last executing test programs: 2.672896974s ago: executing program 1 (id=925): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.620898941s ago: executing program 1 (id=927): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r2, 0x0, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20f42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_pid(r0, &(0x7f00000005c0), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) chdir(0x0) io_getevents(0x0, 0x1, 0x0, &(0x7f0000000340), 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x58) open$dir(0x0, 0x3f, 0xc0) write$cgroup_pid(r0, &(0x7f0000000340), 0x12) 1.590524372s ago: executing program 1 (id=932): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.428619811s ago: executing program 1 (id=933): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0), 0xb315) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x300, 0x80000001}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00'], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write$6lowpan_control(r3, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000700000000000a"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e0001000000000000000000fdff"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000240)='system_u:object_r:ssh_agent_exec_t:s0\x00', 0x26, 0x1) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1c0000005e007f0200000000649b72ab6e01ac78ae3425215493e11c", 0x1c}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000a00)=0x27, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) splice(r3, 0x0, r8, 0x0, 0x4ffe6, 0x0) 1.160586152s ago: executing program 0 (id=937): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={0x0}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0xd, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0xfffffff8, 0x558e0d34, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x5, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400800, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x403, 0xffff58b9, 0x4c2336d3, 0x80004, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00002, 0x80005, 0xb, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0xaa5, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x994, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x4, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x80000001, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdaf, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xf) setresuid(0x0, 0xee00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) 1.160271453s ago: executing program 0 (id=938): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x2000c045}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x8000, 0x5, 0x7, 0x1, 0x1, 0x3, 0xbf, 0x6, 0x3, 0xf, 0x5, 0x6}, {0x3, 0x5, 0x1, 0x5, 0x7, 0x2, 0xff, 0x5, 0x9, 0x4, 0x4b, 0x7f, 0x2}, {0x4, 0x6, 0x38, 0x6, 0x84, 0x7, 0x0, 0x50, 0x2, 0x70, 0x3, 0xa, 0x400000000006}], 0xffffffff}) 930.389755ms ago: executing program 0 (id=939): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x2}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xf}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="840100000000000028001280090001007665746800000000180002801400010000000000"], 0x318}}, 0x20040800) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback, 0x800000}, 0x1c) shutdown(r4, 0x2) 859.167912ms ago: executing program 0 (id=940): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='\t\x00\x00\x00\f'], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 802.635288ms ago: executing program 0 (id=942): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setscheduler(0x0, 0x1, 0x0) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20044818) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 741.414794ms ago: executing program 3 (id=944): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0xe}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 660.40222ms ago: executing program 2 (id=945): socket(0x15, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) eventfd2(0x3, 0x1) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES32=r4], 0x44}}, 0x0) 580.222252ms ago: executing program 3 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 579.998352ms ago: executing program 1 (id=947): ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x64, 0x4, 0x368, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) sendmmsg$inet(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40884) 573.55741ms ago: executing program 1 (id=948): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000001240)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') userfaultfd(0x801) syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x2a8600) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000380), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x201, 0x1, &(0x7f0000000540)=[r1], &(0x7f0000000500)=[0x1], &(0x7f0000000200), &(0x7f0000000580), 0x0, 0x7f}) 509.723473ms ago: executing program 2 (id=949): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000000000)='./file1\x00', 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r4, 0xa75c, 0xe, 0x5}, 0x10) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0xfff, 0xbee, 0x10, 0x101}) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) socket$unix(0x1, 0x2, 0x0) 508.682091ms ago: executing program 3 (id=950): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 409.813878ms ago: executing program 2 (id=951): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000000)='./file0\x00', r4, 0x0, 0x2) 409.646428ms ago: executing program 3 (id=952): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x2}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xf}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="840100000000000028001280090001007665746800000000180002801400010000000000"], 0x318}}, 0x20040800) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback, 0x800000}, 0x1c) shutdown(r4, 0x2) 363.422428ms ago: executing program 2 (id=953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x2f) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xa89) 325.353169ms ago: executing program 3 (id=954): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0xe}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 259.865419ms ago: executing program 2 (id=955): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x4800}}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x24040800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x67ac87061aeae0ba, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) write$nbd(r3, &(0x7f0000000440)=ANY=[], 0xd6) 259.350317ms ago: executing program 3 (id=956): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 5.033793ms ago: executing program 0 (id=957): socket(0x15, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) eventfd2(0x3, 0x1) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES32=r4], 0x44}}, 0x0) 0s ago: executing program 2 (id=958): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): [ 38.150412][ T40] audit: type=1400 audit(1743401894.871:81): avc: denied { rlimitinh } for pid=5889 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.155994][ T40] audit: type=1400 audit(1743401894.881:82): avc: denied { siginh } for pid=5889 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.392587][ T40] audit: type=1400 audit(1743401896.131:83): avc: denied { read } for pid=5335 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.401014][ T40] audit: type=1400 audit(1743401896.141:84): avc: denied { append } for pid=5335 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.407324][ T40] audit: type=1400 audit(1743401896.141:85): avc: denied { open } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.417451][ T40] audit: type=1400 audit(1743401896.141:86): avc: denied { getattr } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:31248' (ED25519) to the list of known hosts. [ 40.122666][ T40] audit: type=1400 audit(1743401896.861:87): avc: denied { name_bind } for pid=5925 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.014294][ T5928] cgroup: Unknown subsys name 'net' [ 42.219080][ T5928] cgroup: Unknown subsys name 'cpuset' [ 42.223843][ T5928] cgroup: Unknown subsys name 'rlimit' [ 42.440351][ T5937] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.154020][ T5928] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.950699][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 45.950713][ T40] audit: type=1400 audit(1743401902.691:105): avc: denied { execmem } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.121130][ T40] audit: type=1400 audit(1743401902.861:106): avc: denied { create } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.128546][ T40] audit: type=1400 audit(1743401902.861:107): avc: denied { read write } for pid=5943 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.135045][ T40] audit: type=1400 audit(1743401902.861:108): avc: denied { open } for pid=5943 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.141562][ T40] audit: type=1400 audit(1743401902.871:109): avc: denied { ioctl } for pid=5944 comm="syz-executor" path="socket:[7403]" dev="sockfs" ino=7403 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.160257][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.167905][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.170014][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.172656][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.175019][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.177025][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.179413][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.181597][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.182070][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.184530][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.187280][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.188840][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.194020][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.197150][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.199306][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.203515][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.204560][ T40] audit: type=1400 audit(1743401902.941:110): avc: denied { read } for pid=5951 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.213190][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.214224][ T40] audit: type=1400 audit(1743401902.941:111): avc: denied { open } for pid=5951 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.214294][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.215745][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.215963][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.223285][ T40] audit: type=1400 audit(1743401902.941:112): avc: denied { mounton } for pid=5951 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.416224][ T40] audit: type=1400 audit(1743401903.151:113): avc: denied { module_request } for pid=5955 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.464124][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 46.541207][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 46.568505][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 46.648619][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 46.668535][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.670593][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.672869][ T5955] bridge_slave_0: entered allmulticast mode [ 46.675286][ T5955] bridge_slave_0: entered promiscuous mode [ 46.682490][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.684597][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.687142][ T5955] bridge_slave_1: entered allmulticast mode [ 46.689364][ T5955] bridge_slave_1: entered promiscuous mode [ 46.761252][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.765211][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.780058][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.782104][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.784123][ T5944] bridge_slave_0: entered allmulticast mode [ 46.786747][ T5944] bridge_slave_0: entered promiscuous mode [ 46.827128][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.829147][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.831259][ T5944] bridge_slave_1: entered allmulticast mode [ 46.833434][ T5944] bridge_slave_1: entered promiscuous mode [ 46.849226][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.851282][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.853263][ T5943] bridge_slave_0: entered allmulticast mode [ 46.855503][ T5943] bridge_slave_0: entered promiscuous mode [ 46.873394][ T5955] team0: Port device team_slave_0 added [ 46.886038][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.889220][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.891378][ T5943] bridge_slave_1: entered allmulticast mode [ 46.893546][ T5943] bridge_slave_1: entered promiscuous mode [ 46.920141][ T5955] team0: Port device team_slave_1 added [ 46.934584][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.981406][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.985317][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.988443][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.991253][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.994050][ T5951] bridge_slave_0: entered allmulticast mode [ 46.998081][ T5951] bridge_slave_0: entered promiscuous mode [ 47.016275][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.019363][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.026434][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.042488][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.046067][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.048223][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.050260][ T5951] bridge_slave_1: entered allmulticast mode [ 47.052522][ T5951] bridge_slave_1: entered promiscuous mode [ 47.055562][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.058184][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.065466][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.123409][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.128087][ T5944] team0: Port device team_slave_0 added [ 47.144544][ T5943] team0: Port device team_slave_0 added [ 47.147772][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.151369][ T5944] team0: Port device team_slave_1 added [ 47.166915][ T5943] team0: Port device team_slave_1 added [ 47.249767][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.251885][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.260200][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.280677][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.283248][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.290985][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.296825][ T5955] hsr_slave_0: entered promiscuous mode [ 47.299740][ T5955] hsr_slave_1: entered promiscuous mode [ 47.309383][ T5951] team0: Port device team_slave_0 added [ 47.315070][ T5951] team0: Port device team_slave_1 added [ 47.318183][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.319973][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.326611][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.329989][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.332125][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.340043][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.393548][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.395427][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.403206][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.452678][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.455232][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.464224][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.509790][ T5943] hsr_slave_0: entered promiscuous mode [ 47.511956][ T5943] hsr_slave_1: entered promiscuous mode [ 47.513817][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.516059][ T5943] Cannot create hsr debugfs directory [ 47.534767][ T5944] hsr_slave_0: entered promiscuous mode [ 47.537505][ T5944] hsr_slave_1: entered promiscuous mode [ 47.539320][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.541463][ T5944] Cannot create hsr debugfs directory [ 47.654406][ T5951] hsr_slave_0: entered promiscuous mode [ 47.657221][ T5951] hsr_slave_1: entered promiscuous mode [ 47.659775][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.662501][ T5951] Cannot create hsr debugfs directory [ 47.837252][ T5955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.850418][ T5955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.858269][ T5955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.881763][ T5955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.908031][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.917748][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.921633][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.925380][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.964306][ T5944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.969825][ T5944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.973720][ T5944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.978150][ T5944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.035588][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.039915][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.044154][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.054647][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.082649][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.110566][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.125845][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.130138][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.132356][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.151766][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.160493][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.163364][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.174700][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.187388][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.190141][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.209316][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.211373][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.216796][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.217211][ T5952] Bluetooth: hci3: command tx timeout [ 48.217219][ T5304] Bluetooth: hci2: command tx timeout [ 48.224299][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.226323][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.257297][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.259242][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.271567][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.300729][ T5952] Bluetooth: hci1: command tx timeout [ 48.300763][ T5304] Bluetooth: hci0: command tx timeout [ 48.313537][ T40] audit: type=1400 audit(1743401905.051:114): avc: denied { sys_module } for pid=5955 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.322843][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.333197][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.343731][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.345742][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.354375][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.356471][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.419708][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.432567][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.469437][ T5955] veth0_vlan: entered promiscuous mode [ 48.475034][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.494094][ T5955] veth1_vlan: entered promiscuous mode [ 48.499075][ T5943] veth0_vlan: entered promiscuous mode [ 48.513111][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.518938][ T5943] veth1_vlan: entered promiscuous mode [ 48.525106][ T5944] veth0_vlan: entered promiscuous mode [ 48.536315][ T5955] veth0_macvtap: entered promiscuous mode [ 48.539672][ T5944] veth1_vlan: entered promiscuous mode [ 48.546664][ T5955] veth1_macvtap: entered promiscuous mode [ 48.566161][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.569265][ T5951] veth0_vlan: entered promiscuous mode [ 48.574795][ T5943] veth0_macvtap: entered promiscuous mode [ 48.580457][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.583617][ T5943] veth1_macvtap: entered promiscuous mode [ 48.588589][ T5951] veth1_vlan: entered promiscuous mode [ 48.593615][ T5955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.596102][ T5955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.599432][ T5955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.602231][ T5955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.621465][ T5944] veth0_macvtap: entered promiscuous mode [ 48.627050][ T5944] veth1_macvtap: entered promiscuous mode [ 48.633652][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.637213][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.640950][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.655435][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.659411][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.663079][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.680793][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.684417][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.687501][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.690479][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.694291][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.697168][ T5951] veth0_macvtap: entered promiscuous mode [ 48.700222][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.702929][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.705515][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.708083][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.715114][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.718466][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.720130][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.724503][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.728533][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.731646][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.735496][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.741557][ T5944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.743986][ T5944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.746795][ T5944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.750085][ T5944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.755503][ T5951] veth1_macvtap: entered promiscuous mode [ 48.786916][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.786999][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.789510][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.792381][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.792389][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.801011][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.803715][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.807679][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.812238][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.835154][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.839738][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.843207][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.846092][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.849626][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.852579][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.856094][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.872821][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.876206][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.879657][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.882821][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.891354][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.893559][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.895129][ T5955] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.896494][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.904089][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.940802][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.941638][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.943240][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.945373][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.964138][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.971374][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.000576][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.003492][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.133167][ T6018] process 'syz.3.5' launched './file0' with NULL argv: empty string added [ 49.151156][ T6021] sd 0:0:0:0: PR command failed: 1026 [ 49.153306][ T6021] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 49.155506][ T6021] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 49.203848][ T6025] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.207485][ T6025] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 49.283446][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.293817][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.296877][ T5988] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.394039][ T6033] ======================================================= [ 49.394039][ T6033] WARNING: The mand mount option has been deprecated and [ 49.394039][ T6033] and is ignored by this kernel. Remove the mand [ 49.394039][ T6033] option from the mount to silence this warning. [ 49.394039][ T6033] ======================================================= [ 49.446623][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 49.450204][ T5988] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 49.452351][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 49.455960][ T5988] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.459882][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 49.463630][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 49.469734][ T5988] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 49.472484][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 49.476421][ T5988] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.479733][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 49.482697][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 49.487478][ T5988] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 49.490284][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 49.494310][ T5988] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.499250][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 49.503347][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 49.511941][ T5988] usb 5-1: string descriptor 0 read error: -22 [ 49.514394][ T5988] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 49.517814][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.534670][ T5988] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 49.790693][ T5988] usb 5-1: USB disconnect, device number 2 [ 49.902358][ T6043] block device autoloading is deprecated and will be removed. [ 49.953543][ T6045] md: md2 stopped. [ 50.022536][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 50.296608][ T5304] Bluetooth: hci3: command tx timeout [ 50.296730][ T5952] Bluetooth: hci2: command tx timeout [ 50.314398][ T6070] kvm: pic: non byte read [ 50.318085][ T6070] kvm: pic: non byte read [ 50.320813][ T6070] kvm: pic: level sensitive irq not supported [ 50.321040][ T6070] kvm: pic: non byte read [ 50.325122][ T6070] kvm: pic: non byte read [ 50.329813][ T6070] kvm: pic: level sensitive irq not supported [ 50.330151][ T6070] kvm: pic: non byte read [ 50.335009][ T6070] kvm: pic: level sensitive irq not supported [ 50.335272][ T6070] kvm: pic: non byte read [ 50.340492][ T6070] kvm: pic: level sensitive irq not supported [ 50.340711][ T6070] kvm: pic: non byte read [ 50.344607][ T6070] kvm: pic: level sensitive irq not supported [ 50.344841][ T6070] kvm: pic: non byte read [ 50.350845][ T6070] kvm: pic: level sensitive irq not supported [ 50.351109][ T6070] kvm: pic: non byte read [ 50.377041][ T5952] Bluetooth: hci0: command tx timeout [ 50.508176][ T6087] mmap: syz.3.31 (6087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.262441][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 51.262452][ T40] audit: type=1400 audit(1743401908.001:195): avc: denied { create } for pid=6098 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.269984][ T40] audit: type=1400 audit(1743401908.001:196): avc: denied { connect } for pid=6098 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.324058][ T40] audit: type=1400 audit(1743401908.061:197): avc: denied { mount } for pid=6101 comm="syz.1.37" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.327203][ T6102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 51.359567][ T40] audit: type=1400 audit(1743401908.101:198): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.383161][ T40] audit: type=1400 audit(1743401908.121:199): avc: denied { create } for pid=6103 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.390724][ T40] audit: type=1400 audit(1743401908.121:200): avc: denied { connect } for pid=6103 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.396021][ T40] audit: type=1400 audit(1743401908.121:201): avc: denied { ioctl } for pid=6103 comm="syz.1.38" path="socket:[11396]" dev="sockfs" ino=11396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.404969][ T40] audit: type=1400 audit(1743401908.121:202): avc: denied { write } for pid=6103 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.415139][ T40] audit: type=1400 audit(1743401908.151:203): avc: denied { create } for pid=6105 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.420545][ T6106] tipc: Started in network mode [ 51.420557][ T6106] tipc: Node identity 4, cluster identity 4711 [ 51.420563][ T6106] tipc: Node number set to 4 [ 51.442485][ T40] audit: type=1400 audit(1743401908.151:204): avc: denied { setopt } for pid=6105 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.709509][ T6118] overlayfs: statfs failed on './file0' getty: ttyS0: read error: Resource temporarily unavailable [ 52.137706][ T6138] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 52.378245][ T5952] Bluetooth: hci3: command tx timeout [ 52.378277][ T5304] Bluetooth: hci2: command tx timeout [ 52.572081][ T6167] 9pnet_virtio: no channels available for device syz [ 52.576833][ T6167] »»»»»»aaaaaaaaa: renamed from lo (while UP) [ 52.806687][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 53.775701][ T6202] [ 53.819629][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041349800: rx timeout, send abort [ 53.823349][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888041349800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 54.227061][ T6220] usb 1-1: USB disconnect, device number 2 [ 54.299150][ T5304] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 54.301711][ T5304] Bluetooth: hci1: Injecting HCI hardware error event [ 54.304439][ T5952] Bluetooth: hci1: hardware error 0x00 [ 54.456825][ T5304] Bluetooth: hci3: command tx timeout [ 54.456901][ T65] Bluetooth: hci2: command tx timeout [ 55.136335][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 55.284824][ T6240] evm: overlay not supported [ 55.503847][ T65] Bluetooth: hci3: Malformed LE Event: 0x0b [ 56.059090][ T65] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 56.064740][ T65] Bluetooth: hci0: Injecting HCI hardware error event [ 56.067309][ T65] Bluetooth: hci0: hardware error 0x00 [ 56.287236][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 56.287251][ T40] audit: type=1400 audit(1743401913.031:267): avc: denied { read write } for pid=6276 comm="syz.2.110" name="vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.296854][ T40] audit: type=1400 audit(1743401913.031:268): avc: denied { open } for pid=6276 comm="syz.2.110" path="/dev/vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.376544][ T5952] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 56.432816][ T40] audit: type=1400 audit(1743401913.171:269): avc: denied { read } for pid=6279 comm="syz.2.111" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.526179][ T6284] 9pnet: Unknown protocol version 9 [ 56.545221][ T40] audit: type=1400 audit(1743401913.281:270): avc: denied { link } for pid=6283 comm="syz.2.113" name="file1" dev="9p" ino=36831330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.554474][ T40] audit: type=1400 audit(1743401913.291:271): avc: denied { setopt } for pid=6283 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.561990][ T40] audit: type=1400 audit(1743401913.291:272): avc: denied { create } for pid=6283 comm="syz.2.113" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 56.570114][ T40] audit: type=1400 audit(1743401913.291:273): avc: denied { write } for pid=6283 comm="syz.2.113" name=E91F7189591E9233614B dev="9p" ino=36831352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 56.640440][ T40] audit: type=1400 audit(1743401913.381:274): avc: denied { unmount } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 56.679545][ T40] audit: type=1400 audit(1743401913.421:275): avc: denied { ioctl } for pid=6287 comm="syz.3.114" path="socket:[8673]" dev="sockfs" ino=8673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.680736][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 56.832483][ T40] audit: type=1400 audit(1743401913.571:276): avc: denied { write } for pid=6293 comm="syz.1.117" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.898813][ T6300] netlink: 156 bytes leftover after parsing attributes in process `syz.3.120'. [ 56.914029][ T6300] netlink: 'syz.3.120': attribute type 4 has an invalid length. [ 56.933116][ T6299] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 57.199454][ T6311] kvm: apic: phys broadcast and lowest prio [ 57.409435][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 57.533092][ T6325] overlayfs: failed to get inode (-116) [ 57.536223][ T6325] overlayfs: failed to get inode (-116) [ 57.621167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.626961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.948997][ T6342] kvm: pic: non byte read [ 57.951804][ T6342] kvm: pic: non byte read [ 57.954166][ T6342] kvm: pic: non byte read [ 57.956531][ T6342] kvm: pic: non byte read [ 57.956559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 57.958548][ T6342] kvm: pic: level sensitive irq not supported [ 57.960627][ T6342] kvm: pic: non byte read [ 57.964821][ T6342] kvm: pic: non byte read [ 57.967406][ T6342] kvm: pic: single mode not supported [ 57.967887][ T6342] kvm: pic: non byte read [ 57.971849][ T6342] kvm: pic: non byte read [ 57.974102][ T6342] kvm: pic: non byte read [ 57.976085][ T6342] kvm: pic: level sensitive irq not supported [ 57.976298][ T6342] kvm: pic: non byte read [ 57.982941][ T6342] kvm: pic: level sensitive irq not supported [ 57.983754][ T6342] kvm: pic: level sensitive irq not supported [ 57.987217][ T6342] kvm: pic: level sensitive irq not supported [ 57.990225][ T6342] kvm: pic: level sensitive irq not supported [ 57.992933][ T6342] kvm: pic: level sensitive irq not supported [ 58.146452][ T65] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 58.294894][ T6346] dccp_close: ABORT with 84 bytes unread [ 58.455715][ T6352] 9pnet: Unknown protocol version 9p200 [ 58.616687][ T6361] input: syz0 as /devices/virtual/input/input5 [ 58.639993][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 58.946665][ T65] Bluetooth: hci3: command 0x0405 tx timeout [ 59.202853][ T6397] netfs: Couldn't get user pages (rc=-14) [ 59.206266][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 59.215639][ T6399] veth1_to_bond: entered allmulticast mode [ 