last executing test programs: 3.34763107s ago: executing program 2 (id=568): socket$inet6(0xa, 0x3, 0x7) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd6000000010902"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/60, 0x3c}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4e, 0x2004, @fd_index=0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x8, 0x0, {0x3}}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.532090958s ago: executing program 3 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.167659279s ago: executing program 2 (id=577): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf67c}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0xa}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.573417578s ago: executing program 3 (id=579): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.573265435s ago: executing program 3 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r4, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.271065483s ago: executing program 2 (id=582): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsopen(0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc090002) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1) 633.404744ms ago: executing program 3 (id=586): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SC_SUPPORT={{0x8}, 0xa}}}, 0x7) 633.179096ms ago: executing program 0 (id=587): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ea07a0d08"], 0x9) 632.95437ms ago: executing program 3 (id=588): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) flock(0xffffffffffffffff, 0xa422928b49da8f68) prlimit64(0x0, 0x6, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba554311bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362"], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 632.752078ms ago: executing program 0 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mkdir(0x0, 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x800000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) 531.193814ms ago: executing program 0 (id=590): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05040f20"], 0x8) 411.703346ms ago: executing program 0 (id=591): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04083520"], 0x7) 411.504677ms ago: executing program 0 (id=592): syz_emit_vhci(&(0x7f00000012c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x1, 0x401}}}, 0x7) 411.110793ms ago: executing program 2 (id=593): syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 407.336742ms ago: executing program 0 (id=594): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000001240)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x20801) userfaultfd(0x801) syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x2a8600) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000380), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) open$dir(&(0x7f0000000100)='./file0\x00', 0x8802, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x201, 0x1, &(0x7f0000000540)=[r2], &(0x7f0000000500)=[0x1], &(0x7f0000000200), &(0x7f0000000580), 0x0, 0x7f}) 353.314833ms ago: executing program 3 (id=595): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x8, @vbi={0x9f9, 0x100, 0xc, 0x5abb37001e896ccd, [0x7, 0x4], [0xe8d4, 0x8], 0x13a}}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) pipe(&(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f, 0x0, 0x83}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c000500"], 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 333.409486ms ago: executing program 2 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r2, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 142.975723ms ago: executing program 2 (id=599): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x2000c045}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 142.829221ms ago: executing program 1 (id=600): socket(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 142.724696ms ago: executing program 1 (id=601): syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x24}, @hci_rp_read_local_oob_data={{0x9}, {0x2, "35e9c7ad09427ad3d15f2a7331fc9ddd", "6a8101e6b5ff05db58a712db9ce13a51"}}}}, 0x27) 71.481057ms ago: executing program 1 (id=602): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x7e, 0x0, 0x10, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x20, 0x1000, 0x8001}}) 71.391791ms ago: executing program 1 (id=603): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e04001120"], 0x7) 209.694µs ago: executing program 1 (id=604): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 0s ago: executing program 1 (id=605): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f003, 0x1}) kernel console output (not intermixed with test programs): [ 38.157841][ T40] audit: type=1400 audit(1743507994.305:81): avc: denied { rlimitinh } for pid=5859 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.163257][ T40] audit: type=1400 audit(1743507994.305:82): avc: denied { siginh } for pid=5859 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.961696][ T40] audit: type=1400 audit(1743507995.125:83): avc: denied { read } for pid=5342 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.969317][ T40] audit: type=1400 audit(1743507995.125:84): avc: denied { append } for pid=5342 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.975524][ T40] audit: type=1400 audit(1743507995.125:85): avc: denied { open } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.981423][ T40] audit: type=1400 audit(1743507995.125:86): avc: denied { getattr } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:31732' (ED25519) to the list of known hosts. [ 40.239222][ T40] audit: type=1400 audit(1743507996.395:87): avc: denied { name_bind } for pid=5886 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.111245][ T5890] cgroup: Unknown subsys name 'net' [ 42.252336][ T5890] cgroup: Unknown subsys name 'cpuset' [ 42.257402][ T5890] cgroup: Unknown subsys name 'rlimit' [ 42.492915][ T5939] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.165681][ T5890] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.311646][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 46.311662][ T40] audit: type=1400 audit(1743508002.475:105): avc: denied { execmem } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.507749][ T40] audit: type=1400 audit(1743508002.665:106): avc: denied { create } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.513523][ T40] audit: type=1400 audit(1743508002.665:107): avc: denied { read write } for pid=5949 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.521230][ T40] audit: type=1400 audit(1743508002.665:108): avc: denied { open } for pid=5949 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.527362][ T40] audit: type=1400 audit(1743508002.675:109): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="socket:[4914]" dev="sockfs" ino=4914 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.544881][ T5304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.547355][ T5963] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.550663][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.552649][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.554849][ T5963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.556798][ T5963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.559032][ T5963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.561403][ T5963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.563628][ T5963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.565858][ T5963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.567930][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.570599][ T5963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.572982][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.575433][ T5963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.577587][ T5963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.582711][ T5964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.587596][ T40] audit: type=1400 audit(1743508002.745:110): avc: denied { read } for pid=5953 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.587699][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.594921][ T40] audit: type=1400 audit(1743508002.745:111): avc: denied { open } for pid=5953 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.597245][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.601511][ T40] audit: type=1400 audit(1743508002.745:112): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.603466][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.603737][ T5966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.809533][ T40] audit: type=1400 audit(1743508002.965:113): avc: denied { module_request } for pid=5953 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.843097][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 46.859528][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 46.903150][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 47.025094][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.027029][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.029104][ T5953] bridge_slave_0: entered allmulticast mode [ 47.031763][ T5953] bridge_slave_0: entered promiscuous mode [ 47.036619][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.038461][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.041190][ T5953] bridge_slave_1: entered allmulticast mode [ 47.043281][ T5953] bridge_slave_1: entered promiscuous mode [ 47.113345][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 47.120715][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.122663][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.124568][ T5952] bridge_slave_0: entered allmulticast mode [ 47.126719][ T5952] bridge_slave_0: entered promiscuous mode [ 47.129892][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.131858][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.133743][ T5952] bridge_slave_1: entered allmulticast mode [ 47.135875][ T5952] bridge_slave_1: entered promiscuous mode [ 47.143404][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.147509][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.240048][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.260990][ T5953] team0: Port device team_slave_0 added [ 47.266650][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.269205][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.272390][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.274403][ T5949] bridge_slave_0: entered allmulticast mode [ 47.277227][ T5949] bridge_slave_0: entered promiscuous mode [ 47.280979][ T5953] team0: Port device team_slave_1 added [ 47.297161][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.301405][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.304039][ T5949] bridge_slave_1: entered allmulticast mode [ 47.307150][ T5949] bridge_slave_1: entered promiscuous mode [ 47.370057][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.371960][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.378601][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.394928][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.396849][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.398834][ T5951] bridge_slave_0: entered allmulticast mode [ 47.401730][ T5951] bridge_slave_0: entered promiscuous mode [ 47.406401][ T5952] team0: Port device team_slave_0 added [ 47.419805][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.421745][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.428264][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.433838][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.435836][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.437735][ T5951] bridge_slave_1: entered allmulticast mode [ 47.440218][ T5951] bridge_slave_1: entered promiscuous mode [ 47.455002][ T5952] team0: Port device team_slave_1 added [ 47.457978][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.466075][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.497448][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.503572][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.536942][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.539194][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.546592][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.550881][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.552718][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.559261][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.628257][ T5951] team0: Port device team_slave_0 added [ 47.633911][ T5949] team0: Port device team_slave_0 added [ 47.637632][ T5949] team0: Port device team_slave_1 added [ 47.643719][ T5953] hsr_slave_0: entered promiscuous mode [ 47.645766][ T5953] hsr_slave_1: entered promiscuous mode [ 47.649234][ T5951] team0: Port device team_slave_1 added [ 47.708518][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.710453][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.717006][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.721005][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.722838][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.729500][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.750778][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.753015][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.761114][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.802923][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.805141][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.812391][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.817524][ T5952] hsr_slave_0: entered promiscuous mode [ 47.819644][ T5952] hsr_slave_1: entered promiscuous mode [ 47.821759][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.824255][ T5952] Cannot create hsr debugfs directory [ 47.927458][ T5949] hsr_slave_0: entered promiscuous mode [ 47.929469][ T5949] hsr_slave_1: entered promiscuous mode [ 47.931231][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.933172][ T5949] Cannot create hsr debugfs directory [ 47.988451][ T5951] hsr_slave_0: entered promiscuous mode [ 47.990438][ T5951] hsr_slave_1: entered promiscuous mode [ 47.992282][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.994426][ T5951] Cannot create hsr debugfs directory [ 48.227875][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.245174][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.261235][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.274303][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.308905][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.313770][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.317907][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.322733][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.354997][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.366377][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.378230][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.383280][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.415229][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.418857][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.423908][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.427990][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.477693][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.504395][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.526479][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.528579][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.550868][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.552789][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.566509][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.572061][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.599792][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.605583][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.620117][ T5966] Bluetooth: hci3: command tx timeout [ 48.621250][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.621613][ T5950] Bluetooth: hci0: command tx timeout [ 48.625250][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.628920][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.630693][ T5966] Bluetooth: hci2: command tx timeout [ 48.630921][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.636900][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.638843][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.657264][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.661239][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.663170][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.676820][ T40] audit: type=1400 audit(1743508004.835:114): avc: denied { sys_module } for pid=5953 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.681490][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.700285][ T5966] Bluetooth: hci1: command tx timeout [ 48.705167][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.707115][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.711483][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.713381][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.781912][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.823846][ T5953] veth0_vlan: entered promiscuous mode [ 48.831683][ T5953] veth1_vlan: entered promiscuous mode [ 48.856258][ T5953] veth0_macvtap: entered promiscuous mode [ 48.864963][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.868024][ T5953] veth1_macvtap: entered promiscuous mode [ 48.882489][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.897587][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.907947][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.917250][ T5953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.920190][ T5953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.923029][ T5953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.925301][ T5953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.930456][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.959997][ T5952] veth0_vlan: entered promiscuous mode [ 48.988374][ T5952] veth1_vlan: entered promiscuous mode [ 48.996999][ T5949] veth0_vlan: entered promiscuous mode [ 49.023413][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.026187][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.035451][ T5949] veth1_vlan: entered promiscuous mode [ 49.039069][ T5951] veth0_vlan: entered promiscuous mode [ 49.045329][ T5951] veth1_vlan: entered promiscuous mode [ 49.063865][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.065906][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.079141][ T5952] veth0_macvtap: entered promiscuous mode [ 49.084332][ T5951] veth0_macvtap: entered promiscuous mode [ 49.087499][ T5952] veth1_macvtap: entered promiscuous mode [ 49.092035][ T5951] veth1_macvtap: entered promiscuous mode [ 49.106195][ T5949] veth0_macvtap: entered promiscuous mode [ 49.110965][ T5949] veth1_macvtap: entered promiscuous mode [ 49.117194][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.121106][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.125667][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.130923][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.133966][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.137128][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.141079][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.144860][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.150823][ T5953] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.151199][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.159305][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.163280][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.168279][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.171968][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.174833][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.178140][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.183025][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.193006][ T5952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.196015][ T5952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.199016][ T5952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.202508][ T5952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.213411][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.216026][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.218835][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.223446][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.235285][ T5952] percpu: allocation failed, size=8 align=8 atomic=1, atomic alloc failed, no space left [ 49.238694][ T5952] IPv6: wg0: Failed to add prefix route for address fe80::42; dropping [ 49.253742][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.257568][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.261292][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.264952][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.268351][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.272240][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.289166][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.357260][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.360852][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.364288][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.368131][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.372126][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.375912][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.382178][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.415502][ T5949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.418694][ T5949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.422433][ T5949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.425540][ T5949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583705][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.584852][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.585780][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.587877][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.617260][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.621801][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.640840][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.643629][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.673722][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.675786][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.702426][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 49.706911][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.709044][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.727821][ T6022] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6022 comm=syz.3.4 [ 50.451248][ T835] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.609588][ T835] usb 8-1: Using ep0 maxpacket: 32 [ 50.619082][ T835] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 50.632926][ T835] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 50.636210][ T835] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 50.639140][ T835] usb 8-1: Product: syz [ 50.640847][ T835] usb 8-1: Manufacturer: syz [ 50.642255][ T835] usb 8-1: SerialNumber: syz [ 50.655748][ T835] usb 8-1: config 0 descriptor?? [ 50.661560][ T6058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.680255][ T835] hub 8-1:0.0: bad descriptor, ignoring hub [ 50.682004][ T835] hub 8-1:0.0: probe with driver hub failed with error -5 [ 50.701839][ T5950] Bluetooth: hci0: command tx timeout [ 50.712108][ T5950] Bluetooth: hci2: command tx timeout [ 50.712176][ T69] Bluetooth: hci3: command tx timeout [ 50.776569][ T6055] netlink: 'syz.1.13': attribute type 12 has an invalid length. [ 50.779968][ T69] Bluetooth: hci1: command tx timeout [ 51.002375][ T6066] xt_hashlimit: size too large, truncated to 1048576 [ 51.120164][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.271943][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 51.274593][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 51.277119][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 51.279311][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.283033][ T6063] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 51.286798][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.290068][ T6058] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 51.370080][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.442715][ T6058] usb 8-1: device firmware changed [ 51.446335][ T5959] usb 8-1: USB disconnect, device number 2 [ 51.492010][ T29] usb 5-1: USB disconnect, device number 2 [ 51.541722][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.544724][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.547772][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.551602][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.554302][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.558472][ T24] usb 6-1: config 0 descriptor?? [ 51.581109][ T5959] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.729507][ T5959] usb 8-1: Using ep0 maxpacket: 32 [ 51.732852][ T5959] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 51.738752][ T5959] usb 8-1: string descriptor 0 read error: -22 [ 51.741694][ T5959] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 51.744600][ T5959] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 51.748779][ T5959] usb 8-1: config 0 descriptor?? [ 51.753289][ T6064] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 51.756025][ T5959] hub 8-1:0.0: bad descriptor, ignoring hub [ 51.758265][ T5959] hub 8-1:0.0: probe with driver hub failed with error -5 [ 51.968542][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.970895][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.972875][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.975847][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.978385][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.980819][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.981665][ T69] Bluetooth: hci4: command 0x1003 tx timeout [ 51.983068][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.988342][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.993825][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.996567][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.000362][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.002845][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.005402][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.008177][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.011623][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.014081][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.017304][ T24] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 52.024280][ T24] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 52.069773][ T5959] usb 8-1: USB disconnect, device number 3 [ 52.081329][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 52.098992][ T6075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.235235][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 52.235251][ T40] audit: type=1400 audit(1743508008.395:180): avc: denied { create } for pid=6076 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.243978][ T40] audit: type=1400 audit(1743508008.405:181): avc: denied { setopt } for pid=6076 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.251665][ T40] audit: type=1400 audit(1743508008.405:182): avc: denied { bind } for pid=6076 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.257956][ T40] audit: type=1400 audit(1743508008.405:183): avc: denied { name_bind } for pid=6076 comm="syz.0.20" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.264362][ T40] audit: type=1400 audit(1743508008.405:184): avc: denied { node_bind } for pid=6076 comm="syz.0.20" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 52.271145][ T40] audit: type=1400 audit(1743508008.405:185): avc: denied { write } for pid=6076 comm="syz.0.20" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.277039][ T40] audit: type=1400 audit(1743508008.405:186): avc: denied { connect } for pid=6076 comm="syz.0.20" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.283168][ T40] audit: type=1400 audit(1743508008.405:187): avc: denied { name_connect } for pid=6076 comm="syz.0.20" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.309931][ T6075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.378574][ T6075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.438896][ T6075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.505461][ T6086] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.517484][ T40] audit: type=1400 audit(1743508008.675:188): avc: denied { read } for pid=6085 comm="syz.3.24" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.526012][ T40] audit: type=1400 audit(1743508008.675:189): avc: denied { open } for pid=6085 comm="syz.3.24" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.530856][ T6075] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.540926][ T6075] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.547210][ T6075] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.554094][ T6075] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.780247][ T5966] Bluetooth: hci0: command tx timeout [ 52.780331][ T69] Bluetooth: hci3: command tx timeout [ 52.789537][ T69] Bluetooth: hci2: command tx timeout [ 52.859655][ T69] Bluetooth: hci1: command tx timeout [ 53.197562][ T6106] No source specified [ 53.205326][ T6106] NILFS (nbd3): device size too small [ 53.539515][ T67] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 53.720660][ T67] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 53.723639][ T67] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 53.736434][ T67] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 53.738903][ T67] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.743536][ T6108] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 53.748003][ T67] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 53.951888][ T67] usb 8-1: USB disconnect, device number 4 [ 54.128089][ T6012] usb 6-1: USB disconnect, device number 2 [ 54.859591][ T69] Bluetooth: hci2: command tx timeout [ 54.859996][ T5966] Bluetooth: hci0: command tx timeout [ 54.860017][ T5950] Bluetooth: hci3: command tx timeout [ 54.879366][ T6133] block device autoloading is deprecated and will be removed. [ 54.939688][ T5966] Bluetooth: hci1: command tx timeout [ 55.053320][ T6134] kvm: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8a8 [ 55.062760][ T6134] kvm: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x37 [ 55.074414][ T6134] kvm: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x78 [ 55.082373][ T6134] kvm_intel: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x807 [ 55.096725][ T6134] kvm: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x8a4 [ 55.100845][ T6134] kvm: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x41 [ 55.113524][ T6134] kvm: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x89a [ 55.124496][ T6134] kvm: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xf1 [ 55.137082][ T6134] kvm: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x3d [ 55.146442][ T6134] kvm: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x2e [ 55.150162][ T6134] kvm: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x39 [ 55.155991][ T6134] kvm_intel: kvm [6132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x813 [ 55.259879][ T6095] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.409538][ T6095] usb 7-1: Using ep0 maxpacket: 8 [ 55.412418][ T6095] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 55.414738][ T6095] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 55.417050][ T6095] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 55.420006][ T6095] usb 7-1: config 250 has no interface number 0 [ 55.421788][ T6095] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 55.424931][ T6095] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 55.427800][ T6095] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 55.430820][ T6095] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 55.433724][ T6095] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 55.437271][ T6095] usb 7-1: config 250 interface 228 has no altsetting 0 [ 55.441270][ T6095] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 55.443757][ T6095] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 55.446019][ T6095] usb 7-1: Product: syz [ 55.447168][ T6095] usb 7-1: SerialNumber: syz [ 55.450848][ T6095] hub 7-1:250.228: bad descriptor, ignoring hub [ 55.452563][ T6095] hub 7-1:250.228: probe with driver hub failed with error -5 [ 55.657903][ T6095] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 56.063909][ T6159] syzkaller0: entered promiscuous mode [ 56.065621][ T6159] syzkaller0: entered allmulticast mode [ 56.574107][ T6140] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 56.801841][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 56.941864][ T6140] usb 7-1: failed to restore interface 228 altsetting 255 (error=-71) [ 56.948220][ T6010] usb 7-1: USB disconnect, device number 2 [ 56.949681][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 56.955891][ T24] usb 8-1: config 0 has no interfaces? [ 56.961711][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.962239][ T6010] usblp0: removed [ 56.965150][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.969941][ T24] usb 8-1: Product: syz [ 56.971553][ T24] usb 8-1: Manufacturer: syz [ 56.973347][ T24] usb 8-1: SerialNumber: syz [ 56.977822][ T24] usb 8-1: config 0 descriptor?? [ 57.202883][ T24] usb 8-1: USB disconnect, device number 5 [ 57.700535][ T6172] Set syz1 is full, maxelem 65536 reached [ 57.774724][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 57.774735][ T40] audit: type=1400 audit(1743508013.935:221): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.798560][ T40] audit: type=1400 audit(1743508013.955:222): avc: denied { read write } for pid=6191 comm="syz.1.62" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.807289][ T40] audit: type=1400 audit(1743508013.955:223): avc: denied { open } for pid=6191 comm="syz.1.62" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.813232][ T6192] loop6: detected capacity change from 0 to 524287999 [ 57.816660][ T40] audit: type=1400 audit(1743508013.975:224): avc: denied { append } for pid=6191 comm="syz.1.62" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.828247][ T6192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.832550][ T6192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.835993][ T6192] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 57.839616][ T6192] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 57.844634][ T6192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.847286][ T6192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.851845][ T6192] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 57.855119][ T6192] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 57.963566][ T40] audit: type=1400 audit(1743508014.125:225): avc: denied { append } for pid=6199 comm="syz.0.65" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 58.106051][ T40] audit: type=1400 audit(1743508014.265:226): avc: denied { create } for pid=6205 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.115179][ T40] audit: type=1400 audit(1743508014.275:227): avc: denied { bind } for pid=6205 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.166203][ T40] audit: type=1400 audit(1743508014.325:228): avc: denied { setopt } for pid=6205 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.171446][ T40] audit: type=1400 audit(1743508014.325:229): avc: denied { accept } for pid=6205 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.270137][ T1120] sr 2:0:0:0: [sr0] tag#27 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 58.272888][ T1120] sr 2:0:0:0: [sr0] tag#27 Sense Key : Illegal Request [current] [ 58.275436][ T1120] sr 2:0:0:0: [sr0] tag#27 Add. Sense: Invalid command operation code [ 58.278449][ T1120] sr 2:0:0:0: [sr0] tag#27 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 58.282188][ T1120] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 58.286054][ T1120] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 58.358902][ T6217] syz.3.69 uses obsolete (PF_INET,SOCK_PACKET) [ 58.715548][ T6228] @: renamed from vlan0 (while UP) [ 58.720140][ T40] audit: type=1400 audit(1743508014.875:230): avc: denied { ioctl } for pid=6227 comm="syz.2.73" path="socket:[8727]" dev="sockfs" ino=8727 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.200753][ T6234] process 'syz.0.74' launched './file2' with NULL argv: empty string added [ 59.750126][ T67] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.921067][ T67] usb 6-1: config 0 has no interfaces? [ 59.922754][ T67] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 59.925340][ T67] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.940026][ T67] usb 6-1: config 0 descriptor?? [ 59.968995][ T6255] xt_hashlimit: size too large, truncated to 1048576 [ 60.085000][ T6240] kvm_pr_unimpl_wrmsr: 98 callbacks suppressed [ 60.085021][ T6240] kvm: kvm [6239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb0000c531 [ 60.094620][ T6240] kvm: kvm [6239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb0000ab0b [ 60.136478][ T6240] kvm: kvm [6239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb0000b341 [ 60.161724][ T6240] kvm: kvm [6239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb0000e566 [ 60.161807][ T835] usb 6-1: USB disconnect, device number 3 [ 60.177107][ T6240] kvm: kvm [6239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb0000de3a [ 60.209029][ T6240] kvm: kvm [6239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb0000d2f0 [ 60.216693][ T6240] kvm: kvm [6239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb0000ae3a [ 60.240593][ T6240] kvm: kvm [6239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb0000f5d9 [ 60.276942][ T6240] kvm: kvm [6239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb00009606 [ 60.315871][ T6240] kvm: kvm [6239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb0000ce46 [ 60.999587][ T2303] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 61.017585][ T6277] can0: slcan on ptm0. [ 61.169656][ T2303] usb 8-1: Using ep0 maxpacket: 32 [ 61.173226][ T2303] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 61.175806][ T2303] usb 8-1: config 0 has no interface number 0 [ 61.179284][ T2303] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 61.182680][ T2303] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.185193][ T2303] usb 8-1: Product: syz [ 61.186479][ T2303] usb 8-1: Manufacturer: syz [ 61.187944][ T2303] usb 8-1: SerialNumber: syz [ 61.218106][ T2303] usb 8-1: config 0 descriptor?? [ 61.230054][ T2303] smsc95xx v2.0.0 [ 61.231320][ T2303] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 61.234624][ T2303] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 61.299757][ T58] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.507872][ T58] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 61.510665][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.512807][ T58] usb 6-1: Product: syz [ 61.513945][ T58] usb 6-1: Manufacturer: syz [ 61.515969][ T58] usb 6-1: SerialNumber: syz [ 61.519146][ T6265] syz.2.84 (6265): drop_caches: 2 [ 61.521013][ T58] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 61.541447][ T58] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 61.558100][ T6299] @ÿ: renamed from bond_slave_0 (while UP) [ 61.902560][ T6277] can0 (unregistered): slcan off ptm0. [ 61.923879][ T65] usb 6-1: USB disconnect, device number 4 [ 62.545409][ T6319] warning: `syz.1.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.619598][ T58] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 62.622361][ T58] ath9k_htc: Failed to initialize the device [ 62.626687][ T65] usb 6-1: ath9k_htc: USB layer deinitialized [ 63.690164][ T65] usb 8-1: USB disconnect, device number 6 [ 63.718159][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 63.718170][ T40] audit: type=1400 audit(1743508019.875:250): avc: denied { connect } for pid=6325 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.819567][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.819586][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 63.876728][ T40] audit: type=1400 audit(1743508020.035:251): avc: denied { ioctl } for pid=6332 comm="syz.2.106" path="socket:[11231]" dev="sockfs" ino=11231 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.179771][ T835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.359678][ T835] usb 7-1: Using ep0 maxpacket: 8 [ 64.362402][ T835] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.365323][ T835] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.367841][ T835] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 64.371291][ T835] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.375883][ T835] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 64.378535][ T835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.459632][ T5966] Bluetooth: hci5: command 0xfc11 tx timeout [ 64.459633][ T69] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 64.501461][ T6338] vti0: entered promiscuous mode [ 64.527078][ T69] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 64.576180][ T40] audit: type=1400 audit(1743508020.735:252): avc: denied { sys_module } for pid=6341 comm="syz.0.110" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.590635][ T835] usb 7-1: GET_CAPABILITIES returned 0 [ 64.592204][ T835] usbtmc 7-1:16.0: can't read capabilities [ 64.613850][ T40] audit: type=1400 audit(1743508020.775:253): avc: denied { write } for pid=6345 comm="syz.1.111" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.659536][ T40] audit: type=1400 audit(1743508020.815:254): avc: denied { mount } for pid=6341 comm="syz.0.110" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.665407][ T40] audit: type=1400 audit(1743508020.825:255): avc: denied { execute } for pid=6341 comm="syz.0.110" path="/38/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.672525][ T40] audit: type=1800 audit(1743508020.825:256): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.110" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 64.742735][ T40] audit: type=1400 audit(1743508020.905:257): avc: denied { create } for pid=6352 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.750279][ T40] audit: type=1400 audit(1743508020.915:258): avc: denied { bind } for pid=6352 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.759698][ T40] audit: type=1400 audit(1743508020.915:259): avc: denied { node_bind } for pid=6352 comm="syz.3.114" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 64.793358][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.797346][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.800708][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.804526][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.807039][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.813041][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.816368][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.819897][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.822364][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.824875][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.827300][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.829769][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.832214][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.834654][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.837114][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.840659][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.846939][ T6010] usb 7-1: USB disconnect, device number 3 [ 64.941774][ T6365] netlink: 'syz.3.119': attribute type 4 has an invalid length. [ 64.943817][ T6365] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.119'. [ 65.529729][ T6381] netlink: 'syz.2.125': attribute type 39 has an invalid length. [ 65.702680][ T6394] geneve2: entered promiscuous mode [ 65.704659][ T6394] geneve2: entered allmulticast mode [ 65.973362][ T6405] infiniband syz!: set active [ 65.974792][ T6405] infiniband syz!: added team_slave_0 [ 66.018157][ T6405] RDS/IB: syz!: added [ 66.020440][ T6405] smc: adding ib device syz! with port count 1 [ 66.022829][ T6405] smc: ib device syz! port 1 has pnetid [ 66.029925][ T58] e1000 0000:00:06.0 eth0: Reset adapter [ 66.031387][ T6414] tipc: Started in network mode [ 66.034140][ T6414] tipc: Node identity 1e7abd4186d1, cluster identity 4711 [ 66.036826][ T6414] tipc: Enabled bearer , priority 0 [ 66.176799][ T6414] syzkaller0: entered promiscuous mode [ 66.178986][ T6414] syzkaller0: entered allmulticast mode [ 66.183383][ T6414] tipc: Resetting bearer [ 66.215213][ T6413] tipc: Resetting bearer [ 66.400209][ T6437] Zero length message leads to an empty skb [ 66.415790][ T6438] netlink: 'syz.1.141': attribute type 4 has an invalid length. [ 66.983155][ T6413] tipc: Disabling bearer [ 68.220827][ T64] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 71.103755][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.105829][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.476616][ T6468] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.546738][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 76.546750][ T40] audit: type=1400 audit(1743508032.705:273): avc: denied { create } for pid=6481 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.556850][ T40] audit: type=1400 audit(1743508032.705:274): avc: denied { write } for pid=6481 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.568792][ T40] audit: type=1400 audit(1743508032.715:275): avc: denied { setopt } for pid=6481 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.576262][ T40] audit: type=1400 audit(1743508032.715:276): avc: denied { read } for pid=6481 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.582014][ T40] audit: type=1400 audit(1743508032.725:277): avc: denied { rename } for pid=5342 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.590399][ T40] audit: type=1400 audit(1743508032.725:278): avc: denied { unlink } for pid=5342 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.596616][ T40] audit: type=1400 audit(1743508032.725:279): avc: denied { create } for pid=5342 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.747133][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 76.750247][ T6514] netlink: 'syz.1.166': attribute type 19 has an invalid length. [ 76.753310][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.166'. [ 76.793012][ T40] audit: type=1400 audit(1743508032.955:280): avc: denied { ioctl } for pid=6519 comm="syz.0.169" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.810523][ T40] audit: type=1400 audit(1743508032.975:281): avc: denied { create } for pid=6523 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.820842][ T40] audit: type=1400 audit(1743508032.975:282): avc: denied { getopt } for pid=6523 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.865385][ T6530] syz.2.174 (6530) used greatest stack depth: 20040 bytes left [ 76.927867][ T6544] netlink: 'syz.1.181': attribute type 25 has an invalid length. [ 76.930703][ T6544] netlink: 184 bytes leftover after parsing attributes in process `syz.1.181'. [ 76.954427][ T6547] random: crng reseeded on system resumption [ 77.112296][ T6574] netlink: 76 bytes leftover after parsing attributes in process `syz.2.195'. [ 77.140274][ T6576] ubi31: attaching mtd0 [ 77.141565][ T6576] ubi31 error: ubi_attach_mtd_dev: bad VID header (5247841) or data offsets (5247905) [ 77.350436][ T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.510763][ T64] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.513991][ T64] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.517266][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.519760][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.522121][ T64] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 77.525008][ T64] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 77.529806][ T64] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.532417][ T64] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.534477][ T64] usb 5-1: Product: syz [ 77.535634][ T64] usb 5-1: Manufacturer: syz [ 77.540092][ T64] cdc_wdm 5-1:1.0: skipping garbage [ 77.541900][ T64] cdc_wdm 5-1:1.0: skipping garbage [ 77.544777][ T64] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 77.546391][ T64] cdc_wdm 5-1:1.0: Unknown control protocol [ 77.664975][ T5966] Bluetooth: hci2: Dropping invalid advertising data [ 77.667729][ T5966] Bluetooth: hci2: Malformed LE Event: 0x02 [ 77.669506][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 77.672842][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.675751][ T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.678627][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.682921][ T24] usb 7-1: config 0 descriptor?? [ 77.750136][ T64] usb 5-1: USB disconnect, device number 3 [ 77.891318][ T24] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.094354][ T64] usb 7-1: USB disconnect, device number 4 [ 78.308126][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 78.367439][ T6616] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 78.376532][ T6616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.382254][ T6616] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 78.459493][ T2303] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 78.622998][ T2303] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.626125][ T2303] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.629104][ T2303] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.632539][ T2303] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.641322][ T6604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.648132][ T2303] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.671905][ T69] Bluetooth: hci3: Invalid handle: 0xffff > 0x0eff [ 78.905042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.905765][ T835] usb 8-1: USB disconnect, device number 7 [ 78.907615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.327035][ T6012] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 79.483857][ T6012] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 79.487248][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.490247][ T6012] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.497801][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.503846][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.506996][ T6012] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.510498][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.513886][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.517237][ T6012] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.521717][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.525152][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.527711][ T6012] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.531776][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.538641][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.542799][ T6012] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.546244][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.548735][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.551941][ T6012] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.552001][ T6674] input: syz0 as /devices/virtual/input/input6 [ 79.554810][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.555959][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.562609][ T6012] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.565516][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.568032][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.571320][ T6012] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.574447][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.577728][ T6012] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 79.582194][ T6012] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 79.584465][ T6012] usb 6-1: Product: syz [ 79.585627][ T6012] usb 6-1: Manufacturer: syz [ 79.586939][ T6012] usb 6-1: SerialNumber: syz [ 79.594772][ T6012] usb 6-1: config 0 descriptor?? [ 79.601717][ T6012] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.808148][ T6012] usb 6-1: USB disconnect, device number 5 [ 79.815370][ T6012] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 80.269543][ T6010] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 80.439479][ T6010] usb 8-1: config 0 has no interfaces? [ 80.442072][ T6010] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 80.444650][ T6010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.447679][ T6010] usb 8-1: config 0 descriptor?? [ 80.656622][ T6010] usb 8-1: USB disconnect, device number 8 [ 80.690523][ T64] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 80.715345][ T6723] ======================================================= [ 80.715345][ T6723] WARNING: The mand mount option has been deprecated and [ 80.715345][ T6723] and is ignored by this kernel. Remove the mand [ 80.715345][ T6723] option from the mount to silence this warning. [ 80.715345][ T6723] ======================================================= [ 80.841262][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 80.844272][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.846983][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 80.852279][ T64] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 80.855487][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.858118][ T64] usb 6-1: Product: syz [ 80.859262][ T64] usb 6-1: Manufacturer: syz [ 80.867234][ T64] usb 6-1: SerialNumber: syz [ 80.875729][ T64] usb 6-1: config 0 descriptor?? [ 80.949192][ T6739] serio: Serial port ptm0 [ 81.085290][ T64] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 81.305273][ T835] usb 6-1: USB disconnect, device number 6 [ 81.359250][ T10] cfg80211: failed to load regulatory.db [ 81.410669][ T6763] Bluetooth: MGMT ver 1.23 [ 81.545357][ T6767] overlayfs: failed to resolve '/d_recursive': -2 [ 81.666757][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 81.666768][ T40] audit: type=1400 audit(1743508037.825:327): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.781950][ T40] audit: type=1400 audit(1743508037.935:328): avc: denied { mount } for pid=6776 comm="syz.3.282" name="/" dev="ramfs" ino=13745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.782114][ T6777] overlayfs: workdir and upperdir must reside under the same mount [ 81.803404][ T40] audit: type=1400 audit(1743508037.965:329): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.825481][ T6771] netlink: 'syz.2.279': attribute type 39 has an invalid length. [ 81.843318][ T40] audit: type=1400 audit(1743508038.005:330): avc: denied { load_policy } for pid=6781 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 81.846855][ T6782] SELinux: ebitmap: truncated map [ 81.854383][ T6782] SELinux: failed to load policy [ 81.858964][ T40] audit: type=1400 audit(1743508038.015:331): avc: denied { read write } for pid=6785 comm="syz.1.285" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.866794][ T40] audit: type=1400 audit(1743508038.015:332): avc: denied { open } for pid=6785 comm="syz.1.285" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.867127][ T6786] Attempt to restore checkpoint with obsolete wellknown handles [ 81.875724][ T40] audit: type=1400 audit(1743508038.025:333): avc: denied { ioctl } for pid=6785 comm="syz.1.285" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.932710][ T6790] kvm: kvm [6789]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000052) = 0x0 [ 81.940570][ T40] audit: type=1400 audit(1743508038.095:334): avc: denied { mount } for pid=6791 comm="syz.2.287" name="/" dev="9p" ino=36831288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.951812][ T40] audit: type=1400 audit(1743508038.115:335): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.149265][ T6814] tun0: tun_chr_ioctl cmd 1074025675 [ 82.150939][ T6814] tun0: persist enabled [ 82.235483][ T6823] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.238301][ T78] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.333650][ T6828] overlayfs: failed to resolve '/d_recursive': -2 [ 82.334865][ T40] audit: type=1400 audit(1743508038.495:336): avc: denied { mounton } for pid=6824 comm="syz.1.304" path="/85/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 82.800748][ T6844] netlink: 'syz.3.311': attribute type 39 has an invalid length. [ 83.369503][ T64] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 83.521203][ T64] usb 8-1: config 0 has no interfaces? [ 83.523218][ T64] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 83.526498][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.531290][ T64] usb 8-1: config 0 descriptor?? [ 83.614755][ T5966] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 83.738208][ T64] usb 8-1: USB disconnect, device number 9 [ 84.309512][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 84.311448][ T69] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 84.826512][ T6958] netlink: 'syz.0.354': attribute type 16 has an invalid length. [ 84.829538][ T6958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.354'. [ 84.833434][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.923512][ T6964] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 84.956962][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.958822][ T6967] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 85.787236][ T6988] bond0: entered promiscuous mode [ 85.788666][ T6988] bond_slave_0: entered promiscuous mode [ 85.790402][ T6988] bond_slave_1: entered promiscuous mode [ 85.879028][ T6991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6991 comm=syz.2.369 [ 87.019668][ T69] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 87.019682][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 87.141015][ T7007] mac80211_hwsim hwsim5 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 87.166676][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 87.166689][ T40] audit: type=1400 audit(1743508043.325:343): avc: denied { read } for pid=7008 comm="syz.1.376" path="socket:[14270]" dev="sockfs" ino=14270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.344382][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 87.609517][ T835] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 87.770603][ T835] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 87.773574][ T835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.776037][ T835] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.779101][ T835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.780032][ T64] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.783497][ T835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.786005][ T835] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.788939][ T835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.791684][ T835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.794138][ T835] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.797063][ T835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.799561][ T835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.801979][ T835] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.804860][ T835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.807522][ T835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.810965][ T835] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.814698][ T835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.817442][ T835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.819915][ T835] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.822788][ T835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.827168][ T835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.829697][ T835] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.832650][ T835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.835144][ T835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.837557][ T835] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.840613][ T835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.844085][ T835] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 87.846663][ T835] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 87.848881][ T835] usb 7-1: Product: syz [ 87.850086][ T835] usb 7-1: Manufacturer: syz [ 87.851363][ T835] usb 7-1: SerialNumber: syz [ 87.859497][ T835] usb 7-1: config 0 descriptor?? [ 87.868442][ T835] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 87.931374][ T64] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.934440][ T64] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.937940][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.944900][ T64] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 87.948608][ T64] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 87.960739][ T64] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.963966][ T64] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.966892][ T64] usb 5-1: Product: syz [ 87.968433][ T64] usb 5-1: Manufacturer: syz [ 87.973404][ T64] cdc_wdm 5-1:1.0: skipping garbage [ 87.975292][ T64] cdc_wdm 5-1:1.0: skipping garbage [ 87.978903][ T64] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 87.981601][ T64] cdc_wdm 5-1:1.0: Unknown control protocol [ 87.997552][ T40] audit: type=1400 audit(1743508044.155:344): avc: denied { connect } for pid=7027 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.070937][ T2303] usb 7-1: USB disconnect, device number 5 [ 88.074986][ T2303] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 88.177690][ T64] usb 5-1: USB disconnect, device number 4 [ 88.803108][ T7044] syzkaller1: entered promiscuous mode [ 88.804790][ T7044] syzkaller1: entered allmulticast mode [ 89.088323][ T40] audit: type=1400 audit(1743508045.245:345): avc: denied { ioctl } for pid=7062 comm="syz.3.394" path="socket:[15866]" dev="sockfs" ino=15866 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.099491][ T40] audit: type=1400 audit(1743508045.255:346): avc: denied { write } for pid=7062 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.249287][ T7079] overlayfs: missing 'lowerdir' [ 89.369603][ T835] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 89.498505][ T40] audit: type=1326 audit(1743508045.655:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.404" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce8058d169 code=0x0 [ 89.510108][ T12] wlan0: Trigger new scan to find an IBSS to join [ 89.520685][ T835] usb 7-1: config 0 has no interfaces? [ 89.522228][ T835] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 89.526926][ T835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.534931][ T835] usb 7-1: config 0 descriptor?? [ 89.741520][ T67] usb 7-1: USB disconnect, device number 6 [ 90.058295][ T40] audit: type=1400 audit(1743508046.215:348): avc: denied { ioctl } for pid=7108 comm="syz.1.408" path="socket:[15108]" dev="sockfs" ino=15108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.080099][ T40] audit: type=1400 audit(1743508046.245:349): avc: denied { search } for pid=5342 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.158410][ T7115] overlayfs: missing 'lowerdir' [ 90.249118][ T7118] overlayfs: failed to resolve '/d_recursive': -2 [ 90.316563][ T40] audit: type=1400 audit(1743508046.475:350): avc: denied { append } for pid=7119 comm="syz.2.412" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.519467][ T40] audit: type=1400 audit(1743508046.675:351): avc: denied { sqpoll } for pid=7131 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.624867][ T7140] netlink: 750 bytes leftover after parsing attributes in process `syz.0.425'. [ 90.761503][ T67] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 90.912219][ T67] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 90.914850][ T67] usb 6-1: config 0 interface 0 has no altsetting 0 [ 90.918495][ T67] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.921433][ T67] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.923861][ T67] usb 6-1: Product: syz [ 90.925247][ T67] usb 6-1: Manufacturer: syz [ 90.926520][ T67] usb 6-1: SerialNumber: syz [ 90.934608][ T67] usb 6-1: config 0 descriptor?? [ 90.938897][ T67] usb 6-1: selecting invalid altsetting 0 [ 90.989221][ T40] audit: type=1400 audit(1743508047.145:352): avc: denied { shutdown } for pid=7156 comm="syz.0.424" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.207662][ T64] usb 6-1: USB disconnect, device number 7 [ 92.265684][ T7193] kernel profiling enabled (shift: 7) [ 92.307607][ T7194] netlink: 'syz.0.439': attribute type 39 has an invalid length. [ 92.539722][ T66] wlan0: Trigger new scan to find an IBSS to join [ 92.976119][ T7219] netlink: 'syz.3.449': attribute type 39 has an invalid length. [ 93.081346][ T7230] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.140104][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 93.157410][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.454'. [ 93.163609][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.166801][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.922548][ T7246] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.925318][ T7246] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 93.929264][ T7246] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 94.167200][ T7257] netlink: 'syz.2.462': attribute type 39 has an invalid length. [ 94.804007][ T7268] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.812467][ T66] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.901427][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 94.901437][ T40] audit: type=1400 audit(1743508051.065:355): avc: denied { ioctl } for pid=7271 comm="syz.1.467" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.982492][ T7280] vlan2: entered allmulticast mode [ 94.983948][ T7280] geneve0: entered allmulticast mode [ 94.986347][ T7280] bridge0: port 3(vlan2) entered blocking state [ 94.987957][ T7280] bridge0: port 3(vlan2) entered disabled state [ 94.992451][ T7280] vlan2: entered promiscuous mode [ 94.993907][ T7280] geneve0: entered promiscuous mode [ 94.995788][ T7280] bridge0: port 3(vlan2) entered blocking state [ 94.997557][ T7280] bridge0: port 3(vlan2) entered forwarding state [ 95.013518][ T7280] bridge_slave_0: left allmulticast mode [ 95.015230][ T7280] bridge_slave_0: left promiscuous mode [ 95.016983][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.022006][ T7280] bridge_slave_1: left allmulticast mode [ 95.024091][ T7280] bridge_slave_1: left promiscuous mode [ 95.025666][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.033971][ T7280] bond0: (slave bond_slave_0): Releasing backup interface [ 95.039933][ T7280] bond0: (slave bond_slave_1): Releasing backup interface [ 95.047238][ T40] audit: type=1400 audit(1743508051.205:356): avc: denied { getopt } for pid=7283 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.051715][ T7280] team0: Port device team_slave_0 removed [ 95.058702][ T7280] team0: Port device team_slave_1 removed [ 95.061679][ T7280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.064013][ T7280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.067106][ T7280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.069129][ T7280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.076902][ T7280] vlan2: left promiscuous mode [ 95.078240][ T7280] geneve0: left promiscuous mode [ 95.080091][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 95.080324][ T7280] bridge0: port 3(vlan2) entered disabled state [ 95.219599][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 95.326670][ T40] audit: type=1400 audit(1743508051.485:357): avc: denied { bind } for pid=7292 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.379514][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 95.384255][ T29] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 95.386431][ T29] usb 7-1: config 0 has no interface number 0 [ 95.388038][ T29] usb 7-1: config 0 interface 29 has no altsetting 0 [ 95.393428][ T29] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 95.395745][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.397948][ T29] usb 7-1: Product: syz [ 95.399081][ T29] usb 7-1: Manufacturer: syz [ 95.400793][ T29] usb 7-1: SerialNumber: syz [ 95.403993][ T29] usb 7-1: config 0 descriptor?? [ 95.472357][ T7295] netlink: 'syz.1.478': attribute type 39 has an invalid length. [ 95.499654][ T12] wlan0: Creating new IBSS network, BSSID d2:2d:c7:97:7f:4e [ 95.608298][ T29] peak_usb 7-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 95.610713][ T29] peak_usb 7-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 95.680996][ T29] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -71 [ 95.689769][ T29] usb 7-1: USB disconnect, device number 7 [ 96.859596][ T69] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.900921][ T7317] vlan2: entered allmulticast mode [ 96.902706][ T7317] geneve0: entered allmulticast mode [ 96.906038][ T7317] bridge0: port 3(vlan2) entered blocking state [ 96.908091][ T7317] bridge0: port 3(vlan2) entered disabled state [ 96.912110][ T7317] vlan2: entered promiscuous mode [ 96.913570][ T7317] geneve0: entered promiscuous mode [ 96.915624][ T7317] bridge0: port 3(vlan2) entered blocking state [ 96.917421][ T7317] bridge0: port 3(vlan2) entered forwarding state [ 96.933174][ T7317] bond0: (slave batadv0): Releasing backup interface [ 96.941665][ T7317] bridge_slave_0: left promiscuous mode [ 96.943380][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.981783][ T7317] bridge_slave_1: left allmulticast mode [ 96.983344][ T7317] bridge_slave_1: left promiscuous mode [ 96.984983][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.990568][ T7317] bond0: (slave 0@ÿ): Releasing backup interface [ 97.003303][ T7317] bond0: (slave bond_slave_1): Releasing backup interface [ 97.019179][ T7317] team0: Port device team_slave_0 removed [ 97.024948][ T7317] team0: Port device team_slave_1 removed [ 97.028044][ T7317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.031342][ T7317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.036687][ T7317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.039591][ T7317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.078265][ T7317] vlan2: left promiscuous mode [ 97.089517][ T7317] geneve0: left promiscuous mode [ 97.091321][ T7317] bridge0: port 3(vlan2) entered disabled state [ 97.390494][ T7340] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 97.401970][ T7340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.421329][ T7340] veth3: entered promiscuous mode [ 97.424790][ T7340] bond1: (slave veth3): Enslaving as an active interface with a down link [ 97.432522][ T7340] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 97.434193][ T7342] overlayfs: failed to resolve '/d_recursive': -2 [ 97.508534][ T40] audit: type=1400 audit(1743508053.665:358): avc: denied { bind } for pid=7344 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.514876][ T7345] netlink: 'syz.0.495': attribute type 10 has an invalid length. [ 97.517837][ T40] audit: type=1400 audit(1743508053.675:359): avc: denied { setopt } for pid=7344 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.526419][ T7345] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 97.953176][ T40] audit: type=1400 audit(1743508054.115:360): avc: denied { mount } for pid=7357 comm="syz.0.500" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 97.961489][ T40] audit: type=1400 audit(1743508054.125:361): avc: denied { search } for pid=7357 comm="syz.0.500" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 98.213441][ T7369] netlink: 'syz.2.504': attribute type 39 has an invalid length. [ 98.367244][ T7383] overlayfs: failed to resolve '/d_recursive': -2 [ 98.475758][ T40] audit: type=1400 audit(1743508054.635:362): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 98.538460][ T40] audit: type=1400 audit(1743508054.695:363): avc: denied { listen } for pid=7394 comm="syz.0.513" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.987653][ T7405] netlink: 'syz.3.515': attribute type 39 has an invalid length. [ 99.258480][ T40] audit: type=1400 audit(1743508055.415:364): avc: denied { ioctl } for pid=7409 comm="syz.3.517" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 99.483694][ T7424] overlayfs: missing 'workdir' [ 99.981613][ T40] audit: type=1400 audit(1743508056.145:365): avc: denied { name_bind } for pid=7448 comm="syz.2.528" path="socket:[16344]" dev="sockfs" ino=16344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.019910][ T40] audit: type=1400 audit(1743508056.185:366): avc: denied { bind } for pid=7451 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.079112][ T40] audit: type=1400 audit(1743508056.235:367): avc: denied { write } for pid=7451 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.091856][ T7452] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 100.176847][ T7458] overlayfs: missing 'workdir' [ 100.206882][ T40] audit: type=1326 audit(1743508056.365:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.0.532" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce8058d169 code=0x0 [ 100.315383][ T7463] input: syz0 as /devices/virtual/input/input9 [ 100.464656][ T40] audit: type=1400 audit(1743508056.625:369): avc: denied { ioctl } for pid=7468 comm="syz.1.535" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19506 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.833787][ T7476] netlink: 152 bytes leftover after parsing attributes in process `syz.1.537'. [ 100.836586][ T7476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'. [ 101.139497][ T835] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 101.312725][ T835] usb 6-1: config 0 has no interfaces? [ 101.314250][ T835] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 101.327256][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.336959][ T835] usb 6-1: config 0 descriptor?? [ 101.548713][ T29] usb 6-1: USB disconnect, device number 8 [ 101.981361][ T69] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 101.983841][ T69] Bluetooth: hci0: Injecting HCI hardware error event [ 101.987571][ T69] Bluetooth: hci0: hardware error 0x00 [ 102.407454][ T6012] IPVS: starting estimator thread 0... [ 102.502293][ T7511] IPVS: using max 44 ests per chain, 105600 per kthread [ 102.582496][ T7515] kvm_pr_unimpl_wrmsr: 8 callbacks suppressed [ 102.582509][ T7515] kvm: kvm [7514]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 102.595773][ T7515] kvm: kvm [7514]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 