last executing test programs: 950.800198ms ago: executing program 2 (id=2656): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x0, 0x2, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0) 890.815143ms ago: executing program 2 (id=2659): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x80, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0xfe, 0x0, {0x200}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x80}}, 0x4080) 890.689934ms ago: executing program 2 (id=2660): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) 822.34496ms ago: executing program 2 (id=2663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff) 822.061535ms ago: executing program 2 (id=2665): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) 752.315951ms ago: executing program 2 (id=2668): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x123200) 621.34769ms ago: executing program 3 (id=2672): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 620.934227ms ago: executing program 3 (id=2674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r1, 0xb97534d5fe9704cf, 0x0, 0xfffffff9, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x30}}, 0x0) 565.253792ms ago: executing program 3 (id=2676): socket$kcm(0x11, 0x200000000000003, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x33, 0xfffffffd) 565.150759ms ago: executing program 3 (id=2677): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) 492.573046ms ago: executing program 3 (id=2678): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x10) 492.435433ms ago: executing program 3 (id=2679): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b24, 0x0) 182.068787ms ago: executing program 0 (id=2698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x0) 181.967866ms ago: executing program 1 (id=2699): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x21a3, 0x0, {0x3}}) io_uring_enter(r0, 0x46f3, 0x1000003, 0x1, 0x0, 0x0) 111.644876ms ago: executing program 1 (id=2700): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x100]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc850}, 0x0) 111.228245ms ago: executing program 1 (id=2701): r0 = fsopen(&(0x7f00000003c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 111.078911ms ago: executing program 0 (id=2702): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1790) 110.952819ms ago: executing program 1 (id=2703): r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 64.687155ms ago: executing program 1 (id=2704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e1209001800", 0x28}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) 64.396796ms ago: executing program 0 (id=2705): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000280)={0x8001}, 0x1) 63.270338ms ago: executing program 1 (id=2706): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) close(r0) write$UHID_CREATE2(r1, 0x0, 0x1d8) 1.976155ms ago: executing program 0 (id=2707): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 1.659416ms ago: executing program 0 (id=2708): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) 0s ago: executing program 0 (id=2709): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53459' (ED25519) to the list of known hosts. [ 39.105235][ T40] audit: type=1400 audit(1751034821.830:62): avc: denied { name_bind } for pid=5848 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.119321][ T40] audit: type=1400 audit(1751034821.850:63): avc: denied { write } for pid=5849 comm="sh" path="pipe:[2601]" dev="pipefs" ino=2601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.130824][ T40] audit: type=1400 audit(1751034821.860:64): avc: denied { execute } for pid=5849 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.137581][ T40] audit: type=1400 audit(1751034821.860:65): avc: denied { execute_no_trans } for pid=5849 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.010645][ T40] audit: type=1400 audit(1751034823.740:66): avc: denied { mounton } for pid=5849 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.013061][ T5849] cgroup: Unknown subsys name 'net' [ 41.200669][ T5849] cgroup: Unknown subsys name 'cpuset' [ 41.204941][ T5849] cgroup: Unknown subsys name 'rlimit' [ 41.429561][ T5894] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.077415][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.988371][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 44.988381][ T40] audit: type=1400 audit(1751034827.720:80): avc: denied { execmem } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.134903][ T40] audit: type=1400 audit(1751034827.860:81): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.141484][ T40] audit: type=1400 audit(1751034827.860:82): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.148827][ T40] audit: type=1400 audit(1751034827.860:83): avc: denied { read write } for pid=5934 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.156008][ T40] audit: type=1400 audit(1751034827.860:84): avc: denied { open } for pid=5934 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.163512][ T40] audit: type=1400 audit(1751034827.860:85): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.170749][ T40] audit: type=1400 audit(1751034827.870:86): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="socket:[7183]" dev="sockfs" ino=7183 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.177041][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.181349][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.183795][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.186311][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.188787][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.194582][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.196474][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.197152][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.197498][ T40] audit: type=1400 audit(1751034827.920:87): avc: denied { read } for pid=5933 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.197538][ T40] audit: type=1400 audit(1751034827.920:88): avc: denied { open } for pid=5933 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.198962][ T40] audit: type=1400 audit(1751034827.920:89): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.200698][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.200707][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.201527][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.202217][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.202249][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.202923][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.209802][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.214916][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.222033][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.223680][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.226016][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.227371][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.381599][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 45.431597][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 45.541601][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.543842][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.546248][ T5933] bridge_slave_0: entered allmulticast mode [ 45.549525][ T5933] bridge_slave_0: entered promiscuous mode [ 45.555665][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 45.566152][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.568472][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.570742][ T5933] bridge_slave_1: entered allmulticast mode [ 45.573306][ T5933] bridge_slave_1: entered promiscuous mode [ 45.613738][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 45.633951][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.658784][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.674887][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.677178][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.679686][ T5934] bridge_slave_0: entered allmulticast mode [ 45.682299][ T5934] bridge_slave_0: entered promiscuous mode [ 45.691248][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.693508][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.695793][ T5934] bridge_slave_1: entered allmulticast mode [ 45.698479][ T5934] bridge_slave_1: entered promiscuous mode [ 45.786533][ T5933] team0: Port device team_slave_0 added [ 45.792154][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.794416][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.796658][ T5942] bridge_slave_0: entered allmulticast mode [ 45.801621][ T5942] bridge_slave_0: entered promiscuous mode [ 45.804569][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.806836][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.809247][ T5942] bridge_slave_1: entered allmulticast mode [ 45.811789][ T5942] bridge_slave_1: entered promiscuous mode [ 45.827274][ T5933] team0: Port device team_slave_1 added [ 45.874502][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.906043][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.910219][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.913416][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.915621][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.923512][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.940174][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.942465][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.944655][ T5938] bridge_slave_0: entered allmulticast mode [ 45.947261][ T5938] bridge_slave_0: entered promiscuous mode [ 45.952091][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.967376][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.969683][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.977459][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.981162][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.983412][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.985669][ T5938] bridge_slave_1: entered allmulticast mode [ 45.988332][ T5938] bridge_slave_1: entered promiscuous mode [ 46.045387][ T5934] team0: Port device team_slave_0 added [ 46.063140][ T5942] team0: Port device team_slave_0 added [ 46.066882][ T5942] team0: Port device team_slave_1 added [ 46.070000][ T5934] team0: Port device team_slave_1 added [ 46.073275][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.115262][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.172372][ T5933] hsr_slave_0: entered promiscuous mode [ 46.175000][ T5933] hsr_slave_1: entered promiscuous mode [ 46.178173][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.180356][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.188308][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.192170][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.194368][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.202425][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.221570][ T5938] team0: Port device team_slave_0 added [ 46.223934][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.226129][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.234085][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.237961][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.240175][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.248572][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.253861][ T5938] team0: Port device team_slave_1 added [ 46.306021][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.308268][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.316172][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.320347][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.322509][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.330541][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.409326][ T5942] hsr_slave_0: entered promiscuous mode [ 46.411519][ T5942] hsr_slave_1: entered promiscuous mode [ 46.413556][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.416077][ T5942] Cannot create hsr debugfs directory [ 46.437763][ T5934] hsr_slave_0: entered promiscuous mode [ 46.441295][ T5934] hsr_slave_1: entered promiscuous mode [ 46.443365][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.445747][ T5934] Cannot create hsr debugfs directory [ 46.502535][ T5938] hsr_slave_0: entered promiscuous mode [ 46.504736][ T5938] hsr_slave_1: entered promiscuous mode [ 46.506746][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.509152][ T5938] Cannot create hsr debugfs directory [ 46.772877][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.781826][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.786555][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.795756][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.821875][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.827495][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.831568][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.835346][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.871688][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.876020][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.880655][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.885756][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.929645][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.934214][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.938966][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.942888][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.981352][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.006509][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.015186][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.021502][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.023818][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.032093][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.037176][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.039480][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.069338][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.076258][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.078511][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.085407][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.096754][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.100941][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.103164][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.114204][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.127113][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.129693][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.134325][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.136556][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.141768][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.143995][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.159517][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.161775][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.207158][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.236645][ T5933] veth0_vlan: entered promiscuous mode [ 47.252363][ T5933] veth1_vlan: entered promiscuous mode [ 47.259803][ T5946] Bluetooth: hci3: command tx timeout [ 47.259806][ T5948] Bluetooth: hci2: command tx timeout [ 47.260000][ T5949] Bluetooth: hci1: command tx timeout [ 47.260005][ T5948] Bluetooth: hci0: command tx timeout [ 47.271521][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.286108][ T5933] veth0_macvtap: entered promiscuous mode [ 47.291771][ T5933] veth1_macvtap: entered promiscuous mode [ 47.308160][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.321826][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.330158][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.335075][ T5942] veth0_vlan: entered promiscuous mode [ 47.340499][ T5933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.343230][ T5933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.345912][ T5933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.348887][ T5933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.358478][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.363081][ T5942] veth1_vlan: entered promiscuous mode [ 47.413835][ T5934] veth0_vlan: entered promiscuous mode [ 47.429951][ T5934] veth1_vlan: entered promiscuous mode [ 47.441604][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.442590][ T5942] veth0_macvtap: entered promiscuous mode [ 47.444124][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.450330][ T5938] veth0_vlan: entered promiscuous mode [ 47.452726][ T5942] veth1_macvtap: entered promiscuous mode [ 47.462706][ T5934] veth0_macvtap: entered promiscuous mode [ 47.479064][ T5934] veth1_macvtap: entered promiscuous mode [ 47.481638][ T5938] veth1_vlan: entered promiscuous mode [ 47.489622][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.490401][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.492054][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.501927][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.507222][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.511418][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.517971][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.520680][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.523388][ T5942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.526121][ T5942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.535423][ T5933] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.535702][ T5934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.543192][ T5934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.545942][ T5934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.548776][ T5934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.555889][ T5938] veth0_macvtap: entered promiscuous mode [ 47.565134][ T5938] veth1_macvtap: entered promiscuous mode [ 47.596368][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.618460][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.621222][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.625755][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.627453][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.629902][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.631014][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.633362][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.638575][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.641276][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.654509][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.656990][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.686558][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.689625][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.706408][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.709480][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.739184][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.741653][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.894782][ T6048] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 47.963732][ T6060] process 'syz.2.20' launched './file1' with NULL argv: empty string added [ 48.213264][ T6088] warning: `syz.1.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.291712][ T6100] Bluetooth: MGMT ver 1.23 [ 48.408377][ T6115] tmpfs: Invalid gid '0x00000000ffffffff' [ 48.606775][ T6141] usb 2-1: USB disconnect, device number 2 [ 48.695370][ T6147] netlink: 76 bytes leftover after parsing attributes in process `syz.1.59'. [ 48.867512][ T6162] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 48.871611][ T6162] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 48.981682][ T6178] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 48.984460][ T6178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 49.003227][ T6180] Zero length message leads to an empty skb [ 49.019476][ T6182] netlink: 64 bytes leftover after parsing attributes in process `syz.2.76'. [ 49.338963][ T5296] Bluetooth: hci1: command tx timeout [ 49.339419][ T5946] Bluetooth: hci0: command tx timeout [ 49.339444][ T5948] Bluetooth: hci2: command tx timeout [ 49.340908][ T5949] Bluetooth: hci3: command tx timeout [ 49.418308][ T6030] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.574631][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 49.589859][ T6030] usb 5-1: Using ep0 maxpacket: 16 [ 49.593348][ T6030] usb 5-1: config 0 has no interfaces? [ 49.598659][ T6030] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.602014][ T6030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.608116][ T6030] usb 5-1: SerialNumber: syz [ 49.619608][ T6030] usb 5-1: config 0 descriptor?? [ 49.632784][ T6221] netlink: 'syz.3.96': attribute type 14 has an invalid length. [ 49.642378][ T6223] batadv_slave_1: entered promiscuous mode [ 49.645173][ T6222] batadv_slave_1: left promiscuous mode [ 49.702115][ T6229] vlan2: entered promiscuous mode [ 49.703754][ T6229] bridge0: entered promiscuous mode [ 49.705464][ T6229] vlan2: entered allmulticast mode [ 49.707075][ T6229] bridge0: entered allmulticast mode [ 49.784897][ T6235] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.102'. [ 49.827875][ T841] IPVS: starting estimator thread 0... [ 49.832833][ T1459] usb 5-1: USB disconnect, device number 2 [ 49.864933][ T6242] macvtap1: entered allmulticast mode [ 49.866737][ T6242] veth0_macvtap: entered allmulticast mode [ 49.869959][ T6243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.103'. [ 49.918037][ T6240] IPVS: using max 45 ests per chain, 108000 per kthread [ 49.938015][ T6249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.108'. [ 49.940812][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 49.948566][ T6251] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 49.993834][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 50.103713][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 50.103723][ T40] audit: type=1400 audit(1751034832.830:193): avc: denied { write } for pid=6270 comm="syz.3.118" name="tcp" dev="proc" ino=4026532909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.122669][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 50.125418][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 50.128486][ T6274] netlink: 'syz.1.120': attribute type 7 has an invalid length. [ 50.190413][ T40] audit: type=1400 audit(1751034832.920:194): avc: denied { sqpoll } for pid=6283 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.229604][ T40] audit: type=1400 audit(1751034832.960:195): avc: denied { create } for pid=6292 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.238064][ T40] audit: type=1400 audit(1751034832.960:196): avc: denied { listen } for pid=6292 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.269262][ T6299] team0: entered allmulticast mode [ 50.270967][ T6299] team_slave_0: entered allmulticast mode [ 50.272853][ T6299] team_slave_1: entered allmulticast mode [ 50.405727][ T40] audit: type=1400 audit(1751034833.130:197): avc: denied { setopt } for pid=6322 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.413334][ T40] audit: type=1400 audit(1751034833.130:198): avc: denied { name_bind } for pid=6322 comm="syz.1.143" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.420134][ T40] audit: type=1400 audit(1751034833.130:199): avc: denied { write } for pid=6322 comm="syz.1.143" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.466449][ T40] audit: type=1400 audit(1751034833.190:200): avc: denied { append } for pid=6326 comm="syz.1.144" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 50.512901][ T40] audit: type=1400 audit(1751034833.240:201): avc: denied { create } for pid=6334 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.520301][ T40] audit: type=1400 audit(1751034833.250:202): avc: denied { write } for pid=6334 comm="syz.2.148" path="socket:[10356]" dev="sockfs" ino=10356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.970063][ T6384] xt_hashlimit: size too large, truncated to 1048576 [ 51.187783][ T6406] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.419667][ T5946] Bluetooth: hci3: command tx timeout [ 51.419689][ T5296] Bluetooth: hci0: command tx timeout [ 51.421765][ T5949] Bluetooth: hci2: command tx timeout [ 51.428117][ T5949] Bluetooth: hci1: command tx timeout [ 51.824909][ T6496] loop6: detected capacity change from 0 to 524288000 [ 51.862087][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 51.942932][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.982581][ T6521] binder: 6520:6521 ioctl c018620c 200000000300 returned -22 [ 52.244286][ T6559] ======================================================= [ 52.244286][ T6559] WARNING: The mand mount option has been deprecated and [ 52.244286][ T6559] and is ignored by this kernel. Remove the mand [ 52.244286][ T6559] option from the mount to silence this warning. [ 52.244286][ T6559] ======================================================= [ 52.273958][ T5949] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2 [ 52.450955][ T6576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 52.877071][ T6610] 9p: Unknown access argument 18446744073709551615: -34 [ 52.928315][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.078008][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 53.083317][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 53.085825][ T24] usb 5-1: config 0 has no interface number 0 [ 53.087738][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 53.093516][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 53.099099][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 53.101940][ T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 53.104504][ T24] usb 5-1: Product: syz [ 53.105851][ T24] usb 5-1: SerialNumber: syz [ 53.111542][ T24] usb 5-1: config 0 descriptor?? [ 53.118121][ T24] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 53.127302][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input6 [ 53.230489][ T6638] unknown channel width for channel at 909000KHz? [ 53.322605][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 53.498053][ T5949] Bluetooth: hci0: command tx timeout [ 53.508062][ T5949] Bluetooth: hci2: command tx timeout [ 53.508260][ T5296] Bluetooth: hci3: command tx timeout [ 53.524880][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 53.525316][ T6019] usb 5-1: USB disconnect, device number 3 [ 53.527114][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 53.537730][ T6019] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 54.282856][ T6714] kvm: kvm [6713]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 54.413202][ T6729] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 54.683243][ T6769] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 54.815979][ T5296] Bluetooth: Frame is too long (len 12, expected len 4) [ 54.851739][ T6793] __nla_validate_parse: 3 callbacks suppressed [ 54.851753][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 54.857699][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 54.891291][ T6797] capability: warning: `syz.0.364' uses 32-bit capabilities (legacy support in use) [ 55.198783][ T10] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 55.214168][ T6831] overlayfs: missing 'workdir' [ 55.244279][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 55.244291][ T40] audit: type=1400 audit(1751035093.973:335): avc: denied { read } for pid=6834 comm="syz.0.382" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.351866][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 55.356837][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 55.359611][ T10] usb 8-1: can't read configurations, error -71 [ 55.776777][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.403'. [ 55.885241][ T40] audit: type=1400 audit(1751035094.613:336): avc: denied { execute_no_trans } for pid=6894 comm="syz.3.410" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=13635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 56.007819][ T40] audit: type=1400 audit(1751035094.733:337): avc: denied { name_bind } for pid=6910 comm="syz.2.418" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 56.020602][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 56.039099][ T6915] netlink: 'syz.2.420': attribute type 12 has an invalid length. [ 56.041551][ T6915] netlink: 120 bytes leftover after parsing attributes in process `syz.2.420'. [ 56.082291][ T40] audit: type=1400 audit(1751035094.813:338): avc: denied { bind } for pid=6920 