last executing test programs: 23.406435264s ago: executing program 0 (id=91): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ntfs3\x00', 0x8001, 0x0) 23.341552423s ago: executing program 0 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080130003000d34d802b0c1bc9f72814a176a"], 0x2c}}, 0x0) 23.267388338s ago: executing program 0 (id=98): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000400000004000000f8ffffff00000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000080000000"], 0x48) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x2020, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = syz_open_procfs(r4, &(0x7f00000000c0)='syscall\x00') preadv(r6, &(0x7f0000001540)=[{&(0x7f0000001600)=""/171, 0xab}, {&(0x7f0000000140)=""/88, 0x58}], 0x2, 0x0, 0x0) setns(r5, 0x24020000) syz_clone(0x5d000120, 0x0, 0x3, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800c5}, 0x810) sched_setscheduler(0x0, 0x1, 0x0) getpid() 21.930806019s ago: executing program 0 (id=102): syz_open_dev$evdev(&(0x7f0000001040), 0x0, 0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}]}}) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x101800, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2100) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) getdents64(r4, &(0x7f0000001080)=""/94, 0x5e) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b010510"], 0xe) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001100)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 21.814320036s ago: executing program 0 (id=103): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000008c0)=@deltaction={0x14}, 0x14}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8, 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 21.318233846s ago: executing program 0 (id=107): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x66e, 0x80000, 0xb, 0x4, 0xfc}) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) creat(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00') r5 = fanotify_init(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r5, 0x1, 0x40001019, r8, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getdents(r4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x2, 0x0, {0x2}}, 0x14}}, 0x0) 21.285204395s ago: executing program 32 (id=107): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x66e, 0x80000, 0xb, 0x4, 0xfc}) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) creat(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00') r5 = fanotify_init(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r5, 0x1, 0x40001019, r8, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getdents(r4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x2, 0x0, {0x2}}, 0x14}}, 0x0) 2.045876745s ago: executing program 3 (id=909): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mlockall(0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 1.777536973s ago: executing program 3 (id=915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) 1.775040479s ago: executing program 3 (id=917): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="5952d4bd4d9d5b5666ba7a844cd292c9845ca99020e22a25b08b893fc1cf14876bea655ee8cd68d0f975ee4582521f48584755eade596a38fa2ee21dd46c2663df8ee595d5e28ffb3fc471df74c7511cd6d9b893fee829e670dc53f622190587af2e7327c1960a588a1f82f8ac39dce3562f8e324e6844a50c1901a7", 0x7c}, {&(0x7f00000000c0)="d599a5", 0x3}, {&(0x7f0000000780)="398e94e2180a415d080736f7e054c660fc1fa0", 0x13}], 0x3, 0x0, 0x0, 0x20000084}}], 0x1, 0x0) 1.727947998s ago: executing program 3 (id=919): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a181, 0x0) r1 = dup(r0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x600, 0x32200}) 1.665131701s ago: executing program 3 (id=922): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x1, 0x400}) 1.664388018s ago: executing program 3 (id=924): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) 710.062494ms ago: executing program 2 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x40) 709.66233ms ago: executing program 2 (id=963): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000000214000000110001"], 0xc0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000064c0)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a2c0000000e0a010a0000000000000000070000000900020073797a31000000000900010073797a300000000014000000110001"], 0x54}}, 0x0) 705.336944ms ago: executing program 2 (id=964): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000140)={0xfffffffe, 0x0}) 647.098774ms ago: executing program 2 (id=966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026008f0914000800b7"], 0x50}}, 0x0) 646.939275ms ago: executing program 2 (id=967): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x1b8, 0x2e0, 0xd0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 546.504247ms ago: executing program 2 (id=969): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) pipe2$9p(&(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x26cfa431}, 0x0, 0x0, 0x0, 0x0) 546.01689ms ago: executing program 1 (id=971): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mlockall(0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 478.05798ms ago: executing program 4 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}}, {0x0, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "a29005d8a541e19d9a6c4d819c40fd3ca7a7c4c9bae26794c7153071d199a096", "b55d79a0122be6d7f56ab5825b66da22148668447deb46bb2c84be446ea718b84aa47137db8eb8f51f7e41798c9ed8b3", "ce106cdae276ddbda043c14291721ef618b37801664f6275afef0920", {"d78a9b76ba2951251d315ecd8b0745bf", "79dfcd7d28d6cd867ff10bee8aa70950"}}}}}}}}, 0xc6) 370.013946ms ago: executing program 4 (id=973): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010067656e657665000014000280080001"], 0x44}}, 0x0) 368.949496ms ago: executing program 4 (id=974): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)='\x00', 0xffffffffffffff64, 0x200448d4, 0x0, 0x0) 188.13105ms ago: executing program 4 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x3000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) close(r1) 187.72178ms ago: executing program 1 (id=976): syz_emit_ethernet(0x225, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x1ef, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x9, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1c, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d"}, {0x0, 0x8, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537"}, {0x21, 0x1, "fcf98a102ec1876d4e6fa3"}, {0x0, 0xa, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf0"}, {0x0, 0x1, "d5170000dce9674a"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x0, 0xff, {"2a4332c3fefcb7080000000000000037"}, 0x101, 0x4, 0xfff}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x2}}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00'}) 185.709089ms ago: executing program 1 (id=977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)=ANY=[@ANYBLOB="000086dd03000a00000014000000623d885d0f98110000000000000000000000000000000000ff0200000000000000000000000000014e224e210f989078"], 0xfce) 88.30477ms ago: executing program 4 (id=978): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0x1) 88.096634ms ago: executing program 4 (id=979): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 86.154059ms ago: executing program 1 (id=980): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0xffff8000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2}, 0x8) 2.669691ms ago: executing program 1 (id=981): prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280), 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 1 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x2}) kernel console output (not intermixed with test programs): [ 38.152969][ T39] audit: type=1400 audit(1730723484.921:80): avc: denied { write } for pid=5930 comm="sh" path="pipe:[7301]" dev="pipefs" ino=7301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.159674][ T39] audit: type=1400 audit(1730723484.921:81): avc: denied { rlimitinh } for pid=5930 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.165691][ T39] audit: type=1400 audit(1730723484.921:82): avc: denied { siginh } for pid=5930 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:40229' (ED25519) to the list of known hosts. [ 39.356901][ T39] audit: type=1400 audit(1730723486.141:83): avc: denied { read } for pid=5344 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.363310][ T39] audit: type=1400 audit(1730723486.141:84): avc: denied { append } for pid=5344 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.371527][ T39] audit: type=1400 audit(1730723486.141:85): avc: denied { open } for pid=5344 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.379282][ T39] audit: type=1400 audit(1730723486.141:86): avc: denied { getattr } for pid=5344 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.385726][ T39] audit: type=1400 audit(1730723486.151:87): avc: denied { name_bind } for pid=5936 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.087471][ T5938] cgroup: Unknown subsys name 'net' [ 41.336627][ T5938] cgroup: Unknown subsys name 'cpuset' [ 41.339886][ T5938] cgroup: Unknown subsys name 'rlimit' [ 41.514568][ T5941] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.156197][ T5938] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.663120][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 43.663131][ T39] audit: type=1400 audit(1730723490.451:105): avc: denied { execmem } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.818148][ T39] audit: type=1400 audit(1730723490.601:106): avc: denied { create } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.824403][ T39] audit: type=1400 audit(1730723490.601:107): avc: denied { read write } for pid=5951 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.833933][ T39] audit: type=1400 audit(1730723490.601:108): avc: denied { open } for pid=5951 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.842653][ T39] audit: type=1400 audit(1730723490.611:109): avc: denied { ioctl } for pid=5952 comm="syz-executor" path="socket:[5752]" dev="sockfs" ino=5752 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.873378][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.876202][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.879483][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.881714][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.884446][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.887580][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.889616][ T5962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.890245][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.894365][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.897417][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.897949][ T5964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.900119][ T5958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.901107][ T5962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.901412][ T5962] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.901548][ T5962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.903123][ T5962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.904455][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.905712][ T5963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.905828][ T5962] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.905941][ T5962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.910352][ T39] audit: type=1400 audit(1730723490.691:110): avc: denied { read } for pid=5952 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.913753][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.918481][ T39] audit: type=1400 audit(1730723490.691:111): avc: denied { open } for pid=5952 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.920592][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.937578][ T39] audit: type=1400 audit(1730723490.691:112): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.938590][ T5963] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.947412][ T5963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.062640][ T39] audit: type=1400 audit(1730723490.841:113): avc: denied { module_request } for pid=5951 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.132749][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 44.157432][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 44.196314][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 44.269569][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.271476][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.274740][ T5952] bridge_slave_0: entered allmulticast mode [ 44.276914][ T5952] bridge_slave_0: entered promiscuous mode [ 44.315291][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.317755][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.320055][ T5952] bridge_slave_1: entered allmulticast mode [ 44.322351][ T5952] bridge_slave_1: entered promiscuous mode [ 44.333828][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.335898][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.337834][ T5951] bridge_slave_0: entered allmulticast mode [ 44.339953][ T5951] bridge_slave_0: entered promiscuous mode [ 44.360628][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 44.376807][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.379301][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.381174][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.383514][ T5951] bridge_slave_1: entered allmulticast mode [ 44.386284][ T5951] bridge_slave_1: entered promiscuous mode [ 44.398245][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.400439][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.402344][ T5956] bridge_slave_0: entered allmulticast mode [ 44.405597][ T5956] bridge_slave_0: entered promiscuous mode [ 44.412025][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.414308][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.416221][ T5956] bridge_slave_1: entered allmulticast mode [ 44.418988][ T5956] bridge_slave_1: entered promiscuous mode [ 44.423760][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.502554][ T5952] team0: Port device team_slave_0 added [ 44.505203][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.513017][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.516907][ T5952] team0: Port device team_slave_1 added [ 44.519401][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.535111][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.595892][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.598256][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.600144][ T5959] bridge_slave_0: entered allmulticast mode [ 44.602199][ T5959] bridge_slave_0: entered promiscuous mode [ 44.625681][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.627641][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.634569][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.638737][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.640780][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.649509][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.654562][ T5951] team0: Port device team_slave_0 added [ 44.656615][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.658893][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.661213][ T5959] bridge_slave_1: entered allmulticast mode [ 44.665938][ T5959] bridge_slave_1: entered promiscuous mode [ 44.678044][ T5956] team0: Port device team_slave_0 added [ 44.684473][ T5951] team0: Port device team_slave_1 added [ 44.703429][ T5956] team0: Port device team_slave_1 added [ 44.724410][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.726251][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.734539][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.738650][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.766565][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.769631][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.771651][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.779212][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.782645][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.784488][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.791380][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.795462][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.797311][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.804787][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.810919][ T5952] hsr_slave_0: entered promiscuous mode [ 44.815061][ T5952] hsr_slave_1: entered promiscuous mode [ 44.836954][ T5959] team0: Port device team_slave_0 added [ 44.841823][ T5959] team0: Port device team_slave_1 added [ 44.877039][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.879029][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.885887][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.889792][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.891559][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.898819][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.937460][ T5951] hsr_slave_0: entered promiscuous mode [ 44.939310][ T5951] hsr_slave_1: entered promiscuous mode [ 44.941141][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.943325][ T5951] Cannot create hsr debugfs directory [ 44.949446][ T5956] hsr_slave_0: entered promiscuous mode [ 44.951494][ T5956] hsr_slave_1: entered promiscuous mode [ 44.953658][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.955655][ T5956] Cannot create hsr debugfs directory [ 45.025927][ T5959] hsr_slave_0: entered promiscuous mode [ 45.028224][ T5959] hsr_slave_1: entered promiscuous mode [ 45.030304][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.032815][ T5959] Cannot create hsr debugfs directory [ 45.220117][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.225775][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.229251][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.233204][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.257372][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.261813][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.266158][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.277500][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.301066][ T5959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.306535][ T5959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.310124][ T5959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.314207][ T5959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.340252][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.344257][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.348283][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.351609][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.376887][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.394979][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.404718][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.406685][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.423292][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.425252][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.454290][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.467098][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.475536][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.488774][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.493456][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.494211][ T39] audit: type=1400 audit(1730723492.281:114): avc: denied { sys_module } for pid=5951 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.505473][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.510900][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.513575][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.520321][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.524947][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.527506][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.541553][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.543953][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.547937][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.550460][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.556185][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.558792][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.583928][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.590739][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.593468][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.614410][ T5956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.646792][ T5951] veth0_vlan: entered promiscuous mode [ 45.655769][ T5951] veth1_vlan: entered promiscuous mode [ 45.678046][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.681121][ T5951] veth0_macvtap: entered promiscuous mode [ 45.688868][ T5951] veth1_macvtap: entered promiscuous mode [ 45.701884][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.713620][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.721192][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.730713][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.733557][ T5952] veth0_vlan: entered promiscuous mode [ 45.738819][ T5952] veth1_vlan: entered promiscuous mode [ 45.742129][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.745234][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.747714][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.750702][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.774133][ T5956] veth0_vlan: entered promiscuous mode [ 45.789516][ T5959] veth0_vlan: entered promiscuous mode [ 45.797445][ T5956] veth1_vlan: entered promiscuous mode [ 45.814443][ T5952] veth0_macvtap: entered promiscuous mode [ 45.818263][ T5952] veth1_macvtap: entered promiscuous mode [ 45.820006][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.821434][ T5959] veth1_vlan: entered promiscuous mode [ 45.822965][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.838441][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.841244][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.852172][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.857006][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.860745][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.864470][ T5956] veth0_macvtap: entered promiscuous mode [ 45.868234][ T5956] veth1_macvtap: entered promiscuous mode [ 45.876121][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.879088][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.882877][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.885644][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.891784][ T5952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.895183][ T5952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.897506][ T5952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.899717][ T5952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.906010][ T5959] veth0_macvtap: entered promiscuous mode [ 45.908953][ T5959] veth1_macvtap: entered promiscuous mode [ 45.913491][ T5963] Bluetooth: hci1: command tx timeout [ 45.930366][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.934897][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.937717][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.940745][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.944962][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.949366][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.954159][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.957640][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.961187][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.966164][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.971095][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.974265][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.976861][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.979842][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.984061][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.988238][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.993063][ T5963] Bluetooth: hci2: command tx timeout [ 45.993120][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.000935][ T5956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.003341][ T5963] Bluetooth: hci3: command tx timeout [ 46.003634][ T64] Bluetooth: hci0: command tx timeout [ 46.005362][ T5956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.005461][ T5956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.005477][ T5956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.012258][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.019099][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.021688][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.024853][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.027355][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.030008][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.034238][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.051654][ T5959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.055214][ T5959] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.058332][ T5959] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.061421][ T5959] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.068834][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.071011][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.095288][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.097487][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.127554][ T6027] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10'. [ 46.142897][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.145225][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.164334][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.164612][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.166792][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.168870][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.186202][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.189114][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.237421][ T6037] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3'. [ 46.238679][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'. [ 46.242942][ T6042] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 46.261540][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.400486][ T6068] overlayfs: unescaped trailing colons in lowerdir mount option. [ 46.422247][ T6071] cgroup: noprefix used incorrectly [ 46.442279][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 712 [ 46.442756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.447319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.463006][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 46.571674][ T6087] netlink: 'syz.0.33': attribute type 3 has an invalid length. [ 46.599734][ T6092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.36'. [ 46.600761][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 46.623612][ T35] usb 8-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 46.627067][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.644256][ T35] usb 8-1: config 0 descriptor?? [ 46.660383][ T35] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input5 [ 46.666318][ T6100] program syz.2.40 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.692270][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 46.753371][ T6111] netlink: 'syz.0.45': attribute type 21 has an invalid length. [ 46.799354][ T6117] netlink: 44 bytes leftover after parsing attributes in process `syz.0.48'. [ 46.847612][ T6124] usb usb8: usbfs: process 6124 (syz.0.52) did not claim interface 0 before use [ 46.858709][ T35] usb 8-1: USB disconnect, device number 2 [ 46.880889][ T6128] syz.2.54: attempt to access beyond end of device [ 46.880889][ T6128] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 46.886715][ T6128] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 46.946193][ T6137] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET) [ 46.960541][ T6140] cgroup: release_agent respecified [ 46.995025][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 46.997794][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 47.013885][ T6146] netlink: 144 bytes leftover after parsing attributes in process `syz.0.62'. [ 47.216467][ T6179] program syz.1.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.254627][ T6187] Error parsing options; rc = [-22] [ 47.339905][ T6204] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 47.395486][ T6208] ntfs3(sr0): Primary boot signature is not NTFS. [ 47.398029][ T6208] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 47.537569][ T6225] syzkaller1: entered promiscuous mode [ 47.539145][ T6225] syzkaller1: entered allmulticast mode [ 47.712581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 47.814761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.814934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.816976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.821732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.837523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.917149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.917179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 47.919313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.994260][ T64] Bluetooth: hci1: command tx timeout [ 48.073404][ T64] Bluetooth: hci0: command tx timeout [ 48.073464][ T5963] Bluetooth: hci3: command tx timeout [ 48.902787][ T39] kauditd_printk_skb: 115 callbacks suppressed [ 48.902798][ T39] audit: type=1400 audit(1730723495.691:230): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.352032][ T39] audit: type=1400 audit(1730723496.131:231): avc: denied { write } for pid=6259 comm="syz.3.105" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.372187][ T39] audit: type=1400 audit(1730723496.151:232): avc: denied { sys_module } for pid=6253 comm="syz.1.104" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.454354][ T1137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.497548][ T39] audit: type=1400 audit(1730723496.281:233): avc: denied { mount } for pid=6261 comm="syz.2.106" name="/" dev="ramfs" ino=9133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.557846][ T1137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.575150][ T39] audit: type=1400 audit(1730723496.361:234): avc: denied { ioctl } for pid=6259 comm="syz.3.105" path="socket:[9649]" dev="sockfs" ino=9649 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.597861][ T39] audit: type=1400 audit(1730723496.381:235): avc: denied { ioctl } for pid=6259 comm="syz.3.105" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.607718][ T6260] input: syz0 as /devices/virtual/input/input6 [ 49.615806][ T39] audit: type=1400 audit(1730723496.401:236): avc: denied { ioctl } for pid=5347 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2785 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.637893][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.643729][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.647430][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.655642][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.657111][ T1137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.673497][ T64] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 49.676943][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.685415][ T39] audit: type=1400 audit(1730723496.471:237): avc: denied { mounton } for pid=6271 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.711601][ T39] audit: type=1400 audit(1730723496.491:238): avc: denied { ioctl } for pid=6273 comm="syz.3.109" path="socket:[7961]" dev="sockfs" ino=7961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.719891][ T39] audit: type=1400 audit(1730723496.501:239): avc: denied { create } for pid=6273 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 49.747283][ T1137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.883402][ T6271] chnl_net:caif_netlink_parms(): no params data found [ 49.891389][ T1137] bridge_slave_1: left allmulticast mode [ 49.898868][ T1137] bridge_slave_1: left promiscuous mode [ 49.901971][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.912288][ T1137] bridge_slave_0: left allmulticast mode [ 49.920764][ T1137] bridge_slave_0: left promiscuous mode [ 49.923706][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.929505][ T6285] cgroup: No subsys list or none specified [ 50.162736][ T64] Bluetooth: hci0: command tx timeout [ 50.163347][ T5963] Bluetooth: hci3: command tx timeout [ 50.216170][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.221221][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.228364][ T1137] bond0 (unregistering): Released all slaves [ 50.405145][ T6298] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 50.413646][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.417305][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.460330][ T6298] syz.1.117 (6298) used greatest stack depth: 21088 bytes left [ 50.484891][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.487039][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.488301][ T6308] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 50.493192][ T6271] bridge_slave_0: entered allmulticast mode [ 50.496616][ T6271] bridge_slave_0: