last executing test programs: 1m31.837867526s ago: executing program 1 (id=50): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7f, 0xffffffc1, 0x0, 0x222e, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x80000000, 0x5}, 0x48) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 1m31.813031613s ago: executing program 1 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x41031, 0x455965fb809f3fbf}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_COST={0x8, 0x3, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 1m31.704966858s ago: executing program 1 (id=54): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) setrlimit(0x0, &(0x7f0000000280)={0x7, 0xfdffffffffffffff}) 1m30.834052529s ago: executing program 1 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1m30.715560092s ago: executing program 1 (id=78): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1m30.658833311s ago: executing program 1 (id=80): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 1m15.523420291s ago: executing program 32 (id=80): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 56.725053596s ago: executing program 0 (id=961): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x101}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 56.640250724s ago: executing program 0 (id=964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x17b}]}) 56.519409173s ago: executing program 0 (id=970): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 56.448686291s ago: executing program 0 (id=972): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 56.417452718s ago: executing program 0 (id=975): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 56.120946114s ago: executing program 0 (id=995): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x4, 0x12) 56.053541051s ago: executing program 33 (id=995): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x4, 0x12) 11.368885408s ago: executing program 5 (id=2324): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 11.362378612s ago: executing program 5 (id=2327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x3}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20) 11.30562368s ago: executing program 5 (id=2329): sendmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000002900000043"], 0x10}}], 0x1, 0x20040000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) listen(r0, 0x1000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 11.301219264s ago: executing program 5 (id=2330): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x44) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 11.232046408s ago: executing program 5 (id=2333): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r1, 0x0) ftruncate(r1, 0x0) write(r0, &(0x7f0000000000)="b8d2", 0x2) 10.76546852s ago: executing program 5 (id=2357): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 10.695998887s ago: executing program 34 (id=2357): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 3.244916758s ago: executing program 6 (id=2522): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48}) 3.198671731s ago: executing program 6 (id=2524): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x1, r0, &(0x7f0000000540), 0x282d) 3.125840186s ago: executing program 6 (id=2527): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.270083896s ago: executing program 6 (id=2547): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x80000001, 0x10001, 0xa, 0xd, 0x1}) 2.119358493s ago: executing program 6 (id=2549): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYBLOB='#'], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000c00)={{0x2, 0x0, 0x0, 0x3ff, 0x6, 0xe}, 0x13b, [0x3a9, 0x3, 0x3, 0x4, 0xe3, 0x4, 0x8, 0xfffffffe, 0x7e, 0x7, 0x9, 0x4, 0x6d87, 0x5, 0x4, 0x1, 0x517, 0x3, 0x5, 0x16, 0xfffffffe, 0x6, 0x80, 0x9, 0x29ae2b15, 0x5, 0x3ff, 0x3, 0x4, 0xfffeffff, 0x80000000, 0x1, 0x40, 0x6, 0x6, 0x8, 0x687, 0x1, 0x6, 0x8, 0x6, 0xdf2, 0xffffffff, 0xffffffff, 0x8, 0x800, 0x3, 0x9, 0xb0b, 0x2b, 0x6, 0x8, 0x40, 0x4, 0x200000, 0x9, 0x7, 0x4, 0x2, 0xc, 0x6, 0x7fff, 0x7, 0x3, 0x7fff, 0xb1c5, 0xffffffff, 0x8, 0x7f, 0xe1b, 0x2, 0x139b, 0x3ff, 0x13052866, 0xc, 0xd5, 0x7, 0xfffffffb, 0x5, 0x3, 0x3, 0x40, 0x9, 0x1, 0x13, 0xfffffff8, 0x6, 0x8, 0x4858, 0x4, 0x10001, 0xffffffff, 0xeb2, 0x200, 0x101, 0x4, 0x9, 0xdd49, 0x8, 0xff, 0xbed, 0x2, 0x1, 0x101, 0xf, 0x2, 0xfaf975e, 0x0, 0x0, 0xfff, 0x400, 0xaf, 0x6, 0x80, 0x7, 0x8d3, 0x8, 0xa3, 0x1, 0xfffffff7, 0x1, 0xf0, 0x1, 0x1, 0x439a, 0x5, 0xf, 0x58, 0x4, 0x0, 0x1, 0x4, 0x5, 0x8, 0x9, 0x7fffffff, 0xcf, 0xda0, 0x101, 0x3, 0x80000001, 0xb1, 0x4, 0x3ff, 0x7, 0x4, 0x3, 0x6, 0x9, 0x100, 0x1, 0xbbe4, 0x5, 0x74, 0x8, 0x803, 0xfe31, 0x0, 0x2, 0x8, 0x5, 0x3, 0x3, 0xa2, 0x5, 0x6, 0x6, 0x1, 0xc, 0x9, 0x10001, 0x9, 0x5b, 0x6, 0x2, 0x1, 0x10000, 0x1, 0x200, 0x5f, 0x9, 0x6bbc, 0x10, 0x8001, 0xffff, 0x7, 0x6, 0x2, 0x8, 0xa4d, 0x7, 0x8, 0x4, 0x264, 0x0, 0x0, 0xa, 0x1, 0x8, 0x89d, 0x3, 0x430000, 0x3, 0x8, 0x6, 0x9, 0x7, 0x6, 0x0, 0x9, 0x7, 0x3, 0xf, 0x4, 0xff, 0x5, 0x7, 0x10000, 0x0, 0x7, 0x56, 0x17, 0x9, 0x1, 0x1ff, 0x2, 0xf96c, 0x2, 0x4, 0xc53a, 0x8d, 0x6, 0xb90b, 0x7ffe, 0x356a, 0x7ff, 0x4, 0x9, 0x7, 0x1, 0x7fff, 0xfffffffd, 0xffff98d1, 0x7ff, 0x1, 0x9, 0xa742, 0x6, 0xd1, 0x1, 0x4, 0x8, 0xfffffffd, 0xd, 0xfffffffe, 0x2, 0x0, 0x13, 0x7, 0x8, 0x4b0, 0x81, 0xc, 0x8, 0xc5c, 0x10, 0x5217, 0xd7, 0x4, 0x20000001, 0x0, 0x0, 0x5, 0x6b2, 0x5, 0x3, 0x2a2568cb, 0x9, 0xffffffff, 0x7, 0xfffffffa, 0x1, 0x6, 0x43, 0x95, 0x6, 0x81, 0x0, 0x3, 0x6, 0x7fff, 0xf94a, 0xa, 0x6, 0x7, 0x7, 0x8d, 0x3, 0x1f893c26, 0x80000001, 0x9, 0x400, 0x8000, 0xfca1, 0x2, 0x0, 0x14, 0xffffffff, 0x2, 0x6, 0x0, 0xfff, 0x1, 0x0, 0x5, 0x5, 0x100, 0x8, 0x7, 0x8, 0xd, 0x3e7f4f1c, 0x3, 0x7, 0x10001, 0x3, 0x8, 0x89, 0x4, 0x1, 0xfffffff9, 0x5, 0x1, 0x3, 0xff, 0x15f, 0x81, 0x2, 0x8, 0x8, 0x2, 0x4, 0x7, 0x5, 0x2, 0x29fb, 0x4, 0x2, 0x4, 0x5, 0x101, 0xa9f3, 0x2, 0x7, 0xc, 0x9, 0xd, 0xe, 0x1, 0x5, 0x8, 0xc8a, 0xa51f, 0x6, 0xfff, 0x0, 0x0, 0x81, 0x0, 0x10000, 0x4, 0x7, 0x4, 0x7, 0x5, 0x802, 0x2, 0xbe, 0x1, 0x8000, 0x800, 0x4, 0x3, 0x3, 0x400, 0x1, 0x8, 0x81, 0xb13, 0x2, 0x81, 0x9, 0x4, 0x80, 0xd, 0x1, 0x800, 0xf58, 0x9, 0x9, 0x8, 0x3cc, 0x0, 0xb0e, 0x3, 0x7, 0x537, 0x7, 0x38b9, 0xfffffffb, 0xc, 0xcf7, 0xffff8001, 0x0, 0x0, 0x5, 0x81, 0xa, 0xdb6, 0x5, 0xbcb, 0x6, 0xd, 0x9, 0x5, 0x101, 0x5, 0x1, 0x3, 0x2, 0xd, 0x10001, 0x1, 0x8000, 0x3, 0x1, 0x10001, 0x200, 0x1000, 0x8000, 0xffffffff, 0x6, 0xff, 0x89b6845, 0xfffffffb, 0x2, 0xfffffffd, 0x5f8, 0x10000, 0x0, 0x9, 0x7, 0x0, 0x9, 0x3321627a, 0x849, 0x5, 0xffff, 0x1, 0x24000, 0x82, 0xef, 0x401, 0x2, 0x100, 0x7, 0x7ff, 0x4, 0x7f3f08a2, 0xfffffffd, 0x10, 0x8000, 0x0, 0xe, 0x6, 0xffffffff, 0x3ff, 0xfee, 0x10001, 0x7, 0x9, 0x78, 0xe7, 0xfffffff7, 0x3, 0x4ec, 0x4, 0x6, 0x5, 0x53c4, 0x7d, 0x4, 0x100, 0x81, 0x6, 0x1, 0xffffff42, 0x800, 0x0, 0xb, 0x202, 0x7, 0x80000000, 0x8001, 0xe28, 0x2, 0x7, 0x5, 0x8, 0xd, 0x2, 0x4, 0x7f, 0xb, 0x0, 0x5, 0x0, 0xa22, 0x7, 0x80, 0x2, 0x4, 0xffffff95, 0x53cd, 0x1, 0x7fffffff, 0x80000001, 0x5, 0xaee39c9, 0x4b, 0x7, 0xffffffff, 0x2, 0x7, 0x5, 0x1, 0x4, 0xc7a7, 0x9, 0x5, 0x9, 0xe6, 0x7ff, 0x7, 0x5000, 0x8001, 0x2, 0x7cb, 0x6, 0x8, 0x5, 0x8, 0x4, 0xed, 0xffffffff, 0x2, 0x4, 0x0, 0xf9, 0x3, 0x2, 0x8, 0x8, 0xfffffffa, 0x5, 0x3, 0xc2, 0xfffffff0, 0x1, 0x69, 0x3, 0x6, 0x4000, 0x7, 0x7, 0x3, 0x7, 0x4, 0x9, 0x1, 0x0, 0x81, 0x401, 0x7fffffff, 0x9, 0x6695a7d7, 0x3ff, 0x3, 0xfffffffe, 0x2, 0x772, 0x0, 0x9, 0x6, 0x80000, 0x4, 0x0, 0x30000000, 0x4, 0x15, 0x1ff, 0x18d, 0x8001, 0x1, 0x2, 0xdd90, 0x319, 0x3, 0x80, 0x40, 0x7, 0x7, 0xf, 0x5, 0x80235c, 0x9, 0x6, 0x7, 0x5, 0x200, 0x3, 0xa, 0x1, 0x8000, 0x7fffffff, 0x3, 0x4, 0xbf25, 0x4, 0xfff, 0xa2d, 0xfffffff0, 0x3, 0x6, 0x0, 0xe, 0x5, 0xe6ee5e7a, 0xffffffff, 0x3, 0xffff, 0x3, 0x0, 0x153, 0x80000000, 0xffffffff, 0x0, 0x4, 0x1, 0x1, 0x9, 0x1, 0x7, 0x9, 0x7, 0x7, 0x2, 0xffff8000, 0x6, 0x5, 0xd, 0x400, 0x2, 0x2, 0x8ed, 0x1c2, 0xbbdb, 0x8, 0x8, 0x5, 0x7, 0x80, 0x3, 0x2, 0x7, 0xd2, 0x8, 0x401, 0xfffffffe, 0x3, 0xfffffffe, 0x9da, 0x10000, 0x3ff, 0x200, 0x5, 0x5, 0x3, 0xfffffffb, 0xce, 0x0, 0x0, 0x80000001, 0x5, 0x5, 0xb, 0x5, 0xe82, 0x10000, 0x4, 0x8, 0x6, 0x200, 0x5, 0x4, 0x70, 0x4, 0x4, 0x7, 0xf81, 0xee1, 0x1000, 0x4, 0x5, 0x3, 0x3, 0xdab7, 0xffffffff, 0x1, 0x100, 0x7, 0x3, 0x5, 0x1ff, 0x9, 0x0, 0x3, 0x1ff, 0x9, 0x6, 0xfffffff9, 0x0, 0x401, 0x81, 0x40d0, 0x1ff, 0x1, 0x8, 0xe14, 0x0, 0x200, 0x0, 0x3, 0x9, 0x3, 0x2, 0x1, 0xff, 0xd6, 0x3ff, 0xfffffffc, 0x39, 0x1, 0x9, 0x1, 0x7, 0x100, 0x7, 0x9, 0x1000, 0x0, 0x80000001, 0x8, 0x8, 0x8, 0x3, 0x280, 0x5, 0x0, 0xff, 0xf, 0x5, 0x2, 0x1, 0xf5, 0x8000, 0x4, 0x8, 0x4, 0x8, 0x9ce, 0x9, 0x7, 0x1ff, 0xffffffff, 0x1, 0x8, 0x4, 0x3, 0x5, 0x1, 0xffff0001, 0x3ff, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x5, 0xc8d, 0x7, 0x2, 0x7, 0x4, 0xe, 0xf7a0, 0x3ff, 0x1, 0x9, 0x3, 0x2020000, 0x5, 0xc, 0x3, 0x4, 0xd0, 0xb5, 0x5, 0x5, 0x0, 0x21, 0x0, 0xfffffecc, 0x9a99, 0x1e65, 0x6, 0xb3, 0xd3, 0x7, 0x4, 0x0, 0xfffffffc, 0x3, 0x849e, 0x4630, 0x4, 0xfffffff7, 0x0, 0x6, 0x202, 0x18, 0x5, 0x7, 0xf, 0x40, 0x3, 0xfffffffa, 0x0, 0xe87, 0xf3, 0x8000, 0x7, 0x1, 0x7fffffff, 0x1000, 0x85, 0x6, 0x7, 0x5, 0x9, 0x2, 0x10000, 0x9, 0x10001, 0x7, 0xff, 0x9, 0x2, 0x0, 0x9, 0x41888017, 0xffff, 0x7, 0x6, 0x5, 0x7, 0x7a1, 0x10, 0x200, 0xd128ac4c, 0x4, 0x2, 0x1, 0x89, 0x9, 0x3, 0x8, 0x6, 0x81, 0x9, 0x8, 0x6, 0xfff, 0x9, 0x9, 0xb26000, 0x7, 0x2, 0xe81d, 0x3, 0x31, 0x1, 0x4394be07, 0x6, 0x200, 0x0, 0x4, 0x9, 0x5, 0x8, 0x6, 0x395, 0x80000000, 0x40, 0x8, 0x4, 0xfffffffa, 0x9, 0x0, 0x8, 0x7fffffff, 0x7f, 0x8, 0x7, 0x9, 0x0, 0x1ff, 0x2, 0x51432e6e, 0xfffffff9, 0x8, 0x1, 0x4, 0x7, 0x2, 0xfffffffc, 0x1, 0x9, 0x81a4, 0x10000007, 0x0, 0xfffff584, 0x4, 0x3, 0xeff2, 0x7fff, 0x7fffffff, 0x100, 0x1, 0xc, 0x6, 0x581ecb57, 0x8, 0x7, 0x40000000, 0x7, 0x3, 0x8, 0x1000, 0xe6ed, 0x2ef4, 0x381f, 0x7, 0x7, 0x5, 0xffffffff, 0x5, 0xa5b0, 0x1, 0x6, 0x9, 0x7f, 0x7, 0x3ff, 0x3, 0x101, 0x9, 0x0, 0x7, 0x78, 0x7ff, 0x8, 0xfff, 0xfffffff3, 0x6, 0x6, 0x0, 0x2, 0x3, 0x0, 0x1, 0x3a6, 0x1, 0x27, 0xa, 0x2, 0xd1, 0x9cd, 0x5107, 0xfc6, 0x8, 0x3, 0x8, 0x751, 0x1, 0xffff0000, 0x0, 0x2, 0x10000, 0x2, 0x0, 0x6, 0x1, 0xd53, 0x0, 0x1ff, 0x1c23, 0x80000001, 0xfffffff8, 0x5, 0xcdbc, 0x0, 0x9, 0x7fff]}) 1.186385044s ago: executing program 3 (id=2571): unshare(0x24020400) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b25, &(0x7f0000000040)) 1.128558681s ago: executing program 3 (id=2574): ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000040)={0x8, 0x2, {0x56, 0x40, 0x7d5a, {0x2, 0x10d2}, {0x101, 0x100}, @ramp={0x7, 0x4, {0x1, 0x6, 0x800, 0x1}}}, {0x52, 0xac4, 0x3, {0x1116, 0x352}, {0xff7d, 0x7ff}, @cond=[{0x41, 0x5, 0x9, 0x4, 0x101, 0x3}, {0x2, 0x401, 0x0, 0xe, 0x400}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x8}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.126649138s ago: executing program 3 (id=2575): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x0) 1.045879073s ago: executing program 3 (id=2576): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 1.044278529s ago: executing program 3 (id=2577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 969.333186ms ago: executing program 3 (id=2578): r0 = io_uring_setup(0x3ea3, &(0x7f0000000300)={0x0, 0xecf5, 0x40, 0x8001002, 0x112}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 909.57574ms ago: executing program 4 (id=2581): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r0], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 708.988511ms ago: executing program 4 (id=2586): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 628.757794ms ago: executing program 4 (id=2589): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 500.050227ms ago: executing program 4 (id=2591): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) 499.690903ms ago: executing program 6 (id=2592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x4084) 330.018989ms ago: executing program 2 (id=2593): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 314.263012ms ago: executing program 2 (id=2594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000080000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074350111e0014000000110001"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 172.727539ms ago: executing program 2 (id=2595): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}}, 0x4) 172.449246ms ago: executing program 4 (id=2596): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x103, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}}}, 0x32) 161.375719ms ago: executing program 4 (id=2597): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000001b80)={0x3, 0x100, 0x302, 0x3ff, 0x817, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x9, 0x517347f4, 0x7, 0x8}) 90.161556ms ago: executing program 2 (id=2598): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) 89.920168ms ago: executing program 2 (id=2599): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 0s ago: executing program 2 (id=2600): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): adm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.244887][ T40] audit: type=1400 audit(1771426069.577:294): avc: denied { listen } for pid=6760 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.284201][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 84.321606][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 84.481064][ T40] audit: type=1400 audit(1771426069.807:295): avc: denied { ioctl } for pid=6772 comm="syz.2.340" path="socket:[13125]" dev="sockfs" ino=13125 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.549249][ T40] audit: type=1400 audit(1771426069.877:296): avc: denied { setopt } for pid=6776 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.760592][ T6789] sch_fq: defrate 0 ignored. [ 84.801061][ T40] audit: type=1400 audit(1771426070.127:297): avc: denied { name_bind } for pid=6790 comm="syz.0.348" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 84.829665][ T40] audit: type=1400 audit(1771426070.157:298): avc: denied { read write } for pid=6792 comm="syz.0.350" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.366251][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.370202][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.373845][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.376388][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.378917][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.510641][ T6804] chnl_net:caif_netlink_parms(): no params data found [ 85.578204][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.580489][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.583059][ T6804] bridge_slave_0: entered allmulticast mode [ 85.587334][ T6804] bridge_slave_0: entered promiscuous mode [ 85.590397][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.593003][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.595737][ T6804] bridge_slave_1: entered allmulticast mode [ 85.600595][ T6804] bridge_slave_1: entered promiscuous mode [ 85.627232][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.640319][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.660484][ T6804] team0: Port device team_slave_0 added [ 85.670367][ T6804] team0: Port device team_slave_1 added [ 85.693622][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.696543][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.707184][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.725368][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.728593][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.738539][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.817247][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.887076][ T6804] hsr_slave_0: entered promiscuous mode [ 85.890261][ T6804] hsr_slave_1: entered promiscuous mode [ 85.903810][ T6804] debugfs: 'hsr0' already exists in 'hsr' [ 85.906655][ T6804] Cannot create hsr debugfs directory [ 85.956773][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.974146][ T6836] pimreg: tun_chr_ioctl cmd 1074025676 [ 85.981200][ T6836] pimreg: owner set to 0 [ 86.064106][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.147218][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.244735][ T6804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.250208][ T6804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.257341][ T6804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.270946][ T6804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.335774][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.373'. [ 86.339260][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 86.351434][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 86.364528][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.367631][ T6804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.370894][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.373519][ T6804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.400643][ T43] bridge_slave_1: left allmulticast mode [ 86.404333][ T43] bridge_slave_1: left promiscuous mode [ 86.408419][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.497391][ T6876] netlink: zone id is out of range [ 86.499661][ T6876] netlink: get zone limit has 4 unknown bytes [ 86.566709][ T6881] netlink: 52 bytes leftover after parsing attributes in process `syz.3.382'. [ 86.656284][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.663797][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.668858][ T43] bond0 (unregistering): Released all slaves [ 86.688735][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.702404][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.731119][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.824616][ T34] cfg80211: failed to load regulatory.db [ 86.924921][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.957684][ T6804] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.021067][ T210] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.023567][ T210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.035254][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.037580][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.084301][ T6910] batadv_slave_1: entered promiscuous mode [ 87.102345][ T6909] batadv_slave_1: left promiscuous mode [ 87.177125][ T43] hsr_slave_0: left promiscuous mode [ 87.179688][ T43] hsr_slave_1: left promiscuous mode [ 87.182972][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.185492][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.190870][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.194207][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.241368][ T43] veth1_macvtap: left promiscuous mode [ 87.243612][ T43] veth0_macvtap: left promiscuous mode [ 87.245388][ T43] veth1_vlan: left promiscuous mode [ 87.247081][ T43] veth0_vlan: left promiscuous mode [ 87.395501][ T43] team0 (unregistering): Port device team_slave_1 removed [ 87.404331][ T43] team0 (unregistering): Port device team_slave_0 removed [ 87.471941][ T5943] Bluetooth: hci4: command tx timeout [ 87.555196][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.774309][ T6804] veth0_vlan: entered promiscuous mode [ 87.776239][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.406'. [ 87.784679][ T6804] veth1_vlan: entered promiscuous mode [ 87.802055][ T6804] veth0_macvtap: entered promiscuous mode [ 87.808367][ T6804] veth1_macvtap: entered promiscuous mode [ 87.821173][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.826758][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.835559][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.838633][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.842124][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.845993][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.097136][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.100781][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.156854][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.160172][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.287765][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.368571][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.400204][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.404055][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.407054][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.410453][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.417174][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.480302][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.608584][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.669178][ T7028] : renamed from vlan0 (while UP) [ 88.707336][ T7004] chnl_net:caif_netlink_parms(): no params data found [ 88.865155][ T7044] random: crng reseeded on system resumption [ 89.147467][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.155580][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.160051][ T43] bond0 (unregistering): Released all slaves [ 89.201078][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 89.201095][ T40] audit: type=1400 audit(1771426074.527:335): avc: denied { create } for pid=7072 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 89.205307][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.211753][ T40] audit: type=1400 audit(1771426074.527:336): avc: denied { setopt } for pid=7072 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 89.214572][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.227156][ T7004] bridge_slave_0: entered allmulticast mode [ 89.237516][ T7004] bridge_slave_0: entered promiscuous mode [ 89.245863][ T7076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.254526][ T40] audit: type=1400 audit(1771426074.587:337): avc: denied { getopt } for pid=7075 comm="syz.2.448" laddr=fe80::b lport=39078 faddr=fe80::35 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.258661][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.268536][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.272477][ T7004] bridge_slave_1: entered allmulticast mode [ 89.276605][ T7004] bridge_slave_1: entered promiscuous mode [ 89.318684][ T7004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.417072][ T7004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.458743][ T7004] team0: Port device team_slave_0 added [ 89.465245][ T7004] team0: Port device team_slave_1 added [ 89.494387][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 89.526362][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.529331][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.548986][ T7004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.553277][ T5937] Bluetooth: hci4: command tx timeout [ 89.556776][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.558980][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.569355][ T7004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.641252][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 89.644209][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 89.648080][ T34] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 89.659937][ T34] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.665976][ T34] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.668859][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.676815][ T34] usb 9-1: SerialNumber: syz [ 89.691695][ T7058] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 89.695521][ T7004] hsr_slave_0: entered promiscuous mode [ 89.698683][ T7004] hsr_slave_1: entered promiscuous mode [ 89.701560][ T7004] debugfs: 'hsr0' already exists in 'hsr' [ 89.704022][ T7004] Cannot create hsr debugfs directory [ 89.801321][ T67] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 89.809286][ T43] hsr_slave_0: left promiscuous mode [ 89.812496][ T43] hsr_slave_1: left promiscuous mode [ 89.815167][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.818423][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.826147][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.829342][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.836132][ T43] veth1_to_batadv: left promiscuous mode [ 89.838453][ T43] veth1_macvtap: left promiscuous mode [ 89.840765][ T43] veth0_macvtap: left promiscuous mode [ 89.844249][ T43] veth1_vlan: left promiscuous mode [ 89.846478][ T43] veth0_vlan: left promiscuous mode [ 89.907489][ T34] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 89.916003][ T34] usb 9-1: USB disconnect, device number 2 [ 89.965400][ T67] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 89.969353][ T67] usb 7-1: config 0 interface 0 has no altsetting 0 [ 89.974801][ T67] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.978782][ T67] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 89.982763][ T67] usb 7-1: Product: syz [ 89.984558][ T67] usb 7-1: Manufacturer: syz [ 89.986644][ T67] usb 7-1: SerialNumber: syz [ 90.002117][ T67] usb 7-1: config 0 descriptor?? [ 90.012847][ T67] usb 7-1: selecting invalid altsetting 0 [ 90.027639][ T43] team0 (unregistering): Port device team_slave_1 removed [ 90.035094][ T43] team0 (unregistering): Port device team_slave_0 removed [ 90.215067][ T5983] usb 7-1: USB disconnect, device number 4 [ 90.273572][ T7115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.462'. [ 90.334627][ T40] audit: type=1400 audit(1771426075.667:338): avc: denied { ioctl } for pid=7120 comm="syz.3.464" path="net:[4026532890]" dev="nsfs" ino=4026532890 ioctlcmd=0x640b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.489687][ T40] audit: type=1400 audit(1771426075.817:339): avc: denied { create } for pid=7134 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.493167][ T7135] tmpfs: Invalid uid '0x00000000ffffffff' [ 90.499065][ T40] audit: type=1400 audit(1771426075.827:340): avc: denied { getopt } for pid=7134 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.511105][ T5937] Bluetooth: hci1: command tx timeout [ 90.768809][ T7004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.777866][ T7004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.784718][ T7004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.790262][ T7004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.864350][ T7163] kvm: kvm [7162]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x7 [ 90.866599][ T7004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.884893][ T7004] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.893281][ T210] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.896585][ T210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.908036][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.911575][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.951274][ T40] audit: type=1400 audit(1771426076.277:341): avc: denied { read write } for pid=6804 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.960209][ T40] audit: type=1400 audit(1771426076.277:342): avc: denied { open } for pid=6804 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.979947][ T40] audit: type=1400 audit(1771426076.277:343): avc: denied { ioctl } for pid=6804 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.086167][ T7004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.122754][ T7004] veth0_vlan: entered promiscuous mode [ 91.133652][ T7004] veth1_vlan: entered promiscuous mode [ 91.153013][ T7004] veth0_macvtap: entered promiscuous mode [ 91.163090][ T7004] veth1_macvtap: entered promiscuous mode [ 91.173123][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.178615][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.184791][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.188256][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.193779][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.196570][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.239803][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.242798][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.263020][ T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.266848][ T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.328400][ T40] audit: type=1400 audit(1771426076.657:344): avc: denied { allowed } for pid=7195 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.559309][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 91.577018][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 91.621503][ T5937] Bluetooth: hci4: command tx timeout [ 91.693011][ T7235] 9pnet_fd: p9_fd_create_unix (7235): problem connecting socket: ./file0: -30 [ 91.719139][ T7239] loop8: detected capacity change from 0 to 7 [ 91.724303][ C0] blk_print_req_error: 5 callbacks suppressed [ 91.724319][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.730472][ C0] buffer_io_error: 5 callbacks suppressed [ 91.730481][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 91.741906][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.745370][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 91.749706][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.753532][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 91.757491][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.760751][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 91.765813][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.769206][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 91.772516][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.775591][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 91.778359][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.782600][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 91.786035][ T7239] ldm_validate_partition_table(): Disk read failed. [ 91.789148][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.792650][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 91.796349][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.799763][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 91.802541][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.805589][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 91.810091][ T7239] Dev loop8: unable to read RDB block 0 [ 91.814076][ T7239] loop8: unable to read partition table [ 91.816586][ T7239] loop8: partition table beyond EOD, truncated [ 91.819278][ T7239] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 91.824106][ T7248] raw_sendmsg: syz.2.508 forgot to set AF_INET. Fix it! [ 92.157246][ T7267] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 92.266319][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.522'. [ 92.289013][ T7279] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 92.483997][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'. [ 92.512612][ T7306] netlink: 68 bytes leftover after parsing attributes in process `syz.0.533'. [ 92.583670][ T5937] Bluetooth: hci1: command tx timeout [ 92.773521][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 92.776992][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 93.592267][ T7391] overlayfs: missing 'workdir' [ 