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.143650][ T40] audit: type=1400 audit(1751035094.873:339): avc: denied { connect } for pid=6929 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.202976][ T1188] tipc: Subscription rejected, illegal request [ 56.279006][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 56.298713][ T5296] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 56.301410][ T5296] Bluetooth: hci1: Injecting HCI hardware error event [ 56.304201][ T5949] Bluetooth: hci1: hardware error 0x00 [ 56.357307][ T6945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.586901][ T40] audit: type=1400 audit(1751035095.313:340): avc: denied { create } for pid=6961 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.598482][ T40] audit: type=1400 audit(1751035095.313:341): avc: denied { bind } for pid=6961 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.604516][ T40] audit: type=1400 audit(1751035095.323:342): avc: denied { listen } for pid=6961 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.612850][ T40] audit: type=1400 audit(1751035095.323:343): avc: denied { accept } for pid=6961 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.644737][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 56.644824][ T40] audit: type=1400 audit(1751035095.373:344): avc: denied { nlmsg_read } for pid=6970 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.690133][ T6978] sp0: Synchronizing with TNC [ 56.747625][ T6984] SELinux: Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped). [ 56.838962][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 56.874374][ T6996] netpci0: tun_chr_ioctl cmd 1074025672 [ 56.876402][ T6996] netpci0: ignored: set checksum disabled [ 56.979700][ T7010] tmpfs: Invalid gid '0x00000000ffffffff' [ 57.063785][ T7022] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 57.075496][ T7024] @: renamed from vlan0 (while UP) [ 57.096814][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 57.118361][ T7032] netlink: 160 bytes leftover after parsing attributes in process `syz.2.477'. [ 57.407617][ T7069] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 57.444849][ T7077] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 57.448318][ T7077] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 57.747006][ T7116] use of bytesused == 0 is deprecated and will be removed in the future, [ 57.754614][ T7116] use the actual size instead. [ 57.894691][ T7134] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 58.458250][ T5949] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 58.975881][ T7206] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 59.110164][ T7216] capability: warning: `syz.2.561' uses deprecated v2 capabilities in a way that may be insecure [ 59.438009][ T72] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 59.591755][ T72] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 59.595508][ T72] usb 5-1: config 0 has no interface number 0 [ 59.597530][ T72] usb 5-1: config 0 interface 106 has no altsetting 0 [ 59.602875][ T72] usb 5-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 59.605761][ T72] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.609244][ T72] usb 5-1: Product: syz [ 59.610630][ T72] usb 5-1: Manufacturer: syz [ 59.612163][ T72] usb 5-1: SerialNumber: syz [ 59.615700][ T72] usb 5-1: config 0 descriptor?? [ 59.830251][ T72] usb 5-1: USB disconnect, device number 4 [ 60.067196][ T7256] bridge0: port 3(syz_tun) entered blocking state [ 60.070891][ T7256] bridge0: port 3(syz_tun) entered disabled state [ 60.073016][ T7256] syz_tun: entered allmulticast mode [ 60.076459][ T7256] syz_tun: entered promiscuous mode [ 60.078659][ T7256] bridge0: port 3(syz_tun) entered blocking state [ 60.080756][ T7256] bridge0: port 3(syz_tun) entered forwarding state [ 60.153503][ T7264] misc userio: Begin command sent, but we're already running [ 60.256344][ T7260] mmap: syz.2.580 (7260) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.407296][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 60.407307][ T40] audit: type=1400 audit(1751035099.133:369): avc: denied { create } for pid=7271 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 60.417021][ T40] audit: type=1400 audit(1751035099.143:370): avc: denied { getopt } for pid=7271 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 60.481192][ T7286] __nla_validate_parse: 5 callbacks suppressed [ 60.481203][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 60.520862][ T40] audit: type=1400 audit(1751035099.253:371): avc: denied { bind } for pid=7288 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.758435][ T6019] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 61.768922][ T7325] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 61.772708][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 61.877741][ T7340] can0: slcan on ttyS3. [ 61.938977][ T7340] can0 (unregistered): slcan off ttyS3. [ 62.063549][ T40] audit: type=1400 audit(1751035100.793:372): avc: denied { create } for pid=7358 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.070388][ T40] audit: type=1400 audit(1751035100.803:373): avc: denied { setopt } for pid=7358 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.076496][ T40] audit: type=1400 audit(1751035100.803:374): avc: denied { write } for pid=7358 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.083612][ T40] audit: type=1400 audit(1751035100.803:375): avc: denied { read } for pid=7358 comm="syz.0.622" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.262032][ T40] audit: type=1400 audit(1751035100.993:376): avc: denied { listen } for pid=7373 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.693073][ T7382] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 62.696565][ T7382] macsec1: entered allmulticast mode [ 62.698409][ T7382] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 62.703434][ T7382] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 62.705630][ T7382] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 62.890452][ T7399] Bluetooth: hci5: Frame reassembly failed (-84) [ 62.894194][ T61] Bluetooth: hci5: Frame reassembly failed (-84) [ 62.895616][ T7402] xt_hashlimit: size too large, truncated to 1048576 [ 63.114659][ T40] audit: type=1400 audit(1751035101.843:377): avc: denied { unlink } for pid=7414 comm="syz.1.647" name="#1" dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.123440][ T40] audit: type=1400 audit(1751035101.843:378): avc: denied { mount } for pid=7414 comm="syz.1.647" name="/" dev="overlay" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.162066][ T7417] wg2: entered promiscuous mode [ 63.163663][ T7417] wg2: entered allmulticast mode [ 63.197663][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 63.631338][ T7435] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.657'. [ 63.781153][ T7449] __vm_enough_memory: pid: 7449, comm: syz.1.664, bytes: 21199825440768 not enough memory for the allocation [ 63.818029][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.818045][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 63.941674][ T5949] Bluetooth: hci0: unexpected cc 0x2007 length: 100 > 2 [ 63.966944][ T7464] unknown channel width for channel at 909000KHz? [ 64.508022][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.667976][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 64.671021][ T60] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 64.673598][ T60] usb 7-1: config 0 has no interface number 0 [ 64.675595][ T60] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.679307][ T60] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 64.683460][ T60] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 64.686416][ T60] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 64.689503][ T60] usb 7-1: Product: syz [ 64.690851][ T60] usb 7-1: SerialNumber: syz [ 64.694764][ T60] usb 7-1: config 0 descriptor?? [ 64.699417][ T60] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 64.702685][ T60] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input9 [ 64.902741][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 64.938878][ T5949] Bluetooth: hci5: command 0x1003 tx timeout [ 64.941620][ T5296] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 65.052273][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 65.108212][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 65.111237][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 65.113574][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 65.115863][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 65.118246][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 65.120522][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 65.122814][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 65.124993][ T6019] usb 7-1: USB disconnect, device number 2 [ 65.126825][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 65.126836][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 65.134691][ T6019] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 65.220257][ T7539] kvm: kvm [7538]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 66.023215][ T7600] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 66.721652][ T7663] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 66.774691][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 66.777480][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 67.056627][ T7701] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 67.251881][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.787'. [ 67.586718][ T7762] netlink: 160 bytes leftover after parsing attributes in process `syz.1.803'. [ 67.662603][ T7772] __vm_enough_memory: pid: 7772, comm: syz.2.816, bytes: 21200206344192 not enough memory for the allocation [ 67.780074][ T7785] netpci0: tun_chr_ioctl cmd 1074025672 [ 67.781960][ T7785] netpci0: ignored: set checksum disabled [ 67.800291][ T7789] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.815'. [ 67.927555][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.931329][ T7805] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 67.943057][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.970102][ T7808] mkiss: ax0: crc mode is auto. [ 67.978240][ T5949] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 67.980973][ T5949] Bluetooth: hci0: Injecting HCI hardware error event [ 67.983912][ T5949] Bluetooth: hci0: hardware error 0x00 [ 68.150073][ T7821] xt_hashlimit: size too large, truncated to 1048576 [ 68.807355][ T7834] mkiss: ax0: crc mode is auto. [ 68.852222][ T7838] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 68.854509][ T7838] macsec1: entered allmulticast mode [ 68.856199][ T7838] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 68.862556][ T7838] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 68.864733][ T7838] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 68.888173][ T7840] can0: slcan on ttyS3. [ 68.913366][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 68.913375][ T40] audit: type=1400 audit(1751035107.643:383): avc: denied { create } for pid=7844 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.921742][ T40] audit: type=1400 audit(1751035107.653:384): avc: denied { write } for pid=7844 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.927682][ T40] audit: type=1400 audit(1751035107.653:385): avc: denied { bind } for pid=7844 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.953764][ T40] audit: type=1400 audit(1751035107.683:386): avc: denied { read write } for pid=7850 comm="syz.3.843" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.961430][ T40] audit: type=1400 audit(1751035107.683:387): avc: denied { open } for pid=7850 comm="syz.3.843" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.018960][ T7840] can0 (unregistered): slcan off ttyS3. [ 69.978024][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 69.978186][ T5296] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.061374][ T5949] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 70.115343][ T40] audit: type=1400 audit(1751035108.843:388): avc: denied { setopt } for pid=7892 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.132527][ T40] audit: type=1400 audit(1751035108.853:389): avc: denied { connect } for pid=7894 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.161232][ T40] audit: type=1400 audit(1751035108.893:390): avc: denied { create } for pid=7898 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.225999][ T40] audit: type=1400 audit(1751035108.953:391): avc: denied { ioctl } for pid=7912 comm="syz.0.870" path="socket:[18802]" dev="sockfs" ino=18802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.265296][ T7921] 9p: Unknown access argument 18446744073709551615: -34 [ 70.336443][ T40] audit: type=1400 audit(1751035109.063:392): avc: denied { map } for pid=7926 comm="syz.3.877" path="socket:[20683]" dev="sockfs" ino=20683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.456864][ T7940] kvm: kvm [7939]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008f) [ 70.488044][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.649226][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.652265][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 70.655456][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.658446][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 70.662661][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 70.667187][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.672963][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.675493][ T9] usb 7-1: Product: syz [ 70.676817][ T9] usb 7-1: Manufacturer: syz [ 70.682215][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 70.683889][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 70.693718][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 70.695631][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 70.763090][ T7979] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 71.101424][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.103488][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.192894][ T8021] xt_hashlimit: size too large, truncated to 1048576 [ 71.251050][ T8030] netlink: 44 bytes leftover after parsing attributes in process `syz.3.919'. [ 