entered promiscuous mode [ 50.502840][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.505587][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.508644][ T6271] bridge_slave_1: entered allmulticast mode [ 50.512118][ T6312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6312 comm=syz.3.116 [ 50.512263][ T6271] bridge_slave_1: entered promiscuous mode [ 50.517882][ T6312] bad cache= option: nonwiband/rdma_cm [ 50.517882][ T6312] [ 50.520476][ T6312] CIFS: VFS: bad cache= option: nonwiband/rdma_cm [ 50.600738][ T6317] ALSA: seq fatal error: cannot create timer (-22) [ 50.609760][ T6314] Context (ID=0x1) not attached to queue pair (handle=0x2:0x0) [ 50.620188][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.634297][ T6317] netlink: 'syz.2.120': attribute type 19 has an invalid length. [ 50.641201][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.657652][ T6317] xt_connbytes: Forcing CT accounting to be enabled [ 50.660251][ T6317] Cannot find add_set index 0 as target [ 50.695528][ T1137] hsr_slave_0: left promiscuous mode [ 50.700251][ T6322] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 50.708690][ T1137] hsr_slave_1: left promiscuous mode [ 50.711649][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.725594][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.728673][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.730709][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.746459][ T1137] veth1_macvtap: left promiscuous mode [ 50.748305][ T1137] veth0_macvtap: left promiscuous mode [ 50.749821][ T1137] veth1_vlan: left promiscuous mode [ 50.751825][ T1137] veth0_vlan: left promiscuous mode [ 50.978954][ T6330] kvm: emulating exchange as write [ 51.513853][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 51.587249][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 51.597091][ T5963] Bluetooth: hci1: command tx timeout [ 51.755366][ T5963] Bluetooth: hci2: command tx timeout [ 51.997822][ T6350] netlink: 'syz.3.130': attribute type 2 has an invalid length. [ 52.182121][ T6271] team0: Port device team_slave_0 added [ 52.189658][ T6271] team0: Port device team_slave_1 added [ 52.227290][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.229239][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.236431][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.244719][ T5963] Bluetooth: hci3: command tx timeout [ 52.264128][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.265975][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.273071][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.312380][ T6271] hsr_slave_0: entered promiscuous mode [ 52.321513][ T6271] hsr_slave_1: entered promiscuous mode [ 52.329481][ T6271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.331684][ T6271] Cannot create hsr debugfs directory [ 52.441819][ T6271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.445740][ T6271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.451931][ T6271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.453971][ T6374] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 52.466163][ T6271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.506508][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.524046][ T6271] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.533180][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.535228][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.537907][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.539759][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.665944][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.707525][ T6406] kAFS: Can only specify source 'none' with -o dyn [ 52.830195][ T6271] veth0_vlan: entered promiscuous mode [ 52.835352][ T6271] veth1_vlan: entered promiscuous mode [ 52.858224][ T6271] veth0_macvtap: entered promiscuous mode [ 52.863432][ T6271] veth1_macvtap: entered promiscuous mode [ 52.869580][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.872291][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.875647][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.878437][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.880927][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.884308][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.888421][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.904846][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.908233][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.910881][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.914145][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.916663][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.919377][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.923156][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.927691][ T6271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.930742][ T6271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.933767][ T6271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.936639][ T6271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.997987][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.004104][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.016839][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.019149][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.211834][ T6453] __nla_validate_parse: 1 callbacks suppressed [ 53.211844][ T6453] netlink: 288 bytes leftover after parsing attributes in process `syz.1.155'. [ 53.256581][ T6457] 9pnet_fd: Insufficient options for proto=fd [ 53.365292][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 53.367815][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 53.621591][ T6484] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.782257][ T6511] IPVS: Unknown mcast interface: nr0 [ 53.838670][ T5963] Bluetooth: hci2: command tx timeout [ 53.859111][ T6527] netlink: 'syz.4.181': attribute type 5 has an invalid length. [ 53.930644][ T39] kauditd_printk_skb: 75 callbacks suppressed [ 53.930673][ T39] audit: type=1400 audit(1730723500.711:315): avc: denied { read write } for pid=6542 comm="syz.4.192" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.943051][ T39] audit: type=1400 audit(1730723500.711:316): avc: denied { open } for pid=6542 comm="syz.4.192" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.949095][ T39] audit: type=1400 audit(1730723500.721:317): avc: denied { ioctl } for pid=6542 comm="syz.4.192" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.969197][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 53.989919][ T39] audit: type=1400 audit(1730723500.771:318): avc: denied { getopt } for pid=6556 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.002553][ T39] audit: type=1400 audit(1730723500.781:319): avc: denied { create } for pid=6559 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.016292][ T39] audit: type=1400 audit(1730723500.791:320): avc: denied { getopt } for pid=6559 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.042692][ T6569] openvswitch: netlink: Message has 1 unknown bytes. [ 54.044978][ T6569] openvswitch: netlink: Actions may not be safe on all matching packets [ 54.048383][ T39] audit: type=1400 audit(1730723500.831:321): avc: denied { append } for pid=6570 comm="syz.4.204" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.097452][ T6579] nfs4: Unknown parameter 'don' [ 54.119045][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 54.122101][ T6587] netlink: 48 bytes leftover after parsing attributes in process `syz.2.211'. [ 54.133881][ T6591] binder: binder_mmap: 6590 205b4000-205b6000 bad vm_flags failed -1 [ 54.134421][ T39] audit: type=1400 audit(1730723500.921:322): avc: denied { map } for pid=6590 comm="syz.3.214" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.168556][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.218'. [ 54.208969][ T39] audit: type=1400 audit(1730723500.991:323): avc: denied { create } for pid=6609 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 54.214934][ T39] audit: type=1400 audit(1730723500.991:324): avc: denied { write } for pid=6609 comm="syz.4.223" path="socket:[13033]" dev="sockfs" ino=13033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 54.237222][ T5963] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 54.240120][ T5963] Bluetooth: hci0: Injecting HCI hardware error event [ 54.243162][ T5963] Bluetooth: hci0: hardware error 0x00 [ 54.274065][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 54.315909][ T6636] openvswitch: netlink: Flow key attribute not present in set flow. [ 54.458153][ T6649] delete_channel: no stack [ 54.541547][ T6656] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.565937][ T6664] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 54.568156][ T6664] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 54.580887][ T6664] hsr_slave_0: left promiscuous mode [ 54.595506][ T6664] hsr_slave_1: left promiscuous mode [ 54.652574][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.812615][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 54.823891][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.827629][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.832515][ T30] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 54.835412][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.840504][ T30] usb 7-1: config 0 descriptor?? [ 54.873461][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.032518][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 55.037501][ T8] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 55.039672][ T8] usb 6-1: config 179 has no interface number 0 [ 55.041319][ T8] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 55.045140][ T8] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 55.048126][ T8] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.051474][ T8] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 55.055171][ T8] usb 6-1: config 179 interface 65 has no altsetting 0 [ 55.057198][ T8] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 55.059570][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.064027][ T6668] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 55.070560][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input8 [ 55.114114][ T5347] input input8: unable to receive magic message: -110 [ 55.139780][ T5347] input input8: unable to receive magic message: -32 [ 55.143450][ T5347] input input8: unable to receive magic message: -32 [ 55.148125][ T5347] input input8: unable to receive magic message: -32 [ 55.152993][ T5347] input input8: unable to receive magic message: -32 [ 55.233696][ T6686] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 55.276456][ T6668] input input8: unable to receive magic message: -32 [ 55.283333][ T1446] usb 6-1: USB disconnect, device number 2 [ 55.283355][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 55.288918][ T1446] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 55.432595][ T6690] warning: `syz.3.258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.519787][ T6714] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 55.590052][ T6721] syz.3.270: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 55.595438][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.3.270 Not tainted 6.12.0-rc6-syzkaller #0 [ 55.597793][ T6721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.600602][ T6721] Call Trace: [ 55.601481][ T6721] [ 55.602272][ T6721] dump_stack_lvl+0x16c/0x1f0 [ 55.603544][ T6721] warn_alloc+0x24d/0x3a0 [ 55.604699][ T6721] ? __pfx_warn_alloc+0x10/0x10 [ 55.605979][ T6721] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 55.607505][ T6721] ? kasan_save_stack+0x42/0x60 [ 55.608807][ T6721] ? kasan_save_stack+0x33/0x60 [ 55.610084][ T6721] ? kasan_save_track+0x14/0x30 [ 55.611359][ T6721] ? __kasan_kmalloc+0xaa/0xb0 [ 55.612627][ T6721] ? xskq_create+0x52/0x1d0 [ 55.613823][ T6721] ? do_sock_setsockopt+0x222/0x480 [ 55.615200][ T6721] ? __sys_setsockopt+0x1a4/0x270 [ 55.616542][ T6721] ? __x64_sys_setsockopt+0xbd/0x160 [ 55.617938][ T6721] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 55.619443][ T6721] ? xskq_create+0xfb/0x1d0 [ 55.620875][ T6721] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.622582][ T6721] ? xskq_create+0xfb/0x1d0 [ 55.624148][ T6721] vmalloc_user_noprof+0x6b/0x90 [ 55.625497][ T6721] ? xskq_create+0xfb/0x1d0 [ 55.626733][ T6721] xskq_create+0xfb/0x1d0 [ 55.627905][ T6721] xsk_setsockopt+0x757/0xa10 [ 55.629160][ T6721] ? __pfx_xsk_setsockopt+0x10/0x10 [ 55.630528][ T6721] ? selinux_socket_setsockopt+0x6a/0x80 [ 55.632017][ T6721] ? __pfx_xsk_setsockopt+0x10/0x10 [ 55.633382][ T6721] do_sock_setsockopt+0x222/0x480 [ 55.634862][ T6721] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 55.636353][ T6721] ? fdget+0x176/0x210 [ 55.637452][ T6721] __sys_setsockopt+0x1a4/0x270 [ 55.638702][ T6721] ? __pfx___sys_setsockopt+0x10/0x10 [ 55.640144][ T6721] ? __sys_socket+0xad/0x260 [ 55.641382][ T6721] ? __pfx___x64_sys_futex+0x10/0x10 [ 55.642801][ T6721] __x64_sys_setsockopt+0xbd/0x160 [ 55.644464][ T6721] ? do_syscall_64+0x91/0x250 [ 55.645724][ T6721] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.647035][ T6721] do_syscall_64+0xcd/0x250 [ 55.648221][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.649776][ T6721] RIP: 0033:0x7fce2177e719 [ 55.650957][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.655939][ T6721] RSP: 002b:00007fce225a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 55.658108][ T6721] RAX: ffffffffffffffda RBX: 00007fce21935f80 RCX: 00007fce2177e719 [ 55.660208][ T6721] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 55.662282][ T6721] RBP: 00007fce217f139e R08: 0000000000000020 R09: 0000000000000000 [ 55.664802][ T6721] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 55.667061][ T6721] R13: 0000000000000000 R14: 00007fce21935f80 R15: 00007ffeedb48de8 [ 55.669736][ T6721] [ 55.672203][ T6721] Mem-Info: [ 55.673312][ T6721] active_anon:9249 inactive_anon:0 isolated_anon:0 [ 55.673312][ T6721] active_file:825 inactive_file:38769 isolated_file:0 [ 55.673312][ T6721] unevictable:1768 dirty:350 writeback:0 [ 55.673312][ T6721] slab_reclaimable:11175 slab_unreclaimable:70602 [ 55.673312][ T6721] mapped:17818 shmem:2507 pagetables:751 [ 55.673312][ T6721] sec_pagetables:307 bounce:0 [ 55.673312][ T6721] kernel_misc_reclaimable:0 [ 55.673312][ T6721] free:494808 free_pcp:1345 free_cma:0 [ 55.687183][ T6721] Node 0 active_anon:37600kB inactive_anon:0kB active_file:3304kB inactive_file:155004kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:71212kB dirty:1392kB writeback:0kB shmem:6440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12016kB pagetables:3040kB sec_pagetables:1228kB all_unreclaimable? no [ 55.696362][ T6721] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 55.705513][ T6721] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.713431][ T6721] lowmem_reserve[]: 0 1214 0 0 0 [ 55.714766][ T6721] Node 0 DMA32 free:375912kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:30904kB inactive_anon:0kB active_file:3304kB inactive_file:155004kB unevictable:3536kB writepending:1392kB present:2080628kB managed:1272192kB mlocked:0kB bounce:0kB free_pcp:10464kB local_pcp:1064kB free_cma:0kB [ 55.722619][ T6721] lowmem_reserve[]: 0 0 0 0 0 [ 55.723904][ T6721] Node 1 Normal free:1588464kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:12kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:416kB local_pcp:0kB free_cma:0kB [ 55.731188][ T6721] lowmem_reserve[]: 0 0 0 0 0 [ 55.732443][ T6721] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.735734][ T6721] Node 0 DMA32: 104*4kB (UME) 193*8kB (UME) 144*16kB (UME) 127*32kB (UME) 80*64kB (UME) 8*128kB (UME) 9*256kB (UME) 13*512kB (ME) 8*1024kB (UME) 2*2048kB (UE) 85*4096kB (M) = 383880kB [ 55.740657][ T6721] Node 1 Normal: 4*4kB (UME) 12*8kB (UME) 26*16kB (UME) 185*32kB (UME) 53*64kB (UME) 19*128kB (UME) 7*256kB (UE) 3*512kB (M) 0*1024kB 4*2048kB (UME) 382*4096kB (UM) = 1588464kB [ 55.746746][ T6721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.750786][ T6721] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.754136][ T6721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.756686][ T6721] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.759130][ T6721] 42089 total pagecache pages [ 55.760409][ T6721] 0 pages in swap cache [ 55.761516][ T6721] Free swap = 124704kB [ 55.762826][ T6721] Total swap = 124996kB [ 55.763957][ T6721] 1048443 pages RAM [ 55.765022][ T6721] 0 pages HighMem/MovableOnly [ 55.766552][ T6721] 281074 pages reserved [ 55.767937][ T6721] 0 pages cma reserved [ 55.839580][ T6737] netlink: 48 bytes leftover after parsing attributes in process `syz.3.274'. [ 55.845621][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.271'. [ 55.870178][ T6730] infiniband syz2: set active [ 55.872604][ T6730] infiniband syz2: added team_slave_1 [ 55.899754][ T6730] RDS/IB: syz2: added [ 55.901182][ T6730] smc: adding ib device syz2 with port count 1 [ 55.902972][ T6730] smc: ib device syz2 port 1 has pnetid [ 55.913425][ T64] Bluetooth: hci2: command tx timeout [ 55.962657][ T6753] netlink: 'syz.1.281': attribute type 4 has an invalid length. [ 56.084388][ T6769] FAT-fs (nullb0): bogus number of reserved sectors [ 56.086410][ T6769] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 56.163552][ T6782] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.289092][ T6800] befs: Unrecognized mount option "ß" or missing value [ 56.291209][ T6800] befs: (nbd1): cannot parse mount options [ 56.314419][ T5963] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 56.364418][ T6808] vivid-000: ================= START STATUS ================= [ 56.367105][ T6808] vivid-000: Test Pattern: 75% Colorbar [ 56.368663][ T6808] vivid-000: Fill Percentage of Frame: 100 [ 56.370250][ T6808] vivid-000: Horizontal Movement: No Movement [ 56.371970][ T6808] vivid-000: Vertical Movement: No Movement [ 56.376050][ T6808] vivid-000: OSD Text Mode: All [ 56.377386][ T6808] vivid-000: Show Border: false [ 56.378695][ T6808] vivid-000: Show Square: false [ 56.380147][ T6808] vivid-000: Sensor Flipped Horizontally: false [ 56.381839][ T6808] vivid-000: Sensor Flipped Vertically: false [ 56.385583][ T6808] vivid-000: Insert SAV Code in Image: false [ 56.387503][ T6808] vivid-000: Insert EAV Code in Image: false [ 56.389172][ T6808] vivid-000: Insert Video Guard Band: false [ 56.390929][ T6808] vivid-000: Reduced Framerate: false [ 56.393345][ T6808] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 56.395662][ T6808] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 56.398020][ T6808] vivid-000: Enable Capture Cropping: true [ 56.399810][ T6808] vivid-000: Enable Capture Composing: true [ 56.401434][ T6808] vivid-000: Enable Capture Scaler: true [ 56.403211][ T6808] vivid-000: Timestamp Source: End of Frame [ 56.406057][ T6808] vivid-000: Colorspace: sRGB [ 56.407627][ T6808] vivid-000: Transfer Function: Default [ 56.409043][ T6808] vivid-000: Y'CbCr Encoding: Default [ 56.410468][ T6808] vivid-000: HSV Encoding: Hue 0-179 [ 56.411897][ T6808] vivid-000: Quantization: Default [ 56.415251][ T6808] vivid-000: Apply Alpha To Red Only: false [ 56.417680][ T6808] vivid-000: Standard Aspect Ratio: 4x3 [ 56.419147][ T6808] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 56.421220][ T6808] vivid-000: DV Timings: 640x480p59 inactive [ 56.423180][ T6808] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 56.425187][ T6808] vivid-000: Maximum EDID Blocks: 2 [ 56.428444][ T6808] vivid-000: Limited RGB Range (16-235): false [ 56.430365][ T6808] vivid-000: Rx RGB Quantization Range: Automatic [ 56.432875][ T6808] vivid-000: Power Present: 0x00000001 [ 56.435834][ T6808] tpg source WxH: 320x180 (R'G'B) [ 56.437475][ T6808] tpg field: 1 [ 56.438865][ T6808] tpg crop: 320x180@0x0 [ 56.440977][ T6808] tpg compose: 320x180@0x0 [ 56.442942][ T6808] tpg colorspace: 8 [ 56.444824][ T6808] tpg transfer function: 0/0 [ 56.446710][ T6808] tpg quantization: 0/0 [ 56.448234][ T6808] tpg RGB range: 0/2 [ 56.449539][ T6808] vivid-000: ================== END STATUS ================== [ 56.728428][ T6843] gretap1: entered promiscuous mode [ 56.730501][ T6843] gretap1: entered allmulticast mode [ 57.058324][ T6882] kAFS: No cell specified [ 57.079138][ T6885] netlink: 'syz.4.346': attribute type 2 has an invalid length. [ 57.154060][ T6900] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.180002][ T6906] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 57.299084][ T6933] tmpfs: Bad value for 'mpol' [ 57.318208][ T6935] misc userio: No port type given on /dev/userio [ 57.356457][ T6946] netlink: 'syz.4.373': attribute type 2 has an invalid length. [ 57.359267][ T6946] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 57.397906][ T30] usbhid 7-1:0.0: can't add hid device: -71 [ 57.399471][ T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 57.402186][ T30] usb 7-1: USB disconnect, device number 2 [ 57.469341][ T6970] tmpfs: Bad value for 'mpol' [ 57.496426][ T6974] delete_channel: no stack [ 57.498648][ T6975] netlink: 'syz.2.383': attribute type 30 has an invalid length. [ 57.612725][ T6999] nvme_fabrics: missing parameter 'transport=%s' [ 57.615202][ T6999] nvme_fabrics: missing parameter 'nqn=%s' [ 57.633288][ T7007] xt_hashlimit: overflow, rate too high: 0 [ 57.680605][ T7020] program syz.3.405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.705860][ T7023] netlink: 'syz.2.406': attribute type 10 has an invalid length. [ 57.730433][ T7023] team0: Port device wlan1 added [ 57.750682][ T7035] netlink: 'syz.1.412': attribute type 10 has an invalid length. [ 57.761670][ T7035] team0: Device bond0 is up. Set it down before adding it as a team port [ 57.774505][ T7039] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 57.777456][ T7039] netlink: 'syz.4.415': attribute type 2 has an invalid length. [ 57.880927][ T7062] binder: BC_ATTEMPT_ACQUIRE not supported [ 57.884076][ T7062] binder: 7059:7062 ioctl c0306201 20000500 returned -22 [ 58.004564][ T5963] Bluetooth: hci2: command tx timeout [ 58.180062][ T7134] program syz.1.462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.213186][ T7136] __nla_validate_parse: 17 callbacks suppressed [ 