last executing test programs: 7.833130795s ago: executing program 3 (id=2206): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x104, 0x2}) 7.631367871s ago: executing program 3 (id=2208): socket(0xa, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) dup2(r1, r0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0x0, 0x81}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TOS={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x21, 0x1, 0x0, "a677c17a5ac1f393f65906a68dd1f8822c8800"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 7.291054517s ago: executing program 3 (id=2211): socket$phonet(0x23, 0x2, 0x1) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = epoll_create1(0x0) r4 = syz_io_uring_setup(0x12fd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x49f7, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x320e, &(0x7f0000000280), &(0x7f0000000180), &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000400)={0x20000004}) 6.311228498s ago: executing program 3 (id=2216): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x48f00) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f0000001840)=""/4090, 0xffa) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000600)=""/170, 0xaa}], 0x1, 0xffeffffe, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000240)=""/34, 0x43) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) 4.897198366s ago: executing program 0 (id=2222): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), 0x0}, 0x20) 4.7437545s ago: executing program 2 (id=2223): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 4.740459507s ago: executing program 0 (id=2224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x100, 0xfffffffd}}, 0x10) bind$tipc(r2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x100}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd29, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002100)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r6, 0x4}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r7, r8, 0x26}, 0x10) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r7, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r4}, 0x20) 4.440202734s ago: executing program 2 (id=2225): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000001f00)=""/4062, &(0x7f00000001c0)=0xfde) 3.472728424s ago: executing program 2 (id=2227): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x64) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r3}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r4, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={@map=r5, r4, 0x2f, 0x0, 0xffffffffffffffff, @prog_fd=r4, r6}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 3.32832421s ago: executing program 0 (id=2228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3f}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00', @ANYBLOB="fa7f0000000000000002001c9fda594786a3a754f3eec550cbdca9468a498b64efc7e553593db23f86b50c37fe0920ece76afecfea8005b4f2578eab5daf4e3cb8fd7f07c3000000000000000000000000f492793852f8b1466c8722f5f687ce026177c9f716bd6485ee69b73a720fd4467d7e57d35622254434b86250ae5a6f7bbfa4122711d6d1135dda20d27cb1a8d7ed3ebbcb6b", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000080), r4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b15, &(0x7f0000000500)={'wlan1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0xfb, 0x7b1, @vifc_lcl_ifindex=r11, @empty}, 0x10) sendmsg$nl_route(r7, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r11, @ANYBLOB="4068000a43c6037f7300"/26, @ANYRES32=0x0, @ANYBLOB="080023000100000008000d00fffbffff140003006d6163736563300000000000000000001400030076657468315f766972745f776966690024001280090001007866726d000000001400028008000200030000000800010004000000"], 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x20000000) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f00000001c0)={r11, 0x1, 0x6, @multicast}, 0xfee3) memfd_create(&(0x7f0000000a80)='\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x8006, 0x4, 0x6, 0x115}, 0x48) 2.479652324s ago: executing program 2 (id=2229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0xa9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x90) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r5, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_kthread_stop\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0xfffffffffffffff7}, 0x2f) close(r8) 1.823426334s ago: executing program 1 (id=2232): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.737094236s ago: executing program 0 (id=2233): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 1.663041648s ago: executing program 1 (id=2234): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x30, 0x18, 0x105, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8}}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x48000000, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad43000000f45400000007"], 0x14}}, 0x0) 1.38280126s ago: executing program 0 (id=2235): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f01ca0f011b0f01bdf44f66b9c80b000066b86000000066ba000000000f3066b8010000000f01d96766c7442400040000006766c7442402eb6000006766c744240600000000670f011424360f23390f300b880c000f08", 0x57}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000600)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0xf98, 0x3a, 0x0, @private0, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [{0x0, 0x1e, "7d8f394cecefe5f0acdeb07bc0bd1977b65b7cc66e4f16ed2aeafc8cd75cae5d11333e1dd6acc1233aad923f2546126e6520c86b427728cc8e646c5cb11592a788b8c71534077071a3f75bf4d4f46f72ce549a57302f0eaa0f4d73ca960e8f3d5e7fd3b6f70c26389871e0223c40c850f575036892065879bf6bad39f329d0d105c371af7862e0d2e283314f4b7dea1033649e6120c4b23fcf109a1f783b25b2c4f4120441d7f84cfedb32d230dac29ccb24f52ac603a19a7d93f7c5e0ea23a32b2ded5dd36708b32723c8fc2cd94d6559705a4aa98ba5d7fa460fb91e00bcb029cb39ddacad04df7be57083ef193c"}, {0x0, 0x1cf, "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"}]}}}}}, 0xfce) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x100}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f00000000c0)={0x1000, 0x1, 0x9, 0x7, 0x3afb}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001e00000018000180140002"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 1.273097817s ago: executing program 1 (id=2236): socket$igmp(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) setresuid(0x0, 0xee01, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1.202369998s ago: executing program 1 (id=2237): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000004800010000000000000000000a000000000000000c000880080001"], 0x28}}, 0x0) 1.131984718s ago: executing program 1 (id=2238): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) 1.102103495s ago: executing program 2 (id=2239): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x6, 0x1, [0x7ff]}, 0xa) 151.952968ms ago: executing program 2 (id=2240): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) unshare(0x68040200) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) unlink(0x0) rmdir(&(0x7f0000000040)='./control\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0xf}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000), 0x0, 0x0) rmdir(0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) getrandom(0x0, 0x0, 0x0) setfsuid(0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 151.755812ms ago: executing program 3 (id=2241): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 142.845574ms ago: executing program 0 (id=2248): socket$isdn_base(0x22, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0xfffffffffffffffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), 0x0}, 0x20) socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000a06010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001"], 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x46, 0x0, 0x42) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 139.190406ms ago: executing program 1 (id=2242): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlock2(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f00000003c0)) close_range(r2, r2, 0x2) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x2, 0x0, 0x63) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000004c0)={0x4, 0x0, [{0x491, 0x0, 0x4000000}, {0x8c6, 0x0, 0x10000}, {0x2a8, 0x0, 0x7}, {0x25d}]}) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNGETSNDBUF(r9, 0x800454d3, &(0x7f0000000640)) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f0000000440)={0x3ff, 0xad2, &(0x7f0000000240)="a05fd482832a400d5c097d6e60fda1f7e983775da32fcf3c751ac1681781e3deca01a317d1f03bc02dc1c255063732718c90f50e9c382d1e80190424072e91df187d6c01809e98ba4f13889ff165995245fa8b2c2bd1f53d4b2c0cd35297032f0332918b284834b08cadb4640df3f895f8fa9c2163470ccd37b4bb60219513898568d754ec3b46ba4d3c0efd85d31f3b1e", &(0x7f0000000300)="1000e05d11634e937d4ad640beea45ad753bf2c015cd7636bbd8859c1c954d4cbd041a5248c6428ad0db295e7eb5da06703fb818fc7d5781bbe7f5136157487a6fa3e6c44e1c25781a13e00dc3cc7375945216add653afc514832add1488fbb3fd49713ffac36a4e804be1bd048c0402d84f9e99d02fd4d2033b92e8631cb0b546b5d990a2daaa5363d7a216f3597e5a42eced1c724c47", 0x91, 0x97}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000e000500153f0a00000000f9"], 0x17) bind$can_raw(r8, &(0x7f00000000c0)={0x2}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73772cc9f1ba1f848390000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000900)={0x81, 0x5}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000140)={0x1, 0x0, '\x00', {0x0, @bt={0x88, 0x7, 0x0, 0x3, 0xfffffffffffffff8, 0x6, 0x6, 0x7f6, 0x7, 0xefb, 0x5, 0xffffd260, 0x7fffffff, 0x9ac9, 0x0, 0x10, {0x6}, 0xfb, 0xb}}}) 0s ago: executing program 3 (id=2243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x420}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x0, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000002c0)=""/179, 0xb3, 0x0, &(0x7f0000000380)=""/138, 0x8a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000180)=@raw=[@alu={0x4, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}], &(0x7f0000000080)='GPL\x00', 0x6f, 0x0, 0x0, 0x41100, 0x8, '\x00', r6, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x700, 0x40}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0x1, r2, r2], 0x0, 0x10, 0x3f}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x40, 0x80, 0xffff, 0xa5c2, {{0x33, 0x4, 0x1, 0xf, 0xcc, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp={0x44, 0x10, 0x22, 0x0, 0x8, [0x3, 0xc, 0x7fffffff]}, @timestamp_prespec={0x44, 0x2c, 0x2d, 0x3, 0x4, [{@empty, 0x9}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@loopback, 0xe72}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xfd5}]}, @timestamp_addr={0x44, 0x24, 0xde, 0x1, 0x6, [{@broadcast, 0x9}, {@broadcast, 0x9}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3d}}]}, @rr={0x7, 0x23, 0x25, [@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, @dev, @broadcast, @remote, @remote, @broadcast, @local]}, @rr={0x7, 0xf, 0x89, [@rand_addr=0x64010100, @remote, @empty]}, @noop, @rr={0x7, 0xf, 0xc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0x6, [{@private=0xa010101, 0x8}, {@multicast2, 0xfff}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x80, 0x1, 0x0, 0x0, {{0x18, 0x4, 0x3, 0x1, 0x60, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3c}, {[@timestamp={0x44, 0xc, 0x68, 0x0, 0x2, [0x0, 0x5]}, @rr={0x7, 0x13, 0x9f, [@dev={0xac, 0x14, 0x14, 0xf}, @local, @multicast1, @private=0xa010102]}, @timestamp_addr={0x44, 0x2c, 0x1, 0x1, 0x5, [{@remote, 0x401}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x10001}, {@multicast2, 0x7}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000800)={@ipv4, 0x0}, &(0x7f0000000840)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b40)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_TXQLEN={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000), 0xc, &(0x7f00000008c0)={&(0x7f0000000c00)={0x260, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x1}, 0x40801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6}}]}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): ace [ 629.020116][ T11] bond0 (unregistering): Released all slaves [ 629.061151][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.065618][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.078730][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.100614][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.104949][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.119329][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.123119][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.127181][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.139776][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.144679][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.149182][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.155713][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.160334][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.164946][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.178728][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.182991][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.187498][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.203636][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.208159][T10594] batadv_slave_0: entered promiscuous mode [ 629.212547][T10594] macvlan0: entered promiscuous mode [ 629.293074][T10616] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 629.349549][ T39] audit: type=1400 audit(1857067007.922:663): avc: denied { mount } for pid=10611 comm="syz.2.1365" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 629.467031][T10582] chnl_net:caif_netlink_parms(): no params data found [ 629.821156][ T39] audit: type=1400 audit(1857067008.372:664): avc: denied { read append open } for pid=10629 comm="syz.1.1371" path="/52/file0/blkio.bfq.io_serviced" dev="9p" ino=36701644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 629.873355][ T39] audit: type=1400 audit(1857067008.392:665): avc: denied { map } for pid=10629 comm="syz.1.1371" path="/52/file0/blkio.bfq.io_serviced" dev="9p" ino=36701644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 629.910407][ T39] audit: type=1400 audit(1857067008.392:666): avc: denied { write } for pid=10629 comm="syz.1.1371" path="/52/file0/blkio.bfq.io_serviced" dev="9p" ino=36701644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 629.977488][ T9394] Bluetooth: hci4: command tx timeout [ 629.987752][T10640] netfs: Couldn't get user pages (rc=-14) [ 629.993305][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.996609][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.006709][T10582] bridge_slave_0: entered allmulticast mode [ 630.019186][T10582] bridge_slave_0: entered promiscuous mode [ 630.024453][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.034783][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.048444][T10582] bridge_slave_1: entered allmulticast mode [ 630.054153][T10582] bridge_slave_1: entered promiscuous mode [ 630.118464][T10632] kvm: pic: non byte read [ 630.140452][T10632] kvm: pic: non byte read [ 630.143153][T10632] kvm: pic: non byte read [ 630.145781][T10632] kvm: pic: non byte read [ 630.148206][T10632] kvm: pic: non byte read [ 630.162951][T10632] kvm: pic: non byte read [ 630.171588][T10632] kvm: pic: non byte read [ 630.188142][T10632] kvm: pic: non byte read [ 630.199213][T10632] kvm: pic: non byte read [ 630.201383][ T39] audit: type=1400 audit(1857067008.782:667): avc: denied { write } for pid=10651 comm="syz.1.1373" name="renderD128" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 630.214389][T10632] kvm: pic: non byte read [ 630.222093][ T11] hsr_slave_0: left promiscuous mode [ 630.225766][ T11] hsr_slave_1: left promiscuous mode [ 630.229779][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.232828][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.241336][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.244408][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.307765][ T11] veth1_macvtap: left promiscuous mode [ 630.312447][ T11] veth0_macvtap: left promiscuous mode [ 630.314790][ T11] veth1_vlan: left promiscuous mode [ 630.317032][ T11] veth0_vlan: left promiscuous mode [ 630.458613][T10654] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1374'. [ 631.731786][ T9394] Bluetooth: Wrong link type (-71) [ 631.970140][T10682] 9pnet_fd: Insufficient options for proto=fd [ 632.058795][ T9394] Bluetooth: hci4: command tx timeout [ 632.521532][ T11] team0 (unregistering): Port device team_slave_1 removed [ 632.746038][ T11] team0 (unregistering): Port device team_slave_0 removed [ 634.128973][ T9394] Bluetooth: hci4: command tx timeout [ 634.442581][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.466924][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.735266][T10582] team0: Port device team_slave_0 added [ 634.774501][T10582] team0: Port device team_slave_1 added [ 634.864094][ T39] audit: type=1400 audit(1857067013.442:668): avc: denied { setopt } for pid=10698 comm="syz.0.