93.701076][ T5937] Bluetooth: hci4: command tx timeout [ 93.721604][ T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 93.833380][ T7409] ======================================================= [ 93.833380][ T7409] WARNING: The mand mount option has been deprecated and [ 93.833380][ T7409] and is ignored by this kernel. Remove the mand [ 93.833380][ T7409] option from the mount to silence this warning. [ 93.833380][ T7409] ======================================================= [ 93.847481][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 93.873291][ T9] usb 9-1: config 0 has no interfaces? [ 93.877414][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.890919][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.897849][ T9] usb 9-1: Product: syz [ 93.899220][ T9] usb 9-1: Manufacturer: syz [ 93.900711][ T9] usb 9-1: SerialNumber: syz [ 93.916601][ T9] usb 9-1: config 0 descriptor?? [ 94.096814][ T7433] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.594'. [ 94.126456][ T9] usb 9-1: USB disconnect, device number 3 [ 94.156672][ T7439] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 94.418229][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 94.418241][ T40] audit: type=1400 audit(1771426079.747:381): avc: denied { ioctl } for pid=7464 comm="syz.0.609" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.588262][ T7481] vxlan0: entered promiscuous mode [ 94.590309][ T7481] vxlan0: entered allmulticast mode [ 94.592656][ T43] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.595800][ T43] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.598582][ T43] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.601710][ T43] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.657543][ T40] audit: type=1400 audit(1771426079.987:382): avc: denied { listen } for pid=7485 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.661091][ T5937] Bluetooth: hci1: command tx timeout [ 94.665649][ T40] audit: type=1400 audit(1771426079.987:383): avc: denied { accept } for pid=7485 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.823390][ T40] audit: type=1400 audit(1771426080.157:384): avc: denied { load_policy } for pid=7495 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 94.826880][ T7496] SELinux: ebitmap: truncated map [ 94.838417][ T7496] SELinux: failed to load policy [ 95.062617][ T40] audit: type=1400 audit(1771426080.387:385): avc: denied { prog_load } for pid=7506 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.070485][ T40] audit: type=1400 audit(1771426080.397:386): avc: denied { prog_run } for pid=7506 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.101128][ T40] audit: type=1400 audit(1771426080.417:387): avc: denied { mount } for pid=7508 comm="syz.2.630" name="/" dev="ramfs" ino=19137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 95.151437][ T40] audit: type=1400 audit(1771426080.487:388): avc: denied { write } for pid=7512 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.447873][ T7539] netlink: 64 bytes leftover after parsing attributes in process `syz.0.643'. [ 95.516417][ T40] audit: type=1400 audit(1771426080.847:389): avc: denied { connect } for pid=7544 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.539291][ T40] audit: type=1400 audit(1771426080.867:390): avc: denied { map_create } for pid=7548 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.627176][ T7559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.653'. [ 95.708578][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 96.155144][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'. [ 96.493238][ T7656] netlink: 44 bytes leftover after parsing attributes in process `syz.0.697'. [ 96.499506][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.503442][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.741569][ T5937] Bluetooth: hci1: command tx timeout [ 98.204604][ T7790] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 98.323812][ T7807] Bluetooth: hci0: too big key_count value 9038 [ 98.467363][ T7824] Cache volume key already in use (9p,(null),) [ 98.787988][ T7864] ip6gre1: entered allmulticast mode [ 98.790937][ T7864] team0: Device ip6gre1 is of different type [ 98.823599][ T7870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.825980][ T7870] IPv6: NLM_F_CREATE should be set when creating new route [ 98.828331][ T7870] IPv6: NLM_F_CREATE should be set when creating new route [ 98.830878][ T7870] IPv6: NLM_F_CREATE should be set when creating new route [ 98.835169][ T7870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.020846][ T7889] bpf: Bad value for 'gid' [ 99.073841][ T7895] netlink: 108 bytes leftover after parsing attributes in process `syz.4.804'. [ 99.076654][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 99.265403][ T7915] input: syz1 as /devices/virtual/input/input11 [ 99.271688][ T7915] input: failed to attach handler leds to device input11, error: -6 [ 99.271748][ T7917] vivid-003: disconnect [ 99.277865][ T7917] vivid-003: reconnect [ 99.532926][ T7955] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 99.585552][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 99.585567][ T40] audit: type=1400 audit(1771426340.913:414): avc: denied { sqpoll } for pid=7961 comm="syz.4.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.295999][ T40] audit: type=1400 audit(1771426341.623:415): avc: denied { create } for pid=8019 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.304667][ T40] audit: type=1400 audit(1771426341.633:416): avc: denied { ioctl } for pid=8019 comm="syz.0.855" path="socket:[22741]" dev="sockfs" ino=22741 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.366938][ T40] audit: type=1400 audit(1771426341.693:417): avc: denied { write } for pid=8021 comm="syz.0.856" name="file0" dev="9p" ino=72613957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.376388][ T40] audit: type=1400 audit(1771426341.693:418): avc: denied { open } for pid=8021 comm="syz.0.856" path="/119/file0/file0" dev="9p" ino=72613957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.442171][ T40] audit: type=1400 audit(1771426341.773:419): avc: denied { read write } for pid=8023 comm="syz.4.858" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 100.445589][ T8024] UHID_CREATE from different security context by process 161 (syz.4.858), this is not allowed. [ 100.449497][ T40] audit: type=1400 audit(1771426341.773:420): avc: denied { open } for pid=8023 comm="syz.4.858" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 100.495868][ T8026] bond2: option xmit_hash_policy: invalid value (6) [ 100.500273][ T8026] bond2 (unregistering): Released all slaves [ 100.532687][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 100.536426][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.859'. [ 100.771789][ T40] audit: type=1400 audit(1771426342.103:421): avc: denied { setopt } for pid=8053 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 100.963338][ T40] audit: type=1400 audit(1771426342.283:422): avc: denied { ioctl } for pid=8070 comm="syz.0.874" path="socket:[21725]" dev="sockfs" ino=21725 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.971232][ T40] audit: type=1400 audit(1771426342.293:423): avc: denied { ioctl } for pid=8070 comm="syz.0.874" path="socket:[20970]" dev="sockfs" ino=20970 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 101.066876][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 101.320043][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.887'. [ 101.607578][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 101.610367][ T8113] netlink: 96 bytes leftover after parsing attributes in process `syz.2.895'. [ 102.104286][ T8155] 9p: Unknown uid 00000000004294967295 [ 102.156864][ T8163] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.384504][ T8183] vcan0: tx address claim with dlc 0 [ 102.490237][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 102.496095][ T8192] netlink: 6 bytes leftover after parsing attributes in process `syz.3.931'. [ 102.801578][ T6125] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 104.159451][ T8264] __nla_validate_parse: 1 callbacks suppressed [ 104.159464][ T8264] netlink: 220 bytes leftover after parsing attributes in process `syz.2.963'. [ 104.199191][ T8268] netlink: 'syz.2.965': attribute type 21 has an invalid length. [ 104.203023][ T8268] netlink: 156 bytes leftover after parsing attributes in process `syz.2.965'. [ 104.206873][ T8268] netlink: 'syz.2.965': attribute type 21 has an invalid length. [ 104.209329][ T8268] netlink: 156 bytes leftover after parsing attributes in process `syz.2.965'. [ 104.299540][ T8276] fuse: Bad value for 'fd' [ 104.435563][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 104.747806][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.756679][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.763280][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 104.763291][ T40] audit: type=1400 audit(1771426346.093:430): avc: denied { write } for pid=8328 comm="syz.3.997" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.843854][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.847189][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.854150][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.857718][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.861529][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.865557][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.868579][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.949309][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.953056][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.040537][ T8356] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1007'. [ 105.046498][ T8340] chnl_net:caif_netlink_parms(): no params data found [ 105.078635][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.083106][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.164721][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.167460][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.169874][ T8340] bridge_slave_0: entered allmulticast mode [ 105.172996][ T8340] bridge_slave_0: entered promiscuous mode [ 105.176673][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.179087][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.182262][ T8340] bridge_slave_1: entered allmulticast mode [ 105.184959][ T8340] bridge_slave_1: entered promiscuous mode [ 105.202142][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.217339][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.257976][ T8340] team0: Port device team_slave_0 added [ 105.262825][ T8340] team0: Port device team_slave_1 added [ 105.289953][ T43] bridge_slave_1: left allmulticast mode [ 105.292483][ T43] bridge_slave_1: left promiscuous mode [ 105.294393][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.298511][ T43] bridge_slave_0: left allmulticast mode [ 105.300410][ T43] bridge_slave_0: left promiscuous mode [ 105.303089][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.415591][ T8379] overlayfs: failed to clone upperpath [ 105.478578][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.482915][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.486496][ T43] bond0 (unregistering): Released all slaves [ 105.491196][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.493680][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.501675][ T8340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.510465][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.512720][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.520657][ T8340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.527584][ T8381] tun0: tun_chr_ioctl cmd 1074025672 [ 105.529924][ T8381] tun0: ignored: set checksum enabled [ 105.580880][ T8340] hsr_slave_0: entered promiscuous mode [ 105.584327][ T8340] hsr_slave_1: entered promiscuous mode [ 105.587368][ T8340] debugfs: 'hsr0' already exists in 'hsr' [ 105.589208][ T8340] Cannot create hsr debugfs directory [ 105.757180][ T8399] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 105.785843][ T8340] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.791477][ T8340] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.797292][ T8340] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.804117][ T8340] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.822716][ T8403] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1020'. [ 105.833880][ T43] hsr_slave_0: left promiscuous mode [ 105.837280][ T43] hsr_slave_1: left promiscuous mode [ 105.839318][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.841766][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.844870][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.847248][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.854097][ T43] veth1_macvtap: left promiscuous mode [ 105.855960][ T43] veth0_macvtap: left promiscuous mode [ 105.857838][ T43] veth1_vlan: left promiscuous mode [ 105.859568][ T43] veth0_vlan: left promiscuous mode [ 105.993744][ T43] team0 (unregistering): Port device team_slave_1 removed [ 106.001380][ T43] team0 (unregistering): Port device team_slave_0 removed [ 106.123516][ T8403] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1020'. [ 106.151650][ T8417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1023'. [ 106.314461][ T8340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.338126][ T8340] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.366957][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.369492][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.378341][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.380646][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.529700][ T8340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.664311][ T8340] veth0_vlan: entered promiscuous mode [ 106.669285][ T8340] veth1_vlan: entered promiscuous mode [ 106.686814][ T8340] veth0_macvtap: entered promiscuous mode [ 106.693494][ T8340] veth1_macvtap: entered promiscuous mode [ 106.702799][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.709927][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.718789][ T1144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.723022][ T1144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.726619][ T1144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.729508][ T1144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.762231][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.765007][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.779322][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.783935][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.901811][ T5943] Bluetooth: hci1: command tx timeout [ 106.917456][ T40] audit: type=1400 audit(1771426348.243:431): avc: denied { bind } for pid=8480 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.286328][ T8509] syz.4.1048 uses obsolete (PF_INET,SOCK_PACKET) [ 107.409874][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1053'. [ 107.478922][ T40] audit: type=1400 audit(1771426348.803:432): avc: denied { bind } for pid=8525 comm="syz.5.