last executing test programs: 18.080389869s ago: executing program 0 (id=248): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='udf\x00', 0x100202e, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000140)={0x5, 0x0, [{0x1, 0x5, 0x3, 0xea, 0x7ff}, {0x1f26bdc859193130, 0x8, 0x3, 0x8, 0xce}, {0x2, 0x7984, 0x3, 0x3, 0x8}, {0x2, 0x7, 0x3, 0x2924, 0xf}, {0x80000000, 0x8, 0x2, 0x5, 0x1}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000040)=@id, 0x10) shutdown(r7, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x10b) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x50009405, &(0x7f0000000180)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0) 17.821160939s ago: executing program 0 (id=251): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x801) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 17.820132669s ago: executing program 0 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x2, 0x6, 0x1101, 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000200360002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$getflags(r4, 0x40a) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="440f20c03509000000440f22c0410f01c8450f01c566baf80cb827099d8aef66bafc0cec66baf80cb838229a8eef66bafc0cb808000000ef673eec2642d30248b84d9af29b560a9d140f23c00f21f83501000b000f23f80f300f01c5", 0x5c}], 0x1, 0x5a, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/35) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x3, 0x0, 0xffff, 0x4000000000000, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2000, 0x0, r7, 0x0, 0x440, 0x880000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchown(r1, r7, r8) r9 = creat(&(0x7f0000000480)='./file0\x00', 0x89) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) lseek(r3, 0x9, 0x1) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a000100000000000000000008001300"/36], 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2, &(0x7f0000000380)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x6}], &(0x7f00000001c0)='GPL\x00', 0x8000, 0x93, &(0x7f0000000200)=""/147, 0x40f00, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x10, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='neigh_update\x00', r11, 0x0, 0x3}, 0x18) 17.589159679s ago: executing program 0 (id=257): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000019580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 17.460491983s ago: executing program 0 (id=261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad", 0x2d4}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000102) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r5 = socket$inet6(0xa, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000d0429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000c018c82ec28e6a4883200012800b0001006272696467650000100002800c001e"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c, 0x80800) shutdown(r7, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400000, 0x0) close(r5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44041}, 0x4000014) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$SOCK_DESTROY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x15, 0x400, 0x0, 0x800, {0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x400c8d0}, 0x2000c010) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 16.613614702s ago: executing program 0 (id=284): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x0, 0x70ad29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x301100, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x110, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 4.09115957s ago: executing program 3 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x44040200) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20000000}, &(0x7f0000000100)=0x108) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x51e5, 0xd78, 0x9a, 0xb6c6, 0x26a], 0x1, 0x0, 0x0, [{}]}, 0x88) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x17}]}}}]}, 0x3c}}, 0x40840) 3.559880513s ago: executing program 3 (id=472): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="d56bf834a2b44456ca4517521374126f0ebae217284a6e2b02e4ad6c262cf56c7671edc7f2b7cee7944afa32d35b58bae12ffa962c02297dc83e0af09ec4b8a3da600062603e23ce64a297de0b393ef0a78ee83c802d609902ab49343092d07d1b37fde780d26e61a7f34830f0307ceb23a2d18f4d51c6dea0c62b358bf912383c1f", 0x82, 0x20000000, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x0, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x8, 0x722, 0xe72, 0x8, 0x8, 0x2e, 0xc, {0xffff945a, 0x1}, 0x3, 0xed}}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) 3.559160613s ago: executing program 3 (id=473): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4140, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00001b00f8000000b702000014000000b703000000000000850000008b000000bf0900000000000055090100000000009500000000200000bf91000000000000b7020000000000008500000000000000b7000000000000009500"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r2, 0x0, 0x154) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106, 0x3}}, 0x20) r3 = socket(0x2, 0x1, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000180)=@ethtool_ts_info}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='zonefs\x00', 0x2000493, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x100000000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) 3.051018204s ago: executing program 3 (id=479): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x810, 0xffffffffffffffff, 0x0) (async) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x810, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0xd55, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) (async) r3 = syz_io_uring_setup(0xd55, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0xa, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x228}, 0x0, {0x0, r6}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001ffffcffffff0000000000000000e7ad633d3a5ef60b85cb6900dcb14a1edfc82508943c8cda0056fe9c3637bf8c386b09570ef0d5c7c1d5f8b9dd5fbdc2e9539c519e560a693a6154112575254720d0626016485119e31724d38fcf9eaa8cdb81bf5ab6753f5a48f3f04167cfa91c15ed67eba0385bb54300", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067726574617000001400028006000e000100000008000700ac14142808000a00", @ANYRES32=r9, @ANYBLOB], 0x4c}}, 0x0) 3.001157804s ago: executing program 3 (id=480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x3c, 0xd, 0x6, 0x305, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0xff, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x0, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0xc, 0xf}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x8, 0x4, 0xa3, 0x20, 0x4}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x7, [{0x94, &(0x7f0000000380)=@string={0x94, 0x3, "a4774b80afcceac5c4db999e97e0bed14841f5e013a044491e9140423d1719e3f0de17081fb2089141653e9ce3e32109133dfd36646ef06eaf24920357b25b0251cb1820f90718c7fdb266ff36356a75711c5a5d62d86b7106e698fa3e1074046f73aa7fa8cc7815a8af76a0ad5645e3fc20fc8cf7e2b6ac4c25460e637d491352bebafdfeac7cf913e6ce80357f6b536da8"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc09}}, {0x97, &(0x7f0000000480)=@string={0x97, 0x3, "a559cc2bed047355eb90c0c186b3727a7572d271f73471d74483e3dd18e58b144ec87916b924b054c674d2c287c2d1b93acdd6289d1274c70d8f557c1b1bf4141330cdc2f6611da60666a750e233907a386ee350c33225acb195e758ef93d48b6877ab6fb839312339699bb1920dde0d09f49d4b83e164f089025958cc4461c795de120cf9e1b03f4df8da4a01cc968162acb7cfe2"}}, {0xc9, &(0x7f0000000540)=ANY=[@ANYBLOB="c9031aafdae6dbbe3607bb1ec15ab6a95cb15007cfce9acb7176b7053d226f8c158684887727c920210865c414e16c3d13b1247872fe393c98acd5c6e55aa3871078553b2c4ec12f623807257d0968502aaedda4d79e09c810d579221a2fb626c5e934b6609e8cbd48145e8f68b86180834613e5c2668fb980805a99817123c9b90388c2d4dcfaa1b9c6ce53a90a135c63df08c4bf78c2d9c40827d12637695e8837a2ac4218d3dcd1ea1dc6b7a5a163f25bba96376bdb431d7b000000000000000000"]}, {0x78, &(0x7f0000000640)=@string={0x78, 0x3, "3e72f2df102e4117a2bc2b5312448e80d7a0bb86c0e8442651a498dfb236134bd9e84db71d59efd66ecb563025f1134dfd173aaac9bf8702ad2b7927f7dd5f74738b8dbbbd59256fa74202028e7cea21655fdb6682bd0692bd1ee3d7fe2ef4dc611df295927565100d98c30e6ab182f69924cdc0455a"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3806}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x426}}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1.579791928s ago: executing program 32 (id=284): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x0, 0x70ad29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x301100, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x110, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 1.169346402s ago: executing program 1 (id=503): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x13, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x31) 961.202762ms ago: executing program 1 (id=505): prctl$PR_SET_UNALIGN(0x6, 0x1) prctl$PR_SET_UNALIGN(0x6, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x1) prctl$PR_SET_UNALIGN(0x6, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x1) prctl$PR_SET_UNALIGN(0x6, 0x3) prctl$PR_SET_UNALIGN(0x6, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) prctl$PR_SET_UNALIGN(0x6, 0x3) prctl$PR_SET_UNALIGN(0x6, 0x3) prctl$PR_SET_UNALIGN(0x6, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x1) prctl$PR_SET_UNALIGN(0x6, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) prctl$PR_SET_UNALIGN(0x6, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) prctl$PR_SET_UNALIGN(0x6, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) prctl$PR_SET_UNALIGN(0x6, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 960.544506ms ago: executing program 1 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd2b, 0xa6, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) 880.944358ms ago: executing program 1 (id=509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010600e60000002400742d6c696e6b00000c00078008000300ffff00"/50], 0x38}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYRESHEX=r4], 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0467d75e965e7660549f1f264ee1abc32fffa4"], 0x102) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x1ff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYBLOB="0af00400ff01fd4060000b"], 0x12) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x98, r7, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x211, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x24, 0x4}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x40, 0x2, 0x4, 0x0, {0x3, 0xc6b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x300, 0x4, 0xc}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}}, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20048804}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000200170a0503001b04000000000000004006"], 0x14}}, 0x4000000) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$packet(0x11, 0x2, 0x300) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r13, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 819.715003ms ago: executing program 1 (id=512): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x2}, 0x1c) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x15) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000104000000000000000000000000a823c4ac867198311cc43ff8f523a1707396470cf045b2f6d1ba64f6c290035a26d864d6602b0bbe7adde2dfc1136bb06f91727cb802d32e008b8514ddb82b7f1ea8e59f67f95c55b1a7e56b4be41ff17f7edf03b68ec1903d84bb6ed5f635ce1c1695d5d59e3587b99d6154e2f4bab157385dfc4e31e320cae600"/157, @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}}, 0x0) 741.137216ms ago: executing program 1 (id=513): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2, 0x400}, 0x1c) listen(r0, 0x100101) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) accept4(r0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 669.773892ms ago: executing program 2 (id=515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="0affffffffff0180c200000008060001080006"], 0x0) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@ll={0x11, 0x6, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="8b729f4e15e37d3cdd5b4677bd27f347f198a55fb09af29799a702", 0x1b}, {&(0x7f0000000100)="1a0dd8e02116e6adf112b58fb3cf7523458ca4a8590ff8bf43e4234be363d0f48efd67d20af81e710b09cac0fb9442c367caac2d4e685d0d17ad8f1f82ed4d0fc4afb4dcdfa5c23c8f7ab4c94e8d1de787d1d6fcfa6442295b8864daec6ea7eae0c1d8e8b0842a66103754417c5beadf8ebb36", 0x73}, {&(0x7f0000000180)="cb4e2609d34fd4b98b86466cec5aa1de909c36fd3a1c001950c762842081fb0c12c82a7564a5645ff42963fee7923a423ff3d276b874961978a70ee0ef19213db8526887e0bb5b57", 0x48}, {&(0x7f0000000200)="63fd22ae09607085ad0a16ab7c8d95f0e86c9e4c044d071cd593757cc19f1ee33816f87b5c002a8641f35e43eded6813c3f1696e65e3bdaded6f138f762841373d3abfc08871d4f02ff946460e0b7710da35dc1977ce8d05805e280313d53f50da9effe55b2bb850a78496ef2a98f0453676f0aa9d1bbb8947c0f94aba67921e86d99bce0a6dac3b8845e6a66d7923ff7cb1e4000aeba8a78e8cfe559ae645c27224ccae305e0e11ea2eef422f5bef2058067cb69f3b8f141f884aa1b7a901514cd810", 0xc3}], 0x4, &(0x7f0000000700)=[{0x88, 0x10f, 0x2, "9779db9a956fe49a7e420f02350699b8c331967768547bdc087092f2be392dfb3b1a6648dece85c34f97a06b474cd9d97a95ae4c0d045b53ebedf7e19a2d9ec1bf82bdb0f648512cc2db3fa42f45d8a868c7a1c154b2c9cbd2a2c54c7e1cf1fa0fca8a980052c92f272f28640f055715dd134b98de3a18"}, {0x80, 0x101, 0x39, "19d9e079fc325654d41cc7a3920be1f5a27a06c0c79a4cdbc7d2a536bc3a3986106ab6df9df5c60cd0a9163fbf8098f766a2077007e15ad90f1e7efb7fa55f43d43047a226e09331d85dd3fbe6b8dcbb5c1d3fcecabe2cd2661a7edca6efa1f3353611521324eaed872a1074d4104798"}], 0x108}, 0x4010) 470.626911ms ago: executing program 2 (id=516): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd2b, 0xa6, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) 469.008042ms ago: executing program 2 (id=517): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0xfdbb, 0x0, 0x0, &(0x7f0000000440)=""/217, 0xcd}, 0x218}], 0x40000ee, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0xfdbb, 0x0, 0x0, &(0x7f0000000440)=""/217, 0xcd}, 0x218}], 0x40000ee, 0x2, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (async) 369.87164ms ago: executing program 2 (id=518): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb0", 0x9}], 0x1}}], 0x1, 0x20008000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080)={0x9}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f00000000c0)={0x0, 0x4018, [0x9, 0x8000000000000001, 0xd, 0x9, 0x4, 0x4]}) 214.939754ms ago: executing program 2 (id=519): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x27) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x29, 