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 635.004612][T10709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10709 comm=syz.1.1385 [ 635.005869][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.026166][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.043332][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.060890][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 635.064802][T10709] netlink: 'syz.1.1385': attribute type 15 has an invalid length. [ 635.085457][T10709] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.091390][T10709] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.095300][T10709] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.099827][T10709] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.113910][T10709] vxlan0: entered promiscuous mode [ 635.132601][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.136121][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.158929][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.330970][T10582] hsr_slave_0: entered promiscuous mode [ 635.351212][T10582] hsr_slave_1: entered promiscuous mode [ 635.360372][T10582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.366151][T10582] Cannot create hsr debugfs directory [ 636.209078][ T9394] Bluetooth: hci4: command tx timeout [ 636.653545][ T45] Bluetooth: (null): Invalid header checksum [ 636.678954][ T45] Bluetooth: (null): Invalid header checksum [ 637.338171][T10582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 637.347839][T10582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 637.356382][T10582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 637.364415][T10582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 637.448285][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.470563][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.482170][ T9998] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.485344][ T9998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.510652][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.514287][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.547602][T10582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 637.555348][T10582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.898542][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.973041][T10582] veth0_vlan: entered promiscuous mode [ 637.994274][T10582] veth1_vlan: entered promiscuous mode [ 638.028442][T10773] serio: Serial port pts0 [ 638.036894][T10582] veth0_macvtap: entered promiscuous mode [ 638.048210][T10582] veth1_macvtap: entered promiscuous mode [ 638.084546][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.099244][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.103447][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.107974][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.118727][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.123140][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.138019][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.143165][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.147414][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.158712][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.162727][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.168901][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.173703][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.188794][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.193363][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.197722][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.214347][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.224629][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.227905][ T39] audit: type=1400 audit(1857067016.802:669): avc: denied { read } for pid=10780 comm="syz.1.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 638.228325][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.228333][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.275907][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.288885][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.305735][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.328775][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.333480][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.338011][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.348720][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.353590][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.368729][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.378851][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.383483][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.397736][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.407859][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.420645][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.443308][T10582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.446251][T10582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.455551][T10582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.468718][T10582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.573526][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.594559][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.634140][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.651006][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.673020][T10799] 9pnet: p9_errstr2errno: server reported unknown error @΂ [ 639.229029][T10826] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.233970][T10826] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.258978][T10826] bridge0: entered allmulticast mode [ 639.407883][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 639.429895][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.431402][ T5353] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 639.433872][T10826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.441120][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.443987][T10826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.458600][T10826] bridge0: entered promiscuous mode [ 639.508991][ T39] audit: type=1326 audit(1857067018.082:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10824 comm="syz.2.1411" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75a9f779f9 code=0x0 [ 639.580007][ T39] audit: type=1400 audit(1857067018.162:671): avc: denied { listen } for pid=10836 comm="syz.0.1415" lport=39701 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.634933][ T39] audit: type=1400 audit(1857067018.212:672): avc: denied { ioctl } for pid=10824 comm="syz.2.1411" path="socket:[43418]" dev="sockfs" ino=43418 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 639.706243][ T39] audit: type=1400 audit(1857067018.282:673): avc: denied { setopt } for pid=10836 comm="syz.0.1415" lport=39701 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 641.192514][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 641.197697][T10866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1424'. [ 641.408884][ T9394] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 641.865626][T10877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10877 comm=syz.2.1429 [ 641.872107][ T39] audit: type=1400 audit(1857067020.452:674): avc: denied { read } for pid=10876 comm="syz.2.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 645.472190][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 645.630939][T10906] wlan0 speed is unknown, defaulting to 1000 [ 645.658910][ T57] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 645.676133][T10907] netlink: 'syz.3.1438': attribute type 4 has an invalid length. [ 645.684377][T10907] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1438'. [ 645.701171][T10901] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1437'. [ 645.741797][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1437'. [ 645.838777][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 645.843416][ T57] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 645.846903][ T57] usb 6-1: config 179 has no interface number 0 [ 645.849873][ T57] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 645.856563][ T57] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 645.862666][ T57] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 645.867910][ T57] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 645.873626][ T57] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 645.879673][ T57] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 645.884763][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.901220][T10892] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 646.135825][ T9888] usb 6-1: USB disconnect, device number 15 [ 646.135888][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 646.519780][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1444'. [ 646.692751][T10931] No such timeout policy "syz1" [ 647.591774][T10931] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 647.665590][ T39] audit: type=1401 audit(1857067026.242:675): op=fscreate invalid_context=2321202E2F66696C6530 [ 647.843826][T10953] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1451'. [ 647.941894][T10959] loop7: detected capacity change from 0 to 16384 [ 648.094755][T10959] loop7: detected capacity change from 16384 to 16383 [ 648.149228][T10959] blk_print_req_error: 40 callbacks suppressed [ 648.149246][T10959] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.156950][T10959] buffer_io_error: 40 callbacks suppressed [ 648.156958][T10959] Buffer I/O error on dev loop7, logical block 0, async page read [ 648.212984][T10959] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.258756][T10959] Buffer I/O error on dev loop7, logical block 0, async page read [ 648.267232][T10959] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.299194][T10959] Buffer I/O error on dev loop7, logical block 0, async page read [ 648.302646][T10959] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.366123][T10959] Buffer I/O error on dev loop7, logical block 0, async page read [ 648.375790][T10959] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.398717][T10959] Buffer I/O error on dev loop7, logical block 0, async page read [ 648.418163][T10959] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.448112][T10959] Buffer I/O error on dev loop7, logical block 0, async page read [ 648.493387][T10959] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.547260][T10959] Buffer I/O error on dev loop7, logical block 0, async page read [ 648.592402][T10959] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.642838][T10959] Buffer I/O error on dev loop7, logical block 0, async page read [ 648.659024][T10959] ldm_validate_partition_table(): Disk read failed. [ 648.667330][T10959] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.692428][T10959] Buffer I/O error on dev loop7, logical block 0, async page read [ 648.767305][T10959] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.866146][T10959] Buffer I/O error on dev loop7, logical block 0, async page read [ 648.908499][T10959] Dev loop7: unable to read RDB block 0 [ 648.916368][T10959] loop7: unable to read partition table [ 648.926573][T10959] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 648.928923][ T5353] Bluetooth: hci0: command 0x0401 tx timeout [ 649.154852][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 649.827002][ T39] audit: type=1326 audit(1857067028.402:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.1460" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc5bb779f9 code=0x0 [ 650.786883][T10996] batadv_slave_1: entered promiscuous mode [ 650.841313][ T39] audit: type=1326 audit(1857067029.422:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 650.856994][ T39] audit: type=1326 audit(1857067029.432:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 650.890649][ T39] audit: type=1326 audit(1857067029.432:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 650.926814][ T39] audit: type=1326 audit(1857067029.432:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.1.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 651.004806][T11005] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1466'. [ 651.039288][ T9765] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 651.043920][T11005] gretap0: entered promiscuous mode [ 651.071809][ T39] audit: type=1326 audit(1857067029.652:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.1.1466" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x0 [ 651.249145][ T9765] usb 8-1: Using ep0 maxpacket: 32 [ 651.254065][ T9765] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 651.257782][ T9765] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 651.263654][ T9765] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 651.267836][ T9765] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 651.272334][ T9765] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 651.276639][ T9765] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 651.288849][ T9765] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 651.292980][ T9765] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.299194][ T9765] usb 8-1: config 0 descriptor?? [ 651.533805][T11012] x_tables: duplicate underflow at hook 2 [ 651.551175][ T5353] Bluetooth: hci8: SCO packet for unknown connection handle 1 [ 651.568467][ T9765] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 651.600387][ T9765] usb 8-1: USB disconnect, device number 13 [ 651.637350][ T9765] usblp0: removed [ 652.196843][ T9765] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 652.408742][ T9765] usb 8-1: Using ep0 maxpacket: 32 [ 652.415895][ T9765] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 652.420256][ T9765] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 652.449355][ T9765] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 652.482679][ T9765] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 652.508802][ T9765] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 652.588747][ T9765] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 652.618748][ T9765] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 652.637053][ T9765] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.687178][ T9765] usb 8-1: config 0 descriptor?? [ 652.910385][ T9765] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 653.100157][T11021] serio: Serial port pts0 [ 653.107334][T10990] batadv_slave_1: left promiscuous mode [ 653.113066][ T39] audit: type=1400 audit(1857067031.692:682): avc: denied { read write } for pid=10992 comm="syz.3.1462" name="lp0" dev="devtmpfs" ino=2663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 653.123425][ T39] audit: type=1400 audit(1857067031.692:683): avc: denied { open } for pid=10992 comm="syz.3.1462" path="/dev/usb/lp0" dev="devtmpfs" ino=2663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 653.417744][ T57] usb 8-1: USB disconnect, device number 14 [ 653.426152][ T57] usblp0: removed [ 654.124677][T11037] loop7: detected