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.503433][ T8522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.583250][ T8533] netlink: 'syz.5.1060': attribute type 3 has an invalid length. [ 107.647508][ T8537] binder: 8536:8537 ioctl 4018620d 0 returned -22 [ 107.713801][ T8522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.840046][ T8522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.944581][ T8522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.119657][ T43] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.147194][ T1144] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.169776][ T1144] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.172601][ T1144] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.273660][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1074'. [ 108.308064][ T40] audit: type=1400 audit(1771426349.633:433): avc: denied { shutdown } for pid=8569 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.552213][ T8592] mmap: syz.4.1083 (8592) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.731981][ T8604] input: syz1 as /devices/virtual/input/input13 [ 108.805504][ T8608] overlayfs: failed to clone lowerpath [ 108.983178][ T5943] Bluetooth: hci1: command tx timeout [ 109.162368][ T50] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 109.165451][ T50] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 109.168640][ T50] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 109.173270][ T50] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 109.176398][ T50] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 109.179497][ T50] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 109.183292][ T50] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 109.184822][ T8637] batadv_slave_1: entered promiscuous mode [ 109.186195][ T50] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 109.191507][ T50] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 109.191565][ T8636] batadv_slave_1: left promiscuous mode [ 109.194432][ T50] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 109.206290][ T50] hid-generic 0103:0004:0000.0003: hidraw1: HID v0.02 Device [syz0] on syz1 [ 109.276442][ T8641] fido_id[8641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.465258][ T40] audit: type=1400 audit(1771426350.793:434): avc: denied { append } for pid=8655 comm="syz.5.1113" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.624094][ T8673] __nla_validate_parse: 3 callbacks suppressed [ 109.624111][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'. [ 109.693653][ T8677] batman_adv: batadv0: Adding interface: macsec1 [ 109.695854][ T8677] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.714863][ T8677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.721400][ T8683] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1126'. [ 109.734194][ T8677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.737317][ T8677] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 109.814915][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 109.832986][ T8687] netlink: 'syz.4.1127': attribute type 30 has an invalid length. [ 109.851694][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.855170][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.858092][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.861615][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.873073][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 109.877094][ T8687] netlink: 'syz.4.1127': attribute type 30 has an invalid length. [ 110.018226][ T5937] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 110.289181][ T40] audit: type=1400 audit(1771426351.613:435): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 110.311519][ T40] audit: type=1400 audit(1771426351.643:436): avc: denied { ioctl } for pid=8738 comm="syz.3.1152" path="socket:[24308]" dev="sockfs" ino=24308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.473938][ T8748] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x1) [ 110.528478][ T8751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1158'. [ 110.565132][ T40] audit: type=1400 audit(1771426351.893:437): avc: denied { create } for pid=8753 comm="syz.5.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.572259][ T40] audit: type=1400 audit(1771426351.893:438): avc: denied { write } for pid=8753 comm="syz.5.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.062745][ T5937] Bluetooth: hci1: command tx timeout [ 111.301119][ T5937] Bluetooth: hci0: command 0x2016 tx timeout [ 111.685351][ T8841] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 111.835111][ T40] audit: type=1400 audit(1771426353.163:439): avc: denied { ioctl } for pid=8859 comm="syz.4.1209" path="socket:[26038]" dev="sockfs" ino=26038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.896715][ T40] audit: type=1400 audit(1771426353.223:440): avc: denied { link } for pid=8863 comm="syz.5.1211" name="file1" dev="9p" ino=72613963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.968338][ T8872] macvtap1: entered promiscuous mode [ 111.970663][ T8872] macvtap1: entered allmulticast mode [ 111.978957][ T8872] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 111.982965][ T8872] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 111.987302][ T8872] team0: Device macvtap1 failed to register rx_handler [ 112.001145][ T8872] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 112.004295][ T8872] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 112.016177][ T8878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1219'. [ 112.040224][ T8878] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1219'. [ 112.087895][ T8882] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1221'. [ 112.159620][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 112.171615][ T8893] bridge0: entered promiscuous mode [ 112.174052][ T8893] macsec1: entered allmulticast mode [ 112.175940][ T8893] bridge0: entered allmulticast mode [ 112.178524][ T8893] bridge0: port 3(macsec1) entered blocking state [ 112.180545][ T8893] bridge0: port 3(macsec1) entered disabled state [ 112.189666][ T8893] bridge0: left allmulticast mode [ 112.193032][ T8893] bridge0: left promiscuous mode [ 112.336589][ T8910] (syz.3.1232,8910,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 112.336603][ T40] audit: type=1400 audit(1771426353.663:441): avc: denied { associate } for pid=8909 comm="syz.3.1232" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 112.545781][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1237'. [ 112.744221][ T40] audit: type=1400 audit(1771426354.073:442): avc: denied { setattr } for pid=8931 comm="syz.3.1243" name="[kvm-gmem]" dev="guest_memfd" ino=26215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.806678][ T5943] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 112.809148][ T5943] Bluetooth: Wrong link type (-22) [ 112.919574][ T40] audit: type=1400 audit(1771426354.243:443): avc: denied { create } for pid=8946 comm="syz.4.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.926992][ T40] audit: type=1400 audit(1771426354.243:444): avc: denied { connect } for pid=8946 comm="syz.4.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 113.143603][ T5943] Bluetooth: hci1: command tx timeout [ 113.163620][ T8975] loop6: detected capacity change from 0 to 524288000 [ 113.284208][ T7715] buffer_io_error: 10 callbacks suppressed [ 113.284226][ T7715] Buffer I/O error on dev loop6, logical block 65535967, async page read [ 113.292408][ T8981] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 113.306616][ T8981] bond2 (unregistering): Released all slaves [ 113.390313][ T5943] Bluetooth: hci0: command 0x2016 tx timeout [ 113.401767][ T8994] loop9: detected capacity change from 0 to 7 [ 113.423159][ C0] blk_print_req_error: 10 callbacks suppressed [ 113.423172][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.428202][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.437744][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.440757][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.443652][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.446792][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.450549][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.453630][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.458445][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.461585][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.465251][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.468316][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.471014][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.474011][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.479852][ T7718] ldm_validate_partition_table(): Disk read failed. [ 113.482462][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.486503][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.494218][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.498224][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.506993][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.511431][ T7718] Dev loop9: unable to read RDB block 0 [ 113.521657][ T7718] loop9: unable to read partition table [ 113.524157][ T7718] loop9: partition table beyond EOD, truncated [ 113.539265][ T8994] ldm_validate_partition_table(): Disk read failed. [ 113.549259][ T8994] Dev loop9: unable to read RDB block 0 [ 113.558800][ T8994] loop9: unable to read partition table [ 113.560714][ T8994] loop9: partition table beyond EOD, truncated [ 113.566142][ T8994] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 113.798569][ T9034] blkio.reset_stats is deprecated [ 113.834557][ T9036] loop5: detected capacity change from 0 to 7 [ 114.456005][ T9064] binder: 9063:9064 ioctl c0306201 200000000640 returned -22 [ 114.743625][ T67] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 114.859235][ T9123] __nla_validate_parse: 9 callbacks suppressed [ 114.859246][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'. [ 114.893133][ T67] usb 9-1: Using ep0 maxpacket: 32 [ 114.912023][ T67] usb 9-1: config 0 has no interfaces? [ 114.916437][ T67] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 114.920265][ T67] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.924515][ T67] usb 9-1: Product: syz [ 114.926330][ T67] usb 9-1: Manufacturer: syz [ 114.928354][ T67] usb 9-1: SerialNumber: syz [ 114.948751][ T67] usb 9-1: config 0 descriptor?? [ 115.160182][ T67] usb 9-1: USB disconnect, device number 4 [ 115.531062][ T39] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 115.681173][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 115.687611][ T39] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 115.690898][ T39] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 115.695767][ T39] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 115.700272][ T39] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 115.707180][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 115.712323][ T39] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 115.716358][ T39] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 115.719297][ T39] usb 10-1: Product: syz [ 115.719936][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'. [ 115.720857][ T39] usb 10-1: Manufacturer: syz [ 115.720867][ T39] usb 10-1: SerialNumber: syz [ 115.724730][ T39] usb 10-1: config 0 descriptor?? [ 115.732684][ T39] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 115.739401][ T39] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 115.777704][ T9166] can0: slcan on ttyS3. [ 115.852095][ T9166] can0 (unregistered): slcan off ttyS3. [ 115.948961][ T67] usb 10-1: USB disconnect, device number 3 [ 115.963876][ T67] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 116.025698][ T9184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 116.028177][ T9184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 116.172293][ T9196] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 116.733293][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 116.938630][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 116.938646][ T40] audit: type=1400 audit(1771426358.263:449): avc: denied { connect } for pid=9260 comm="syz.4.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.004115][ T40] audit: type=1400 audit(1771426358.333:450): avc: denied { create } for pid=9272 comm="syz.5.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.017134][ T40] audit: type=1400 audit(1771426358.333:451): avc: denied { write } for pid=9272 comm="syz.5.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.059167][ T40] audit: type=1400 audit(1771426358.383:452): avc: denied { listen } for pid=9272 comm="syz.5.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.067595][ T40] audit: type=1400 audit(1771426358.383:453): avc: denied { accept } for pid=9272 comm="syz.5.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.128134][ T40] audit: type=1400 audit(1771426358.453:454): avc: denied { read } for pid=9281 comm="syz.2.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.192489][ T9293] veth0_to_team: entered promiscuous mode [ 117.195003][ T9293] gretap0: entered promiscuous mode [ 117.337266][ T40] audit: type=1400 audit(1771426358.663:455): avc: denied { write } for pid=9306 comm="syz.3.1404" path="socket:[26997]" dev="sockfs" ino=26997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.394774][ T40] audit: type=1400 audit(1771426358.723:456): avc: denied { ioctl } for pid=9315 comm="syz.2.1408" path="socket:[28868]" dev="sockfs" ino=28868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.395229][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 117.457988][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 117.460606][ T40] audit: type=1400 audit(1771426358.783:457): avc: denied { create } for pid=9320 comm="syz.4.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.469221][ T40] audit: type=1400 audit(1771426358.793:458): avc: denied { bind } for pid=9320 comm="syz.4.