+0xa13/0xef0 [ 97.691260][ T8750] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 97.691291][ T8750] ? __pfx_futex_wait+0x10/0x10 [ 97.691314][ T8750] ? restore_sigcontext+0x4d2/0x6a0 [ 97.691367][ T8750] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 97.691393][ T8750] ? do_syscall_64+0xcd/0x250 [ 97.691415][ T8750] do_syscall_64+0xcd/0x250 [ 97.691438][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.691461][ T8750] RIP: 0033:0x7fee2258d169 [ 97.691476][ T8750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.691492][ T8750] RSP: 002b:00007fee23326038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 97.691510][ T8750] RAX: ffffffffffffffda RBX: 00007fee227a5fa0 RCX: 00007fee2258d169 [ 97.691522][ T8750] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000008 [ 97.691541][ T8750] RBP: 00007fee2260e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.691551][ T8750] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 97.691562][ T8750] R13: 0000000000000000 R14: 00007fee227a5fa0 R15: 00007ffcbd275618 [ 97.691586][ T8750] [ 97.788057][ T5965] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 97.795757][ T8831] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.798289][ T8831] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.800783][ T8831] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.803274][ T8831] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.173897][ T8750] loop7: detected capacity change from 0 to 16384 [ 98.302347][ T40] audit: type=1326 audit(1742074995.517:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.0.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3798d169 code=0x7fc00000 [ 98.403284][ T40] audit: type=1400 audit(1742074995.620:601): avc: denied { sys_chroot } for pid=8855 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 98.421611][ T40] audit: type=1400 audit(1742074995.620:602): avc: denied { setgid } for pid=8855 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 98.445912][ T8857] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.449582][ T8857] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.452243][ T8857] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.455101][ T8857] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.461789][ T40] audit: type=1400 audit(1742074995.620:603): avc: denied { setrlimit } for pid=8855 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 98.491640][ T8857] geneve2: entered promiscuous mode [ 98.492170][ T8860] sctp: [Deprecated]: syz.2.890 (pid 8860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.492170][ T8860] Use struct sctp_sack_info instead [ 98.493696][ T8857] geneve2: entered allmulticast mode [ 98.531945][ T8750] loop7: detected capacity change from 16384 to 0 [ 98.537962][ T8860] bridge0: port 3(erspan0) entered blocking state [ 98.539876][ T8860] bridge0: port 3(erspan0) entered disabled state [ 98.541821][ T8860] erspan0: entered allmulticast mode [ 98.543740][ T8860] erspan0: entered promiscuous mode [ 98.545453][ T8860] bridge0: port 3(erspan0) entered blocking state [ 98.547249][ T8860] bridge0: port 3(erspan0) entered forwarding state [ 98.620000][ T8865] program syz.0.891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.791845][ T8868] fuse: blksize only supported for fuseblk [ 99.045677][ T8874] xt_hashlimit: size too large, truncated to 1048576 [ 99.466362][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'. [ 99.603533][ T8868] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.605426][ T8868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.607238][ T8868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.636916][ T8882] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8882 comm=syz.1.896 [ 99.639936][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 99.709239][ T8882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8882 comm=syz.1.896 [ 99.728260][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'. [ 99.730811][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.896'. [ 99.841730][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 99.847418][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 99.851477][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 99.890519][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 99.890530][ T40] audit: type=1400 audit(1742074997.013:608): avc: denied { create } for pid=8908 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 100.079523][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 100.374705][ T40] audit: type=1400 audit(1742074997.462:609): avc: denied { name_bind } for pid=8927 comm="syz.0.908" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 100.832652][ T8932] evm: overlay not supported [ 100.930137][ T8940] netlink: 104 bytes leftover after parsing attributes in process `syz.0.912'. [ 100.992297][ T8942] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 