last executing test programs: 52.403486274s ago: executing program 3 (id=100): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x10000, 0x2b, 0x8, 0x40003, 0x7, 0x2}) 52.398300699s ago: executing program 3 (id=101): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000700)=ANY=[@ANYBLOB="e90c630faca2aaaaaaaaaa0d0800450000789ec6c2f2b831168700000000000000000000000000649078020000000300000000000000484978e2071db0e5f6912a46620d9f17"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xdffc, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 51.164085506s ago: executing program 3 (id=106): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = getpgid(0xffffffffffffffff) tkill(r1, 0x24) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r4 = dup2(r2, r0) close_range(r4, 0xffffffffffffffff, 0x0) 49.770543354s ago: executing program 3 (id=125): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe83, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 49.718668431s ago: executing program 3 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) 49.640526111s ago: executing program 3 (id=127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xb, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0xf5}], 0x0, 0x0, 0x0}) 49.592641599s ago: executing program 32 (id=127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xb, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0xf5}], 0x0, 0x0, 0x0}) 38.559125489s ago: executing program 1 (id=229): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 37.952844637s ago: executing program 2 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x20004000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37.661703108s ago: executing program 2 (id=233): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01062bbd7000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004"], 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x20040090) 37.656347276s ago: executing program 1 (id=234): r0 = gettid() r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0405cc00c900b9807ee276126f6d"], 0x7) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 37.636257884s ago: executing program 2 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000040)="0f01590044663502000000440f22c067660f3a2272076f3e26660f3880a98d250f0f8d0100b066aad8e7f30fc6330f13f30fc7b3385d", 0x36}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x4, 0x6, 0xb0b1, 0x3, 0x1b, "78f7e2f55e1ee10b9222a2d835bd24a54fc3d4"}) 37.386455663s ago: executing program 2 (id=239): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) 37.34146072s ago: executing program 2 (id=241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 37.313631595s ago: executing program 2 (id=242): pipe2(&(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x6167, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) 36.753472292s ago: executing program 1 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0xff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.65002258s ago: executing program 1 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 35.792651253s ago: executing program 1 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$'], 0x24}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 35.523417858s ago: executing program 1 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1/../file0\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 35.488354107s ago: executing program 33 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1/../file0\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 32.450243616s ago: executing program 5 (id=259): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000300)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0xfffffffffffffffc}) close_range(r1, 0xffffffffffffffff, 0x0) 32.342575872s ago: executing program 5 (id=269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x8, 0x0, 0x8, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r3, &(0x7f0000000300), 0x0}, 0x20) 32.32508979s ago: executing program 5 (id=270): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r2}, './file0\x00'}) 32.288574799s ago: executing program 5 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x104) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95e, 0xfffffff3, 0x9, 0x5, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x10005, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x5, 0x5, 0x2, 0x2, 0xd, 0x8, 0xa0000, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x6, 0x6, 0x6, 0x0, 0x5, 0xceb, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0xa, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffff5d46]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) 22.262219945s ago: executing program 34 (id=242): pipe2(&(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x6167, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) 17.199159382s ago: executing program 35 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x104) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95e, 0xfffffff3, 0x9, 0x5, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x10005, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x5, 0x5, 0x2, 0x2, 0xd, 0x8, 0xa0000, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x6, 0x6, 0x6, 0x0, 0x5, 0xceb, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0xa, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffff5d46]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) 3.753227698s ago: executing program 4 (id=625): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='$', @ANYBLOB="01002abd7000fddbdf250a000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.663204209s ago: executing program 4 (id=626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000005c0)=')\x00I\xe3\x9a\x01\x96\xd1\xc4\x88\x0e.\\\x87W\xa3?\xaf&DZzqi3\xfd\x01\x84\x9a\x02H\xef\xd8\x944C8:\x9b\xecP\xee\xf3\x83\xd7k\xdcV_v-8\x98\x11\xf3#n\xd4q\xda\xc7\xf3\xbcf8d\xe3]\xbb\x95C\xe3\xe0\x81b\x16\x10>w\xdft\xffUxn\xcaL_A\x131\xde\x84-6\xec\x0f\x00\x00\x00\x00\x00\x00\x00\xed{0Q\xb1&\x86', 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) 2.773176808s ago: executing program 4 (id=628): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb710) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 2.511531127s ago: executing program 0 (id=633): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r2, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 2.511155839s ago: executing program 0 (id=635): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2c, r2, 0x3, 0x70bd39, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000001640)={"8ceb2d9be49494c9c3da33aa", &(0x7f0000000600)="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", 0xbf9, 0x1, 0x0, 0x2, 0x1, 0xfffffbff, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) read(r5, &(0x7f0000005f40)=""/175, 0xaf) 2.432776883s ago: executing program 0 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 1.553184825s ago: executing program 7 (id=644): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1401, 0x2, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.502721395s ago: executing program 7 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 1.393261348s ago: executing program 7 (id=647): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000070c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000500)={0x0, 0x2, {0x8000000000000000, @usage=0x1, 0x0, 0x4, 0xafd4, 0x8, 0x0, 0x7fff, 0x1a, @struct={0x3, 0xc}, 0x398ddeaa, 0x82, [0x7, 0x9, 0xffa3, 0x8000000000000000, 0x100, 0x80000000]}, {0x1, @usage=0x3, 0x0, 0x4f5, 0x81, 0xff, 0xfffffffffffffff7, 0x1b, 0x90, @struct={0x7fffffff, 0x5}, 0x3, 0x3, [0xf44a, 0x8, 0xcf, 0x0, 0x3, 0x6]}, {0x2, @usage, 0x0, 0xbb, 0x3dc, 0x3, 0x2, 0xffffffffffffff67, 0x200, @usage, 0xffffffac, 0x4, [0x100000000, 0x100000001, 0xa4, 0x2, 0xffff, 0x2420]}, {0xe, 0x8, 0x800}}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) setreuid(0x0, 0xee01) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0189436, &(0x7f0000000140)) 1.299681419s ago: executing program 7 (id=649): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.213210568s ago: executing program 7 (id=650): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001700000000000000080009000d000000", 0x24) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x2028060}}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 552.726ms ago: executing program 4 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) creat(0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='ocfs2\x00', 0x0, &(0x7f0000000400)='usrquota') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') read$FUSE(r1, &(0x7f00000056c0)={0x2020}, 0x2020) 552.568562ms ago: executing program 0 (id=653): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 493.229343ms ago: executing program 4 (id=655): io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0xfffffffd}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4082) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x200, 0x400000, 0x4, 0x80000001, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 492.961483ms ago: executing program 4 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 262.107084ms ago: executing program 7 (id=662): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0xfffffeff}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r4, r3, 0x0, 0x80000000) 261.756638ms ago: executing program 6 (id=663): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 261.54743ms ago: executing program 0 (id=664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r4], 0x20}}, 0x0) 261.273443ms ago: executing program 6 (id=665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="7fed4c988e8509afee42ea3c023da24fe818a2f8", 0x14}], 0x1, 0x0, 0x0, 0x40040}, 0x800) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 182.849526ms ago: executing program 0 (id=666): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 182.685188ms ago: executing program 6 (id=667): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x0, 0x0, @void}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) 133.111434ms ago: executing program 6 (id=668): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x16, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x4, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}, @rr={0x7, 0xf, 0x0, [@dev, @remote, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.027919ms ago: executing program 6 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="120000001a000da4000000000000000080"], 0x1c}}, 0x0) ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f0000000000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0xc201}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x80000000, 0x9}) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1a6000000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000380)={{0x6, 0x1, 0x4, 0x3, 'syz1\x00', 0x9d}, 0x4, 0x20, 0x1, 0x0, 0x7, 0x3f, 'syz0\x00', &(0x7f0000000340)=['syz_tun\x00', '\'(:{:!\\\x00', '!$(/!{!\x00', 'syz_tun\x00', '^!\x00', 'GPL\x00', '%\x00'], 0x29}) kernel console output (not intermixed with test programs): syzkaller0: entered allmulticast mode [ 48.468001][ T5943] Bluetooth: hci0: command tx timeout [ 48.476607][ T5943] Bluetooth: hci3: command tx timeout [ 48.476867][ T5950] Bluetooth: hci1: command tx timeout [ 48.476881][ T5949] Bluetooth: hci2: command tx timeout [ 48.997038][ T6071] kvm: emulating exchange as write [ 49.721858][ T39] kauditd_printk_skb: 71 callbacks suppressed [ 49.721870][ T39] audit: type=1400 audit(1733089683.585:186): avc: denied { create } for pid=6054 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.769957][ T39] audit: type=1400 audit(1733089683.625:187): avc: denied { getopt } for pid=6054 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.889696][ T39] audit: type=1400 audit(1733089683.755:188): avc: denied { read } for pid=6083 comm="syz.0.28" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.896625][ T39] audit: type=1400 audit(1733089683.755:189): avc: denied { open } for pid=6083 comm="syz.0.28" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.901922][ T6084] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 49.905824][ T6084] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 49.912845][ T6084] vhci_hcd vhci_hcd.0: Device attached [ 49.918506][ T39] audit: type=1400 audit(1733089683.785:190): avc: denied { ioctl } for pid=6083 comm="syz.0.28" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.012028][ T6089] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 50.022010][ T6089] kvm: pic: non byte read [ 50.025475][ T6089] kvm: pic: non byte read [ 50.028055][ T6089] kvm: pic: non byte read [ 50.030391][ T6089] kvm: pic: level sensitive irq not supported [ 50.031273][ T6089] kvm: pic: non byte read [ 50.034938][ T6089] kvm: pic: level sensitive irq not supported [ 50.035367][ T6089] kvm: pic: non byte read [ 50.040485][ T6089] kvm: pic: non byte read [ 50.043071][ T6089] kvm: pic: non byte read [ 50.045542][ T6089] kvm: pic: non byte read [ 50.048066][ T6089] kvm: pic: non byte read [ 50.050096][ T6089] kvm: pic: non byte read [ 50.055321][ T6089] kvm: pic: single mode not supported [ 50.055332][ T6089] kvm: pic: level sensitive irq not supported [ 50.066650][ T6089] kvm: pic: single mode not supported [ 50.086469][ T6004] vhci_hcd: vhci_device speed not set [ 50.157169][ T6004] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 50.165287][ T39] audit: type=1400 audit(1733089684.025:191): avc: denied { write } for pid=6095 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.176853][ T35] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 50.201802][ T6098] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 50.238173][ T39] audit: type=1400 audit(1733089684.105:192): avc: denied { mounton } for pid=6099 comm="syz.1.33" path="/11/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.276220][ T1020] IPVS: starting estimator thread 0... [ 50.277039][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.34'. [ 50.279778][ T6104] overlayfs: failed to resolve './file1': -2 [ 50.286166][ T39] audit: type=1400 audit(1733089684.145:193): avc: denied { mount } for pid=6103 comm="syz.3.35" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.294240][ T6104] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.35'. [ 50.324245][ T39] audit: type=1400 audit(1733089684.185:194): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.329029][ T35] usb 5-1: config 0 has no interfaces? [ 50.333606][ T35] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 50.335999][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.347971][ T35] usb 5-1: config 0 descriptor?? [ 50.358829][ T39] audit: type=1400 audit(1733089684.225:195): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.376622][ T6105] IPVS: using max 39 ests per chain, 93600 per kthread [ 50.382174][ T6110] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 50.546491][ T5950] Bluetooth: hci3: command tx timeout [ 50.548000][ T5950] Bluetooth: hci2: command tx timeout [ 50.550035][ T5950] Bluetooth: hci0: command tx timeout [ 50.551491][ T5950] Bluetooth: hci1: command tx timeout [ 50.565223][ T6085] vhci_hcd: connection reset by peer [ 50.568725][ T25] usb 5-1: USB disconnect, device number 2 [ 50.574994][ T1140] vhci_hcd: stop threads [ 50.577312][ T1140] vhci_hcd: release socket [ 50.582079][ T1140] vhci_hcd: disconnect device [ 50.627381][ T6004] vhci_hcd: vhci_device speed not set [ 50.714178][ T6129] binder: 6128:6129 unknown command 0 [ 50.715727][ T6129] binder: 6128:6129 ioctl c0306201 20000340 returned -22 [ 51.006543][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.189909][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.193994][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.199814][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.203605][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.206847][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.210361][ T25] usb 7-1: config 0 descriptor?? [ 51.340525][ T5943] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 51.431048][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 51.459917][ T6148] process 'syz.3.54' launched './file0' with NULL argv: empty string added [ 51.623205][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.625619][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.627674][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.629668][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.631692][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.634129][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.636124][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.638095][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.639966][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.641782][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.643728][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.645710][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.647701][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.649620][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.651521][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.653918][ T25] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 51.660153][ T25] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 52.270640][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.310998][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 52.397591][ T6164] pim6reg1: entered promiscuous mode [ 52.399117][ T6164] pim6reg1: entered allmulticast mode [ 52.626492][ T5943] Bluetooth: hci1: command tx timeout [ 52.626561][ T5949] Bluetooth: hci2: command tx timeout [ 52.627980][ T5945] Bluetooth: hci3: command tx timeout [ 52.629321][ T5950] Bluetooth: hci0: command tx timeout [ 52.793375][ T6176] kvm: pic: non byte write [ 52.800422][ T6176] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 52.920652][ T6131] usb 7-1: string descriptor 0 read error: -2 [ 52.953676][ T6131] raw-gadget.0 gadget.2: fail, usb_ep_queue returned -108 [ 53.041890][ T6185] Bluetooth: (null): Invalid header checksum [ 53.411552][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 53.710851][ T35] usb 7-1: USB disconnect, device number 2 [ 53.801976][ T6229] xt_hashlimit: size too large, truncated to 1048576 [ 54.506437][ T5985] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.656411][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 54.662941][ T5985] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 54.665064][ T5985] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 54.670527][ T5985] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 54.672933][ T5985] usb 5-1: config 250 has no interface number 0 [ 54.674544][ T5985] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 54.678972][ T5985] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 54.681762][ T5985] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.684461][ T5985] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 54.687850][ T5985] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 54.691123][ T5985] usb 5-1: config 250 interface 228 has no altsetting 0 [ 54.695595][ T5985] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 54.698238][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 54.700302][ T5985] usb 5-1: Product: syz [ 54.701378][ T5985] usb 5-1: SerialNumber: syz [ 54.719068][ T5985] hub 5-1:250.228: bad descriptor, ignoring hub [ 54.721254][ T5985] hub 5-1:250.228: probe with driver hub failed with error -5 [ 54.793858][ T39] kauditd_printk_skb: 67 callbacks suppressed [ 54.793869][ T39] audit: type=1400 audit(1733089688.655:263): avc: denied { create } for pid=6276 comm="syz.2.102" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 54.804987][ T39] audit: type=1400 audit(1733089688.665:264): avc: denied { link } for pid=6276 comm="syz.2.102" name="#7" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 54.815385][ T39] audit: type=1400 audit(1733089688.665:265): avc: denied { rename } for pid=6276 comm="syz.2.102" name="#8" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 54.925363][ T5985] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 54.966407][ T6004] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.126860][ T39] audit: type=1400 audit(1733089688.995:266): avc: denied { read write } for pid=6249 comm="syz.0.92" name="lp0" dev="devtmpfs" ino=2787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 55.135770][ T39] audit: type=1400 audit(1733089688.995:267): avc: denied { open } for pid=6249 comm="syz.0.92" path="/dev/usb/lp0" dev="devtmpfs" ino=2787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 55.180384][ T6004] usb 8-1: Using ep0 maxpacket: 16 [ 55.184521][ T6004] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.196062][ T6004] usb 8-1: config 0 has no interfaces? [ 55.198330][ T6004] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 55.201974][ T6004] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.205286][ T6004] usb 8-1: config 0 descriptor?? [ 55.214036][ T6289] xt_hashlimit: size too large, truncated to 1048576 [ 55.367202][ T35] usb 5-1: USB disconnect, device number 3 [ 55.370412][ T35] usblp0: removed [ 55.419764][ T6292] usb 8-1: USB disconnect, device number 2 [ 55.496455][ T35] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 55.648690][ T35] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 55.651073][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.658492][ T35] usb 5-1: config 0 descriptor?? [ 55.661206][ T35] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 55.866831][ T35] gspca_sunplus: reg_w_riv err -71 [ 55.870849][ T35] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 55.887608][ T35] usb 5-1: USB disconnect, device number 4 [ 56.226471][ T1020] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.379334][ T1020] usb 8-1: Using ep0 maxpacket: 32 [ 56.390712][ T1020] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 56.395402][ T1020] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 56.398212][ T1020] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 56.400529][ T1020] usb 8-1: Product: syz [ 56.401641][ T1020] usb 8-1: Manufacturer: syz [ 56.402841][ T1020] usb 8-1: SerialNumber: syz [ 56.404908][ T1020] usb 8-1: config 0 descriptor?? [ 56.407702][ T6295] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 56.411083][ T39] audit: type=1400 audit(1733089690.275:268): avc: denied { watch } for pid=6296 comm="syz.0.107" path="/20" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.417463][ T39] audit: type=1400 audit(1733089690.275:269): avc: denied { watch_sb watch_reads } for pid=6296 comm="syz.0.107" path="/20" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.433678][ T6297] evm: overlay not supported [ 56.504079][ T39] audit: type=1400 audit(1733089690.365:270): avc: denied { bind } for pid=6298 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.618096][ T1020] usb 8-1: USB disconnect, device number 3 [ 56.942268][ T39] audit: type=1400 audit(1733089690.805:271): avc: denied { mount } for pid=6317 comm="syz.1.116" name="/" dev="ramfs" ino=7159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.945105][ T6318] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.981985][ T39] audit: type=1400 audit(1733089690.845:272): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.045040][ T6324] binder_alloc: 6323: pid 6323 spamming oneway? 1 buffers allocated for a total size of 4096 [ 57.272941][ T6336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.317063][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.449979][ T1232] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.489938][ T35] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 57.492881][ T35] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 57.496979][ T35] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 57.500228][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 57.504115][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 57.509761][ T35] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 57.512234][ T35] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 57.514361][ T35] usb 6-1: Product: syz [ 57.515504][ T35] usb 6-1: Manufacturer: syz [ 57.524105][ T35] cdc_wdm 6-1:1.0: skipping garbage [ 57.525519][ T35] cdc_wdm 6-1:1.0: skipping garbage [ 57.533705][ T35] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 57.535286][ T35] cdc_wdm 6-1:1.0: Unknown control protocol [ 57.539470][ T1232] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.595490][ T1232] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.637529][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.643523][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.650218][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.658396][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.659403][ T1232] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.660689][ T5945] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.666255][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.726795][ T35] usb 6-1: USB disconnect, device number 2 [ 57.749789][ T6343] chnl_net:caif_netlink_parms(): no params data found [ 57.788320][ T1232] bridge_slave_1: left allmulticast mode [ 57.790605][ T1232] bridge_slave_1: left promiscuous mode [ 57.793044][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.799952][ T1232] bridge_slave_0: left allmulticast mode [ 57.801505][ T1232] bridge_slave_0: left promiscuous mode [ 57.803126][ T1232] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.034748][ T1232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.040496][ T1232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.045140][ T1232] bond0 (unregistering): Released all slaves [ 58.089203][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.091681][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.093997][ T6343] bridge_slave_0: entered allmulticast mode [ 58.096561][ T6343] bridge_slave_0: entered promiscuous mode [ 58.103190][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.105871][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.108709][ T6343] bridge_slave_1: entered allmulticast mode [ 58.113421][ T6343] bridge_slave_1: entered promiscuous mode [ 58.171388][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.176857][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.235848][ T6343] team0: Port device team_slave_0 added [ 58.243843][ T6343] team0: Port device team_slave_1 added [ 58.263182][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.265030][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.273205][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.290666][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.292515][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.299166][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.340992][ T6343] hsr_slave_0: entered promiscuous mode [ 58.342961][ T6343] hsr_slave_1: entered promiscuous mode [ 58.347190][ T6343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.349196][ T6343] Cannot create hsr debugfs directory [ 58.386798][ T6292] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.389131][ T1232] hsr_slave_0: left promiscuous mode [ 58.391368][ T1232] hsr_slave_1: left promiscuous mode [ 58.393297][ T1232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.395204][ T1232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.398296][ T1232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.400214][ T1232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.418005][ T1232] veth1_macvtap: left promiscuous mode [ 58.419673][ T1232] veth0_macvtap: left promiscuous mode [ 58.421117][ T1232] veth1_vlan: left promiscuous mode [ 58.422658][ T1232] veth0_vlan: left promiscuous mode [ 58.554705][ T6292] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 58.557059][ T6292] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 58.559675][ T6292] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 58.562047][ T6292] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 58.564876][ T6292] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 58.572326][ T6292] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.574695][ T6292] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.577505][ T6292] usb 6-1: Product: syz [ 58.578640][ T6292] usb 6-1: Manufacturer: syz [ 58.590774][ T6292] cdc_wdm 6-1:1.0: skipping garbage [ 58.592149][ T6292] cdc_wdm 6-1:1.0: skipping garbage [ 58.594195][ T6292] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 58.595711][ T6292] cdc_wdm 6-1:1.0: Unknown control protocol [ 58.947328][ T5945] Bluetooth: hci4: command 0xfc11 tx timeout [ 58.950490][ T5950] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 58.951179][ T1232] team0 (unregistering): Port device team_slave_1 removed [ 59.048214][ T1232] team0 (unregistering): Port device team_slave_0 removed [ 59.502649][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.504197][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.506175][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.514796][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.517111][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.519647][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.521769][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.523993][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.525784][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.527502][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.530985][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.533311][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.535001][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.537002][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.539282][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.544907][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.550726][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 