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.534994][ T9327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.538392][ T9327] bond0: (slave bond2): Enslaving as an active interface with an up link [ 117.636127][ T9333] tap0: tun_chr_ioctl cmd 1074025675 [ 117.638160][ T9333] tap0: persist enabled [ 117.915150][ T9357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1423'. [ 117.919820][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1423'. [ 118.170764][ T9377] kAFS: unable to lookup cell '(,cL' [ 118.174003][ T9377] kAFS: unable to lookup cell '\,' [ 118.235419][ T9382] loop9: detected capacity change from 0 to 7 [ 118.238016][ T9382] ldm_validate_partition_table(): Disk read failed. [ 118.240319][ T9382] Dev loop9: unable to read RDB block 0 [ 118.243153][ T9382] loop9: unable to read partition table [ 118.245330][ T9382] loop9: partition table beyond EOD, truncated [ 118.250689][ T9382] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 118.250689][ T9382] ) failed (rc=-5) [ 118.257583][ T9382] ldm_validate_partition_table(): Disk read failed. [ 118.259762][ T9382] Dev loop9: unable to read RDB block 0 [ 118.262526][ T9382] loop9: unable to read partition table [ 118.264635][ T9382] loop9: partition table beyond EOD, truncated [ 118.610052][ T9431] tipc: Started in network mode [ 118.611908][ T9431] tipc: Node identity 3e102a2cba6a, cluster identity 4711 [ 118.614445][ T9431] tipc: Enabled bearer , priority 10 [ 118.776021][ T9451] binder: BC_ACQUIRE_RESULT not supported [ 118.778545][ T9451] binder: 9449:9451 ioctl c0306201 2000000003c0 returned -22 [ 118.977591][ T9479] loop7: detected capacity change from 0 to 524255232 [ 118.985082][ T9480] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 119.121814][ T9491] loop5: detected capacity change from 0 to 4095 [ 119.202261][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.381254][ T34] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 119.556286][ T34] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 119.559291][ T34] usb 9-1: config 0 has no interface number 0 [ 119.571106][ T34] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 119.575112][ T34] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 119.580496][ T34] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.588647][ T34] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 119.595117][ T34] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 119.599103][ T34] usb 9-1: Product: syz [ 119.600958][ T34] usb 9-1: SerialNumber: syz [ 119.612406][ T29] tipc: Node number set to 2222598700 [ 119.612763][ T34] usb 9-1: config 0 descriptor?? [ 119.619885][ T34] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 119.626417][ T34] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input14 [ 119.643968][ T9548] hugetlbfs: syz.2.1494 (9548): Using mlock ulimits for SHM_HUGETLB is obsolete [ 119.859157][ T24] usb 9-1: USB disconnect, device number 5 [ 119.859245][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 119.864156][ C3] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 119.873826][ T24] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 120.071766][ T9575] sctp: [Deprecated]: syz.2.1505 (pid 9575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.071766][ T9575] Use struct sctp_sack_info instead [ 120.291080][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 120.403225][ T9580] xt_hashlimit: size too large, truncated to 1048576 [ 120.459307][ T29] usb 8-1: too many configurations: 53, using maximum allowed: 8 [ 120.471092][ T29] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 120.474079][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.476557][ T29] usb 8-1: Product: syz [ 120.478015][ T29] usb 8-1: Manufacturer: syz [ 120.479435][ T29] usb 8-1: SerialNumber: syz [ 120.914525][ T9618] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1525'. [ 121.232742][ T29] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 121.260209][ T29] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 121.264083][ T29] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 121.285508][ T29] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 121.296209][ T29] usb 8-1: USB disconnect, device number 6 [ 121.485938][ T9670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1547'. [ 121.632002][ T9682] usb 1-1: USB disconnect, device number 2 [ 121.690820][ T9685] usb usb1: check_ctrlrecip: process 9685 (syz.5.1553) requesting ep 01 but needs 81 [ 121.755071][ T9691] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1557'. [ 121.790413][ T9695] ptrace attach of "/syz-executor exec"[6804] was attempted by ""[9695] [ 122.148796][ T9737] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 122.188935][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 122.188947][ T40] audit: type=1400 audit(1771426619.518:471): avc: denied { ioctl } for pid=9742 comm="syz.4.1582" path="socket:[29166]" dev="sockfs" ino=29166 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.234658][ T40] audit: type=1400 audit(1771426619.568:472): avc: denied { mount } for pid=9750 comm="syz.3.1586" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 122.246411][ T9751] overlay: filesystem on ./file0 not supported as upperdir [ 122.272358][ T40] audit: type=1400 audit(1771426619.608:473): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 122.781042][ T9806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1610'. [ 122.785043][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'. [ 122.827203][ T9810] Falling back ldisc for ttyS3. [ 123.126419][ T40] audit: type=1400 audit(1771426620.458:474): avc: denied { remove_name } for pid=9836 comm="syz.4.1625" name="file0" dev="9p" ino=72613957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.135521][ T40] audit: type=1400 audit(1771426620.458:475): avc: denied { rename } for pid=9836 comm="syz.4.1625" name="file0" dev="9p" ino=72613957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.145028][ T40] audit: type=1400 audit(1771426620.458:476): avc: denied { unlink } for pid=9836 comm="syz.4.1625" name="file1" dev="9p" ino=72613963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.233980][ T5937] Bluetooth: hci1: hcon ffff88802b814000 sent 1 < count 13 [ 123.236644][ T5937] Bluetooth: hci1: hcon ffff88802b810000 sent 1 < count 4 [ 123.239143][ T5937] Bluetooth: hci1: hcon ffff88802b810000 sent 0 < count 255 [ 123.699042][ T40] audit: type=1400 audit(1771426621.028:477): avc: denied { write } for pid=9861 comm="syz.4.1636" path="socket:[29268]" dev="sockfs" ino=29268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.964385][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1646'. [ 123.976362][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1646'. [ 124.055901][ T9889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.058484][ T9889] IPv6: NLM_F_CREATE should be set when creating new route [ 124.061370][ T9889] IPv6: NLM_F_CREATE should be set when creating new route [ 124.064750][ T9889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.224666][ T9905] netlink: 'syz.5.1656': attribute type 2 has an invalid length. [ 124.238275][ T9907] openvswitch: netlink: IP tunnel dst address not specified [ 124.238514][ T9905] !: entered promiscuous mode [ 124.251637][ T9905] netlink: 'syz.5.1656': attribute type 2 has an invalid length. [ 124.255626][ T9905] !: left promiscuous mode [ 124.395182][ T40] audit: type=1400 audit(1771426621.728:478): avc: denied { read append } for pid=9920 comm="syz.5.1663" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.431783][ T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 124.551052][ T9935] overlayfs: workdir and upperdir must reside under the same mount [ 124.595477][ T50] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 124.599409][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.602648][ T50] usb 8-1: Product: syz [ 124.604005][ T50] usb 8-1: Manufacturer: syz [ 124.605509][ T50] usb 8-1: SerialNumber: syz [ 124.706172][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1679'. [ 124.709357][ T9952] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1679'. [ 124.857395][ T50] rtl8150 8-1:1.0: couldn't reset the device [ 124.859497][ T50] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 124.870381][ T50] usb 8-1: USB disconnect, device number 7 [ 124.914121][ T1201] wlan1: Trigger new scan to find an IBSS to join [ 124.932967][ T34] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 125.091086][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 125.099900][ T34] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 125.103320][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.111078][ T34] pvrusb2: Hardware description: Terratec Grabster AV400 [ 125.114654][ T34] pvrusb2: ********** [ 125.115985][ T34] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 125.119197][ T34] pvrusb2: Important functionality might not be entirely working. [ 125.122139][ T34] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 125.125776][ T34] pvrusb2: ********** [ 125.225251][ T40] audit: type=1400 audit(1771426622.558:479): avc: denied { read write } for pid=9995 comm="syz.5.1700" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 125.233750][ T40] audit: type=1400 audit(1771426622.558:480): avc: denied { open } for pid=9995 comm="syz.5.1700" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 125.289619][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1701'. [ 125.314932][ T2488] pvrusb2: Invalid write control endpoint [ 125.351300][ T2488] pvrusb2: Invalid write control endpoint [ 125.353784][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 125.357715][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 125.364601][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 125.368952][ T2488] pvrusb2: Device being rendered inoperable [ 125.371882][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 125.374373][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 125.378520][ T2488] pvrusb2: Attached sub-driver cx25840 [ 125.380326][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 125.386930][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 125.517241][ T9950] pvrusb2: Attempted to execute control transfer when device not ok [ 125.522386][ T6023] usb 9-1: USB disconnect, device number 6 [ 125.858275][T10055] tipc: New replicast peer: 255.255.255.255 [ 125.860634][T10055] tipc: Enabled bearer , priority 10 [ 125.865953][T10055] tipc: Disabling bearer [ 125.994641][T10070] Failed to get privilege flags for destination (handle=0x2:0x0) [ 126.096401][T10086] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 126.102077][T10086] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 126.107410][T10086] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 126.147038][ T5937] Bluetooth: hci0: Malformed LE Event: 0x0d [ 126.263286][ T5937] Bluetooth: hci2: SCO packet too small [ 126.400698][T10121] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 126.685340][T10147] bridge0: entered promiscuous mode [ 126.687279][T10147] macvlan2: entered promiscuous mode [ 126.697376][T10149] bridge0: port 3(syz_tun) entered blocking state [ 126.700442][T10149] bridge0: port 3(syz_tun) entered disabled state [ 126.705670][T10149] syz_tun: entered allmulticast mode [ 126.709584][T10149] syz_tun: entered promiscuous mode [ 126.715013][T10149] bridge0: port 3(syz_tun) entered blocking state [ 126.717462][T10149] bridge0: port 3(syz_tun) entered forwarding state [ 127.033328][T10186] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 127.261691][T10220] __nla_validate_parse: 5 callbacks suppressed [ 127.261704][T10220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1805'. [ 127.410483][T10231] batman_adv: batadv0: Adding interface: gretap1 [ 127.413140][T10231] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 127.419678][T10231] batman_adv: batadv0: Interface activated: gretap1 [ 127.489749][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 127.489760][ T40] audit: type=1400 audit(1771426624.818:488): avc: denied { map } for pid=10240 comm="syz.4.1815" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 127.500068][ T40] audit: type=1400 audit(1771426624.818:489): avc: denied { execute } for pid=10240 comm="syz.4.1815" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 127.575152][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1819'. [ 127.789446][T10267] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1827'. [ 127.834667][T10271] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 127.856127][ T5937] Bluetooth: hci1: ACL packet too small [ 127.858490][T10272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.951303][ T210] wlan1: Trigger new scan to find an IBSS to join [ 128.101194][ T6023] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 128.264793][ T6023] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 128.271291][ T6023] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.276063][ T6023] usb 9-1: config 0 interface 0 has no altsetting 0 [ 128.283238][ T6023] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.287019][ T6023] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.298097][ T6023] usb 9-1: Product: syz [ 128.299446][ T6023] usb 9-1: Manufacturer: syz [ 128.300933][ T6023] usb 9-1: SerialNumber: syz [ 128.304650][ T40] audit: type=1400 audit(1771426625.638:490): avc: denied { ioctl } for pid=10280 comm="syz.2.1834" path="socket:[30673]" dev="sockfs" ino=30673 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.306578][ T6023] usb 9-1: config 0 descriptor?? [ 128.321827][ T6023] hub 9-1:0.0: bad descriptor, ignoring hub [ 128.324681][ T6023] hub 9-1:0.0: probe with driver hub failed with error -5 [ 128.330236][ T6023] usb 9-1: selecting invalid altsetting 0 [ 128.448174][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 128.452687][T10296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 128.455778][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 128.580461][ T40] audit: type=1400 audit(1771426625.908:491): avc: denied { write } for pid=10313 comm="syz.3.1850" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.676342][T10325] macvlan2: entered promiscuous mode [ 128.678658][T10325] bridge0: entered promiscuous mode [ 128.843878][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1870'. [ 128.919100][ T40] audit: type=1400 audit(1771426626.248:492): avc: denied { setopt } for pid=10348 comm="syz.5.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.974841][ T39] usb 9-1: USB disconnect, device number 7 [ 129.026391][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 129.029981][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1869'. [ 129.033697][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 129.151067][ T39] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 129.262077][ T40] audit: type=1326 audit(1771426626.598:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.3.1881" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f504999c629 code=0x0 [ 129.313112][ T39] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 129.315921][ T39] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 129.318988][ T39] usb 9-1: config 0 interface 0 has no altsetting 0 [ 129.322943][ T39] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.325828][ T39] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.328381][ T39] usb 9-1: Product: syz [ 129.329721][ T39] usb 9-1: Manufacturer: syz [ 129.331568][ T39] usb 9-1: SerialNumber: syz [ 129.334570][ T39] usb 9-1: config 0 descriptor?? [ 129.342083][ T39] hub 9-1:0.0: bad descriptor, ignoring hub [ 129.344072][ T39] hub 9-1:0.0: probe with driver hub failed with error -5 [ 129.347742][ T39] usb 9-1: selecting invalid altsetting 0 [ 129.661808][ T987] usb 9-1: USB disconnect, device number 8 [ 129.828027][T10397] kvm: kvm [10395]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x7 [ 130.238414][ T5937] Bluetooth: hci0: ACL packet too small [ 130.238698][T10417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.674951][T10451] could not open pipe file descriptor [ 130.683420][T10452] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 130.686593][T10452] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 130.689912][T10452] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 130.983783][ T210] wlan1: Trigger new scan to find an IBSS to join [ 131.071417][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 131.200371][T10494] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 131.243589][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 131.246874][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.250465][ T29] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.258067][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.262777][ T29] usb 8-1: config 0 descriptor?? [ 131.477890][ T29] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 131.693292][T10525] ip_vti0: Master is either lo or non-ether device [ 131.719149][T10527] Process accounting resumed [ 131.767113][T10532] evm: overlay not supported [ 131.831684][T10539] ptrace attach of "/syz-executor exec"[5926] was attempted by "/syz-executor exec"[10539] [ 131.964880][ T111] wlan1: Creating new IBSS network, BSSID be:e0:08:a2:0b:77 [ 131.996506][T10552] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 131.996506][T10552] The task syz.2.1961 (10552) triggered the difference, watch for misbehavior. [ 132.181038][ T6023] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 132.332716][ T6023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.337080][ T6023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.340388][ T6023] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.344960][ T6023] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.347863][ T6023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.352328][ T6023] usb 10-1: config 0 descriptor?? [ 132.746236][ T987] usb 8-1: USB disconnect, device number 8 [ 132.762723][ T6023] hid_parser_main: 1 callbacks suppressed [ 132.762736][ T6023] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 132.769316][ T6023] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 132.772153][ T6023] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 132.774533][ T6023] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 132.777188][ T6023] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 132.779820][ T6023] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 132.782691][ T6023] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 132.785687][ T6023] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 132.788340][ T6023] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 132.790830][ T6023] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 132.810217][ T6023] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 132.964675][T10567] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 133.022809][ T24] usb 10-1: USB disconnect, device number 4 [ 133.137261][T10578] smc: net device hsr0 applied user defined pnetid SYZ2 [ 133.140725][T10578] smc: net device hsr0 erased user defined pnetid SYZ2 [ 133.359787][ T40] audit: type=1400 audit(1771426886.692:494): avc: denied { shutdown } for pid=10599 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.450702][T10608] __nla_validate_parse: 8 callbacks suppressed [ 133.450716][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 133.710266][ T40] audit: type=1326 audit(1771426887.042:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.2.2000" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd1079c629 code=0x0 [ 133.861167][ T1144] wlan1: Trigger new scan to find an IBSS to join [ 133.883404][T10652] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2005'. [ 133.926183][T10654] syzkaller1: entered promiscuous mode [ 133.928303][T10654] syzkaller1: entered allmulticast mode [ 134.026701][T10656] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2007'. [ 134.123902][T10662] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 134.154865][ T40] audit: type=1400 audit(1771426887.492:496): avc: denied { ioctl } for pid=10663 comm="syz.3.2011" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.165822][T10664] nullb0: [POWERTEC] p1 [ 134.167414][T10664] nullb0: p1 start 809004142 is beyond EOD, truncated [ 134.199526][ T40] audit: type=1400 audit(1771426887.532:497): avc: denied { bind } for pid=10665 comm="syz.3.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.882354][ T67] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 134.941418][ T987] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 135.031256][ T67] usb 10-1: Using ep0 maxpacket: 16 [ 135.034301][ T67] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.037526][ T67] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.040748][ T67] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.045131][ T67] usb 10-1: config 1 interface 0 has no altsetting 0 [ 135.048927][ T67] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 135.052100][ T67] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.054740][ T67] usb 10-1: Product: syz [ 135.056133][ T67] usb 10-1: Manufacturer: syz [ 135.057763][ T67] usb 10-1: SerialNumber: syz [ 135.101437][ T987] usb 9-1: Using ep0 maxpacket: 8 [ 135.104877][ T987] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.108328][ T987] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.112586][ T987] usb 9-1: config 0 interface 0 has no altsetting 0 [ 135.114741][ T987] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 135.117625][ T987] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.124214][ T987] usb 9-1: config 0 descriptor?? [ 135.277624][ T67] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 135.421265][ T6125] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 135.532918][ T987] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 135.571129][ T6125] usb 8-1: Using ep0 maxpacket: 8 [ 135.574240][ T6125] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.576402][ T6125] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 135.579297][ T6125] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.587418][ T6125] usb 8-1: config 0 descriptor?? [ 135.628798][ T40] audit: type=1400 audit(1771426888.962:498): avc: denied { ioctl } for pid=10676 comm="syz.5.2017" path="/dev/usb/lp0" dev="devtmpfs" ino=3127 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 135.732872][ T830] usb 9-1: USB disconnect, device number 9 [ 135.839764][ T29] usb 10-1: USB disconnect, device number 5 [ 135.846489][ T29] usblp0: removed [ 135.999470][ T6125] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 136.203908][ T987] usb 8-1: USB disconnect, device number 9 [ 136.550688][ T40] audit: type=1400 audit(1771426889.882:499): avc: denied { create } for pid=10716 comm="syz.5.2036" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 136.560533][ T40] audit: type=1400 audit(1771426889.892:500): avc: denied { read append } for pid=10716 comm="syz.5.2036" path="/271/file0/memory.events" dev="9p" ino=72613965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.614790][T10721] pim6reg1: entered promiscuous mode [ 136.617082][T10721] pim6reg1: entered allmulticast mode [ 136.831913][ T1144] wlan1: Trigger new scan to find an IBSS to join [ 136.892496][T10736] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2046'. [ 136.962401][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 136.964082][T10741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2044'. [ 136.965785][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 138.036105][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.038158][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.115467][T10815] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 138.303076][ T40] audit: type=1400 audit(1771426891.642:501): avc: denied { unmount } for pid=6804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 138.359601][T10826] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2085'. [ 138.803054][ T40] audit: type=1400 audit(1771426892.142:502): avc: denied { listen } for pid=10840 comm="syz.5.2092" lport=60926 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.811861][ T40] audit: type=1400 audit(1771426892.152:503): avc: denied { accept } for pid=10840 comm="syz.5.2092" lport=60926 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.820366][ T40] audit: type=1400 audit(1771426892.152:504): avc: denied { setopt } for pid=10840 comm="syz.5.2092" lport=60926 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 138.851257][ T40] audit: type=1400 audit(1771426892.182:505): avc: denied { mount } for pid=10846 comm="syz.5.2095" name="/" dev="autofs" ino=34530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 138.858244][ T40] audit: type=1400 audit(1771426892.182:506): avc: denied { read } for pid=10846 comm="syz.5.2095" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.867018][ T40] audit: type=1400 audit(1771426892.182:507): avc: denied { open } for pid=10846 comm="syz.5.2095" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.876065][ T40] audit: type=1400 audit(1771426892.192:508): avc: denied { ioctl } for pid=10846 comm="syz.5.2095" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.882999][T10837] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2090'. [ 138.884741][ T40] audit: type=1400 audit(1771426892.202:509): avc: denied { unmount } for pid=8340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 139.004215][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 139.007105][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 139.161867][T10868] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 139.241254][ T987] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 139.346689][T10873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2107'. [ 139.391586][ T987] usb 10-1: Using ep0 maxpacket: 8 [ 139.394721][ T987] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 139.397337][ T987] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.400399][ T987] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.403868][ T987] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.407101][ T987] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.411480][ T987] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.414451][ T987] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.623890][ T987] usb 10-1: GET_CAPABILITIES returned 0 [ 139.625757][ T987] usbtmc 10-1:16.0: can't read capabilities [ 139.641203][ T6023] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 139.791153][ T6023] usb 9-1: Using ep0 maxpacket: 32 [ 139.795325][ T6023] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.800105][ T6023] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.804448][ T6023] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 139.808415][ T6023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.815053][ T6023] usb 9-1: config 0 descriptor?? [ 139.862027][ T1201] wlan1: Trigger new scan to find an IBSS to join [ 139.877092][T10857] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 139.877339][ T987] usb 10-1: USB disconnect, device number 6 [ 140.085952][ C2] vcan0: j1939_tp_rxtimer: 0xffff888036184400: rx timeout, send abort [ 140.091394][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888036184400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 140.099370][ T40] audit: type=1400 audit(1771426893.432:510): avc: denied { read } for pid=5316 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 140.108176][ T40] audit: type=1400 audit(1771426893.432:511): avc: denied { search } for pid=5316 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.145511][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'. [ 140.148759][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'. [ 140.244923][ T6023] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 140.485207][ T6023] usb 9-1: USB disconnect, device number 10 [ 140.761470][ T1201] wlan1: Creating new IBSS network, BSSID ba:2f:7b:99:b9:5a [ 141.131501][ T2306] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 141.169936][T10903] syzkaller1: entered promiscuous mode [ 141.172455][T10903] syzkaller1: entered allmulticast mode [ 142.146123][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2126'. [ 142.184597][ T5937] block nbd1: Receive control failed (result -107) [ 142.339319][T10945] overlayfs: failed to clone upperpath [ 142.362720][T10941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2135'. [ 142.412341][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2142'. [ 142.415240][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2142'. [ 142.821174][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.915853][T11003] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.221161][ T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 143.371091][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 143.375126][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.379860][ T34] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.384079][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.391992][ T34] usb 9-1: config 0 descriptor?? [ 143.601578][ T34] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 143.861599][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.005143][T11064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.008133][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.067599][ T2306] usb 9-1: USB disconnect, device number 11 [ 144.482886][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 144.482903][ T40] audit: type=1400 audit(1771426897.822:523): avc: denied { read } for pid=11081 comm="syz.5.2197" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.497208][T11084] Invalid argument reading file caps for ./file0 [ 144.535417][T11088] __nla_validate_parse: 4 callbacks suppressed [ 144.535428][T11088] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2199'. [ 144.540957][T11088] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2199'. [ 144.620146][T11096] loop6: detected capacity change from 0 to 2640 [ 144.624392][ T7718] buffer_io_error: 60 callbacks suppressed [ 144.624402][ T7718] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.629856][ T7718] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.633580][ T7718] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.636338][ T7718] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.639215][ T7718] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.644412][ T7718] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.646968][ T7718] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.649413][ T7718] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.655671][ T7718] ldm_validate_partition_table(): Disk read failed. [ 144.657887][ T7718] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.660713][ T7718] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.663763][ T7718] Dev loop6: unable to read RDB block 0 [ 144.665661][ T7718] loop6: unable to read partition table [ 144.672085][T11096] ldm_validate_partition_table(): Disk read failed. [ 144.674191][T11096] Dev loop6: unable to read RDB block 0 [ 144.676020][T11096] loop6: unable to read partition table [ 144.678913][T11096] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 144.734562][T11105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.739067][T11105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.742811][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.745903][T11105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.748939][T11105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.752132][T11105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.211120][ T6023] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 145.371190][ T6023] usb 9-1: Using ep0 maxpacket: 8 [ 145.374988][ T6023] usb 9-1: config 0 interface 0 has no altsetting 0 [ 145.377366][ T6023] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 145.380229][ T6023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.384853][ T6023] usb 9-1: config 0 descriptor?? [ 145.809605][ T6023] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 146.002527][ T6023] usb 9-1: USB disconnect, device number 12 [ 146.194246][T11162] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2232'. [ 146.247457][ T40] audit: type=1400 audit(1771426899.582:524): avc: denied { block_suspend } for pid=11165 