58.213198][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.461'. [ 58.217523][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.461'. [ 58.252284][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.461'. [ 58.256094][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.461'. [ 58.265136][ T7158] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 58.345352][ T7176] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 58.349015][ T7176] qnx6: wrong signature (magic) in superblock #1. [ 58.352297][ T7176] qnx6: unable to read the first superblock [ 58.379274][ T7184] netlink: 'syz.4.484': attribute type 10 has an invalid length. [ 58.416859][ T7184] team0: Port device wlan1 added [ 58.477760][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 58.540290][ T7216] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 58.542696][ T7216] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 58.577133][ T7221] xt_l2tp: wrong L2TP version: 0 [ 58.630192][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.507'. [ 58.670374][ T7236] syz.2.510: attempt to access beyond end of device [ 58.670374][ T7236] loop2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 58.673849][ T7236] qnx6: unable to read the first superblock [ 58.676636][ T7236] syz.2.510: attempt to access beyond end of device [ 58.676636][ T7236] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 58.680906][ T7236] qnx6: unable to read the first superblock [ 58.692817][ T7236] qnx6: unable to read the first superblock [ 58.700421][ T7243] xt_hashlimit: invalid rate [ 58.740331][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 58.770424][ T7255] tmpfs: Unknown parameter 'subj_user' [ 58.832167][ T7264] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 58.854644][ T7256] XFS (sr0): Invalid superblock magic number [ 58.984206][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 58.984223][ T39] audit: type=1400 audit(1730723505.771:376): avc: denied { setrlimit } for pid=7276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 58.992805][ T7275] geneve2: entered promiscuous mode [ 58.994641][ T7275] geneve2: entered allmulticast mode [ 58.998205][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.527'. [ 59.067582][ T7284] wg2: entered promiscuous mode [ 59.069128][ T7284] wg2: entered allmulticast mode [ 59.092628][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 59.150080][ T39] audit: type=1400 audit(1730723505.931:377): avc: denied { setopt } for pid=7295 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.174971][ T7301] xt_connbytes: Forcing CT accounting to be enabled [ 59.176955][ T7301] No such timeout policy "syz0" [ 59.199959][ T7304] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 59.572550][ T73] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 59.618429][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 59.653193][ T39] audit: type=1400 audit(1730723506.441:378): avc: denied { read } for pid=7347 comm="syz.2.561" path="socket:[13776]" dev="sockfs" ino=13776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.735944][ T73] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 59.738047][ T73] usb 6-1: config 0 has no interface number 0 [ 59.739623][ T73] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 59.742933][ T73] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 59.748065][ T73] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 59.750418][ T73] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 59.752849][ T73] usb 6-1: Product: syz [ 59.754538][ T73] usb 6-1: SerialNumber: syz [ 59.757697][ T73] usb 6-1: config 0 descriptor?? [ 59.760757][ T73] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 59.764646][ T7366] Bluetooth: MGMT ver 1.23 [ 59.769421][ T73] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input9 [ 59.804982][ T39] audit: type=1400 audit(1730723506.591:379): avc: denied { bind } for pid=7373 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.812191][ T39] audit: type=1400 audit(1730723506.591:380): avc: denied { node_bind } for pid=7373 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 59.963996][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.964922][ T25] usb 6-1: USB disconnect, device number 3 [ 59.965932][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 59.974959][ T25] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 60.124165][ T39] audit: type=1400 audit(1730723506.911:381): avc: denied { recv } for pid=24 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=44922 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 60.133845][ T39] audit: type=1400 audit(1730723506.911:382): avc: denied { recv } for pid=24 comm="ksoftirqd/2" saddr=127.0.0.1 src=44922 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 60.194522][ T7427] xt_hashlimit: size too large, truncated to 1048576 [ 60.837828][ T39] audit: type=1400 audit(1730723507.621:383): avc: denied { read } for pid=7499 comm="syz.2.623" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.888923][ T7509] xt_hashlimit: size too large, truncated to 1048576 [ 60.988933][ T39] audit: type=1400 audit(1730723507.771:384): avc: denied { execute } for pid=7519 comm="syz.3.632" path="/141/cpu.stat" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.086992][ T7525] random: crng reseeded on system resumption [ 61.090692][ T39] audit: type=1400 audit(1730723507.871:385): avc: denied { append } for pid=7524 comm="syz.2.634" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.112619][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.272522][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 61.276158][ T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 61.280313][ T25] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 61.283044][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.285466][ T25] usb 6-1: Product: syz [ 61.286632][ T25] usb 6-1: Manufacturer: syz [ 61.287873][ T25] usb 6-1: SerialNumber: syz [ 61.290041][ T25] usb 6-1: config 0 descriptor?? [ 61.293136][ T7506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 61.296111][ T25] hub 6-1:0.0: bad descriptor, ignoring hub [ 61.297797][ T25] hub 6-1:0.0: probe with driver hub failed with error -5 [ 61.300695][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 61.308443][ T7530] IPVS: Unknown mcast interface: hsr0 [ 61.500186][ T73] usb 6-1: USB disconnect, device number 4 [ 61.500294][ C2] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 62.298534][ T7624] kvm: kvm [7623]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xb285 [ 62.332534][ T73] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.483595][ T73] usb 8-1: Using ep0 maxpacket: 8 [ 62.486306][ T73] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.489285][ T73] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.492477][ T73] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.495301][ T73] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.499789][ T73] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.502601][ T73] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.710326][ T73] usb 8-1: GET_CAPABILITIES returned 0 [ 62.711798][ T73] usbtmc 8-1:16.0: can't read capabilities [ 62.772629][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.790982][ T7659] team0: No ports can be present during mode change [ 62.934809][ T73] usb 8-1: USB disconnect, device number 3 [ 62.944301][ T30] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 62.947248][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.952650][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.955188][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 62.959810][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 62.962271][ T30] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 62.964940][ T30] usb 6-1: Manufacturer: syz [ 62.967211][ T30] usb 6-1: config 0 descriptor?? [ 63.092654][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 63.244433][ T25] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.247393][ T25] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 63.249958][ T25] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.253416][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.258011][ T7665] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 63.262557][ T25] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.377304][ T30] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 63.380708][ T30] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 63.387146][ T30] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 63.425388][ T7700] __nla_validate_parse: 15 callbacks suppressed [ 63.425398][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 63.513462][ T9] usb 9-1: USB disconnect, device number 2 [ 63.563368][ T7713] netlink: 76 bytes leftover after parsing attributes in process `syz.2.725'. [ 63.571786][ T7715] random: crng reseeded on system resumption [ 63.636745][ T7723] bridge0: port 3(veth0_to_bridge) entered blocking state [ 63.640145][ T7723] bridge0: port 3(veth0_to_bridge) entered disabled state [ 63.642799][ T7723] veth0_to_bridge: entered allmulticast mode [ 63.647377][ T7723] veth0_to_bridge: entered promiscuous mode [ 63.649751][ T7723] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.656218][ T7723] bridge0: port 3(veth0_to_bridge) entered blocking state [ 63.659264][ T7723] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 64.117426][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 64.117438][ T39] audit: type=1400 audit(1730723510.901:393): avc: denied { name_bind } for pid=7755 comm="syz.4.734" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 64.143772][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 64.146155][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.148109][ T7760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.150668][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.154439][ T7760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.267121][ T7772] validate_nla: 2 callbacks suppressed [ 64.267131][ T7772] netlink: 'syz.3.743': attribute type 46 has an invalid length. [ 64.573481][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 64.576578][ T7809] netlink: 'syz.3.761': attribute type 16 has an invalid length. [ 64.579044][ T7809] netlink: 48 bytes leftover after parsing attributes in process `syz.3.761'. [ 64.582654][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.620738][ T39] audit: type=1400 audit(1730723511.401:394): avc: denied { name_bind } for pid=7816 comm="syz.3.764" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 64.634539][ T39] audit: type=1400 audit(1730723511.411:395): avc: denied { create } for pid=7816 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.641699][ T39] audit: type=1400 audit(1730723511.411:396): avc: denied { connect } for pid=7816 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.904302][ T7837] Zero length message leads to an empty skb [ 64.975890][ T39] audit: type=1400 audit(1730723511.761:397): avc: denied { setopt } for pid=7856 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.982080][ T39] audit: type=1400 audit(1730723511.761:398): avc: denied { read } for pid=7856 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.027183][ T39] audit: type=1400 audit(1730723511.811:399): avc: denied { write } for pid=7856 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.223167][ T5998] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 65.287069][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 65.372616][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 65.394361][ T5998] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 65.396749][ T5998] usb 9-1: config 0 has no interface number 0 [ 65.398414][ T5998] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 65.401317][ T5998] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 65.405216][ T5998] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 65.408094][ T5998] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 65.411921][ T5998] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.416276][ T5998] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 65.418644][ T5998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.422618][ T5998] usb 9-1: config 0 descriptor?? [ 65.424599][ T7857] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 65.429864][ T5998] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 65.479855][ T30] usb 6-1: USB disconnect, device number 5 [ 65.510274][ T39] audit: type=1400 audit(1730723512.291:400): avc: denied { ioctl } for pid=7918 comm="syz.1.791" path="socket:[16360]" dev="sockfs" ino=16360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.522519][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 65.525224][ T25] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 65.527774][ T25] usb 8-1: config 0 has no interface number 0 [ 65.529396][ T25] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.532306][ T25] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 65.535473][ T25] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 65.539438][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.544062][ T25] usb 8-1: config 0 descriptor?? [ 65.547578][ T25] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 65.568260][ T39] audit: type=1400 audit(1730723512.351:401): avc: denied { ioctl } for pid=7926 comm="syz.1.793" path="socket:[17339]" dev="sockfs" ino=17339 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.605006][ T7930] pim6reg1: entered promiscuous mode [ 65.606600][ T7930] pim6reg1: entered allmulticast mode [ 65.629432][ T7857] iowarrior 8-1:0.1: Error -90 while submitting URB [ 65.636711][ T55] usb 9-1: USB disconnect, device number 3 [ 65.640390][ T55] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 65.754643][ T7875] iowarrior 8-1:0.1: Error -90 while submitting URB [ 65.760285][ T30] usb 8-1: USB disconnect, device number 4 [ 65.764401][ T30] iowarrior 8-1:0.1: I/O-Warror #0 now disconnected [ 65.842824][ T1446] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.972579][ T1446] usb 7-1: device descriptor read/64, error -71 [ 66.073519][ T39] audit: type=1400 audit(1730723512.861:402): avc: denied { egress } for pid=16 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 66.213526][ T1446] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.268387][ T7988] vxcan1: tx address claim with different name [ 66.289162][ T7990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.813'. [ 66.314639][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 66.340101][ T8003] syz_tun: entered promiscuous mode [ 66.342480][ T1446] usb 7-1: device descriptor read/64, error -71 [ 66.344443][ T8003] batadv_slave_0: entered promiscuous mode [ 66.348093][ T8003] hsr1: entered allmulticast mode [ 66.349459][ T8003] syz_tun: entered allmulticast mode [ 66.350868][ T8003] batadv_slave_0: entered allmulticast mode [ 66.394156][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 66.453771][ T1446] usb usb7-port1: attempt power cycle [ 66.473903][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 66.556003][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 66.589365][ T8047] @: renamed from vlan0 (while UP) [ 66.625259][ T8053] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 66.792607][ T1446] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 66.813121][ T1446] usb 7-1: device descriptor read/8, error -71 [ 67.053465][ T1446] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 67.058649][ T8100] syzkaller1: entered promiscuous mode [ 67.060179][ T8100] syzkaller1: entered allmulticast mode [ 67.073516][ T1446] usb 7-1: device descriptor read/8, error -71 [ 67.183781][ T1446] usb usb7-port1: unable to enumerate USB device [ 67.633878][ T8131] netlink: 'syz.1.876': attribute type 4 has an invalid length. [ 67.720979][ T8164] netlink: 'syz.1.890': attribute type 9 has an invalid length. [ 67.725564][ T8164] openvswitch: netlink: Port -524278 exceeds max allowable 65535 [ 67.726048][ T8165] process 'syz.4.891' launched '/dev/fd/3' with NULL argv: empty string added [ 67.736801][ T8167] ======================================================= [ 67.736801][ T8167] WARNING: The mand mount option has been deprecated and [ 67.736801][ T8167] and is ignored by this kernel. Remove the mand [ 67.736801][ T8167] option from the mount to silence this warning. [ 67.736801][ T8167] ======================================================= [ 67.747969][ T8167] Mount JFS Failure: -22 [ 68.152890][ T73] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 68.302950][ T73] usb 9-1: Using ep0 maxpacket: 8 [ 68.306210][ T73] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 68.309233][ T73] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.312718][ T73] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.316147][ T73] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.319772][ T73] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.324299][ T73] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.327246][ T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.535450][ T73] usb 9-1: usb_control_msg returned -32 [ 68.537087][ T73] usbtmc 9-1:16.0: can't read capabilities [ 68.637903][ T8213] __nla_validate_parse: 9 callbacks suppressed [ 68.637913][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 68.792589][ T5963] Bluetooth: hci2: command tx timeout [ 68.888893][ T8231] usbtmc 9-1:16.0: control status returned 0 [ 69.090069][ T6028] usb 9-1: USB disconnect, device number 4 [ 69.131565][ T8257] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.135024][ T67] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.292216][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 69.292230][ T39] audit: type=1400 audit(1730723516.071:423): avc: denied { create } for pid=8278 comm="syz.1.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.385948][ T39] audit: type=1400 audit(1730723516.171:424): avc: denied { sys_chroot } for pid=8286 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 69.392976][ T39] audit: type=1400 audit(1730723516.171:425): avc: denied { setgid } for pid=8286 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 69.400928][ T8290] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 69.403921][ T8290] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 69.426484][ T39] audit: type=1400 audit(1730723516.211:426): avc: denied { connect } for pid=8294 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.431822][ T39] audit: type=1400 audit(1730723516.211:427): avc: denied { bind } for pid=8294 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.437090][ T39] audit: type=1400 audit(1730723516.221:428): avc: denied { write } for pid=8294 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.443520][ T39] audit: type=1400 audit(1730723516.221:429): avc: denied { read } for pid=8294 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.601643][ T39] audit: type=1400 audit(1730723516.381:430): avc: denied { connect } for pid=8313 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.658868][ T8324] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 69.661483][ T8323] IPVS: stopping master sync thread 8324 ... [ 69.710860][ T39] audit: type=1400 audit(1730723516.491:431): avc: denied { mount } for pid=8327 comm="syz.4.948" name="/" dev="overlay" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.716107][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.950'. [ 69.717623][ T39] audit: type=1400 audit(1730723516.491:432): avc: denied { remount } for pid=8327 comm="syz.4.948" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.719282][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.950'. [ 69.789578][ T8339] vlan2: entered allmulticast mode [ 69.791601][ T8339] bond0: entered allmulticast mode [ 69.793253][ T8339] bond_slave_0: entered allmulticast mode [ 69.794948][ T8339] bond_slave_1: entered allmulticast mode [ 69.797901][ T8339] bond0: left allmulticast mode [ 69.799285][ T8339] bond_slave_0: left allmulticast mode [ 69.800828][ T8339] bond_slave_1: left allmulticast mode [ 70.109395][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.2.966'. [ 70.154052][ T8372] xt_CONNSECMARK: invalid mode: 0 [ 70.387842][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 70.390180][ T8387] netlink: 3 bytes leftover after parsing attributes in process `syz.4.973'. [ 70.452495][ T1446] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 70.573114][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 70.624714][ T1446] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.627024][ T1446] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.629632][ T1446] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.632863][ T1446] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.643938][ T1446] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.646494][ T1446] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.648605][ T1446] usb 7-1: Product: syz [ 70.649683][ T1446] usb 7-1: Manufacturer: syz [ 70.654867][ T1446] cdc_wdm 7-1:1.0: skipping garbage [ 70.656607][ T1446] cdc_wdm 7-1:1.0: skipping garbage [ 70.659445][ T1446] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 70.661023][ T1446] cdc_wdm 7-1:1.0: Unknown control protocol [ 70.688391][ T8399] xt_hashlimit: size too large, truncated to 1048576 [ 70.704885][ T8401] sctp: [Deprecated]: syz.1.980 (pid 8401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.704885][ T8401] Use struct sctp_sack_info instead [ 70.733966][ T8404] netlink: 'syz.1.981': attribute type 10 has an invalid length. [ 70.746798][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.749396][ T8404] team0: Port device bond0 added [ 70.784854][ T1145] ------------[ cut here ]------------ [ 70.786688][ T1145] WARNING: CPU: 2 PID: 1145 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x24c/0x2c0 [ 70.790330][ T1145] Modules linked in: [ 70.792106][ T1145] CPU: 2 UID: 0 PID: 1145 Comm: kworker/u32:9 Not tainted 6.12.0-rc6-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 70.797267][ T1145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.801168][ T1145] Workqueue: events_unbound cfg80211_wiphy_work [ 70.802988][ T1145] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 70.804758][ T1145] Code: 7b 40 e8 67 bf dc ff 48 83 c4 10 5b 5d e9 