59.554570][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.557380][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.559607][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.561802][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.563956][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.566321][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.568262][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.570595][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.572791][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.575974][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.577618][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.579586][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.581451][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.583929][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.585764][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.587476][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.588964][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.590563][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.592077][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.593690][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.595176][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.596817][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.598694][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.600665][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.602845][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.605005][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.606509][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.608354][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.609779][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.611387][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.612892][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.614530][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.616017][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.617893][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.620021][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.621929][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.623632][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.625162][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.626542][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.628092][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.629658][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.631185][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.632736][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.634151][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.635665][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.637066][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.638616][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.640209][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.641785][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.643366][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.644982][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.646608][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.648131][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.649775][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.651271][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.652885][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.654364][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.655914][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.657381][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.658956][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.660433][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.662017][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.663489][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.665084][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.666699][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.668140][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.669706][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.671177][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.672769][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.674250][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.675827][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.677436][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.680001][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.681691][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.683277][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.684900][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.686551][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.688213][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.689873][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.691478][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.693072][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.694638][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.696230][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.697953][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.699568][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.701261][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.702899][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.705022][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.707017][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.708649][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.710143][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.711782][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.713321][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.714949][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.716469][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.718097][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.719615][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.721234][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.722747][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.724477][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.726096][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.727503][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.729141][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.730650][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.732277][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.733793][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.735403][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.736895][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.738535][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.740159][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.741588][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.743179][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.744667][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.746309][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.747262][ T5950] Bluetooth: hci0: command tx timeout [ 59.747785][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.747981][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.753001][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.754656][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.756155][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.757930][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.759551][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.761026][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.762599][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.763957][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.765457][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.765913][ T6376] warning: `syz.0.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.766885][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.767055][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.773918][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.775535][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.776944][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 59.778540][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.780081][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.781694][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.783325][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.784920][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 59.786435][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 59.790540][ T8] usb 6-1: USB disconnect, device number 3 [ 59.819663][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 59.819678][ T39] audit: type=1400 audit(1733089693.685:309): avc: denied { create } for pid=6388 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 59.887323][ T6343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.892415][ T6343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.898804][ T6343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.902929][ T6343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.943702][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.951107][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.958891][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.960736][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.966073][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.968027][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.014205][ T39] audit: type=1400 audit(1733089693.875:310): avc: denied { sys_module } for pid=6343 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.058675][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.151847][ T6343] veth0_vlan: entered promiscuous mode [ 60.156187][ T6343] veth1_vlan: entered promiscuous mode [ 60.169640][ T6343] veth0_macvtap: entered promiscuous mode [ 60.172503][ T6343] veth1_macvtap: entered promiscuous mode [ 60.178795][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.181489][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.183976][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.187585][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.190124][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.192823][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.195822][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.200090][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.202758][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.205229][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.208037][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.210517][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.213141][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.216107][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.220815][ T6343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.223031][ T6343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.225208][ T6343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.227486][ T6343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.253822][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.255900][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.271121][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.273124][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.279019][ T39] audit: type=1400 audit(1733089694.145:311): avc: denied { mount } for pid=6343 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.284699][ T39] audit: type=1400 audit(1733089694.145:312): avc: denied { mounton } for pid=6343 comm="syz-executor" path="/syzkaller.l70gGc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.323119][ T39] audit: type=1400 audit(1733089694.185:313): avc: denied { create } for pid=6426 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.328987][ T39] audit: type=1400 audit(1733089694.185:314): avc: denied { getopt } for pid=6426 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.345951][ T39] audit: type=1400 audit(1733089694.205:315): avc: denied { create } for pid=6431 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.376972][ T39] audit: type=1400 audit(1733089694.245:316): avc: denied { mounton } for pid=6435 comm="syz.2.139" path="/46/file0" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.386482][ T39] audit: type=1400 audit(1733089694.245:317): avc: denied { mounton } for pid=6428 comm="syz.4.128" path="/proc/3/task" dev="proc" ino=12899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 60.552134][ T6448] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 60.660322][ T6464] syzkaller0: entered promiscuous mode [ 60.661782][ T6464] syzkaller0: entered allmulticast mode [ 60.699276][ T39] audit: type=1400 audit(1733089694.565:318): avc: denied { create } for pid=6465 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.773932][ T6486] kvm: MONITOR instruction emulated as NOP! [ 61.826621][ T5950] Bluetooth: hci0: command tx timeout [ 62.022877][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 62.710802][ T6516] bridge0: port 3(syz_tun) entered blocking state [ 62.713357][ T6516] bridge0: port 3(syz_tun) entered disabled state [ 62.715193][ T6516] syz_tun: entered allmulticast mode [ 62.719472][ T6516] syz_tun: entered promiscuous mode [ 62.721425][ T6516] bridge0: port 3(syz_tun) entered blocking state [ 62.723257][ T6516] bridge0: port 3(syz_tun) entered forwarding state [ 62.731087][ T6516] bridge0: port 4(erspan0) entered blocking state [ 62.732856][ T6516] bridge0: port 4(erspan0) entered disabled state [ 62.734605][ T6516] erspan0: entered allmulticast mode [ 62.736548][ T6516] erspan0: entered promiscuous mode [ 62.739218][ T6516] bridge0: port 4(erspan0) entered blocking state [ 62.741175][ T6516] bridge0: port 4(erspan0) entered forwarding state [ 62.784335][ T6518] xt_hashlimit: size too large, truncated to 1048576 [ 63.709948][ T6526] overlayfs: failed to get inode (-116) [ 63.711688][ T6526] overlayfs: failed to get inode (-116) [ 63.791727][ T6534] binder: 6533:6534 ioctl c0306201 20000680 returned -14 [ 63.917392][ T5950] Bluetooth: hci0: command tx timeout [ 64.028060][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 64.348170][ T6556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.175'. [ 64.478185][ T6560] ======================================================= [ 64.478185][ T6560] WARNING: The mand mount option has been deprecated and [ 64.478185][ T6560] and is ignored by this kernel. Remove the mand [ 64.478185][ T6560] option from the mount to silence this warning. [ 64.478185][ T6560] ======================================================= [ 64.638339][ T6569] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 64.764955][ T6585] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.779269][ T6585] netfs: Couldn't get user pages (rc=-14) [ 65.194926][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 65.194937][ T39] audit: type=1400 audit(1733089699.055:345): avc: denied { read } for pid=6597 comm="syz.4.191" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.199492][ T6598] zonefs (nullb0) ERROR: Not a zoned block device [ 65.203671][ T39] audit: type=1400 audit(1733089699.055:346): avc: denied { open } for pid=6597 comm="syz.4.191" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.211800][ T39] audit: type=1400 audit(1733089699.065:347): avc: denied { search } for pid=5334 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.339206][ T39] audit: type=1400 audit(1733089699.205:348): avc: denied { setattr } for pid=6602 comm="syz.1.193" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.355576][ T39] audit: type=1400 audit(1733089699.215:349): avc: denied { write } for pid=6602 comm="syz.1.193" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.465611][ T39] audit: type=1400 audit(1733089699.325:350): avc: denied { write } for pid=6604 comm="syz.1.194" path="socket:[11935]" dev="sockfs" ino=11935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.473934][ T39] audit: type=1400 audit(1733089699.325:351): avc: denied { nlmsg_read } for pid=6604 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.501578][ T39] audit: type=1400 audit(1733089699.365:352): avc: denied { create } for pid=6606 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.716739][ T39] audit: type=1400 audit(1733089699.585:353): avc: denied { setrlimit } for pid=6611 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 65.768743][ T39] audit: type=1400 audit(1733089699.635:354): avc: denied { ioctl } for pid=6612 comm="syz.1.197" path="socket:[14345]" dev="sockfs" ino=14345 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.879988][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 65.986867][ T5950] Bluetooth: hci0: command tx timeout [ 66.039426][ T6625] input: syz0 as /devices/virtual/input/input5 [ 66.390556][ T6647] binder_alloc: 6646: binder_alloc_buf, no vma [ 66.651472][ T6656] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 67.171106][ T6667] netlink: 'syz.4.216': attribute type 1 has an invalid length. [ 67.816445][ T6292] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 67.944235][ T6689] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.948038][ T6689] overlayfs: failed to set xattr on upper [ 67.950391][ T6689] overlayfs: ...falling back to redirect_dir=nofollow. [ 67.952581][ T6689] overlayfs: ...falling back to index=off. [ 67.954287][ T6689] overlayfs: ...falling back to uuid=null. [ 67.981506][ T6292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.985006][ T6292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.992234][ T6292] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 67.995809][ T6292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.005225][ T6292] usb 7-1: config 0 descriptor?? [ 68.286437][ T1327] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.431119][ T6292] magicmouse 0003:05AC:0269.0003: item fetching failed at offset 5/7 [ 68.433609][ T6292] magicmouse 0003:05AC:0269.0003: magicmouse hid parse failed [ 68.435567][ T6292] magicmouse 0003:05AC:0269.0003: probe with driver magicmouse failed with error -22 [ 68.446397][ T1327] usb 5-1: Using ep0 maxpacket: 32 [ 68.449079][ T1327] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 68.453333][ T1327] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 68.455738][ T1327] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 68.458129][ T1327] usb 5-1: Product: syz [ 68.461138][ T1327] usb 5-1: Manufacturer: syz [ 68.462892][ T1327] usb 5-1: SerialNumber: syz [ 68.466102][ T1327] usb 5-1: config 0 descriptor?? [ 68.470524][ T6691] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 68.638184][ T6012] usb 7-1: USB disconnect, device number 3 [ 68.750318][ T1327] usb 5-1: USB disconnect, device number 5 [ 69.298675][ T6708] binder: 6707:6708 ioctl c0306201 20000200 returned -11 [ 69.341719][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.419460][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 69.454363][ T6713] team1: Mode "" not found [ 69.692006][ T6726] binder: 6725:6726 ioctl c0306201 200002c0 returned -14 [ 69.731056][ T6728] loop7: detected capacity change from 0 to 16384 [ 69.734761][ T6728] blk_print_req_error: 27 callbacks suppressed [ 69.734771][ T6728] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.040688][ T6739] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 70.042851][ T6739] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536870912 (1073741824 ns) > initial count (200000 ns). Using initial count to start timer. [ 70.049413][ T6739] kvm: user requested TSC rate below hardware speed [ 70.686438][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 70.846432][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 70.850989][ T8] usb 5-1: New USB device found, idVendor=0bed, idProduct=1101, bcdDevice=7c.68 [ 70.854158][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.856429][ T8] usb 5-1: Product: syz [ 70.857681][ T8] usb 5-1: Manufacturer: syz [ 70.859057][ T8] usb 5-1: SerialNumber: syz [ 70.862122][ T8] usb 5-1: config 0 descriptor?? [ 70.865026][ T8] cp210x 5-1:0.0: cp210x converter detected [ 71.039394][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.075612][ T12] bond0: (slave bond_slave_0): interface is now down [ 71.077602][ T12] bond0: (slave bond_slave_1): interface is now down [ 71.083872][ T8] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 71.086785][ T8] cp210x 5-1:0.0: querying part number failed [ 71.087167][ T6763] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 71.090761][ T8] usb 5-1: cp210x converter now attached to ttyUSB0 [ 71.092252][ T8] usb 5-1: USB disconnect, device number 6 [ 71.096166][ T6763] syz_tun: entered promiscuous mode [ 71.098070][ T1140] bond0: (slave bond_slave_0): interface is now down [ 71.100145][ T1140] bond0: (slave bond_slave_1): interface is now down [ 71.103560][ T6763] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 71.105542][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 71.109623][ T8] cp210x 5-1:0.0: device disconnected [ 71.118816][ T45] bond0: (slave bond_slave_0): interface is now down [ 71.121181][ T45] bond0: (slave bond_slave_1): interface is now down [ 71.123693][ T45] bond0: (slave syz_tun): interface is now down [ 71.130541][ T45] bond0: now running without any active interface! [ 71.316624][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 71.316637][ T39] audit: type=1400 audit(1733089705.185:369): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.348733][ T5939] bridge0: port 3(syz_tun) entered disabled state [ 71.360715][ T5939] syz_tun (unregistering): left allmulticast mode [ 71.362597][ T5939] syz_tun (unregistering): left promiscuous mode [ 71.364773][ T5939] bridge0: port 3(syz_tun) entered disabled state [ 71.579388][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.626429][ T39] audit: type=1400 audit(1733089705.485:370): avc: denied { execute } for pid=6793 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 71.641220][ T39] audit: type=1400 audit(1733089705.485:371): avc: denied { execute_no_trans } for pid=6793 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 71.691475][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.698508][ T39] audit: type=1400 audit(1733089705.555:372): avc: denied { block_suspend } for pid=6788 comm="syz.4.257" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.753435][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.757349][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.762143][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.766069][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.772619][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.774922][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.797818][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.846580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.868181][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.902218][ T6804] chnl_net:caif_netlink_parms(): no params data found [ 71.993224][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 72.014908][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.022828][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.024695][ T6804] bridge_slave_0: entered allmulticast mode [ 72.027539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.028070][ T6804] bridge_slave_0: entered promiscuous mode [ 72.032161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.034040][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.038752][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.040692][ T6804] bridge_slave_1: entered allmulticast mode [ 72.042748][ T6804] bridge_slave_1: entered promiscuous mode [ 72.088628][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.093812][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.096218][ T12] erspan0: left allmulticast mode [ 72.097729][ T12] erspan0: left promiscuous mode [ 72.099158][ T12] bridge0: port 4(erspan0) entered disabled state [ 72.102084][ T12] bridge_slave_1: left allmulticast mode [ 72.103574][ T12] bridge_slave_1: left promiscuous mode [ 72.106032][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.109873][ T12] bridge_slave_0: left allmulticast mode [ 72.111317][ T12] bridge_slave_0: left promiscuous mode [ 72.112825][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.158851][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 72.161800][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 72.165177][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.168920][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.171314][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.177254][ T8] usb 5-1: config 0 descriptor?? [ 72.179833][ T6802] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.383518][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.391027][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.394756][ T12] bond0 (unregistering): Released all slaves [ 72.430827][ T6804] team0: Port device team_slave_0 added [ 72.433474][ T6804] team0: Port device team_slave_1 added [ 72.461029][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.466766][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.473302][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.487843][ T12] tipc: Disabling bearer [ 72.496671][ T12] tipc: Left network mode [ 72.499197][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.500872][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.515378][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.597978][ T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.600179][ T8] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 72.619348][ T8] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 72.684024][ T6804] hsr_slave_0: entered promiscuous mode [ 72.686121][ T6804] hsr_slave_1: entered promiscuous mode [ 72.772576][ T12] hsr_slave_0: left promiscuous mode [ 72.774508][ T12] hsr_slave_1: left promiscuous mode [ 72.779883][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.781817][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.784377][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.786415][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.805074][ T12] veth1_macvtap: left promiscuous mode [ 72.806777][ T12] veth0_macvtap: left promiscuous mode [ 72.808296][ T12] veth1_vlan: left promiscuous mode [ 72.809688][ T12] veth0_vlan: left promiscuous mode [ 72.921722][ T1327] usb 5-1: USB disconnect, device number 7 [ 73.347317][ T5950] Bluetooth: hci0: command tx timeout [ 73.395717][ T12] team0 (unregistering): Port device team_slave_1 removed [ 73.485614][ T12] team0 (unregistering): Port device team_slave_0 removed [ 73.834085][ T5950] Bluetooth: hci1: command tx timeout [ 73.897976][ T5985] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 74.056643][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 74.067539][ T6804] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.069825][ T5985] usb 5-1: config index 0 descriptor too short (expected 28277, got 45) [ 74.072009][ T5985] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.074587][ T5985] usb 5-1: config 0 has no interfaces? [ 74.075949][ T5985] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.078981][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.082050][ T5985] usb 5-1: config 0 descriptor?? [ 74.089077][ T6804] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.093587][ T6804] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.098584][ T6804] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.153481][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.174635][ T6804] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.184402][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.186894][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.198270][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.200854][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.346982][ T8] usb 5-1: USB disconnect, device number 8 [ 74.354438][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.466234][ T6804] veth0_vlan: entered promiscuous mode [ 74.476563][ T6804] veth1_vlan: entered promiscuous mode [ 74.494439][ T6804] veth0_macvtap: entered promiscuous mode [ 74.501664][ T6804] veth1_macvtap: entered promiscuous mode [ 74.507663][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.510397][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.512910][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.515580][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.518826][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.521595][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.524753][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.538399][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.541305][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.543883][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.546793][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.549238][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.551846][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.554913][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.562239][ T6804] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.565426][ T6804] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.568819][ T6804] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.572115][ T6804] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616527][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.618785][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.635303][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.638097][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.911794][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 75.003027][ T39] audit: type=1400 audit(1733089708.865:373): avc: denied { read } for pid=6919 comm="syz.0.276" laddr=172.20.20.44 lport=42582 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 75.836092][ T6951] picdev_read: 9 callbacks suppressed [ 75.836104][ T6951] kvm: pic: non byte read [ 75.906495][ T5950] Bluetooth: hci1: command tx timeout [ 76.147999][ T72] cfg80211: failed to load regulatory.db [ 76.790051][ T39] audit: type=1400 audit(1733089710.655:374): avc: denied { map } for pid=6960 comm="syz.0.279" path="socket:[15076]" dev="sockfs" ino=15076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 77.494104][ T39] audit: type=1400 audit(1733089711.355:375): avc: denied { bind } for pid=6982 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.499910][ T39] audit: type=1400 audit(1733089711.365:376): avc: denied { setopt } for pid=6982 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.551067][ T6985] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 77.655078][ T6989] TCP: out of memory -- consider tuning tcp_mem [ 77.834523][ T39] audit: type=1400 audit(1733089711.695:377): avc: denied { open } for pid=6993 comm="syz.0.293" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 77.842542][ T39] audit: type=1400 audit(1733089711.705:378): avc: denied { ioctl } for pid=6993 comm="syz.0.293" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 77.986977][ T5950] Bluetooth: hci1: command tx timeout [ 79.489357][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.300'. [ 79.491682][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 79.538351][ T7025] netlink: 'syz.4.301': attribute type 27 has an invalid length. [ 79.541164][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.301'. [ 79.611361][ T39] audit: type=1400 audit(1733089713.475:379): avc: denied { create } for pid=7024 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.622249][ T39] audit: type=1400 audit(1733089713.475:380): avc: denied { write } for pid=7024 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.644186][ T7027] bridge_slave_0: left allmulticast mode [ 79.645748][ T7027] bridge_slave_0: left promiscuous mode [ 79.647840][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.652005][ T7027] bridge_slave_1: left allmulticast mode [ 79.653522][ T7027] bridge_slave_1: left promiscuous mode [ 79.655042][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.659764][ T7027] bond0: (slave bond_slave_0): Releasing backup interface [ 79.663607][ T7027] bond0: (slave bond_slave_1): Releasing backup interface [ 79.681971][ T7027] team0: Port device team_slave_0 removed [ 79.695269][ T7027] team0: Port device team_slave_1 removed [ 79.698916][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.701938][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.706152][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.709506][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.754812][ T7029] team0: Mode changed to "loadbalance" [ 79.984062][ T7039] pim6reg1: entered promiscuous mode [ 79.985974][ T7039] pim6reg1: entered allmulticast mode [ 80.066525][ T5950] Bluetooth: hci1: command tx timeout [ 80.615727][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.309'. [ 80.685176][ T7050] binder: 7049:7050 ioctl c0306201 20000680 returned -22 [ 80.897560][ T5950] Bluetooth: hci2: Unable to find connection for big 0x01 [ 80.904563][ T39] audit: type=1400 audit(1733089714.765:381): avc: denied { read } for pid=7059 comm="syz.0.313" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.913007][ T39] audit: type=1400 audit(1733089714.765:382): avc: denied { open } for pid=7059 comm="syz.0.313" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.922077][ T39] audit: type=1400 audit(1733089714.765:383): avc: denied { map } for pid=7059 comm="syz.0.313" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.638286][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 