comm="syz.5.2234" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.513197][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 146.517051][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2246'. [ 146.535289][T11182] kvm: MONITOR instruction emulated as NOP! [ 146.547873][ T111] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.547959][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 146.552655][ T111] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.557884][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2246'. [ 146.560761][ T111] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.566937][ T111] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.760250][T11212] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 147.596004][T11270] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2265'. [ 147.835435][T11295] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2274'. [ 147.989011][T11313] xt_hashlimit: size too large, truncated to 1048576 [ 148.012266][T11317] Bluetooth: MGMT ver 1.23 [ 148.013170][ T8553] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 148.014757][T11317] Bluetooth: hci1: expected 65469 bytes, got 2 bytes [ 148.021690][ T67] net_ratelimit: 47 callbacks suppressed [ 148.021700][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.155796][ T40] audit: type=1400 audit(1771426901.492:525): avc: denied { watch } for pid=11332 comm="syz.4.2290" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.196016][ T8553] usb 8-1: Using ep0 maxpacket: 8 [ 148.201803][ T8553] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.206606][ T8553] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.210491][ T8553] usb 8-1: config 0 interface 0 has no altsetting 0 [ 148.214638][ T8553] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 148.217828][ T8553] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.222407][ T8553] usb 8-1: config 0 descriptor?? [ 148.228390][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2292'. [ 148.232905][T11337] hsr_slave_0: left promiscuous mode [ 148.236460][T11337] hsr_slave_1: left promiscuous mode [ 148.272007][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.528180][T11349] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 148.648086][ T8553] hid_parser_main: 33 callbacks suppressed [ 148.648106][ T8553] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 148.654411][ T8553] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 148.657304][ T8553] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 148.660310][ T8553] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 148.663882][ T8553] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 148.667560][ T8553] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 148.671441][T11360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.671580][T11360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.671697][T11360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.683757][T11360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.687080][T11360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.690047][T11360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.693931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.697059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.842088][ T34] usb 8-1: USB disconnect, device number 10 [ 148.921677][ T40] audit: type=1800 audit(1771426902.262:526): pid=11376 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2310" name="bus" dev="9p" ino=72614083 res=0 errno=0 [ 149.175171][T11388] chnl_net:caif_netlink_parms(): no params data found [ 149.435369][T11406] syzkaller1: entered promiscuous mode [ 149.437711][T11406] syzkaller1: entered allmulticast mode [ 150.040598][T11472] tap0: tun_chr_ioctl cmd 1074025675 [ 150.042639][T11472] tap0: persist enabled [ 150.044455][T11472] tap0: tun_chr_ioctl cmd 1074025675 [ 150.046163][T11472] tap0: persist enabled [ 150.154387][T11482] __nla_validate_parse: 2 callbacks suppressed [ 150.154400][T11482] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2363'. [ 150.209820][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.219844][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.224710][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.231153][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.241981][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.415549][T11490] chnl_net:caif_netlink_parms(): no params data found [ 150.485366][T11490] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.487814][T11490] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.490146][T11490] bridge_slave_0: entered allmulticast mode [ 150.492895][T11490] bridge_slave_0: entered promiscuous mode [ 150.497087][T11490] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.500178][T11490] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.503876][T11490] bridge_slave_1: entered allmulticast mode [ 150.507791][T11490] bridge_slave_1: entered promiscuous mode [ 150.528868][T11490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.535233][T11490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.560101][T11490] team0: Port device team_slave_0 added [ 150.565411][T11490] team0: Port device team_slave_1 added [ 150.593538][T11490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.596087][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.604607][T11490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.609177][T11490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.611523][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.619732][T11490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.642761][T11490] hsr_slave_0: entered promiscuous mode [ 150.645053][T11490] hsr_slave_1: entered promiscuous mode [ 150.647323][T11490] debugfs: 'hsr0' already exists in 'hsr' [ 150.649156][T11490] Cannot create hsr debugfs directory [ 150.744820][T11490] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 150.749481][T11490] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 150.757847][T11490] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 150.762968][T11490] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 150.782087][T11490] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.784322][T11490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.786698][T11490] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.789716][T11490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.836965][T11490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.849379][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.853063][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.866088][T11490] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.874050][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.877097][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.884751][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.887148][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.019617][T11490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.151975][T11553] netlink: 'syz.2.2383': attribute type 29 has an invalid length. [ 151.156774][T11553] netlink: 'syz.2.2383': attribute type 29 has an invalid length. [ 151.160379][T11553] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2383'. [ 151.165331][T11553] unsupported nla_type 58 [ 151.189701][T11490] veth0_vlan: entered promiscuous mode [ 151.196949][T11490] veth1_vlan: entered promiscuous mode [ 151.219548][T11490] veth0_macvtap: entered promiscuous mode [ 151.228473][T11490] veth1_macvtap: entered promiscuous mode [ 151.239794][T11490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.248959][T11490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.258366][ T1201] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.263440][ T1201] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.270933][ T1201] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.274648][ T1201] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.319676][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.325020][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.346096][ T210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.352506][ T210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.384833][ T40] audit: type=1400 audit(1771426904.722:527): avc: denied { mounton } for pid=11490 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 151.411067][ T40] audit: type=1400 audit(1771426904.722:528): avc: denied { mounton } for pid=11490 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 151.471324][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 151.475101][T11571] netlink: 'syz.2.2390': attribute type 26 has an invalid length. [ 151.634526][ T40] audit: type=1400 audit(1771426904.972:529): avc: denied { create } for pid=11581 comm="syz.3.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 151.642635][ T40] audit: type=1400 audit(1771426904.972:530): avc: denied { write } for pid=11581 comm="syz.3.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 151.682474][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2395'. [ 151.700363][T11584] bond1: Invalid ad_actor_system MAC address. [ 151.707116][T11584] bond1: option ad_actor_system: invalid value (255) [ 151.724837][T11584] bond1 (unregistering): Released all slaves [ 151.918871][T11606] sctp: [Deprecated]: syz.4.2404 (pid 11606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.918871][T11606] Use struct sctp_sack_info instead [ 151.950106][T11609] netlink: 'syz.2.2405': attribute type 12 has an invalid length. [ 151.955348][T11609] netlink: 'syz.2.2405': attribute type 29 has an invalid length. [ 151.957747][T11609] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2405'. [ 151.960609][T11609] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 151.963375][T11609] netlink: 'syz.2.2405': attribute type 2 has an invalid length. [ 151.966183][T11609] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2405'. [ 151.998020][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'. [ 152.068397][ T40] audit: type=1804 audit(1771426905.402:531): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2410" name="file1" dev="tmpfs" ino=3791 res=1 errno=0 [ 152.261276][ T5943] Bluetooth: hci1: command tx timeout [ 152.271200][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 152.421326][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 152.431603][ T24] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 152.434480][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.441970][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 152.444906][ T24] pvrusb2: ********** [ 152.446570][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 152.449919][ T24] pvrusb2: Important functionality might not be entirely working. [ 152.453072][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 152.457301][ T24] pvrusb2: ********** [ 152.643596][ T2488] pvrusb2: Invalid write control endpoint [ 152.675473][ T2488] pvrusb2: Invalid write control endpoint [ 152.677624][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 152.682134][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 152.685317][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 152.689522][ T2488] pvrusb2: Device being rendered inoperable [ 152.692509][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 152.695495][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 152.700266][ T2488] pvrusb2: Attached sub-driver cx25840 [ 152.704513][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 152.708737][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 152.846974][T11615] pvrusb2: Attempted to execute control transfer when device not ok [ 152.850860][ T987] usb 9-1: USB disconnect, device number 13 [ 152.985996][ T40] audit: type=1400 audit(1771426906.322:532): avc: denied { connect } for pid=11647 comm="syz.3.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.989230][T11650] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2423'. [ 152.993191][ T40] audit: type=1400 audit(1771426906.322:533): avc: denied { write } for pid=11647 comm="syz.3.2422" path="socket:[38129]" dev="sockfs" ino=38129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.004280][ T40] audit: type=1400 audit(1771426906.322:534): avc: denied { read } for pid=11647 comm="syz.3.2422" laddr=127.0.0.1 lport=34374 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.207792][T11666] net_ratelimit: 28 callbacks suppressed [ 153.207806][T11666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.212925][T11666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.215971][T11666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.219923][T11666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.222608][T11666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.225533][T11666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.230677][T11665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.264475][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 153.300766][ C2] vcan0: j1939_tp_rxtimer: 0xffff888057b3a400: rx timeout, send abort [ 153.302013][T11671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.303673][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888057b3a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.306164][T11671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.314908][T11671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.199238][ T40] audit: type=1804 audit(1771426907.532:535): pid=11687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2439" name="/newroot/553/file1" dev="tmpfs" ino=2849 res=1 errno=0 [ 154.341249][ T5943] Bluetooth: hci1: command tx timeout [ 154.546958][ T67] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 154.577184][ T40] audit: type=1400 audit(1771426907.902:536): avc: denied { setopt } for pid=11727 comm="syz.3.