0x5, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4050) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x200005) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 205.530825ms ago: executing program 2 (id=520): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (async) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) clock_getres(0xfffffffffffffffe, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f00000007c0)) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@remote, @in6=@empty, 0x4000, 0x0, 0x4e24, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "42c1e92e943c4bb2f323b84cbe9f307eca71efe211236d3d5c3a29a491b582a599b07e15b88b01e18c250043cf910da9384a57647a74943883418c2c648e6884c4"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) r3 = socket$kcm(0x1e, 0x4, 0x0) close(r0) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) 106.452904ms ago: executing program 4 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@multicast2]}]}}}]}, 0x3c}}, 0x8004) 658.226µs ago: executing program 4 (id=521): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0xe00}, 0x10) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r0, r1, 0x0) write$qrtrtun(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/184, 0xb8}], 0x7}, 0x7}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000001840)=""/232, 0xe8}, {&(0x7f0000001940)=""/249, 0xf9}, {&(0x7f00000001c0)=""/20, 0x14}], 0x3, &(0x7f0000001a40)=""/193, 0xc1}, 0x8}, {{&(0x7f0000001b40)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001bc0)=""/216, 0xd8}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/230, 0xe6}, {&(0x7f0000002dc0)=""/108, 0x6c}], 0x4, &(0x7f0000002e40)=""/247, 0xf7}, 0x7f}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000002f40)=""/148, 0x94}, {&(0x7f0000003000)=""/111, 0x6f}, {&(0x7f0000003080)=""/186, 0xba}, {&(0x7f0000003140)=""/215, 0xd7}, {&(0x7f0000003240)=""/209, 0xd1}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/3, 0x3}], 0x7}, 0x2}, {{&(0x7f0000004400)=@tipc=@id, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004480)=""/230, 0xe6}, {&(0x7f0000004580)=""/96, 0x60}, {&(0x7f0000004600)=""/206, 0xce}, {&(0x7f0000004700)=""/55, 0x37}, {&(0x7f0000004740)=""/88, 0x58}], 0x5, &(0x7f0000004840)=""/4096, 0x1000}, 0x8}], 0x5, 0x22, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 0s ago: executing program 3 (id=522): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) llistxattr(0x0, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x2, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x0, [@remote]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast2}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c03ea01bdfc892c7a5bf19b2413defc024eac573e656b5a8c0461a93675efb3046d40c38a55e7b3c770b20b832e7a897c91aa8b85440fc54187e43eb30ddb288d9e4785849f36cfdadb7cf51ee822bfd25eca045d8754d46ab7e6b78e036ef7a40bdabf7ae3c6976491353b8267e464bae17572672e63214faa56e0c6fb080ec0b4e5de891de5e1cd8a72801bdb9a56386f0434620e36f33fbded17cb28dee252614bbe828081", @ANYRES64=r5, @ANYBLOB="e8833dce83613900a69085e4", @ANYRES32=r4, @ANYRES64=r6], 0x0) mount$binder(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d6178c0788394d82f26e98d3781a924ec9a3a332c733b2abd94f6956cff915576c1b604ed16e46955e34fb7fa77ebd07a231966aa2058"]) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) kernel console output (not intermixed with test programs): [ 38.106655][ T40] audit: type=1400 audit(1746078080.570:80): avc: denied { write } for pid=5839 comm="sh" path="pipe:[2755]" dev="pipefs" ino=2755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.115716][ T40] audit: type=1400 audit(1746078080.570:81): avc: denied { rlimitinh } for pid=5839 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.123605][ T40] audit: type=1400 audit(1746078080.570:82): avc: denied { siginh } for pid=5839 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.636956][ T40] audit: type=1400 audit(1746078081.110:83): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.643558][ T40] audit: type=1400 audit(1746078081.110:84): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.650429][ T40] audit: type=1400 audit(1746078081.110:85): avc: denied { open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.657406][ T40] audit: type=1400 audit(1746078081.110:86): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:20806' (ED25519) to the list of known hosts. [ 40.179284][ T40] audit: type=1400 audit(1746078082.650:87): avc: denied { name_bind } for pid=5844 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.225575][ T5846] cgroup: Unknown subsys name 'net' [ 42.364791][ T5846] cgroup: Unknown subsys name 'cpuset' [ 42.371039][ T5846] cgroup: Unknown subsys name 'rlimit' [ 42.603256][ T5887] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.367235][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.773394][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 46.773405][ T40] audit: type=1400 audit(1746078089.250:105): avc: denied { execmem } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.997638][ T40] audit: type=1400 audit(1746078089.470:106): avc: denied { create } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.005790][ T40] audit: type=1400 audit(1746078089.470:107): avc: denied { read write } for pid=5930 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.013309][ T40] audit: type=1400 audit(1746078089.470:108): avc: denied { open } for pid=5930 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.021031][ T40] audit: type=1400 audit(1746078089.480:109): avc: denied { ioctl } for pid=5930 comm="syz-executor" path="socket:[834]" dev="sockfs" ino=834 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.032480][ T5288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.035809][ T5288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.038980][ T5288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.052170][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.055037][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.057715][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.060356][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.063241][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.065896][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.071703][ T5933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.078941][ T40] audit: type=1400 audit(1746078089.550:110): avc: denied { read } for pid=5930 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.083178][ T5933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.085556][ T40] audit: type=1400 audit(1746078089.550:111): avc: denied { open } for pid=5930 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.088484][ T5933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.094716][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.097587][ T40] audit: type=1400 audit(1746078089.560:112): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.099949][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.100950][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.108878][ T5288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.111595][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.113769][ T5288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.117166][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.127622][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.209831][ T40] audit: type=1400 audit(1746078089.690:113): avc: denied { module_request } for pid=5930 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.236182][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 47.400239][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.402924][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.405238][ T5930] bridge_slave_0: entered allmulticast mode [ 47.407809][ T5930] bridge_slave_0: entered promiscuous mode [ 47.411805][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.414045][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.416432][ T5930] bridge_slave_1: entered allmulticast mode [ 47.419044][ T5930] bridge_slave_1: entered promiscuous mode [ 47.480514][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.505379][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.529432][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 47.567616][ T5930] team0: Port device team_slave_0 added [ 47.576926][ T5930] team0: Port device team_slave_1 added [ 47.624899][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 47.666103][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.668494][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.677282][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.682769][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.684997][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.694111][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.911270][ T5930] hsr_slave_0: entered promiscuous mode [ 47.914459][ T5930] hsr_slave_1: entered promiscuous mode [ 47.921840][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.924781][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.927671][ T5934] bridge_slave_0: entered allmulticast mode [ 47.931743][ T5934] bridge_slave_0: entered promiscuous mode [ 47.959136][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.961408][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.963797][ T5938] bridge_slave_0: entered allmulticast mode [ 47.966332][ T5938] bridge_slave_0: entered promiscuous mode [ 47.968911][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 47.976146][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.978418][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.980934][ T5934] bridge_slave_1: entered allmulticast mode [ 47.983523][ T5934] bridge_slave_1: entered promiscuous mode [ 48.004897][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.007891][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.011013][ T5938] bridge_slave_1: entered allmulticast mode [ 48.014833][ T5938] bridge_slave_1: entered promiscuous mode [ 48.143212][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.170742][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.187291][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.192581][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.283203][ T5934] team0: Port device team_slave_0 added [ 48.347074][ T5934] team0: Port device team_slave_1 added [ 48.350885][ T5938] team0: Port device team_slave_0 added [ 48.373828][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.376915][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.380289][ T5941] bridge_slave_0: entered allmulticast mode [ 48.384102][ T5941] bridge_slave_0: entered promiscuous mode [ 48.414862][ T5938] team0: Port device team_slave_1 added [ 48.416956][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.420061][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.422461][ T5941] bridge_slave_1: entered allmulticast mode [ 48.426059][ T5941] bridge_slave_1: entered promiscuous mode [ 48.507102][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.516702][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.519160][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.527865][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.532733][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.535241][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.543966][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.548602][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.569148][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.572164][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.582669][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.587871][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.590806][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.601510][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.630110][ T5941] team0: Port device team_slave_0 added [ 48.668177][ T5941] team0: Port device team_slave_1 added [ 48.769946][ T5938] hsr_slave_0: entered promiscuous mode [ 48.772994][ T5938] hsr_slave_1: entered promiscuous mode [ 48.775760][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.778952][ T5938] Cannot create hsr debugfs directory [ 48.810369][ T5934] hsr_slave_0: entered promiscuous mode [ 48.812677][ T5934] hsr_slave_1: entered promiscuous mode [ 48.814761][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.817127][ T5934] Cannot create hsr debugfs directory [ 48.819168][ T5930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.830473][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.833064][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.844393][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.849684][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.852621][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.860931][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.871954][ T5930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.878739][ T5930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.934398][ T5930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.028531][ T5941] hsr_slave_0: entered promiscuous mode [ 49.030854][ T5941] hsr_slave_1: entered promiscuous mode [ 49.033002][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.035384][ T5941] Cannot create hsr debugfs directory [ 49.080351][ T5940] Bluetooth: hci0: command tx timeout [ 49.160234][ T5940] Bluetooth: hci2: command tx timeout [ 49.160246][ T67] Bluetooth: hci1: command tx timeout [ 49.169723][ T5940] Bluetooth: hci3: command tx timeout [ 49.313663][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.321574][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.327399][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.341611][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.393392][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.401570][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.413427][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.419560][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.442565][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.486149][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.490730][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.494496][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.498771][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.516856][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.520027][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.524955][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.537186][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.540167][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.576210][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.622694][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.647950][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.651148][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.672950][ T40] audit: type=1400 audit(1746078092.150:114): avc: denied { sys_module } for pid=5930 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.691448][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.694491][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.724838][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.733626][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.766552][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.772557][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.783722][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.786706][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.800085][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.802457][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.807091][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.810276][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.818430][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.828104][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.831160][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.873028][ T5938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.876436][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.915718][ T5930] veth0_vlan: entered promiscuous mode [ 49.926307][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.929834][ T5930] veth1_vlan: entered promiscuous mode [ 49.964160][ T5930] veth0_macvtap: entered promiscuous mode [ 49.972401][ T5930] veth1_macvtap: entered promiscuous mode [ 49.982698][ T5934] veth0_vlan: entered promiscuous mode [ 49.993086][ T5934] veth1_vlan: entered promiscuous mode [ 49.997522][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.002515][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.009049][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.015549][ T5930] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.018590][ T5930] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.022461][ T5930] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.026145][ T5930] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.070488][ T5934] veth0_macvtap: entered promiscuous mode [ 50.078937][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.086495][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.088952][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.090115][ T5934] veth1_macvtap: entered promiscuous mode [ 50.114269][ T5938] veth0_vlan: entered promiscuous mode [ 50.120394][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.122918][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.129646][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.133286][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.137127][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.144445][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.147713][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.152224][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.155634][ T5938] veth1_vlan: entered promiscuous mode [ 50.157600][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.161432][ T5934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.165363][ T5934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.168049][ T5934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.170949][ T5934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.206158][ T5941] veth0_vlan: entered promiscuous mode [ 50.222190][ T5941] veth1_vlan: entered promiscuous mode [ 50.239690][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.240047][ T5938] veth0_macvtap: entered promiscuous mode [ 50.242744][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.275880][ T5938] veth1_macvtap: entered promiscuous mode [ 50.275889][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.282817][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.292633][ T5941] veth0_macvtap: entered promiscuous mode [ 50.297586][ T5941] veth1_macvtap: entered promiscuous mode [ 50.301365][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.305546][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.308790][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.313442][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.317154][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.323628][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.327235][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.331731][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.334941][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.338606][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.348307][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5'. [ 50.354380][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.357146][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.359937][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.362631][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.375053][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.378722][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.382689][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.386176][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.389199][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.393828][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.399155][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.407391][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.412582][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.412605][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.412618][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.412626][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.412637][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.415135][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.427144][ T5941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.448589][ T5941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.448607][ T5941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.448622][ T5941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470197][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.473789][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.502742][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.506179][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.515230][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.519192][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.549755][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.552156][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.628610][ T6009] binder: 6008:6009 ioctl c0306201 200000000140 returned -22 [ 50.632624][ T6009] netlink: zone id is out of range [ 50.634994][ T6009] netlink: zone id is out of range [ 50.637227][ T6009] netlink: zone id is out of range [ 50.641476][ T6009] netlink: zone id is out of range [ 50.641533][ T6014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.643653][ T6009] netlink: zone id is out of range [ 50.648422][ T6014] ata1.00: invalid command format 71 [ 50.649205][ T6009] netlink: zone id is out of range [ 50.653591][ T6009] netlink: zone id is out of range [ 50.655476][ T6009] netlink: zone id is out of range [ 50.657102][ T6009] netlink: zone id is out of range [ 50.723286][ T6016] Zero length message leads to an empty skb [ 50.797672][ T6022] xt_hashlimit: size too large, truncated to 1048576 [ 50.879835][ T835] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.961103][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 51.030460][ T835] usb 6-1: Using ep0 maxpacket: 8 [ 51.035573][ T835] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 51.038905][ T835] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.043891][ T835] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.047827][ T835] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.051980][ T835] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.057190][ T835] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.060929][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.159547][ T5940] Bluetooth: hci0: command tx timeout [ 51.239469][ T67] Bluetooth: hci2: command tx timeout [ 51.239476][ T5940] Bluetooth: hci3: command tx timeout [ 51.249534][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.249610][ T5940] Bluetooth: hci1: command tx timeout [ 51.273076][ T835] usb 6-1: usb_control_msg returned -32 [ 51.274996][ T835] usbtmc 6-1:16.0: can't read capabilities [ 51.401344][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 51.405262][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 51.408458][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 51.411426][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.417359][ T6033] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 51.422944][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.572671][ T6045] xt_cluster: node mask cannot exceed total number of nodes [ 51.627247][ T835] usb 7-1: USB disconnect, device number 2 [ 51.827202][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 51.827213][ T40] audit: type=1400 audit(1746078094.300:205): avc: denied { getopt } for pid=6060 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.837684][ T40] audit: type=1400 audit(1746078094.300:206): avc: denied { setopt } for pid=6060 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.870772][ T40] audit: type=1400 audit(1746078094.350:207): avc: denied { append } for pid=6064 comm="syz.3.24" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.870938][ T6065] random: crng reseeded on system resumption [ 51.877940][ T40] audit: type=1400 audit(1746078094.350:208): avc: denied { open } for pid=6064 comm="syz.3.24" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.993149][ T40] audit: type=1400 audit(1746078094.470:209): avc: denied { ioctl } for pid=6064 comm="syz.3.24" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.000513][ T40] audit: type=1400 audit(1746078094.480:210): avc: denied { create } for pid=6064 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.006635][ T40] audit: type=1400 audit(1746078094.480:211): avc: denied { getopt } for pid=6064 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.020848][ T40] audit: type=1400 audit(1746078094.500:212): avc: denied { search } for pid=6067 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.029361][ T40] audit: type=1400 audit(1746078094.500:213): avc: denied { read } for pid=6068 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.038227][ T40] audit: type=1400 audit(1746078094.500:214): avc: denied { open } for pid=6068 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.131391][ T6071] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 52.245567][ T6077] syz.2.25: attempt to access beyond end of device [ 52.245567][ T6077] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 52.245724][ T6077] syz.2.25: attempt to access beyond end of device [ 52.245724][ T6077] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 52.257732][ T6077] Mount JFS Failure: -5 [ 52.257752][ T6077] jfs_mount failed w/return code = -5 [ 52.552875][ T6090] netlink: 'syz.3.29': attribute type 23 has an invalid length. [ 52.656350][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 52.667722][ T6099] netlink: 72 bytes leftover after parsing attributes in process `syz.3.34'. [ 52.677035][ T6099] overlayfs: failed to decode file handle (len=1, type=251, flags=0, err=-22) [ 52.730344][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.38'. [ 52.803391][ T6118] process 'syz.2.40' launched './file0' with NULL argv: empty string added [ 53.068449][ T6169] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.46'. [ 53.072625][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 53.241086][ T5940] Bluetooth: hci0: command tx timeout [ 53.321849][ T5940] Bluetooth: hci2: command tx timeout [ 53.321964][ T67] Bluetooth: hci1: command tx timeout [ 53.321982][ T5288] Bluetooth: hci3: command tx timeout [ 53.356832][ T6176] delete_channel: no stack [ 53.448356][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 53.455679][ T6187] erofs (device loop3): cannot find valid erofs superblock [ 53.696976][ T6203] /dev/sg0: Can't lookup blockdev [ 53.751197][ T63] usb 6-1: USB disconnect, device number 2 [ 53.776466][ T6210] random: crng reseeded on system resumption [ 53.825351][ T6214] netlink: 448 bytes leftover after parsing attributes in process `syz.3.60'. [ 53.830088][ T6214] unsupported nla_type 14345 [ 53.937737][ T6210] Restarting kernel threads ... done. [ 53.944228][ T6223] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 53.948147][ T6223] overlayfs: missing 'lowerdir' [ 53.961867][ T6223] ntfs3: Unknown parameter 'discardl-subdev#' [ 53.968741][ T6223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.62'. [ 54.005690][ T6232] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 54.021231][ T6232] team0: Port device geneve0 added [ 54.073442][ T6234] syz.3.65: attempt to access beyond end of device [ 54.073442][ T6234] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 54.078425][ T6234] XFS (nbd3): SB validate failed with error -5. [ 54.103158][ T6247] bond1 (unregistering): Released all slaves [ 54.290383][ T6265] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.325832][ T6270] tls_set_device_offload_rx: netdev not found [ 54.492860][ T6285] "syz.2.78" (6285) uses obsolete ecb(arc4) skcipher [ 54.493564][ T6290] tun0: tun_chr_ioctl cmd 1074025675 [ 54.497261][ T6290] tun0: persist enabled [ 54.499697][ T6290] tun0: tun_chr_ioctl cmd 1074025675 [ 54.501908][ T6290] tun0: persist disabled [ 54.536770][ T6294] netlink: 'syz.1.80': attribute type 28 has an invalid length. [ 54.539183][ T6294] netlink: 'syz.1.80': attribute type 3 has an invalid length. [ 54.542001][ T6292] netlink: 'syz.1.80': attribute type 28 has an invalid length. [ 54.544404][ T6292] netlink: 'syz.1.80': attribute type 3 has an invalid length. [ 54.836331][ T6311] tipc: Started in network mode [ 54.837958][ T6311] tipc: Node identity , cluster identity 4711 [ 54.840331][ T6311] tipc: Failed to obtain node identity [ 54.842118][ T6311] tipc: Enabling of bearer rejected, failed to enable media [ 55.032824][ T6319] nvme_fabrics: missing parameter 'transport=%s' [ 