capacity change from 0 to 16384 [ 654.238792][T11037] loop7: detected capacity change from 16384 to 16383 [ 654.249595][T11037] blk_print_req_error: 7 callbacks suppressed [ 654.249610][T11037] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 654.258277][T11037] buffer_io_error: 7 callbacks suppressed [ 654.258290][T11037] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.278891][T11037] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 654.293551][T11037] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.350169][T11037] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 654.354686][T11037] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.358383][T11037] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 654.388745][T11037] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.398311][T11048] input: syz0 as /devices/virtual/input/input21 [ 654.404551][T11037] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 654.424742][T11037] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.445150][T11037] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 654.461571][T11037] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.475923][T11037] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 654.479888][T11037] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.495238][T11037] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 654.501614][T11037] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.506107][T11037] ldm_validate_partition_table(): Disk read failed. [ 654.511482][T11037] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 654.517231][T11037] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.528862][T11037] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 654.532669][T11037] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.536042][T11037] Dev loop7: unable to read RDB block 0 [ 654.554923][T11037] loop7: unable to read partition table [ 654.557962][T11037] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 654.655039][ T5353] Bluetooth: hci11: link tx timeout [ 654.657997][ T5353] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa [ 655.027106][T11062] batadv_slave_1: entered promiscuous mode [ 655.366462][ T39] audit: type=1400 audit(1857067033.942:684): avc: denied { read } for pid=11055 comm="syz.2.1481" path="socket:[45384]" dev="sockfs" ino=45384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 656.700773][ T9394] Bluetooth: hci11: command 0x0406 tx timeout [ 656.790217][T11061] batadv_slave_1: left promiscuous mode [ 656.814874][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 657.919185][ T39] audit: type=1400 audit(1857067036.502:685): avc: denied { execute } for pid=11093 comm="syz.1.1492" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=43883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 658.919557][T11103] 9pnet_fd: Insufficient options for proto=fd [ 659.341235][T11107] batadv_slave_1: entered promiscuous mode [ 659.699312][T11114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1497'. [ 660.056288][T11118] 9pnet_fd: Insufficient options for proto=fd [ 660.066946][ T39] audit: type=1400 audit(1857067038.632:686): avc: denied { read } for pid=11115 comm="syz.1.1499" dev="sockfs" ino=46549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 660.233369][ T39] audit: type=1400 audit(1857067038.812:687): avc: denied { getopt } for pid=11119 comm="syz.2.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 660.319737][T11121] affs: Unrecognized mount option "" or missing value [ 660.323128][T11121] affs: Error parsing options [ 661.646156][T11106] batadv_slave_1: left promiscuous mode [ 662.773137][ T5351] Bluetooth: hci11: command 0x0406 tx timeout [ 662.776134][ T4765] Bluetooth: hci8: command 0x0406 tx timeout [ 663.262977][T11154] skbuff: bad partial csum: csum=65504/2 headroom=176 headlen=65534 [ 663.788722][ T39] audit: type=1400 audit(1857067042.362:688): avc: denied { bind } for pid=11157 comm="syz.0.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 663.808888][ T39] audit: type=1400 audit(1857067042.372:689): avc: denied { write } for pid=11157 comm="syz.0.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 664.015288][ T39] audit: type=1400 audit(1857067042.592:690): avc: denied { write } for pid=11172 comm="syz.3.1518" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 665.896672][ T39] audit: type=1400 audit(1857067044.472:691): avc: denied { bind } for pid=11197 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 666.128538][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1528'. [ 666.140905][T11209] gre1: entered promiscuous mode [ 666.142875][T11209] gre1: entered allmulticast mode [ 666.502233][T11220] Bluetooth: MGMT ver 1.23 [ 674.131154][ T1418] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 674.353181][ T1418] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 674.686537][ T1418] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 674.691633][ T1418] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 674.695064][ T1418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.725025][T11276] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 674.971288][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'. [ 675.938034][ T1418] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 675.972855][ T1418] input: Aiptek as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:17.0/input/input22 [ 676.083083][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 676.086297][ T1418] usb 5-1: USB disconnect, device number 10 [ 677.310788][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 677.479742][T11329] input: syz1 as /devices/virtual/input/input23 [ 677.915098][ T39] audit: type=1400 audit(1857067056.492:692): avc: denied { create } for pid=11340 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 677.942410][ T39] audit: type=1400 audit(1857067056.522:693): avc: denied { ioctl } for pid=11340 comm="syz.1.1570" path="socket:[45668]" dev="sockfs" ino=45668 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 679.202691][ T39] audit: type=1400 audit(1857067057.752:694): avc: denied { setopt } for pid=11352 comm="syz.0.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 679.578970][ T9765] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 679.770577][ T9765] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 679.776736][ T9765] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 679.807221][ T9765] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 679.812880][ T9765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.821261][T11358] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 679.827281][ T9765] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.376875][T11382] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 680.495298][T11386] input: syz0 as /devices/virtual/input/input24 [ 680.589950][ T1418] usb 5-1: USB disconnect, device number 11 [ 680.790542][T11391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1587'. [ 681.694773][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'. [ 681.708819][T11404] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1593'. [ 681.713646][T11404] netlink: 'syz.0.1593': attribute type 3 has an invalid length. [ 681.717499][T11404] netlink: 'syz.0.1593': attribute type 2 has an invalid length. [ 681.723398][T11404] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1593'. [ 681.904318][ T39] audit: type=1400 audit(1857067060.482:695): avc: denied { read } for pid=11407 comm="syz.0.1595" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 681.917586][ T39] audit: type=1400 audit(1857067060.482:696): avc: denied { open } for pid=11407 comm="syz.0.1595" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 681.938587][ T39] audit: type=1326 audit(1857067060.512:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.0.1595" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc5bb779f9 code=0x0 [ 682.460723][ T39] audit: type=1400 audit(1857067061.032:698): avc: denied { mounton } for pid=11417 comm="syz.0.1598" path="/86/file0" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 682.855436][ T1238] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9b [ 683.298786][ T9998] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 683.385021][ T39] audit: type=1326 audit(1857067061.962:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11435 comm="syz.2.1601" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75a9f779f9 code=0x0 [ 683.479272][ T9998] usb 6-1: Using ep0 maxpacket: 8 [ 683.483655][ T9998] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.488091][ T9998] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 683.518364][ T9998] usb 6-1: config 1 has no interface number 1 [ 683.522455][ T9998] usb 6-1: too many endpoints for config 1 interface 2 altsetting 7: 236, using maximum allowed: 30 [ 683.530823][ T9998] usb 6-1: config 1 interface 2 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 236 [ 683.545814][ T9998] usb 6-1: config 1 interface 2 has no altsetting 0 [ 683.556638][ T9998] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 683.561408][ T9998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.590621][ T9998] usb 6-1: Product: syz [ 683.592525][ T9998] usb 6-1: Manufacturer: syz [ 683.594406][ T9998] usb 6-1: SerialNumber: syz [ 684.280822][ T39] audit: type=1400 audit(1857067062.862:700): avc: denied { write } for pid=11441 comm="syz.2.1603" lport=39283 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 684.292726][ T39] audit: type=1400 audit(1857067062.872:701): avc: denied { getopt } for pid=11441 comm="syz.2.1603" lport=39283 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 684.424527][T11444] xt_CT: No such helper "pptp" [ 684.832220][T11450] netlink: 'syz.3.1606': attribute type 4 has an invalid length. [ 685.663801][T11423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.699391][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'. [ 685.776600][ T9998] usb 6-1: USB disconnect, device number 16 [ 686.109870][T11373] udevd[11373]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.314909][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.318579][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.384912][T11477] loop7: detected capacity change from 0 to 16384 [ 686.469293][T11477] loop7: detected capacity change from 16384 to 16383 [ 687.040711][T11482] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1616'. [ 687.924332][ T39] audit: type=1326 audit(1857067066.482:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.1624" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75a9f779f9 code=0x0 [ 687.940890][T11508] zonefs (nullb0) ERROR: Not a zoned block device [ 687.977100][T11508] nftables ruleset with unbound set [ 688.402449][ T39] audit: type=1400 audit(1857067066.982:703): avc: denied { write } for pid=11523 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 688.761057][T11532] i2c i2c-1: Invalid block write size 34 [ 689.068987][ T39] audit: type=1400 audit(1857067067.642:704): avc: denied { map } for pid=11541 comm="syz.2.1634" path="/dev/usbmon0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 689.425558][T11551] team_slave_0: entered allmulticast mode [ 690.889634][T11573] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 691.264734][ T39] audit: type=1400 audit(1857067069.842:705): avc: denied { append } for pid=11578 comm="syz.0.1643" name="userio" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 691.829269][T11588] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 691.832069][T11588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 691.835872][T11588] vhci_hcd vhci_hcd.0: Device attached [ 691.976600][T11589] vhci_hcd: unknown pdu 1 [ 691.979203][ T1107] vhci_hcd: stop threads [ 691.981301][ T1107] vhci_hcd: release socket [ 691.983126][ T1107] vhci_hcd: disconnect device [ 693.512820][ T5353] Bluetooth: hci0: command 0x0401 tx timeout [ 693.794867][T11614] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 694.054106][T11615] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 694.987026][ T39] audit: type=1400 audit(1857067073.562:706): avc: denied { write } for pid=11617 comm="syz.3.1653" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 695.012358][ T39] audit: type=1400 audit(1857067073.562:707): avc: denied { open } for pid=11617 comm="syz.3.1653" path="/50/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 697.288141][ T9394] Bluetooth: hci11: SCO packet for unknown connection handle 200 [ 697.424858][T11659] syzkaller0: entered promiscuous mode [ 697.431659][T11659] syzkaller0: entered allmulticast mode [ 697.483984][ T9394] Bluetooth: hci11: ACL packet for unknown connection handle 201 [ 697.919142][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 698.181088][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 698.185303][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 698.221784][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 698.226035][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.893536][T11665] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 699.374549][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 699.829118][ T10] usb 7-1: USB disconnect, device number 18 [ 700.525773][T11675] zonefs (nullb0) ERROR: Not a zoned block device [ 702.718932][T11692] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 702.722036][T11692] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 702.726835][T11692] vhci_hcd vhci_hcd.0: Device attached [ 702.903296][T11694] vhci_hcd: unknown pdu 1 [ 702.905778][ T1105] vhci_hcd: stop threads [ 702.907595][ T1105] vhci_hcd: release socket [ 702.913638][ T1105] vhci_hcd: disconnect device [ 704.778826][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1686'. [ 704.984160][ T39] audit: type=1400 audit(1857067083.562:708): avc: denied { getopt } for pid=11732 comm="syz.2.