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.680033][T11739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.711046][ T67] usb 9-1: Using ep0 maxpacket: 8 [ 154.714415][ T67] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.717966][ T67] usb 9-1: config 0 has no interface number 0 [ 154.720576][ T67] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.731092][ T67] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.734803][ T67] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.746522][ T67] usb 9-1: config 0 descriptor?? [ 154.779571][ T67] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 155.048732][T11762] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2472'. [ 155.508817][ T34] usb 9-1: USB disconnect, device number 14 [ 156.413291][T11814] tap0: tun_chr_ioctl cmd 1074025675 [ 156.415007][T11814] tap0: persist enabled [ 156.416666][T11814] tap0: tun_chr_ioctl cmd 1074025675 [ 156.418338][T11814] tap0: persist disabled [ 156.421152][ T5943] Bluetooth: hci1: command tx timeout [ 156.775367][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 156.775381][ T40] audit: type=1400 audit(1771426910.112:541): avc: denied { execute } for pid=11829 comm="syz.2.2502" name="file0" dev="tmpfs" ino=4006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 157.142349][ T210] Bluetooth: hci3: Frame reassembly failed (-84) [ 157.602000][T11873] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 157.608601][T11873] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 157.621209][ T2306] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 157.779772][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'. [ 157.791756][ T2306] usb 9-1: Using ep0 maxpacket: 16 [ 157.795487][ T2306] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.804289][ T2306] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 157.807561][ T2306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.812459][ T2306] usb 9-1: config 0 descriptor?? [ 157.885792][T11891] PID 11891 killed due to inadequate hugepage pool [ 157.988797][ T40] audit: type=1400 audit(1771426911.322:542): avc: denied { remount } for pid=11898 comm="syz.2.2532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 158.223646][ T2306] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:041E:3100.000A/input/input17 [ 158.285295][ T2306] creative-sb0540 0003:041E:3100.000A: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 158.419216][ T24] usb 9-1: USB disconnect, device number 15 [ 158.431475][ T67] net_ratelimit: 115 callbacks suppressed [ 158.431487][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.501225][ T5937] Bluetooth: hci1: command tx timeout [ 158.506019][ T2060] block nbd0: Connection timed out, retrying (0/1 alive) [ 158.510040][ T2060] block nbd0: Connection timed out, retrying (0/1 alive) [ 158.516789][ T2060] block nbd0: Connection timed out, retrying (0/1 alive) [ 158.519771][ T2060] block nbd0: Connection timed out, retrying (0/1 alive) [ 158.524111][ T2060] block nbd0: Dead connection, failed to find a fallback [ 158.526925][ T2060] block nbd0: shutting down sockets [ 158.529215][ T2060] blk_print_req_error: 26 callbacks suppressed [ 158.529228][ T2060] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.537558][ T2060] buffer_io_error: 27 callbacks suppressed [ 158.537568][ T2060] Buffer I/O error on dev nbd0, logical block 3, async page read [ 158.542002][ T2060] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.544998][ T2060] Buffer I/O error on dev nbd0, logical block 2, async page read [ 158.548429][ T2060] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.552426][ T2060] Buffer I/O error on dev nbd0, logical block 1, async page read [ 158.555674][ T2060] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.559561][ T2060] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.565681][ T5928] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.570021][ T5928] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.573570][ T5928] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.577638][ T5928] Buffer I/O error on dev nbd0, logical block 1, async page read [ 158.580954][ T5928] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.585781][ T5928] Buffer I/O error on dev nbd0, logical block 2, async page read [ 158.588257][ T5928] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.591388][ T5928] Buffer I/O error on dev nbd0, logical block 3, async page read [ 158.593866][ T5928] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.596818][ T5928] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.599261][ T5928] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.602403][ T5928] Buffer I/O error on dev nbd0, logical block 1, async page read [ 158.605632][ T5928] ldm_validate_partition_table(): Disk read failed. [ 158.609008][ T5928] Dev nbd0: unable to read RDB block 0 [ 158.611997][ T5928] nbd0: unable to read partition table [ 158.617549][ T5928] ldm_validate_partition_table(): Disk read failed. [ 158.620701][ T5928] Dev nbd0: unable to read RDB block 0 [ 158.623655][ T5928] nbd0: unable to read partition table [ 158.941305][ T24] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 158.979178][T11943] ipvlan1: entered allmulticast mode [ 158.983226][T11943] veth0_vlan: entered allmulticast mode [ 158.985449][T11943] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 159.112448][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.115961][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.119134][ T24] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.123487][ T24] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.126253][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.130049][ T24] usb 11-1: config 0 descriptor?? [ 159.141101][ T5937] Bluetooth: hci3: command 0x1003 tx timeout [ 159.142586][ T5943] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 159.430018][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.436468][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.442623][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.448718][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.454052][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.457673][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.460565][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.463333][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.465970][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.537315][ T24] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 159.555605][ T24] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 159.689295][T11993] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2574'. [ 159.802686][ T2306] usb 11-1: USB disconnect, device number 2 [ 160.081185][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 160.174000][T12024] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2588'. [ 160.212037][T12028] veth0: entered promiscuous mode [ 160.214107][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2589'. [ 160.241049][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 160.249565][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.253629][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.257707][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.260641][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.269645][ T24] usb 8-1: config 0 descriptor?? [ 160.672906][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 160.674981][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 160.678428][ T24] usb 8-1: USB disconnect, device number 11 [ 160.824173][T12057] ------------[ cut here ]------------ [ 160.826410][T12057] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6) [ 160.830050][T12057] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2693 at mac80211_hwsim_sta_rc_update+0x5db/0x840, CPU#0: syz.2.2600/12057 [ 160.834730][T12057] Modules linked in: [ 160.836770][T12057] CPU: 0 UID: 0 PID: 12057 Comm: syz.2.2600 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 160.840206][T12057] Tainted: [L]=SOFTLOCKUP [ 160.841766][T12057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.845594][T12057] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 160.848345][T12057] Code: 00 48 8d 3d 55 fd c0 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 12 b1 e3 fa e8 5d 76 6a 04 [ 160.855350][T12057] RSP: 0018:ffffc900068af120 EFLAGS: 00010246 [ 160.857501][T12057] RAX: ffff888026c86a90 RBX: 0000000000000000 RCX: ffff888025850ec0 [ 160.861134][T12057] RDX: 0000000000000000 RSI: ffff888026c87002 RDI: ffffffff90e5e630 [ 160.864465][T12057] RBP: 0000000000000006 R08: 0000000000000014 R09: 0000000000000000 [ 160.867799][T12057] R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000 [ 160.871158][T12057] R13: ffff888025851090 R14: ffff88802ec0b100 R15: 0000000000000005 [ 160.874721][T12057] FS: 00007fdd116806c0(0000) GS:ffff8880d634a000(0000) knlGS:0000000000000000 [ 160.878516][T12057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.881393][T12057] CR2: 0000200000001080 CR3: 000000002bab6000 CR4: 0000000000352ef0 [ 160.884764][T12057] Call Trace: [ 160.886220][T12057] [ 160.887502][T12057] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 160.890010][T12057] mac80211_hwsim_sta_add+0xc9/0x290 [ 160.892369][T12057] drv_sta_state+0x887/0x1960 [ 160.894692][T12057] sta_info_insert_rcu+0x170b/0x2fa0 [ 160.897014][T12057] sta_info_insert+0x16/0xd0 [ 160.898989][T12057] ieee80211_add_station+0x471/0x6d0 [ 160.901357][T12057] nl80211_new_station+0x145b/0x1dd0 [ 160.903541][T12057] ? __pfx_nl80211_new_station+0x10/0x10 [ 160.905881][T12057] ? nl80211_pre_doit+0x19a/0xae0 [ 160.908009][T12057] genl_family_rcv_msg_doit+0x214/0x300 [ 160.910330][T12057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 160.913049][T12057] ? bpf_lsm_capable+0x9/0x10 [ 160.915165][T12057] ? security_capable+0x80/0x260 [ 160.917518][T12057] ? ns_capable+0xd2/0xf0 [ 160.919494][T12057] genl_rcv_msg+0x560/0x800 [ 160.921636][T12057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.923726][T12057] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 160.925956][T12057] ? __pfx_nl80211_new_station+0x10/0x10 [ 160.928283][T12057] ? __pfx_nl80211_post_doit+0x10/0x10 [ 160.930525][T12057] netlink_rcv_skb+0x159/0x420 [ 160.932621][T12057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.934779][T12057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.937069][T12057] ? netlink_deliver_tap+0x1ae/0xcc0 [ 160.939064][T12057] genl_rcv+0x28/0x40 [ 160.940725][T12057] netlink_unicast+0x5aa/0x870 [ 160.942830][T12057] ? __pfx_netlink_unicast+0x10/0x10 [ 160.945021][T12057] netlink_sendmsg+0x8b0/0xda0 [ 160.947123][T12057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.949365][T12057] ? __might_fault+0x60/0x140 [ 160.951475][T12057] ____sys_sendmsg+0xa54/0xc30 [ 160.953468][T12057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.955446][T12057] ? __pfx_futex_wake_mark+0x10/0x10 [ 160.957480][T12057] ___sys_sendmsg+0x190/0x1e0 [ 160.959316][T12057] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.961592][T12057] __sys_sendmsg+0x170/0x220 [ 160.963784][T12057] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.965845][T12057] ? __x64_sys_futex+0x34f/0x4d0 [ 160.967718][T12057] do_syscall_64+0x106/0xf80 [ 160.969578][T12057] ? clear_bhb_loop+0x40/0x90 [ 160.977624][T12057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.980067][T12057] RIP: 0033:0x7fdd1079c629 [ 160.987415][T12057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.995377][T12057] RSP: 002b:00007fdd11680028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.998919][T12057] RAX: ffffffffffffffda RBX: 00007fdd10a15fa0 RCX: 00007fdd1079c629 [ 161.008315][T12057] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 161.011801][T12057] RBP: 00007fdd10832b39 R08: 0000000000000000 R09: 0000000000000000 [ 161.014946][T12057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.017971][T12057] R13: 00007fdd10a16038 R14: 00007fdd10a15fa0 R15: 00007ffcebd43218 [ 161.020932][T12057] [ 161.021168][ T830] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 161.022196][T12057] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 161.022210][T12057] CPU: 0 UID: 0 PID: 12057 Comm: syz.2.2600 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.022227][T12057] Tainted: [L]=SOFTLOCKUP [ 161.022232][T12057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.022239][T12057] Call Trace: [ 161.022244][T12057] [ 161.022249][T12057] dump_stack_lvl+0x100/0x190 [ 161.022272][T12057] vpanic+0x552/0x970 [ 161.022284][T12057] ? __pfx_vpanic+0x10/0x10 [ 161.022299][T12057] panic+0xd1/0xe0 [ 161.022311][T12057] ? __pfx_panic+0x10/0x10 [ 161.022335][T12057] check_panic_on_warn.cold+0x19/0x34 [ 161.022347][T12057] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 161.022365][T12057] __warn.cold+0x191/0x348 [ 161.022379][T12057] __report_bug+0x296/0x3d0 [ 161.022396][T12057] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 161.022414][T12057] ? __pfx___report_bug+0x10/0x10 [ 161.022431][T12057] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 161.022448][T12057] ? __bfs+0x150/0x2a0 [ 161.022469][T12057] report_bug_entry+0xe1/0x290 [ 161.022485][T12057] ? mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 161.022502][T12057] handle_bug+0x1c9/0x2a0 [ 161.022515][T12057] exc_invalid_op+0x17/0x50 [ 161.022527][T12057] asm_exc_invalid_op+0x1a/0x20 [ 161.022538][T12057] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 161.022556][T12057] Code: 00 48 8d 3d 55 fd c0 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 12 b1 e3 fa e8 5d 76 6a 04 [ 161.022567][T12057] RSP: 0018:ffffc900068af120 EFLAGS: 00010246 [ 161.022577][T12057] RAX: ffff888026c86a90 RBX: 0000000000000000 RCX: ffff888025850ec0 [ 161.022584][T12057] RDX: 0000000000000000 RSI: ffff888026c87002 RDI: ffffffff90e5e630 [ 161.022591][T12057] RBP: 0000000000000006 R08: 0000000000000014 R09: 0000000000000000 [ 161.022597][T12057] R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000 [ 161.022604][T12057] R13: ffff888025851090 R14: ffff88802ec0b100 R15: 0000000000000005 [ 161.022621][T12057] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 161.022638][T12057] mac80211_hwsim_sta_add+0xc9/0x290 [ 161.022654][T12057] drv_sta_state+0x887/0x1960 [ 161.022671][T12057] sta_info_insert_rcu+0x170b/0x2fa0 [ 161.022690][T12057] sta_info_insert+0x16/0xd0 [ 161.022700][T12057] ieee80211_add_station+0x471/0x6d0 [ 161.022715][T12057] nl80211_new_station+0x145b/0x1dd0 [ 161.022729][T12057] ? __pfx_nl80211_new_station+0x10/0x10 [ 161.022752][T12057] ? nl80211_pre_doit+0x19a/0xae0 [ 161.022769][T12057] genl_family_rcv_msg_doit+0x214/0x300 [ 161.022784][T12057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 161.022802][T12057] ? bpf_lsm_capable+0x9/0x10 [ 161.022818][T12057] ? security_capable+0x80/0x260 [ 161.022835][T12057] ? ns_capable+0xd2/0xf0 [ 161.022849][T12057] genl_rcv_msg+0x560/0x800 [ 161.022864][T12057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.022877][T12057] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 161.022892][T12057] ? __pfx_nl80211_new_station+0x10/0x10 [ 161.022902][T12057] ? __pfx_nl80211_post_doit+0x10/0x10 [ 161.022922][T12057] netlink_rcv_skb+0x159/0x420 [ 161.022934][T12057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.022948][T12057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.022966][T12057] ? netlink_deliver_tap+0x1ae/0xcc0 [ 161.022985][T12057] genl_rcv+0x28/0x40 [ 161.022996][T12057] netlink_unicast+0x5aa/0x870 [ 161.023010][T12057] ? __pfx_netlink_unicast+0x10/0x10 [ 161.023026][T12057] netlink_sendmsg+0x8b0/0xda0 [ 161.023039][T12057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.023049][T12057] ? __might_fault+0x60/0x140 [ 161.023067][T12057] ____sys_sendmsg+0xa54/0xc30 [ 161.023081][T12057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.023096][T12057] ? __pfx_futex_wake_mark+0x10/0x10 [ 161.023111][T12057] ___sys_sendmsg+0x190/0x1e0 [ 161.023125][T12057] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.023153][T12057] __sys_sendmsg+0x170/0x220 [ 161.023170][T12057] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.023186][T12057] ? __x64_sys_futex+0x34f/0x4d0 [ 161.023211][T12057] do_syscall_64+0x106/0xf80 [ 161.023221][T12057] ? clear_bhb_loop+0x40/0x90 [ 161.023235][T12057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.023246][T12057] RIP: 0033:0x7fdd1079c629 [ 161.023256][T12057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.023267][T12057] RSP: 002b:00007fdd11680028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.023277][T12057] RAX: ffffffffffffffda RBX: 00007fdd10a15fa0 RCX: 00007fdd1079c629 [ 161.023284][T12057] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 161.023291][T12057] RBP: 00007fdd10832b39 R08: 0000000000000000 R09: 0000000000000000 [ 161.023297][T12057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.023304][T12057] R13: 00007fdd10a16038 R14: 00007fdd10a15fa0 R15: 00007ffcebd43218 [ 161.023318][T12057] [ 161.025969][T12057] Kernel Offset: disabled