100.995805][ T8942] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 100.997984][ T8942] netlink: 'syz.3.914': attribute type 3 has an invalid length. [ 101.000114][ T8942] NCSI netlink: No device for ifindex 0 [ 101.064424][ T5307] Bluetooth: hci0: command 0x040f tx timeout [ 101.182042][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 101.809062][ T40] audit: type=1400 audit(1742074998.491:610): avc: denied { shutdown } for pid=8956 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.834304][ T5965] Bluetooth: hci3: command 0x040f tx timeout [ 101.836406][ T5965] Bluetooth: hci1: command 0x040f tx timeout [ 102.068680][ T8965] __nla_validate_parse: 1 callbacks suppressed [ 102.068710][ T8965] netlink: 52 bytes leftover after parsing attributes in process `syz.2.922'. [ 102.325883][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 102.332515][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.337319][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.340291][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.347872][ T10] usb 5-1: config 0 descriptor?? [ 102.574413][ T40] audit: type=1400 audit(1742074999.520:611): avc: denied { map } for pid=8971 comm="syz.1.924" path="socket:[22211]" dev="sockfs" ino=22211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 102.583246][ T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 102.695498][ T8976] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 102.698309][ T8976] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 102.709373][ T8976] nfs: Unknown parameter '*' [ 102.869320][ T8982] openvswitch: netlink: Message has 240 unknown bytes. [ 102.937799][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 102.940376][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 102.996014][ T9001] tc_dump_action: action bad kind [ 102.997496][ T40] audit: type=1400 audit(1742074999.913:612): avc: denied { mount } for pid=8999 comm="syz.2.934" name="/" dev="rpc_pipefs" ino=21351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 103.039252][ T57] usb 5-1: USB disconnect, device number 12 [ 103.054477][ T9006] tmpfs: Bad value for 'mpol' [ 103.239250][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'. [ 103.314291][ T40] audit: type=1400 audit(1742075000.213:613): avc: denied { write } for pid=9027 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.375028][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 103.377710][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 103.426676][ T9037] netlink: 140 bytes leftover after parsing attributes in process `syz.2.950'. [ 103.430799][ T40] audit: type=1400 audit(1742075000.325:614): avc: denied { ioctl } for pid=9038 comm="syz.3.949" path="socket:[13260]" dev="sockfs" ino=13260 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 103.435276][ T40] audit: type=1400 audit(1742075000.325:615): avc: denied { watch } for pid=9038 comm="syz.3.949" path="/205/file0" dev="rpc_pipefs" ino=13261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 103.443202][ T9037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.950'. [ 103.446876][ T40] audit: type=1400 audit(1742075000.325:616): avc: denied { unmount } for pid=9038 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 103.481779][ T9041] netlink: 52 bytes leftover after parsing attributes in process `syz.2.951'. [ 103.490996][ T9041] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 103.560300][ T9050] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 103.562975][ T9050] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 103.563453][ T40] audit: type=1400 audit(1742075000.437:617): avc: denied { map } for pid=9052 comm="syz.3.956" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 103.565424][ T9050] netlink: 500 bytes leftover after parsing attributes in process `syz.2.955'. [ 103.756491][ T9074] block device autoloading is deprecated and will be removed. [ 103.772922][ T9092] program syz.0.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.776396][ T9092] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 103.788372][ T9092] bond4: entered promiscuous mode [ 103.791058][ T9092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 103.806377][ T9092] 8021q: adding VLAN 0 to HW filter on device bond5 [ 103.809730][ T9092] bond4: (slave bond5): making interface the new active one [ 103.811836][ T9092] bond5: entered promiscuous mode [ 103.813553][ T9092] bond4: (slave bond5): Enslaving as an active interface with an up link [ 103.825317][ T9101] bridge1: entered promiscuous mode [ 103.826967][ T9101] bridge1: entered allmulticast mode [ 103.857361][ T5307] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 104.047115][ T5307] Bluetooth: hci3: command 0x040f tx timeout [ 104.292996][ T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 104.453324][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 104.458145][ T36] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.461152][ T36] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.464321][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 104.467930][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 104.471068][ T36] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 104.473619][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.485027][ T36] hub 5-1:1.0: bad descriptor, ignoring hub [ 104.486776][ T36] hub 5-1:1.0: probe with driver hub failed with error -5 [ 104.488998][ T36] cdc_wdm 5-1:1.0: skipping garbage [ 104.490802][ T36] cdc_wdm 5-1:1.0: skipping garbage [ 104.493702][ T36] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 104.495435][ T36] cdc_wdm 5-1:1.0: Unknown control protocol [ 104.766166][ T9151] overlayfs: conflicting options: userxattr,metacopy=on [ 104.945948][ T26] usb 5-1: USB disconnect, device number 13 [ 104.997518][ T9178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1541 sclass=netlink_tcpdiag_socket pid=9178 comm=syz.2.997 [ 105.404915][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 105.404931][ T40] audit: type=1326 audit(1742075002.158:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1004" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f301718d169 code=0x0 [ 105.532638][ T9215] tmpfs: Bad value for 'mpol' [ 105.752309][ T9223] atomic_op ffff88803f746998 conn xmit_atomic 0000000000000000 [ 105.755286][ T40] audit: type=1400 audit(1742075002.495:632): avc: denied { listen } for pid=9222 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 105.761723][ T40] audit: type=1400 audit(1742075002.495:633): avc: denied { accept } for pid=9222 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 105.762433][ T9225] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 105.769660][ T9225] netlink: 'syz.2.1010': attribute type 2 has an invalid length. [ 105.957188][ T40] audit: type=1804 audit(1742075002.682:634): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1014" name="/newroot/176/file0" dev="tmpfs" ino=974 res=1 errno=0 [ 105.964092][ T40] audit: type=1400 audit(1742075002.682:635): avc: denied { getopt } for pid=9240 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.966420][ T9240] delete_channel: no stack [ 105.969619][ T40] audit: type=1804 audit(1742075002.682:636): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1014" name="/newroot/176/file0" dev="tmpfs" ino=974 res=1 errno=0 [ 106.134125][ T9251] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9251 comm=syz.3.1018 [ 106.138242][ T40] audit: type=1107 audit(1742075002.850:637): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 106.394285][ T40] audit: type=1400 audit(1742075003.094:638): avc: denied { cmd } for pid=9252 comm="syz.2.1020" path="socket:[23775]" dev="sockfs" ino=23775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.747954][ T9270] syz.1.1025: attempt to access beyond end of device [ 106.747954][ T9270] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 106.752881][ T9270] exFAT-fs (nbd1): unable to read boot sector [ 106.756232][ T9270] exFAT-fs (nbd1): failed to read boot sector [ 106.758703][ T9270] exFAT-fs (nbd1): failed to recognize exfat type [ 106.832896][ T9276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=9276 comm=syz.2.1028 [ 106.841773][ T40] audit: type=1400 audit(1742075003.514:639): avc: denied { accept } for pid=9285 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 106.882419][ T9291] overlayfs: empty lowerdir [ 106.925894][ T9299] nfs4: Unknown parameter 'dev/udmabuf' [ 107.187010][ T40] audit: type=1400 audit(1742075003.832:640): avc: denied { read } for pid=9324 comm="syz.0.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.258085][ T9337] nfs: Unknown parameter '' [ 107.338627][ T9346] netlink: 'syz.2.1050': attribute type 10 has an invalid length. [ 107.469306][ T9350] netlink: 'syz.2.1051': attribute type 9 has an invalid length. [ 107.645299][ T9354] __nla_validate_parse: 15 callbacks suppressed [ 107.645311][ T9354] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1052'. [ 107.839538][ T9356] netlink: 'syz.1.1053': attribute type 12 has an invalid length. [ 107.843906][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1053'. [ 107.850673][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 107.855616][ T9356] veth1_macvtap: left promiscuous mode [ 107.863351][ T9356] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 108.041599][ T9372] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1058'. [ 108.057974][ T9377] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1058'. [ 108.083009][ T9381] netlink: 'syz.1.1060': attribute type 5 has an invalid length. [ 108.085990][ T9381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1060'. [ 108.115283][ T9389] nbd: must specify at least one socket [ 108.119399][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1061'. [ 