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 704.996713][T11734] netdevsim netdevsim2: Direct firmware load for c 02d0 0124 0000 0000 000c [ 704.996713][T11734] failed with error -2 [ 704.996862][T11734] netdevsim netdevsim2: Falling back to sysfs fallback for: c 02d0 0124 0000 0000 000c [ 704.996862][T11734] [ 705.070382][ T9394] Bluetooth: hci11: unexpected event for opcode 0x2043 [ 705.085916][T11740] fuse: Bad value for 'user_id' [ 705.089029][T11740] fuse: Bad value for 'user_id' [ 706.303183][ T9394] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 706.770668][ T39] audit: type=1400 audit(1857067085.352:709): avc: denied { write } for pid=11760 comm="syz.2.1695" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 707.219036][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1699'. [ 708.593696][T11806] ALSA: mixer_oss: invalid index 40000 [ 709.088255][ T5380] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 709.092194][ T9394] Bluetooth: hci11: Controller not accepting commands anymore: ncmd = 0 [ 709.096735][ T9394] Bluetooth: hci11: Injecting HCI hardware error event [ 709.104663][ T5353] Bluetooth: hci11: hardware error 0x00 [ 709.296640][ T5380] usb 5-1: Using ep0 maxpacket: 8 [ 709.333188][ T5380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 709.338025][ T5380] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 709.350505][ T5380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 709.393681][ T5380] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 709.397729][ T5380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.408726][ T5380] usb 5-1: Product: syz [ 709.416372][ T5380] usb 5-1: Manufacturer: syz [ 709.418491][ T5380] usb 5-1: SerialNumber: syz [ 709.446816][ T5380] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 709.712415][ T9998] usb 5-1: USB disconnect, device number 12 [ 710.094322][T11820] nvme_fabrics: missing parameter 'transport=%s' [ 710.098093][T11820] nvme_fabrics: missing parameter 'nqn=%s' [ 710.376640][ T4765] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 710.381365][ T4765] Bluetooth: hci0: Injecting HCI hardware error event [ 710.386366][ T5351] Bluetooth: hci0: hardware error 0x00 [ 711.228990][ T5353] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 711.326710][T11836] Invalid ELF header magic: != ELF [ 711.327553][ T39] audit: type=1804 audit(1857067089.902:710): pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1722" name="/newroot/169/bus/bus" dev="overlay" ino=910 res=1 errno=0 [ 711.356514][ T5353] Bluetooth: hci4: command 0x0405 tx timeout [ 711.889368][T11844] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 711.893190][T11844] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 711.896630][T11844] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.1724'. [ 712.031716][T11844] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 712.620062][ T5351] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 712.624449][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.628551][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.637690][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.642791][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.646630][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.665730][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.688747][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.691620][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.694671][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.697802][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.708787][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.712087][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.715243][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.741217][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.744402][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.770211][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.800461][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.805303][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.808443][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.821363][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.824435][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.827602][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.834756][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.838383][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.845912][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.858754][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.862268][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.867550][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.867607][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.867626][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.878635][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.882319][ T832] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 712.901985][ T832] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 713.524869][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 713.559419][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1729'. [ 713.673760][T11864] QAT: Invalid ioctl 21531 [ 713.863925][T11866] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 714.609928][ T39] audit: type=1400 audit(1857067093.192:711): avc: denied { unmount } for pid=10582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 715.024624][ T39] audit: type=1400 audit(1857067093.602:712): avc: denied { bind } for pid=11880 comm="syz.0.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 716.799021][T11899] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 716.799021][T11899] The task syz.2.1740 (11899) triggered the difference, watch for misbehavior. [ 717.561073][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 717.567052][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 717.737264][T11912] QAT: Invalid ioctl 21531 [ 717.822561][T11920] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 718.543787][ T39] audit: type=1400 audit(1857067097.122:713): avc: denied { create } for pid=11941 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 718.566173][ T39] audit: type=1400 audit(1857067097.142:714): avc: denied { ioctl } for pid=11941 comm="syz.3.1755" path="socket:[50445]" dev="sockfs" ino=50445 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 718.767792][T11950] syzkaller0: entered promiscuous mode [ 718.780719][T11950] syzkaller0: entered allmulticast mode [ 718.784608][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 718.798957][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'. [ 719.051472][T11955] QAT: Invalid ioctl 21531 [ 720.051751][T11960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1761'. [ 722.976990][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 722.984557][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 722.987457][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.012454][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.017016][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.030478][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.033715][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.036545][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.053100][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.056806][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.065509][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.074371][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.077903][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.081659][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.088733][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.092178][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.096920][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.106672][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.111923][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.117008][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.126750][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.130458][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.133725][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.137035][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.141642][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.146588][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.150383][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.153718][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.157538][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.162374][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.166439][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.170941][ T5899] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 723.180029][ T5899] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz0 [ 723.945635][T11969] wlan0 speed is unknown, defaulting to 1000 [ 724.108760][ T39] audit: type=1400 audit(1857067102.682:715): avc: denied { ioctl } for pid=11990 comm="syz.3.1768" path="socket:[49493]" dev="sockfs" ino=49493 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 724.159956][ T39] audit: type=1400 audit(1857067102.742:716): avc: denied { create } for pid=11994 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 724.198167][T11997] netlink: 'syz.3.1768': attribute type 10 has an invalid length. [ 724.249072][T11997] macvlan0: entered promiscuous mode [ 724.254675][T12000] fuse: Bad value for 'fd' [ 724.291412][T11997] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 724.480558][ T39] audit: type=1326 audit(1857067103.052:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.2.1769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a9f779f9 code=0x7fc00000 [ 724.554808][ T39] audit: type=1326 audit(1857067103.132:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.2.1769" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f75a9f779f9 code=0x7fc00000 [ 725.070083][ T39] audit: type=1326 audit(1857067103.652:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.2.1769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a9f779f9 code=0x7fc00000 [ 728.014387][T12006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1780'. [ 728.565340][T12027] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 729.700083][ T5899] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 729.888750][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 729.896131][ T5899] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 729.907345][ T5899] usb 7-1: config 0 has no interface number 0 [ 729.910283][ T5899] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 729.914875][ T5899] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 729.924847][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.940569][ T5899] usb 7-1: config 0 descriptor?? [ 729.947812][ T5899] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 730.246854][T12062] block device autoloading is deprecated and will be removed. [ 730.265440][ T5380] usb 7-1: USB disconnect, device number 19 [ 730.290042][ T5380] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 730.351803][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1787'. [ 730.506710][T12070] netlink: 'syz.0.1788': attribute type 7 has an invalid length. [ 730.516592][T12070] netlink: 'syz.0.1788': attribute type 6 has an invalid length. [ 730.856862][T12082] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=255 sclass=netlink_xfrm_socket pid=12082 comm=syz.2.1796 [ 731.067055][T12086] block nbd1: shutting down sockets [ 731.832227][T12091] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1799'. [ 731.884041][T12091] netlink: 'syz.3.1799': attribute type 11 has an invalid length. [ 731.924943][T12091] netlink: 'syz.3.1799': attribute type 11 has an invalid length. [ 731.936327][T12091] debugfs: Directory 'netdev:' with parent 'phy49' already present! [ 732.228754][ T5899] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 732.438840][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 732.442114][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.446694][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.458725][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.464784][ T5899] usb 6-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 732.468738][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.479818][ T5899] usb 6-1: config 0 descriptor?? [ 732.725010][T12094] input: syz1 as /devices/virtual/input/input28 [ 732.785604][ T5899] usbhid 6-1:0.0: can't add hid device: -71 [ 732.795455][ T5899] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 732.818494][ T5899] usb 6-1: USB disconnect, device number 17 [ 732.954009][T12129] syzkaller0: entered promiscuous mode [ 732.956299][T12129] syzkaller0: entered allmulticast mode [ 733.917799][T12157] block nbd2: shutting down sockets [ 734.688087][T12181] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 734.929297][ T5351] Bluetooth: hci2: command 0x0406 tx timeout [ 734.942055][ T831] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 734.945264][ T831] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 735.122423][ T5351] Bluetooth: hci2: Opcode 0x2046 failed: -22 [ 735.464620][T12196] input: syz0 as /devices/virtual/input/input29 [ 736.508976][T12205] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1821'. [ 736.774131][T12214] netlink: 'syz.1.1822': attribute type 10 has an invalid length. [ 736.808517][T12214] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 737.168823][ T5351] Bluetooth: hci2: command tx timeout [ 737.468934][ T5351] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 737.553104][T12230] netlink: 'syz.2.1826': attribute type 21 has an invalid length. [ 737.557228][T12230] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1826'. [ 737.641778][T12230] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.608767][ T831] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 738.612828][ T831] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 738.618912][ T5351] Bluetooth: hci5: command 0x0406 tx timeout [ 738.659173][ T5899] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 738.848886][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 738.855105][ T5899] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 738.861923][ T5899] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 738.867605][ T5899] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 738.871893][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.875168][ T5899] usb 6-1: Product: syz [ 738.881992][ T5899] usb 6-1: Manufacturer: syz [ 738.883965][ T5899] usb 6-1: SerialNumber: syz [ 739.147507][ T5899] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 739.367338][ T1418] usb 6-1: USB disconnect, device number 18 [ 739.376315][ T1418] usblp0: removed [ 739.658775][ T5380] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 739.720060][T12250] netlink: 'syz.2.1832': attribute type 4 has an invalid length. [ 739.759220][T12250] netlink: 'syz.2.1832': attribute type 4 has an invalid length. [ 739.842923][ T5380] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.848192][ T5380] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 739.862682][ T5380] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 739.867486][ T5380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 739.878737][ T5380] usb 8-1: SerialNumber: syz [ 739.976846][T12257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1834'. [ 740.110547][T12248] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 740.119562][ T5380] usb 8-1: 0:2 : does not exist [ 740.136538][ T5380] usb 8-1: USB disconnect, device number 15 [ 740.323026][ T5351] Bluetooth: hci8: unexpected event for opcode 0x2006 [ 740.358274][T11373] udevd[11373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.543222][ T39] audit: type=1400 audit(1857067119.122:720): avc: denied { connect } for pid=12263 comm="syz.1.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 740.603838][ T39] audit: type=1400 audit(1857067119.182:721): avc: denied { write } for pid=12263 comm="syz.1.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 740.659067][ T39] audit: type=1400 audit(1857067119.242:722): avc: denied { read } for pid=12263 comm="syz.1.1836" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 740.754374][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1836'. [ 740.851780][ T831] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 740.854636][ T831] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 740.858756][ T5351] Bluetooth: hci7: command 0x0405 tx timeout [ 741.498888][ T5351] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 741.504200][ T5351] Bluetooth: hci4: Injecting HCI hardware error event [ 741.510988][ T5351] Bluetooth: hci4: hardware error 0x00 [ 742.626293][ T39] audit: type=1326 audit(1857067121.202:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.1.1846" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x0 [ 743.048769][ T9394] Bluetooth: hci8: command 0x0406 tx timeout [ 743.139926][ T831] Bluetooth: hci8: Opcode 0x0c1a failed: -110 [ 743.142511][ T831] Bluetooth: hci8: Error when powering off device on rfkill (-110) [ 743.350951][ T8] wlan0 speed is unknown, defaulting to 1000 [ 743.492085][T12311] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64873 sclass=netlink_xfrm_socket pid=12311 comm=syz.3.1848 [ 743.568824][ T5351] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 744.498790][ T5380] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 744.568331][ T39] audit: type=1400 audit(1857067123.142:724): avc: denied { mounton } for pid=12316 comm="syz.0.1852" path="/129/file1/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 744.621961][ T39] audit: type=1400 audit(1857067123.202:725): avc: denied { unmount } for pid=9902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 744.710254][ T5380] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 744.714599][ T5380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 744.729109][ T5380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 744.733905][ T5380] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 744.739805][ T5380] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 744.743853][ T5380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.758883][ T5380] usb 6-1: config 0 descriptor?? [ 744.762298][T12313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 745.224293][ T5380] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 745.230893][ T5380] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 745.514556][ T5380] usb 6-1: USB disconnect, device number 19 [ 745.728907][ T9394] Bluetooth: hci6: command 0x1003 tx timeout [ 745.729690][ T5351] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 745.860196][T12321] wlan0 speed is unknown, defaulting to 1000 [ 745.976618][T12321] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 745.979584][T12321] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 745.990440][T12321] vhci_hcd vhci_hcd.0: Device attached [ 746.279935][ T831] usb 19-1: new high-speed USB device number 2 using vhci_hcd [ 746.678792][T12326] vhci_hcd: connection closed [ 746.681441][ T84] vhci_hcd: stop threads [ 746.686209][ T84] vhci_hcd: release socket [ 746.691830][ T84] vhci_hcd: disconnect device [ 746.700312][ T39] audit: type=1800 audit(1857067125.272:726): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1862" name="/file0" dev="overlay" ino=1158 res=0 errno=0 [ 746.712394][ T39] audit: type=1804 audit(1857067125.292:727): pid=12349 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1862" name="/newroot/214/bus/file0" dev="overlay" ino=1158 res=1 errno=0 [ 747.732805][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.735607][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.022748][T12380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1874'. [ 748.731698][ T39] audit: type=1400 audit(1857067127.312:728): avc: denied { getopt } for pid=12392 comm="syz.3.