59.272148][ T6398] veth1_to_bond: left allmulticast mode [ 59.296208][ T6401] 9pnet_virtio: no channels available for device syz [ 59.611589][ T6413] wg1: entered promiscuous mode [ 59.613012][ T6413] wg1: entered allmulticast mode [ 60.136522][ T65] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 60.139203][ T65] Bluetooth: hci3: Injecting HCI hardware error event [ 60.141773][ T65] Bluetooth: hci3: hardware error 0x00 [ 60.186119][ T6419] netlink: 156 bytes leftover after parsing attributes in process `syz.1.160'. [ 60.190990][ T6418] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 60.198446][ T6419] netlink: 'syz.1.160': attribute type 4 has an invalid length. [ 60.490966][ T6444] netlink: 156 bytes leftover after parsing attributes in process `syz.0.172'. [ 60.497385][ T6444] netlink: 'syz.0.172': attribute type 4 has an invalid length. [ 60.499298][ T6445] Dead loop on virtual device ip6_vti0, fix it urgently! [ 60.765400][ T5952] Bluetooth: Frame is too long (len 16, expected len 4) [ 60.777177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.779575][ T6468] kvm: kvm [6467]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 61.056891][ T833] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 61.541738][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 61.541752][ T40] audit: type=1400 audit(1743401918.281:320): avc: denied { map } for pid=6491 comm="syz.1.187" path="socket:[13695]" dev="sockfs" ino=13695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 61.598960][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 62.111717][ T40] audit: type=1400 audit(1743401918.851:321): avc: denied { create } for pid=6510 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 62.118433][ T6506] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 62.119072][ T40] audit: type=1400 audit(1743401918.861:322): avc: denied { ioctl } for pid=6510 comm="syz.2.194" path="socket:[14397]" dev="sockfs" ino=14397 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 62.177705][ T40] audit: type=1400 audit(1743401918.921:323): avc: denied { read } for pid=6512 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.192179][ T6517] input: syz1 as /devices/virtual/input/input6 [ 62.204698][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 62.226441][ T65] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 62.228968][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'. [ 62.286144][ T40] audit: type=1400 audit(1743401919.021:324): avc: denied { create } for pid=6518 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.286165][ T6519] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6519 comm=syz.1.199 [ 62.292468][ T40] audit: type=1400 audit(1743401919.021:325): avc: denied { write } for pid=6518 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.303566][ T40] audit: type=1400 audit(1743401919.041:326): avc: denied { read } for pid=6518 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.325635][ T40] audit: type=1400 audit(1743401919.061:327): avc: denied { bind } for pid=6528 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.336660][ T6529] Bluetooth: MGMT ver 1.23 [ 62.339003][ T40] audit: type=1400 audit(1743401919.081:328): avc: denied { read } for pid=6528 comm="syz.3.202" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 62.348407][ T40] audit: type=1400 audit(1743401919.081:329): avc: denied { open } for pid=6528 comm="syz.3.202" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 62.588697][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 62.679606][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 62.718572][ T6552] tipc: Started in network mode [ 62.720186][ T6552] tipc: Node identity 4, cluster identity 4711 [ 62.722100][ T6552] tipc: Node number set to 4 [ 62.783737][ T6556] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 62.786931][ T6556] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 62.895167][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 62.899371][ T46] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 62.925098][ T6561] bridge1: port 1(ip6gretap1) entered blocking state [ 62.928355][ T6561] bridge1: port 1(ip6gretap1) entered disabled state [ 62.930743][ T6561] ip6gretap1: entered allmulticast mode [ 62.934014][ T6561] ip6gretap1: entered promiscuous mode [ 62.977756][ T6561] veth3: entered promiscuous mode [ 62.982720][ T6561] bridge1: port 2(veth3) entered blocking state [ 62.986461][ T6561] bridge1: port 2(veth3) entered disabled state [ 62.988671][ T6561] veth3: entered allmulticast mode [ 63.016711][ T46] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 63.060972][ T6572] syz.3.217 uses obsolete (PF_INET,SOCK_PACKET) syzkaller syzkaller login: [ 63.128792][ T13] wlan1: authentication with 08:02:11:00:00:00 timed out [ 63.171117][ T6575] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 63.184855][ T6575] picdev_read: 7 callbacks suppressed [ 63.184865][ T6575] kvm: pic: non byte read [ 63.197077][ T6575] kvm: pic: level sensitive irq not supported [ 63.197839][ T6575] kvm: pic: non byte read [ 63.306185][ T6578] kvm: kvm [6577]: vcpu0, guest rIP: 0x1bd Unhandled WRMSR(0xc1) = 0x88000040a9 [ 63.324544][ T6578] kvm: kvm [6577]: vcpu0, guest rIP: 0x1bd Unhandled WRMSR(0xc1) = 0x9600004049 [ 63.331839][ T6578] kvm: kvm [6577]: vcpu0, guest rIP: 0x1bd Unhandled WRMSR(0xc1) = 0x9600004059 [ 63.362205][ T6578] kvm: kvm [6577]: vcpu0, guest rIP: 0x1bd Unhandled WRMSR(0xc1) = 0x5c000040bd [ 63.764145][ T6600] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.060575][ T6608] netlink: 'syz.3.231': attribute type 1 has an invalid length. [ 64.082499][ T6608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.085942][ T6608] bond1: (slave bond2): making interface the new active one [ 64.096930][ T6608] bond1: (slave bond2): Enslaving as an active interface with an up link [ 64.110729][ T6608] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 64.114410][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 64.119027][ T6608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.258649][ T6616] usb usb1: usbfs: process 6616 (syz.1.228) did not claim interface 0 before use [ 64.778928][ T6622] infiniband syz1: set active [ 64.781198][ T6622] infiniband syz1: added bond0 [ 64.802418][ T6622] RDS/IB: syz1: added [ 64.804324][ T6622] smc: adding ib device syz1 with port count 1 [ 64.806695][ T6622] smc: ib device syz1 port 1 has pnetid [ 64.997904][ T6614] dccp_close: ABORT with 32 bytes unread [ 65.082051][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 65.382831][ T6648] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 65.412337][ T832] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.419091][ T5987] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.439556][ T6648] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 65.446095][ T1142] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 65.452646][ T6648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.479326][ T6648] veth3: entered promiscuous mode [ 65.483979][ T6648] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 65.536298][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.246'. [ 65.542715][ T6653] vlan2: entered promiscuous mode [ 65.544530][ T6653] bridge0: entered promiscuous mode [ 65.558031][ T69] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 65.558453][ T832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.564852][ T832] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 65.568968][ T832] usb 6-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 65.572838][ T5987] usb 8-1: config 0 has no interfaces? [ 65.574497][ T5987] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 65.577698][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.581272][ T832] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.583863][ T832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.589399][ T5987] usb 8-1: config 0 descriptor?? [ 65.591677][ T832] usb 6-1: Product: syz [ 65.593590][ T832] usb 6-1: Manufacturer: syz [ 65.596288][ T832] usb 6-1: SerialNumber: syz [ 65.852553][ T6642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.263310][ T832] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 66.266247][ T832] cdc_mbim 6-1:1.0: bind() failure [ 66.270157][ T832] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 66.272467][ T832] cdc_ncm 6-1:1.1: bind() failure [ 66.275461][ T832] usb 6-1: USB disconnect, device number 2 [ 66.387507][ T6670] kvm: kvm [6668]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 66.392167][ T6670] kvm: kvm [6668]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 66.403489][ T6670] kvm: kvm [6668]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 66.422168][ T6670] kvm: kvm [6668]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 66.426847][ T6670] kvm: kvm [6668]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 66.651741][ T6677] kvm: kvm [6676]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 66.654773][ T6677] kvm: kvm [6676]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 66.673116][ T6677] kvm: kvm [6676]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 66.675731][ T6677] kvm: kvm [6676]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x4000 [ 66.695093][ T6677] kvm: kvm [6676]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 67.066503][ T832] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.239169][ T832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.243358][ T832] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 67.251900][ T832] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.256909][ T832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.259994][ T832] usb 6-1: Product: syz [ 67.261341][ T832] usb 6-1: Manufacturer: syz [ 67.262769][ T832] usb 6-1: SerialNumber: syz [ 67.484555][ T6681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.750692][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 67.750703][ T40] audit: type=1400 audit(1743401924.491:361): avc: denied { bind } for pid=6690 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.760474][ T40] audit: type=1400 audit(1743401924.491:362): avc: denied { listen } for pid=6690 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.776483][ T40] audit: type=1400 audit(1743401924.491:363): avc: denied { accept } for pid=6690 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.095771][ T6681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.170955][ T24] usb 8-1: USB disconnect, device number 2 [ 68.246799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.302475][ T832] cdc_mbim 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 68.305613][ T832] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 68.308695][ T832] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 68.387241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 68.503616][ T832] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 68.507654][ T832] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 68.513659][ T832] wwan wwan0: port wwan0mbim0 attached [ 68.523384][ T832] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:42:42:42:42:42 [ 68.562108][ T40] audit: type=1400 audit(1743401925.301:364): avc: denied { search } for pid=5653 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.570336][ T40] audit: type=1400 audit(1743401925.301:365): avc: denied { read } for pid=5653 comm="dhcpcd" name="n103" dev="tmpfs" ino=3089 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.580157][ T40] audit: type=1400 audit(1743401925.301:366): avc: denied { open } for pid=5653 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=3089 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.587297][ T40] audit: type=1400 audit(1743401925.301:367): avc: denied { getattr } for pid=5653 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=3089 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.618157][ T40] audit: type=1400 audit(1743401925.351:368): avc: denied { read } for