last executing test programs: 5.567118476s ago: executing program 1 (id=345): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffff, 0x0, 0x0, 0x17}) syz_open_pts(r0, 0x101000) 5.566913619s ago: executing program 1 (id=346): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) 3.012966404s ago: executing program 2 (id=361): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "a3c815a04334ca91", "228900d6f400000000000000ff0000e1", "a2dd08f5", "b64268f6361524d4"}, 0x28) 2.873056281s ago: executing program 2 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) flistxattr(r0, &(0x7f0000000080)=""/114, 0x72) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) write$binfmt_aout(r1, 0x0, 0x31c8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = syz_open_dev$dri(0x0, 0xd21, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.542452651s ago: executing program 0 (id=366): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000980)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.439649261s ago: executing program 3 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df659b977f16d875fcc707b3cbb7b7a9c1d65d36636748dffc9414d25c561e46fe57c40e41404929394b03cdee6a1b0981334afa94d03d91841c75a69c2069ba4bbee2bf537a1fc5b34c0c5058d862", 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x4006c, r0}, 0x38) 2.292683182s ago: executing program 3 (id=369): socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2.242747248s ago: executing program 3 (id=370): r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 2.242498082s ago: executing program 3 (id=371): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x80000) 1.719043047s ago: executing program 1 (id=372): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00'], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x80003, 0x7fff, 0x7, 0x80000000, 0xa72, 0x0, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x4ed1, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f71, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x0, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x80, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0xfffffffc, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.651956781s ago: executing program 0 (id=373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.65175203s ago: executing program 2 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9f0000000000000030000000300000000400000002000000000000110300000000000000000800000500000d000000000000000000000000020000000000000c020000000000610000000000"], 0x0, 0x4c, 0x0, 0x0, 0xffffffff}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) 1.492329086s ago: executing program 0 (id=375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f5000000000000000000000004000045"], 0x58) 1.492063132s ago: executing program 1 (id=376): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x6, 0xffffff7f, 0x7, 0x1, 0x3, "516b81a561a9e376edd19405cf7fa0282354df", 0x3, 0x3}) 1.49189229s ago: executing program 0 (id=377): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.491745896s ago: executing program 0 (id=378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.202981062s ago: executing program 3 (id=379): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a00)={0x0, 0x2e0, "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"}, &(0x7f0000000180)=0x2e8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01120000000000000000010000000900010073797a30000000000900030073797a310000000014000480080002400000000008000140"], 0xf4}, 0x1, 0x0, 0x0, 0xd9}, 0x0) 592.937851ms ago: executing program 2 (id=380): mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc0e99db6de761fc6, 0x1) truncate(&(0x7f0000000000)='./file0\x00', 0x4) 592.673582ms ago: executing program 1 (id=381): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 590.334162ms ago: executing program 2 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f00000020c0), 0xffffffffffffffff) 262.872618ms ago: executing program 2 (id=383): openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 202.321424ms ago: executing program 0 (id=384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) unshare(0x2c020400) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 201.913487ms ago: executing program 3 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_open_procfs(0x0, 0x0) close(0x3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4001) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000007"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0x0, 0x0}, 0x10) 0s ago: executing program 1 (id=386): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6(0xa, 0x5, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) r5 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x40, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29943' (ED25519) to the list of known hosts. [ 45.792344][ T40] audit: type=1400 audit(1771412550.506:62): avc: denied { name_bind } for pid=5835 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.829307][ T40] audit: type=1400 audit(1771412550.546:63): avc: denied { execute } for pid=5838 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.837747][ T40] audit: type=1400 audit(1771412550.546:64): avc: denied { execute_no_trans } for pid=5838 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.359687][ T40] audit: type=1400 audit(1771412553.076:65): avc: denied { mounton } for pid=5838 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.368630][ T40] audit: type=1400 audit(1771412553.096:66): avc: denied { mount } for pid=5838 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.371876][ T5838] cgroup: Unknown subsys name 'net' [ 48.519593][ T5838] cgroup: Unknown subsys name 'cpuset' [ 48.525941][ T5838] cgroup: Unknown subsys name 'rlimit' [ 48.776620][ T5906] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.709195][ T5838] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.814109][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 52.814122][ T40] audit: type=1400 audit(1771412557.516:82): avc: denied { execmem } for pid=5919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.990647][ T40] audit: type=1400 audit(1771412557.706:83): avc: denied { create } for pid=5923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.000611][ T40] audit: type=1400 audit(1771412557.706:84): avc: denied { read write } for pid=5923 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.012084][ T40] audit: type=1400 audit(1771412557.706:85): avc: denied { open } for pid=5923 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.020853][ T5926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.021740][ T5926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.024399][ T40] audit: type=1400 audit(1771412557.716:86): avc: denied { ioctl } for pid=5923 comm="syz-executor" path="socket:[1796]" dev="sockfs" ino=1796 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.028553][ T5926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.038183][ T5926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.042058][ T5926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.045957][ T5933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.048371][ T5933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.050673][ T5933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.053618][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.054468][ T5926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.056941][ T5937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.059851][ T5926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.062834][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.065471][ T5926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.067564][ T5937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.070636][ T5933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.070698][ T5926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.072639][ T5285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.077319][ T5933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.078571][ T5926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.078689][ T40] audit: type=1400 audit(1771412557.786:87): avc: denied { read } for pid=5923 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.078716][ T40] audit: type=1400 audit(1771412557.796:88): avc: denied { open } for pid=5923 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.078737][ T40] audit: type=1400 audit(1771412557.796:89): avc: denied { mounton } for pid=5923 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.369405][ T40] audit: type=1400 audit(1771412558.086:90): avc: denied { module_request } for pid=5923 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.408618][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 53.420422][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 53.471545][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 53.535894][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 53.568589][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.571344][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.573671][ T5923] bridge_slave_0: entered allmulticast mode [ 53.576447][ T5923] bridge_slave_0: entered promiscuous mode [ 53.597723][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.600162][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.602891][ T5934] bridge_slave_0: entered allmulticast mode [ 53.606647][ T5934] bridge_slave_0: entered promiscuous mode [ 53.611070][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.613918][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.617361][ T5923] bridge_slave_1: entered allmulticast mode [ 53.620469][ T5923] bridge_slave_1: entered promiscuous mode [ 53.646859][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.649142][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.651695][ T5934] bridge_slave_1: entered allmulticast mode [ 53.654663][ T5934] bridge_slave_1: entered promiscuous mode [ 53.702809][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.707904][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.714588][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.722308][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.725210][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.728576][ T5924] bridge_slave_0: entered allmulticast mode [ 53.732599][ T5924] bridge_slave_0: entered promiscuous mode [ 53.738965][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.758998][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.761999][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.765175][ T5924] bridge_slave_1: entered allmulticast mode [ 53.768879][ T5924] bridge_slave_1: entered promiscuous mode [ 53.825334][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.827984][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.830738][ T5925] bridge_slave_0: entered allmulticast mode [ 53.834467][ T5925] bridge_slave_0: entered promiscuous mode [ 53.839827][ T5934] team0: Port device team_slave_0 added [ 53.842543][ T5923] team0: Port device team_slave_0 added [ 53.845636][ T5934] team0: Port device team_slave_1 added [ 53.860369][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.862643][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.865329][ T5925] bridge_slave_1: entered allmulticast mode [ 53.868000][ T5925] bridge_slave_1: entered promiscuous mode [ 53.872306][ T5923] team0: Port device team_slave_1 added [ 53.882188][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.891934][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.929575][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.931820][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.940305][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.945403][ T5924] team0: Port device team_slave_0 added [ 53.947536][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.949747][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.957973][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.964633][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.968836][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.971024][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.979125][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.985442][ T5924] team0: Port device team_slave_1 added [ 53.988260][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.990493][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.998603][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.004991][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.048764][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.051730][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.062554][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.068691][ T5925] team0: Port device team_slave_0 added [ 54.080778][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.083568][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.093399][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.108186][ T5925] team0: Port device team_slave_1 added [ 54.135400][ T5934] hsr_slave_0: entered promiscuous mode [ 54.138567][ T5934] hsr_slave_1: entered promiscuous mode [ 54.151598][ T5923] hsr_slave_0: entered promiscuous mode [ 54.154691][ T5923] hsr_slave_1: entered promiscuous mode [ 54.157161][ T5923] debugfs: 'hsr0' already exists in 'hsr' [ 54.159134][ T5923] Cannot create hsr debugfs directory [ 54.167910][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.170252][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.178587][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.200469][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.203411][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.214158][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.232499][ T5924] hsr_slave_0: entered promiscuous mode [ 54.235051][ T5924] hsr_slave_1: entered promiscuous mode [ 54.237335][ T5924] debugfs: 'hsr0' already exists in 'hsr' [ 54.239177][ T5924] Cannot create hsr debugfs directory [ 54.371176][ T5925] hsr_slave_0: entered promiscuous mode [ 54.373584][ T5925] hsr_slave_1: entered promiscuous mode [ 54.376001][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 54.377862][ T5925] Cannot create hsr debugfs directory [ 54.553159][ T5923] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.558493][ T5923] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.570091][ T5923] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.574179][ T5923] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.607797][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.616435][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.625698][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.635761][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.675764][ T5924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.689637][ T5924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.695434][ T5924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.701767][ T5924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.744401][ T5925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.748718][ T5925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.753089][ T5925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.757869][ T5925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.782718][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.816156][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.839235][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.842123][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.846367][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.848637][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.853666][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.875700][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.885627][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.887903][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.913413][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.916581][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.941627][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.955076][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.968575][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.984241][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.987064][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.990712][ T40] audit: type=1400 audit(1771412559.706:91): avc: denied { sys_module } for pid=5923 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.992951][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.006124][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.009027][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.017202][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.019577][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.029174][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.031448][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.087253][ T5924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.100576][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.106637][ T5930] Bluetooth: hci3: command tx timeout [ 55.108670][ T5930] Bluetooth: hci0: command tx timeout [ 55.110508][ T5930] Bluetooth: hci1: command tx timeout [ 55.128730][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.167998][ T5923] veth0_vlan: entered promiscuous mode [ 55.180242][ T5923] veth1_vlan: entered promiscuous mode [ 55.194102][ T5926] Bluetooth: hci2: command tx timeout [ 55.197665][ T5934] veth0_vlan: entered promiscuous mode [ 55.207587][ T5934] veth1_vlan: entered promiscuous mode [ 55.217922][ T5923] veth0_macvtap: entered promiscuous mode [ 55.232259][ T5923] veth1_macvtap: entered promiscuous mode [ 55.244588][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.258409][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.263230][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.273722][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.291126][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.300416][ T5934] veth0_macvtap: entered promiscuous mode [ 55.304657][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.318497][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.328198][ T5934] veth1_macvtap: entered promiscuous mode [ 55.331549][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.362067][ T5925] veth0_vlan: entered promiscuous mode [ 55.379304][ T5924] veth0_vlan: entered promiscuous mode [ 55.382069][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.389434][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.399767][ T133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.413202][ T5924] veth1_vlan: entered promiscuous mode [ 55.417182][ T133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.420006][ T133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.425200][ T5925] veth1_vlan: entered promiscuous mode [ 55.435319][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.438871][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.440674][ T133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.477955][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.480521][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.497490][ T5924] veth0_macvtap: entered promiscuous mode [ 55.510761][ T5924] veth1_macvtap: entered promiscuous mode [ 55.521402][ T5925] veth0_macvtap: entered promiscuous mode [ 55.533332][ T5923] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.542946][ T5925] veth1_macvtap: entered promiscuous mode [ 55.556572][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.558198][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.559112][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.575909][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.584306][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.603294][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.614750][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.617722][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.620858][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.625916][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.626406][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.630885][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.669484][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.685091][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.689121][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.692213][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.746323][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.754634][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.783490][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.785976][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.827327][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.831113][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.837740][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.840396][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.356019][ T6022] lo speed is unknown, defaulting to 1000 [ 56.360955][ T6022] lo speed is unknown, defaulting to 1000 [ 56.478530][ T6022] lo speed is unknown, defaulting to 1000 [ 56.490705][ T6022] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.498436][ T6022] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 56.517307][ T6022] lo speed is unknown, defaulting to 1000 [ 56.520576][ T6022] lo speed is unknown, defaulting to 1000 [ 56.524213][ T6022] lo speed is unknown, defaulting to 1000 [ 56.531879][ T6022] lo speed is unknown, defaulting to 1000 [ 56.691645][ T6035] overlayfs: unescaped trailing colons in lowerdir mount option. [ 57.184826][ T5926] Bluetooth: hci1: command tx timeout [ 57.185069][ T5930] Bluetooth: hci0: command tx timeout [ 57.185071][ T5285] Bluetooth: hci3: command tx timeout [ 57.218989][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 57.264912][ T5285] Bluetooth: hci2: command tx timeout [ 57.338202][ T6055] lo speed is unknown, defaulting to 1000 [ 57.854073][ T5992] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 58.006515][ T5992] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.011451][ T5992] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.015852][ T5992] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 58.020282][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.032172][ T5992] hub 6-1:4.0: USB hub found [ 58.069214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.084506][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 58.084522][ T40] audit: type=1400 audit(1771412562.796:157): avc: denied { create } for pid=6066 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.096770][ T40] audit: type=1400 audit(1771412562.796:158): avc: denied { read write } for pid=6066 comm="syz.2.18" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.106298][ T40] audit: type=1400 audit(1771412562.796:159): avc: denied { open } for pid=6066 comm="syz.2.18" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.134382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.137936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.141567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.145548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.149141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.154987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.243544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 58.246527][ T5992] hub 6-1:4.0: 2 ports detected [ 58.248384][ T5992] usb 6-1: selecting invalid altsetting 1 [ 58.250197][ T5992] hub 6-1:4.0: Using single TT (err -22) [ 58.317242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.395552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 58.668498][ T5992] usb 6-1: USB disconnect, device number 2 [ 58.966468][ T40] audit: type=1400 audit(1771412563.686:160): avc: denied { read write } for pid=6075 comm="syz.2.21" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.973349][ T40] audit: type=1400 audit(1771412563.686:161): avc: denied { open } for pid=6075 comm="syz.2.21" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.988985][ T40] audit: type=1400 audit(1771412563.706:162): avc: denied { write } for pid=6075 comm="syz.2.21" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.036511][ T40] audit: type=1400 audit(1771412563.756:163): avc: denied { write } for pid=6081 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.292477][ T5930] Bluetooth: hci0: command tx timeout [ 59.292533][ T5285] Bluetooth: hci1: command tx timeout [ 59.293092][ T5926] Bluetooth: hci3: command tx timeout [ 59.354194][ T5285] Bluetooth: hci2: command tx timeout [ 59.467605][ T40] audit: type=1400 audit(1771412564.186:164): avc: denied { create } for pid=6095 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.482688][ T40] audit: type=1400 audit(1771412564.196:165): avc: denied { write } for pid=6095 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.492533][ T40] audit: type=1400 audit(1771412564.196:166): avc: denied { connect } for pid=6095 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.522720][ T5285] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 59.634043][ T67] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.794052][ T67] usb 8-1: Using ep0 maxpacket: 8 [ 59.797864][ T67] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 59.800481][ T67] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.803435][ T67] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.807922][ T67] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.810948][ T67] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.814878][ T67] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.817794][ T67] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.931826][ T6118] netlink: 252 bytes leftover after parsing attributes in process `syz.0.38'. [ 60.023689][ T67] usb 8-1: GET_CAPABILITIES returned 0 [ 60.026996][ T67] usbtmc 8-1:16.0: can't read capabilities [ 60.044636][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.194083][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 60.206550][ T29] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 60.209371][ T29] usb 7-1: config 0 has no interface number 0 [ 60.211376][ T29] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 60.214953][ T29] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 60.219775][ T29] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.225689][ T29] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 60.231490][ T29] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 60.236942][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.261379][ T29] usb 7-1: config 0 descriptor?? [ 60.284967][ T29] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 60.308985][ T67] usb 8-1: USB disconnect, device number 2 [ 60.631481][ T29] usb 7-1: USB disconnect, device number 2 [ 60.642062][ T29] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 60.929815][ T6139] netlink: 124 bytes leftover after parsing attributes in process `syz.3.44'. [ 61.345138][ T5285] Bluetooth: hci0: command tx timeout [ 61.346745][ T5926] Bluetooth: hci3: command tx timeout [ 61.350087][ T5930] Bluetooth: hci1: command tx timeout [ 61.424093][ T5930] Bluetooth: hci2: command tx timeout [ 62.194192][ T6010] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.374068][ T6010] usb 6-1: Using ep0 maxpacket: 8 [ 62.378795][ T6010] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 62.382284][ T6010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.385138][ T6010] usb 6-1: Product: syz [ 62.386480][ T6010] usb 6-1: Manufacturer: syz [ 62.387946][ T6010] usb 6-1: SerialNumber: syz [ 62.391307][ T6010] usb 6-1: config 0 descriptor?? [ 62.394971][ T67] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.546685][ T67] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.551543][ T67] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 62.555389][ T67] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.569868][ T67] usb 8-1: config 0 descriptor?? [ 62.575408][ T67] pwc: Askey VC010 type 2 USB webcam detected. [ 62.597806][ T6010] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 62.827419][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.844455][ T24] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 62.977801][ T67] pwc: recv_control_msg error -32 req 02 val 2b00 [ 62.980665][ T67] pwc: recv_control_msg error -32 req 02 val 2700 [ 62.984130][ T67] pwc: recv_control_msg error -32 req 02 val 2c00 [ 62.988411][ T67] pwc: recv_control_msg error -32 req 04 val 1000 [ 62.992291][ T67] pwc: recv_control_msg error -32 req 04 val 1300 [ 62.995867][ T67] pwc: recv_control_msg error -32 req 04 val 1400 [ 63.126926][ T6010] usb write operation failed. (-71) [ 63.135816][ T6010] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 63.140407][ T6010] dvbdev: DVB: registering new adapter (Terratec H7) [ 63.143199][ T6010] usb 6-1: media controller created [ 63.146096][ T6010] usb read operation failed. (-71) [ 63.148593][ T6010] usb write operation failed. (-71) [ 63.156928][ T6010] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 63.163607][ T6010] usb 6-1: USB disconnect, device number 3 [ 63.216443][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 63.216461][ T40] audit: type=1400 audit(1771412567.936:193): avc: denied { lock } for pid=6166 comm="syz.2.51" path="socket:[7993]" dev="sockfs" ino=7993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 63.258822][ T67] pwc: recv_control_msg error -71 req 02 val 2100 [ 63.264161][ T67] pwc: recv_control_msg error -71 req 04 val 1500 [ 63.275782][ T67] pwc: recv_control_msg error -71 req 02 val 2500 [ 63.289328][ T67] pwc: recv_control_msg error -71 req 02 val 2400 [ 63.298047][ T67] pwc: recv_control_msg error -71 req 02 val 2600 [ 63.305918][ T67] pwc: recv_control_msg error -71 req 02 val 2900 [ 63.313058][ T67] pwc: recv_control_msg error -71 req 02 val 2800 [ 63.321565][ T67] pwc: recv_control_msg error -71 req 04 val 1100 [ 63.331871][ T67] pwc: recv_control_msg error -71 req 04 val 1200 [ 63.357057][ T67] pwc: Registered as video103. [ 63.402173][ T67] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb8/8-1/input/input5 [ 63.433385][ T67] usb 8-1: USB disconnect, device number 3 [ 64.144141][ T40] audit: type=1400 audit(1771412568.836:194): avc: denied { bind } for pid=6176 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.935012][ T40] audit: type=1400 audit(1771412569.656:195): avc: denied { create } for pid=6190 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.999302][ T6195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.061564][ T40] audit: type=1400 audit(1771412569.776:196): avc: denied { connect } for pid=6198 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.069948][ T40] audit: type=1400 audit(1771412569.786:197): avc: denied { read } for pid=6198 comm="syz.2.61" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.085480][ T40] audit: type=1400 audit(1771412569.786:198): avc: denied { open } for pid=6198 comm="syz.2.61" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.092826][ T40] audit: type=1400 audit(1771412569.806:199): avc: denied { ioctl } for pid=6198 comm="syz.2.61" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.310539][ T40] audit: type=1400 audit(1771412570.026:200): avc: denied { write } for pid=6202 comm="syz.2.63" name="video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 65.319346][ T40] audit: type=1400 audit(1771412570.026:201): avc: denied { ioctl } for pid=6202 comm="syz.2.63" path="/dev/video8" dev="devtmpfs" ino=976 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 65.663068][ T6211] netlink: 32 bytes leftover after parsing attributes in process `syz.0.65'. [ 65.769672][ T6214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.821677][ T40] audit: type=1400 audit(1771412570.486:202): avc: denied { read write } for pid=6207 comm="syz.1.64" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.196691][ T6222] warning: `syz.2.