55.034975][ T6319] nvme_fabrics: missing parameter 'nqn=%s' [ 55.036167][ T6322] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.319663][ T67] Bluetooth: hci0: command tx timeout [ 55.409357][ T67] Bluetooth: hci3: command tx timeout [ 55.409522][ T5940] Bluetooth: hci2: command tx timeout [ 55.624678][ T6357] fuse: Invalid rootmode [ 55.771559][ T6366] ======================================================= [ 55.771559][ T6366] WARNING: The mand mount option has been deprecated and [ 55.771559][ T6366] and is ignored by this kernel. Remove the mand [ 55.771559][ T6366] option from the mount to silence this warning. [ 55.771559][ T6366] ======================================================= [ 55.785180][ T6366] option changes via remount are deprecated (pid=6365 comm=syz.0.105) [ 55.824264][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.827420][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.834229][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.837300][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.841954][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.844773][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.847666][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.851834][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.854299][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.857459][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.860621][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.863720][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.866785][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.869361][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.872076][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.875135][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.878223][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.883733][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.886788][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.889942][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.893170][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.896220][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.899407][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.902480][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.905342][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.907788][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.910199][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.912510][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.914961][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.917862][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.920929][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.924022][ T5974] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 55.931663][ T5974] hid-generic 0001:0000:0000.0002: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 56.079315][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.188265][ T6375] capability: warning: `syz.1.109' uses deprecated v2 capabilities in a way that may be insecure [ 56.194819][ T6375] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 56.198901][ T6375] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.203784][ T6375] overlayfs: failed to get uuid (13/file1, err=-13); falling back to uuid=null. [ 56.241007][ T10] usb 5-1: config 0 has no interfaces? [ 56.243480][ T10] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 56.247541][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.257949][ T10] usb 5-1: config 0 descriptor?? [ 56.277366][ T6380] xt_hashlimit: size too large, truncated to 1048576 [ 56.469124][ T9] hid-generic 0009:0001:0007.0003: unknown main item tag 0x4 [ 56.474633][ T9] hid-generic 0009:0001:0007.0003: item fetching failed at offset 5/111 [ 56.478507][ T9] hid-generic 0009:0001:0007.0003: probe with driver hid-generic failed with error -22 [ 56.489223][ T5970] usb 5-1: USB disconnect, device number 2 [ 56.539347][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.679397][ T10] usb 6-1: device descriptor read/64, error -71 [ 56.829549][ T40] kauditd_printk_skb: 183 callbacks suppressed [ 56.829561][ T40] audit: type=1400 audit(1746078099.310:398): avc: denied { bind } for pid=6353 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.837528][ T40] audit: type=1400 audit(1746078099.310:399): avc: denied { name_bind } for pid=6353 comm="syz.3.100" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.844347][ T40] audit: type=1400 audit(1746078099.310:400): avc: denied { node_bind } for pid=6353 comm="syz.3.100" saddr=::ffff:0.0.0.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 56.853663][ T40] audit: type=1400 audit(1746078099.310:401): avc: denied { write } for pid=6353 comm="syz.3.100" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.862876][ T40] audit: type=1400 audit(1746078099.310:402): avc: denied { connect } for pid=6353 comm="syz.3.100" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.873649][ T40] audit: type=1400 audit(1746078099.310:403): avc: denied { name_connect } for pid=6353 comm="syz.3.100" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.881000][ T40] audit: type=1400 audit(1746078099.350:404): avc: denied { read } for pid=6353 comm="syz.3.100" path="socket:[9125]" dev="sockfs" ino=9125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.929401][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 57.060120][ T40] audit: type=1400 audit(1746078099.540:405): avc: denied { name_bind } for pid=6388 comm="syz.0.113" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 57.066738][ T40] audit: type=1400 audit(1746078099.540:406): avc: denied { node_bind } for pid=6388 comm="syz.0.113" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 57.079397][ T10] usb 6-1: device descriptor read/64, error -71 [ 57.104397][ T6396] __nla_validate_parse: 19 callbacks suppressed [ 57.104411][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'. [ 57.107126][ T40] audit: type=1400 audit(1746078099.580:407): avc: denied { name_connect } for pid=6393 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 57.114273][ T6395] netlink: 'syz.3.114': attribute type 4 has an invalid length. [ 57.129648][ T6395] netlink: 'syz.3.114': attribute type 4 has an invalid length. [ 57.145756][ T6398] batadv_slave_1: entered promiscuous mode [ 57.152446][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 57.157007][ T6399] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(37) [ 57.159959][ T6399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.166566][ T6399] vhci_hcd vhci_hcd.0: Device attached [ 57.172239][ T6400] vhci_hcd: unknown pdu 1 [ 57.175540][ T6156] vhci_hcd: stop threads [ 57.177356][ T6156] vhci_hcd: release socket [ 57.179367][ T6156] vhci_hcd: disconnect device [ 57.188435][ T6399] batadv_slave_1: left promiscuous mode [ 57.190328][ T10] usb usb6-port1: attempt power cycle [ 57.225470][ T6409] pimreg: entered allmulticast mode [ 57.507968][ T6422] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.123'. [ 57.539554][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 57.543973][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.124'. [ 57.546803][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.124'. [ 57.559846][ T10] usb 6-1: device descriptor read/8, error -71 [ 57.726193][ T6441] ALSA: mixer_oss: invalid OSS volume '' [ 57.727047][ T6442] tipc: Started in network mode [ 57.730290][ T6442] tipc: Node identity d1, cluster identity 4711 [ 57.732260][ T6442] tipc: Node number set to 209 [ 57.734258][ T6442] tipc: Cannot configure node identity twice [ 57.809326][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 57.842963][ T10] usb 6-1: device descriptor read/8, error -71 [ 57.949929][ T10] usb usb6-port1: unable to enumerate USB device [ 58.268104][ T6487] netlink: 'syz.0.134': attribute type 12 has an invalid length. [ 58.270679][ T6487] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.134'. [ 58.361138][ T6491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.135'. [ 58.382929][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 58.420107][ T6500] netlink: 'syz.2.138': attribute type 21 has an invalid length. [ 58.438216][ T6500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6500 comm=syz.2.138 [ 58.634989][ T6507] XFS (nullb0): Invalid superblock magic number [ 58.702233][ T6520] overlayfs: failed to resolve './file0': -2 [ 58.706011][ T6523] syz.0.144: attempt to access beyond end of device [ 58.706011][ T6523] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 58.710586][ T6523] exFAT-fs (nbd0): unable to read boot sector [ 58.712673][ T6523] exFAT-fs (nbd0): failed to read boot sector [ 58.714572][ T6523] exFAT-fs (nbd0): failed to recognize exfat type [ 58.720988][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 58.748949][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 58.749504][ T6523] netlink: 'syz.0.144': attribute type 13 has an invalid length. [ 58.751848][ T6524] netlink: 'syz.0.144': attribute type 13 has an invalid length. [ 58.895776][ T6546] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 58.898183][ T6546] net_ratelimit: 799 callbacks suppressed [ 58.898190][ T6546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.903568][ T6546] netlink: 'syz.0.151': attribute type 7 has an invalid length. [ 58.933014][ T6549] netlink: 'syz.0.152': attribute type 1 has an invalid length. [ 59.060648][ T6550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.063191][ T6549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.070494][ T6552] ip6erspan0: entered promiscuous mode [ 59.072444][ T6552] ip6erspan0: entered allmulticast mode [ 59.076848][ T6552] bond1: (slave ip6erspan0): making interface the new active one [ 59.078695][ T6554] Cannot find add_set index 3 as target [ 59.081387][ T6552] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 59.085017][ T6556] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 59.085228][ T6554] netlink: ct family unspecified [ 59.089483][ T6554] openvswitch: netlink: Actions may not be safe on all matching packets [ 59.112935][ T6559] tipc: Started in network mode [ 59.115013][ T6559] tipc: Node identity ac14140f, cluster identity 4711 [ 59.118636][ T6559] tipc: New replicast peer: 255.255.255.255 [ 59.123313][ T6559] tipc: Enabled bearer , priority 10 [ 59.143789][ T6569] netlink: zone id is out of range [ 59.202164][ T6576] syz.3.160 uses obsolete (PF_INET,SOCK_PACKET) [ 59.389312][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.539330][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 59.543581][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 59.547840][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 59.550167][ T5974] e1000 0000:00:06.0 eth0: Reset adapter [ 59.557696][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 59.560958][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.563187][ T6599] 9pnet_fd: Insufficient options for proto=fd [ 59.563782][ T10] usb 7-1: Product: syz [ 59.566974][ T10] usb 7-1: Manufacturer: syz [ 59.568438][ T10] usb 7-1: SerialNumber: syz [ 59.573281][ T10] usb 7-1: config 0 descriptor?? [ 59.621144][ T6604] ubi31: attaching mtd0 [ 59.624951][ T6604] ubi31: scanning is finished [ 59.626474][ T6604] ubi31: empty MTD device detected [ 59.649740][ T5974] e1000 0000:00:06.0 eth0: Reset adapter [ 59.708791][ T6604] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 59.711398][ T6604] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 59.713780][ T6604] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 59.716010][ T6604] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 59.718492][ T6604] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 59.720867][ T6604] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 59.723798][ T6604] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2883374040 [ 59.727322][ T6604] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 59.731170][ T6605] ubi31: background thread "ubi_bgt31d" started, PID 6605 [ 59.759790][ T5974] e1000 0000:00:06.0 eth0: Reset adapter [ 59.829448][ T10] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 59.833886][ T10] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 60.120721][ T5991] tipc: Node number set to 2886997007 [ 60.759364][ T67] Bluetooth: hci3: command 0x0405 tx timeout [ 61.881457][ T5970] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 62.157024][ T5970] usb 7-1: USB disconnect, device number 3 [ 63.109565][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 63.109579][ T40] audit: type=1400 audit(1746078105.580:493): avc: denied { sys_chroot } for pid=6622 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 63.120428][ T40] audit: type=1400 audit(1746078105.580:494): avc: denied { setgid } for pid=6622 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 63.128821][ T40] audit: type=1400 audit(1746078105.580:495): avc: denied { setrlimit } for pid=6623 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 63.136925][ T40] audit: type=1400 audit(1746078105.580:496): avc: denied { setrlimit } for pid=6622 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 70.430556][ T40] audit: type=1400 audit(1746078112.910:497): avc: denied { read } for pid=6647 comm="syz.2.172" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.436855][ T6646] netlink: 'syz.1.171': attribute type 17 has an invalid length. [ 70.439933][ T40] audit: type=1400 audit(1746078112.910:498): avc: denied { open } for pid=6647 comm="syz.2.172" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.451586][ T40] audit: type=1400 audit(1746078112.920:499): avc: denied { connect } for pid=6648 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.459906][ T40] audit: type=1400 audit(1746078112.920:500): avc: denied { create } for pid=6644 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.467729][ T40] audit: type=1400 audit(1746078112.920:501): avc: denied { connect } for pid=6644 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.475993][ T40] audit: type=1400 audit(1746078112.950:502): avc: denied { mount } for pid=6651 comm="syz.1.174" name="/" dev="autofs" ino=10923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 70.476562][ T6652] Cannot find set identified by id 0 to match [ 70.486610][ T40] audit: type=1400 audit(1746078112.960:503): avc: denied { create } for pid=6643 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 70.495814][ T40] audit: type=1400 audit(1746078112.960:504): avc: denied { read } for pid=6643 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 