82.638300][ T39] audit: type=1400 audit(1733089716.505:386): avc: denied { read write } for pid=7095 comm="syz.0.324" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 82.649602][ T39] audit: type=1400 audit(1733089716.505:387): avc: denied { open } for pid=7095 comm="syz.0.324" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 82.751532][ T39] audit: type=1400 audit(1733089716.615:388): avc: denied { create } for pid=7104 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.760218][ T39] audit: type=1400 audit(1733089716.625:389): avc: denied { connect } for pid=7104 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.019284][ T7115] kvm: pic: single mode not supported [ 83.055294][ T7115] kvm: pic: single mode not supported [ 83.056964][ T7115] kvm: pic: level sensitive irq not supported [ 83.061079][ T7115] kvm: pic: level sensitive irq not supported [ 83.188813][ T39] audit: type=1400 audit(1733089717.055:390): avc: denied { read } for pid=7120 comm="syz.4.331" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.200222][ T39] audit: type=1400 audit(1733089717.055:391): avc: denied { open } for pid=7120 comm="syz.4.331" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.207224][ T39] audit: type=1400 audit(1733089717.065:392): avc: denied { map } for pid=7120 comm="syz.4.331" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.213568][ T39] audit: type=1400 audit(1733089717.065:393): avc: denied { execute } for pid=7120 comm="syz.4.331" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.583073][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'. [ 83.616813][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 83.619520][ T7136] netlink: 'syz.4.336': attribute type 1 has an invalid length. [ 83.621711][ T7136] nbd: error processing sock list [ 83.764824][ T39] audit: type=1400 audit(1733089717.625:394): avc: denied { write } for pid=7146 comm="syz.0.341" name="softnet_stat" dev="proc" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.765896][ T5985] kernel write not supported for file /263/net/softnet_stat (pid: 5985 comm: kworker/2:4) [ 84.437611][ T7180] binder_alloc: 7177: binder_alloc_buf size 4096 failed, no address space [ 84.440426][ T7180] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 84.508003][ T7182] kvm: pic: non byte read [ 84.524040][ T7186] binder: 7185:7186 ioctl c0306201 20000680 returned -14 [ 84.803944][ T39] audit: type=1400 audit(1733089718.665:395): avc: granted { setsecparam } for pid=7196 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 84.895346][ T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 85.039015][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.043128][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.046995][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.051242][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.054299][ T5950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.060176][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.066402][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 85.108412][ T5950] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.111709][ T5950] Bluetooth: hci2: Injecting HCI hardware error event [ 85.115673][ T5945] Bluetooth: hci2: hardware error 0x00 [ 85.120450][ T8] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 85.123354][ T8] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.126005][ T8] usb 9-1: config 0 interface 0 has no altsetting 0 [ 85.127930][ T8] usb 9-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 85.130324][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.134943][ T8] usb 9-1: config 0 descriptor?? [ 85.166892][ T7200] chnl_net:caif_netlink_parms(): no params data found [ 85.237487][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.239949][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.241881][ T7200] bridge_slave_0: entered allmulticast mode [ 85.243932][ T7200] bridge_slave_0: entered promiscuous mode [ 85.247393][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.249483][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.251529][ T7200] bridge_slave_1: entered allmulticast mode [ 85.253995][ T7200] bridge_slave_1: entered promiscuous mode [ 85.278307][ T7200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.286573][ T7200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.320824][ T7200] team0: Port device team_slave_0 added [ 85.324995][ T7200] team0: Port device team_slave_1 added [ 85.345021][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.347655][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.354413][ T7200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.359576][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.361407][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.368134][ T7200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.394262][ T7200] hsr_slave_0: entered promiscuous mode [ 85.396834][ T7200] hsr_slave_1: entered promiscuous mode [ 85.398831][ T7200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.400791][ T7200] Cannot create hsr debugfs directory [ 85.412373][ T8] usbhid 9-1:0.0: can't add hid device: -71 [ 85.414033][ T8] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 85.419568][ T8] usb 9-1: USB disconnect, device number 2 [ 85.509118][ T7200] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 85.518297][ T7200] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 85.526541][ T7200] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 85.538658][ T7200] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 85.555222][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.362'. [ 85.555957][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.560435][ T7200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.563121][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.565554][ T7200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.614266][ T7200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.623291][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.626469][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.641657][ T7200] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.649803][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.652409][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.665013][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.666963][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.757581][ T7200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.881439][ T7200] veth0_vlan: entered promiscuous mode [ 85.885354][ T7200] veth1_vlan: entered promiscuous mode [ 85.903061][ T7200] veth0_macvtap: entered promiscuous mode [ 85.906031][ T7200] veth1_macvtap: entered promiscuous mode [ 85.920141][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.923821][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.934808][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.937736][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.940626][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.940749][ T7262] overlayfs: failed to get inode (-116) [ 85.943298][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.944163][ T7200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.944883][ T7262] overlayfs: failed to get inode (-116) [ 85.955083][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.958908][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.961525][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.965290][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.968926][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.979128][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.982485][ T7200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.987130][ T7200] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.989439][ T7200] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.991594][ T7200] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.996383][ T7200] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.000827][ T7264] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 86.043043][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.045185][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.058210][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.060613][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.382558][ T7296] ipvlan1: entered promiscuous mode [ 86.385433][ T7296] bridge0: port 1(ipvlan1) entered blocking state [ 86.400926][ T7296] bridge0: port 1(ipvlan1) entered disabled state [ 86.403477][ T7296] ipvlan1: entered allmulticast mode [ 86.405373][ T7296] bridge0: entered allmulticast mode [ 86.413801][ T7296] ipvlan1: left allmulticast mode [ 86.415718][ T7296] bridge0: left allmulticast mode [ 86.996699][ T6004] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 87.011568][ T7300] syz.4.376 (7300) used greatest stack depth: 20464 bytes left [ 87.106670][ T5950] Bluetooth: hci3: command tx timeout [ 87.156686][ T6004] usb 11-1: Using ep0 maxpacket: 8 [ 87.159616][ T6004] usb 11-1: config 0 has no interfaces? [ 87.161136][ T6004] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.163616][ T6004] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.167997][ T6004] usb 11-1: config 0 descriptor?? [ 87.196486][ T5945] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 87.261355][ T7338] netlink: 'syz.4.386': attribute type 2 has an invalid length. [ 87.263813][ T7338] netlink: 'syz.4.386': attribute type 9 has an invalid length. [ 87.266395][ T7338] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.386'. [ 87.276183][ T7338] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 87.287371][ T7338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=7338 comm=syz.4.386 [ 87.378948][ T6004] usb 11-1: USB disconnect, device number 2 [ 87.705585][ T7353] (syz.4.391,7353,3):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 87.709349][ T7353] (syz.4.391,7353,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 87.923478][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 87.923495][ T39] audit: type=1804 audit(1733089721.785:406): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.392" name="/newroot/91/file1" dev="fuse" ino=1 res=1 errno=0 [ 88.031953][ T39] audit: type=1400 audit(1733089721.895:407): avc: denied { setopt } for pid=7363 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.037188][ T39] audit: type=1400 audit(1733089721.895:408): avc: denied { write } for pid=7363 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.045930][ T39] audit: type=1400 audit(1733089722.905:409): avc: denied { create } for pid=7381 comm="syz.6.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 89.174138][ T7375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.178012][ T7375] batadv_slave_0: entered promiscuous mode [ 89.196644][ T5945] Bluetooth: hci3: command tx timeout [ 89.270727][ T7390] binder: 7389:7390 unknown command 0 [ 89.272235][ T7390] binder: 7389:7390 ioctl c0306201 200001c0 returned -22 [ 89.378648][ T5945] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 89.382208][ T5945] CPU: 3 UID: 0 PID: 5945 Comm: kworker/u33:3 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 89.385477][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.388291][ T5945] Workqueue: hci3 hci_rx_work [ 89.389644][ T5945] Call Trace: [ 89.390542][ T5945] [ 89.391321][ T5945] dump_stack_lvl+0x16c/0x1f0 [ 89.392577][ T5945] sysfs_warn_dup+0x7f/0xa0 [ 89.393791][ T5945] sysfs_create_dir_ns+0x24d/0x2b0 [ 89.395144][ T5945] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 89.396928][ T5945] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.398491][ T5945] ? kobject_add_internal+0x12d/0x990 [ 89.399965][ T5945] ? do_raw_spin_unlock+0x172/0x230 [ 89.401360][ T5945] kobject_add_internal+0x2c8/0x990 [ 89.402740][ T5945] kobject_add+0x16f/0x240 [ 89.403937][ T5945] ? __pfx_kobject_add+0x10/0x10 [ 89.405156][ T5945] ? kobject_put+0xab/0x5a0 [ 89.406428][ T5945] device_add+0x289/0x1a70 [ 89.407968][ T5945] ? __pfx_dev_set_name+0x10/0x10 [ 89.409366][ T5945] ? __pfx_device_add+0x10/0x10 [ 89.410678][ T5945] ? mgmt_send_event_skb+0x2f2/0x460 [ 89.412131][ T5945] hci_conn_add_sysfs+0x17e/0x230 [ 89.413503][ T5945] le_conn_complete_evt+0x1077/0x1d60 [ 89.414925][ T5945] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 89.416419][ T5945] ? __mutex_lock+0x1cc/0xa60 [ 89.417712][ T5945] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 89.419350][ T5945] ? skb_pull_data+0x166/0x210 [ 89.420656][ T5945] hci_le_meta_evt+0x2e2/0x5d0 [ 89.422164][ T5945] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 89.423924][ T5945] hci_event_packet+0x666/0x1180 [ 89.425298][ T5945] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 89.426895][ T5945] ? __pfx_hci_event_packet+0x10/0x10 [ 89.428375][ T5945] ? mark_held_locks+0x9f/0xe0 [ 89.429703][ T5945] ? kcov_remote_start+0x3cf/0x6e0 [ 89.431085][ T5945] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.432472][ T5945] hci_rx_work+0x2c5/0x16b0 [ 89.433648][ T5945] ? process_one_work+0x921/0x1ba0 [ 89.435088][ T5945] process_one_work+0x9c5/0x1ba0 [ 89.436402][ T5945] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 89.437868][ T5945] ? __pfx_process_one_work+0x10/0x10 [ 89.439289][ T5945] ? rcu_is_watching+0x12/0xc0 [ 89.440729][ T5945] ? assign_work+0x1a0/0x250 [ 89.441966][ T5945] worker_thread+0x6c8/0xf00 [ 89.443183][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 89.444518][ T5945] kthread+0x2c1/0x3a0 [ 89.445567][ T5945] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.446922][ T5945] ? __pfx_kthread+0x10/0x10 [ 89.448257][ T5945] ret_from_fork+0x45/0x80 [ 89.449409][ T5945] ? __pfx_kthread+0x10/0x10 [ 89.450608][ T5945] ret_from_fork_asm+0x1a/0x30 [ 89.451872][ T5945] [ 89.454840][ T5945] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 89.458536][ T5945] Bluetooth: hci3: failed to register connection device [ 90.086893][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.091776][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.095437][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.100608][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.103669][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.109297][ T39] audit: type=1804 audit(1733089723.975:410): pid=7423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.413" name="/newroot/100/file0" dev="fuse" ino=1 res=1 errno=0 [ 90.110318][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.212922][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.225710][ T7421] chnl_net:caif_netlink_parms(): no params data found [ 90.301257][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.305937][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.308099][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.310064][ T7421] bridge_slave_0: entered allmulticast mode [ 90.312452][ T7421] bridge_slave_0: entered promiscuous mode [ 90.315014][ T7421] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.317275][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.319228][ T7421] bridge_slave_1: entered allmulticast mode [ 90.321349][ T7421] bridge_slave_1: entered promiscuous mode [ 90.344486][ T7421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.364136][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.372833][ T7421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.404023][ T7421] team0: Port device team_slave_0 added [ 90.406897][ T7421] team0: Port device team_slave_1 added [ 90.431505][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.439343][ T7421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.441468][ T7421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.449312][ T7421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.453548][ T7421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.455427][ T7421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.462858][ T7421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.492349][ T7421] hsr_slave_0: entered promiscuous mode [ 90.495218][ T7421] hsr_slave_1: entered promiscuous mode [ 90.497977][ T7421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.500551][ T7421] Cannot create hsr debugfs directory [ 90.588474][ T12] bridge_slave_1: left allmulticast mode [ 90.590014][ T12] bridge_slave_1: left promiscuous mode [ 90.591571][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.594624][ T12] bridge_slave_0: left allmulticast mode [ 90.596136][ T12] bridge_slave_0: left promiscuous mode [ 90.597931][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.919832][ T39] audit: type=1400 audit(1733089724.785:411): avc: denied { nlmsg_write } for pid=7430 comm="syz.6.