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.156151][ T6238] ceph: No mds server is up or the cluster is laggy [ 67.300228][ T1333] libceph: connect (1)[c::]:6789 error -101 [ 67.303841][ T1333] libceph: mon0 (1)[c::]:6789 connect error [ 68.324188][ T6010] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.478008][ T6010] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.482073][ T6010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.485885][ T6010] usb 7-1: Product: syz [ 68.487847][ T6010] usb 7-1: Manufacturer: syz [ 68.490015][ T6010] usb 7-1: SerialNumber: syz [ 68.684131][ T5930] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 68.906388][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 68.906406][ T40] audit: type=1400 audit(1771412573.626:214): avc: denied { create } for pid=6280 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.112907][ T6010] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 69.116001][ T6010] cdc_ncm 7-1:1.0: bind() failure [ 69.119853][ T6010] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 69.122263][ T6010] cdc_ncm 7-1:1.1: bind() failure [ 69.126392][ T6010] usb 7-1: USB disconnect, device number 3 [ 70.026000][ T40] audit: type=1400 audit(1771412574.746:215): avc: denied { create } for pid=6303 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.326035][ T40] audit: type=1400 audit(1771412575.036:216): avc: denied { create } for pid=6307 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.332437][ T40] audit: type=1400 audit(1771412575.036:217): avc: denied { write } for pid=6307 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.338875][ T40] audit: type=1400 audit(1771412575.036:218): avc: denied { read } for pid=6307 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.488943][ T40] audit: type=1400 audit(1771412575.206:219): avc: denied { bind } for pid=6312 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.509682][ T40] audit: type=1400 audit(1771412575.206:220): avc: denied { name_bind } for pid=6312 comm="syz.1.96" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 70.522311][ T40] audit: type=1400 audit(1771412575.206:221): avc: denied { node_bind } for pid=6312 comm="syz.1.96" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 70.532949][ T40] audit: type=1400 audit(1771412575.236:222): avc: denied { create } for pid=6317 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.599934][ T40] audit: type=1400 audit(1771412575.316:223): avc: denied { read } for pid=6312 comm="syz.1.96" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.265357][ T6340] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 71.267681][ T6340] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.271355][ T6340] vhci_hcd vhci_hcd.0: Device attached [ 71.402383][ T6340] wg2 speed is unknown, defaulting to 1000 [ 71.432018][ T6340] wg2 speed is unknown, defaulting to 1000 [ 71.437105][ T6340] wg2 speed is unknown, defaulting to 1000 [ 71.594406][ T1333] usb 40-1: SetAddress Request (2) to port 0 [ 71.605088][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 71.789214][ T6351] mmap: syz.0.107 (6351) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.831808][ T6340] infiniband syz2: set active [ 71.833525][ T6340] infiniband syz2: added wg2 [ 71.852738][ T6341] vhci_hcd: connection closed [ 71.852749][ T1333] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 71.855467][ T46] vhci_hcd vhci_hcd.1: stop threads [ 71.858915][ T46] vhci_hcd vhci_hcd.1: release socket [ 71.862040][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 71.927917][ T141] wg2 speed is unknown, defaulting to 1000 [ 71.938508][ T6340] RDS/IB: syz2: added [ 71.940827][ T6340] smc: adding ib device syz2 with port count 1 [ 71.943653][ T6340] smc: ib device syz2 port 1 has no pnetid [ 71.949047][ T1333] usb 40-1: enqueue for inactive port 0 [ 71.953913][ T6340] wg2 speed is unknown, defaulting to 1000 [ 71.958654][ T141] wg2 speed is unknown, defaulting to 1000 [ 72.107613][ T6340] wg2 speed is unknown, defaulting to 1000 [ 72.204205][ T5295] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.364616][ T5295] usb 7-1: Using ep0 maxpacket: 8 [ 72.371112][ T5295] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 72.375244][ T5295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.378380][ T5295] usb 7-1: Product: syz [ 72.380052][ T5295] usb 7-1: Manufacturer: syz [ 72.382458][ T5295] usb 7-1: SerialNumber: syz [ 72.385799][ T1333] usb usb40-port1: attempt power cycle [ 72.391403][ T5295] usb 7-1: config 0 descriptor?? [ 72.409988][ T6340] wg2 speed is unknown, defaulting to 1000 [ 72.739201][ T6340] wg2 speed is unknown, defaulting to 1000 [ 72.771152][ T5295] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 72.952709][ T5295] usb write operation failed. (-71) [ 72.957327][ T5295] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 72.961775][ T5295] dvbdev: DVB: registering new adapter (Terratec H7) [ 72.965816][ T5295] usb 7-1: media controller created [ 72.968333][ T5295] usb read operation failed. (-71) [ 72.970778][ T5295] usb write operation failed. (-71) [ 72.974812][ T1333] usb usb40-port1: unable to enumerate USB device [ 72.976442][ T5295] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 72.985484][ T5295] usb 7-1: USB disconnect, device number 4 [ 73.344819][ T6377] dvmrp9: entered allmulticast mode [ 74.037020][ T6375] syz.1.115 (6375): drop_caches: 2 [ 74.279277][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 74.279294][ T40] audit: type=1400 audit(1771412578.886:238): avc: denied { create } for pid=6383 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.289670][ T40] audit: type=1400 audit(1771412578.896:239): avc: denied { getopt } for pid=6383 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.804845][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 74.870224][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.123'. [ 74.874114][ T6401] netlink: 108 bytes leftover after parsing attributes in process `syz.2.123'. [ 74.878194][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.123'. [ 74.882125][ T6401] netlink: 108 bytes leftover after parsing attributes in process `syz.2.123'. [ 74.885955][ T6401] netlink: 84 bytes leftover after parsing attributes in process `syz.2.123'. [ 75.082232][ T24] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 75.096204][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.112226][ T24] usb 8-1: Product: syz [ 75.115905][ T24] usb 8-1: Manufacturer: syz [ 75.121173][ T24] usb 8-1: SerialNumber: syz [ 75.134417][ T24] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 75.166766][ T40] audit: type=1400 audit(1771412579.886:240): avc: denied { firmware_load } for pid=24 comm="kworker/2:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 75.189425][ T24] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.544225][ T40] audit: type=1400 audit(1771412580.256:241): avc: denied { ioctl } for pid=6404 comm="syz.2.126" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.603503][ T141] usb 8-1: USB disconnect, device number 4 [ 75.639802][ T40] audit: type=1400 audit(1771412580.356:242): avc: denied { read } for pid=6408 comm="syz.1.128" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.648702][ T40] audit: type=1400 audit(1771412580.356:243): avc: denied { open } for pid=6408 comm="syz.1.128" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.664287][ T40] audit: type=1400 audit(1771412580.376:244): avc: denied { ioctl } for pid=6408 comm="syz.1.128" path="socket:[10028]" dev="sockfs" ino=10028 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.884117][ T3245] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 76.044104][ T3245] usb 7-1: Using ep0 maxpacket: 8 [ 76.047947][ T3245] usb 7-1: config 1 has an invalid interface number: 89 but max is 0 [ 76.051571][ T3245] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.056211][ T3245] usb 7-1: config 1 has no interface number 0 [ 76.059274][ T3245] usb 7-1: config 1 interface 89 has no altsetting 0 [ 76.065219][ T3245] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=50.bb [ 76.069038][ T3245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.072547][ T3245] usb 7-1: Product: syz [ 76.075148][ T3245] usb 7-1: Manufacturer: syz [ 76.077023][ T3245] usb 7-1: SerialNumber: syz [ 76.224068][ T24] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 76.227574][ T24] ath9k_htc: Failed to initialize the device [ 76.231412][ T141] usb 8-1: ath9k_htc: USB layer deinitialized [ 76.258175][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.262529][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.269379][ T6430] bridge0: entered allmulticast mode [ 76.289019][ T3245] qmi_wwan 7-1:1.89: bogus CDC Union: master=0, slave=1 [ 76.293375][ T3245] qmi_wwan 7-1:1.89: probe with driver qmi_wwan failed with error -22 [ 76.301790][ T3245] usb 7-1: USB disconnect, device number 5 [ 76.398631][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.400831][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.743225][ T40] audit: type=1400 audit(1771412581.456:245): avc: denied { connect } for pid=6435 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.829959][ T5930] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 77.164298][ T5295] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.314213][ T5295] usb 7-1: Using ep0 maxpacket: 16 [ 77.318165][ T5295] usb 7-1: config 0 interface 0 has no altsetting 0 [ 77.320994][ T5295] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 77.334302][ T5295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.345126][ T5295] usb 7-1: config 0 descriptor?? [ 77.763517][ T5295] hid (null): bogus close delimiter [ 77.780124][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 77.810675][ T6450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.820414][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 77.826914][ T6450] bond1: entered promiscuous mode [ 77.829243][ T6450] bond1: entered allmulticast mode [ 77.841442][ T6450] dummy0: entered promiscuous mode [ 77.844148][ T6450] dummy0: entered allmulticast mode [ 77.846931][ T6450] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 77.894108][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.146'. [ 77.975125][ T3245] usb 7-1: USB disconnect, device number 6 [ 78.044178][ T141] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 78.240740][ T141] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.245629][ T141] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 78.249427][ T141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.270158][ T141] usb 6-1: config 0 descriptor?? [ 78.544045][ T141] pwc: Askey VC010 type 2 USB webcam detected. [ 78.750780][ T141] pwc: recv_control_msg error -32 req 02 val 2b00 [ 78.753435][ T141] pwc: recv_control_msg error -32 req 02 val 2700 [ 78.756158][ T141] pwc: recv_control_msg error -32 req 02 val 2c00 [ 78.758629][ T141] pwc: recv_control_msg error -32 req 04 val 1000 [ 78.972213][ T141] pwc: recv_control_msg error -71 req 04 val 1400 [ 78.984393][ T141] pwc: recv_control_msg error -71 req 02 val 2000 [ 78.987716][ T141] pwc: recv_control_msg error -71 req 02 val 2100 [ 78.990313][ T141] pwc: recv_control_msg error -71 req 04 val 1500 [ 78.992883][ T141] pwc: recv_control_msg error -71 req 