70.508099][ T40] audit: type=1400 audit(1746078112.980:505): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 70.544088][ T40] audit: type=1400 audit(1746078113.020:506): avc: denied { name_bind 0x1000000 } for pid=6661 comm="syz.1.175" path="socket:[13443]" dev="sockfs" ino=13443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 70.829354][ T5972] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 70.959402][ T5972] usb 6-1: device descriptor read/64, error -71 [ 71.209314][ T5972] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 71.252732][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.255625][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.349512][ T5972] usb 6-1: device descriptor read/64, error -71 [ 71.461921][ T5972] usb usb6-port1: attempt power cycle [ 71.535297][ T6691] overlayfs: conflicting lowerdir path [ 71.548094][ T6694] netlink: 'syz.2.188': attribute type 5 has an invalid length. [ 71.548187][ T6688] hfs: unable to load iocharset "io#harset" [ 71.590133][ T6696] __nla_validate_parse: 3 callbacks suppressed [ 71.590150][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 71.799681][ T5972] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 71.829837][ T5972] usb 6-1: device descriptor read/8, error -71 [ 72.079374][ T5972] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 72.101260][ T5972] usb 6-1: device descriptor read/8, error -71 [ 72.109321][ T63] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 72.209671][ T5972] usb usb6-port1: unable to enumerate USB device [ 72.259355][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 72.262934][ T63] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 72.266254][ T63] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.270255][ T63] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.273950][ T63] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.277074][ T63] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.282770][ T63] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.285578][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.493063][ T63] usb 8-1: usb_control_msg returned -32 [ 72.494896][ T63] usbtmc 8-1:16.0: can't read capabilities [ 72.520345][ T6726] netlink: 46 bytes leftover after parsing attributes in process `syz.2.199'. [ 72.624976][ T6732] syz.2.202: attempt to access beyond end of device [ 72.624976][ T6732] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 72.630712][ T6732] syz.2.202: attempt to access beyond end of device [ 72.630712][ T6732] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 72.635819][ T6732] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 72.641952][ T6732] syz.2.202: attempt to access beyond end of device [ 72.641952][ T6732] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 72.647154][ T6732] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 72.652682][ T6732] syz.2.202: attempt to access beyond end of device [ 72.652682][ T6732] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 72.658099][ T6732] syz.2.202: attempt to access beyond end of device [ 72.658099][ T6732] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 72.663709][ T6732] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 72.667746][ T6732] syz.2.202: attempt to access beyond end of device [ 72.667746][ T6732] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 72.673388][ T6732] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 72.677727][ T6732] syz.2.202: attempt to access beyond end of device [ 72.677727][ T6732] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 72.683139][ T6732] syz.2.202: attempt to access beyond end of device [ 72.683139][ T6732] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 72.688435][ T6732] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 72.692785][ T6732] syz.2.202: attempt to access beyond end of device [ 72.692785][ T6732] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 72.698125][ T6732] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 72.702439][ T6732] syz.2.202: attempt to access beyond end of device [ 72.702439][ T6732] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 72.707721][ T6732] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 72.711984][ T6732] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 72.715934][ T6732] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 72.768398][ T6156] Bluetooth: hci4: Frame reassembly failed (-84) [ 72.772577][ T6735] Bluetooth: hci4: Frame reassembly failed (-84) [ 72.775199][ T6735] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.686432][ T6745] netlink: 'syz.1.205': attribute type 1 has an invalid length. [ 73.688991][ T6745] NCSI netlink: No device for ifindex 0 [ 73.837065][ T6753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6753 comm=syz.1.209 [ 74.052186][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 74.469421][ T5972] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 74.629320][ T5972] usb 6-1: Using ep0 maxpacket: 32 [ 74.633328][ T5972] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 74.636848][ T5972] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 74.640512][ T5972] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 74.644227][ T5972] usb 6-1: config 1 has no interface number 0 [ 74.646759][ T5972] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.651268][ T5972] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 74.656541][ T5972] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 74.660435][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.670636][ T5972] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 74.716920][ T6772] fuse: Bad value for 'fd' [ 74.839534][ T67] Bluetooth: hci4: command 0xfc11 tx timeout [ 74.842949][ T5940] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 74.846765][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.220'. [ 74.846785][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.220'. [ 74.874805][ T835] usb 8-1: USB disconnect, device number 2 [ 75.127679][ T6794] xt_hashlimit: size too large, truncated to 1048576 [ 75.179925][ T6797] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 75.182318][ T6798] sch_fq: defrate 0 ignored. [ 75.203792][ T6797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.207378][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.226'. [ 75.219443][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 75.226804][ T6797] vlan2: entered allmulticast mode [ 75.228469][ T6797] bond1: entered allmulticast mode [ 75.234279][ T6802] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 75.236509][ T5972] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 75.394171][ T6820] netlink: 'syz.2.233': attribute type 7 has an invalid length. [ 75.407278][ T6820] warning: `syz.2.233' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.501102][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 75.501113][ T40] audit: type=1400 audit(1746078117.980:553): avc: denied { name_bind } for pid=6823 comm="syz.3.234" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 75.513680][ T40] audit: type=1400 audit(1746078117.990:554): avc: denied { create } for pid=6832 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.519173][ T40] audit: type=1400 audit(1746078117.990:555): avc: denied { bind } for pid=6832 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.555834][ T6837] futex_wake_op: syz.0.238 tries to shift op by 32; fix this program [ 75.595812][ T40] audit: type=1400 audit(1746078118.070:556): avc: denied { read } for pid=6839 comm="syz.0.239" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 75.602876][ T40] audit: type=1400 audit(1746078118.070:557): avc: denied { open } for pid=6839 comm="syz.0.239" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 75.610523][ T40] audit: type=1400 audit(1746078118.070:558): avc: denied { ioctl } for pid=6839 comm="syz.0.239" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 75.678262][ T5970] usb 6-1: USB disconnect, device number 11 [ 75.690019][ T5970] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 75.718906][ T6846] veth0_to_team: entered allmulticast mode [ 75.744070][ T40] audit: type=1400 audit(1746078118.220:559): avc: denied { getopt } for pid=6847 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 75.847610][ T40] audit: type=1400 audit(1746078118.320:560): avc: denied { wake_alarm } for pid=6856 comm="syz.0.244" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.879940][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 75.916950][ T40] audit: type=1400 audit(1746078118.390:561): avc: denied { watch watch_reads } for pid=6862 comm="syz.2.247" path="pipe:[6175]" dev="pipefs" ino=6175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 75.925249][ T40] audit: type=1400 audit(1746078118.390:562): avc: denied { setopt } for pid=6864 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.941538][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.945108][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.004654][ T6873] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 76.068058][ T6869] mmap: syz.0.248 (6869) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.283302][ T6883] netlink: 'syz.0.252': attribute type 2 has an invalid length. [ 76.285532][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 76.338460][ T6883] kvm: MONITOR instruction emulated as NOP! [ 76.365557][ T5940] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 76.367637][ T5940] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 76.538835][ T6907] /dev/sg0: Can't lookup blockdev [ 76.555558][ T6911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.259'. [ 76.606267][ T6917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.261'. [ 76.619017][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.262'. [ 76.623063][ T6919] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 76.726698][ T6923] Bluetooth: MGMT ver 1.23 [ 76.797978][ T6928] netlink: 68 bytes leftover after parsing attributes in process `syz.3.264'. [ 77.044687][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 77.117911][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 77.162373][ T6948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.273'. [ 77.167914][ T6945] batman_adv: batadv0: Adding interface: dummy0 [ 77.170663][ T6945] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.181561][ T6945] batman_adv: batadv0: Interface activated: dummy0 [ 77.245084][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.276'. [ 77.245955][ T6961] input: syz0 as /devices/virtual/input/input6 [ 77.331918][ T6967] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 77.389715][ T6971] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 77.395087][ T6971] openvswitch: netlink: Multiple metadata blocks provided [ 77.414564][ T6973] netlink: 'syz.2.282': attribute type 11 has an invalid length. [ 77.417258][ T6973] netlink: 224 bytes leftover after parsing attributes in process `syz.2.282'. [ 77.438637][ T6975] Bluetooth: hci4: Frame reassembly failed (-84) [ 77.445038][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 77.448205][ T6976] netlink: 'syz.2.282': attribute type 11 has an invalid length. [ 77.448226][ T6976] netlink: 224 bytes leftover after parsing attributes in process `syz.2.282'. [ 77.499473][ T5970] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 77.652012][ T5970] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.659375][ T5970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 77.663902][ T5970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 77.667837][ T5970] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 77.677768][ T5970] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 77.682601][ T5970] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 77.685891][ T5970] usb 8-1: Manufacturer: syz [ 77.692552][ T5970] usb 8-1: config 0 descriptor?? [ 77.732918][ T6985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6985 comm=syz.2.287 [ 77.939572][ T5970] rc_core: IR keymap rc-hauppauge not found [ 77.941463][ T5970] Registered IR keymap rc-empty [ 77.943170][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 77.963098][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 77.980072][ T5970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 77.986043][ T5970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input7 [ 77.993696][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 78.009397][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 78.029642][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 78.049459][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 78.069693][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 78.071048][ T6996] netlink: 'syz.2.291': attribute type 10 has an invalid length. [ 78.075601][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.078610][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.089794][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 78.109429][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 78.130265][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 78.144596][ T6999] netem: incorrect gi model size [ 78.146661][ T6999] netem: change failed [ 78.149437][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 78.156495][ T7000] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 78.169400][ T5970] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 78.191215][ T5970] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 78.194194][ T5970] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 78.759559][ T5288] Bluetooth: hci0: command 0x0401 tx timeout [ 78.759683][ T5940] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 79.339357][ T5991] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 79.479456][ T5940] Bluetooth: hci4: command 0x1003 tx timeout [ 79.479476][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 79.499393][ T5991] usb 7-1: Using ep0 maxpacket: 8 [ 79.516165][ T5991] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 79.518727][ T5991] usb 7-1: config 179 has no interface number 0 [ 79.521305][ T5991] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 79.525823][ T5991] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 79.530353][ T5991] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.534526][ T5991] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 79.539544][ T5991] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 79.547503][ T5991] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 79.551348][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.557088][ T7004] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 79.606064][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.296'. [ 79.966611][ T5970] usb 7-1: USB disconnect, device number 4 [ 79.966725][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 79.972364][ C3] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 80.264386][ T835] usb 8-1: USB disconnect, device number 3 [ 80.580817][ T7026] input: syz0 as /devices/virtual/input/input8 [ 80.637849][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 80.637862][ T40] audit: type=1400 audit(1746078123.110:603): avc: denied { lock } for pid=7035 comm="syz.3.303" path="socket:[14660]" dev="sockfs" ino=14660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 80.704227][ T40] audit: type=1400 audit(1746078123.180:604): avc: denied { write } for pid=7044 comm="syz.1.306" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.718284][ T7049] syzkaller1: entered promiscuous mode [ 80.720798][ T7049] syzkaller1: entered allmulticast mode [ 80.725950][ T40] audit: type=1400 audit(1746078123.200:605): avc: denied { ioctl } for pid=7040 comm="syz.2.304" path="socket:[14677]" dev="sockfs" ino=14677 ioctlcmd=0x4945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.737354][ T40] audit: type=1400 audit(1746078123.210:606): avc: denied { setopt } for pid=7040 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.790987][ T40] audit: type=1400 audit(1746078123.270:607): avc: denied { write } for pid=7052 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.810043][ T7040] delete_channel: no stack [ 81.013039][ T7077] tmpfs: Bad value for 'mpol' [ 81.072803][ T40] audit: type=1400 audit(1746078123.550:608): avc: denied { map } for pid=7080 comm="syz.3.319" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 81.178866][ T7088] program syz.3.