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 748.819583][T12395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1880'. [ 749.293998][ T39] audit: type=1800 audit(1857067127.872:729): pid=12402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.1883" name="/file0" dev="overlay" ino=666 res=0 errno=0 [ 749.328778][ T39] audit: type=1804 audit(1857067127.882:730): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1883" name="/newroot/122/bus/file0" dev="overlay" ino=666 res=1 errno=0 [ 749.602810][T12420] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 749.853907][T12426] netlink: 'syz.1.1890': attribute type 11 has an invalid length. [ 749.978833][T12429] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 749.991158][T12429] syz.3.1891: attempt to access beyond end of device [ 749.991158][T12429] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 750.588533][ T39] audit: type=1400 audit(1857067129.152:731): avc: denied { setattr } for pid=12439 comm="syz.1.1894" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 750.909625][ T39] audit: type=1800 audit(1857067129.492:732): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.1895" name="/file0" dev="overlay" ino=995 res=0 errno=0 [ 750.937810][ T39] audit: type=1804 audit(1857067129.492:733): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1895" name="/newroot/176/bus/file0" dev="overlay" ino=995 res=1 errno=0 [ 751.010406][ T39] audit: type=1400 audit(1857067129.592:734): avc: denied { connect } for pid=12450 comm="syz.3.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 751.076298][T12456] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 751.078370][T12450] delete_channel: no stack [ 751.428873][ T831] vhci_hcd: vhci_device speed not set [ 751.568083][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1901'. [ 751.580405][T12464] netlink: 'syz.3.1901': attribute type 14 has an invalid length. [ 751.658992][T12470] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 752.536339][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88802cd46000: rx timeout, send abort [ 753.039751][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88802cd46000: abort rx timeout. Force session deactivation [ 753.098750][ T831] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 753.291773][ T831] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 753.295538][ T831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.318102][ T831] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 753.329025][ T831] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 753.333209][ T831] usb 6-1: Manufacturer: syz [ 753.359885][ T831] usb 6-1: config 0 descriptor?? [ 753.391421][ C3] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 753.458770][ T831] rc_core: IR keymap rc-hauppauge not found [ 753.461372][ T831] Registered IR keymap rc-empty [ 753.465762][ T831] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 753.491935][ T831] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input31 [ 753.592761][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 753.629490][ T5380] usb 6-1: USB disconnect, device number 20 [ 754.763221][T12518] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64873 sclass=netlink_xfrm_socket pid=12518 comm=syz.1.1916 [ 754.986259][ T9394] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 754.997562][ T9394] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 755.001695][ T9394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 755.007406][ T9394] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 755.014765][ T9394] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 755.018578][ T9394] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 755.074154][ T5351] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 755.079194][ T5351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 755.082728][ T5351] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 755.087863][ T5351] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 755.101462][ T5351] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 755.109016][ T5351] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 755.191608][T12519] wlan0 speed is unknown, defaulting to 1000 [ 755.258526][T12523] wlan0 speed is unknown, defaulting to 1000 [ 755.524815][T12519] chnl_net:caif_netlink_parms(): no params data found [ 755.659785][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 756.056892][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.064733][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.067751][T12519] bridge_slave_0: entered allmulticast mode [ 756.080042][T12519] bridge_slave_0: entered promiscuous mode [ 756.086707][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.098784][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.101785][T12519] bridge_slave_1: entered allmulticast mode [ 756.105616][T12519] bridge_slave_1: entered promiscuous mode [ 756.235449][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.256253][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.428836][ T5899] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 756.448734][ T39] audit: type=1326 audit(1857067135.022:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.2.1926" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75a9f779f9 code=0x0 [ 756.581487][ T1110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.623968][ T5899] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 756.628577][ T5899] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 756.639152][ T5899] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 756.658715][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.720930][T12545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.732565][ T5899] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 757.104169][T12519] team0: Port device team_slave_0 added [ 757.216426][T12519] team0: Port device team_slave_1 added [ 757.248879][ T9394] Bluetooth: hci6: command tx timeout [ 757.289629][ T1110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.533756][ T831] usb 6-1: USB disconnect, device number 21 [ 757.560948][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.604486][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.616658][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.731729][ T1110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.754646][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.776698][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.794170][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.897174][ T1110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.130723][T12519] hsr_slave_0: entered promiscuous mode [ 758.137381][T12519] hsr_slave_1: entered promiscuous mode [ 758.144231][T12519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.147684][T12519] Cannot create hsr debugfs directory [ 758.577310][ T1110] bridge_slave_1: left allmulticast mode [ 758.584167][ T1110] bridge_slave_1: left promiscuous mode [ 758.589571][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.609403][ T1110] bridge_slave_0: left allmulticast mode [ 758.614282][ T1110] bridge_slave_0: left promiscuous mode [ 758.618396][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.185366][ T39] audit: type=1400 audit(1857067137.762:736): avc: denied { ioctl } for pid=12577 comm="syz.3.1930" path="/dev/nullb0" dev="devtmpfs" ino=693 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 759.329064][ T9394] Bluetooth: hci6: command tx timeout [ 759.910098][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.929158][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.936151][ T1110] bond0 (unregistering): Released all slaves [ 760.812049][T12519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 760.831006][T12519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 760.838069][T12519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 760.845110][T12604] nfs: Bad value for 'source' [ 760.939171][T12519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 760.984757][ T1110] hsr_slave_0: left promiscuous mode [ 760.990142][ T1110] hsr_slave_1: left promiscuous mode [ 760.993533][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.997368][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.004012][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.007374][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.017394][ T39] audit: type=1400 audit(1857067139.592:737): avc: denied { connect } for pid=12619 comm="syz.3.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.035555][ T39] audit: type=1400 audit(1857067139.612:738): avc: denied { write } for pid=12619 comm="syz.3.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.107408][ T1110] veth1_macvtap: left promiscuous mode [ 761.118883][ T1110] veth0_macvtap: left promiscuous mode [ 761.121854][ T1110] veth1_vlan: left promiscuous mode [ 761.124408][ T1110] veth0_vlan: left promiscuous mode [ 761.267040][ T39] audit: type=1400 audit(1857067139.842:739): avc: denied { setopt } for pid=12626 comm="syz.3.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 761.412141][ T9394] Bluetooth: hci6: command tx timeout [ 761.988273][ T39] audit: type=1400 audit(1857067140.562:740): avc: denied { connect } for pid=12638 comm="syz.1.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 762.300107][ T5381] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 762.491095][ T5381] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 762.495433][ T5381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.512199][ T5381] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 762.516311][ T5381] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 762.520212][ T5381] usb 7-1: Manufacturer: syz [ 762.526354][ T5381] usb 7-1: config 0 descriptor?? [ 762.649467][ T5381] rc_core: IR keymap rc-hauppauge not found [ 762.665751][ T5381] Registered IR keymap rc-empty [ 762.675137][ T5381] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 762.688845][ T5381] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input32 [ 762.831504][ C2] igorplugusb 7-1:0.0: Error: urb status = -32 [ 762.981500][ T9888] usb 7-1: USB disconnect, device number 20 [ 763.498892][ T9394] Bluetooth: hci6: command tx timeout [ 763.621601][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 763.930904][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 764.017365][T12653] overlayfs: invalid redirect (./file1) [ 766.228811][T12642] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1949'. [ 766.380892][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.401104][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.427214][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.431032][ T5399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.440466][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.444473][ T5399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.460828][T12661] delete_channel: no stack [ 766.770316][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.950373][T12519] veth0_vlan: entered promiscuous mode [ 766.971681][T12519] veth1_vlan: entered promiscuous mode [ 767.029451][T12519] veth0_macvtap: entered promiscuous mode [ 767.047521][T12519] veth1_macvtap: entered promiscuous mode [ 767.061577][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.066433][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.078945][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.083733][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.087322][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.092992][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.097288][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.102080][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.106345][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.118744][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.122887][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.127422][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.129832][ T7522] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 767.131705][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.138966][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.143416][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.147831][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.160615][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.170472][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.179073][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.183139][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.197903][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.202610][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.207237][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.211587][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.216087][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.220588][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.224582][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.227697][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.231714][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.235923][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.241658][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.245377][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.249819][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.255624][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.263703][T12519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.267670][T12519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.271635][T12519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.275435][T12519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.331687][ T7522] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 767.336225][ T7522] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 767.340864][ T7522] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 767.344572][ T7522] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.360799][T12678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 767.376237][ T7522] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 767.409954][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.418742][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.487212][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.491032][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.689989][ T35] usb 7-1: USB disconnect, device number 21 [ 768.313859][T12690] hub 9-0:1.0: USB hub found [ 768.316201][T12690] hub 9-0:1.0: 1 port detected [ 769.780413][ T39] audit: type=1400 audit(1857067148.362:741): avc: denied { remount } for pid=12700 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 771.087440][ T39] audit: type=1400 audit(1857067149.662:742): avc: denied { create } for pid=12728 comm="syz.1.1977" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 771.119011][ T39] audit: type=1400 audit(1857067149.682:743): avc: denied { read } for pid=12728 comm="syz.1.1977" name="file0" dev="tmpfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 771.142938][ T39] audit: type=1400 audit(1857067149.682:744): avc: denied { open } for pid=12728 comm="syz.1.1977" path="/250/file0" dev="tmpfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 771.158803][ T39] audit: type=1400 audit(1857067149.702:745): avc: denied { ioctl } for pid=12728 comm="syz.1.1977" path="/250/file0" dev="tmpfs" ino=1354 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 771.189652][T12736] hub 9-0:1.0: USB hub found [ 771.193030][T12736] hub 9-0:1.0: 1 port detected [ 771.212182][T12740] program syz.2.1978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.280218][T12741] pim6reg1: entered promiscuous mode [ 771.287891][T12741] pim6reg1: entered allmulticast mode [ 771.723428][T12749] netlink: 'syz.2.1982': attribute type 29 has an invalid length. [ 771.727957][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 771.734533][T12749] netlink: 'syz.2.1982': attribute type 29 has an invalid length. [ 771.738139][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 771.738762][ T39] audit: type=1400 audit(1857067150.312:746): avc: denied { getopt } for pid=12746 comm="syz.3.