8c d5 fe f6 e8 87 d5 fe f6 48 89 df e8 0f 60 ff ff e9 40 ff ff ff e8 75 d5 fe f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 18 8c 5f 90 e8 40 5f 60 f7 e9 db [ 70.810178][ T1145] RSP: 0018:ffffc90005e3fad0 EFLAGS: 00010293 [ 70.811838][ T1145] RAX: 0000000000000000 RBX: ffff88804b0b8e40 RCX: ffffffff8a8ea4a6 [ 70.813999][ T1145] RDX: ffff888026fa8000 RSI: ffffffff8a8ea5db RDI: 0000000000000001 [ 70.816108][ T1145] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 70.818455][ T1145] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 70.822369][ T1145] R13: ffff88804b0ba8c0 R14: ffff88804b0b8e40 R15: dffffc0000000000 [ 70.825041][ T1145] FS: 0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 70.827701][ T1145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.829536][ T1145] CR2: 0000001b2fc1fffc CR3: 0000000031596000 CR4: 0000000000352ef0 [ 70.831924][ T1145] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.834488][ T1145] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.836489][ T1145] Call Trace: [ 70.837316][ T1145] [ 70.838040][ T1145] ? __warn+0xea/0x3d0 [ 70.839246][ T1145] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 70.840698][ T1145] ? report_bug+0x3c0/0x580 [ 70.841820][ T1145] ? handle_bug+0x54/0xa0 [ 70.843148][ T1145] ? exc_invalid_op+0x17/0x50 [ 70.844494][ T1145] ? asm_exc_invalid_op+0x1a/0x20 [ 70.845795][ T1145] ? ieee80211_start_next_roc+0x116/0x2c0 [ 70.847228][ T1145] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 70.848726][ T1145] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 70.850206][ T1145] __ieee80211_scan_completed+0x4fe/0xe50 [ 70.851780][ T1145] ieee80211_scan_work+0x440/0x2080 [ 70.853293][ T1145] ? cfg80211_wiphy_work+0x3a3/0x550 [ 70.855423][ T1145] ? __pfx_lock_release+0x10/0x10 [ 70.857088][ T1145] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 70.859038][ T1145] ? mark_held_locks+0x9f/0xe0 [ 70.860691][ T1145] ? rcu_is_watching+0x12/0xc0 [ 70.862021][ T1145] cfg80211_wiphy_work+0x3d9/0x550 [ 70.863898][ T1145] process_one_work+0x9c5/0x1ba0 [ 70.865442][ T1145] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 70.867120][ T1145] ? __pfx_process_one_work+0x10/0x10 [ 70.868753][ T1145] ? assign_work+0x1a0/0x250 [ 70.869994][ T1145] worker_thread+0x6c8/0xf00 [ 70.871250][ T1145] ? __kthread_parkme+0x148/0x220 [ 70.872667][ T1145] ? __pfx_worker_thread+0x10/0x10 [ 70.874008][ T1145] kthread+0x2c1/0x3a0 [ 70.875077][ T1145] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.876445][ T1145] ? __pfx_kthread+0x10/0x10 [ 70.877661][ T1145] ret_from_fork+0x45/0x80 [ 70.878872][ T1145] ? __pfx_kthread+0x10/0x10 [ 70.880114][ T1145] ret_from_fork_asm+0x1a/0x30 [ 70.881422][ T1145] [ 70.882239][ T1145] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 70.884417][ T1145] CPU: 2 UID: 0 PID: 1145 Comm: kworker/u32:9 Not tainted 6.12.0-rc6-syzkaller #0 [ 70.886798][ T1145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.889778][ T1145] Workqueue: events_unbound cfg80211_wiphy_work [ 70.891437][ T1145] Call Trace: [ 70.892302][ T1145] [ 70.893083][ T1145] dump_stack_lvl+0x3d/0x1f0 [ 70.894715][ T1145] panic+0x71d/0x800 [ 70.896582][ T1145] ? __pfx_panic+0x10/0x10 [ 70.897796][ T1145] ? show_trace_log_lvl+0x29d/0x3d0 [ 70.899392][ T1145] ? check_panic_on_warn+0x1f/0xb0 [ 70.901114][ T1145] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 70.902654][ T1145] check_panic_on_warn+0xab/0xb0 [ 70.903973][ T1145] __warn+0xf6/0x3d0 [ 70.905078][ T1145] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 70.906790][ T1145] report_bug+0x3c0/0x580 [ 70.908116][ T1145] handle_bug+0x54/0xa0 [ 70.909476][ T1145] exc_invalid_op+0x17/0x50 [ 70.910802][ T1145] asm_exc_invalid_op+0x1a/0x20 [ 70.912172][ T1145] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 70.913859][ T1145] Code: 7b 40 e8 67 bf dc ff 48 83 c4 10 5b 5d e9 8c d5 fe f6 e8 87 d5 fe f6 48 89 df e8 0f 60 ff ff e9 40 ff ff ff e8 75 d5 fe f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 18 8c 5f 90 e8 40 5f 60 f7 e9 db [ 70.919032][ T1145] RSP: 0018:ffffc90005e3fad0 EFLAGS: 00010293 [ 70.920685][ T1145] RAX: 0000000000000000 RBX: ffff88804b0b8e40 RCX: ffffffff8a8ea4a6 [ 70.922831][ T1145] RDX: ffff888026fa8000 RSI: ffffffff8a8ea5db RDI: 0000000000000001 [ 70.924968][ T1145] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 70.927208][ T1145] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 70.929364][ T1145] R13: ffff88804b0ba8c0 R14: ffff88804b0b8e40 R15: dffffc0000000000 [ 70.931525][ T1145] ? ieee80211_start_next_roc+0x116/0x2c0 [ 70.933187][ T1145] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 70.935352][ T1145] __ieee80211_scan_completed+0x4fe/0xe50 [ 70.937269][ T1145] ieee80211_scan_work+0x440/0x2080 [ 70.939182][ T1145] ? cfg80211_wiphy_work+0x3a3/0x550 [ 70.940965][ T1145] ? __pfx_lock_release+0x10/0x10 [ 70.942694][ T1145] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 70.944405][ T1145] ? mark_held_locks+0x9f/0xe0 [ 70.945811][ T1145] ? rcu_is_watching+0x12/0xc0 [ 70.947101][ T1145] cfg80211_wiphy_work+0x3d9/0x550 [ 70.948514][ T1145] process_one_work+0x9c5/0x1ba0 [ 70.949847][ T1145] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 70.951364][ T1145] ? __pfx_process_one_work+0x10/0x10 [ 70.952903][ T1145] ? assign_work+0x1a0/0x250 [ 70.954151][ T1145] worker_thread+0x6c8/0xf00 [ 70.955397][ T1145] ? __kthread_parkme+0x148/0x220 [ 70.956782][ T1145] ? __pfx_worker_thread+0x10/0x10 [ 70.958286][ T1145] kthread+0x2c1/0x3a0 [ 70.959646][ T1145] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.961055][ T1145] ? __pfx_kthread+0x10/0x10 [ 70.962399][ T1145] ret_from_fork+0x45/0x80 [ 70.963857][ T1145] ? __pfx_kthread+0x10/0x10 [ 70.965274][ T1145] ret_from_fork_asm+0x1a/0x30 [ 70.966594][ T1145] [ 70.968196][ T1145] Kernel Offset: disabled [ 70.969590][ T1145] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:31:57 Registers: info registers vcpu 0 CPU#0 RAX=00000000000fe7dd RBX=0000000000000000 RCX=ffffffff8b235439 RDX=0000000000000000 RSI=ffffffff8b6ccfa0 RDI=ffffffff8bd1b200 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5908 R15=0000000000000000 RIP=ffffffff8b23681f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c383f44 CR3=0000000031b22000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574712724 0000555574712720 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557470b4a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557471682c 0000555574716700 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4f8eb9a4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffef08 0480033080040010 0013800412800407 80040a012be6752e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff ffd1080a80030480 04020102c0003065 6c69662f2e01ffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401c7080008002d c800656d69745f74 6961775f6f692e71 66622e6f696b6c62 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005a00304100005 9003000400058403 0004000580030004 00019db408000a80 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010580044a100001 0000000806060104 ce00080005b00300 100005a003041000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0590030004000584 0300040005800300 0400019db408000a 800401c708000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2dc800656d69745f 746961775f6f692e 7166622e6f696b6c 6201ffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffd1080a800304 8004020102c00030 656c69662f2e01ff ffffffffffffffef ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000046 RBX=1ffff9200014ef60 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff8b6cd2a0 RDI=ffffffff8bd1b200 RBP=0000000000000200 RSP=ffffc90000a77af8 R8 =0000000000000000 R9 =fffffbfff2dc5bb8 R10=ffffffff96e2ddc7 R11=0000000000000000 R12=0000000000000000 R13=ffffc9002f900060 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff816aad13 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efdbadfff98 CR3=000000000df7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=9ae9bf1c3f2bd71d 769c5f2b0dc3b41f 9ae9bf1c3f2bd71d 769c5f2b0dc3b41f 9ae9bf1c3f2bd71d 769c5f2b0dc3b41f 9ae9bf1c3f2bd71d 769c5f2b0dc3b41f ZMM18=86e3071b7f43308d 7be8177941f105f2 86e3071b7f43308d 7be8177941f105f2 86e3071b7f43308d 7be8177941f105f2 86e3071b7f43308d 7be8177941f105f2 ZMM19=0a06000000000000 000000000000000a 0a06000000000000 0000000000000009 0a06000000000000 0000000000000008 0a06000000000000 0000000000000007 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b ZMM22=3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d ZMM23=9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c ZMM24=41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 ZMM25=7be817797be81779 7be817797be81779 7be817797be81779 7be817797be81779 7be817797be81779 7be817797be81779 7be817797be81779 7be817797be81779 ZMM26=7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d ZMM27=86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0806000008060000 0806000008060000 0806000008060000 0806000008060000 0806000008060000 0806000008060000 0806000008060000 0806000008060000 info registers vcpu 2 CPU#2 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b84c5 RDI=ffffffff9aaeac40 RBP=ffffffff9aaeac00 RSP=ffffc90005e3f438 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000003a R14=ffffffff850b8460 R15=0000000000000000 RIP=ffffffff850b84ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2fc1fffc CR3=0000000031596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6c1cb1a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb90fbf223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb90fbf2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb90fbf2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb90fbf2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb90fbf22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb90fbf23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffffffff1c0396d RBX=ffffffff9aa3d220 RCX=ffffffff816b19c3 RDX=dffffc0000000000 RSI=0000000000000004 RDI=ffffffff9aa3d220 RBP=ffffffff9aa3d228 RSP=ffffc90000908d08 R8 =0000000000000000 R9 =fffffbfff3547a44 R10=ffffffff9aa3d223 R11=0000000000000000 R12=ffffffff9aa3d230 R13=dffffc0000000000 R14=ffffc90025befd78 R15=1ffff920001211aa RIP=ffffffff816b1aca RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055dffe0f0908 CR3=000000002af1c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000fe0 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b 769c5f2b769c5f2b ZMM22=3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d 3f2bd71d3f2bd71d ZMM23=9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c 9ae9bf1c9ae9bf1c ZMM24=41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 41f105f241f105f2 ZMM25=7be817797be81779 7be817797be81779 7be817797be81779 7be817797be81779 7be817797be81779 7be817797be81779 7be817797be81779 7be817797be81779 ZMM26=7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d 7f43308d7f43308d ZMM27=86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b 86e3071b86e3071b ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0806000008060000 0806000008060000 0806000008060000 0806000008060000 0806000008060000 0806000008060000 0806000008060000 0806000008060000