pid=6705 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.630174][ T40] audit: type=1400 audit(1743401925.351:369): avc: denied { open } for pid=6705 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.639621][ T40] audit: type=1400 audit(1743401925.351:370): avc: denied { getattr } for pid=6705 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.701225][ T5653] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 68.708144][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 68.710125][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 68.712020][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 68.713869][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 68.715706][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 68.717616][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 68.719532][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 68.721421][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 68.723491][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 68.725793][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 68.727785][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 68.729559][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 68.731516][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 68.733356][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 68.735602][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 68.737438][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 68.739302][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 68.741119][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 68.742950][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 68.745104][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 68.751522][ T832] usb 6-1: USB disconnect, device number 3 [ 68.753665][ T832] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 68.830661][ T6707] capability: warning: `syz.2.263' uses deprecated v2 capabilities in a way that may be insecure [ 68.839376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.845031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.856769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.872833][ T832] wwan wwan0: port wwan0mbim0 disconnected [ 68.906821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.957925][ T6726] bond0: (slave rose0): Enslaving as an active interface with an up link [ 69.254006][ T6749] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.404437][ T6758] Zero length message leads to an empty skb [ 69.609460][ T6780] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 69.884046][ T6795] tipc: Started in network mode [ 69.885561][ T6795] tipc: Node identity 3e24986527e3, cluster identity 4711 [ 69.887707][ T6795] tipc: Enabled bearer , priority 0 [ 69.891854][ T6794] tipc: Resetting bearer [ 70.833645][ T65] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 70.911719][ T5987] tipc: Node number set to 432511077 [ 71.101649][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.103787][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.474378][ T6793] Set syz1 is full, maxelem 65536 reached [ 71.557809][ T6794] tipc: Disabling bearer [ 71.561334][ T6816] tipc: Started in network mode [ 71.562732][ T6816] tipc: Node identity 4, cluster identity 4711 [ 71.564485][ T6816] tipc: Node number set to 4 [ 71.603462][ T65] Bluetooth: Wrong link type (-57) [ 71.692135][ T6847] rdma_rxe: rxe_newlink: failed to add vcan0 [ 71.728956][ T6853] usb usb8: usbfs: process 6853 (syz.3.306) did not claim interface 0 before use [ 72.276572][ T5987] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.436640][ T5987] usb 5-1: Using ep0 maxpacket: 16 [ 72.441228][ T5987] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 72.444484][ T5987] usb 5-1: config 0 has no interface number 0 [ 72.447110][ T5987] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.451015][ T5987] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 72.455722][ T5987] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 72.459055][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 72.461909][ T5987] usb 5-1: Product: syz [ 72.463424][ T5987] usb 5-1: SerialNumber: syz [ 72.466929][ T5987] usb 5-1: config 0 descriptor?? [ 72.472488][ T5987] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 72.477882][ T5987] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input7 [ 72.679548][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 72.683536][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 72.684240][ T29] usb 5-1: USB disconnect, device number 3 [ 72.686124][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 72.695909][ T29] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 72.965497][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 73.035485][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 73.035496][ T40] audit: type=1400 audit(1743401929.771:405): avc: denied { mounton } for pid=6939 comm="syz.3.347" path="/116/file0" dev="9p" ino=36831328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.233317][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 73.303782][ T40] audit: type=1400 audit(1743401930.041:406): avc: denied { read } for pid=6959 comm="syz.1.357" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.310128][ T40] audit: type=1400 audit(1743401930.051:407): avc: denied { map } for pid=6959 comm="syz.1.357" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.317618][ T40] audit: type=1400 audit(1743401930.051:408): avc: denied { execute } for pid=6959 comm="syz.1.357" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.335138][ T40] audit: type=1400 audit(1743401930.071:409): avc: denied { create } for pid=6962 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 73.346014][ T40] audit: type=1400 audit(1743401930.081:410): avc: denied { ioctl } for pid=6962 comm="syz.0.359" path="socket:[17954]" dev="sockfs" ino=17954 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 73.390859][ T6971] team0: Device ipvlan1 failed to register rx_handler [ 73.544464][ T6983] Cache volume key already in use (9p,syz,) [ 73.680861][ T6991] netlink: 32 bytes leftover after parsing attributes in process `syz.2.369'. [ 73.915530][ T5817] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.983134][ T40] audit: type=1400 audit(1743401930.721:411): avc: denied { create } for pid=7010 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.090439][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.093596][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.096405][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.100104][ T5817] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.102711][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.107491][ T833] IPVS: starting estimator thread 0... [ 74.107625][ T5817] usb 5-1: config 0 descriptor?? [ 74.199568][ T7020] IPVS: using max 30 ests per chain, 72000 per kthread [ 74.521628][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.524022][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.527097][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.529515][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.532543][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.534768][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.537330][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.539523][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.542269][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.544527][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.548185][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.551435][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.553660][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.555912][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.558377][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.560797][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.562987][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.565389][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.568914][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.571100][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.573258][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.575616][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.577860][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.580060][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.582192][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.584314][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.586719][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.588904][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.591192][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.593356][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.595801][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.596526][ T24] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 74.598184][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.602753][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.604961][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.607142][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.609508][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.611768][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.613898][ T5817] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.617402][ T5817] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 74.625921][ T5817] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 74.684235][ T40] audit: type=1400 audit(1743401931.421:412): avc: denied { execute } for pid=7049 comm="syz.3.399" path="/dev/audio1" dev="devtmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 74.748082][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.752098][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.758818][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.762406][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.788587][ T833] usb 5-1: USB disconnect, device number 4 [ 74.793545][ T7052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.858610][ T7057] input: syz0 as /devices/virtual/input/input8 [ 74.968854][ T40] audit: type=1400 audit(1743401931.711:413): avc: denied { map } for pid=7068 comm="syz.2.405" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.974607][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 74.978453][ T40] audit: type=1400 audit(1743401931.711:414): avc: denied { execute } for pid=7068 comm="syz.2.405" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.979877][ T24] usbtmc 6-1:16.0: can't read capabilities [ 75.180831][ T6039] usb 6-1: USB disconnect, device number 4 [ 75.294349][ T7098] syzkaller1: entered promiscuous mode [ 75.296007][ T7098] syzkaller1: entered allmulticast mode [ 75.392099][ T7113] loop2: detected capacity change from 0 to 7 [ 75.397034][ T7113] Dev loop2: unable to read RDB block 7 [ 75.399447][ T7113] loop2: AHDI p1 p3 [ 75.400590][ T7113] loop2: partition table partially beyond EOD, truncated [ 75.560346][ T7129] 9pnet_virtio: no channels available for device syz [ 76.436181][ T6005] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.441576][ T6005] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 76.666499][ T833] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 76.777421][ T7176] syzkaller1: entered promiscuous mode [ 76.779622][ T7176] syzkaller1: entered allmulticast mode [ 76.841003][ T833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.844023][ T833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.847425][ T833] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.852285][ T833] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.855298][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.866811][ T833] usb 8-1: config 0 descriptor?? [ 76.936521][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.936679][ T6919] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 76.941449][ T6919] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 77.212950][ T7203] 9pnet_virtio: no channels available for device syz [ 77.283381][ T833] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 77.290707][ T833] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 77.526522][ T6919] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 77.538549][ T6573] usb 8-1: USB disconnect, device number 3 [ 77.616453][ T833] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 77.676463][ T6919] usb 6-1: Using ep0 maxpacket: 8 [ 77.680797][ T6919] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 77.684006][ T6919] usb 6-1: config 0 has no interface number 0 [ 77.686251][ T6919] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.690467][ T6919] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 77.694629][ T6919] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 77.698918][ T6919] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.706008][ T6919] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 77.708793][ T6919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.711026][ T6919] usb 6-1: Product: syz [ 77.712126][ T6919] usb 6-1: Manufacturer: syz [ 77.713423][ T6919] usb 6-1: SerialNumber: syz [ 77.718141][ T6919] usb 6-1: config 0 descriptor?? [ 77.766444][ T833] usb 7-1: Using ep0 maxpacket: 32 [ 77.769629][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.772823][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.775830][ T833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 77.779345][ T833] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 77.781822][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.785182][ T833] usb 7-1: config 0 descriptor?? [ 77.931929][ T6919] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 78.134779][ C2] iowarrior 6-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 78.140603][ T5987] usb 6-1: USB disconnect, device number 5 [ 78.206775][ T833] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0005/input/input10 [ 78.270380][ T833] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0005/input/input11 [ 78.281339][ T833] kye 0003:0458:5011.0005: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 78.394347][ T7230] 9pnet_virtio: no channels available for device syz [ 78.616201][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 78.619151][ T40] audit: type=1400 audit(1743401935.351:429): avc: denied { bind } for pid=7237 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.624579][ T40] audit: type=1400 audit(1743401935.351:430): avc: denied { name_bind } for pid=7237 comm="syz.0.473" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 78.630906][ T40] audit: type=1400 audit(1743401935.351:431): avc: denied { node_bind } for pid=7237 comm="syz.0.473" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 78.637591][ T40] audit: type=1400 audit(1743401935.351:432): avc: denied { setopt } for pid=7237 comm="syz.0.473" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.186433][ T6005] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.319189][ C1] kye 0003:0458:5011.0005: usb_submit_urb(ctrl) failed: -1 [ 79.336429][ T6005] usb 6-1: Using ep0 maxpacket: 8 [ 79.339277][ T6005] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 79.341606][ T6005] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.344363][ T6005] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.347184][ T6005] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.349885][ T6005] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.353513][ T6005] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.356844][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.566757][ T6005] usb 6-1: usb_control_msg returned -32 [ 79.568367][ T6005] usbtmc 6-1:16.0: can't read capabilities [ 79.635877][ T40] audit: type=1400 audit(1743401936.371:433): avc: denied { write } for pid=7261 comm="syz.3.484" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.642302][ T40] audit: type=1400 audit(1743401936.381:434): avc: denied { map } for pid=7261 comm="syz.3.484" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.648742][ T40] audit: type=1400 audit(1743401936.381:435): avc: denied { execute } for pid=7261 comm="syz.3.484" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.036462][ T34] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 80.110966][ T6039] usb 7-1: USB disconnect, device number 2 [ 80.187798][ T34] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 80.190745][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.193515][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 80.198351][ T7254] Set syz1 is full, maxelem 65536 reached [ 80.198572][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.202659][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.211689][ T34] usbtmc 8-1:16.0: bulk endpoints not found [ 80.282965][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 80.355768][ T7286] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 80.382669][ T7286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.387151][ T7286] bond1: (slave bond2): making interface the new active one [ 80.389866][ T7286] bond1: (slave bond2): Enslaving as an active interface with an up link [ 81.234899][ T40] audit: type=1400 audit(1743401937.971:436): avc: denied { ioctl } for pid=7305 comm="syz.2.501" path="socket:[21610]" dev="sockfs" ino=21610 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.318212][ T7310] 9pnet_virtio: no channels available for device syz [ 81.345572][ T9] cfg80211: failed to load regulatory.db [ 81.751833][ T6573] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.784669][ T40] audit: type=1400 audit(1743401938.521:437): avc: denied { setopt } for pid=7315 comm="syz.0.506" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.790299][ T40] audit: type=1400 audit(1743401938.531:438): avc: denied { write } for pid=7315 comm="syz.0.506" name="igmp" dev="proc" ino=4026533043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.898241][ T6573] usb 7-1: Using ep0 maxpacket: 32 [ 81.902353][ T6573] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 81.908914][ T6573] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.912509][ T6573] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 81.915646][ T6573] usb 7-1: Product: syz [ 81.917789][ T6573] usb 7-1: Manufacturer: syz [ 81.919708][ T6573] usb 7-1: SerialNumber: syz [ 81.923322][ T6573] usb 7-1: config 0 descriptor?? [ 81.925735][ T7314] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 81.950753][ T10] usb 6-1: USB disconnect, device number 6 [ 82.191495][ T833] usb 7-1: USB disconnect, device number 3 [ 82.205866][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 82.379093][ T7353] 9pnet: Unknown protocol version 9p2000. [ 82.743939][ T7357] bond2 (unregistering): Released all slaves [ 82.798715][ T6573] usb 8-1: USB disconnect, device number 4 [ 83.181251][ T7391] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 83.218495][ T7391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 83.222578][ T7391] bond3: (slave bond4): making interface the new active one [ 83.224899][ T7391] bond3: (slave bond4): Enslaving as an active interface with an up link [ 83.238407][ T7399] loop2: detected capacity change from 0 to 7 [ 83.240099][ T7391] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 83.245308][ T7391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.531'. [ 83.248013][ T7399] Dev loop2: unable to read RDB block 7 [ 83.248048][ T7399] loop2: unable to read partition table [ 83.248138][ T7399] loop2: partition table beyond EOD, truncated [ 83.253272][ T7399] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 83.311963][ T7408] netlink: 188 bytes leftover after parsing attributes in process `syz.1.536'. [ 83.314727][ T7408] netlink: 'syz.1.536': attribute type 1 has an invalid length. [ 83.430273][ T7425] netlink: 'syz.0.543': attribute type 1 has an invalid length. [ 83.466778][ T7425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 83.468457][ T7425] bond5: (slave bond6): making interface the new active one [ 83.468647][ T7425] bond5: (slave bond6): Enslaving as an active interface with an up link [ 83.470831][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 83.496456][ T7432] netfs: Couldn't get user pages (rc=-14) [ 83.563694][ T7439] Cache volume key already in use (9p,syz,) [ 83.822263][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 83.822277][ T40] audit: type=1400 audit(1743401940.561:443): avc: denied { create } for pid=7462 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.823103][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 83.827203][ T40] audit: type=1400 audit(1743401940.561:444): avc: denied { ioctl } for pid=7462 comm="syz.3.560" path="socket:[21184]" dev="sockfs" ino=21184 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.858399][ T40] audit: type=1400 audit(1743401940.571:445): avc: denied { getopt } for pid=7464 comm="syz.0.559" laddr=127.0.0.1 lport=35836 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 83.926180][ T7471] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.563'. [ 84.042231][ T7478] kvm: pic: non byte write [ 84.043448][ T7482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.084439][ T7485] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 84.162418][ T7492] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.259021][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.262092][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.264855][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.267711][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.270704][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.273034][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.275331][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.278401][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.280887][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.283119][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.285369][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.288687][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.291025][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.293366][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.295624][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.298378][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.301317][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.304218][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.307628][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.310893][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.313108][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.315318][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.317872][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.320473][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.322950][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.325224][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.327587][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.329834][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.332076][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.334283][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.336875][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.339143][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.341384][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.343900][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.346044][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.348312][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.350499][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.352689][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.354909][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.357191][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.359981][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.362226][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.364751][ T71] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 84.369307][ T71] hid-generic 0000:007F:FFFFFFFE.