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.946235][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.958269][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.962350][ T12] bond0 (unregistering): Released all slaves [ 90.970491][ T39] audit: type=1400 audit(1733089724.835:412): avc: denied { ioctl } for pid=7432 comm="syz.6.415" path="/dev/video0" dev="devtmpfs" ino=955 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 91.106894][ T7421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 91.112468][ T7421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 91.117589][ T7421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 91.121007][ T7421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 91.212437][ T7421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.223618][ T7421] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.239230][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.241514][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.247487][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.250106][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.268337][ T5950] Bluetooth: hci3: command tx timeout [ 91.282499][ T7421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.306832][ T12] hsr_slave_0: left promiscuous mode [ 91.311414][ T12] hsr_slave_1: left promiscuous mode [ 91.313358][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.315662][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.320509][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.323210][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.351048][ T12] veth1_macvtap: left promiscuous mode [ 91.352618][ T12] veth0_macvtap: left promiscuous mode [ 91.354632][ T12] veth1_vlan: left promiscuous mode [ 91.356777][ T12] veth0_vlan: left promiscuous mode [ 92.083986][ T12] team0 (unregistering): Port device team_slave_1 removed [ 92.154342][ T5950] Bluetooth: hci1: command tx timeout [ 92.210816][ T12] team0 (unregistering): Port device team_slave_0 removed [ 92.395740][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.411667][ T7459] netlink: 36 bytes leftover after parsing attributes in process `syz.6.418'. [ 92.414986][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.6.418'. [ 92.418056][ T7459] netlink: 36 bytes leftover after parsing attributes in process `syz.6.418'. [ 92.421243][ T7459] netlink: 36 bytes leftover after parsing attributes in process `syz.6.418'. [ 92.970586][ T39] audit: type=1400 audit(1733089726.835:413): avc: denied { append } for pid=7474 comm="syz.4.424" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.098263][ T7421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.224895][ T39] audit: type=1400 audit(1733089727.085:414): avc: denied { read } for pid=7496 comm="syz.6.428" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 93.230688][ T39] audit: type=1400 audit(1733089727.085:415): avc: denied { open } for pid=7496 comm="syz.6.428" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 93.277993][ T7421] veth0_vlan: entered promiscuous mode [ 93.284174][ T7421] veth1_vlan: entered promiscuous mode [ 93.314962][ T7421] veth0_macvtap: entered promiscuous mode [ 93.327674][ T7421] veth1_macvtap: entered promiscuous mode [ 93.338596][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.341819][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.344366][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.346608][ T5950] Bluetooth: hci3: command tx timeout [ 93.358792][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.362069][ T7421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.363060][ T7517] overlayfs: failed to get inode (-116) [ 93.383855][ T7517] overlayfs: failed to get inode (-116) [ 93.388098][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.391232][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.393977][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.397076][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.399900][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.403314][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.406576][ T7421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.418194][ T7421] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.420975][ T7421] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.423991][ T7421] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.433086][ T7421] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.494959][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.498084][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.518141][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.522103][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.720595][ T7546] netlink: 40 bytes leftover after parsing attributes in process `syz.7.437'. [ 94.019477][ T7562] input: syz1 as /devices/virtual/input/input6 [ 94.070304][ T39] audit: type=1400 audit(1733089727.935:416): avc: denied { getopt } for pid=7569 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.076221][ T9] IPVS: starting estimator thread 0... [ 94.110700][ T39] audit: type=1400 audit(1733089727.975:417): avc: denied { sys_chroot } for pid=7575 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 94.132073][ T39] audit: type=1400 audit(1733089727.975:418): avc: denied { setgid } for pid=7575 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 94.139890][ T39] audit: type=1400 audit(1733089727.995:419): avc: denied { read } for pid=7577 comm="syz.6.442" path="socket:[21838]" dev="sockfs" ino=21838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.176448][ T7572] IPVS: using max 39 ests per chain, 93600 per kthread [ 94.226669][ T5950] Bluetooth: hci1: command tx timeout [ 94.341102][ T7588] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 94.342827][ T39] audit: type=1326 audit(1733089728.205:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.7.446" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ce8580849 code=0x0 [ 94.383448][ T7588] kvm: pic: non byte read [ 94.390519][ T7588] kvm: pic: non byte read [ 94.395102][ T7588] kvm: pic: level sensitive irq not supported [ 94.395518][ T7588] kvm: pic: non byte read [ 94.401122][ T7588] kvm: pic: non byte read [ 94.404832][ T7588] kvm: pic: non byte read [ 94.407121][ T39] audit: type=1804 audit(1733089728.265:421): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.448" name="/newroot/141/file1" dev="fuse" ino=1 res=1 errno=0 [ 94.418034][ T7588] kvm: pic: non byte read [ 94.428805][ T39] audit: type=1804 audit(1733089728.265:422): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.448" name="/newroot/141/file1" dev="fuse" ino=1 res=1 errno=0 [ 95.185201][ T1140] Bluetooth: hci4: Frame reassembly failed (-84) DEC 1 21:48:49 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB15: SOLICITING AN IPV6 ROUTER DEC 1 21:48:49 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB18: SOLICITING AN IPV6 ROUTER DEC 1 21:48:49 SYZKALLER KERN.ERR KERNEL: [ 95.185201][ T1140] BLUETOOTH: HCI4: FRAME REASSEMBLY FAILED (-84) DEC 1 21:48:49 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB17: SOLICITING A DHCP LEASE DEC 1 21:48:49 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB18: SOLICITING A DHCP LEASE DEC 1 21:48:49 SYZKALLER DAEMON.ERR DHCPCD[7657]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT DEC 1 21:48:49 SYZKALLER DAEMON.ERR DHCPCD[7657]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:48:49 SYZKALLER DAEMON.ERR DHCPCD[7658]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT DEC 1 21:48:49 SYZKALLER DAEMON.ERR DHCPCD[7658]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:48:49 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB15: SOLICITING A DHCP LEASE DEC 1 21:48:49 SYZKALLER DAEMON.ERR DHCPCD[7668]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT DEC 1 21:48:49 SYZKALLER DAEMON.ERR DHCPCD[7668]: PS_ROOT_RECVMSG: INVALID ARGUMENT [ 96.308252][ T5945] Bluetooth: hci1: command tx timeout DEC 1 21:48:50 SYZKALLER KERN.ERR KERNEL: [ 96.308252][ T5945] BLUETOOTH: HCI1: COMMAND TX TIMEOUT [ 97.196495][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 97.196538][ T5945] Bluetooth: hci4: command 0x1003 tx timeout DEC 1 21:48:51 SYZKALLER KERN.ERR KERNEL: [ 97.196495][ T5950] BLUETOOTH: HCI4: OPCODE 0X1003 FAILED: -110 DEC 1 21:48:51 SYZKALLER KERN.ERR KERNEL: [ 97.196538][ T5945] BLUETOOTH: HCI4: COMMAND 0X1003 TX TIMEOUT [ 98.082773][ T39] kauditd_printk_skb: 203 callbacks suppressed [ 98.082787][ T39] audit: type=1400 audit(1733089731.945:626): avc: denied { read write } for pid=7421 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.090780][ T39] audit: type=1400 audit(1733089731.955:627): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 98.096271][ T39] audit: type=1400 audit(1733089731.955:628): avc: denied { create } for pid=7739 comm="syz.7.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 98.098390][ T39] audit: type=1400 audit(1733089731.965:629): avc: denied { create } for pid=7739 comm="syz.7.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 98.099241][ T6292] IPVS: starting estimator thread 0... [ 98.110070][ T39] audit: type=1400 audit(1733089731.965:630): avc: denied { create } for pid=7739 comm="syz.7.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 98.115417][ T39] audit: type=1400 audit(1733089731.965:631): avc: denied { create } for pid=7739 comm="syz.7.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 DEC 1 21:48:51 SYZKALLER KERN.WARN KERNEL: [ 98.082773][ T39] KAUDITD_PRINTK_SKB: 203 CALLBACKS SUPPRESSED DEC 1 21:48:51 SYZKALLER KERN.NOTICE KERNEL: [ 98.082787][ T39] AUDIT: TYPE=1400 AUDIT(1733089731.945:626): AVC: DENIED { READ WRITE } FOR PID=7421 C[ 98.156466][ T39] audit: type=1400 audit(1733089731.965:632): avc: denied { create } for pid=7739 comm="syz.7.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 O[ 98.161770][ T39] audit: type=1400 audit(1733089731.975:633): avc: denied { read write } for pid=7421 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 MM="S[ 98.168655][ T39] audit: type=1400 audit(1733089731.995:634): avc: denied { map_create } for pid=7742 comm="syz.7.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 Y[ 98.173600][ T39] audit: type=1400 audit(1733089731.995:635): avc: denied { read } for pid=7742 comm="syz.7.507" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 Z-EXECUTOR" NAME="LOOP7" DEV="DEVTMPFS" INO=665 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:FIX DEC 1 21:48:51 SYZKALLER KE[ 98.196494][ T7741] IPVS: using max 39 ests per chain, 93600 per kthread RN.NOTICE KERNEL: [ 98.090780][ T39] AUDIT: TYPE=1400 AUDIT(1733089731.955:627): AVC: DENIED { READ } FOR PID=5334 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS=L DEC 1 21:48:51 SYZKALLER KERN.NOTICE KERNEL: [ 98.096271][ T39] AUDIT: TYPE=1400 AUDIT(1733089731.955:628): AVC: DENIED { CREATE } FOR PID=7739 COMM="SYZ.7.506" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_NETFILTER_SOCKET PERMISSIV DEC 1 21:48:51 SYZKALLER KERN.NOTICE KERNEL: [ 98.098390][ T39] AUDIT: TYPE=1400 AUDIT(1733089731.965:629): AVC: DENIED { CREATE } FOR PID=7739 COMM="SYZ.7.506" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_GENERIC_SOCKET PERMISSIVE= DEC 1 21:48:51 SYZKALLER KERN.INFO KERNEL: [ 98.099241][ T6292] IPVS: STARTING ESTIMATOR THREAD 0... DEC 1 21:48:51 SYZKALLER KERN.NOTICE KERNEL: [ 98.110070][ T39] AUDIT: TYPE=1400 AUDIT(1733089731.965:630): AVC: DENIED { CREATE } FOR PID=7739 COMM="SYZ.7.506" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_GENERIC_SOCKET PERMISSIVE= DEC 1 21:48:51 SYZKALLER KERN.NOTICE KERNEL: [ 98.115417][ T39] AUDIT: TYPE=1400 AUDIT(1733089731.965:631): AVC: DENIED { CREATE } FOR PID=773[ 98.386640][ T5950] Bluetooth: hci1: command tx timeout 9[ 98.386717][ T5945] Bluetooth: hci5: command 0x1003 tx timeout C[ 98.388452][ T5943] Bluetooth: hci5: Opcode 0x1003 failed: -110 OMM="SYZ.7.506" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_GENERIC_SOCKET PERMISSIVE= DEC 1 21:48:52 SYZKALLER KERN.NOTICE KERNEL: [ 98.156466][ T39] AUDIT: TYPE=1400 AUDIT(1733089731.965:632): AVC: DENIED { CREATE } FOR PID=7739 COMM="SYZ.7.506" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_GENERIC_SOCKET PERMISSIVE= DEC 1 21:48:52 SYZKALLER KERN.NOTICE KERNEL: [ 98.161770][ T39] AUDIT: TYPE=1400 AUDIT(1733089731.975:633): AVC: DENIED { READ WRITE } FOR PID=7421 COMM="SYZ-EXECUTOR" NAME="LOOP7" DEV="DEVTMPFS" INO=665 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:FIX DEC 1 21:48:52 SYZKALLER KERN.NOTICE KERNEL: [ 98.168655][ T39] AUDIT: TYPE=1400 AUDIT(1733089731.995:634): AVC: DENIED { MAP_CREATE } FOR PID=7742 COMM="SYZ.7.507" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=BPF PERMISSIVE=0 DEC 1 21:48:52 SYZKALLER KERN.NOTICE KERNEL: [ 98.173600][ T39] AUDIT: TYPE=1400 AUDIT(1733089731.995:635): AVC: DENIED { READ } FOR PID=7742 COMM="SYZ.7.507" NAME="CARD1" DEV="DEVTMPFS" INO=636 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:DRI_DEVICE_T DEC 1 21:48:52 SYZKALLER KERN.INFO KERNEL: [ 98.196494][ T7741] IPVS: USING MAX 39 ESTS PER CHAIN, 93600 PER KTHREAD DEC 1 21:48:52 SYZKALLER KERN.ERR KERNEL: [ 98.386640][ T5950] BLUETOOTH: HCI1: COMMAND TX TIMEOUT DEC 1 21:48:52 SYZKALLER KERN.ERR KERNEL: [ 98.386717][ T5945] BLUETOOTH: HCI5: COMMAND 0X1003 TX TIMEOUT DEC 1 21:48:52 SYZKALLER KERN.ERR KERNEL: [ 98.388452][ T5943] BLUETOOTH: HCI5: OPCODE 0X1003 FAILED: -110 DEC 1 21:48:52 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH10: PROBING FOR AN IPV4LL ADDRESS DEC 1 21:48:52 SYZKALLER DAEMON.ERR DHCPCD[7780]: PS_DROPPRIVS: CHROOT: /: OPERATION NOT PERMITTED DEC 1 21:48:52 SYZKALLER DAEMON.ERR DHCPCD[7780]: FAILED TO DROP PRIVILEGES: OPERATION NOT PERMITTED [ 99.167948][ T7765] syz.0.513 (7765): drop_caches: 2 DEC 1 21:48:53 SYZKALLER KERN.INFO KERNEL: [ 99.167948][ T7765] SYZ.0.513 (7765): DROP_CACHES: 2 DEC 1 21:48:53 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH13: PROBING FOR AN IPV4LL ADDRESS DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[7790]: PS_DROPPRIVS: CHROOT: /: OPERATION NOT PERMITTED DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[7790]: FAILED TO DROP[ 99.273975][ T7786] syz.4.525 (7786): drop_caches: 2 PRIVILEGES: OPERATION NOT PERMITTED DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7668: CONNECTION REFUSED DEC 1 21:48:53 SYZKALLER KERN.INFO KERNEL: [ 99.273975][ T7786] SYZ.4.525 (7786): DROP_CACHES: 2 DEC 1 21:48:53 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH11: PROBING FOR AN IPV4LL ADDRESS DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7614: CONNECTION REFUSED DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[7820]: PS_DROPPRIVS: CHROOT: /: OPERATION NOT PERMITTED DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[7820]: FAILED TO DROP PRIVILEGES: OPERATION NOT PERMITTED [ 99.503646][ T7827] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 DEC 1 21:48:53 SYZKALLER KERN.INFO KERNEL: [ 99.503646][ T7827] IPVS: SYNC THREAD STARTED: STATE = MASTER, MCAST_IFN = VETH1_MACVTAP, SYNCID = 0, ID = 0 DEC 1 21:48:53 