02 val 2500 [ 78.997305][ T141] pwc: recv_control_msg error -71 req 02 val 2400 [ 78.999884][ T141] pwc: recv_control_msg error -71 req 02 val 2600 [ 79.002840][ T141] pwc: recv_control_msg error -71 req 02 val 2900 [ 79.005666][ T141] pwc: recv_control_msg error -71 req 02 val 2800 [ 79.008576][ T40] audit: type=1400 audit(1771412583.726:246): avc: denied { sqpoll } for pid=6473 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.009152][ T141] pwc: recv_control_msg error -71 req 04 val 1100 [ 79.019404][ T141] pwc: recv_control_msg error -71 req 04 val 1200 [ 79.027601][ T141] pwc: Registered as video103. [ 79.040112][ T141] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb6/6-1/input/input6 [ 79.054338][ T141] usb 6-1: USB disconnect, device number 4 [ 79.446894][ T40] audit: type=1400 audit(1771412584.166:247): avc: denied { create } for pid=6485 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.459597][ T40] audit: type=1400 audit(1771412584.176:248): avc: denied { write } for pid=6485 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.492567][ T40] audit: type=1400 audit(1771412584.206:249): avc: denied { bind } for pid=6485 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.414576][ T40] audit: type=1400 audit(1771412585.136:250): avc: denied { mounton } for pid=6502 comm="syz.0.159" path="/54" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.445817][ T40] audit: type=1400 audit(1771412585.156:251): avc: denied { create } for pid=6491 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.458624][ T40] audit: type=1400 audit(1771412585.176:252): avc: denied { write } for pid=6491 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.579351][ T6509] Illegal XDP return value 256 on prog (id 9) dev N/A, expect packet loss! [ 80.627500][ T40] audit: type=1400 audit(1771412585.346:253): avc: denied { append } for pid=6510 comm="syz.2.163" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.915224][ T40] audit: type=1400 audit(1771412585.636:254): avc: denied { create } for pid=6514 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 80.927559][ T40] audit: type=1400 audit(1771412585.646:255): avc: denied { getopt } for pid=6514 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.854084][ T6427] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 82.004071][ T6427] usb 7-1: Using ep0 maxpacket: 8 [ 82.010266][ T6427] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 82.013830][ T6427] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.016756][ T6427] usb 7-1: Product: syz [ 82.018179][ T6427] usb 7-1: Manufacturer: syz [ 82.019747][ T6427] usb 7-1: SerialNumber: syz [ 82.022683][ T6427] usb 7-1: config 0 descriptor?? [ 82.033613][ T6427] gspca_main: se401-2.14.0 probing 047d:5003 [ 82.229085][ T40] audit: type=1400 audit(1771412586.946:256): avc: denied { mount } for pid=6542 comm="syz.3.175" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 82.435154][ T6427] gspca_se401: Wrong descriptor type [ 82.687160][ T10] usb 7-1: USB disconnect, device number 7 [ 84.112466][ T5295] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 84.274067][ T5295] usb 6-1: Using ep0 maxpacket: 16 [ 84.290007][ T5295] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.293566][ T5295] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.300474][ T5295] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.303691][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.771474][ T5295] mcp2221 0003:04D8:00DD.0004: item fetching failed at offset 3/5 [ 84.779825][ T5295] mcp2221 0003:04D8:00DD.0004: can't parse reports [ 84.784656][ T5295] mcp2221 0003:04D8:00DD.0004: probe with driver mcp2221 failed with error -22 [ 84.979073][ T5295] usb 6-1: USB disconnect, device number 5 [ 85.045900][ T6608] lo speed is unknown, defaulting to 1000 [ 85.048864][ T6608] wg2 speed is unknown, defaulting to 1000 [ 85.244079][ T3245] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 85.487105][ T3245] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 85.490135][ T3245] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.492741][ T3245] usb 8-1: Product: syz [ 85.494953][ T3245] usb 8-1: Manufacturer: syz [ 85.497161][ T3245] usb 8-1: SerialNumber: syz [ 85.502743][ T3245] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 85.529130][ T3245] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.363472][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 86.377878][ T40] audit: type=1400 audit(1771412591.076:262): avc: denied { watch watch_reads } for pid=6627 comm="syz.2.207" path="/49" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.380154][ T5295] usb 8-1: USB disconnect, device number 5 [ 86.480175][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 86.668168][ T34] cfg80211: failed to load regulatory.db [ 86.723589][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'. [ 86.784123][ T3245] usb 8-1: Service connection timeout for: 256 [ 86.787552][ T3245] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 86.791249][ T3245] ath9k_htc: Failed to initialize the device [ 86.795681][ T5295] usb 8-1: ath9k_htc: USB layer deinitialized [ 88.123849][ T6652] ======================================================= [ 88.123849][ T6652] WARNING: The mand mount option has been deprecated and [ 88.123849][ T6652] and is ignored by this kernel. Remove the mand [ 88.123849][ T6652] option from the mount to silence this warning. [ 88.123849][ T6652] ======================================================= [ 88.135877][ T6652] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.216471][ T40] audit: type=1400 audit(1771412592.856:263): avc: denied { mount } for pid=6650 comm="syz.2.214" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 88.619926][ T40] audit: type=1400 audit(1771412593.336:264): avc: denied { unmount } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 89.184486][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 89.241407][ T40] audit: type=1400 audit(1771412593.956:265): avc: denied { listen } for pid=6675 comm="syz.0.222" lport=57467 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.249211][ T40] audit: type=1400 audit(1771412593.956:266): avc: denied { accept } for pid=6675 comm="syz.0.222" lport=57467 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.357980][ T6677] Zero length message leads to an empty skb [ 89.463163][ T40] audit: type=1400 audit(1771412593.956:267): avc: denied { write } for pid=6675 comm="syz.0.222" lport=57467 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.504066][ T40] audit: type=1400 audit(1771412593.956:268): avc: denied { setopt } for pid=6675 comm="syz.0.222" lport=57467 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.511793][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.513914][ T40] audit: type=1400 audit(1771412594.066:269): avc: denied { create } for pid=6673 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.534530][ T40] audit: type=1400 audit(1771412594.116:270): avc: denied { create } for pid=6673 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.544174][ T40] audit: type=1400 audit(1771412594.136:271): avc: denied { getopt } for pid=6673 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.554253][ T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 89.564128][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.626345][ T10] usb 7-1: config 0 descriptor?? [ 90.139693][ T10] lenovo 0003:17EF:6047.0005: item fetching failed at offset 2/5 [ 90.144779][ T10] lenovo 0003:17EF:6047.0005: hid_parse failed [ 90.146919][ T10] lenovo 0003:17EF:6047.0005: probe with driver lenovo failed with error -22 [ 90.265406][ T6427] usb 7-1: USB disconnect, device number 8 [ 91.161738][ T6703] 9p: Bad value for 'rfdno' [ 91.428308][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 91.428323][ T40] audit: type=1400 audit(1771412596.146:280): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 91.514060][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 91.708099][ T9] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 91.711456][ T9] usb 7-1: config 0 has no interface number 0 [ 91.713645][ T9] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.719181][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 91.722010][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.724785][ T9] usb 7-1: Product: syz [ 91.726255][ T9] usb 7-1: Manufacturer: syz [ 91.727885][ T9] usb 7-1: SerialNumber: syz [ 91.731189][ T9] usb 7-1: config 0 descriptor?? [ 91.740491][ T9] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 91.994887][ T9] usb 7-1: USB disconnect, device number 9 [ 92.001821][ T9] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 92.159483][ T6711] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 92.336761][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 92.484743][ T40] audit: type=1400 audit(1771412597.206:281): avc: denied { sys_module } for pid=6735 comm="syz.0.243" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 93.443424][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 93.447349][ T40] audit: type=1400 audit(1771412598.166:282): avc: denied { mounton } for pid=6762 comm="syz.0.251" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.471300][ T6766] lo speed is unknown, defaulting to 1000 [ 93.473893][ T6766] wg2 speed is unknown, defaulting to 1000 [ 93.590710][ T5930] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 94.012168][ T6747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.752668][ T40] audit: type=1400 audit(1771412599.466:283): avc: denied { create } for pid=6788 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.204106][ T40] audit: type=1400 audit(1771412599.876:284): avc: denied { create } for pid=6791 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.212341][ T40] audit: type=1400 audit(1771412599.876:285): avc: denied { bind } for pid=6791 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.224734][ T40] audit: type=1400 audit(1771412599.876:286): avc: denied { listen } for pid=6791 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.042057][ T40] audit: type=1400 audit(1771412600.756:287): avc: denied { write } for pid=6807 comm="syz.2.263" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.181296][ T6748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.861141][ T40] audit: type=1326 audit(1771412601.576:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e739c629 code=0x7ffc0000 [ 96.972509][ T40] audit: type=1326 audit(1771412601.596:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45e739c629 code=0x7ffc0000 [ 96.984582][ T40] audit: type=1326 audit(1771412601.596:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e739c629 code=0x7ffc0000 [ 96.994203][ T40] audit: type=1326 audit(1771412601.596:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e739c629 