108.122869][ T9383] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1061'. [ 108.210372][ T9406] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1068'. [ 108.307430][ T9420] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 108.344975][ T9422] bond1: entered promiscuous mode [ 108.346469][ T9422] bond1: entered allmulticast mode [ 108.348113][ T9422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.388330][ T9426] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 108.392514][ T9426] PKCS7: Only support pkcs7_signedData type [ 108.395460][ T9426] fuse: Bad value for 'user_id' [ 108.396900][ T9426] fuse: Bad value for 'user_id' [ 108.421265][ T9431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.421532][ T9422] bond1 (unregistering): Released all slaves [ 108.646330][ T9448] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 108.677473][ T9452] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 108.682269][ T9452] 9pnet_virtio: no channels available for device syz [ 108.684271][ T9452] 9pnet_virtio: no channels available for device syz [ 108.686282][ T9452] 9pnet_virtio: no channels available for device syz [ 108.688353][ T9452] 9pnet_virtio: no channels available for device syz [ 108.690341][ T9452] 9pnet_virtio: no channels available for device syz [ 108.692285][ T9452] 9pnet_virtio: no channels available for device syz [ 108.694272][ T9452] 9pnet_virtio: no channels available for device syz [ 108.696227][ T9452] 9pnet_virtio: no channels available for device syz [ 108.698279][ T9452] 9pnet_virtio: no channels available for device syz [ 108.700257][ T9452] 9pnet_virtio: no channels available for device syz [ 108.702228][ T9452] 9pnet_virtio: no channels available for device syz [ 108.704175][ T9452] 9pnet_virtio: no channels available for device syz [ 108.706141][ T9452] 9pnet_virtio: no channels available for device syz [ 108.708209][ T9452] 9pnet_virtio: no channels available for device syz [ 108.710217][ T9452] 9pnet_virtio: no channels available for device syz [ 108.712382][ T9452] 9pnet_virtio: no channels available for device syz [ 108.714358][ T9452] 9pnet_virtio: no channels available for device syz [ 108.716320][ T9452] 9pnet_virtio: no channels available for device syz [ 108.718309][ T9452] 9pnet_virtio: no channels available for device syz [ 108.720356][ T9452] 9pnet_virtio: no channels available for device syz [ 108.722322][ T9452] 9pnet_virtio: no channels available for device syz [ 108.724281][ T9452] 9pnet_virtio: no channels available for device syz [ 108.726242][ T9452] 9pnet_virtio: no channels available for device syz [ 108.728176][ T9452] 9pnet_virtio: no channels available for device syz [ 108.730245][ T9452] 9pnet_virtio: no channels available for device syz [ 108.732242][ T9452] 9pnet_virtio: no channels available for device syz [ 108.734213][ T9452] 9pnet_virtio: no channels available for device syz [ 108.736172][ T9452] 9pnet_virtio: no channels available for device syz [ 108.738118][ T9452] 9pnet_virtio: no channels available for device syz [ 109.442090][ T9491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1090'. [ 109.551578][ T9500] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 109.556496][ T9503] xt_hashlimit: size too large, truncated to 1048576 [ 109.610108][ T9507] overlayfs: failed to clone upperpath [ 109.637320][ T9510] netlink: 'syz.2.1096': attribute type 12 has an invalid length. [ 109.668216][ T5307] Bluetooth: hci1: Malformed Event: 0x02 [ 109.707806][ T9512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.709844][ T9512] IPv6: NLM_F_CREATE should be set when creating new route [ 110.169006][ T9569] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.171482][ T9569] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.175100][ T9569] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.177550][ T9569] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.181221][ T9569] geneve2: entered promiscuous mode [ 110.182791][ T9569] geneve2: entered allmulticast mode [ 110.252769][ T9588] overlayfs: failed to clone upperpath [ 110.277349][ T9596] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 110.434931][ T9605] cgroup: fork rejected by pids controller in /syz2 [ 110.457876][ T9688] netlink: 'syz.3.1129': attribute type 27 has an invalid length. [ 110.469190][ T9644] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 110.510478][ T9688] bridge0: port 3(syz_tun) entered disabled state [ 110.638894][ T9688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.648743][ T9688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.738150][ T9688] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.740768][ T9688] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.743213][ T9688] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.745685][ T9688] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.815621][ T9688] bridge1: left promiscuous mode [ 110.817176][ T9688] bridge1: left allmulticast mode [ 110.838603][ T9644] 8021q: adding VLAN 0 to HW filter on device bond6 [ 110.849997][T10085] bridge0: port 3(syz_tun) entered blocking state [ 110.851813][T10085] bridge0: port 3(syz_tun) entered forwarding state [ 110.854511][ T70] [ 110.855144][T10085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.855700][ T70] ============================= [ 110.858132][T10085] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.859076][ T70] WARNING: suspicious RCU usage [ 110.862301][ T70] 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 Not tainted [ 110.862310][ T70] ----------------------------- [ 110.867399][ T70] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage! [ 110.870032][ T70] [ 110.870032][ T70] other info that might help us debug this: [ 110.870032][ T70] [ 110.872820][ T70] [ 110.872820][ T70] rcu_scheduler_active = 2, debug_locks = 1 [ 110.875063][ T70] 3 locks held by kworker/u32:3/70: [ 110.876515][ T70] #0: ffff888027d19148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 110.879404][ T70] #1: ffffc90000d7fd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 110.882785][ T70] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 110.885831][ T70] [ 110.885831][ T70] stack backtrace: [ 110.887467][ T70] CPU: 1 UID: 0 PID: 70 Comm: kworker/u32:3 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 110.887480][ T70] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.887487][ T70] Workqueue: bond0 bond_mii_monitor [ 110.887503][ T70] Call Trace: [ 110.887506][ T70] [ 110.887511][ T70] dump_stack_lvl+0x16c/0x1f0 [ 110.887526][ T70] lockdep_rcu_suspicious+0x210/0x3c0 [ 110.887541][ T70] dev_activate+0x457/0x12b0 [ 110.887555][ T70] ? linkwatch_sync_dev+0x179/0x210 [ 110.887565][ T70] ? __pfx_lock_release+0x10/0x10 [ 110.887579][ T70] ? __pfx_dev_activate+0x10/0x10 [ 110.887592][ T70] ? mark_held_locks+0x9f/0xe0 [ 110.887607][ T70] linkwatch_do_dev+0x13d/0x160 [ 110.887621][ T70] linkwatch_sync_dev+0x181/0x210 [ 110.887632][ T70] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 110.887647][ T70] ethtool_op_get_link+0x1d/0x70 [ 110.887662][ T70] bond_check_dev_link+0x197/0x490 [ 110.887674][ T70] ? __pfx_bond_check_dev_link+0x10/0x10 [ 110.887693][ T70] bond_mii_monitor+0x3c1/0x2d90 [ 110.887712][ T70] ? __pfx_bond_mii_monitor+0x10/0x10 [ 110.887727][ T70] ? rcu_is_watching+0x12/0xc0 [ 110.887740][ T70] ? lock_acquire+0x2f/0xb0 [ 110.887753][ T70] ? process_one_work+0x921/0x1ba0 [ 110.887768][ T70] process_one_work+0x9c5/0x1ba0 [ 110.887785][ T70] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 110.887799][ T70] ? __pfx_process_one_work+0x10/0x10 [ 110.887816][ T70] ? assign_work+0x1a0/0x250 [ 110.887829][ T70] worker_thread+0x6c8/0xf00 [ 110.887847][ T70] ? __pfx_worker_thread+0x10/0x10 [ 110.887861][ T70] kthread+0x3af/0x750 [ 110.887873][ T70] ? __pfx_kthread+0x10/0x10 [ 110.887884][ T70] ? lock_acquire+0x2f/0xb0 [ 110.887900][ T70] ? __pfx_kthread+0x10/0x10 [ 110.887912][ T70] ret_from_fork+0x45/0x80 [ 110.887925][ T70] ? __pfx_kthread+0x10/0x10 [ 110.887937][ T70] ret_from_fork_asm+0x1a/0x30 [ 110.887954][ T70] [ 110.888043][ T70] [ 110.942829][ T70] ============================= [ 110.944181][ T70] WARNING: suspicious RCU usage [ 110.945558][ T70] 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 Not tainted [ 110.947529][ T70] ----------------------------- [ 110.948889][ T70] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage! [ 110.951380][ T70] [ 110.951380][ T70] other info that might help us debug this: [ 110.951380][ T70] [ 110.954452][ T70] [ 110.954452][ T70] rcu_scheduler_active = 2, debug_locks = 1 [ 110.956926][ T70] 3 locks held by kworker/u32:3/70: [ 110.958363][ T70] #0: ffff888027d19148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 110.961226][ T70] #1: ffffc90000d7fd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 110.964646][ T70] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 110.967293][ T70] [ 110.967293][ T70] stack backtrace: [ 110.968931][ T70] CPU: 1 UID: 0 PID: 70 Comm: kworker/u32:3 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 110.968943][ T70] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.968950][ T70] Workqueue: bond0 bond_mii_monitor [ 110.968966][ T70] Call Trace: [ 110.968970][ T70] [ 110.968974][ T70] dump_stack_lvl+0x16c/0x1f0 [ 110.968990][ T70] lockdep_rcu_suspicious+0x210/0x3c0 [ 110.969006][ T70] transition_one_qdisc+0x1d4/0x210 [ 110.969019][ T70] dev_activate+0x211/0x12b0 [ 110.969032][ T70] ? __pfx_lock_release+0x10/0x10 [ 110.969046][ T70] ? __pfx_dev_activate+0x10/0x10 [ 110.969058][ T70] ? mark_held_locks+0x9f/0xe0 [ 110.969074][ T70] linkwatch_do_dev+0x13d/0x160 [ 110.969085][ T70] linkwatch_sync_dev+0x181/0x210 [ 110.969097][ T70] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 