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 772.023809][ T39] audit: type=1400 audit(1857067150.602:747): avc: denied { unlink } for pid=9770 comm="syz-executor" name="file0" dev="tmpfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 772.163090][T12761] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1987'. [ 772.201712][T12761] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 775.441131][T12809] sp0: Synchronizing with TNC [ 775.772546][ T39] audit: type=1400 audit(1857067154.352:748): avc: denied { watch watch_reads } for pid=12812 comm="syz.3.2002" path="/162/file0" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 776.717551][T12834] hub 9-0:1.0: USB hub found [ 776.725785][T12834] hub 9-0:1.0: 1 port detected [ 778.950551][T12863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.050873][T12865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.088782][ T39] audit: type=1400 audit(1857067157.662:749): avc: denied { getopt } for pid=12862 comm="syz.1.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 779.098145][T12865] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 779.101356][T12865] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 779.105935][T12865] vhci_hcd vhci_hcd.0: Device attached [ 779.408968][ T9765] usb 16-1: SetAddress Request (2) to port 0 [ 779.416740][ T9765] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 779.772133][T12866] vhci_hcd: connection reset by peer [ 779.792664][ T1105] vhci_hcd: stop threads [ 779.798160][ T1105] vhci_hcd: release socket [ 779.800993][ T1105] vhci_hcd: disconnect device [ 780.278354][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'. [ 780.375187][T12893] binder: 12891:12893 ioctl c018620b 0 returned -14 [ 780.383962][ T39] audit: type=1400 audit(1857067158.962:750): avc: denied { getopt } for pid=12891 comm="syz.2.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 780.418812][ T5399] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 780.621503][ T5399] usb 5-1: Using ep0 maxpacket: 16 [ 780.628557][T12897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.645558][ T5399] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 780.650635][ T5399] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 780.656036][ T5399] usb 5-1: config 0 interface 0 has no altsetting 0 [ 780.720166][ T5399] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 780.725143][ T5399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.734023][ T5399] usb 5-1: Product: syz [ 780.735728][ T5399] usb 5-1: Manufacturer: syz [ 780.760808][ T5399] usb 5-1: SerialNumber: syz [ 780.780516][ T5399] usb 5-1: config 0 descriptor?? [ 780.865372][ T5399] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input34 [ 781.008878][ T57] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 781.020097][ T5351] Bluetooth: hci6: command 0x0405 tx timeout [ 781.219430][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.235305][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 781.246789][ T57] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 781.251460][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.256774][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 781.260107][ T57] usb 7-1: config 0 descriptor?? [ 781.282220][T12905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2034'. [ 781.296717][T12905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2034'. [ 781.416439][ T832] usb 5-1: USB disconnect, device number 13 [ 781.522293][T12886] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 781.874281][ T57] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 781.878452][ T57] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 781.888280][ T57] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 782.160171][T12902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.165417][T12902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.350183][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'. [ 782.796142][ T39] audit: type=1326 audit(1857067161.372:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.1.2038" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x0 [ 782.850664][ T39] audit: type=1326 audit(1857067161.422:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.1.2038" exe="/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f23a6d779f9 code=0x0 [ 783.371420][ T832] usb 7-1: USB disconnect, device number 22 [ 784.546122][ T9765] usb 16-1: device descriptor read/8, error -110 [ 784.989998][ T9765] usb usb16-port1: attempt power cycle [ 785.154005][T12933] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2045'. [ 785.527232][T12941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2047'. [ 785.656842][ T9765] usb usb16-port1: unable to enumerate USB device [ 785.685138][ T39] audit: type=1400 audit(1857067164.262:753): avc: denied { setattr } for pid=12946 comm="syz.2.2050" name="ptyq9" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 786.107678][T12957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2053'. [ 786.246387][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 786.299000][T12959] batman_adv: batadv1: Adding interface: netdevsim0 [ 786.302047][T12959] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.328847][T12959] batman_adv: batadv1: Interface activated: netdevsim0 [ 786.822478][T12955] ALSA: mixer_oss: invalid OSS volume '' [ 787.922138][T12970] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2058'. [ 788.108552][T12976] bridge_slave_1: left allmulticast mode [ 788.119455][T12976] bridge_slave_1: left promiscuous mode [ 788.124493][T12976] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.131513][T12978] x_tables: duplicate underflow at hook 1 [ 788.141921][T12976] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 788.148834][T12978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.183092][T12979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2061'. [ 788.288908][T12979] vxlan1: entered promiscuous mode [ 790.015835][T13003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2067'. [ 790.034228][T13002] overlayfs: failed to resolve './file1': -2 [ 790.039634][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 790.048826][T12994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2068'. [ 790.344981][T12990] ALSA: mixer_oss: invalid OSS volume '' [ 791.984586][ T39] audit: type=1400 audit(1857067170.552:754): avc: denied { setattr } for pid=13032 comm="syz.0.2080" name="NETLINK" dev="sockfs" ino=55820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 792.007588][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2082'. [ 792.007909][ T39] audit: type=1400 audit(1857067170.572:755): avc: denied { read } for pid=13035 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 792.066704][T13033] netlink: 'syz.0.2080': attribute type 4 has an invalid length. [ 792.120873][T13038] 9pnet_fd: Insufficient options for proto=fd [ 792.208280][ T39] audit: type=1400 audit(1857067170.782:756): avc: denied { append } for pid=13034 comm="syz.1.2082" name="usbmon6" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 792.424246][ T7522] IPVS: starting estimator thread 0... [ 792.515314][T13052] trusted_key: syz.1.2086 sent an empty control message without MSG_MORE. [ 792.548783][T13050] IPVS: using max 34 ests per chain, 81600 per kthread [ 792.632784][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 792.677664][T13055] bond0: (slave netdevsim0): Releasing backup interface [ 792.691506][T13055] batman_adv: batadv1: Adding interface: netdevsim0 [ 792.695603][T13055] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.707279][T13055] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 792.808785][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 792.837649][T13057] bridge_slave_1: left allmulticast mode [ 792.839934][T13057] bridge_slave_1: left promiscuous mode [ 792.842309][T13057] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.879612][T13057] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 793.028766][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 793.032930][ T8] usb 5-1: config 0 has no interfaces? [ 793.035592][ T8] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 793.048920][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.078370][ T8] usb 5-1: config 0 descriptor?? [ 793.210491][ T39] audit: type=1400 audit(1857067171.792:757): avc: denied { setopt } for pid=13062 comm="syz.2.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 793.491460][T13065] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 793.648602][T13083] bridge_slave_1: left allmulticast mode [ 793.656946][T13083] bridge_slave_1: left promiscuous mode [ 793.664748][T13083] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.685870][ T1418] usb 5-1: USB disconnect, device number 14 [ 793.698593][T13083] bridge_slave_0: left allmulticast mode [ 793.718910][T13083] bridge_slave_0: left promiscuous mode [ 793.729267][T13083] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.888741][ T39] audit: type=1400 audit(1857067173.462:758): avc: denied { setopt } for pid=13098 comm="syz.2.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 795.171050][T13104] netlink: 'syz.2.2102': attribute type 10 has an invalid length. [ 795.199433][T13104] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 795.848867][ T7522] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 796.035174][ T7522] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 796.059848][ T7522] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 796.083411][ T7522] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 796.102609][ T7522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.147931][T13108] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 796.227052][ T7522] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 796.303274][ T1418] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 796.519611][ T1418] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 796.532161][ T1418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 796.536011][ T1418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 796.540576][ T7522] usb 5-1: USB disconnect, device number 15 [ 796.543340][ T1418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 796.551081][ T1418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 796.558827][ T1418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 796.565262][ T1418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 796.577622][ T1418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 796.588857][ T1418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 796.594350][ T1418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 796.599123][ T1418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 796.603867][ T1418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 796.627498][ T1418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 796.636698][ T1418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 796.640602][ T1418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 796.645556][ T1418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 796.658495][ T1418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 796.662521][ T1418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 796.666865][ T1418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 796.673614][ T1418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 796.677396][ T1418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 796.708725][ T1418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 796.713134][ T1418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 796.717499][ T1418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 796.728775][ T1418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 796.734388][ T1418] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 796.738130][ T1418] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 796.753384][ T1418] usb 6-1: Product: syz [ 796.755101][ T1418] usb 6-1: Manufacturer: syz [ 796.757036][ T1418] usb 6-1: SerialNumber: syz [ 796.765998][ T1418] usb 6-1: config 0 descriptor?? [ 796.779491][ T1418] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 797.011870][ T1418] usb 6-1: USB disconnect, device number 22 [ 797.017210][ T1418] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 797.073486][ T39] audit: type=1400 audit(1857067175.652:759): avc: denied { unmount } for pid=9774 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 797.277737][ T39] audit: type=1400 audit(1857067175.852:760): avc: denied { write } for pid=13126 comm="syz.3.2110" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 797.329879][T13130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2110'. [ 797.433268][ T39] audit: type=1400 audit(1857067176.012:761): avc: denied { mount } for pid=13128 comm="syz.2.2111" name="/" dev="9p" ino=36701526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 797.502312][T13130] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 797.887094][ T5899] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 798.109600][ T5899] usb 8-1: Using ep0 maxpacket: 32 [ 798.223993][ T5899] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.229319][ T5899] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.259747][ T5899] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 798.333142][ T5899] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 798.333168][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.333185][ T5899] usb 8-1: Product: syz [ 798.333198][ T5899] usb 8-1: Manufacturer: syz [ 798.333211][ T5899] usb 8-1: SerialNumber: syz [ 798.479178][ T39] audit: type=1400 audit(1857067177.062:762): avc: denied { unmount } for pid=9774 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 799.093363][ T39] audit: type=1400 audit(1857067177.672:763): avc: denied { create } for pid=13150 comm="syz.1.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 799.115636][ T39] audit: type=1400 audit(1857067177.682:764): avc: denied { write } for pid=13150 comm="syz.1.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 799.137698][ T39] audit: type=1400 audit(1857067177.682:765): avc: denied { nlmsg_write } for pid=13150 comm="syz.1.