code=0x7ffc0000 [ 97.003754][ T40] audit: type=1326 audit(1771412601.596:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f45e739c629 code=0x7ffc0000 [ 97.010917][ T5930] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 97.013513][ T40] audit: type=1326 audit(1771412601.596:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e739c629 code=0x7ffc0000 [ 97.032570][ T40] audit: type=1326 audit(1771412601.616:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f45e739c629 code=0x7ffc0000 [ 97.044795][ T40] audit: type=1326 audit(1771412601.616:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e739c629 code=0x7ffc0000 [ 97.057061][ T40] audit: type=1326 audit(1771412601.616:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e739c629 code=0x7ffc0000 [ 97.068038][ T40] audit: type=1326 audit(1771412601.616:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45e739c629 code=0x7ffc0000 [ 97.746837][ T5930] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 98.088603][ T6861] FAT-fs (nullb0): bogus number of reserved sectors [ 98.093152][ T6861] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 98.275264][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.281'. [ 98.280834][ T6868] smc: ib device syz2 ibport 1 applied user defined pnetid [ 98.294817][ T6868] Cannot find del_set index 1 as target [ 99.225877][ T6888] netlink: 'syz.2.286': attribute type 12 has an invalid length. [ 99.431710][ T6892] syzkaller0: entered promiscuous mode [ 99.433599][ T6892] syzkaller0: entered allmulticast mode [ 100.814059][ T6009] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 100.984024][ T6009] usb 7-1: Using ep0 maxpacket: 16 [ 100.991267][ T6009] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.997385][ T6009] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.001503][ T6009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 101.005526][ T6009] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 101.009062][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.017373][ T6009] usb 7-1: config 0 descriptor?? [ 101.489478][ T6009] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 101.494368][ T6009] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 101.496783][ T6009] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 101.499168][ T6009] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 101.501491][ T6009] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 101.506583][ T6009] nzxt-smart2 0003:1E71:2009.0006: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 101.736598][ T6009] usb 7-1: USB disconnect, device number 10 [ 101.756784][ T6923] fido_id[6923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 102.709410][ T6941] syzkaller0: entered promiscuous mode [ 102.711221][ T6941] syzkaller0: entered allmulticast mode [ 104.144193][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 104.144205][ T40] audit: type=1400 audit(1771412608.846:343): avc: denied { connect } for pid=6975 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.145788][ T6427] hid-generic 0005:0006:5508.0007: item fetching failed at offset 0/1 [ 104.165893][ T6427] hid-generic 0005:0006:5508.0007: probe with driver hid-generic failed with error -22 [ 104.796753][ T40] audit: type=1400 audit(1771412609.516:344): avc: denied { setopt } for pid=6991 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.144119][ T6427] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 105.684115][ T6427] usb 7-1: Using ep0 maxpacket: 8 [ 105.689077][ T6427] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 105.692077][ T6427] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.694840][ T6427] usb 7-1: Product: syz [ 105.696297][ T6427] usb 7-1: Manufacturer: syz [ 105.697815][ T6427] usb 7-1: SerialNumber: syz [ 105.701214][ T6427] usb 7-1: config 0 descriptor?? [ 105.710259][ T6427] gspca_main: se401-2.14.0 probing 047d:5003 [ 106.134702][ T7019] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 106.138714][ T7019] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 106.145726][ T40] audit: type=1400 audit(2000000000.919:345): avc: denied { firmware_load } for pid=7015 comm="syz.1.326" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 106.145809][ T7019] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 106.180478][ T6427] gspca_se401: ExtraFeatures: 3 [ 106.244576][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 106.322138][ T7022] kAFS: unable to lookup cell '(' [ 106.402385][ T6427] input: se401 as /devices/platform/dummy_hcd.2/usb7/7-1/input/input7 [ 106.404342][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 106.439362][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.445248][ T10] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 106.449643][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.453348][ T6427] usb 7-1: USB disconnect, device number 11 [ 106.623863][ T10] usb 8-1: config 0 descriptor?? [ 107.027363][ T7027] netlink: 'syz.2.328': attribute type 2 has an invalid length. [ 107.031271][ T40] audit: type=1400 audit(2000000001.799:346): avc: denied { connect } for pid=7024 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.083204][ T7030] netlink: 'syz.2.328': attribute type 2 has an invalid length. [ 107.091941][ T7030] syz.2.328 uses obsolete (PF_INET,SOCK_PACKET) [ 107.164747][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0008/input/input8 [ 107.178868][ T10] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw1: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 107.254099][ T3245] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 107.272146][ T40] audit: type=1400 audit(2000000002.039:347): avc: denied { listen } for pid=7028 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.387494][ T6009] usb 8-1: USB disconnect, device number 6 [ 107.410835][ T3245] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 107.417338][ T3245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 107.420057][ T3245] usb 6-1: Product: syz [ 107.421484][ T3245] usb 6-1: Manufacturer: syz [ 107.423023][ T3245] usb 6-1: SerialNumber: syz [ 107.428028][ T3245] usb 6-1: config 0 descriptor?? [ 107.435111][ T3245] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 107.438862][ T3245] dvb-usb: bulk message failed: -22 (2/0) [ 107.443199][ T3245] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.447094][ T3245] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 107.449888][ T3245] usb 6-1: media controller created [ 107.462861][ T3245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.635933][ T3245] cxusb: set interface failed [ 107.640427][ T3245] dvb-usb: bulk message failed: -22 (1/0) [ 107.667623][ T3245] DVB: Unable to find symbol mt352_attach() [ 107.670373][ T3245] dvb-usb: bulk message failed: -22 (5/0) [ 107.673560][ T3245] zl10353_read_register: readreg error (reg=127, ret==-121) [ 107.677656][ T3245] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 107.724029][ T3245] rc_core: IR keymap rc-dvico-mce not found [ 107.726049][ T3245] Registered IR keymap rc-empty [ 107.729030][ T3245] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 107.733374][ T3245] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input9 [ 107.738531][ T3245] dvb-usb: schedule remote query interval to 100 msecs. [ 107.741394][ T3245] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 107.747795][ T3245] usb 6-1: USB disconnect, device number 6 [ 107.792472][ T3245] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 107.930004][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 107.942809][ T40] audit: type=1400 audit(2000000002.709:348): avc: denied { map_create } for pid=7038 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.953337][ T40] audit: type=1400 audit(2000000002.719:349): avc: denied { prog_load } for pid=7038 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.287508][ T40] audit: type=1400 audit(2000000003.059:350): avc: denied { map_read map_write } for pid=7042 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.504381][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 108.674129][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 108.681081][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.687715][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 108.704175][ T10] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 108.707888][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.711658][ T10] usb 8-1: Product: syz [ 108.713112][ T10] usb 8-1: Manufacturer: syz [ 108.718135][ T10] usb 8-1: SerialNumber: syz [ 108.769887][ T10] usb 8-1: config 0 descriptor?? [ 109.000329][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 109.015294][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input10 [ 109.037597][ T10] imon:send_packet: packet tx failed (-71) [ 109.055687][ T10] imon 8-1:0.0: panel buttons/knobs setup failed [ 109.114092][ T10] rc_core: IR keymap rc-imon-pad not found [ 109.116647][ T10] Registered IR keymap rc-empty [ 109.118797][ T10] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 109.124107][ T10] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 109.129834][ T40] audit: type=1400 audit(2000000003.899:351): avc: denied { write } for pid=7066 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.129896][ T10] imon:send_packet: packet tx failed (-71) [ 109.142289][ T7067] xt_hashlimit: max too large, truncated to 1048576 [ 109.151823][ T40] audit: type=1400 audit(2000000003.909:352): avc: denied { bind } for pid=7066 comm="syz.0.339" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.160408][ T40] audit: type=1400 audit(2000000003.909:353): avc: denied { bind } for pid=7066 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.164134][ T10] imon 8-1:0.0: remote input dev register failed [ 109.185361][ T10] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 109.235735][ T10] imon 8-1:0.0: unable to initialize intf0, err 0 [ 109.237862][ T10] imon:imon_probe: failed to initialize context! [ 109.239917][ T10] imon 8-1:0.0: unable to register, err -19 [ 109.250832][ T10] usb 8-1: USB disconnect, device number 7 [ 109.553266][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.340'. [ 109.698542][ T40] audit: type=1400 audit(2000000004.469:354): avc: denied { prog_run } for pid=7072 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.154145][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 110.306030][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 110.313289][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.319790][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.327557][ T10] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 110.331445][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.336648][ T10] usb 8-1: Product: syz [ 110.338513][ T10] usb 8-1: Manufacturer: syz [ 110.340700][ T10] usb 8-1: SerialNumber: syz [ 110.347951][ T10] usb 8-1: config 0 descriptor?? [ 110.579090][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 110.944224][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 110.975940][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 110.978737][ T10] imon:send_packet: packet tx failed (-71) [ 110.994175][ T10] imon 8-1:0.0: panel buttons/knobs setup failed [ 111.044085][ T10] rc_core: IR keymap rc-imon-pad not found [ 111.046146][ T10] Registered IR keymap rc-empty [ 111.047857][ T10] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 111.051363][ T10] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 111.055392][ T10] imon:send_packet: packet tx failed (-71) [ 111.089203][ T10] imon 8-1:0.0: remote input dev register failed [ 111.091521][ T10] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 111.094623][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 111.098976][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.103922][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 111.110675][ T10] imon 8-1:0.0: unable to initialize intf0, err 0 [ 111.112881][ T10] imon:imon_probe: failed to initialize context! [ 111.116239][ T34] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 111.117340][ T10] imon 8-1:0.0: unable to register, err -19 [ 111.119987][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.127641][ T10] usb 8-1: USB disconnect, device number 8 [ 111.131285][ T34] usb 6-1: Product: syz [ 111.133148][ T34] usb 6-1: Manufacturer: syz [ 111.135740][ T34] usb 6-1: SerialNumber: syz [ 111.142343][ T34] usb 6-1: config 0 descriptor?? [ 111.152232][ T7104] lo speed is unknown, defaulting to 1000 [ 111.172297][ T7104] wg2 speed is unknown, defaulting to 1000 [ 111.371664][ C3] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 111.375025][ T34] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input14 [ 111.382718][ T34] imon:send_packet: packet tx failed (-71) [ 111.404082][ T34] imon 6-1:0.0: panel buttons/knobs setup failed [ 111.454125][ T34] rc_core: IR keymap rc-imon-pad not found [ 111.456124][ T34] Registered IR keymap rc-empty [ 111.457802][ T34] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 111.460940][ T34] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 111.466054][ T34] imon:send_packet: packet tx failed (-71) [ 111.484108][ T34] imon 6-1:0.0: remote input dev register failed [ 111.486952][ T34] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 111.503773][ T34] imon 6-1:0.0: unable to initialize intf0, err 0 [ 111.506085][ T34] imon:imon_probe: failed to initialize context! [ 111.508054][ T34] imon 6-1:0.0: unable to register, err -19 [ 111.511448][ T34] usb 6-1: USB disconnect, device number 7 [ 111.822183][ T1333] libceph: connect (1)[c::]:6789 error -101 [ 111.829373][ T1333] libceph: mon0 (1)[c::]:6789 connect error [ 111.848014][ T7116] ceph: No mds server is up or the cluster is laggy [ 112.064092][ T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 112.215087][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 112.223387][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.231213][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.235835][ T34] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 112.239131][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.242017][ T34] usb 6-1: Product: syz [ 112.243705][ T34] usb 6-1: Manufacturer: syz [ 112.245321][ T34] usb 6-1: SerialNumber: syz [ 112.249471][ T34] usb 6-1: config 0 descriptor?? [ 112.642238][ T34] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input16 [ 113.004440][ T34] rc_core: IR keymap rc-imon-pad not found [ 113.007545][ T34] Registered IR keymap rc-empty [ 113.009673][ T34] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 113.013231][ T34] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 113.055988][ T34] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 113.065801][ T34] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input17 [ 113.071200][ T34] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:8> initialized [ 113.437555][ C3] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 113.442615][ T34] usb 6-1: USB disconnect, device number 8 [ 113.631381][ T7151] bridge1: entered promiscuous mode [ 113.633682][ T7151] bridge1: entered allmulticast mode [ 113.641649][ T7151] team0: Port device bridge1 added [ 114.001111][ T40] audit: type=1400 audit(2000000008.769:355): avc: denied { create } for pid=7165 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.011039][ T40] audit: type=1400 audit(2000000008.779:356): avc: denied { connect } for pid=7165 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.509313][ T40] audit: type=1400 audit(2000000009.079:357): avc: denied { write } for pid=7165 comm="syz.3.371" path="socket:[11260]" dev="sockfs" ino=11260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.616558][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 114.624282][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.628250][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.706412][ T7200] netlink: 'syz.1.381': attribute type 13 has an invalid length. [ 116.159957][ T5992] wg2 speed is unknown, defaulting to 1000 [ 116.159960][ T1333] lo speed is unknown, defaulting to 1000 [ 116.242517][ T7212] ================================================================== [ 116.245152][ T7212] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x105/0x130 [ 116.247907][ T7212] Read of size 8 at addr ffff88803fcd4980 by task syz.0.384/7212 [ 116.251918][ T7212] [ 116.252972][ T7212] CPU: 1 UID: 0 PID: 7212 Comm: syz.0.384 Not tainted syzkaller #0 PREEMPT(full) [ 116.252996][ T7212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.253007][ T7212] Call Trace: [ 116.253014][ T7212] [ 116.253022][ T7212] dump_stack_lvl+0x100/0x190 [ 116.253056][ T7212] print_report+0x156/0x4c9 [ 116.253083][ T7212] ? __virt_addr_valid+0x81/0x620 [ 116.253109][ T7212] ? __phys_addr+0xe8/0x180 [ 116.253135][ T7212] ? __list_add_valid_or_report+0x105/0x130 [ 116.253166][ T7212] kasan_report+0xdf/0x1e0 [ 116.253193][ T7212] ? __list_add_valid_or_report+0x105/0x130 [ 116.253226][ T7212] __list_add_valid_or_report+0x105/0x130 [ 116.253256][ T7212] clone_mnt+0x633/0x930 [ 116.253281][ T7212] copy_tree+0xfc/0xbf0 [ 116.253296][ T7212] ? __pfx_down_write+0x10/0x10 [ 116.253338][ T7212] copy_mnt_ns+0x2bd/0xc30 [ 116.253358][ T7212] ? create_new_namespaces+0x30/0xac0 [ 116.253383][ T7212] ? rcu_is_watching+0x12/0xc0 [ 116.253407][ T7212] create_new_namespaces+0xd3/0xac0 [ 116.253432][ T7212] ? bpf_lsm_capable+0x9/0x10 [ 116.253455][ T7212] ? security_capable+0x80/0x260 [ 116.253480][ T7212] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 116.253503][ T7212] ksys_unshare+0x455/0xab0 [ 116.253529][ T7212] ? __pfx_ksys_unshare+0x10/0x10 [ 116.253549][ T7212] ? __sys_setsockopt+0x1b5/0x220 [ 116.253577][ T7212] __x64_sys_unshare+0x31/0x40 [ 116.253598][ T7212] do_syscall_64+0x106/0xf80 [ 116.253611][ T7212] ? clear_bhb_loop+0x40/0x90 [ 116.253632][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.253652][ T7212] RIP: 0033:0x7f429cd9c629 [ 116.253667][ T7212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.253683][ T7212] RSP: 002b:00007f429dc7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 116.253701][ T7212] RAX: ffffffffffffffda RBX: 00007f429d016180 RCX: 00007f429cd9c629 [ 116.253713][ T7212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 116.253723][ T7212] RBP: 00007f429ce32b39 R08: 0000000000000000 R09: 0000000000000000 [ 116.253741][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.253751][ T7212] R13: 00007f429d016218 R14: 00007f429d016180 R15: 00007ffefd094cb8 [ 116.253768][ T7212] [ 116.253774][ T7212] [ 116.336534][ T7212] Allocated by task 7121: [ 116.338354][ T7212] kasan_save_stack+0x30/0x50 [ 116.340057][ T7212] kasan_save_track+0x14/0x30 [ 116.341797][ T7212] __kasan_slab_alloc+0x89/0x90 [ 116.343864][ T7212] kmem_cache_alloc_noprof+0x241/0x6e0 [ 116.346186][ T7212] alloc_vfsmnt+0x23/0x6a0 [ 116.347963][ T7212] clone_mnt+0x4b/0x930 [ 116.349676][ T7212] vfs_open_tree+0xb02/0x1500 [ 116.351358][ T7212] __x64_sys_open_tree+0xa3/0x150 [ 116.353311][ T7212] do_syscall_64+0x106/0xf80 [ 116.355050][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.357293][ T7212] [ 116.358176][ T7212] Freed by task 0: [ 116.359582][ T7212] kasan_save_stack+0x30/0x50 [ 116.361447][ T7212] kasan_save_track+0x14/0x30 [ 116.363433][ T7212] kasan_save_free_info+0x3b/0x70 [ 116.365549][ T7212] __kasan_slab_free+0x5f/0x80 [ 116.367388][ T7212] kmem_cache_free+0x124/0x6a0 [ 116.369191][ T7212] rcu_core+0x5a2/0x10d0 [ 116.370821][ T7212] handle_softirqs+0x1eb/0x9e0 [ 116.372771][ T7212] __irq_exit_rcu+0xef/0x150 [ 116.374455][ T7212] irq_exit_rcu+0x9/0x30 [ 116.375998][ T7212] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 116.378217][ T7212] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 116.380429][ T7212] [ 116.381454][ T7212] Last potentially related work creation: [ 116.383839][ T7212] kasan_save_stack+0x30/0x50 [ 116.385676][ T7212] kasan_record_aux_stack+0xa7/0xc0 [ 116.387926][ T7212] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 116.390405][ T7212] task_work_run+0x150/0x240 [ 116.392147][ T7212] exit_to_user_mode_loop+0x100/0x4a0 [ 116.394422][ T7212] do_syscall_64+0x67c/0xf80 [ 116.396447][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.398949][ T7212] [ 116.400037][ T7212] Second to last potentially related work creation: [ 116.402815][ T7212] kasan_save_stack+0x30/0x50 [ 116.404840][ T7212] kasan_record_aux_stack+0xa7/0xc0 [ 116.407046][ T7212] task_work_add+0x28b/0x3b0 [ 116.409025][ T7212] mntput_no_expire_slowpath+0x3da/0xb00 [ 116.411400][ T7212] mntput_no_expire+0x1fd/0x220 [ 116.413497][ T7212] mntput+0x6b/0xa0 [ 116.415146][ T7212] vfs_open_tree+0x1235/0x1500 [ 116.417213][ T7212] __x64_sys_open_tree+0xa3/0x150 [ 116.419358][ T7212] do_syscall_64+0x106/0xf80 [ 116.421331][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.423850][ T7212] [ 116.424903][ T7212] The buggy address belongs to the object at ffff88803fcd48c0 [ 116.424903][ T7212] which belongs to the cache mnt_cache of size 352 [ 116.430601][ T7212] The buggy address is located 192 bytes inside of [ 116.430601][ T7212] freed 352-byte region [ffff88803fcd48c0, ffff88803fcd4a20) [ 116.436152][ T7212] [ 116.437180][ T7212] The buggy address belongs to the physical page: [ 116.439862][ T7212] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803fcd4a80 pfn:0x3fcd4 [ 116.443981][ T7212] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 116.447574][ T7212] memcg:ffff88803fcd4171 [ 116.449372][ T7212] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 116.452903][ T7212] page_type: f5(slab) [ 116.454620][ T7212] raw: 00fff00000000240 ffff88801d6a7180 