110.969112][ T70] ethtool_op_get_link+0x1d/0x70 [ 110.969126][ T70] bond_check_dev_link+0x197/0x490 [ 110.969139][ T70] ? __pfx_bond_check_dev_link+0x10/0x10 [ 110.969158][ T70] bond_mii_monitor+0x3c1/0x2d90 [ 110.969176][ T70] ? __pfx_bond_mii_monitor+0x10/0x10 [ 110.969191][ T70] ? rcu_is_watching+0x12/0xc0 [ 110.969205][ T70] ? lock_acquire+0x2f/0xb0 [ 110.969217][ T70] ? process_one_work+0x921/0x1ba0 [ 110.969232][ T70] process_one_work+0x9c5/0x1ba0 [ 110.969249][ T70] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 110.969264][ T70] ? __pfx_process_one_work+0x10/0x10 [ 110.969281][ T70] ? assign_work+0x1a0/0x250 [ 110.969294][ T70] worker_thread+0x6c8/0xf00 [ 110.969312][ T70] ? __pfx_worker_thread+0x10/0x10 [ 110.969326][ T70] kthread+0x3af/0x750 [ 110.969338][ T70] ? __pfx_kthread+0x10/0x10 [ 110.969350][ T70] ? lock_acquire+0x2f/0xb0 [ 110.969370][ T70] ? __pfx_kthread+0x10/0x10 [ 110.969382][ T70] ret_from_fork+0x45/0x80 [ 110.969396][ T70] ? __pfx_kthread+0x10/0x10 [ 110.969408][ T70] ret_from_fork_asm+0x1a/0x30 [ 110.969425][ T70] [ 110.969494][ T70] [ 111.026783][ T70] ============================= [ 111.028190][ T70] WARNING: suspicious RCU usage [ 111.029592][ T70] 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 Not tainted [ 111.031528][ T70] ----------------------------- [ 111.032912][ T70] ./include/linux/rtnetlink.h:162 suspicious rcu_dereference_protected() usage! [ 111.035372][ T70] [ 111.035372][ T70] other info that might help us debug this: [ 111.035372][ T70] [ 111.038979][ T70] [ 111.038979][ T70] rcu_scheduler_active = 2, debug_locks = 1 [ 111.042080][ T70] 3 locks held by kworker/u32:3/70: [ 111.044109][ T70] #0: ffff888027d19148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 111.047589][ T70] #1: ffffc90000d7fd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 111.051107][ T70] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 111.053890][ T70] [ 111.053890][ T70] stack backtrace: [ 111.055554][ T70] CPU: 2 UID: 0 PID: 70 Comm: kworker/u32:3 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 111.055566][ T70] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.055574][ T70] Workqueue: bond0 bond_mii_monitor [ 111.055590][ T70] Call Trace: [ 111.055594][ T70] [ 111.055598][ T70] dump_stack_lvl+0x16c/0x1f0 [ 111.055614][ T70] lockdep_rcu_suspicious+0x210/0x3c0 [ 111.055630][ T70] dev_activate+0x7eb/0x12b0 [ 111.055644][ T70] ? __pfx_lock_release+0x10/0x10 [ 111.055658][ T70] ? __pfx_dev_activate+0x10/0x10 [ 111.055671][ T70] ? mark_held_locks+0x9f/0xe0 [ 111.055686][ T70] linkwatch_do_dev+0x13d/0x160 [ 111.055697][ T70] linkwatch_sync_dev+0x181/0x210 [ 111.055708][ T70] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 111.055723][ T70] ethtool_op_get_link+0x1d/0x70 [ 111.055737][ T70] bond_check_dev_link+0x197/0x490 [ 111.055751][ T70] ? __pfx_bond_check_dev_link+0x10/0x10 [ 111.055770][ T70] bond_mii_monitor+0x3c1/0x2d90 [ 111.055789][ T70] ? __pfx_bond_mii_monitor+0x10/0x10 [ 111.055803][ T70] ? rcu_is_watching+0x12/0xc0 [ 111.055816][ T70] ? lock_acquire+0x2f/0xb0 [ 111.055829][ T70] ? process_one_work+0x921/0x1ba0 [ 111.055844][ T70] process_one_work+0x9c5/0x1ba0 [ 111.055861][ T70] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 111.055876][ T70] ? __pfx_process_one_work+0x10/0x10 [ 111.055893][ T70] ? assign_work+0x1a0/0x250 [ 111.055906][ T70] worker_thread+0x6c8/0xf00 [ 111.055934][ T70] ? __pfx_worker_thread+0x10/0x10 [ 111.055953][ T70] kthread+0x3af/0x750 [ 111.055969][ T70] ? __pfx_kthread+0x10/0x10 [ 111.055986][ T70] ? lock_acquire+0x2f/0xb0 [ 111.056008][ T70] ? __pfx_kthread+0x10/0x10 [ 111.056026][ T70] ret_from_fork+0x45/0x80 [ 111.056046][ T70] ? __pfx_kthread+0x10/0x10 [ 111.056066][ T70] ret_from_fork_asm+0x1a/0x30 [ 111.056095][ T70] [ 111.056154][ T70] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 111.111143][ T70] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 70, name: kworker/u32:3 [ 111.113715][ T70] preempt_count: 0, expected: 0 [ 111.115173][ T70] RCU nest depth: 1, expected: 0 [ 111.116663][ T70] 3 locks held by kworker/u32:3/70: [ 111.118163][ T70] #0: ffff888027d19148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 111.121100][ T70] #1: ffffc90000d7fd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 111.124510][ T70] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 111.127213][ T70] CPU: 2 UID: 0 PID: 70 Comm: kworker/u32:3 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 111.127225][ T70] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.127232][ T70] Workqueue: bond0 bond_mii_monitor [ 111.127248][ T70] Call Trace: [ 111.127252][ T70] [ 111.127256][ T70] dump_stack_lvl+0x16c/0x1f0 [ 111.127271][ T70] __might_resched+0x3c0/0x5e0 [ 111.127288][ T70] ? __pfx___might_resched+0x10/0x10 [ 111.127306][ T70] down_read+0x73/0x330 [ 111.127321][ T70] ? __pfx_down_read+0x10/0x10 [ 111.127335][ T70] ? dev_map_notification+0x6a/0xaf0 [ 111.127347][ T70] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.127370][ T70] wireless_nlevent_flush+0x1b/0x100 [ 111.127383][ T70] wext_netdev_notifier_call+0xe/0x20 [ 111.127394][ T70] notifier_call_chain+0xb7/0x410 [ 111.127406][ T70] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 111.127420][ T70] call_netdevice_notifiers_info+0xbe/0x140 [ 111.127433][ T70] netdev_state_change+0x115/0x150 [ 111.127444][ T70] ? __pfx_netdev_state_change+0x10/0x10 [ 111.127456][ T70] ? mark_held_locks+0x9f/0xe0 [ 111.127472][ T70] linkwatch_do_dev+0x12b/0x160 [ 111.127483][ T70] linkwatch_sync_dev+0x181/0x210 [ 111.127494][ T70] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 111.127509][ T70] ethtool_op_get_link+0x1d/0x70 [ 111.127523][ T70] bond_check_dev_link+0x197/0x490 [ 111.127537][ T70] ? __pfx_bond_check_dev_link+0x10/0x10 [ 111.127556][ T70] bond_mii_monitor+0x3c1/0x2d90 [ 111.127574][ T70] ? __pfx_bond_mii_monitor+0x10/0x10 [ 111.127590][ T70] ? rcu_is_watching+0x12/0xc0 [ 111.127603][ T70] ? lock_acquire+0x2f/0xb0 [ 111.127615][ T70] ? process_one_work+0x921/0x1ba0 [ 111.127630][ T70] process_one_work+0x9c5/0x1ba0 [ 111.127648][ T70] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 111.127662][ T70] ? __pfx_process_one_work+0x10/0x10 [ 111.127679][ T70] ? assign_work+0x1a0/0x250 [ 111.127693][ T70] worker_thread+0x6c8/0xf00 [ 111.127711][ T70] ? __pfx_worker_thread+0x10/0x10 [ 111.127725][ T70] kthread+0x3af/0x750 [ 111.127738][ T70] ? __pfx_kthread+0x10/0x10 [ 111.127749][ T70] ? lock_acquire+0x2f/0xb0 [ 111.127764][ T70] ? __pfx_kthread+0x10/0x10 [ 111.127777][ T70] ret_from_fork+0x45/0x80 [ 111.127790][ T70] ? __pfx_kthread+0x10/0x10 [ 111.127802][ T70] ret_from_fork_asm+0x1a/0x30 [ 111.127819][ T70] [ 111.127823][ T70] [ 111.202696][ T70] ============================= [ 111.204069][ T70] [ BUG: Invalid wait context ] [ 111.205417][ T70] 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 Tainted: G W [ 111.207808][ T70] ----------------------------- [ 111.209222][ T70] kworker/u32:3/70 is trying to lock: [ 111.210804][ T70] ffffffff8fee2450 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100 [ 111.213418][ T70] other info that might help us debug this: [ 111.215086][ T70] context-{5:5} [ 111.216093][ T70] 3 locks held by kworker/u32:3/70: [ 111.217589][ T70] #0: ffff888027d19148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 111.220545][ T70] #1: ffffc90000d7fd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 111.224032][ T70] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 111.226747][ T70] stack backtrace: [ 111.227827][ T70] CPU: 2 UID: 0 PID: 70 Comm: kworker/u32:3 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 111.227841][ T70] Tainted: [W]=WARN [ 111.227845][ T70] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.227852][ T70] Workqueue: bond0 bond_mii_monitor [ 111.227868][ T70] Call Trace: [ 111.227872][ T70] [ 111.227876][ T70] dump_stack_lvl+0x116/0x1f0 [ 111.227890][ T70] __lock_acquire+0x878/0x3c40 [ 111.227906][ T70] ? __pfx___lock_acquire+0x10/0x10 [ 111.227921][ T70] lock_acquire.part.0+0x11b/0x380 [ 111.227935][ T70] ? wireless_nlevent_flush+0x1b/0x100 [ 111.227948][ T70] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 111.227962][ T70] ? rcu_is_watching+0x12/0xc0 [ 111.227972][ T70] ? trace_lock_acquire+0x14e/0x1f0 [ 111.227983][ T70] ? __might_resched+0x3cc/0x5e0 [ 111.227998][ T70] ? wireless_nlevent_flush+0x1b/0x100 [ 111.228009][ T70] ? lock_acquire+0x2f/0xb0 [ 111.228022][ T70] ? wireless_nlevent_flush+0x1b/0x100 [ 111.228033][ T70] down_read+0x9a/0x330 [ 111.228048][ T70] ? wireless_nlevent_flush+0x1b/0x100 [ 111.228059][ T70] ? __pfx_down_read+0x10/0x10 [ 111.228072][ T70] ? dev_map_notification+0x6a/0xaf0 [ 111.228084][ T70] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.228107][ T70] wireless_nlevent_flush+0x1b/0x100 [ 111.228124][ T70] wext_netdev_notifier_call+0xe/0x20 [ 111.228141][ T70] notifier_call_chain+0xb7/0x410 [ 111.228158][ T70] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 111.228171][ T70] call_netdevice_notifiers_info+0xbe/0x140 [ 111.228183][ T70] netdev_state_change+0x115/0x150 [ 111.228193][ T70] ? __pfx_netdev_state_change+0x10/0x10 [ 111.228204][ T70] ? mark_held_locks+0x9f/0xe0 [ 111.228217][ T70] linkwatch_do_dev+0x12b/0x160 [ 111.228227][ T70] linkwatch_sync_dev+0x181/0x210 [ 111.228237][ T70] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 111.228253][ T70] ethtool_op_get_link+0x1d/0x70 [ 111.228267][ T70] bond_check_dev_link+0x197/0x490 [ 111.228279][ T70] ? __pfx_bond_check_dev_link+0x10/0x10 [ 111.228293][ T70] bond_mii_monitor+0x3c1/0x2d90 [ 111.228309][ T70] ? __pfx_bond_mii_monitor+0x10/0x10 [ 111.228324][ T70] ? rcu_is_watching+0x12/0xc0 [ 111.228334][ T70] ? lock_acquire+0x2f/0xb0 [ 111.228352][ T70] ? process_one_work+0x921/0x1ba0 [ 111.228366][ T70] process_one_work+0x9c5/0x1ba0 [ 111.228380][ T70] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 111.228394][ T70] ? __pfx_process_one_work+0x10/0x10 [ 111.228408][ T70] ? assign_work+0x1a0/0x250 [ 111.228420][ T70] worker_thread+0x6c8/0xf00 [ 111.228434][ T70] ? __pfx_worker_thread+0x10/0x10 [ 111.228447][ T70] kthread+0x3af/0x750 [ 111.228459][ T70] ? __pfx_kthread+0x10/0x10 [ 111.228470][ T70] ? lock_acquire+0x2f/0xb0 [ 111.228484][ T70] ? __pfx_kthread+0x10/0x10 [ 111.228495][ T70] ret_from_fork+0x45/0x80 [ 111.228509][ T70] ? __pfx_kthread+0x10/0x10 [ 111.228520][ T70] ret_from_fork_asm+0x1a/0x30 [ 111.228534][ T70] [ 111.311000][T10085] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 111.314415][T10085] chnl_net:chnl_net_open(): state disconnected [ 111.317775][T10085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.324537][T10144] 8021q: adding VLAN 0 to HW filter on device bond6 [ 111.327483][T10144] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 111.331320][T10144] bond6: (slave vti0): Error -95 calling set_mac_address [ 111.348908][ T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 111.351514][ T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave VM DIAGNOSIS: 21:43:28 Registers: info registers vcpu 0 CPU#0 RAX=00000000001340df RBX=0000000000000000 RCX=ffffffff8b578469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd36ba0 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90626510 R15=0000000000000000 RIP=ffffffff8b57984f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3017f36f98 CR3=0000000050308000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301737c488 00007f301737c480 00007f301737c478 00007f301737c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3017edd100 00007f301737c440 00007f3017370004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301737c498 00007f301737c490 00007f301737c488 00007f301737c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=000000000000001d RCX=ffffffff8199bcda RDX=ffff888020c5a440 RSI=ffffffff8199bcc6 RDI=0000000000000001 RBP=1ffff920001afee8 RSP=ffffc90000d7f730 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=0000000000000001 R13=0000000000000200 R14=ffff888027fa8000 R15=ffffc90000d7f7f8 RIP=ffffffff8199bcc8 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fee203f5f98 CR3=000000004a8be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4871ddc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f301720f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000230 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000113a7b RBX=0000000000000002 RCX=ffffffff8b578469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd36ba0 RBP=ffffed1003ad2488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d692440 R14=ffffffff90626510 R15=0000000000000000 RIP=ffffffff8b57984f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fee2260f9de CR3=0000000053fac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a61bfa3f61e4a1cc 5c547b2b12a55981 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d0b60d6bc1ae7d9 404a3367394b5f16 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d10d65688d5ef0c a9dbb157b200a2bf ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d41b12ff9793752 4685b271091b9c48 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000051c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400000000 0000000000000044 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47c2802847d26712 47e1838600000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000004786cb56 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aea9f3cf3801b49b 3e346a161fa8651c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a831b105ffc5654f 8b5e1767ffda88f7 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000ef5a7 RBX=0000000000000003 RCX=ffffffff8b578469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd36ba0 RBP=ffffed1003ad2910 RSP=ffffc900001b7e08 R8 =0000000000000001 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d694880 R14=ffffffff90626510 R15=0000000000000000 RIP=ffffffff8b57984f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3017f37d58 CR3=0000000053fac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca0540f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca0540f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca0540f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca0540f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca0540f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca0540f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca0557c488 00007fca0557c480 00007fca0557c478 00007fca0557c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca060dd100 00007fca0557c440 00007fca05570004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca0557c498 00007fca0557c490 00007fca0557c488 00007fca0557c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000