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 799.161864][T13154] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 799.165194][T13154] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 799.178808][T13154] vhci_hcd vhci_hcd.0: Device attached [ 799.210155][T13155] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 799.216614][ T11] vhci_hcd: stop threads [ 799.221493][ T11] vhci_hcd: release socket [ 799.224079][ T11] vhci_hcd: disconnect device [ 799.457691][ T39] audit: type=1400 audit(1857067178.032:766): avc: denied { execmem } for pid=13157 comm="syz.2.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 800.667668][T13181] qnx4: no qnx4 filesystem (no root dir). [ 800.669135][T13164] syz.2.2118 (13164): drop_caches: 2 [ 800.849089][ T9765] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 801.049450][ T9765] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 801.054114][ T9765] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 801.059626][ T9765] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 801.083227][ T5899] cdc_ncm 8-1:1.0: bind() failure [ 801.101608][ T5899] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 801.106318][ T5899] cdc_ncm 8-1:1.1: bind() failure [ 801.120905][ T5899] usb 8-1: USB disconnect, device number 16 [ 801.225271][ T9765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 801.239241][ T9765] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 801.254302][ T9765] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 801.268942][ T9765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 801.283464][ T9765] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 801.287294][ T9765] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 801.296949][ T9765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 801.310607][ T9765] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 801.314580][ T9765] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 801.319505][ T9765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 801.323754][ T9765] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 801.327579][ T9765] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 801.338722][ T9765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 801.344758][ T9765] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 801.348528][ T9765] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 801.358748][ T9765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 801.369477][ T9765] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 801.373412][ T9765] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 801.377793][ T9765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 801.389809][ T9765] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 801.394037][ T9765] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 801.398906][ T9765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 801.410567][ T9765] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 801.414605][ T9765] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 801.417596][ T9765] usb 5-1: Product: syz [ 801.419868][ T9765] usb 5-1: Manufacturer: syz [ 801.422308][ T9765] usb 5-1: SerialNumber: syz [ 801.429972][ T9765] usb 5-1: config 0 descriptor?? [ 801.441610][ T9765] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 801.709030][ T9888] usb 5-1: USB disconnect, device number 16 [ 801.714289][ T9888] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 802.011853][ T39] audit: type=1400 audit(1857067180.592:767): avc: denied { bind } for pid=13213 comm="syz.3.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 803.222845][T13245] Bluetooth: hci3: invalid len left 7, exp >= 27 [ 804.458957][ T1418] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 804.667798][ T1418] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 804.685524][ T1418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 804.689565][ T1418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 804.694029][ T1418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 804.969162][ T1418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 804.978809][ T1418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 804.984370][ T1418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 805.011548][T13273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2150'. [ 805.015097][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'. [ 805.019099][ T1418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 805.042863][ T1418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 805.048599][ T1418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 805.060181][ T1418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 805.063971][ T1418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 805.068330][ T1418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 805.160201][ T1418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 805.166216][ T1418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 805.196179][ T1418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 805.210273][ T1418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 805.214403][ T1418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 805.228751][ T1418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 805.245494][ T1418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 805.248601][ T1418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 805.259056][ T1418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 805.263450][ T1418] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 805.267296][ T1418] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 805.278787][ T1418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 805.286200][ T1418] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 805.290241][ T1418] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 805.294413][ T1418] usb 7-1: Product: syz [ 805.295961][ T1418] usb 7-1: Manufacturer: syz [ 805.297496][ T1418] usb 7-1: SerialNumber: syz [ 805.309407][T13281] Invalid ELF header magic: != ELF [ 805.309415][ T39] audit: type=1400 audit(1857067183.882:768): avc: denied { module_load } for pid=13277 comm="syz.3.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 805.310187][ T1418] usb 7-1: config 0 descriptor?? [ 805.322292][ T1418] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 805.554321][ T1418] usb 7-1: USB disconnect, device number 23 [ 805.559199][ T1418] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 806.059007][ T9765] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 806.250550][ T9765] usb 6-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 806.254508][ T9765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.261992][ T9765] usb 6-1: config 0 descriptor?? [ 806.267628][ T9765] usb 6-1: NDI device with a latency value of 1 [ 806.504272][ T9765] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 806.512029][ T9765] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 806.563813][ T9765] usb 6-1: USB disconnect, device number 23 [ 806.573647][ T9765] ftdi_sio 6-1:0.0: device disconnected [ 806.796210][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 808.320392][T13318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2166'. [ 808.411172][T13318] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 808.728786][ T5380] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 808.908781][ T5380] usb 5-1: Using ep0 maxpacket: 32 [ 809.187603][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.190207][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.343487][ T5380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.354321][ T5380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.365953][ T5380] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 809.380640][ T5380] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.386848][ T5380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.400188][ T5380] usb 5-1: Product: syz [ 809.405557][ T5380] usb 5-1: Manufacturer: syz [ 809.408569][ T5380] usb 5-1: SerialNumber: syz [ 809.737931][ T5380] cdc_ncm 5-1:1.0: bind() failure [ 809.746544][ T5380] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 809.758832][ T5380] cdc_ncm 5-1:1.1: bind() failure [ 809.764920][ T5380] usb 5-1: USB disconnect, device number 17 [ 811.016659][ T9888] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz1 [ 811.228844][ T5380] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 811.418789][ T5380] usb 6-1: Using ep0 maxpacket: 8 [ 811.423234][ T5380] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.427520][ T5380] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 811.441719][ T5380] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 811.446675][ T5380] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 811.478770][ T5380] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 811.481726][T13372] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 811.482911][ T5380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.506793][ T5380] hub 6-1:1.0: bad descriptor, ignoring hub [ 811.513913][ T5380] hub 6-1:1.0: probe with driver hub failed with error -5 [ 811.517080][ T5380] cdc_wdm 6-1:1.0: skipping garbage [ 811.524043][ T5380] cdc_wdm 6-1:1.0: skipping garbage [ 811.527748][ T5380] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 811.530797][ T5380] cdc_wdm 6-1:1.0: Unknown control protocol [ 812.020027][T13355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.027396][T13378] Invalid ELF header magic: != ELF [ 812.039786][T13355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.203284][T13368] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 813.499109][ T5399] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 813.901364][ T832] usb 6-1: USB disconnect, device number 24 [ 813.909952][ T5399] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 813.914656][ T5399] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 813.920581][ T5399] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 813.924307][ T5399] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.959428][T13387] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 813.987171][ T5399] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 814.690413][ T5899] usb 8-1: USB disconnect, device number 17 [ 817.131283][ T39] audit: type=1326 audit(1857067195.712:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.0.2195" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09baf779f9 code=0x0 [ 817.299077][T13430] tmpfs: Bad value for 'mpol' [ 817.438546][ T39] audit: type=1400 audit(1857067196.012:770): avc: denied { setopt } for pid=13428 comm="syz.2.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 817.526573][T13436] netlink: 'syz.2.2196': attribute type 10 has an invalid length. [ 817.587758][T13436] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 818.099580][T13428] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 818.304746][ T39] audit: type=1326 audit(1857067196.882:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.2.2199" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75a9f779f9 code=0x0 [ 818.528598][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 818.532694][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 818.537554][T13450] kAFS: No cell specified [ 818.554488][ T39] audit: type=1400 audit(1857067197.132:772): avc: denied { read } for pid=13449 comm="syz.0.2201" path="socket:[57652]" dev="sockfs" ino=57652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 818.557659][T13449] delete_channel: no stack [ 818.801864][ T1418] libceph: connect (1)[c::]:6789 error -101 [ 818.805392][ T1418] libceph: mon0 (1)[c::]:6789 connect error [ 818.854362][ T1418] libceph: connect (1)[c::]:6789 error -101 [ 818.857167][ T1418] libceph: mon0 (1)[c::]:6789 connect error [ 819.032173][T13455] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2202'. [ 819.124288][ T1418] libceph: connect (1)[c::]:6789 error -101 [ 819.127099][ T1418] libceph: mon0 (1)[c::]:6789 connect error [ 819.601891][T13452] ceph: No mds server is up or the cluster is laggy [ 819.642794][T13472] tmpfs: Bad value for 'mpol' [ 819.649175][ T1418] libceph: connect (1)[c::]:6789 error -101 [ 819.651886][ T1418] libceph: mon0 (1)[c::]:6789 connect error [ 819.825247][T13472] netlink: 'syz.1.2209': attribute type 10 has an invalid length. [ 819.869700][T13472] batman_adv: batadv1: Removing interface: netdevsim0 [ 819.984236][T13472] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 820.100493][T13471] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 820.151413][ T39] audit: type=1400 audit(1857067198.732:773): avc: denied { ioctl } for pid=13478 comm="syz.0.2210" path="socket:[56761]" dev="sockfs" ino=56761 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 820.443659][T13483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.018727][ T39] audit: type=1400 audit(1857067199.592:774): avc: denied { nlmsg_read } for pid=13500 comm="syz.3.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 821.052289][T13506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13506 comm=syz.2.2218 [ 821.071819][T13506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 821.240987][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'. [ 821.244915][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'. [ 821.571646][ T5351] Bluetooth: hci6: command 0x0405 tx timeout [ 821.685672][T13511] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2219' sets config #0 [ 821.990408][T13519] overlay: filesystem on ./bus not supported as upperdir [ 823.862174][T13538] UBIFS error (pid: 13538): cannot open "/dev/sg0", error -22 [ 824.392602][T13546] bridge0: entered allmulticast mode [ 824.413589][T13546] bridge_slave_1: left allmulticast mode [ 824.415921][T13546] bridge_slave_1: left promiscuous mode [ 824.418333][T13546] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.481847][T13546] bridge_slave_0: left allmulticast mode [ 824.484374][T13546] bridge_slave_0: left promiscuous mode [ 824.487501][T13546] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.626931][T13546] bridge0 (unregistering): left allmulticast mode [ 825.160493][ T39] audit: type=1400 audit(1857067203.742:775): avc: denied { cmd } for pid=13566 comm="syz.1.2230" path="socket:[57766]" dev="sockfs" ino=57766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 827.054634][ T39] audit: type=1326 audit(1857067205.632:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.1.2242" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 827.087173][ T39] audit: type=1326 audit(1857067205.632:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.1.2242" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 827.108966][ T39] audit: type=1326 audit(1857067205.632:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.1.2242" exe="/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 827.128746][ T39] audit: type=1326 audit(1857067205.632:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.1.2242" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 827.137961][ T39] audit: type=1326 audit(1857067205.632:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.1.2242" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 827.168759][ T39] audit: type=1326 audit(1857067205.642:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.1.2242" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 827.178543][ T39] audit: type=1326 audit(1857067205.642:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.1.2242" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 827.204774][ T39] audit: type=1326 audit(1857067205.642:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.1.2242" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 827.224663][ T39] audit: type=1326 audit(1857067205.662:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.1.2242" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23a6d779f9 code=0x7ffc0000 [ 827.296541][T13601] netlink: 'syz.1.2242': attribute type 10 has an invalid length. [ 827.348422][T13601] macvlan0 (unregistering): left promiscuous mode [ 827.396387][T13606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2248'. [ 827.412351][ C3] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 827.418075][ C3] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 827.422670][ C3] CPU: 3 UID: 0 PID: 13615 Comm: syz.3.2243 Not tainted 6.11.0-rc2-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 827.428139][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 827.434717][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 827.445053][ C3] RIP: 0010:skb_segment+0x19da/0x42b0 [ 827.445107][ C3] Code: 00 00 fe e9 bc ea ff ff e8 c3 0a a4 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 75 31 01 f9 48 8b 84 24 d0 [ 827.445125][ C3] RSP: 0018:ffffc900009077c8 EFLAGS: 00010202 [ 827.445147][ C3] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff88e661c2 [ 827.445159][ C3] RDX: 000000000000000e RSI: ffffffff88e6729d RDI: 0000000000000070 [ 827.445171][ C3] RBP: ffffc90000907978 R08: 0000000000000005 R09: 000000000000ffff [ 827.445182][ C3] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88804f747d40 [ 827.445194][ C3] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 827.445205][ C3] FS: 00007f303b1926c0(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 827.445238][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.486506][ C3] CR2: 000000002002f000 CR3: 0000000034002000 CR4: 0000000000352ef0 [ 827.491641][ C3] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 827.495424][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 827.499389][ C3] Call Trace: [ 827.500985][ C3] [ 827.502325][ C3] ? show_regs+0x8c/0xa0 [ 827.504285][ C3] ? die_addr+0x4f/0xd0 [ 827.506336][ C3] ? exc_general_protection+0x155/0x230 [ 827.508961][ C3] ? asm_exc_general_protection+0x26/0x30 [ 827.511405][ C3] ? skb_segment+0x8e2/0x42b0 [ 827.513566][ C3] ? skb_segment+0x19bd/0x42b0 [ 827.515868][ C3] ? skb_segment+0x19da/0x42b0 [ 827.518074][ C3] ? skb_segment+0x19bd/0x42b0 [ 827.520372][ C3] ? hlock_class+0x4e/0x130 [ 827.522549][ C3] ? mark_lock+0xb5/0xc60 [ 827.524554][ C3] ? __pfx_skb_segment+0x10/0x10 [ 827.526952][ C3] ? mark_lock+0xb5/0xc60 [ 827.528933][ C3] ? hlock_class+0x4e/0x130 [ 827.531180][ C3] ? mark_lock+0xb5/0xc60 [ 827.533194][ C3] tcp_gso_segment+0x3ca/0x1940 [ 827.535538][ C3] ? __pfx_tcp_wfree+0x10/0x10 [ 827.537848][ C3] tcp6_gso_segment+0x1f9/0x12e0 [ 827.540144][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 827.542624][ C3] ipv6_gso_segment+0x7b2/0x1c70 [ 827.545044][ C3] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 827.547536][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 827.550317][ C3] skb_mac_gso_segment+0x2a6/0x650 [ 827.552723][ C3] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 827.555287][ C3] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 827.557934][ C3] ? lock_acquire+0x1b1/0x560 [ 827.560224][ C3] __skb_gso_segment+0x333/0x710 [ 827.562529][ C3] ? netif_skb_features+0x3ac/0xcc0 [ 827.565000][ C3] validate_xmit_skb+0x33b/0xef0 [ 827.567351][ C3] __dev_queue_xmit+0x6f9/0x4300 [ 827.569769][ C3] ? check_irq_usage+0x872/0x1490 [ 827.572086][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 827.574538][ C3] ? hlock_class+0x4e/0x130 [ 827.576729][ C3] ? mark_lock+0xb5/0xc60 [ 827.578643][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 827.580935][ C3] ? lock_acquire+0x1b1/0x560 [ 827.582761][ C3] ? find_held_lock+0x2d/0x110 [ 827.584562][ C3] ? mark_held_locks+0x9f/0xe0 [ 827.586262][ C3] ip6_finish_output2+0x1104/0x18c0 [ 827.588341][ C3] ip6_finish_output+0x3f9/0x1300 [ 827.590748][ C3] ip6_output+0x1f8/0x540 [ 827.592815][ C3] ? __pfx_ip6_output+0x10/0x10 [ 827.595207][ C3] ip6_xmit+0x125f/0x2040 [ 827.597242][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 827.599780][ C3] ? __pfx_ip6_xmit+0x10/0x10 [ 827.602045][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 827.604464][ C3] ? __pfx_inet6_csk_route_socket+0x10/0x10 [ 827.607324][ C3] ? ip6_protocol_deliver_rcu+0x188/0x1530 [ 827.610133][ C3] ? ipv6_rcv+0x265/0x680 [ 827.612113][ C3] ? __netif_receive_skb_one_core+0x12e/0x1e0 [ 827.614921][ C3] ? __netif_receive_skb+0x1d/0x160 [ 827.617433][ C3] ? process_backlog+0x443/0x15f0 [ 827.619864][ C3] inet6_csk_xmit+0x3ce/0x740 [ 827.622075][ C3] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 827.624609][ C3] ? csum_ipv6_magic+0x296/0x310 [ 827.627033][ C3] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 827.629562][ C3] __tcp_transmit_skb+0x1adb/0x3dc0 [ 827.632105][ C3] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 827.634839][ C3] ? __build_skb_around+0x278/0x3b0 [ 827.637365][ C3] ? skb_zerocopy_clone+0x2c9/0x670 [ 827.639994][ C3] tcp_write_xmit+0x12a8/0x8490 [ 827.642291][ C3] __tcp_push_pending_frames+0xaf/0x390 [ 827.644860][ C3] tcp_rcv_state_process+0xf3e/0x4f30 [ 827.647341][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 827.649887][ C3] ? reacquire_held_locks+0x450/0x4c0 [ 827.652455][ C3] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 827.655139][ C3] ? lock_acquire+0x1b1/0x560 [ 827.657447][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 827.659742][ C3] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 827.662287][ C3] ? tcp_v6_do_rcv+0x435/0x16e0 [ 827.664676][ C3] tcp_v6_do_rcv+0x435/0x16e0 [ 827.667017][ C3] tcp_v6_rcv+0x3143/0x4120 [ 827.668997][ C3] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 827.671210][ C3] ? __pfx_raw6_local_deliver+0x10/0x10 [ 827.673764][ C3] ? lock_acquire+0x1b1/0x560 [ 827.676084][ C3] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 827.678250][ C3] ip6_protocol_deliver_rcu+0x188/0x1530 [ 827.680746][ C3] ip6_input_finish+0x14f/0x2f0 [ 827.682963][ C3] ip6_input+0xa1/0xd0 [ 827.684726][ C3] ? __pfx_ip6_input+0x10/0x10 [ 827.686664][ C3] ipv6_rcv+0x265/0x680 [ 827.688284][ C3] ? __pfx_ipv6_rcv+0x10/0x10 [ 827.690215][ C3] __netif_receive_skb_one_core+0x12e/0x1e0 [ 827.692726][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 827.695469][ C3] ? process_backlog+0x3f1/0x15f0 [ 827.697592][ C3] ? __pfx_lock_release+0x10/0x10 [ 827.699884][ C3] ? do_raw_spin_lock+0x12d/0x2c0 [ 827.701924][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 827.703899][ C3] ? process_backlog+0x3f1/0x15f0 [ 827.705788][ C3] __netif_receive_skb+0x1d/0x160 [ 827.707591][ C3] process_backlog+0x443/0x15f0 [ 827.709369][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 827.711625][ C3] net_rx_action+0xa92/0x1010 [ 827.713403][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 827.715362][ C3] ? __pfx_mark_lock+0x10/0x10 [ 827.717153][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 827.719179][ C3] ? sched_clock+0x38/0x60 [ 827.721197][ C3] ? sched_clock_cpu+0x6d/0x4d0 [ 827.723336][ C3] ? check_kill_permission+0x53/0x550 [ 827.725632][ C3] handle_softirqs+0x216/0x8f0 [ 827.727689][ C3] ? irq_work_single+0x13a/0x260 [ 827.736002][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 827.738024][ C3] ? irqtime_account_irq+0x18d/0x2e0 [ 827.740229][ C3] ? sk_wait_data+0x1ab/0x510 [ 827.742113][ C3] do_softirq+0xb2/0xf0 [ 827.743771][ C3] [ 827.745057][ C3] [ 827.746337][ C3] __local_bh_enable_ip+0x100/0x120 [ 827.748647][ C3] sk_wait_data+0x1ab/0x510 [ 827.750616][ C3] ? poison_slab_object+0xf7/0x160 [ 827.752445][ C3] ? __pfx_sk_wait_data+0x10/0x10 [ 827.754395][ C3] ? __pfx_woken_wake_function+0x10/0x10 [ 827.756825][ C3] ? tcp_send_ack+0x82/0xa0 [ 827.758823][ C3] tcp_recvmsg_locked+0x80e/0x2700 [ 827.761110][ C3] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 827.763470][ C3] ? tcp_recvmsg+0x113/0x680 [ 827.765521][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 827.767804][ C3] tcp_recvmsg+0x12e/0x680 [ 827.769768][ C3] ? __pfx_tcp_recvmsg+0x10/0x10 [ 827.772004][ C3] ? sock_has_perm+0x25a/0x2f0 [ 827.774166][ C3] ? __pfx_mark_lock+0x10/0x10 [ 827.776323][ C3] ? __pfx_tcp_recvmsg+0x10/0x10 [ 827.778438][ C3] inet6_recvmsg+0x12b/0x6a0 [ 827.780512][ C3] ? find_held_lock+0x2d/0x110 [ 827.782586][ C3] ? __pfx_inet6_recvmsg+0x10/0x10 [ 827.784886][ C3] ? security_socket_recvmsg+0x98/0xd0 [ 827.787402][ C3] ? __pfx_inet6_recvmsg+0x10/0x10 [ 827.789667][ C3] sock_recvmsg+0xfe/0x250 [ 827.791539][ C3] ____sys_recvmsg+0x21f/0x6b0 [ 827.793612][ C3] ? __pfx_____sys_recvmsg+0x10/0x10 [ 827.795916][ C3] ? find_held_lock+0x2d/0x110 [ 827.798002][ C3] ___sys_recvmsg+0x115/0x1a0 [ 827.800137][ C3] ? __pfx____sys_recvmsg+0x10/0x10 [ 827.802411][ C3] ? tcp_sendmsg+0x38/0x50 [ 827.804353][ C3] ? __fget_light+0x173/0x210 [ 827.806371][ C3] __sys_recvmsg+0x114/0x1e0 [ 827.808376][ C3] ? __pfx___sys_recvmsg+0x10/0x10 [ 827.810635][ C3] ? __x64_sys_futex+0x1e1/0x4c0 [ 827.812821][ C3] do_syscall_64+0xcd/0x250 [ 827.814876][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.817524][ C3] RIP: 0033:0x7f303a3779f9 [ 827.819547][ C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.828055][ C3] RSP: 002b:00007f303b192048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 827.831865][ C3] RAX: ffffffffffffffda RBX: 00007f303a505f80 RCX: 00007f303a3779f9 [ 827.835057][ C3] RDX: 0000000040000110 RSI: 00000000200008c0 RDI: 0000000000000005 [ 827.837814][ C3] RBP: 00007f303a3e58ee R08: 0000000000000000 R09: 0000000000000000 [ 827.840818][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.843794][ C3] R13: 000000000000000b R14: 00007f303a505f80 R15: 00007ffd7b1dd688 [ 827.846743][ C3] [ 827.848075][ C3] Modules linked in: [ 827.849895][ C3] ---[ end trace 0000000000000000 ]--- [ 827.852183][ C3] RIP: 0010:skb_segment+0x19da/0x42b0 [ 827.854348][ C3] Code: 00 00 fe e9 bc ea ff ff e8 c3 0a a4 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 75 31 01 f9 48 8b 84 24 d0 [ 827.862239][ C3] RSP: 0018:ffffc900009077c8 EFLAGS: 00010202 [ 827.864720][ C3] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff88e661c2 [ 827.867743][ C3] RDX: 000000000000000e RSI: ffffffff88e6729d RDI: 0000000000000070 [ 827.871375][ C3] RBP: ffffc90000907978 R08: 0000000000000005 R09: 000000000000ffff [ 827.874860][ C3] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88804f747d40 [ 827.878372][ C3] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 827.881811][ C3] FS: 00007f303b1926c0(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 827.885063][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.888087][ C3] CR2: 000000002002f000 CR3: 0000000034002000 CR4: 0000000000352ef0 [ 827.891597][ C3] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 827.894994][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 827.898362][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 827.902108][ C3] Kernel Offset: disabled [ 827.903984][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:14:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff92000752f5d RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000249 RDI=ffffffff8b4caee0 RBP=0000000000000000 RSP=ffffc90003a97ad0 R8 =ffffffff84790eb7 R9 =0000000000000000 R10=ffffc90003a97c98 R11=0000000000000001 R12=ffffffff8b4caee0 R13=0000000000000249 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8b11d9de RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f546f1926c0 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e9d9ff8 CR3=00000000355fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0d8 ffffffff8100a0af ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0d8 ffffffff8100a0d8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a6de66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a6de66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a6de66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a6de66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a6de6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a6de6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b3fb8814dd2a8314 c5af53d6ad165294 7573ccc300040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5b01c63e8923b03 d2d42fd0999e4fd8 02048c04bde14b80 4e6ac3fa3f7149fd ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 474c721cedec425a 7e59f316a2d76353 aadaa290d9b546b5 b01c63e8923b03d2 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d42fd0999e4fd802 048c04bde14b804e 6ac3fa3f7149fdb3 fb8814dd2a8314c5 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 af53d6ad16529475 73ccc30de0131a78 251c4ec4e6a36f7a 48576113f5e7bb81 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 577dfc18b83f7006 dab57e5e29dbd08a 42c648521a04bd4c 4d951c9c85d8bb36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=000000000017ffff RCX=ffffffff81cfa9c6 RDX=00000000000365ef RSI=000000000017ffff RDI=000000000017ffff RBP=00000000000365ef RSP=ffffc900032c7808 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=dffffc0000000000 R12=1ffff92000658f02 R13=ffff88802e785000 R14=000055555e1eb000 R15=0000000000000000 RIP=ffffffff818a77de RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe118d1da0 CR3=0000000022822000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79340d66a3 00007f79340d66a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe118d3fa0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555db7ab18 000055555db7ab10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555db72490 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555dbe60b3 000055555dbe59c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555db7884c 000055555db78820 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000038323335 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001ffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010580041889a2d9 c408000100000e08 06060122e6000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001ffffffff ffffffffa30806c4 0316020006c20303 f6020006c0030008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006b8030c080006 b00320080006a803 00080006a00304eb 9208000698030fff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff888046f4a2d8 RCX=0000000000000000 RDX=f6d53b53d3257a00 RSI=ffffffff8bb08440 RDI=ffff888046f4a2dc RBP=1ffff92000768f73 RSP=ffffc90003b47b90 R8 =0000000000000000 R9 =fffffbfff20259d3 R10=ffffffff9012ce9f R11=0000000000000001 R12=ffff888046f4a2d8 R13=0000000000008002 R14=ffff888046f4a000 R15=ffffc90003b47d50 RIP=ffffffff8168e1b0 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f09c9b966c0 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32504ff8 CR3=0000000020236000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefb59a470 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09bafe66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09bafe66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09bafe66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09bafe66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09bafe6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09bafe6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 00000000000001e0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe4425 RDI=ffffffff9519f6a0 RBP=ffffffff9519f660 RSP=ffffc90000907198 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000043 R14=ffffffff84fe43c0 R15=0000000000000000 RIP=ffffffff84fe444f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f303b1926c0 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002002f000 CR3=0000000034002000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000000a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f303a3e66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f303a3e66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f303a3e66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f303a3e66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f303a3e6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f303a3e6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f303a4d6488 00007f303a4d6480 00007f303a4d6478 00007f303a4d6450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f303b03d100 00007f303a4d6440 00007f303a4d6458 00007f303a4d64a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f303a4d6498 00007f303a4d6490 00007f303a4d6488 00007f303a4d6480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000