ffffea0000df3e10 ffffea0000e18790 [ 116.458223][ T7212] raw: ffff88803fcd4a80 000001c000120006 00000000f5000000 ffff88803fcd4171 [ 116.461838][ T7212] head: 00fff00000000240 ffff88801d6a7180 ffffea0000df3e10 ffffea0000e18790 [ 116.465459][ T7212] head: ffff88803fcd4a80 000001c000120006 00000000f5000000 ffff88803fcd4171 [ 116.469138][ T7212] head: 00fff00000000001 ffffea0000ff3501 00000000ffffffff 00000000ffffffff [ 116.472773][ T7212] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 116.476416][ T7212] page dumped because: kasan: bad access detected [ 116.479094][ T7212] page_owner tracks the page as allocated [ 116.481462][ T7212] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6105, tgid 6104 (syz.1.32), ts 59743906015, free_ts 59634836854 [ 116.490129][ T7212] post_alloc_hook+0x153/0x170 [ 116.492208][ T7212] get_page_from_freelist+0x111d/0x3140 [ 116.494543][ T7212] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 116.497097][ T7212] new_slab+0xa6/0x6d0 [ 116.498845][ T7212] refill_objects+0x26b/0x400 [ 116.500878][ T7212] __pcs_replace_empty_main+0x19f/0x600 [ 116.503228][ T7212] kmem_cache_alloc_noprof+0x480/0x6e0 [ 116.505598][ T7212] alloc_vfsmnt+0x23/0x6a0 [ 116.507502][ T7212] clone_mnt+0x4b/0x930 [ 116.509288][ T7212] copy_tree+0x329/0xbf0 [ 116.511094][ T7212] copy_mnt_ns+0x2bd/0xc30 [ 116.513030][ T7212] create_new_namespaces+0xd3/0xac0 [ 116.515246][ T7212] copy_namespaces+0x468/0x5e0 [ 116.517331][ T7212] copy_process+0x3226/0x7a10 [ 116.519334][ T7212] kernel_clone+0xfc/0x9a0 [ 116.521259][ T7212] __do_sys_clone+0xd9/0x120 [ 116.523240][ T7212] page last free pid 5934 tgid 5934 stack trace: [ 116.525923][ T7212] __free_frozen_pages+0x7ca/0x10a0 [ 116.528147][ T7212] qlist_free_all+0x47/0xe0 [ 116.530070][ T7212] kasan_quarantine_reduce+0x1a0/0x1f0 [ 116.532410][ T7212] __kasan_slab_alloc+0x69/0x90 [ 116.534492][ T7212] kmem_cache_alloc_noprof+0x241/0x6e0 [ 116.536841][ T7212] do_getname+0x35/0x390 [ 116.538655][ T7212] __x64_sys_unlink+0x36/0x70 [ 116.540679][ T7212] do_syscall_64+0x106/0xf80 [ 116.542651][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.545166][ T7212] [ 116.546210][ T7212] Memory state around the buggy address: [ 116.548542][ T7212] ffff88803fcd4880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 116.551923][ T7212] ffff88803fcd4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.555262][ T7212] >ffff88803fcd4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.558643][ T7212] ^ [ 116.560405][ T7212] ffff88803fcd4a00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 116.563767][ T7212] ffff88803fcd4a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.567115][ T7212] ================================================================== [ 116.573233][ T7212] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 116.575554][ T7212] CPU: 3 UID: 0 PID: 7212 Comm: syz.0.384 Not tainted syzkaller #0 PREEMPT(full) [ 116.578387][ T7212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.581523][ T7212] Call Trace: [ 116.582566][ T7212] [ 116.583521][ T7212] dump_stack_lvl+0x100/0x190 [ 116.585027][ T7212] vpanic+0x552/0x970 [ 116.586310][ T7212] ? __pfx_vpanic+0x10/0x10 [ 116.587765][ T7212] ? __list_add_valid_or_report+0x105/0x130 [ 116.589729][ T7212] panic+0xd1/0xe0 [ 116.590933][ T7212] ? __pfx_panic+0x10/0x10 [ 116.592499][ T7212] ? __list_add_valid_or_report+0x105/0x130 [ 116.594397][ T7212] ? preempt_schedule_common+0x42/0xc0 [ 116.596189][ T7212] check_panic_on_warn.cold+0x19/0x34 [ 116.597885][ T7212] end_report.part.0+0x3a/0x90 [ 116.599404][ T7212] kasan_report.cold+0xe/0x18 [ 116.600912][ T7212] ? __list_add_valid_or_report+0x105/0x130 [ 116.602778][ T7212] __list_add_valid_or_report+0x105/0x130 [ 116.604575][ T7212] clone_mnt+0x633/0x930 [ 116.606078][ T7212] copy_tree+0xfc/0xbf0 [ 116.607506][ T7212] ? __pfx_down_write+0x10/0x10 [ 116.609083][ T7212] copy_mnt_ns+0x2bd/0xc30 [ 116.610507][ T7212] ? create_new_namespaces+0x30/0xac0 [ 116.612221][ T7212] ? rcu_is_watching+0x12/0xc0 [ 116.613802][ T7212] create_new_namespaces+0xd3/0xac0 [ 116.615442][ T7212] ? bpf_lsm_capable+0x9/0x10 [ 116.617085][ T7212] ? security_capable+0x80/0x260 [ 116.619104][ T7212] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 116.621440][ T7212] ksys_unshare+0x455/0xab0 [ 116.623325][ T7212] ? __pfx_ksys_unshare+0x10/0x10 [ 116.625447][ T7212] ? __sys_setsockopt+0x1b5/0x220 [ 116.627566][ T7212] __x64_sys_unshare+0x31/0x40 [ 116.629549][ T7212] do_syscall_64+0x106/0xf80 [ 116.631470][ T7212] ? clear_bhb_loop+0x40/0x90 [ 116.633443][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.635917][ T7212] RIP: 0033:0x7f429cd9c629 [ 116.637757][ T7212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.645427][ T7212] RSP: 002b:00007f429dc7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 116.648716][ T7212] RAX: ffffffffffffffda RBX: 00007f429d016180 RCX: 00007f429cd9c629 [ 116.651191][ T7212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 116.653705][ T7212] RBP: 00007f429ce32b39 R08: 0000000000000000 R09: 0000000000000000 [ 116.656228][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.658743][ T7212] R13: 00007f429d016218 R14: 00007f429d016180 R15: 00007ffefd094cb8 [ 116.661284][ T7212] [ 116.662959][ T7212] Kernel Offset: disabled [ 116.664324][ T7212] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:03:41 Registers: info registers vcpu 0 CPU#0 RAX=000000000007ffff RBX=ffff88806a43baa8 RCX=ffffc9000c001000 RDX=0000000000080000 RSI=ffffffff8b8a16fc RDI=ffff88802cb08560 RBP=ffff88802cb08558 RSP=ffffc900272af5c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88806a43baa8 R13=dffffc0000000000 R14=ffffed100d487756 R15=ffff88806a43baa8 RIP=ffffffff82089a74 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4b1a9c76c0 ffffffff 00c00000 GS =0000 ffff8880d634a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000001c7030 CR3=0000000033c78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ff02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5626c236 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5626c236 00007ffd5626c23c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bcfa3319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bcfa331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bcfa33343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bcfa331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8578dae5 RDI=ffffffff9b49b940 RBP=ffffffff9b49b900 RSP=ffffc900262a7648 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000033 R14=0000000000000010 R15=ffffffff8578da80 RIP=ffffffff8578db0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f429dc7c6c0 ffffffff 00c00000 GS =0000 ffff8880d644a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000001c6030 CR3=000000002c8d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000480030c0800 0410003a10000601 72b801800402d0c6 0800010000000806 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100004d0032080 100004c003001000 04b00301100004a0 0307100004900300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004da0030010004d 90033e10004d8003 0280808080100004 f00308100004e003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010004df0030310 004de0030c10004d d0030010004dc003 0010004db0030010 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010010000fff ffffffffff040100 00020806060179b2 0100000008060202 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04cc0fffffffffff ff040fffffffffff ff044d80040fffff ffffffff04048004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 018010000c0151ba 0010004df0030310 004de0030c10004d d0030010004dc003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010004db0030010 004da0030010004d 90033e10004d8003 0280808080100004 ZMM25=020ba3a0020ba3a0 020ba3a0020ba3a0 020ba3a0020ba3a0 020ba3a0020ba3a0 020ba3a0020ba3a0 020ba3a0020ba3a0 020ba3a0020ba3a0 020ba3a0020ba3a0 ZMM26=69a4bdb869a4bdb8 69a4bdb869a4bdb8 69a4bdb869a4bdb8 69a4bdb869a4bdb8 69a4bdb869a4bdb8 69a4bdb869a4bdb8 69a4bdb869a4bdb8 69a4bdb869a4bdb8 ZMM27=e8e4d180e8e4d180 e8e4d180e8e4d180 e8e4d180e8e4d180 e8e4d180e8e4d180 e8e4d180e8e4d180 e8e4d180e8e4d180 e8e4d180e8e4d180 e8e4d180e8e4d180 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e4020000e4020000 e4020000e4020000 e4020000e4020000 e4020000e4020000 e4020000e4020000 e4020000e4020000 e4020000e4020000 e4020000e4020000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888058848b18 RCX=0000000000000000 RDX=ffffffffffffffff RSI=ffff888058848b18 RDI=ffff888058848000 RBP=ffff888058848000 RSP=ffffc90026337b38 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=00000000000001d2 R14=0000000000010000 R15=0000000000000005 RIP=ffffffff81e49da3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f429dc9d6c0 ffffffff 00c00000 GS =0000 ffff8880d654a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000105030 CR3=000000002c8d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefd0951a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefd0951a6 00007ffefd0951ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f429ce3319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f429ce331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f429ce33343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f429ce331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f429cfeb5f8 00007f429cfeb5c8 00007f429cfeb600 00007f429cfeb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff88806a63b188 RBX=0000000000000003 RCX=0000000000000000 RDX=1ffff1100d4e77ed RSI=ffffffff8df62c77 RDI=ffffffff8c1aefa0 RBP=0000000000000000 RSP=ffffc900255774e0 R8 =0000000000000001 R9 =fffff52004aaee92 R10=0000000000000003 R11=0000000000000000 R12=ffff88806a63b1a0 R13=ffff88802459c900 R14=0000000000000046 R15=ffff88806a73b140 RIP=ffffffff8b8f740a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f429dcbe6c0 ffffffff 00c00000 GS =0000 ffff8880d664a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000001c9000 CR3=000000002c8d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0fc81 Opmask01=0000000000410101 Opmask02=00000000ffffffff Opmask03=0000000010400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055933b006dd0 000055933b006dd0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055933afecaa0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055933b002de0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90377f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326e048714953 737326e0425ae6c3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737273737326 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ae9847c93da5442 0000559663cd5810 0000000000000081 0000000000320000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c4339 312c3739312c3938 312c3838312c3538 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4631653134303070 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000