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.184276][ T7089] overlayfs: failed to resolve './file1/file0': -2 [ 81.231679][ T1110] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 81.234772][ T1110] ata1.00: irq_stat 0x40000000 [ 81.237473][ T1110] ata1.00: failed command: ZAC MANAGEMENT OUT [ 81.240709][ T1110] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 14 [ 81.240709][ T1110] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 81.246844][ T1110] ata1.00: status: { DRDY ERR } [ 81.248833][ T1110] ata1.00: error: { ABRT } [ 81.251395][ T1110] ata1.00: device reported invalid CHS sector 0 [ 81.321459][ T40] audit: type=1400 audit(1746078123.800:609): avc: denied { ioctl } for pid=7095 comm="syz.1.325" path="socket:[14075]" dev="sockfs" ino=14075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.374701][ T7104] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 81.377153][ T7104] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 81.383212][ T7104] xt_hashlimit: size too large, truncated to 1048576 [ 81.413150][ T1110] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 81.415861][ T1110] ata1: failed to read log page 10h (errno=-5) [ 81.418315][ T1110] ata1.00: exception Emask 0x1 SAct 0x1 SErr 0x0 action 0x0 [ 81.421510][ T1110] ata1.00: irq_stat 0x40000000 [ 81.423564][ T1110] ata1.00: failed command: WRITE FPDMA QUEUED [ 81.426013][ T1110] ata1.00: cmd 61/38:00:32:11:0c/00:00:00:00:00/40 tag 0 ncq dma 28672 out [ 81.426013][ T1110] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 81.433171][ T1110] ata1.00: status: { DRDY } [ 81.436375][ T1110] ata1.00: configured for UDMA/100 [ 81.438907][ T1110] ata1: EH complete [ 81.481515][ T65] cfg80211: failed to load regulatory.db [ 81.568821][ T7111] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3681551434 (14726205736 ns) > initial count (12909592792 ns). Using initial count to start timer. [ 81.575438][ T7112] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3681551434 (14726205736 ns) > initial count (12909592792 ns). Using initial count to start timer. [ 81.824995][ T7129] __nla_validate_parse: 6 callbacks suppressed [ 81.825000][ T40] audit: type=1400 audit(1746078124.300:610): avc: denied { mounton } for pid=7128 comm="syz.1.334" path="/68/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 81.825009][ T7129] netlink: 96 bytes leftover after parsing attributes in process `syz.1.334'. [ 81.825163][ T7130] netlink: 96 bytes leftover after parsing attributes in process `syz.1.334'. [ 81.875753][ T40] audit: type=1400 audit(1746078124.350:611): avc: denied { remount } for pid=7128 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.927018][ T40] audit: type=1400 audit(1746078124.400:612): avc: denied { read } for pid=7131 comm="syz.1.335" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.938477][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 81.980485][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 82.233544][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'. [ 82.285294][ T7163] bridge2: entered promiscuous mode [ 82.432252][ T7178] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 82.432312][ T7180] fuse: Bad value for 'fd' [ 82.434632][ T7178] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.348'. [ 82.729854][ T7215] autofs4:pid:7215:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294934528.1), cmd(0xc0189374) [ 82.734301][ T7215] autofs4:pid:7215:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 82.933849][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 82.937156][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 83.008812][ T7227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.362'. [ 83.267614][ T7237] xt_hashlimit: size too large, truncated to 1048576 [ 83.460498][ T7245] xt_hashlimit: size too large, truncated to 1048576 [ 83.516029][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.368'. [ 83.598591][ T7254] syzkaller1: entered promiscuous mode [ 83.601057][ T7254] syzkaller1: entered allmulticast mode [ 83.853069][ T7279] netlink: 'syz.2.378': attribute type 2 has an invalid length. [ 83.867390][ T7274] can: request_module (can-proto-0) failed. [ 83.884819][ T7274] 9p: Unknown access argument 18446744073709551615: -34 [ 84.165710][ T7290] overlay: Unknown parameter 'fowner' [ 84.239803][ T7296] netlink: 'syz.1.381': attribute type 15 has an invalid length. [ 84.325323][ T7302] netlink: 'syz.3.383': attribute type 10 has an invalid length. [ 84.334005][ T7302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.338356][ T7302] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.425435][ T7307] misc userio: Invalid payload size [ 84.426901][ T7314] pimreg: left allmulticast mode [ 84.427113][ T7308] misc userio: Invalid payload size [ 84.753009][ T7342] sp0: Synchronizing with TNC [ 84.839517][ T7349] ptrace attach of "/syz-executor exec"[5934] was attempted by "/syz-executor exec"[7349] [ 85.424298][ T7388] binder: 7387:7388 ioctl 4018620d 0 returned -22 [ 85.427057][ T7390] binder: 7387:7390 ioctl c0306201 0 returned -14 [ 85.609353][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 85.645740][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 85.645751][ T40] audit: type=1400 audit(1746078128.120:647): avc: denied { mount } for pid=7398 comm="syz.3.408" name="/" dev="hugetlbfs" ino=16178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 85.655868][ T40] audit: type=1400 audit(1746078128.130:648): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 85.769610][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 85.773594][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 85.780748][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 85.783965][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 85.786975][ T10] usb 6-1: Product: syz [ 85.788475][ T10] usb 6-1: Manufacturer: syz [ 85.791185][ T10] usb 6-1: SerialNumber: syz [ 85.796457][ T10] usb 6-1: config 0 descriptor?? [ 85.797116][ T40] audit: type=1400 audit(1746078128.270:649): avc: denied { shutdown } for pid=7414 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.799124][ T7382] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.809028][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 85.811409][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 85.829561][ T7422] dns_resolver: Unsupported server list version (0) [ 86.129643][ T10] usb 6-1: USB disconnect, device number 12 [ 86.450980][ T40] audit: type=1400 audit(1746078128.930:650): avc: denied { getopt } for pid=7437 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.457672][ T40] audit: type=1400 audit(1746078128.930:651): avc: denied { mounton } for pid=7437 comm="syz.3.419" path="/141/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 86.464846][ T40] audit: type=1400 audit(1746078128.940:652): avc: denied { mount } for pid=7437 comm="syz.3.419" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 86.585171][ T40] audit: type=1400 audit(1746078129.060:653): avc: denied { bind } for pid=7444 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.632172][ C3] af_packet: tpacket_rcv: packet too big, clamped from 66038 to 4294967286. macoff=82 [ 86.719778][ T40] audit: type=1400 audit(1746078129.200:654): avc: denied { read } for pid=7452 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.770382][ T40] audit: type=1400 audit(1746078129.250:655): avc: denied { setopt } for pid=7452 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.780292][ T7455] fuse: Bad value for 'fd' [ 86.780293][ T7454] fuse: Bad value for 'fd' [ 86.896644][ T7457] can0: slcan on ttyS3. [ 87.100645][ T7458] can0 (unregistered): slcan off ttyS3. [ 87.126139][ T40] audit: type=1400 audit(1746078129.600:656): avc: denied { view } for pid=7471 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 87.203741][ T7479] __nla_validate_parse: 1 callbacks suppressed [ 87.203753][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 87.208737][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 87.357418][ T7479] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 87.719344][ T63] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.869416][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 87.875673][ T63] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 87.878875][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.883813][ T5940] Bluetooth: hci4: command 0x1003 tx timeout [ 87.887623][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 87.887642][ T63] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.897495][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.904282][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 87.914648][ T63] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 87.917980][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.929364][ T63] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.934274][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.938856][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 87.945050][ T63] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 87.959425][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.964144][ T63] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.968920][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.977241][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 87.985286][ T63] usb 8-1: string descriptor 0 read error: -22 [ 87.987986][ T63] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 87.991857][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.009969][ T63] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 88.019954][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 88.129373][ T7507] bridge0: port 3(veth0_to_bridge) entered blocking state [ 88.131810][ T7507] bridge0: port 3(veth0_to_bridge) entered disabled state [ 88.134753][ T7507] veth0_to_bridge: entered allmulticast mode [ 88.137789][ T7507] veth0_to_bridge: entered promiscuous mode [ 88.140420][ T7507] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.144830][ T7507] bridge0: port 3(veth0_to_bridge) entered blocking state [ 88.147208][ T7507] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 88.210585][ T63] usb 8-1: USB disconnect, device number 4 [ 88.307026][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'. [ 88.310910][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'. [ 88.367612][ T7517] IPv6: NLM_F_REPLACE set, but no existing node found! [ 88.410558][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'. [ 88.421736][ T7523] netlink: 'syz.1.441': attribute type 3 has an invalid length. [ 88.424880][ T7523] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.441'. [ 88.431036][ T7523] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 88.433498][ T7523] netlink: 244 bytes leftover after parsing attributes in process `syz.1.441'. [ 88.502448][ T7521] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 88.505835][ T7521] netlink: 'syz.2.440': attribute type 4 has an invalid length. [ 88.509222][ T7521] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.440'. [ 88.523452][ T7531] program syz.3.