71.254059][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 71.257472][ T8032] loop6: detected capacity change from 0 to 524287487 [ 71.262651][ T8032] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.265863][ T8032] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.269975][ T8032] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.272773][ T8032] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.275888][ T8032] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.280157][ T8032] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.282638][ T8032] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.285500][ T8032] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.289098][ T8032] ldm_validate_partition_table(): Disk read failed. [ 71.291167][ T8032] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.293604][ T8032] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.296131][ T8032] Dev loop6: unable to read RDB block 0 [ 71.298469][ T8032] loop6: unable to read partition table [ 71.300315][ T8032] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 71.328337][ T8040] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 71.369760][ T8036] ata1.00: invalid multi_count 128 ignored [ 71.412567][ T119] ata1.00: invalid multi_count 128 ignored [ 71.459519][ T67] ata1.00: invalid multi_count 128 ignored [ 71.506271][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 71.519220][ T67] ata1.00: invalid multi_count 128 ignored [ 71.554592][ T67] ata1.00: invalid multi_count 128 ignored [ 71.609588][ T67] ata1.00: invalid multi_count 128 ignored [ 71.681278][ T5949] block nbd0: Receive control failed (result -32) [ 71.994682][ T8091] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 72.096431][ T8101] overlay: filesystem on ./bus not supported [ 72.418213][ T8120] block nbd1: server does not support multiple connections per device. [ 72.421122][ T8120] block nbd1: shutting down sockets [ 72.468015][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.639316][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 72.642389][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 72.646273][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 72.651064][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.653595][ T10] usb 5-1: Product: syz [ 72.654920][ T10] usb 5-1: Manufacturer: syz [ 72.656446][ T10] usb 5-1: SerialNumber: syz [ 72.659785][ T10] usb 5-1: config 0 descriptor?? [ 72.665063][ T10] usb 5-1: selecting invalid altsetting 0 [ 72.786673][ T8158] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 72.862609][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 72.870297][ T8009] usb 5-1: USB disconnect, device number 5 [ 73.088021][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.242055][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 73.245586][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.249089][ T10] usb 6-1: Product: syz [ 73.250744][ T10] usb 6-1: Manufacturer: syz [ 73.252706][ T10] usb 6-1: SerialNumber: syz [ 73.252973][ T6019] usb 7-1: USB disconnect, device number 3 [ 73.262329][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 73.292698][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 73.359335][ T8182] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 73.440070][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1001'. [ 73.621386][ T8215] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.632084][ T8215] CIFS mount error: No usable UNC path provided in device string! [ 73.632084][ T8215] [ 73.635513][ T8215] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 74.060989][ T8240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.064796][ T8240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.388171][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 74.391607][ T9] ath9k_htc: Failed to initialize the device [ 74.413974][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 74.423774][ T9] usb 6-1: USB disconnect, device number 2 [ 74.424946][ T8261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.430818][ T8261] bond0: (slave bond2): Enslaving as an active interface with an up link [ 74.833229][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'. [ 74.868901][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 74.868912][ T40] audit: type=1400 audit(1751035113.603:411): avc: denied { mounton } for pid=8273 comm="syz.3.1038" path=2F3232372FE91F7189591E9233614B dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 74.884312][ T8264] syz.0.1033 (8264): drop_caches: 2 [ 74.989774][ T40] audit: type=1400 audit(1751035113.723:412): avc: denied { write } for pid=8287 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.040239][ T8294] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1047'. [ 75.043011][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.045150][ T8294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.733374][ T8318] tun0: tun_chr_ioctl cmd 1074025675 [ 75.735032][ T8318] tun0: persist disabled [ 75.851920][ T6019] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 76.023084][ T6019] usb 7-1: unable to get BOS descriptor or descriptor too short [ 76.027971][ T6019] usb 7-1: no configurations [ 76.029414][ T6019] usb 7-1: can't read configurations, error -22 [ 76.060438][ T40] audit: type=1400 audit(1751035114.793:413): avc: denied { setattr } for pid=8346 comm="syz.1.1071" name="/" dev="9p" ino=35913848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.314531][ T40] audit: type=1400 audit(1751035115.043:414): avc: denied { write } for pid=8366 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.385444][ T8373] netlink: 'syz.1.1083': attribute type 9 has an invalid length. [ 76.387805][ T8373] netlink: 212012 bytes leftover after parsing attributes in process `syz.1.1083'. [ 76.393697][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1084'. [ 76.396794][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1084'. [ 76.553682][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 76.553921][ T40] audit: type=1400 audit(1751035115.283:415): avc: denied { watch watch_reads } for pid=8394 comm="syz.2.1094" path="pipe:[7177]" dev="pipefs" ino=7177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 76.690441][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 76.757485][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1107'. [ 76.783667][ T40] audit: type=1400 audit(1751035115.513:416): avc: denied { getopt } for pid=8424 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.984770][ T8447] sp0: Synchronizing with TNC [ 76.986930][ T8449] overlayfs: missing 'workdir' [ 77.309168][ T40] audit: type=1400 audit(1751035116.043:417): avc: denied { relabelto } for pid=8486 comm="syz.2.1141" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 77.326078][ T40] audit: type=1400 audit(1751035116.043:418): avc: denied { associate } for pid=8486 comm="syz.2.1141" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 77.336304][ T40] audit: type=1400 audit(1751035116.043:419): avc: denied { add_name } for pid=8486 comm="syz.2.1141" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 77.351829][ T40] audit: type=1400 audit(1751035116.043:420): avc: denied { associate } for pid=8486 comm="syz.2.1141" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.351862][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 77.373414][ T8496] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 77.426685][ T12] tipc: Subscription rejected, illegal request [ 77.543822][ T12] bond0: (slave bond_slave_0): interface is now down [ 77.546162][ T12] bond0: (slave bond_slave_1): interface is now down [ 77.550679][ T12] bond0: now running without any active interface! [ 77.662722][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.664954][ T8532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.689749][ T8534] bond0: entered promiscuous mode [ 77.691310][ T8534] bond_slave_0: entered promiscuous mode [ 77.693168][ T8534] bond_slave_1: entered promiscuous mode [ 77.695728][ T8534] batadv0: entered promiscuous mode [ 77.699320][ T8534] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 77.702490][ T8534] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 77.706138][ T8534] bond0: left promiscuous mode [ 77.707657][ T8534] bond_slave_0: left promiscuous mode [ 77.709530][ T8534] bond_slave_1: left promiscuous mode [ 77.711775][ T8534] batadv0: left promiscuous mode [ 77.878144][ T1459] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 78.025066][ T8556] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 78.028018][ T1459] usb 8-1: Using ep0 maxpacket: 16 [ 78.029401][ T1459] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.035035][ T1459] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.039461][ T1459] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 78.042400][ T1459] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.046708][ T1459] usb 8-1: config 0 descriptor?? [ 78.051599][ T1459] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 78.303949][ T5331] bcm5974 8-1:0.0: could not read from device [ 78.309723][ T8529] bcm5974 8-1:0.0: could not read from device [ 78.310397][ T1459] usb 8-1: USB disconnect, device number 4 [ 78.748038][ T8613] __nla_validate_parse: 1 callbacks suppressed [ 78.748048][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'. [ 78.780615][ T8619] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 78.872707][ T8629] 9p: Unknown uid 00000000004294967295 [ 79.218772][ T8663] Driver unsupported XDP return value 0 on prog (id 76) dev N/A, expect packet loss! [ 79.379487][ T8687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1227'. [ 79.421191][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 79.828053][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 79.913052][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 79.913063][ T40] audit: type=1400 audit(1751035118.643:435): avc: denied { connect } for pid=8745 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.964596][ T40] audit: type=1400 audit(1751035118.693:436): avc: denied { write } for pid=8745 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.987979][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 79.990900][ T10] usb 8-1: config 0 has no interfaces? [ 79.992696][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 79.995544][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.000025][ T10] usb 8-1: config 0 descriptor?? [ 80.175247][ T8752] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 80.200352][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1258'. [ 80.202981][ T8756] loop6: detected capacity change from 0 to 63 [ 80.203902][ T6019] usb 8-1: USB disconnect, device number 5 [ 80.205368][ T8756] buffer_io_error: 7 callbacks suppressed [ 80.205376][ T8756] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.211679][ T8756] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.214221][ T8756] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.217082][ T8756] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.219881][ T8756] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.222305][ T8756] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.224660][ T8756] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.227106][ T8756] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.231253][ T8756] ldm_validate_partition_table(): Disk read failed. [ 80.233272][ T8756] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.235747][ T8756] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.238671][ T8756] Dev loop6: unable to read RDB block 0 [ 80.240556][ T8756] loop6: unable to read partition table [ 80.242338][ T8756] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 80.332701][ T8772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1267'. [ 80.543239][ T40] audit: type=1326 audit(1751035119.273:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.1.1270" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0accb8e929 code=0x0 [ 80.754055][ T8792] openvswitch: netlink: Multiple metadata blocks provided [ 80.988419][ T8807] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 81.340889][ T1345] cfg80211: failed to load regulatory.db [ 81.357997][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1288'. [ 81.574549][ T8852] xt_hashlimit: size too large, truncated to 1048576 [ 81.671252][ T40] audit: type=1400 audit(1751035120.403:438): avc: denied { ioctl } for pid=8855 comm="syz.0.1300" path="socket:[25149]" dev="sockfs" ino=25149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.927452][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 82.483756][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 83.006433][ T8947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1342'. [ 83.083691][ T8955] bridge0: port 3(syz_tun) entered blocking state [ 83.086412][ T8955] bridge0: port 3(syz_tun) entered disabled state [ 83.089719][ T8955] syz_tun: entered allmulticast mode [ 83.093018][ T8955] syz_tun: entered promiscuous mode [ 83.095362][ T8955] bridge0: port 3(syz_tun) entered blocking state [ 83.098047][ T8955] bridge0: port 3(syz_tun) entered forwarding state [ 83.140420][ T8957] misc userio: Begin command sent, but we're already running [ 83.217806][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 83.715522][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 83.746298][ T40] audit: type=1400 audit(1751035122.473:439): avc: denied { open } for pid=8989 comm="syz.3.1364" path="/dev/ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 83.753791][ T40] audit: type=1400 audit(1751035122.473:440): avc: denied { ioctl } for pid=8989 comm="syz.3.1364" path="/dev/ttyqb" dev="devtmpfs" ino=394 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 83.769279][ T40] audit: type=1400 audit(1751035122.503:441): avc: denied { ioctl } for pid=8992 comm="syz.2.1366" path="socket:[22460]" dev="sockfs" ino=22460 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.939471][ T9014] batadv_slave_1: entered promiscuous mode [ 83.941181][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 83.942212][ T9013] batadv_slave_1: left promiscuous mode [ 84.409970][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.560070][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 84.563465][ T9] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 84.566660][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 84.570828][ T9] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 84.574887][ T9] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 84.579729][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 84.584125][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 84.587481][ T9] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 84.590653][ T9] usb 8-1: Product: syz [ 84.592246][ T9] usb 8-1: Manufacturer: syz [ 84.594072][ T9] usb 8-1: SerialNumber: syz [ 84.597738][ T9] usb 8-1: config 0 descriptor?? [ 84.602409][ T9] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.607379][ T9] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.840413][ T9057] hsr0: entered promiscuous mode [ 84.842250][ T9057] macsec1: entered allmulticast mode [ 84.843848][ T9057] hsr0: entered allmulticast mode [ 84.845403][ T9057] hsr_slave_0: entered allmulticast mode [ 84.847099][ T9057] hsr_slave_1: entered allmulticast mode [ 84.861138][ T9036] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 84.861208][ T9] usb 8-1: USB disconnect, device number 6 [ 84.863567][ C2] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 84.871227][ T9] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 84.921526][ T40] audit: type=1400 audit(1751035123.653:442): avc: denied { create } for pid=9061 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.927636][ T40] audit: type=1400 audit(1751035123.653:443): avc: denied { connect } for pid=9061 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.984533][ T9072] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 84.987249][ T9072] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 85.013329][ T9076] binder: BC_ATTEMPT_ACQUIRE not supported [ 85.015135][ T9076] binder: 9075:9076 ioctl c0306201 2000000003c0 returned -22 [ 85.158659][ T841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 85.273044][ T40] audit: type=1400 audit(1751035124.003:444): avc: denied { read write } for pid=9096 comm="syz.0.1415" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.280501][ T40] audit: type=1400 audit(1751035124.003:445): avc: denied { open } for pid=9096 comm="syz.0.1415" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 86.171571][ T40] audit: type=1400 audit(1751035124.903:446): avc: denied { getopt } for pid=9106 comm="syz.3.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.252909][ T40] audit: type=1400 audit(1751035124.983:447): avc: denied { listen } for pid=9119 comm="syz.0.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.276471][ T9125] loop6: detected capacity change from 0 to 524288000 [ 86.326276][ T9133] team0: left allmulticast mode [ 86.328098][ T9133] team_slave_0: left allmulticast mode [ 86.329767][ T9133] team_slave_1: left allmulticast mode [ 86.560302][ T9160] tc_dump_action: action bad kind [ 86.619062][ T1345] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 86.624908][ T40] audit: type=1400 audit(1751035125.353:448): avc: denied { bind } for pid=9166 comm="syz.0.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.642634][ T9169] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 86.656800][ T40] audit: type=1400 audit(1751035125.383:449): avc: denied { append } for pid=9170 comm="syz.3.1448" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.735886][ T40] audit: type=1800 audit(1751035125.463:450): pid=9183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1455" name="dmabuf" dev="dmabuf" ino=7 res=0 errno=0 [ 86.770014][ T1345] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 86.771002][ T9187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1457'. [ 86.772270][ T1345] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 86.772286][ T1345] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.782092][ T1345] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.785461][ T1345] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 86.790064][ T1345] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 86.792520][ T1345] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 86.795815][ T1345] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.800294][ T1345] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.803662][ T1345] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 86.806353][ T40] audit: type=1400 audit(1751035125.533:451): avc: denied { read } for pid=9188 comm="syz.0.1456" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.807735][ T1345] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 86.816251][ T1345] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 86.819744][ T1345] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.823310][ T1345] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.826629][ T1345] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 86.832551][ T1345] usb 7-1: string descriptor 0 read error: -22 [ 86.834543][ T1345] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 86.837300][ T1345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.856872][ T1345] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 87.049423][ T1345] usb 7-1: USB disconnect, device number 6 [ 88.938033][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.938298][ T9190] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 89.769999][ T9190] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.778181][ T9190] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.781817][ T9190] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.783866][ T9190] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.786561][ T9190] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.006759][ T9240] syz.1.1479 uses obsolete (PF_INET,SOCK_PACKET) [ 90.127968][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 90.263595][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'. [ 90.315091][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.321261][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.323966][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.326407][ T9] usb 7-1: SerialNumber: syz [ 90.365621][ T9280] program syz.1.1498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.409271][ T1115] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 90.411643][ T1115] ata1.00: irq_stat 0x40000000 [ 90.413151][ T1115] ata1.00: failed command: ZAC MANAGEMENT OUT [ 90.415135][ T1115] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 16 [ 90.415135][ T1115] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 90.420759][ T1115] ata1.00: status: { DRDY ERR } [ 90.423072][ T1115] ata1.00: error: { ABRT } [ 90.424520][ T1115] ata1.00: device reported invalid CHS sector 0 [ 90.500238][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 90.500250][ T40] audit: type=1400 audit(1751035129.233:454): avc: denied { remove_name } for pid=9291 comm="syz.3.1503" name="file2" dev="9p" ino=35913851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.510351][ T40] audit: type=1400 audit(1751035129.233:455): avc: denied { rmdir } for pid=9291 comm="syz.3.1503" name="file2" dev="9p" ino=35913851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.535871][ T9294] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 91.018141][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.138394][ T9] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 91.144197][ T9] usb 7-1: USB disconnect, device number 7 [ 91.470445][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 91.614017][ T9359] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 91.626717][ T40] audit: type=1400 audit(1751035130.353:456): avc: denied { getopt } for pid=9360 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.828011][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.849305][ T40] audit: type=1400 audit(1751035130.583:457): avc: denied { map } for pid=9382 comm="syz.0.1542" path="socket:[28717]" dev="sockfs" ino=28717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.856145][ T40] audit: type=1400 audit(1751035130.583:458): avc: denied { read accept } for pid=9382 comm="syz.0.1542" path="socket:[28717]" dev="sockfs" ino=28717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.911905][ T9387] bridge_slave_0: invalid flags given to default FDB implementation [ 92.118135][ T24] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 92.290151][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 92.293524][ T24] usb 6-1: no configurations [ 92.295087][ T24] usb 6-1: can't read configurations, error -22 [ 92.338356][ T9413] loop5: detected capacity change from 0 to 7 [ 92.342795][ T9413] Dev loop5: unable to read RDB block 7 [ 92.344512][ T9413] loop5: AHDI p1 p2 p3 [ 92.345850][ T9413] loop5: partition table partially beyond EOD, truncated [ 92.348516][ T9413] loop5: p1 start 1601398130 is beyond EOD, truncated [ 92.351032][ T9413] loop5: p2 start 1702059890 is beyond EOD, truncated [ 92.431212][ T9417] GUP no longer grows the stack in syz.0.1558 (9417): 200000007000-20000000a000 (200000004000) [ 92.434519][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.0.1558 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 92.434534][ T9417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.434541][ T9417] Call Trace: [ 92.434545][ T9417] [ 92.434550][ T9417] dump_stack_lvl+0x16c/0x1f0 [ 92.434570][ T9417] gup_vma_lookup+0x1d2/0x220 [ 92.434588][ T9417] __get_user_pages+0x271/0x3b80 [ 92.434602][ T9417] ? kasan_save_stack+0x33/0x60 [ 92.434616][ T9417] ? kasan_save_track+0x14/0x30 [ 92.434628][ T9417] ? __kasan_kmalloc+0xaa/0xb0 [ 92.434640][ T9417] ? __kvmalloc_node_noprof+0x27b/0x620 [ 92.434653][ T9417] ? xdp_umem_create+0x652/0x1270 [ 92.434667][ T9417] ? __pfx___get_user_pages+0x10/0x10 [ 92.434676][ T9417] ? __x64_sys_setsockopt+0xbd/0x160 [ 92.434691][ T9417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.434707][ T9417] __gup_longterm_locked+0x5e7/0x1840 [ 92.434722][ T9417] ? __pfx___gup_longterm_locked+0x10/0x10 [ 92.434739][ T9417] pin_user_pages+0x13c/0x160 [ 92.434750][ T9417] ? __pfx_pin_user_pages+0x10/0x10 [ 92.434760][ T9417] ? trace_kmalloc+0x2b/0xd0 [ 92.434777][ T9417] ? xdp_umem_create+0x652/0x1270 [ 92.434793][ T9417] xdp_umem_create+0x73c/0x1270 [ 92.434811][ T9417] xsk_setsockopt+0x5b2/0x840 [ 92.434824][ T9417] ? __pfx_xsk_setsockopt+0x10/0x10 [ 92.434835][ T9417] ? __lock_acquire+0x622/0x1c90 [ 92.434855][ T9417] ? selinux_socket_setsockopt+0x6a/0x80 [ 92.434870][ T9417] ? __pfx_xsk_setsockopt+0x10/0x10 [ 92.434883][ T9417] do_sock_setsockopt+0x221/0x470 [ 92.434893][ T9417] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 92.434912][ T9417] __sys_setsockopt+0x1a0/0x230 [ 92.434928][ T9417] __x64_sys_setsockopt+0xbd/0x160 [ 92.434941][ T9417] ? do_syscall_64+0x91/0x4c0 [ 92.434956][ T9417] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.434971][ T9417] do_syscall_64+0xcd/0x4c0 [ 92.434987][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.434998][ T9417] RIP: 0033:0x7fae1498e929 [ 92.435007][ T9417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.435017][ T9417] RSP: 002b:00007fae127f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.435027][ T9417] RAX: ffffffffffffffda RBX: 00007fae14bb5fa0 RCX: 00007fae1498e929 [ 92.435034][ T9417] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 92.435040][ T9417] RBP: 00007fae14a10b39 R08: 0000000000000020 R09: 0000000000000000 [ 92.435046][ T9417] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 92.435052][ T9417] R13: 0000000000000000 R14: 00007fae14bb5fa0 R15: 00007ffdc5f028c8 [ 92.435066][ T9417] [ 92.549629][ T40] audit: type=1400 audit(1751035131.273:459): avc: denied { write } for pid=9423 comm="syz.2.1561" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.567470][ T40] audit: type=1400 audit(1751035131.293:460): avc: denied { bind } for pid=9427 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.631572][ T9439] netlink: 'syz.2.1568': attribute type 1 has an invalid length. [ 92.633957][ T9439] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1568'. [ 92.661712][ T40] audit: type=1400 audit(1751035131.393:461): avc: denied { execmod } for pid=9444 comm="syz.2.1571" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 92.769321][ T9463] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1580'. [ 93.006763][ T9500] netlink: 'syz.3.1599': attribute type 5 has an invalid length. [ 93.021394][ T9500] netlink: 'syz.3.1599': attribute type 5 has an invalid length. [ 93.098756][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.195136][ T9530] sch_fq: defrate 4294967292 ignored. [ 93.275189][ T9544] tipc: Started in network mode [ 93.276778][ T9544] tipc: Node identity ac14140f, cluster identity 4711 [ 93.279983][ T9544] tipc: New replicast peer: 255.255.255.255 [ 93.282281][ T9544] tipc: Enabled bearer , priority 10 [ 93.284287][ T9547] bridge_slave_0: invalid flags given to default FDB implementation [ 93.286755][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 93.290546][ T9544] tipc: Disabling bearer [ 93.356880][ T9560] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1626'. [ 93.414197][ T40] audit: type=1400 audit(1751035132.143:462): avc: denied { create } for pid=9568 comm="syz.0.