102.606645][ T7515] kvm: kvm [7514]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 102.618459][ T7515] kvm: kvm [7514]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 102.630346][ T7515] kvm: kvm [7514]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 102.641469][ T7515] kvm: kvm [7514]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 102.652066][ T7515] kvm: kvm [7514]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 102.663173][ T7515] kvm: kvm [7514]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 102.674110][ T7515] kvm: kvm [7514]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 102.685054][ T7515] kvm: kvm [7514]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 103.129003][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.552'. [ 103.170172][ T7523] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 103.509182][ T7537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.512344][ T7537] IPv6: NLM_F_CREATE should be set when creating new route [ 103.516259][ T7537] lo: entered allmulticast mode [ 103.522831][ T7537] tunl0: entered allmulticast mode [ 103.527628][ T7537] gre0: entered allmulticast mode [ 103.534547][ T7537] gretap0: entered allmulticast mode [ 103.539358][ T7537] erspan0: entered allmulticast mode [ 103.546059][ T7537] ip_vti0: entered allmulticast mode [ 103.550042][ T7537] ip6_vti0: entered allmulticast mode [ 103.556097][ T7537] sit0: entered allmulticast mode [ 103.562450][ T7537] ip6tnl0: entered allmulticast mode [ 103.565951][ T7537] ip6gre0: entered allmulticast mode [ 103.571458][ T7537] syz_tun: entered allmulticast mode [ 103.575318][ T7537] ip6gretap0: entered allmulticast mode [ 103.579784][ T7537] bridge0: entered allmulticast mode [ 103.585156][ T7537] bond0: entered allmulticast mode [ 103.587199][ T7537] bond_slave_0: entered allmulticast mode [ 103.588845][ T7537] bond_slave_1: entered allmulticast mode [ 103.593530][ T7537] team0: entered allmulticast mode [ 103.595191][ T7537] team_slave_0: entered allmulticast mode [ 103.596979][ T7537] team_slave_1: entered allmulticast mode [ 103.600574][ T7537] dummy0: entered allmulticast mode [ 103.604034][ T7537] nlmon0: entered allmulticast mode [ 103.607332][ T7537] caif0: entered allmulticast mode [ 103.609857][ T7537] batadv0: entered allmulticast mode [ 103.614475][ T7537] vxcan0: entered allmulticast mode [ 103.616776][ T7537] vxcan1: entered allmulticast mode [ 103.619869][ T7537] veth0: entered allmulticast mode [ 103.623570][ T7537] veth1: entered allmulticast mode [ 103.628646][ T7537] wg1: entered allmulticast mode [ 103.633925][ T7537] wg2: entered allmulticast mode [ 103.637320][ T7537] veth0_to_bridge: entered allmulticast mode [ 103.642443][ T7537] veth1_to_bridge: entered allmulticast mode [ 103.647694][ T7537] veth0_to_bond: entered allmulticast mode [ 103.653117][ T7537] veth1_to_bond: entered allmulticast mode [ 103.659278][ T7537] veth0_to_team: entered allmulticast mode [ 103.665445][ T7537] veth1_to_team: entered allmulticast mode [ 103.670456][ T7537] veth0_to_batadv: entered allmulticast mode [ 103.673849][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.677139][ T7537] batadv_slave_0: entered allmulticast mode [ 103.682913][ T7537] veth1_to_batadv: entered allmulticast mode [ 103.688684][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.692962][ T7537] batadv_slave_1: entered allmulticast mode [ 103.697803][ T7537] xfrm0: entered allmulticast mode [ 103.702887][ T7537] veth0_to_hsr: entered allmulticast mode [ 103.707484][ T7537] hsr_slave_0: entered allmulticast mode [ 103.712487][ T7537] veth1_to_hsr: entered allmulticast mode [ 103.717024][ T7537] hsr_slave_1: entered allmulticast mode [ 103.722616][ T7537] hsr0: entered allmulticast mode [ 103.728079][ T7537] veth1_virt_wifi: entered allmulticast mode [ 103.732011][ T7537] veth0_virt_wifi: entered allmulticast mode [ 103.735597][ T7537] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 103.738450][ T7537] veth1_vlan: entered allmulticast mode [ 103.742066][ T7537] veth0_vlan: entered allmulticast mode [ 103.747836][ T7537] vlan0: entered allmulticast mode [ 103.749301][ T7537] vlan1: entered allmulticast mode [ 103.752036][ T7537] macvlan0: entered allmulticast mode [ 103.755738][ T7537] macvlan1: entered allmulticast mode [ 103.758400][ T7537] ipvlan0: entered allmulticast mode [ 103.760526][ T7537] ipvlan1: entered allmulticast mode [ 103.762999][ T7537] veth1_macvtap: entered allmulticast mode [ 103.766701][ T7537] veth0_macvtap: entered allmulticast mode [ 103.770444][ T7537] macvtap0: entered allmulticast mode [ 103.773709][ T7537] macsec0: entered allmulticast mode [ 103.777327][ T7537] geneve0: entered allmulticast mode [ 103.781625][ T7537] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.783958][ T7537] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.786259][ T7537] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.788768][ T7537] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.792343][ T7537] geneve1: entered allmulticast mode [ 103.798356][ T7537] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 103.802563][ T7537] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 103.806595][ T7537] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 103.809841][ T7537] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 103.822120][ T7537] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 103.831195][ T7537] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 103.834266][ T7537] vlan2: entered allmulticast mode [ 104.059637][ T69] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 104.350744][ T40] audit: type=1400 audit(1743508060.505:370): avc: denied { map } for pid=7549 comm="syz.0.562" path="socket:[19012]" dev="sockfs" ino=19012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.358553][ T40] audit: type=1400 audit(1743508060.505:371): avc: denied { read } for pid=7549 comm="syz.0.562" path="socket:[19012]" dev="sockfs" ino=19012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.420568][ T46] syzkaller0: tun_net_xmit 76 [ 104.422256][ T46] syzkaller0: tun_net_xmit 48 [ 104.424714][ T7558] syzkaller0: create flow: hash 2915117084 index 1 [ 104.450881][ T6012] syzkaller0: tun_net_xmit 76 [ 104.460793][ T7556] syzkaller0: delete flow: hash 2915117084 index 1 [ 105.729505][ T5959] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 105.769548][ T65] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 105.890967][ T5959] usb 7-1: config 0 has no interfaces? [ 105.892867][ T5959] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 105.895489][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.900377][ T5959] usb 7-1: config 0 descriptor?? [ 105.919576][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 105.924091][ T65] usb 6-1: config 0 has no interfaces? [ 105.927999][ T65] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.933456][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.936476][ T65] usb 6-1: Product: syz [ 105.938056][ T65] usb 6-1: Manufacturer: syz [ 105.939893][ T65] usb 6-1: SerialNumber: syz [ 105.950034][ T65] usb 6-1: config 0 descriptor?? [ 106.114170][ T5959] usb 7-1: USB disconnect, device number 8 [ 106.161381][ T65] usb 6-1: USB disconnect, device number 9 [ 106.166862][ T7579] netlink: 'syz.3.572': attribute type 39 has an invalid length. [ 106.250618][ T40] audit: type=1400 audit(1743508062.415:372): avc: denied { setopt } for pid=7583 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.256191][ T40] audit: type=1400 audit(1743508062.415:373): avc: denied { name_bind } for pid=7583 comm="syz.3.573" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 106.501876][ T40] audit: type=1400 audit(1743508062.665:374): avc: denied { write } for pid=7589 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.780485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.804582][ T40] audit: type=1800 audit(1743508062.965:375): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.578" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 106.945487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.672412][ T7608] netlink: 'syz.0.581': attribute type 39 has an invalid length. [ 108.149259][ T69] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 108.173909][ T7630] syz.3.588(7630): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 108.212160][ T40] audit: type=1400 audit(1743508064.375:376): avc: denied { write } for pid=7631 comm="syz.0.589" name="/" dev="9p" ino=36831288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.218596][ T40] audit: type=1400 audit(1743508064.375:377): avc: denied { add_name } for pid=7631 comm="syz.0.589" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.225146][ T40] audit: type=1400 audit(1743508064.375:378): avc: denied { create } for pid=7631 comm="syz.0.589" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.231639][ T40] audit: type=1400 audit(1743508064.375:379): avc: denied { associate } for pid=7631 comm="syz.0.589" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.237956][ T40] audit: type=1400 audit(1743508064.375:380): avc: denied { read append open } for pid=7631 comm="syz.0.589" path="/154/file0/memory.events" dev="9p" ino=36831600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.319119][ T7630] netlink: 'syz.3.588': attribute type 39 has an invalid length. [ 108.603198][ T40] audit: type=1400 audit(1743508064.765:381): avc: denied { view } for pid=7654 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 108.649596][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.819539][ T64] usb 5-1: Using ep0 maxpacket: 16 [ 108.822624][ T64] usb 5-1: config 0 has no interfaces? [ 108.829980][ T64] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.832587][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.834744][ T64] usb 5-1: Product: syz [ 108.835910][ T64] usb 5-1: Manufacturer: syz [ 108.847613][ T64] usb 5-1: SerialNumber: syz [ 108.850444][ T64] usb 5-1: config 0 descriptor?? [ 109.126566][ T64] usb 5-1: USB disconnect, device number 5 [ 109.139528][ T99] ================================================================== [ 109.141907][ T99] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 109.144654][ T99] Read of size 1 at addr ffff888050c29009 by task kworker/u32:5/99 [ 109.148299][ T99] [ 109.149197][ T99] CPU: 2 UID: 0 PID: 99 Comm: kworker/u32:5 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 109.149212][ T99] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.149220][ T99] Workqueue: events_unbound commit_work [ 109.149234][ T99] Call Trace: [ 109.149238][ T99] [ 109.149243][ T99] dump_stack_lvl+0x116/0x1f0 [ 109.149265][ T99] print_report+0xc3/0x670 [ 109.149274][ T99] ? __virt_addr_valid+0x5e/0x590 [ 109.149289][ T99] ? __phys_addr+0xc6/0x150 [ 109.149304][ T99] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 109.149321][ T99] kasan_report+0xe0/0x110 [ 109.149330][ T99] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 109.149348][ T99] drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 109.149366][ T99] ? preempt_schedule_thunk+0x16/0x30 [ 109.149377][ T99] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 109.149395][ T99] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 109.149410][ T99] ? drm_atomic_helper_commit_hw_done+0x330/0x490 [ 109.149422][ T99] drm_atomic_helper_commit_tail+0xcb/0xf0 [ 109.149432][ T99] commit_tail+0x35b/0x400 [ 109.149442][ T99] process_one_work+0x9cc/0x1b70 [ 109.149457][ T99] ? __pfx_process_one_work+0x10/0x10 [ 109.149470][ T99] ? assign_work+0x1a0/0x250 [ 109.149481][ T99] worker_thread+0x6c8/0xf10 [ 109.149494][ T99] ? __kthread_parkme+0x19e/0x250 [ 109.149509][ T99] ? __pfx_worker_thread+0x10/0x10 [ 109.149521][ T99] kthread+0x3c2/0x780 [ 109.149531][ T99] ? __pfx_kthread+0x10/0x10 [ 109.149541][ T99] ? __pfx_kthread+0x10/0x10 [ 109.149550][ T99] ? __pfx_kthread+0x10/0x10 [ 109.149560][ T99] ? __pfx_kthread+0x10/0x10 [ 109.149570][ T99] ? rcu_is_watching+0x12/0xc0 [ 109.149583][ T99] ? __pfx_kthread+0x10/0x10 [ 109.149592][ T99] ret_from_fork+0x45/0x80 [ 109.149603][ T99] ? __pfx_kthread+0x10/0x10 [ 109.149613][ T99] ret_from_fork_asm+0x1a/0x30 [ 109.149631][ T99] [ 109.149634][ T99] [ 109.203693][ T99] Allocated by task 7645: [ 109.204873][ T99] kasan_save_stack+0x33/0x60 [ 109.206172][ T99] kasan_save_track+0x14/0x30 [ 109.207463][ T99] __kasan_kmalloc+0xaa/0xb0 [ 109.208734][ T99] drm_atomic_helper_crtc_duplicate_state+0x70/0xd0 [ 109.210567][ T99] drm_atomic_get_crtc_state+0x16e/0x450 [ 109.212096][ T99] drm_atomic_get_plane_state+0x436/0x590 [ 109.213649][ T99] drm_atomic_set_property+0xa29/0x34e0 [ 109.215146][ T99] drm_mode_atomic_ioctl+0x66f/0x25f0 [ 109.216662][ T99] drm_ioctl_kernel+0x1f1/0x3e0 [ 109.218095][ T99] drm_ioctl+0x5c9/0xc30 [ 109.219284][ T99] __x64_sys_ioctl+0x190/0x200 [ 109.220610][ T99] do_syscall_64+0xcd/0x260 [ 109.221876][ T99] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.223509][ T99] [ 109.224177][ T99] Freed by task 7644: [ 109.225317][ T99] kasan_save_stack+0x33/0x60 [ 109.226653][ T99] kasan_save_track+0x14/0x30 [ 109.227977][ T99] kasan_save_free_info+0x3b/0x60 [ 109.229343][ T99] __kasan_slab_free+0x51/0x70 [ 109.230667][ T99] kfree+0x2b6/0x4d0 [ 109.231761][ T99] drm_atomic_state_default_clear+0x455/0xe40 [ 109.233424][ T99] __drm_atomic_state_free+0x185/0x2b0 [ 109.234892][ T99] drm_client_modeset_commit_atomic+0x6b2/0x7e0 [ 109.236614][ T99] drm_client_modeset_commit_locked+0x14d/0x580 [ 109.238303][ T99] drm_client_modeset_commit+0x4f/0x80 [ 109.239760][ T99] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 109.241726][ T99] drm_fbdev_client_restore+0x2c/0x40 [ 109.243178][ T99] drm_client_dev_restore+0x1f3/0x2a0 [ 109.244649][ T99] drm_release+0x2c4/0x360 [ 109.245884][ T99] __fput+0x3ff/0xb70 [ 109.246993][ T99] task_work_run+0x14d/0x240 [ 109.248267][ T99] syscall_exit_to_user_mode+0x27b/0x2a0 [ 109.249774][ T99] do_syscall_64+0xda/0x260 [ 109.251029][ T99] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.252641][ T99] [ 109.253311][ T99] The buggy address belongs to the object at ffff888050c29000 [ 109.253311][ T99] which belongs to the cache kmalloc-512 of size 512 [ 109.256982][ T99] The buggy address is located 9 bytes inside of [ 109.256982][ T99] freed 512-byte region [ffff888050c29000, ffff888050c29200) [ 109.260570][ T99] [ 109.261234][ T99] The buggy address belongs to the physical page: [ 109.262954][ T99] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50c28 [ 109.265381][ T99] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 109.267670][ T99] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 109.269703][ T99] page_type: f5(slab) [ 109.270923][ T99] raw: 00fff00000000040 ffff88801b442c80 dead000000000100 dead000000000122 [ 109.273257][ T99] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 109.275809][ T99] head: 00fff00000000040 ffff88801b442c80 dead000000000100 dead000000000122 [ 109.278647][ T99] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 109.281527][ T99] head: 00fff00000000002 ffffea0001430a01 ffffffffffffffff 0000000000000000 [ 109.284618][ T99] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 109.286946][ T99] page dumped because: kasan: bad access detected [ 109.288692][ T99] page_owner tracks the page as allocated [ 109.290268][ T99] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7097, tgid 7097 (kworker/u32:11), ts 89923157815, free_ts 89301350515 [ 109.295678][ T99] post_alloc_hook+0x181/0x1b0 [ 109.297024][ T99] get_page_from_freelist+0x10fc/0x35c0 [ 109.298546][ T99] __alloc_frozen_pages_noprof+0x223/0x2370 [ 109.300192][ T99] alloc_pages_mpol+0x1fb/0x550 [ 109.301499][ T99] new_slab+0x23c/0x330 [ 109.302625][ T99] ___slab_alloc+0xd9c/0x1940 [ 109.303924][ T99] __slab_alloc.constprop.0+0x56/0xb0 [ 109.305367][ T99] __kmalloc_cache_noprof+0xfb/0x3e0 [ 109.306819][ T99] tomoyo_find_next_domain+0xfd/0x20b0 [ 109.308301][ T99] tomoyo_bprm_check_security+0x12e/0x1d0 [ 109.309883][ T99] security_bprm_check+0x1b9/0x1e0 [ 109.311765][ T99] bprm_execve+0x82d/0x1700 [ 109.312997][ T99] kernel_execve+0x2ef/0x3b0 [ 109.314249][ T99] call_usermodehelper_exec_async+0x255/0x4c0 [ 109.315922][ T99] ret_from_fork+0x45/0x80 [ 109.317147][ T99] ret_from_fork_asm+0x1a/0x30 [ 109.318517][ T99] page last free pid 7076 tgid 7074 stack trace: [ 109.320398][ T99] free_unref_folios+0x999/0x15e0 [ 109.321831][ T99] folios_put_refs+0x5af/0x800 [ 109.323183][ T99] truncate_inode_pages_range+0x311/0xe90 [ 109.324785][ T99] blkdev_flush_mapping+0xfb/0x290 [ 109.326266][ T99] blkdev_put_whole+0xc4/0xf0 [ 109.327603][ T99] bdev_release+0x47e/0x6d0 [ 109.328974][ T99] blkdev_release+0x15/0x20 [ 109.330733][ T99] __fput+0x3ff/0xb70 [ 109.332311][ T99] task_work_run+0x14d/0x240 [ 109.333843][ T99] do_exit+0xafe/0x2d90 [ 109.335438][ T99] do_group_exit+0xd3/0x2a0 [ 109.337192][ T99] get_signal+0x2673/0x26d0 [ 109.338832][ T99] arch_do_signal_or_restart+0x8f/0x7d0 [ 109.340830][ T99] syscall_exit_to_user_mode+0x150/0x2a0 [ 109.342930][ T99] do_syscall_64+0xda/0x260 [ 109.344662][ T99] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.346780][ T99] [ 109.347717][ T99] Memory state around the buggy address: [ 109.349701][ T99] ffff888050c28f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.352649][ T99] ffff888050c28f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.355539][ T99] >ffff888050c29000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.358371][ T99] ^ [ 109.360000][ T99] ffff888050c29080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.362865][ T99] ffff888050c29100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.365038][ T99] ================================================================== [ 109.368637][ T99] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.370727][ T99] CPU: 2 UID: 0 PID: 99 Comm: kworker/u32:5 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 109.373807][ T99] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.376647][ T99] Workqueue: events_unbound commit_work [ 109.378204][ T99] Call Trace: [ 109.379167][ T99] [ 109.380009][ T99] dump_stack_lvl+0x3d/0x1f0 [ 109.381301][ T99] panic+0x71c/0x800 [ 109.382366][ T99] ? __pfx_panic+0x10/0x10 [ 109.383601][ T99] ? irqentry_exit+0x3b/0x90 [ 109.384818][ T99] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.386230][ T99] ? preempt_schedule_thunk+0x16/0x30 [ 109.387751][ T99] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 109.389694][ T99] ? preempt_schedule_common+0x44/0xc0 [ 109.391695][ T99] ? check_panic_on_warn+0x1f/0xb0 [ 109.393627][ T99] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 109.395974][ T99] check_panic_on_warn+0xab/0xb0 [ 109.397346][ T99] end_report+0x107/0x170 [ 109.398519][ T99] kasan_report+0xee/0x110 [ 109.399743][ T99] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 109.401750][ T99] drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 109.403663][ T99] ? preempt_schedule_thunk+0x16/0x30 [ 109.405114][ T99] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 109.407144][ T99] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 109.408773][ T99] ? drm_atomic_helper_commit_hw_done+0x330/0x490 [ 109.410563][ T99] drm_atomic_helper_commit_tail+0xcb/0xf0 [ 109.412126][ T99] commit_tail+0x35b/0x400 [ 109.413375][ T99] process_one_work+0x9cc/0x1b70 [ 109.414714][ T99] ? __pfx_process_one_work+0x10/0x10 [ 109.416186][ T99] ? assign_work+0x1a0/0x250 [ 109.417434][ T99] worker_thread+0x6c8/0xf10 [ 109.418764][ T99] ? __kthread_parkme+0x19e/0x250 [ 109.420294][ T99] ? __pfx_worker_thread+0x10/0x10 [ 109.422015][ T99] kthread+0x3c2/0x780 [ 109.423122][ T99] ? __pfx_kthread+0x10/0x10 [ 109.424402][ T99] ? __pfx_kthread+0x10/0x10 [ 109.425660][ T99] ? __pfx_kthread+0x10/0x10 [ 109.426966][ T99] ? __pfx_kthread+0x10/0x10 [ 109.428267][ T99] ? rcu_is_watching+0x12/0xc0 [ 109.429593][ T99] ? __pfx_kthread+0x10/0x10 [ 109.430913][ T99] ret_from_fork+0x45/0x80 [ 109.432190][ T99] ? __pfx_kthread+0x10/0x10 [ 109.433648][ T99] ret_from_fork_asm+0x1a/0x30 [ 109.435069][ T99] [ 109.436518][ T99] Kernel Offset: disabled [ 109.437691][ T99] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:47:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000564ad48ca6d0 RCX=0000000000016930 RDX=ffffffffffffffff RSI=0000000000041b00 RDI=0000564ad49f5d40 RBP=0000564ad48b4900 RSP=00007ffe8955c2e8 R8 =0000000000041b00 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000100 R13=0000564ad49cab70 R14=0000000000041b00 R15=00000000000004ea RIP=00007f304fd2e92f RFL=00010246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f30500ebd00 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564ad48b4908 CR3=000000002abe8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=4b1fad654b1fad65 4b1fad654b1fad65 4b1fad654b1fad65 4b1fad654b1fad65 4b1fad654b1fad65 4b1fad654b1fad65 4b1fad654b1fad65 4b1fad654b1fad65 ZMM22=b9f0ecffb9f0ecff b9f0ecffb9f0ecff b9f0ecffb9f0ecff b9f0ecffb9f0ecff b9f0ecffb9f0ecff b9f0ecffb9f0ecff b9f0ecffb9f0ecff b9f0ecffb9f0ecff ZMM23=29ed75d829ed75d8 29ed75d829ed75d8 29ed75d829ed75d8 29ed75d829ed75d8 29ed75d829ed75d8 29ed75d829ed75d8 29ed75d829ed75d8 29ed75d829ed75d8 ZMM24=b18006cfb18006cf b18006cfb18006cf b18006cfb18006cf b18006cfb18006cf b18006cfb18006cf b18006cfb18006cf b18006cfb18006cf b18006cfb18006cf ZMM25=ec9bb5c3ec9bb5c3 ec9bb5c3ec9bb5c3 ec9bb5c3ec9bb5c3 ec9bb5c3ec9bb5c3 ec9bb5c3ec9bb5c3 ec9bb5c3ec9bb5c3 ec9bb5c3ec9bb5c3 ec9bb5c3ec9bb5c3 ZMM26=6b4cf4116b4cf411 6b4cf4116b4cf411 6b4cf4116b4cf411 6b4cf4116b4cf411 6b4cf4116b4cf411 6b4cf4116b4cf411 6b4cf4116b4cf411 6b4cf4116b4cf411 ZMM27=d4444331d4444331 d4444331d4444331 d4444331d4444331 d4444331d4444331 d4444331d4444331 d4444331d4444331 d4444331d4444331 d4444331d4444331 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e9040000e9040000 e9040000e9040000 e9040000e9040000 e9040000e9040000 e9040000e9040000 e9040000e9040000 e9040000e9040000 e9040000e9040000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88804f752f30 RCX=0000000000000006 RDX=0000000000040000 RSI=0000000000000004 RDI=0000000000000000 RBP=ffff88804f752f30 RSP=ffffc90005e17588 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=ffff888035600e10 R12=0000000000000005 R13=0000000000000000 R14=ffff88804f752440 R15=0000000000000000 RIP=ffffffff8197e348 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fcf8514c6c0 ffffffff 00c01300 GS =0000 ffff8880d6acf000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c37a0fa CR3=00000000548ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000008f0f010e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff815fba05 ffffffff812c3723 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff812c3723 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 600f00000349b9c9 f8230fa000008035 f8210fd8230f0000 000eb8300f000080 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 300f00000000ba00 006800b80000090d b92f006000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000ac032b9600f00 000349b9c9f8230f a000008035f8210f d8230f0000000eb8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bf865 RDI=ffffffff9ae09320 RBP=ffffffff9ae092e0 RSP=ffffc900016bf508 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000075 R14=ffffffff9ae092e0 R15=ffffffff854bf800 RIP=ffffffff854bf88f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d6bcf000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000548ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000001ffee00 Opmask02=0000000001ffffff Opmask03=2040000404420020 Opmask04=00000000ffdfffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b46a275940 000055b46a251ba0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f74207961726d 766b2f6373696d2f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 000000000000312d 352f356273752f30 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61c41f1b00 000055b131612c42 0000000000000021 0000000000000030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4935737072776f08 0100184536632f76 5452145758512c23 2038657f7323332a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f777f7e7f7f7f 7f7d3d7d7f777f7f 7d7f7e777f777f7f 7f7f7d7f7b777f7f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 6930382433273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45300030306e0035 0035303534313d4d 3137514530000000 36343035313d4d51 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 002c003030300030 0030302c34003000 2c36323030000000 30302c350030302c ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000800 RBX=000000000000bbbb RCX=00000000000000a0 RDX=00000000000000bb RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc9000678f988 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b6e8760 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f57c27e06c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6ccf000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000051d3c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe56e20f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000