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB16: PROBING FOR AN IPV4LL ADDRESS DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[7830]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[7830]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7658: CONNECTION REFUSED [ 99.802984][ T7833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7833 comm=syz.6.545 DEC 1 21:48:53 SYZKALLER KERN.WARN KERNEL: [ 99.802984][ T7833] SELINUX: UN[ 99.817455][ T7833] netlink: 'syz.6.545': attribute type 4 has an invalid length. RECOGNIZED NETLINK MESSAGE: PROTOCOL=0 NLMSG_TYPE=0 SCLASS=NETLINK_ROUTE_SOCKET PID=7833 COMM=SYZ.6.545 DEC 1 21:48:53 SYZKALLER KERN.WARN KERNEL: [ 99.817455][ T7833] NETLINK: 'SYZ.6.545': ATTRIBUTE TYPE 4 HAS AN INVALID LENGTH. DEC 1 21:48:53 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH12: PROBING FOR AN IPV4LL ADDRESS DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[7841]: PS_DROPPRIVS: CHROOT: /: OPERATION NOT PERMITTED DEC 1 21:48:53 SYZKALLER DAEMON.ERR DHCPCD[7841]: FAILED TO DROP PRIVILEGES: OPERATION NOT PERMITTED DEC 1 21:48:54 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:48:54 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7657: CONNECTION REFUSED DEC 1 21:48:54 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB17: PROBING FOR AN IPV4LL ADDRESS DEC 1 21:48:54 SYZKALLER DAEMON.ERR [ 100.592744][ T7878] syzkaller0: entered allmulticast mode DHCPCD[7877]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT DEC 1 21:48:54 SYZKALLER DAEMON.ERR DHCPCD[7877]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:48:54 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB18: PROBING FOR AN IPV4LL ADDRESS DEC 1 21:48:54 SYZKALLER DAEMON.ERR DHCPCD[7879]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT DEC 1 21:48:54 SYZKALLER DAEMON.ERR DHCPCD[7879]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:48:54 SYZKALLER KERN.INFO KERNEL: [ 100.592744][ T7878] SYZKALLER0: ENTERED ALLMULTICAST MODE DEC 1 21:48:54 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB15: PROBING FOR AN IPV4LL ADDRESS DEC 1 21:48:54 SYZKALLER DAEMON.ERR DHCPCD[7886]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT DEC 1 21:48:54 SYZKALLER DAEMON.ERR DHCPCD[7886]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:48:55 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:48:55 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7830: CONNECTION REFUSED [ 101.426481][ T5943] Bluetooth: hci0: command tx timeout DEC 1 21:48:55 SYZKALLER KERN.ERR KERNEL: [ 101.426481][ T5943] BLUETOOTH: HCI0: COMMAND TX TIMEOUT [ 101.471598][ T7934] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 101.473798][ T7934] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.475964][ T7934] vhci_hcd vhci_hcd.0: Device attached DEC 1 21:48:55 SYZKALLER KERN.INFO KERNEL: [ 101.471598][ T7934] VHCI_HCD VHCI_HCD.0: PDEV(6) RHPORT(0) SOCKFD(4) [ 101.495183][ T7935] vhci_hcd: cannot find the pending unlink 5 DEC 1 21:4[ 101.497299][ T7935] vhci_hcd: connection closed [ 101.498545][ T1154] vhci_hcd: stop threads 8[ 101.501068][ T1154] vhci_hcd: release socket [ 101.502571][ T1154] vhci_hcd: disconnect device :55 SYZKALLER KERN.INFO KERNEL: [ 101.473798][ T7934] VHCI_HCD VHCI_HCD.0: DEVID(0) SPEED(3) SPEED_STR(HIGH-SPEED) DEC 1 21:48:55 SYZKALLER KERN.INFO KERNEL: [ 101.475964][ T7934] VHCI_HCD VHCI_HCD.0: DEVICE ATTACHED DEC 1 21:48:55 SYZKALLER KERN.INFO KERNEL: [ 101.495183][ T7935] VHCI_HCD: CANNOT FIND THE PENDING UNLINK 5 DEC 1 21:48:55 SYZKALLER KERN.INFO KERNEL: [ 101.497299][ T7935] VHCI_HCD: CONNECTION CLOSED DEC 1 21:48:55 SYZKALLER KERN.INFO KERNEL: [ 101.498545][ T1154] VHCI_HCD: STOP THREADS DEC 1 21:48:55 SYZKALLER KERN.INFO KERNEL: [ 101.501068][ T1154] VHCI_HCD: RELEASE SOCKET DEC 1 21:48:55 SYZKALLER KERN.INFO KERNEL: [ 101.502571][ T1154] VHCI_HCD: DISCONNECT DEVICE [ 101.728066][ T97] Bluetooth: hci4: Frame reassembly failed (-84) [ 101.729964][ T97] Bluetooth: hci4: Frame reassembly failed (-84) [ 101.732125][ T1154] Bluetooth: hci4: Frame reassembly failed (-84) DEC 1 21:48:55 SYZKALLER KERN.ERR KERNEL: [ 101.728066][ T97] BLUETOOTH: HCI4: FRAME REASSEMBLY FAILED (-84) DEC 1 21:48:55 SYZKALLER KERN.ERR KERNEL: [ 101.729964][ T97] BLUETOOTH: HCI4: FRAME REASSEMBLY FAILED (-84) DEC 1 21:48:55 SYZKALLER KERN.ERR KERNEL: [ 101.732125][ T1154] BLUETOOTH: HCI4: FRAME REASSEMBLY FAILED (-84) DEC 1 21:48:55 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:48:55 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7886: CONNECTION REFUSED DEC 1 21:48:56 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:48:56 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7877: CONNECTION REFUSED DEC 1 21:48:56 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:48:56 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7879: CONNECTION REFUSED [ 102.662702][ T8011] syzkaller0: entered promiscuous mode [ 102.664655][ T8011] syzkaller0: entered allmulticast mode DEC 1 21:48:56 SYZKALLER KERN.INFO KERNEL: [ 102.662702][ T8011] SYZKALLER0: ENTERED PROMISCUOUS MODE DEC 1 21:48:56 SYZKALLER KERN.INFO KERNEL: [ 102.664655][ T8011] SYZKALLER0: ENTERED ALLMULTICAST MODE DEC 1 21:48:56 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSG: INVALID ARGUMENT [ 102.960939][ T5945] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 102.964241][ T5945] Bluetooth: hci0: Injecting HCI hardware error event [ 102.990143][ T5950] Bluetooth: hci0: hardware error 0x00 DEC 1 21:48:56 SYZKALLER KERN.ERR KERNEL: [ 102.960939][ T5945] BLUETOOTH: HCI0: CONTROLLER NOT ACCEPTING COMMANDS ANYMORE: NCMD = 0 DEC 1 21:48:56 SYZKALLER KERN.ERR KERNEL: [ 102.964241][ T5945] BLUETOOTH: HCI0: INJECTING HCI HARDWARE ERROR EVENT DEC 1 21:48:56 SYZKALLER KERN.ERR KERNEL: [ 102.990143][ T5950] BLUETOOTH: HCI0: HARDWARE ERROR 0X00 [ 103.095385][ T39] kauditd_printk_skb: 459 callbacks suppressed [ 103.095396][ T39] audit: type=1400 audit(1733089736.955:1095): avc: denied { map_create } for pid=8012 comm="syz.6.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 DEC 1 21:48:56 SYZKALLER KERN.WARN KERNEL: [ 103.095385][ T39] KAU[ 103.116526][ T39] audit: type=1400 audit(1733089736.965:1096): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 103.122037][ T39] audit: type=1400 audit(1733089736.975:1097): avc: denied { read write } for pid=6343 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 DITD_PRINTK_SKB: 459 CALLBACKS SUPPRESSED [ 103.133876][ T39] audit: type=1400 audit(1733089736.995:1098): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 DEC 1 21:48:56 SYZKAL[ 103.150853][ T39] audit: type=1400 audit(1733089737.015:1099): avc: denied { create } for pid=8014 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 103.158296][ T39] audit: type=1400 audit(1733089737.015:1100): avc: denied { create } for pid=8014 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 LER KERN.NOTICE KERNEL: [ 103.095396][ T39] AUDIT: [ 103.172308][ T39] audit: type=1400 audit(1733089737.015:1101): avc: denied { create } for pid=8014 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 TYPE=1400 AUDIT(1733089736.955:1095): AV[ 103.182768][ T39] audit: type=1400 audit(1733089737.035:1102): avc: denied { prog_load } for pid=8012 comm="syz.6.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 C: [ 103.189837][ T39] audit: type=1400 audit(1733089737.035:1103): avc: denied { write } for pid=8012 comm="syz.6.622" name="fdinfo" dev="proc" ino=24170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 DENIED { MAP_CREATE } FOR PID=8012 COMM="SYZ.6.622" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=BPF PERMISSIVE=0 D[ 103.216189][ T39] audit: type=1400 audit(1733089737.075:1104): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 EC 1 21:48:56 SYZKALLER KERN.NOTICE KERNEL: [ 103.116526][ T39] AUDIT: TYPE=1400 AUDIT(1733089736.965:1096): AVC: DENIED { READ } FOR PID=5334 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= DEC 1 21:48:56 SYZKALLER KERN.NOTICE KERNEL: [ 103.122037][ T39] AUDIT: TYPE=1400 AUDIT(1733089736.975:1097): AVC: DENIED { READ WRITE } FOR PID=6343 COMM="SYZ-EXECUTOR" NAME="LOOP4" DEV="DEVTMPFS" INO=662 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:FI DEC 1 21:48:57 SYZKALLER KERN.NOTICE KERNEL: [ 103.133876][ T39] AUDIT: TYPE=1400 AUDIT(1733089736.995:1098): AVC: DENIED { READ } FOR PID=5334 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= DEC 1 21:48:57 SYZKALLER KERN.NOTICE KERNEL: [ 103.150853][ T39] AUDIT: TYPE=1400 AUDIT(1733089737.015:1099): AVC: DENIED { CREATE } FOR PID=8014 COMM="SYZ.4.623" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_GENERIC_SOCKET PERMISSIVE DEC 1 21:48:57 SYZKALLER KERN.NOTICE KERNEL: [ 103.158296][ T39] AUDIT: TYPE=1400 AUDIT(1733089737.015:1100): AVC: DENIED { CREATE } FOR PID=8014 COMM="SYZ.4.623" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_GENERIC_SOCKET PERMISSIVE DEC 1 21:48:57 SYZKALLER KERN.NOTICE KERNEL: [ 103.172308][ T39] AUDIT: TYPE=1400 AUDIT(1733089737.015:1101): AVC: DENIED { CREATE } FOR PID=8014 COMM="SYZ.4.623" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_GENERIC_SOCKET PERMISSIVE DEC 1 21:48:57 SYZKALLER KERN.NOTICE KERNEL: [ 103.182768][ T39] AUDIT: TYPE=1400 AUDIT(1733089737.035:1102): AVC: DENIED { PROG_LOAD } FOR PID=8012 COMM="SYZ.6.622" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=BPF PERMISSIVE=0 DEC 1 21:48:57 SYZKALLER KERN.NOTICE KERNEL: [ 103.189837][ T39] AUDIT: TYPE=1400 AUDIT(1733089737.035:1103): AVC: DENIED { WRITE } FOR PID=8012 COMM="SYZ.6.622" NAME="FDINFO" DEV="PROC" INO=24170 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS DEC 1 21:48:57 SYZKALLER KERN.NOTICE KERNEL: [ 103.216189][ T39] AUDIT: TYPE=1400 AUDIT(1733089737.075:1104): AVC: DENIED { READ } FOR PID=5334 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= DEC 1 21:48:57 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:48:57 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH10: USING IPV4LL ADDRESS 169.254.231.241 [ 103.751639][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 103.754456][ T5945] Bluetooth: hci4: command 0x1003 tx timeout DEC 1 21:48:57 SYZKALLER KERN.ERR KERNEL: [ 103.751639][ T5943] BLUETOOTH: HCI4: OPCODE 0X1003 FAILED: -110 DEC 1 21:48:57 SYZKALLER KERN.ERR KERNEL: [ 103.754456][ T5945] BLUETOOTH: HCI4: COMMAND 0X1003 TX TIMEOUT DEC 1 21:48:58 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH10: ADDING ROUTE TO[ 104.459278][ T8030] syzkaller0: entered promiscuous mode [ 104.460878][ T8030] syzkaller0: entered allmulticast mode 169.2[ 104.463693][ T1154] syzkaller0: tun_net_xmit 48 54.0.0/16 DEC 1 21:48:58 SYZKALLER KERN.INFO KERNEL: [ 104.459278][ T8030] SYZKALLER0: ENTERED PROMISCUOUS MODE DEC 1 21:48:58 SYZKALLER KERN.INFO KERNEL: [ 104.460878][ T8030] SYZKALLER0: ENTERED ALLMULTICAST MODE DEC 1 21:48:58 SYZKALLER KERN.INFO KERNEL: [ 104.463693][ T1154] SYZKALLER0: TUN_NET_XMIT 48 DEC 1 21:48:58 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:48:58 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7340: CONNECTION REFUSED DEC 1 21:48:58 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH12: USING IPV4LL ADDRESS 169.254.35.172 DEC 1 21:48:58 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:48:58 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSG: INVALID ARGUMENT [ 104.841812][ T8067] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN DEC 1 21:48:58 SYZKALLER KERN.ERR KERNEL: [ 104.841812][ T8067] VHCI_HCD: FAILED ATTACH REQUEST FOR UNSUPPORTED USB SPEED: UNKNOWN [ 105.030209][ T5950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 DEC 1 21:48:58 SYZKALLER KERN.ERR KERNEL: [ 105.030209][ T5950] BLUETOOTH: HCI0: OPCODE 0X0C03 FAILED: -110 [ 105.613194][ T8079] Cannot find add_set index 0 as target DEC 1 21:48:59 SYZKALLER KERN.INFO KERNEL: [ 105.613194][ T8079] CANNOT FIND ADD_SET INDEX 0 AS TARGET [ 105.643170][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 105.646660][ T5950] CPU: 3 UID: 0 PID: 5950 Comm: kworker/u33:5 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 105.650263][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.653960][ T5950] Workqueue: hci3 hci_rx_work [ 105.655358][ T5950] Call Trace: [ 105.656403][ T5950] [ 105.657431][ T5950] dump_stack_lvl+0x16c/0x1f0 [ 105.659074][ T5950] sysfs_warn_dup+0x7f/0xa0 [ 105.660676][ T5950] sysfs_create_dir_ns+0x24d/0x2b0 [ 105.662455][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 105.664422][ T5950] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.666342][ T5950] ? kobject_add_internal+0x12d/0x990 [ 105.668367][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 105.670183][ T5950] kobject_add_internal+0x2c8/0x990 [ 105.672015][ T5950] kobject_add+0x16f/0x240 [ 105.673626][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 105.675440][ T5950] ? class_to_subsys+0x3e/0x160 [ 105.677209][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 105.678621][ T5950] ? kobject_put+0xab/0x5a0 [ 105.680078][ T5950] device_add+0x289/0x1a70 [ 105.681734][ T5950] ? __pfx_dev_set_name+0x10/0x10 [ 105.683597][ T5950] ? __pfx_device_add+0x10/0x10 [ 105.685342][ T5950] ? mgmt_send_event_skb+0x2f2/0x460 [ 105.687234][ T5950] hci_conn_add_sysfs+0x17e/0x230 [ 105.688969][ T5950] le_conn_complete_evt+0x1077/0x1d60 [ 105.690387][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 105.691873][ T5950] ? __mutex_lock+0x1cc/0xa60 [ 105.693093][ T5950] hci_le_conn_complete_evt+0x23c/0x370 [ 105.694530][ T5950] hci_le_meta_evt+0x2e2/0x5d0 [ 105.695926][ T5950] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 105.697516][ T5950] hci_event_packet+0x666/0x1180 [ 105.698936][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 105.700369][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 105.702262][ T5950] ? mark_held_locks+0x9f/0xe0 [ 105.703904][ T5950] ? kcov_remote_start+0x3cf/0x6e0 [ 105.705234][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.706574][ T5950] hci_rx_work+0x2c5/0x16b0 [ 105.707734][ T5950] ? process_one_work+0x921/0x1ba0 [ 105.709072][ T5950] process_one_work+0x9c5/0x1ba0 [ 105.710344][ T5950] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 105.711799][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 105.713179][ T5950] ? rcu_is_watching+0x12/0xc0 [ 105.714401][ T5950] ? assign_work+0x1a0/0x250 [ 105.715573][ T5950] worker_thread+0x6c8/0xf00 [ 105.716763][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 105.718332][ T5950] kthread+0x2c1/0x3a0 [ 105.719408][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.720735][ T5950] ? __pfx_kthread+0x10/0x10 [ 105.721947][ T5950] ret_from_fork+0x45/0x80 [ 105.723081][ T5950] ? __pfx_kthread+0x10/0x10 [ 105.724263][ T5950] ret_from_fork_asm+0x1a/0x30 [ 105.725640][ T5950] [ 105.727411][ T5950] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 105.740601][ T5950] Bluetooth: hci3: failed to register connection device DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.643170][ T5950] SYSFS: CANNOT CREATE DUPLICATE FILENAME '/DEVICES/VIRTUAL/BLUETOOTH/HCI3/HCI3:201' DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.646660][ T5950] CPU: 3 UID: 0 PID: 5950 COMM: KWORKER/U33:5 NOT TAINTED 6.12.0-SYZKALLER-12128-GF788B5EF1CA9 #0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.650263][ T5950] HARDWARE NAME: QEMU STANDARD PC (Q35 + ICH9, 2009), BIOS 1.16.3-DEBIAN-1.16.3-2~BPO12+1 04/01/2014 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.653960][ T5950] WORKQUEUE: HCI3 HCI_RX_WORK DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.655358][ T5950] CALL TRACE: DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.656403][ T5950] DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.657431][ T5950] DUMP_STACK_LVL+0X16C/0X1F0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.659074][ T5950] SYSFS_WARN_DUP+0X7F/0XA0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.660676][ T5950] SYSFS_CREATE_DIR_NS+0X24D/0X2B0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.662455][ T5950] ? __PFX_SYSFS_CREATE_DIR_NS+0X10/0X10 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.664422][ T5950] ? __PFX_DO_RAW_SPIN_LOCK+0X10/0X10 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.666342][ T5950] ? KOBJECT_ADD_INTERNAL+0X12D/0X990 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.668367][ T5950] ? DO_RAW_SPIN_UNLOCK+0X172/0X230 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.670183][ T5950] KOBJECT_ADD_INTERNAL+0X2C8/0X990 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.672015][ T5950] KOBJECT_ADD+0X16F/0X240 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.673626][ T5950] ? __PFX_KOBJECT_ADD+0X10/0X10 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.675440][ T5950] ? CLASS_TO_SUBSYS+0X3E/0X160 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.677209][ T5950] ? DO_RAW_SPIN_UNLOCK+0X172/0X230 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.678621][ T5950] ? KOBJECT_PUT+0XAB/0X5A0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.680078][ T5950] DEVICE_ADD+0X289/0X1A70 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.681734][ T5950] ? __PFX_DEV_SET_NAME+0X10/0X10 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.683597][ T5950] ? __PFX_DEVICE_ADD+0X10/0X10 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.685342][ T5950] ? MGMT_SEND_EVENT_SKB+0X2F2/0X460 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.687234][ T5950] HCI_CONN_ADD_SYSFS+0X17E/0X230 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.688969][ T5950] LE_CONN_COMPLETE_EVT+0X1077/0X1D60 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.690387][ T5950] ? __PFX_LE_CONN_COMPLETE_EVT+0X10/0X10 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.691873][ T5950] ? __MUTEX_LOCK+0X1CC/0XA60 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.693093][ T5950] HCI_LE_CONN_COMPLETE_EVT+0X23C/0X370 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.694530][ T5950] HCI_LE_META_EVT+0X2E2/0X5D0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.695926][ T5950] ? __PFX_HCI_LE_CONN_COMPLETE_EVT+0X10/0X10 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.697516][ T5950] HCI_EVENT_PACKET+0X666/0X1180 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.698936][ T5950] ? __PFX_HCI_LE_META_EVT+0X10/0X10 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.700369][ T5950] ? __PFX_HCI_EVENT_PACKET+0X10/0X10 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.702262][ T5950] ? MARK_HELD_LOCKS+0X9F/0XE0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.703904][ T5950] ? KCOV_REMOTE_START+0X3CF/0X6E0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.705234][ T5950] ? LOCKDEP_HARDIRQS_ON+0X7C/0X110 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.706574][ T5950] HCI_RX_WORK+0X2C5/0X16B0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.707734][ T5950] ? PROCESS_ONE_WORK+0X921/0X1BA0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.709072][ T5950] PROCESS_ONE_WORK+0X9C5/0X1BA0 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.710344][ T5950] ? __PFX_LOCK_ACQUIRE.PART.0+0X10/0X10 DEC 1 21:48:59 SYZKALLER KERN.WARN KERNEL: [ 105.711799][ T5950] ? __PFX_PROCESS_ONE_WORK+0X10/0X10 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.713179][ T5950] ? RCU_IS_WATCHING+0X12/0XC0 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.714401][ T5950] ? ASSIGN_WORK+0X1A0/0X250 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.715573][ T5950] WORKER_THREAD+0X6C8/0XF00 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.716763][ T5950] ? __PFX_WORKER_THREAD+0X10/0X10 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.718332][ T5950] KTHREAD+0X2C1/0X3A0 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.719408][ T5950] ? _RAW_SPIN_UNLOCK_IRQ+0X23/0X50 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.720735][ T5950] ? __PFX_KTHREAD+0X10/0X10 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.721947][ T5950] RET_FROM_FORK+0X45/0X80 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.723081][ T5950] ? __PFX_KTHREAD+0X10/0X10 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.724263][ T5950] RET_FROM_FORK_ASM+0X1A/0X30 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 105.725640][ T5950] DEC 1 21:49:00 SYZKALLER KERN.ERR KERNEL: [ 105.727411][ T5950] KOBJECT: KOBJECT_ADD_INTERNAL FAILED FOR HCI3:201 WITH -EEXIST, DON'T TRY TO REGISTER THINGS WITH THE SAME NAME IN THE SAME DIRECTORY. DEC 1 21:49:00 SYZKALLER KERN.ERR KERNEL: [ 105.740601][ T5950] BLUETOOTH: HCI3: FAILED TO REGISTER CONNECTION DEVICE [ 106.464176][ T8061] netlink: 'syz.0.636': attribute type 10 has an invalid length. DEC 1 21:49:00 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH12: ADDING ROUTE TO 169.254.0.0/16 DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 106.464176][ T8061] NETLINK: 'SYZ.0.636': ATTRIBUTE TYPE 10 HAS AN INVALID LENGTH. [ 106.634591][ T8113] syzkaller0: entered promiscuous mode [ 106.636074][ T8113] syzkaller0: entered allmulticast mode DEC 1 21:49:00 SYZKALLER KERN.INFO KERNEL: [ 106.634591][ T8113] SYZKALLER0: ENTERED PROMISCUOUS MODE DEC 1 21:49:00 SYZKALLER KERN.INFO KERNEL: [ 106.636074][ T8113] SYZKALLER0: ENTERED ALLMULTICAST MODE DEC 1 21:49:00 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH13: USING IPV4LL ADDRESS 169.254.135.96 DEC 1 21:49:00 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH13: ADDING ROUTE TO 169.254.0.0/16 DEC 1 21:49:00 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB16: USING IPV4LL ADDRESS 169.254.132.115 DEC 1 21:49:00 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:49:00 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7355: CONNECTION REFUSED [ 106.980544][ T5950] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 106.981083][ T1154] Bluetooth: hci4: Frame reassembly failed (-84) DEC 1 21:49:00 SYZKALLER KERN.WARN KERNEL: [ 106.980544][ T5950] BLUETOOTH: HCI4: RECEIVED UNEXPECTED HCI EVENT 0X00 DEC 1 21:49:00 SYZKALLER KERN.ERR KERNEL: [ 106.981083][ T1154] BLUETOOTH: HCI4: FRAME REASSEMBLY FAILED (-84) [ 107.128851][ T8154] capability: warning: `syz.6.670' uses 32-bit capabilities (legacy support in use) DEC 1 21:49:01 SYZKALLER KERN.INFO KERNEL: [ 107.128851][ T8154] CAPABILITY: WARNING: `SYZ.6.670' USES 32-BIT CAPABILITIES (LEGACY SUPPORT IN USE) DEC 1 21:49:01 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB16: ADD[ 108.066980][ T8142] bridge0: entered allmulticast mode ING ROUTE TO 169.254.0.[ 108.071998][ T8147] bridge0: entered promiscuous mode 0/16 DEC 1 21:49:01 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:49:01 SYZKALLER KERN.INFO KERNEL: [ 108.066980][ T8142] BRIDGE0: ENTERED ALLMULTICAST MODE [ 108.105591][ T39] kauditd_printk_skb: 594 callbacks suppressed [ 108.105603][ T39] audit: type=1400 audit(1733089741.965:1636): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 DEC 1 21:49:01 SYZKALLER KERN.INFO KERNEL: [ 108.071998][ T8147] BRIDGE0: ENTERED PROMISCUOUS MODE [ 108.129815][ T39] audit: type=1400 audit(1733089741.995:1637): avc: denied { search } for pid=8158 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 D[ 108.135457][ T39] audit: type=1400 audit(1733089741.995:1638): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 EC 1 21:49:01 SYZKALLER KERN.WARN KERNEL: [ 108.105591][ T39] KAUDITD_PRINTK_SKB: 594 CALLBACKS SUPPRESSED DEC 1 21:4[ 108.162248][ T39] audit: type=1400 audit(1733089742.025:1639): avc: denied { read write } for pid=6343 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 108.166388][ T8159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.168704][ T39] audit: type=1400 audit(1733089742.025:1640): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 108.170708][ T8159] audit: audit_lost=22 audit_rate_limit=0 audit_backlog_limit=64 9[ 108.170726][ T8159] audit: backlog limit exceeded [ 108.170988][ T8159] audit: audit_backlog=65 > audit_backlog_limit=64 :[ 108.178588][ T39] audit: type=1400 audit(1733089742.025:1641): avc: denied { search } for pid=8159 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 01 SYZKALLER KERN.NOTICE KERNEL: [ 108.105603][ T39] AUDIT: TYPE=1400 AUDIT(1733089741.965:1636): AVC: DENIED { READ } FOR PID=5334 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= DEC 1 21:49:02 SYZKALLER KERN.NOTICE KERNEL: [ 108.129815][ T39] AUDIT: TYPE=1400 AUDIT(1733089741.995:1637): AVC: DENIED { SEARCH } FOR PID=8158 COMM="DHCPCD-RUN-HOOK" NAME="/" DEV="TMPFS" INO=1 SCONTEXT=SYSTEM_U:SYSTEM_R:DHCPC_T TCONTEXT=SYSTEM_U:OBJECT_R:TMPFS_T T DEC 1 21:49:02 SYZKALLER KERN.NOTICE KERNEL: [ 108.135457][ T39] AUDIT: TYPE=1400 AUDIT(1733089741.995:1638): AVC: DENIED { READ } FOR PID=5334 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= DEC 1 21:49:02 SYZKALLER KERN.NOTICE KERNEL: [ 108.162248][ T39] AUDIT: TYPE=1400 AUDIT(1733089742.025:1639): AVC: DENIED { READ WRITE } FOR PID=6343 COMM="SYZ-EXECUTOR" NAME="LOOP4" DEV="DEVTMPFS" INO=662 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:FI DEC 1 21:49:02 SYZKALLER KERN.WARN KERNEL: [ 108.166388][ T8159] AUDIT: AUDIT_BACKLOG=65 > AUDIT_BACKLOG_LIMIT=64 DEC 1 21:49:02 SYZKALLER KERN.NOTICE KERNEL: [ 108.168704][ T39] AUDIT: TYPE=1400 AUDIT(1733089742.025:1640): AVC: DENIED { READ } FOR PID=5334 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= DEC 1 21:49:02 SYZKALLER KERN.WARN KERNEL: [ 108.170708][ T8159] AUDIT: AUDIT_LOST=22 AUDIT_RATE_LIMIT=0 AUDIT_BACKLOG_LIMIT=64 DEC 1 21:49:02 SYZKALLER KERN.ERR KERNEL: [ 108.170726][ T8159] AUDIT: BACKLOG LIMIT EXCEEDED DEC 1 21:49:02 SYZKALLER KERN.WARN KERNEL: [ 108.170988][ T8159] AUDIT: AUDIT_BACKLOG=65 > AUDIT_BACKLOG_LIMIT=64 DEC 1 21:49:02 SYZKALLER KERN.NOTICE KERNEL: [ 108.178588][ T39] AUDIT: TYPE=1400 AUDIT(1733089742.025:1641): AVC: DENIED { SEARCH } FOR PID=8159 COMM="DHCPCD-RUN-HOOK" NAME="/" DEV="TMPFS" INO=1 SCONTEXT=SYSTEM_U:SYSTEM_R:DHCPC_T TCONTEXT=SYSTEM_U:OBJECT_R:TMPFS_T T DEC 1 21:49:02 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH11: USING IPV4LL ADDRESS 169.254.185.187 DEC 1 21:49:02 SYZKALLER DAEMON.INFO DHCPCD[5652]: ETH11: ADDING ROUTE TO 169.254.0.0/16 DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7376: CONNECTION REFUSED DEC 1 21:49:02 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB15: USING IPV4LL ADDRESS 169.254.132.115 DEC 1 21:49:02 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB15: ADDING ROUTE TO 169.254.0.0/16 DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_SENDPSMMSG: CONNECTION REFUSED DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 7393: CONNECTION REFUSED DEC 1 21:49:02 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB18: USING IPV4LL ADDRESS 169.254.132.115 DEC 1 21:49:02 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB18: ADDING ROUTE TO 169.254.0.0/16 DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:49:02 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB17: USING IPV4LL ADDRESS 169.254.132.115 DEC 1 21:49:02 SYZKALLER DAEMON.INFO DHCPCD[5652]: LAPB17: ADDING ROUTE TO 169.254.0.0/16 DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:49:02 SYZKALLER DAEMON.WARN DHCPCD[5652]: ETH10: NO IPV6 ROUTERS AVAILABLE DEC 1 21:49:02 SYZKALLER DAEMON.WARN DHCPCD[5652]: ETH11: NO IPV6 ROUTERS AVAILABLE DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[8193]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[8193]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[8195]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[8195]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[8196]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARG[ 109.026516][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 109.026538][ T5950] Bluetooth: hci4: command 0x1003 tx timeout UMENT DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[8196]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[8194]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT DEC 1 21:49:02 SYZKALLER DAEMON.ERR DHCPCD[8194]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:49:02 SYZKALLER KERN.ERR KERNEL: [ 109.026516][ T5945] BLUETOOTH: HCI4: OPCODE 0X1003 FAILED: -110 DEC 1 21:49:02 SYZKALLER KERN.ERR KERNEL: [ 109.026538][ T5950] BLUETOOTH: HCI4: COMMAND 0X1003 TX TIMEOUT DEC 1 21:49:04 SYZKALLER DAEMON.ERR DHCPCD[5652]: PS_ROOT_RECVMSG: INVALID ARGUMENT DEC 1 21:49:06 SYZKALLER DAEMON.WARN DHCPCD[5652]: ETH12: NO IPV6 ROUTERS AVAILABLE DEC 1 21:49:06 SYZKALLER DAEMON.WARN DHCPCD[5652]: ETH13: NO IPV6 ROUTERS AVAILABLE VM DIAGNOSIS: 21:49:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000012eaff RBX=0000000000000000 RCX=ffffffff8b29c869 RDX=0000000000000000 RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b460 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29dc4f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000029d7a000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8c3beae0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1ba9f48bd ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1ba9f48ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1ba9f48c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1ba9f48d8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1ba9f495e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1ba9f4a3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000005 RBX=ffffffff96e11c88 RCX=ffffffff8175e31c RDX=0000000000000e2e RSI=000000000000007d RDI=0000000000000000 RBP=ffffffff9424aa00 RSP=ffffc90004527990 R8 =ffffffff937de17a R9 =000000000000e401 R10=ffffffff96e13adf R11=0000000000000001 R12=ffffffff96c34ec8 R13=000000000000e3fc R14=000000000000e3fd R15=dffffc0000000000 RIP=ffffffff8175e17d RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555592d67500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa0c11d4fb8 CR3=0000000048330000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec35a3630 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2133f48bd ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2133f48ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2133f48c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2133f48d8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2133f495e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2133f4a3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000cab57 RBX=0000000000000002 RCX=ffffffff8b29c869 RDX=0000000000000000 RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b460 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29dc4f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c398e5d CR3=000000004b92c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce85f48bd ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce85f48ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce85f48c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce85f48d8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce85f495e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce85f4a3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce8710488 00007f1ce8710480 00007f1ce8710478 00007f1ce8710450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce927d100 00007f1ce8710440 00007f1ce8710004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce8710498 00007f1ce8710490 00007f1ce8710488 00007f1ce8710480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000bde05 RBX=0000000000000003 RCX=ffffffff8b29c869 RDX=0000000000000000 RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b460 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29dc4f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe1b16c020 CR3=00000000296d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000200000 Opmask01=0000000000000200 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff70145ea0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a6a5f6d3a745f6d 653a735f6d3d7473 65733d6f6365000a 2e64676f6c636572 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000