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.527746][ T65] hid (null): report_id 0 is invalid [ 88.529746][ T65] hid (null): unknown global tag 0xe [ 88.531848][ T65] hid (null): unknown global tag 0xc [ 88.539330][ T65] hid (null): unknown global tag 0xc [ 88.543221][ T65] hid-generic 0400:9E4C:10002.0004: unexpected long global item [ 88.545867][ T65] hid-generic 0400:9E4C:10002.0004: probe with driver hid-generic failed with error -22 [ 88.641864][ T67] Bluetooth: Frame is too long (len 16, expected len 4) [ 88.717175][ T7542] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 88.722567][ T7542] UDF-fs: Scanning with blocksize 2048 failed [ 88.725720][ T7542] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 88.727922][ T7542] UDF-fs: Scanning with blocksize 4096 failed [ 89.049471][ T29] usb 6-1: device descriptor read/64, error -71 [ 89.062013][ T7554] fuseblk: Bad value for 'fd' [ 89.076869][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 89.080357][ T7554] netlink: 244 bytes leftover after parsing attributes in process `syz.3.452'. [ 89.128362][ T7556] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 89.269397][ T7564] vivid-007: ================= START STATUS ================= [ 89.272002][ T7564] vivid-007: Generate PTS: true [ 89.273610][ T7564] vivid-007: Generate SCR: true [ 89.275141][ T7564] tpg source WxH: 640x360 (Y'CbCr) [ 89.276738][ T7564] tpg field: 1 [ 89.277907][ T7564] tpg crop: (0,0)/640x360 [ 89.280072][ T7564] tpg compose: (0,0)/640x360 [ 89.281584][ T7564] tpg colorspace: 8 [ 89.282818][ T7564] tpg transfer function: 0/0 [ 89.284276][ T7564] tpg Y'CbCr encoding: 0/0 [ 89.285669][ T7564] tpg quantization: 0/0 [ 89.286970][ T7564] tpg RGB range: 0/2 [ 89.288439][ T7564] vivid-007: ================== END STATUS ================== [ 89.293063][ T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 89.459872][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 89.463730][ T29] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 89.466928][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.471298][ T29] usb 6-1: config 0 has no interface number 0 [ 89.473908][ T29] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 89.477570][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.491085][ T29] usb 6-1: config 0 descriptor?? [ 89.504850][ T29] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.6/input/input9 [ 89.544823][ T7587] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.747711][ T29] usb 6-1: USB disconnect, device number 14 [ 89.753597][ T7538] bcm5974 6-1:0.6: could not read from device [ 89.760124][ T7600] tunl0: entered promiscuous mode [ 89.776990][ T7538] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 90.338899][ T7619] xt_hashlimit: size too large, truncated to 1048576 [ 90.544521][ T67] block nbd3: Receive control failed (result -107) [ 90.591730][ T7627] zonefs (nbd3) ERROR: Not a zoned block device [ 90.596214][ T67] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 90.639476][ T7627] nbd3: detected capacity change from 0 to 8589934592 [ 90.641326][ T7635] bridge_slave_0: left allmulticast mode [ 90.644594][ T7635] bridge_slave_0: left promiscuous mode [ 90.645426][ T7627] block nbd3: Dead connection, failed to find a fallback [ 90.647014][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.649498][ T7627] block nbd3: shutting down sockets [ 90.656065][ T7635] bridge_slave_1: left allmulticast mode [ 90.658113][ T7635] bridge_slave_1: left promiscuous mode [ 90.659422][ T7627] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.663947][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.671697][ T7635] bond0: (slave bond_slave_0): Releasing backup interface [ 90.676782][ T7627] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.677047][ T7635] bond0: (slave bond_slave_1): Releasing backup interface [ 90.682820][ T7627] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.685642][ T7627] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.692951][ T7627] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.696578][ T7627] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.696835][ T7635] team0: Port device team_slave_0 removed [ 90.707055][ T7627] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.712699][ T7635] team0: Port device team_slave_1 removed [ 90.715966][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.717075][ T7627] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.719031][ T7635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.726479][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.727311][ T7627] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.731115][ T7635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.736604][ T7627] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.749495][ T7627] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.753166][ T7627] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.756486][ T7627] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.761195][ T7627] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.769477][ T7627] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.779535][ T7627] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.782876][ T7627] ldm_validate_partition_table(): Disk read failed. [ 90.785824][ T7627] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.799729][ T7627] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.802579][ T7627] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.805458][ T7627] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.808152][ T7627] Dev nbd3: unable to read RDB block 0 [ 90.813153][ T7627] nbd3: unable to read partition table [ 90.816576][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 90.823231][ T6738] ldm_validate_partition_table(): Disk read failed. [ 90.826487][ T6738] Dev nbd3: unable to read RDB block 0 [ 90.829195][ T6738] nbd3: unable to read partition table [ 90.831881][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 90.834735][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 90.844847][ T6738] ldm_validate_partition_table(): Disk read failed. [ 90.847650][ T6738] Dev nbd3: unable to read RDB block 0 [ 90.849522][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 90.852871][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 90.855966][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2147483647, location=2147483647 [ 90.857302][ T6738] nbd3: unable to read partition table [ 90.859642][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2147483391, location=2147483391 [ 90.864488][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2147483646, location=2147483646 [ 90.867847][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2147483390, location=2147483390 [ 90.872357][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2147483645, location=2147483645 [ 90.875737][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2147483389, location=2147483389 [ 90.880723][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2147483497, location=2147483497 [ 90.884032][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2147483241, location=2147483241 [ 90.887539][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2147483495, location=2147483495 [ 90.892081][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2147483239, location=2147483239 [ 90.895823][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 90.900241][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 90.903331][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1073741823, location=1073741823 [ 90.906739][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1073741567, location=1073741567 [ 90.910432][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1073741822, location=1073741822 [ 90.913840][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1073741566, location=1073741566 [ 90.917194][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1073741821, location=1073741821 [ 90.921371][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1073741565, location=1073741565 [ 90.924782][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1073741673, location=1073741673 [ 90.928420][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1073741417, location=1073741417 [ 90.931950][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1073741671, location=1073741671 [ 90.935522][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1073741415, location=1073741415 [ 90.939880][ T7627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 90.942818][ T7627] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 90.997643][ T7642] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 91.010713][ T7642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.184663][ T7656] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 91.279368][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 91.437392][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 91.437402][ T40] audit: type=1400 audit(1746078133.910:672): avc: denied { ioctl } for pid=7664 comm="syz.1.486" path="socket:[16902]" dev="sockfs" ino=16902 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.441213][ T7665] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 91.448650][ T9] usb 8-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 91.456963][ T9] usb 8-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.467190][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 91.483111][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.485940][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.488410][ T9] usb 8-1: Product: 妥⯌ӭ啳郫쇀뎆穲牵燒㓷흱荄ᒋ졎ᙹⒹ咰瓆싒슇맑촺⣖ኝ이輍籕ᬛᓴ〓싍懶ꘝ昆傧㏢窐游僣㋃갥閱壧鏯诔睨澫㦸⌱椹놛ඒෞ䮝ʉ塙䓌읡ఒ㾰䫚찁膖걢쾷 [ 91.496491][ T9] usb 8-1: Manufacturer: ఉ [ 91.497972][ T9] usb 8-1: SerialNumber: 꼚뻛ܶẻ嫁ꦶ녜ݐ컏쮚癱ַ∽豯蘕袄❷⃉ࠡ쑥㵬넓砤ﹲ㰹겘웕嫥螣砐㭕丬⿁㡢┇ॽ偨긪ꓝ黗젉픐≹⼚⚶똴鹠붌ᑈ轞롨聡䚃曂릏肀饚熁줣ι슈ꇺ욹収઩尓쐈碿ࣄ턧㜦幩㞈겢ᡂ옝ꖷ採寲隺欷䏛笝 [ 91.507773][ T9] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 91.515445][ T9] usb 8-1: no configuration chosen from 1 choice [ 91.526177][ T40] audit: type=1800 audit(1746078134.000:673): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.485" name="/newroot/125/file0" dev="tmpfs" ino=698 res=0 errno=0 [ 91.900447][ T7679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7679 comm=syz.1.490 [ 91.981917][ T40] audit: type=1400 audit(1746078134.460:674): avc: denied { getopt } for pid=7680 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.303340][ T7692] fuse: Bad value for 'fd' [ 92.314531][ T40] audit: type=1400 audit(1746078134.790:675): avc: denied { create } for pid=7686 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.320388][ T7688] netem: invalid attributes len -3 [ 92.324156][ T7688] netem: change failed [ 92.326244][ T7688] trusted_key: syz.1.493 sent an empty control message without MSG_MORE. [ 92.329510][ T40] audit: type=1400 audit(1746078134.790:676): avc: denied { write } for pid=7686 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.353222][ T7698] __nla_validate_parse: 11 callbacks suppressed [ 92.353232][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'. [ 92.355528][ T40] audit: type=1400 audit(1746078134.830:677): avc: denied { ioctl } for pid=7696 comm="syz.2.495" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.370070][ T7698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.377410][ T40] audit: type=1400 audit(1746078134.850:678): avc: denied { create } for pid=7696 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 92.385945][ T40] audit: type=1400 audit(1746078134.860:679): avc: denied { connect } for pid=7696 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 92.388847][ T7698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.395241][ T7698] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 92.400637][ T7698] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 92.492596][ T40] audit: type=1400 audit(1746078134.970:680): avc: denied { execute } for pid=7705 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 92.500390][ T40] audit: type=1400 audit(1746078134.970:681): avc: denied { execute_no_trans } for pid=7705 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 92.506542][ T7707] Dead loop on virtual device ip6_vti0, fix it urgently! [ 92.516752][ T7707] ip6erspan0: entered promiscuous mode [ 92.553123][ T7709] tmpfs: Bad value for 'mpol' [ 92.648314][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.653181][ T5288] Bluetooth: hci3: link tx timeout [ 92.653465][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.655196][ T5288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 92.662426][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.666291][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.670557][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.780271][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 92.933350][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.936442][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.939610][ T7710] bridge_slave_0: entered allmulticast mode [ 92.943464][ T7710] bridge_slave_0: entered promiscuous mode [ 92.949971][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.953005][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.956012][ T7710] bridge_slave_1: entered allmulticast mode [ 92.959798][ T7710] bridge_slave_1: entered promiscuous mode [ 93.028848][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.036181][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.092874][ T7710] team0: Port device team_slave_0 added [ 93.096963][ T7710] team0: Port device team_slave_1 added [ 93.127697][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.130570][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.138394][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.139484][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.143906][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.151978][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.179044][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 93.192755][ T7710] hsr_slave_0: entered promiscuous mode [ 93.195242][ T7710] hsr_slave_1: entered promiscuous mode [ 93.197625][ T7710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.201069][ T7710] Cannot create hsr debugfs directory [ 93.258658][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.512'. [ 93.325896][ T7710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.330199][ T7710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.335627][ T7710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.339654][ T7710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.355751][ T7759] bio_check_eod: 2 callbacks suppressed [ 93.355761][ T7759] syz.1.513: attempt to access beyond end of device [ 93.355761][ T7759] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 93.362848][ T7759] (syz.1.513,7759,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 93.365209][ T7759] (syz.1.513,7759,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 93.366208][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.367446][ T7759] (syz.1.513,7759,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 93.370503][ T7710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.373141][ T7759] (syz.1.513,7759,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 93.373903][ T7763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7763 comm=syz.2.514 [ 93.376144][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.386497][ T7710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.414837][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.417923][ T7765] syz_tun: entered promiscuous mode [ 93.422836][ T7765] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 