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 93.428110][ T40] audit: type=1400 audit(1751035132.153:463): avc: denied { ioctl } for pid=9568 comm="syz.0.1630" path="socket:[28904]" dev="sockfs" ino=28904 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 93.446551][ T9575] xt_hashlimit: size too large, truncated to 1048576 [ 93.623365][ T9607] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1647'. [ 93.626202][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 93.627379][ T9610] vivid-000: disconnect [ 93.633370][ T9610] vivid-000: reconnect [ 93.742240][ T9634] netlink: 'syz.3.1659': attribute type 11 has an invalid length. [ 93.744846][ T9634] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1659'. [ 93.750394][ T9634] netlink: 'syz.3.1659': attribute type 10 has an invalid length. [ 93.771936][ T9634] team0: Port device wlan1 added [ 93.780402][ T9633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.857175][ T9644] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.908134][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.318910][ T9690] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 94.465185][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 94.848581][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 94.850857][ T1115] ata1: failed to read log page 10h (errno=-5) [ 94.852781][ T1115] ata1.00: exception Emask 0x1 SAct 0x10 SErr 0x0 action 0x0 [ 94.855040][ T1115] ata1.00: irq_stat 0x40000000 [ 94.856494][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 94.859048][ T1115] ata1.00: cmd 61/18:20:6e:06:10/00:00:00:00:00/40 tag 4 ncq dma 12288 out [ 94.859048][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 94.864477][ T1115] ata1.00: status: { DRDY } [ 94.866617][ T1115] ata1.00: configured for UDMA/100 [ 94.869655][ T1115] ata1: EH complete [ 95.115732][ T9786] bridge_slave_1 (unregistering): left promiscuous mode [ 95.117959][ T9786] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.161095][ T9794] xt_hashlimit: size too large, truncated to 1048576 [ 95.206978][ T9799] blkio.reset_stats is deprecated [ 95.214935][ T9800] : renamed from bridge_slave_0 (while UP) [ 95.523221][ T9851] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 95.525117][ T9851] syzkaller1: owner set to 0 [ 95.605359][ T9855] __nla_validate_parse: 6 callbacks suppressed [ 95.605370][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1763'. [ 95.677581][ T9855] team0 (unregistering): Port device team_slave_0 removed [ 95.677971][ T6019] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.686432][ T9855] team0 (unregistering): Port device team_slave_1 removed [ 95.695626][ T9855] team0 (unregistering): Port device wlan1 removed [ 95.782247][ T9865] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1768'. [ 95.828016][ T6019] usb 5-1: Using ep0 maxpacket: 8 [ 95.833569][ T6019] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 95.836227][ T6019] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.839810][ T6019] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.842800][ T6019] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.845759][ T6019] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.850172][ T6019] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.853130][ T6019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.868604][ T841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 95.879393][ T9871] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 95.881369][ T9871] syzkaller1: linktype set to 6 [ 95.978086][ T5296] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.060330][ T6019] usb 5-1: GET_CAPABILITIES returned 0 [ 96.062307][ T6019] usbtmc 5-1:16.0: can't read capabilities [ 96.266465][ T1345] usb 5-1: USB disconnect, device number 6 [ 96.377980][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.378004][ T5296] Bluetooth: hci4: command 0x1003 tx timeout [ 96.902103][ T9890] sp0: Synchronizing with TNC [ 96.911895][ T1345] IPVS: starting estimator thread 0... [ 96.998032][ T9893] IPVS: using max 45 ests per chain, 108000 per kthread [ 97.288008][ T1345] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 97.439154][ T1345] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 97.442181][ T1345] usb 6-1: config 0 interface 0 has no altsetting 0 [ 97.445732][ T1345] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.448622][ T1345] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 97.451141][ T1345] usb 6-1: Product: syz [ 97.452454][ T1345] usb 6-1: Manufacturer: syz [ 97.453910][ T1345] usb 6-1: SerialNumber: syz [ 97.462561][ T1345] usb 6-1: config 0 descriptor?? [ 97.466479][ T1345] usb 6-1: selecting invalid altsetting 0 [ 97.673730][ T24] usb 6-1: USB disconnect, device number 5 [ 98.008633][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 98.149520][ T9930] netlink: 'syz.3.1799': attribute type 10 has an invalid length. [ 98.153097][ T9930] bond0: (slave bond_slave_0): Releasing backup interface [ 98.208066][ T9934] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1801'. [ 98.235601][ T9936] sg_write: process 937 (syz.3.1802) changed security contexts after opening file descriptor, this is not allowed. [ 98.423942][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'. [ 98.595225][ T9950] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 98.599654][ T9950] bond0: (slave bond_slave_0): Releasing backup interface [ 98.653047][ T9954] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1811'. [ 98.958005][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 99.109436][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 99.112555][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 99.116328][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.119235][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 99.121758][ T9] usb 8-1: Product: syz [ 99.123074][ T9] usb 8-1: Manufacturer: syz [ 99.124534][ T9] usb 8-1: SerialNumber: syz [ 99.127254][ T9] usb 8-1: config 0 descriptor?? [ 99.131529][ T9] usb 8-1: selecting invalid altsetting 0 [ 99.204407][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 99.334222][ T9] usb 8-1: USB disconnect, device number 7 [ 99.349232][ T9972] bond0: (slave bond2): Error -95 calling ndo_bpf [ 99.353759][ T9972] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 99.356844][ T9972] bond0: (slave bond_slave_0): Releasing backup interface [ 99.410188][ T9978] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1822'. [ 99.478926][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 99.665969][T10001] netlink: 'syz.2.1830': attribute type 10 has an invalid length. [ 99.671011][T10001] bond0: (slave bond_slave_0): Releasing backup interface [ 99.739274][T10012] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1834'. [ 102.187265][T10108] bridge0: entered promiscuous mode [ 102.367710][T10138] kvm: kvm [10136]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008f) [ 102.541843][T10171] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 102.946612][T10211] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 103.036344][T10227] loop6: detected capacity change from 0 to 524287487 [ 103.039195][T10227] buffer_io_error: 13 callbacks suppressed [ 103.039203][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.039622][T10223] ata1.00: invalid multi_count 128 ignored [ 103.041082][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.047814][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.050371][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.052809][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.055276][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.057733][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.060392][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.063035][T10227] ldm_validate_partition_table(): Disk read failed. [ 103.065135][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.067595][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.070560][T10227] Dev loop6: unable to read RDB block 0 [ 103.076906][T10227] loop6: unable to read partition table [ 103.080720][T10227] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 103.114789][ T119] ata1.00: invalid multi_count 128 ignored [ 103.236592][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 103.242882][ T5949] block nbd1: Receive control failed (result -32) [ 103.441009][T10279] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 103.585742][T10298] overlay: filesystem on ./bus not supported [ 103.758025][T10313] block nbd2: server does not support multiple connections per device. [ 103.761885][T10313] block nbd2: shutting down sockets [ 104.548318][ T1345] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 104.687195][T10389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2015'. [ 104.700387][ T1345] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.703429][ T1345] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.706602][ T1345] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.710218][ T1345] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.713650][ T1345] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 104.719611][ T1345] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.722472][ T1345] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.725075][ T1345] usb 8-1: Product: syz [ 104.726431][ T1345] usb 8-1: Manufacturer: syz [ 104.730657][ T1345] cdc_wdm 8-1:1.0: skipping garbage [ 104.732372][ T1345] cdc_wdm 8-1:1.0: skipping garbage [ 104.738566][ T1345] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 104.740807][ T1345] cdc_wdm 8-1:1.0: Unknown control protocol [ 104.757986][ T60] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 104.801613][T10405] CIFS mount error: No usable UNC path provided in device string! [ 104.801613][T10405] [ 104.805577][T10405] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 104.909172][ T60] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.912315][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 104.915935][ T60] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.919590][ T60] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.922913][ T60] usb 7-1: Product: syz [ 104.924371][ T60] usb 7-1: Manufacturer: syz [ 104.926083][ T60] usb 7-1: SerialNumber: syz [ 104.935614][ T60] usb 7-1: config 0 descriptor?? [ 104.942425][ T60] usb 7-1: selecting invalid altsetting 0 [ 105.146726][ T1345] usb 7-1: USB disconnect, device number 8 [ 105.823840][T10450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.827101][T10450] bond0: (slave bond1): Enslaving as an active interface with a down link [ 106.018836][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.170680][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.173519][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.176024][ T10] usb 5-1: Product: syz [ 106.177350][ T10] usb 5-1: Manufacturer: syz [ 106.178921][ T10] usb 5-1: SerialNumber: syz [ 106.183136][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 106.193035][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 106.298617][ T1146] bond0: (slave bond1): link status definitely up [ 106.300742][ T1146] bond0: active interface up! [ 106.888160][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'. [ 106.957341][T10463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.961515][T10463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.975381][T10465] syz.2.2049 (10465): drop_caches: 2 [ 107.268330][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 107.271821][ T9] ath9k_htc: Failed to initialize the device [ 107.292269][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 107.296630][ T24] usb 5-1: USB disconnect, device number 7 [ 107.328147][ T1345] usb 8-1: USB disconnect, device number 8 [ 107.390426][T10495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2059'. [ 107.393352][T10495] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.395600][T10495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.186409][T10523] tun0: tun_chr_ioctl cmd 1074025675 [ 108.188565][T10523] tun0: persist disabled [ 108.442232][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2096'. [ 108.445821][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2096'. [ 108.639181][T10584] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 108.670313][T10592] netlink: 'syz.0.2105': attribute type 9 has an invalid length. [ 108.672758][T10592] netlink: 212012 bytes leftover after parsing attributes in process `syz.0.2105'. [ 108.782048][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 109.107994][ T1345] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 109.273026][ T1345] usb 8-1: unable to get BOS descriptor or descriptor too short [ 109.276138][ T1345] usb 8-1: no configurations [ 109.277641][ T1345] usb 8-1: can't read configurations, error -22 [ 109.900538][T10650] bridge0: entered promiscuous mode [ 109.903290][T10651] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 109.905500][T10651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.910776][T10651] vhci_hcd vhci_hcd.0: Device attached [ 110.013908][T10668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2143'. [ 110.138303][ T92] bond0: (slave bond1): interface is now down [ 110.140824][ T92] bond0: now running without any active interface! [ 110.158005][ T5758] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 110.160377][ T60] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 110.330339][ T5758] usb 7-1: config 0 has no interfaces? [ 110.332109][ T5758] usb 7-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 110.335139][ T5758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.338948][ T5758] usb 7-1: config 0 descriptor?? [ 110.542858][T10652] usb 41-1: recv xbuf, 0 [ 110.543209][ T24] usb 7-1: USB disconnect, device number 9 [ 110.547305][ T92] vhci_hcd: stop threads [ 110.549139][ T92] vhci_hcd: release socket [ 110.551436][ T92] vhci_hcd: disconnect device [ 110.608259][ T60] vhci_hcd: vhci_device speed not set [ 111.007986][ T841] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 111.158025][ T841] usb 6-1: Using ep0 maxpacket: 16 [ 111.160892][ T841] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 111.163381][ T841] usb 6-1: config 0 has no interface number 0 [ 111.165306][ T841] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.168825][ T841] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.172970][ T841] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 111.175769][ T841] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 111.178401][ T841] usb 6-1: Product: syz [ 111.179723][ T841] usb 6-1: SerialNumber: syz [ 111.182431][ T841] usb 6-1: config 0 descriptor?? [ 111.185644][ T841] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 111.188725][ T841] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input17 [ 111.358613][ T24] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 111.389516][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 111.520038][ T24] usb 8-1: config 0 has an invalid interface number: 106 but max is 0 [ 111.522619][ T24] usb 8-1: config 0 has no interface number 0 [ 111.524541][ T24] usb 8-1: config 0 interface 106 has no altsetting 0 [ 111.528165][ T24] usb 8-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 111.530976][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.533458][ T24] usb 8-1: Product: syz [ 111.534789][ T24] usb 8-1: Manufacturer: syz [ 111.536265][ T24] usb 8-1: SerialNumber: syz [ 111.540325][ T24] usb 8-1: config 0 descriptor?? [ 111.594237][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.594412][ T10] usb 6-1: USB disconnect, device number 6 [ 111.596420][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 111.602955][ T10] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 111.750810][ T24] usb 8-1: USB disconnect, device number 11 [ 111.905134][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2159'. [ 112.067217][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 112.071642][ T61] bond0: (slave bond_slave_1): interface is now down [ 112.074031][ T61] bond0: (slave bond2): interface is now down [ 112.078536][ T61] bond0: now running without any active interface! [ 112.314855][T10741] bond0: entered promiscuous mode [ 112.316624][T10741] bond_slave_1: entered promiscuous mode [ 112.320108][T10741] batadv0: entered promiscuous mode [ 112.322587][T10741] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 112.325550][T10741] bond0: left promiscuous mode [ 112.327134][T10741] bond_slave_1: left promiscuous mode [ 112.330653][T10741] batadv0: left promiscuous mode [ 112.477713][T10751] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 112.974494][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2204'. [ 113.011573][T10812] 9p: Unknown uid 00000000004294967295 [ 113.030427][T10814] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 113.329029][ T841] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.498023][ T841] usb 5-1: Using ep0 maxpacket: 16 [ 113.501044][ T841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.504162][ T841] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.508501][ T841] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 113.511389][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.515413][ T841] usb 5-1: config 0 descriptor?? [ 113.519537][ T841] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input18 [ 113.684340][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2224'. [ 113.711043][T10853] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 113.775992][ T5331] bcm5974 5-1:0.0: could not read from device [ 113.782809][T10818] bcm5974 5-1:0.0: could not read from device [ 113.789899][ T5331] bcm5974 5-1:0.0: could not read from device [ 113.793894][ T5331] bcm5974 5-1:0.0: could not read from device [ 113.797763][ T5331] bcm5974 5-1:0.0: could not read from device [ 113.798868][ T841] usb 5-1: USB disconnect, device number 8 [ 114.368356][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 114.527994][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 114.530698][ T24] usb 7-1: config 0 has no interfaces? [ 114.532291][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 114.534810][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.535816][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 114.535826][ T40] audit: type=1326 audit(1751035153.263:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.0.2241" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae1498e929 code=0x0 [ 114.542295][ T24] usb 7-1: config 0 descriptor?? [ 114.646177][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2234'. [ 114.752684][ T24] usb 7-1: USB disconnect, device number 10 [ 115.108302][T10903] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 115.232598][T10917] openvswitch: netlink: Multiple metadata blocks provided [ 115.367592][T10925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2256'. [ 115.425327][T10939] loop6: detected capacity change from 0 to 63 [ 115.429386][T10939] buffer_io_error: 7 callbacks suppressed [ 115.429396][T10939] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.433446][T10939] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.435790][T10939] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.438997][T10939] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.441641][T10939] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.443952][T10939] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.446278][T10939] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.449686][T10939] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.452188][T10939] ldm_validate_partition_table(): Disk read failed. [ 115.454316][T10939] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.456835][T10939] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.459631][T10939] Dev loop6: unable to read RDB block 0 [ 115.461721][T10939] loop6: unable to read partition table [ 115.464651][T10939] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 115.878024][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 116.037998][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 116.040810][ T24] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 116.043326][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 116.046696][ T24] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 116.050514][ T24] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 116.054557][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.058161][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 116.060963][ T24] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 116.065410][ T24] usb 7-1: Product: syz [ 116.066755][ T24] usb 7-1: Manufacturer: syz [ 116.069844][ T24] usb 7-1: SerialNumber: syz [ 116.072881][ T24] usb 7-1: config 0 descriptor?? [ 116.075971][ T24] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 116.080874][ T24] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 116.290500][T11034] binder: BC_ATTEMPT_ACQUIRE not supported [ 116.292374][T11034] binder: 11031:11034 ioctl c0306201 2000000003c0 returned -22 [ 116.322129][T11037] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 116.324742][T11037] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 116.335130][ C3] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 116.337222][ T60] usb 7-1: USB disconnect, device number 11 [ 116.339692][T10963] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 116.341964][ T60] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 116.416106][T11050] hsr0: entered promiscuous mode [ 116.417789][T11050] macsec2: entered allmulticast mode [ 116.419953][T11050] hsr0: entered allmulticast mode [ 116.421555][T11050] hsr_slave_0: entered allmulticast mode [ 116.423311][T11050] hsr_slave_1: entered allmulticast mode [ 117.096104][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2325'. [ 117.163664][T11076] batadv_slave_1: entered promiscuous mode [ 117.166518][T11075] batadv_slave_1: left promiscuous mode [ 117.331799][T11105] misc userio: Begin command sent, but we're already running [ 117.538439][T11120] xt_hashlimit: size too large, truncated to 1048576 [ 117.597024][T11126] bridge0: port 3(syz_tun) entered blocking state [ 117.601855][T11126] bridge0: port 3(syz_tun) entered disabled state [ 117.603953][T11126] syz_tun: entered allmulticast mode [ 117.606431][T11126] syz_tun: entered promiscuous mode [ 117.608536][T11126] bridge0: port 3(syz_tun) entered blocking state [ 117.610593][T11126] bridge0: port 3(syz_tun) entered forwarding state [ 117.893904][ T75] Bluetooth: hci4: Frame reassembly failed (-84) [ 117.897121][T11151] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 118.000495][T11159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2365'. [ 118.138285][T11170] tc_dump_action: action bad kind [ 118.163147][T11172] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 118.459690][ T60] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 118.598096][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 118.609189][ T60] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 118.611514][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 118.614789][ T60] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.618631][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 118.622264][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 118.626342][ T60] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 118.628978][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 118.632729][ T60] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.636628][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 118.640556][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 118.645158][ T60] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 118.647443][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 118.651279][ T60] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.654847][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 118.658292][ T60] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 118.663928][ T60] usb 5-1: string descriptor 0 read error: -22 [ 118.665917][ T60] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 118.668970][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.677317][ T60] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 118.751179][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.757627][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.761523][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 118.764795][ T9] usb 6-1: SerialNumber: syz [ 118.881873][ T10] usb 5-1: USB disconnect, device number 9 [ 119.412479][T11204] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 119.582742][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 119.589281][ T9] usb 6-1: USB disconnect, device number 7 [ 119.898016][ T5296] Bluetooth: hci4: command 0x1003 tx timeout [ 119.898036][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 120.395810][T11281] loop5: detected capacity change from 0 to 7 [ 120.398683][T11281] Dev loop5: unable to read RDB block 7 [ 120.400434][T11281] loop5: AHDI p1 p2 p3 [ 120.401766][T11281] loop5: partition table partially beyond EOD, truncated [ 120.404153][T11281] loop5: p1 start 1601398130 is beyond EOD, truncated [ 120.406278][T11281] loop5: p2 start 1702059890 is beyond EOD, truncated [ 120.832208][T11319] bridge_slave_0: invalid flags given to default FDB implementation [ 120.899221][T11325] sch_fq: defrate 4294967292 ignored. [ 121.085421][T11350] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2454'. [ 121.445982][T11395] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2476'. [ 121.449131][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 121.556441][T11414] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 121.615964][T11424] netlink: 'syz.2.2491': attribute type 11 has an invalid length. [ 121.630007][T11424] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2491'. [ 121.641588][T11424] netlink: 'syz.2.2491': attribute type 10 has an invalid length. [ 121.645882][T11423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.667859][T11433] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 121.671293][T11433] syzkaller0: group set to 60929 [ 121.722439][T11442] tipc: Started in network mode [ 121.724042][T11442] tipc: Node identity ac14140f, cluster identity 4711 [ 121.726285][T11442] tipc: New replicast peer: 255.255.255.255 [ 121.728462][T11442] tipc: Enabled bearer , priority 10 [ 121.732690][T11438] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.736378][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2505'. [ 121.739319][T11442] tipc: Disabling bearer [ 122.892693][T11510] vivid-000: disconnect [ 122.894676][T11510] vivid-000: reconnect [ 122.988902][T11523] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2541'. [ 123.032610][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2538'. [ 123.148616][T11548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2548'. [ 123.175321][T11553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2549'. [ 123.281706][T11566] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2555'. [ 123.534476][T11596] xt_hashlimit: size too large, truncated to 1048576 [ 123.537993][ T24] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 123.589684][T11602] : renamed from bridge_slave_0 (while UP) [ 123.693908][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 123.697479][ T24] usb 7-1: no configurations [ 123.699406][ T24] usb 7-1: can't read configurations, error -22 [ 123.958564][T11649] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 123.960484][T11649] syzkaller1: owner set to 0 [ 124.036802][T11653] team0 (unregistering): Port device team_slave_0 removed [ 124.043566][T11653] team0 (unregistering): Port device team_slave_1 removed [ 124.164230][T11661] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 124.166247][T11661] syzkaller1: linktype set to 6 [ 124.168395][ T841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 124.212473][T11671] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 124.438057][ T841] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 124.588029][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 124.590885][ T841] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 124.593487][ T841] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.596483][ T841] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.599635][ T841] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.602680][ T841] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.606679][ T841] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.609696][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.819477][ T841] usb 6-1: GET_CAPABILITIES returned 0 [ 124.821261][ T841] usbtmc 6-1:16.0: can't read capabilities [ 125.024665][ T6030] usb 6-1: USB disconnect, device number 8 [ 125.225134][T11683] veth1_to_batadv: entered promiscuous mode [ 125.514108][T11714] loop6: detected capacity change from 0 to 524287487 [ 125.516528][T11714] buffer_io_error: 13 callbacks suppressed [ 125.516537][T11714] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.521280][T11714] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.525379][T11714] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.527807][T11714] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.532245][T11714] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.534722][T11714] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.537138][T11714] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.542331][T11714] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.544704][T11714] ldm_validate_partition_table(): Disk read failed. [ 125.546727][T11714] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.550253][T11714] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.552818][T11714] Dev loop6: unable to read RDB block 0 [ 125.554814][T11714] loop6: unable to read partition table [ 125.556792][T11714] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 125.618079][T11714] loop6: detected capacity change from 524287487 to 33554432 [ 126.215044][ T40] audit: type=1400 audit(1751035164.943:469): avc: denied { setopt } for pid=11743 comm="syz.2.