93.425707][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.432624][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.435885][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.445226][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.451237][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.453831][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.461210][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.466082][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.478380][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.481348][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.484593][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.487533][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.495617][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.498638][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.503116][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.506126][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.512473][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.514988][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.521755][ T7765] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 93.632229][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.757822][ T7710] veth0_vlan: entered promiscuous mode [ 93.763017][ T7710] veth1_vlan: entered promiscuous mode [ 93.781742][ T7710] veth0_macvtap: entered promiscuous mode [ 93.785783][ T7710] veth1_macvtap: entered promiscuous mode [ 93.797655][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.802824][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.805851][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.809099][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.810656][ T67] Bluetooth: hci3: link tx timeout [ 93.813754][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.813835][ T67] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 93.828973][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.834945][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.838876][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.838895][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.838904][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.838916][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.857709][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.865446][ T7710] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.869008][ T7710] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.874450][ T7710] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.877770][ T7710] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.918491][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.923463][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.935401][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.937920][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.053143][ T9] usb 8-1: USB disconnect, device number 5 [ 94.089967][ T7799] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN NOPTI [ 94.093801][ T7799] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 94.097414][ T7799] CPU: 3 UID: 0 PID: 7799 Comm: syz.3.522 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 94.101936][ T7799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.106293][ T7799] RIP: 0010:skb_segment+0x194f/0x3ef0 [ 94.108493][ T7799] Code: 00 00 fe e9 48 eb ff ff e8 1e 2d 77 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 30 a8 dc f8 48 8b 84 24 d0 [ 94.116213][ T7799] RSP: 0018:ffffc900041ee9f0 EFLAGS: 00010202 [ 94.118752][ T7799] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc9000c802000 [ 94.122061][ T7799] RDX: 000000000000000e RSI: ffffffff894405d2 RDI: 0000000000000070 [ 94.125378][ T7799] RBP: ffffc900041eeb98 R08: 0000000000000005 R09: 000000000000ffff [ 94.128741][ T7799] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88804f69e880 [ 94.132059][ T7799] R13: 000000000001fffe R14: 000000000000ffff R15: 000000000000004a [ 94.134960][ T7799] FS: 00007f294a8a56c0(0000) GS:ffff8880d6ce2000(0000) knlGS:0000000000000000 [ 94.138073][ T7799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.140369][ T7799] CR2: 0000200000200000 CR3: 000000002b78c000 CR4: 0000000000352ef0 [ 94.143497][ T7799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.146314][ T7799] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.149219][ T7799] Call Trace: [ 94.150446][ T7799] [ 94.151664][ T7799] ? __pfx_skb_segment+0x10/0x10 [ 94.153798][ T7799] ? __lock_acquire+0x5ca/0x1ba0 [ 94.155968][ T7799] tcp_gso_segment+0x3be/0x19e0 [ 94.158034][ T7799] ? __pfx_tcp_wfree+0x10/0x10 [ 94.160104][ T7799] tcp6_gso_segment+0x1ec/0x1140 [ 94.162286][ T7799] ipv6_gso_segment+0x810/0x1db0 [ 94.164430][ T7799] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 94.166720][ T7799] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.169246][ T7799] skb_mac_gso_segment+0x2a5/0x650 [ 94.171448][ T7799] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 94.173709][ T7799] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 94.176084][ T7799] __skb_gso_segment+0x36e/0x700 [ 94.178192][ T7799] validate_xmit_skb+0x956/0xfe0 [ 94.180325][ T7799] __dev_queue_xmit+0x71b/0x43e0 [ 94.182456][ T7799] ? selinux_ip_postroute+0x73a/0xde0 [ 94.184752][ T7799] ? __pfx___dev_queue_xmit+0x10/0x10 [ 94.187020][ T7799] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 94.189426][ T7799] ? __lock_acquire+0xaa4/0x1ba0 [ 94.191553][ T7799] ? find_held_lock+0x2b/0x80 [ 94.193579][ T7799] ip6_finish_output2+0xe98/0x2020 [ 94.195759][ T7799] ip6_finish_output+0x3f9/0x1360 [ 94.197893][ T7799] ip6_output+0x1f9/0x540 [ 94.199747][ T7799] ? __pfx_ip6_output+0x10/0x10 [ 94.201824][ T7799] ip6_xmit+0x12d7/0x2320 [ 94.203684][ T7799] ? __pfx_ip6_xmit+0x10/0x10 [ 94.205680][ T7799] ? __sk_dst_check+0x120/0x350 [ 94.207756][ T7799] inet6_csk_xmit+0x3c7/0x740 [ 94.209786][ T7799] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 94.211981][ T7799] ? csum_ipv6_magic+0x299/0x320 [ 94.214073][ T7799] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 94.216271][ T7799] __tcp_transmit_skb+0x19d6/0x3e90 [ 94.218464][ T7799] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 94.220862][ T7799] ? kasan_quarantine_put+0x10a/0x240 [ 94.223159][ T7799] ? kfree_skbmem+0x16c/0x1f0 [ 94.225177][ T7799] tcp_write_xmit+0x1274/0x8770 [ 94.227279][ T7799] __tcp_push_pending_frames+0xaf/0x390 [ 94.229616][ T7799] tcp_rcv_established+0x860/0x2180 [ 94.231865][ T7799] ? ip6_dst_check+0x352/0x940 [ 94.233922][ T7799] ? __pfx_tcp_rcv_established+0x10/0x10 [ 94.236298][ T7799] tcp_v6_do_rcv+0x895/0x1740 [ 94.238301][ T7799] ? __local_bh_enable_ip+0xa4/0x120 [ 94.240534][ T7799] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 94.242709][ T7799] __release_sock+0x14c/0x400 [ 94.244729][ T7799] __sk_flush_backlog+0x27/0xc0 [ 94.246768][ T7799] tcp_sendmsg_locked+0x3058/0x3930 [ 94.248972][ T7799] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 94.251298][ T7799] ? do_raw_spin_lock+0x12c/0x2b0 [ 94.252984][ T7799] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 94.255076][ T7799] ? __local_bh_enable_ip+0xa4/0x120 [ 94.257308][ T7799] tcp_sendmsg+0x2e/0x50 [ 94.259043][ T7799] ? __pfx_tcp_sendmsg+0x10/0x10 [ 94.261133][ T7799] inet6_sendmsg+0xb9/0x140 [ 94.263086][ T7799] __sys_sendto+0x37d/0x510 [ 94.265037][ T7799] ? __pfx___sys_sendto+0x10/0x10 [ 94.267208][ T7799] ? xfd_validate_state+0x5d/0x180 [ 94.269342][ T7799] ? rcu_is_watching+0x12/0xc0 [ 94.271304][ T7799] __x64_sys_sendto+0xe0/0x1c0 [ 94.273117][ T7799] ? do_syscall_64+0x91/0x260 [ 94.274878][ T7799] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.277118][ T7799] do_syscall_64+0xcd/0x260 [ 94.279051][ T7799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.281524][ T7799] RIP: 0033:0x7f294998e969 [ 94.283470][ T7799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.291366][ T7799] RSP: 002b:00007f294a8a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.294868][ T7799] RAX: ffffffffffffffda RBX: 00007f2949bb5fa0 RCX: 00007f294998e969 [ 94.298145][ T7799] RDX: ffffffffffffff1d RSI: 00002000000000c0 RDI: 0000000000000005 [ 94.301446][ T7799] RBP: 00007f2949a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 94.304572][ T7799] R10: 0000000000000850 R11: 0000000000000246 R12: 0000000000000000 [ 94.307749][ T7799] R13: 0000000000000000 R14: 00007f2949bb5fa0 R15: 00007fffc155e0d8 [ 94.311023][ T7799] [ 94.312362][ T7799] Modules linked in: [ 94.314161][ C3] vkms_vblank_simulate: vblank timer overrun [ 94.316827][ T7799] ---[ end trace 0000000000000000 ]--- [ 94.319146][ T7799] RIP: 0010:skb_segment+0x194f/0x3ef0 [ 94.321506][ T7799] Code: 00 00 fe e9 48 eb ff ff e8 1e 2d 77 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 30 a8 dc f8 48 8b 84 24 d0 [ 94.329309][ T67] Bluetooth: hci3: link tx timeout [ 94.329532][ T7799] RSP: 0018:ffffc900041ee9f0 EFLAGS: 00010202 [ 94.331142][ T67] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 94.336674][ T7799] [ 94.337445][ T7799] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc9000c802000 [ 94.340562][ T7799] RDX: 000000000000000e RSI: ffffffff894405d2 RDI: 0000000000000070 [ 94.343563][ T7799] RBP: ffffc900041eeb98 R08: 0000000000000005 R09: 000000000000ffff [ 94.346022][ T7799] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88804f69e880 [ 94.348634][ T7799] R13: 000000000001fffe R14: 000000000000ffff R15: 000000000000004a [ 94.351247][ T7799] FS: 00007f294a8a56c0(0000) GS:ffff8880d6ce2000(0000) knlGS:0000000000000000 [ 94.354948][ T7799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.357692][ T7799] CR2: 0000200000200000 CR3: 000000002b78c000 CR4: 0000000000352ef0 [ 94.360353][ T7799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.362856][ T7799] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.363610][ T7802] binder: Unknown parameter 'maxx/&7$:3' [ 94.365315][ T7799] Kernel panic - not syncing: Fatal exception in interrupt [ 94.365962][ T7799] Kernel Offset: disabled VM DIAGNOSIS: 05:42:16 Registers: info registers vcpu 0 CPU#0 RAX=00000000000725a4 RBX=0000000000000000 RCX=ffffffff8b6c8419 RDX=ffffed100d4865be RSI=ffffffff8bf47da0 RDI=ffffffff81919901 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff9084fd10 R15=0000000000000000 RIP=ffffffff8b6c6caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe55ba93f98 CR3=000000004c27f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000041 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4594411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4594411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4594411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4594411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4594411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4594411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4594583488 00007f4594583480 00007f4594583478 00007f4594583450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45950ed100 00007f4594583440 00007f4594580004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4594583498 00007f4594583490 00007f4594583488 00007f4594583480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000076244 RBX=0000000000000001 RCX=ffffffff8b6c8419 RDX=ffffed100d4a65be RSI=ffffffff8bf47da0 RDI=ffffffff81919901 RBP=ffffed1003a59488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d2ca440 R14=ffffffff9084fd10 R15=0000000000000000 RIP=ffffffff8b6c6caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ae2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000004380 CR3=0000000040406000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000000000ff Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe95c411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe95c411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe95c411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe95c411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe95c411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe95c411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84688e642c8c4183 3894747a64574a38 a90d91cf4300258c e1018bb8157eb099 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c484688e642c8c41 833894747a64574a 38a90d91cf430025 8ce1000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 99a582b591a4293a 5c3d6d2311e2ef71 ca7e309fbe4cb823 f3b24b3c942ee9c1 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000001001a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8bf56d8f0fd9a500 RBX=ffffffff8e3bf5c0 RCX=ffffffff8228c05e RDX=0000000000000000 RSI=ffffffff82288167 RDI=ffffffff8e3bf5c0 RBP=00000000ffffffff RSP=ffffc90003c5f798 R8 =0000000000000000 R9 =fffffbfff2109fa2 R10=ffffffff9084fd17 R11=0000000000007c57 R12=ffffffff82288167 R13=ffff8880221377c0 R14=0000000000000000 R15=00000000000001b3 RIP=ffffffff81980aef RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6be2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcfc7ee7d60 CR3=000000002a989000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfc73836a3 00007fcfc73836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffded7230d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555928f2fb8 00005555928f2ee0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555928f32a4 00005555928f32a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555928fa504 00005555928f9cb0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04018810000b8004 0a80040010000a01 41925820aa661923 7ad0eb77fab74fe3 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0116100001c08010 000ffd8080040601 3f98078004018810 000b80040a800400 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000a0141925820 aa6619237ad0eb77 fab74fe35569e416 ed04b6c1765591ff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c95f694bd2a3b73 2c333a9aec24a981 378de9262fd89483 78c078616d6e0807 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003007265646e69 6201ffffffffffff fffff1080b800300 31656c69662f2e01 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f27b5 RDI=ffffffff9adf64e0 RBP=ffffffff9adf64a0 RSP=ffffc900041ee360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9adf64a0 R15=ffffffff854f2750 RIP=ffffffff854f27df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f294a8a56c0 ffffffff 00c00000 GS =0000 ffff8880d6ce2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000200000 CR3=000000002b78c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2949a11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2949a11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2949a11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2949a11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2949a11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2949a11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2949b83488 00007f2949b83480 00007f2949b83478 00007f2949b83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f294a6ed100 00007f2949b83440 00007f2949b83458 00007f2949b834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2949b83498 00007f2949b83490 00007f2949b83488 00007f2949b83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000