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.218060][ T5296] Bluetooth: hci4: command 0x1003 tx timeout [ 126.221673][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 126.351375][ T40] audit: type=1400 audit(1751035165.083:470): avc: denied { connect } for pid=11759 comm="syz.2.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.357384][ T40] audit: type=1400 audit(1751035165.083:471): avc: denied { bind } for pid=11759 comm="syz.2.2648" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.363682][ T40] audit: type=1400 audit(1751035165.083:472): avc: denied { name_bind } for pid=11759 comm="syz.2.2648" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 126.371511][ T40] audit: type=1400 audit(1751035165.083:473): avc: denied { node_bind } for pid=11759 comm="syz.2.2648" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 126.373232][T11763] netlink: 'syz.3.2649': attribute type 11 has an invalid length. [ 126.413485][T11770] veth1_to_bond: default FDB implementation only supports local addresses [ 126.444518][T11776] __nla_validate_parse: 4 callbacks suppressed [ 126.444534][T11776] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2654'. [ 126.524826][T11790] netlink: 'syz.3.2661': attribute type 2 has an invalid length. [ 126.547374][T11788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.621611][T11788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.691282][T11788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.765896][T11788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.854454][T11788] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.861963][T11788] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.869471][T11788] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.876426][T11788] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.082571][ T40] audit: type=1400 audit(1751035165.813:474): avc: denied { block_suspend } for pid=11853 comm="syz.1.2692" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.138153][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 127.281461][ T40] audit: type=1400 audit(1751035166.013:475): avc: denied { load_policy } for pid=11875 comm="syz.0.2702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 127.292816][T11876] SELinux: failed to load policy [ 127.298093][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 127.300857][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 127.303395][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.306423][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.314474][T11880] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2704'. [ 127.317846][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.321058][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.325097][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.328212][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.432512][T11896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2711'. [ 127.435386][ T75] ------------[ cut here ]------------ [ 127.437332][ T75] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 127.440802][ T75] WARNING: CPU: 2 PID: 75 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 127.443845][ T75] Modules linked in: [ 127.445362][ T75] CPU: 2 UID: 0 PID: 75 Comm: kworker/u32:4 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 127.450313][ T75] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.453663][ T75] Workqueue: bond0 bond_mii_monitor [ 127.455358][ T75] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 127.457260][ T75] Code: 05 ff ff ff e8 a4 d3 58 f8 c6 05 66 36 2d 07 01 90 ba 48 00 00 00 48 c7 c6 80 a0 e3 8c 48 c7 c7 20 a0 e3 8c e8 c4 93 17 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 48 a8 90 e8 3e b1 bf f8 e9 [ 127.463601][ T75] RSP: 0018:ffffc9000165f9f0 EFLAGS: 00010286 [ 127.465572][ T75] RAX: 0000000000000000 RBX: ffff88802b0d0000 RCX: ffffffff817ae248 [ 127.468110][ T75] RDX: ffff888022e7a440 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 127.470627][ T75] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 127.473138][ T75] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff920002cbf48 [ 127.475590][ T75] R13: ffff88802b0d0cc5 R14: ffffffff8c591aa0 R15: ffffffff899c8c50 [ 127.478185][ T75] FS: 0000000000000000(0000) GS:ffff8880d6952000(0000) knlGS:0000000000000000 [ 127.481001][ T75] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.483071][ T75] CR2: 000000110c25d2a4 CR3: 0000000052299000 CR4: 0000000000352ef0 [ 127.485565][ T75] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.488448][ T75] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.490897][ T75] Call Trace: [ 127.491948][ T75] [ 127.492895][ T75] ethtool_op_get_link+0x1d/0x70 [ 127.494464][ T75] bond_check_dev_link+0x3f9/0x710 [ 127.496055][ T75] ? stack_trace_save+0x8e/0xc0 [ 127.497602][ T75] ? __pfx_bond_check_dev_link+0x10/0x10 [ 127.499521][ T75] bond_mii_monitor+0x3c0/0x2dc0 [ 127.501132][ T75] ? __pfx_bond_mii_monitor+0x10/0x10 [ 127.502846][ T75] ? rcu_is_watching+0x12/0xc0 [ 127.504338][ T75] process_one_work+0x9cc/0x1b70 [ 127.505883][ T75] ? __pfx_process_one_work+0x10/0x10 [ 127.507554][ T75] ? assign_work+0x1a0/0x250 [ 127.509047][ T75] worker_thread+0x6c8/0xf10 [ 127.510530][ T75] ? __kthread_parkme+0x19e/0x250 [ 127.512147][ T75] ? __pfx_worker_thread+0x10/0x10 [ 127.513806][ T75] kthread+0x3c2/0x780 [ 127.515133][ T75] ? __pfx_kthread+0x10/0x10 [ 127.516560][ T75] ? rcu_is_watching+0x12/0xc0 [ 127.518533][ T75] ? __pfx_kthread+0x10/0x10 [ 127.519973][ T75] ret_from_fork+0x5d4/0x6f0 [ 127.521438][ T75] ? __pfx_kthread+0x10/0x10 [ 127.522887][ T75] ret_from_fork_asm+0x1a/0x30 [ 127.524391][ T75] [ 127.525436][ T75] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.527687][ T75] CPU: 2 UID: 0 PID: 75 Comm: kworker/u32:4 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 127.531343][ T75] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.534640][ T75] Workqueue: bond0 bond_mii_monitor [ 127.536223][ T75] Call Trace: [ 127.537284][ T75] [ 127.538216][ T75] dump_stack_lvl+0x3d/0x1f0 [ 127.539649][ T75] panic+0x71c/0x800 [ 127.540912][ T75] ? __pfx_panic+0x10/0x10 [ 127.542320][ T75] ? show_trace_log_lvl+0x29b/0x3e0 [ 127.543950][ T75] ? check_panic_on_warn+0x1f/0xb0 [ 127.545553][ T75] ? __linkwatch_sync_dev+0x1ed/0x230 [ 127.547221][ T75] check_panic_on_warn+0xab/0xb0 [ 127.548772][ T75] __warn+0xf6/0x3c0 [ 127.550008][ T75] ? preempt_schedule_notrace+0x62/0xe0 [ 127.551730][ T75] ? __linkwatch_sync_dev+0x1ed/0x230 [ 127.553409][ T75] report_bug+0x3c3/0x580 [ 127.554773][ T75] ? __linkwatch_sync_dev+0x1ed/0x230 [ 127.556358][ T75] handle_bug+0x184/0x210 [ 127.557672][ T75] exc_invalid_op+0x17/0x50 [ 127.559096][ T75] asm_exc_invalid_op+0x1a/0x20 [ 127.560567][ T75] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 127.562336][ T75] Code: 05 ff ff ff e8 a4 d3 58 f8 c6 05 66 36 2d 07 01 90 ba 48 00 00 00 48 c7 c6 80 a0 e3 8c 48 c7 c7 20 a0 e3 8c e8 c4 93 17 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 48 a8 90 e8 3e b1 bf f8 e9 [ 127.568009][ T75] RSP: 0018:ffffc9000165f9f0 EFLAGS: 00010286 [ 127.569852][ T75] RAX: 0000000000000000 RBX: ffff88802b0d0000 RCX: ffffffff817ae248 [ 127.572196][ T75] RDX: ffff888022e7a440 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 127.574610][ T75] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 127.576985][ T75] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff920002cbf48 [ 127.579355][ T75] R13: ffff88802b0d0cc5 R14: ffffffff8c591aa0 R15: ffffffff899c8c50 [ 127.581715][ T75] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 127.583466][ T75] ? __warn_printk+0x198/0x350 [ 127.584987][ T75] ? __warn_printk+0x1a5/0x350 [ 127.586497][ T75] ethtool_op_get_link+0x1d/0x70 [ 127.588046][ T75] bond_check_dev_link+0x3f9/0x710 [ 127.589653][ T75] ? stack_trace_save+0x8e/0xc0 [ 127.591164][ T75] ? __pfx_bond_check_dev_link+0x10/0x10 [ 127.592915][ T75] bond_mii_monitor+0x3c0/0x2dc0 [ 127.594468][ T75] ? __pfx_bond_mii_monitor+0x10/0x10 [ 127.596149][ T75] ? rcu_is_watching+0x12/0xc0 [ 127.597622][ T75] process_one_work+0x9cc/0x1b70 [ 127.599179][ T75] ? __pfx_process_one_work+0x10/0x10 [ 127.600865][ T75] ? assign_work+0x1a0/0x250 [ 127.602329][ T75] worker_thread+0x6c8/0xf10 [ 127.603778][ T75] ? __kthread_parkme+0x19e/0x250 [ 127.605368][ T75] ? __pfx_worker_thread+0x10/0x10 [ 127.606964][ T75] kthread+0x3c2/0x780 [ 127.608257][ T75] ? __pfx_kthread+0x10/0x10 [ 127.609721][ T75] ? rcu_is_watching+0x12/0xc0 [ 127.611228][ T75] ? __pfx_kthread+0x10/0x10 [ 127.612677][ T75] ret_from_fork+0x5d4/0x6f0 [ 127.614167][ T75] ? __pfx_kthread+0x10/0x10 [ 127.615616][ T75] ret_from_fork_asm+0x1a/0x30 [ 127.617143][ T75] [ 127.619047][ T75] Kernel Offset: disabled [ 127.620385][ T75] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:35:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff848d6716 RDX=00000000000001ff RSI=ffff888039f3e5e0 RDI=ffffc9000327fe90 RBP=ffffc9000327fe90 RSP=ffffc9000327fe20 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000000001ff R13=ffff888039f3e5e0 R14=00000000000001ff R15=ffff888057674000 RIP=ffffffff849bcea0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557f66e500 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557f6895c8 CR3=00000000522ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080410001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc5f02c50 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae14a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae14a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae14a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae14a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae14a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae14a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 253d746e61772064 7a253d6461657200 7269646b6d206f74 2064656c69616600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0018514b44520541 5f00184144405700 574c414e48054a51 054140494c444300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006c40000 RBX=ffff888106a88000 RCX=ffffffff819c9c07 RDX=1ffff11020d5125a RSI=ffffffff86a899ff RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc900006a0eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff90a81360 R13=dffffc0000000000 R14=ffff888106a892d0 R15=0000000000000000 RIP=ffffffff86a89a27 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557f66e808 CR3=0000000034cd9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a96000000010000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000080008 0007000c00080000 0000000000100000 0104000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a95000000200000 0010000400000000 0000000000080016 0010000000140100 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6fe2000000020300 0000000000010000 000c0000000a0004 0008000f0010000a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000003e60000 000800040000000a 0008000000200000 004c000000600000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080000000040000 0000000000000000 02a900000000018c ba80000000140000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001c0000000e0014 000c000000080004 001c000e00000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffde00000000 ffffffff81cf6fdd ffffffff81cf6fe2 ZMM25=5eeecaf35eeecaf3 5eeecaf35eeecaf3 5eeecaf35eeecaf3 5eeecaf35eeecaf3 5eeecaf35eeecaf3 5eeecaf35eeecaf3 5eeecaf35eeecaf3 5eeecaf35eeecaf3 ZMM26=789e6652789e6652 789e6652789e6652 789e6652789e6652 789e6652789e6652 789e6652789e6652 789e6652789e6652 789e6652789e6652 789e6652789e6652 ZMM27=7edbfa307edbfa30 7edbfa307edbfa30 7edbfa307edbfa30 7edbfa307edbfa30 7edbfa307edbfa30 7edbfa307edbfa30 7edbfa307edbfa30 7edbfa307edbfa30 ZMM28=000000700000006f 0000006e0000006d 0000006c0000006b 0000006a00000069 0000006800000067 0000006600000065 0000006400000063 0000006200000061 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b40e0000b40e0000 b40e0000b40e0000 b40e0000b40e0000 b40e0000b40e0000 b40e0000b40e0000 b40e0000b40e0000 b40e0000b40e0000 b40e0000b40e0000 info registers vcpu 2 CPU#2 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bfa95 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc9000165f360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000044 R14=ffffffff9b0882e0 R15=ffffffff855bfa30 RIP=ffffffff855bfabf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c25d2a4 CR3=0000000052299000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed49c01c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aea211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aea211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aea211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aea211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aea211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aea211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000013425f RBX=0000000000000003 RCX=ffffffff8b80dc59 RDX=0000000000000000 RSI=ffffffff8de1a49e RDI=ffffffff8c157ee0 RBP=ffffed1003cd6000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e6b0000 R14=ffffffff90a81650 R15=0000000000000000 RIP=ffffffff8b80c7bf RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c348be0 CR3=0000000052086000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffaf179bd0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0accc11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0accc11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0accc11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0accc11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0accc11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0accc11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000