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.572739][ T7511] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 84.896531][ T7537] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 85.038482][ T7551] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 85.078301][ T7551] 8021q: adding VLAN 0 to HW filter on device bond5 [ 85.079635][ T40] audit: type=1400 audit(1743401941.821:446): avc: denied { read write } for pid=7548 comm="syz.0.595" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.081761][ T7551] bond4: (slave bond5): making interface the new active one [ 85.089284][ T40] audit: type=1400 audit(1743401941.821:447): avc: denied { open } for pid=7548 comm="syz.0.595" path="/113/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.091580][ T7551] bond4: (slave bond5): Enslaving as an active interface with an up link [ 85.098280][ T40] audit: type=1400 audit(1743401941.821:448): avc: denied { ioctl } for pid=7548 comm="syz.0.595" path="/113/file0/file0" dev="fuse" ino=6 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.109655][ T7551] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 85.117705][ T7551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.596'. [ 85.141560][ T7562] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 85.148113][ T7560] can0: slcan on ptm0. [ 85.152950][ T7560] random: crng reseeded on system resumption [ 85.153444][ T40] audit: type=1400 audit(1743401941.891:449): avc: denied { write } for pid=7559 comm="syz.0.598" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.164962][ T40] audit: type=1400 audit(1743401941.891:450): avc: denied { open } for pid=7559 comm="syz.0.598" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.339469][ T7560] can0 (unregistered): slcan off ptm0. [ 86.525806][ T7633] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 86.573409][ T7636] block device autoloading is deprecated and will be removed. [ 86.574696][ T7633] 8021q: adding VLAN 0 to HW filter on device bond9 [ 86.580292][ T7633] bond8: (slave bond9): making interface the new active one [ 86.582567][ T7633] bond8: (slave bond9): Enslaving as an active interface with an up link [ 86.589344][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.620'. [ 86.622885][ T7638] netlink: 'syz.2.621': attribute type 1 has an invalid length. [ 86.683216][ T7640] kvm: user requested TSC rate below hardware speed [ 86.888490][ T7657] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 86.893258][ T40] audit: type=1326 audit(1743401943.631:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.3.630" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ecb8d169 code=0x0 [ 86.914107][ T7657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.918317][ T7657] bond1: (slave bond2): making interface the new active one [ 86.921572][ T7657] bond1: (slave bond2): Enslaving as an active interface with an up link [ 86.934629][ T7657] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 86.940980][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'. [ 86.971158][ T7664] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 87.136693][ T7675] 9pnet_virtio: no channels available for device syz [ 87.711161][ T7691] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 87.823112][ T7697] bridge0: port 3(syz_tun) entered blocking state [ 87.826563][ T7697] bridge0: port 3(syz_tun) entered disabled state [ 87.828742][ T7697] syz_tun: entered allmulticast mode [ 87.831988][ T7697] syz_tun: entered promiscuous mode [ 87.834596][ T7697] bridge0: port 3(syz_tun) entered blocking state [ 87.836856][ T7697] bridge0: port 3(syz_tun) entered forwarding state [ 89.111527][ T40] audit: type=1400 audit(1743401945.851:452): avc: denied { getopt } for pid=7739 comm="syz.2.661" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.200788][ T7745] kvm: emulating exchange as write [ 90.329562][ T7764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.376877][ T7767] syzkaller0: entered promiscuous mode [ 90.378904][ T7767] syzkaller0: entered allmulticast mode [ 90.604647][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 90.652894][ T7778] netlink: 'syz.2.683': attribute type 1 has an invalid length. [ 91.876529][ T34] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 92.037593][ T34] usb 7-1: config 0 has no interfaces? [ 92.039196][ T34] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 92.041643][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.045754][ T34] usb 7-1: config 0 descriptor?? [ 92.255514][ T40] audit: type=1400 audit(1743401948.991:453): avc: denied { ioctl } for pid=7806 comm="syz.2.687" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.257933][ T29] usb 7-1: USB disconnect, device number 4 [ 92.487498][ T40] audit: type=1400 audit(1743401949.231:454): avc: denied { bind } for pid=7828 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.529065][ T7831] netlink: 'syz.3.697': attribute type 1 has an invalid length. [ 92.559540][ T40] audit: type=1400 audit(1743401949.301:455): avc: denied { create } for pid=7833 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.567242][ T40] audit: type=1400 audit(1743401949.301:456): avc: denied { bind } for pid=7833 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.860533][ T7846] 9pnet_virtio: no channels available for device syz [ 92.890765][ T7841] kvm_pr_unimpl_wrmsr: 7 callbacks suppressed [ 92.890783][ T7841] kvm: kvm [7840]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 92.904090][ T7841] kvm: kvm [7840]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 92.915237][ T7841] kvm: kvm [7840]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 92.926327][ T7841] kvm: kvm [7840]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 92.937961][ T7841] kvm: kvm [7840]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 92.949571][ T7841] kvm: kvm [7840]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 92.960882][ T7841] kvm: kvm [7840]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 92.972709][ T7841] kvm: kvm [7840]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 92.983369][ T7841] kvm: kvm [7840]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 92.994409][ T7841] kvm: kvm [7840]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 93.046943][ T7858] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 93.135850][ T7861] bond9 (unregistering): Released all slaves [ 93.159295][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.709'. [ 93.361315][ T7870] kvm: pic: non byte write [ 93.578493][ T40] audit: type=1400 audit(1743401950.321:457): avc: denied { mounton } for pid=7876 comm="syz.3.714" path="/225/file0" dev="tmpfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 94.367165][ T40] audit: type=1400 audit(1743401951.101:458): avc: denied { cmd } for pid=7911 comm="syz.0.725" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=io_uring permissive=1 [ 95.076566][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.162142][ T7940] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 95.220189][ T7944] dccp_close: ABORT with 1 bytes unread [ 95.237698][ T34] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.240402][ T34] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 95.248074][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.251491][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 95.254435][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 95.258905][ T34] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.261395][ T34] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.264054][ T34] usb 5-1: Product: syz [ 95.265265][ T34] usb 5-1: Manufacturer: syz [ 95.268757][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 95.270704][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 95.274298][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 95.277306][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 95.527243][ C3] wdm_int_callback: 12 callbacks suppressed [ 95.527261][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 95.527484][ T29] usb 5-1: USB disconnect, device number 5 [ 95.527924][ T7958] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 95.527954][ T7958] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 95.528574][ T7958] kvm: user requested TSC rate below hardware speed [ 95.529313][ C3] wdm_int_callback: 12 callbacks suppressed [ 95.529326][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 95.546920][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 96.246269][ T40] audit: type=1800 audit(1743401952.981:459): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.751" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 96.413016][ T7985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.480687][ T7993] bond4 (unregistering): Released all slaves [ 96.678487][ T8006] syzkaller1: entered promiscuous mode [ 96.680026][ T8006] syzkaller1: entered allmulticast mode [ 96.821944][ T40] audit: type=1400 audit(1743401953.561:460): avc: denied { read } for pid=8013 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.859819][ T40] audit: type=1400 audit(1743401954.601:461): avc: denied { create } for pid=8052 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.982022][ T40] audit: type=1400 audit(1743401954.721:462): avc: denied { append } for pid=8054 comm="syz.1.780" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.412184][ T8060] syzkaller0: entered promiscuous mode [ 98.413740][ T8060] syzkaller0: entered allmulticast mode [ 98.586788][ T40] audit: type=1400 audit(1743401955.331:463): avc: denied { read } for pid=8064 comm="syz.0.784" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.587991][ T8065] orangefs_devreq_open: device cannot be opened in blocking mode [ 98.593371][ T40] audit: type=1400 audit(1743401955.331:464): avc: denied { open } for pid=8064 comm="syz.0.784" path="/156/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.596575][ T8065] orangefs_devreq_open: device cannot be opened in blocking mode [ 98.602336][ T40] audit: type=1400 audit(1743401955.331:465): avc: denied { write } for pid=8064 comm="syz.0.784" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.623399][ T40] audit: type=1400 audit(1743401955.361:466): avc: denied { rename } for pid=8061 comm="syz.2.783" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.810580][ T8076] bond12 (unregistering): Released all slaves [ 98.992139][ T40] audit: type=1400 audit(1743401955.731:467): avc: denied { execute_no_trans } for pid=8088 comm="syz.1.793" path="/191/file1" dev="tmpfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.257872][ T8098] bond12 (unregistering): Released all slaves [ 99.744579][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 99.744591][ T40] audit: type=1400 audit(1743401956.481:469): avc: denied { cmd } for pid=8112 comm="syz.2.802" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 99.792970][ T8117] netlink: 'syz.2.803': attribute type 1 has an invalid length. [ 99.796728][ T8117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.803'. [ 101.426648][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 101.550502][ T8166] tipc: Enabled bearer , priority 0 [ 101.555186][ T8165] tipc: Resetting bearer [ 101.806244][ T40] audit: type=1400 audit(1743401958.541:470): avc: denied { mount } for pid=8173 comm="syz.0.826" name="/" dev="ramfs" ino=28856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 101.812941][ T8174] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.813702][ T40] audit: type=1400 audit(1743401958.541:471): avc: denied { mounton } for pid=8173 comm="syz.0.826" path="/174/file0/bus" dev="ramfs" ino=28859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 101.817345][ T8174] overlayfs: failed to set xattr on upper [ 101.827974][ T8174] overlayfs: ...falling back to redirect_dir=nofollow. [ 101.830605][ T8174] overlayfs: ...falling back to index=off. [ 101.832826][ T8174] overlayfs: ...falling back to uuid=null. [ 101.905370][ T40] audit: type=1400 audit(1743401958.641:472): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 102.192784][ T8183] netlink: 'syz.2.830': attribute type 72 has an invalid length. [ 102.444620][ T40] audit: type=1400 audit(1743401959.181:473): avc: denied { listen } for pid=8191 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.452577][ T40] audit: type=1400 audit(1743401959.181:474): avc: denied { accept } for pid=8191 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.658448][ T8165] tipc: Disabling bearer [ 102.664015][ T8195] block device autoloading is deprecated and will be removed. [ 102.773082][ T8202] bond9 (unregistering): Released all slaves [ 103.207361][ T40] audit: type=1400 audit(1743401959.951:475): avc: denied { create } for pid=8216 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 103.224641][ T40] audit: type=1400 audit(1743401959.951:476): avc: denied { write } for pid=8216 comm="syz.0.841" path="socket:[29126]" dev="sockfs" ino=29126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 103.246544][ T40] audit: type=1400 audit(1743401959.951:477): avc: denied { nlmsg_read } for pid=8216 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 103.380141][ T40] audit: type=1400 audit(1743401960.121:478): avc: denied { unlink } for pid=8218 comm="syz.2.842" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 103.516678][ T8232] md2: using deprecated bitmap file support [ 103.518998][ T8232] md2: error: bitmap file must be a regular file [ 103.882794][ T8258] Set syz0 is full, maxelem 0 reached [ 103.968060][ T8265] tipc: Enabled bearer , priority 0 [ 104.033180][ T8271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.863'. [ 104.056203][ T8271] bond9 (unregistering): Released all slaves [ 104.127015][ T8278] usb usb8: usbfs: process 8278 (syz.3.866) did not claim interface 0 before use [ 104.206247][ T8280] SELinux: ebitmap: map size 74280818 does not match my size 64 (high bit was 33554432) [ 104.211402][ T8280] SELinux: failed to load policy [ 104.235825][ T8286] nbd: nbd0 already in use [ 104.426465][ T6919] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 104.552254][ T8305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.878'. [ 104.583571][ T8305] bond9 (unregistering): Released all slaves [ 104.586463][ T6919] usb 6-1: Using ep0 maxpacket: 8 [ 104.592288][ T6919] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.595939][ T6919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.600203][ T6919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.603925][ T6919] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.609552][ T6919] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.612931][ T6919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.810493][ T8320] 9pnet_virtio: no channels available for device syz [ 104.828148][ T6919] usb 6-1: usb_control_msg returned -32 [ 104.830324][ T6919] usbtmc 6-1:16.0: can't read capabilities [ 105.081590][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 105.081606][ T40] audit: type=1400 audit(1743401961.821:492): avc: denied { connect } for pid=8325 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.384416][ T34] usb 6-1: USB disconnect, device number 7 [ 105.996252][ T8352] syz1: rxe_newlink: already configured on bond0 [ 106.030376][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.897'. [ 106.074640][ T8356] bond9 (unregistering): Released all slaves [ 106.111965][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 106.340075][ T8368] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.361358][ T8368] kvm: pic: level sensitive irq not supported [ 106.362441][ T8368] kvm: pic: non byte read [ 106.371733][ T8368] kvm: pic: level sensitive irq not supported [ 106.372356][ T8368] kvm: pic: non byte read [ 106.378909][ T8368] kvm: pic: level sensitive irq not supported [ 106.379442][ T8368] kvm: pic: non byte read [ 106.384492][ T8368] kvm: pic: level sensitive irq not supported [ 106.384835][ T8368] kvm: pic: non byte read [ 106.394510][ T8368] kvm: pic: level sensitive irq not supported [ 106.395527][ T8368] kvm: pic: non byte read [ 106.403294][ T8368] kvm: pic: level sensitive irq not supported [ 106.403674][ T8368] kvm: pic: non byte read [ 106.532222][ T8385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.540600][ T8385] dccp_close: ABORT with 36 bytes unread [ 106.547770][ T8387] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 106.594455][ T40] audit: type=1400 audit(1743401963.331:493): avc: denied { write } for pid=8391 comm="syz.2.909" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.601909][ T8387] 8021q: adding VLAN 0 to HW filter on device bond6 [ 106.605633][ T8387] bond5: (slave bond6): making interface the new active one [ 106.608892][ T8387] bond5: (slave bond6): Enslaving as an active interface with an up link [ 106.614131][ T8384] kvm_pr_unimpl_wrmsr: 138 callbacks suppressed [ 106.614148][ T8384] kvm: kvm [8383]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x99 [ 106.614741][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.908'. [ 106.624125][ T8384] kvm: kvm [8383]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x87e [ 106.624789][ T8387] 8021q: adding VLAN 0 to HW filter on device bond5 [ 106.897962][ T8402] usb usb1: usbfs: process 8402 (syz.2.910) did not claim interface 0 before use [ 107.099029][ T8418] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 107.147402][ T8422] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 107.174673][ T8422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 107.177768][ T8422] bond4: (slave bond5): making interface the new active one [ 107.180061][ T8422] bond4: (slave bond5): Enslaving as an active interface with an up link [ 107.186810][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'. [ 107.191253][ T8422] 8021q: adding VLAN 0 to HW filter on device bond4 [ 107.339307][ T40] audit: type=1400 audit(1743401964.081:494): avc: denied { append } for pid=8428 comm="syz.0.922" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.379625][ T40] audit: type=1400 audit(1743401964.121:495): avc: denied { bind } for pid=8426 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.605165][ T40] audit: type=1400 audit(1743401964.341:496): avc: denied { relabelfrom } for pid=8441 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 107.614340][ T40] audit: type=1400 audit(1743401964.341:497): avc: denied { relabelto } for pid=8441 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 108.124910][ T8430] syz.0.922 (8430): drop_caches: 1 [ 108.189634][ T8430] syz.0.922 (8430): drop_caches: 1 [ 108.221644][ T8446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.929'. [ 108.224219][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.929'. [ 108.226897][ T8446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.929'. [ 108.229422][ T8446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.929'. [ 108.266208][ T40] audit: type=1400 audit(1743401965.001:498): avc: denied { ioctl } for pid=8447 comm="syz.0.930" path="socket:[30889]" dev="sockfs" ino=30889 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 108.783389][ T8456] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 108.787951][ T40] audit: type=1400 audit(1743401965.531:499): avc: denied { relabelto } for pid=8455 comm="syz.1.933" name="file0" dev="tmpfs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_agent_exec_t:s0" [ 108.795266][ T40] audit: type=1400 audit(1743401965.531:500): avc: denied { associate } for pid=8455 comm="syz.1.933" name="file0" dev="tmpfs" ino=1284 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_agent_exec_t:s0" [ 108.803970][ T40] audit: type=1400 audit(1743401965.531:501): avc: denied { setopt } for pid=8455 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.849483][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 108.861412][ T8460] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.865212][ T8460] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.869018][ T8460] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.872446][ T8460] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.878065][ T8460] vxlan0: entered promiscuous mode [ 108.896005][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 108.942774][ T8463] bond9 (unregistering): Released all slaves [ 109.411203][ T8477] overlay: ./file1 is not a directory [ 109.641318][ T8492] ip6t_REJECT: ECHOREPLY is not supported [ 109.669987][ T8489] 8021q: adding VLAN 0 to HW filter on device bond8 [ 109.678691][ T8489] bond7: (slave bond8): Enslaving as an active interface with an up link [ 109.916478][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 110.066435][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 110.076986][ T29] usb 6-1: config 0 has no interfaces? [ 110.080179][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.082686][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.084911][ T29] usb 6-1: Product: syz [ 110.086065][ T29] usb 6-1: Manufacturer: syz [ 110.087344][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 110.087354][ T40] audit: type=1400 audit(1743401966.831:508): avc: denied { bind } for pid=8511 comm="syz.2.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.087624][ T29] usb 6-1: SerialNumber: syz [ 110.097633][ T29] usb 6-1: config 0 descriptor?? [ 110.143319][ T8515] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(5916694355177) <= P.seqno(0) <= S.SWH(5916694355251)) and (P.ackno exists or LAWL(133691332622292) <= P.ackno(133691332622293) <= S.AWH(133691332622293), sending SYNC... [ 110.320714][ T1142] ================================================================== [ 110.323775][ T1142] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 110.327498][ T1142] Read of size 1 at addr ffff888043536409 by task kworker/u32:7/1142 [ 110.331753][ T1142] [ 110.332632][ T1142] CPU: 1 UID: 0 PID: 1142 Comm: kworker/u32:7 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 110.332650][ T1142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.332660][ T1142] Workqueue: events_unbound commit_work [ 110.332685][ T1142] Call Trace: [ 110.332691][ T1142] [ 110.332697][ T1142] dump_stack_lvl+0x116/0x1f0 [ 110.332728][ T1142] print_report+0xc3/0x670 [ 110.332750][ T1142] ? __virt_addr_valid+0x5e/0x590 [ 110.332772][ T1142] ? __phys_addr+0xc6/0x150 [ 110.332793][ T1142] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 110.332814][ T1142] kasan_report+0xe0/0x110 [ 110.332836][ T1142] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 110.332861][ T1142] drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 110.332885][ T1142] ? preempt_schedule_thunk+0x16/0x30 [ 110.332901][ T1142] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 110.332923][ T1142] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 110.332944][ T1142] ? drm_atomic_helper_commit_hw_done+0x330/0x490 [ 110.332967][ T1142] drm_atomic_helper_commit_tail+0xcb/0xf0 [ 110.332988][ T1142] commit_tail+0x35b/0x400 [ 110.333010][ T1142] process_one_work+0x9cc/0x1b70 [ 110.333033][ T1142] ? __pfx_process_one_work+0x10/0x10 [ 110.333059][ T1142] ? assign_work+0x1a0/0x250 [ 110.333075][ T1142] worker_thread+0x6c8/0xf10 [ 110.333097][ T1142] ? __pfx_worker_thread+0x10/0x10 [ 110.333116][ T1142] kthread+0x3c2/0x780 [ 110.333132][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.333145][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.333159][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.333173][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.333186][ T1142] ? rcu_is_watching+0x12/0xc0 [ 110.333204][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.333220][ T1142] ret_from_fork+0x45/0x80 [ 110.333237][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.333254][ T1142] ret_from_fork_asm+0x1a/0x30 [ 110.333283][ T1142] [ 110.333288][ T1142] [ 110.404042][ T1142] Allocated by task 8495: [ 110.405735][ T1142] kasan_save_stack+0x33/0x60 [ 110.407575][ T1142] kasan_save_track+0x14/0x30 [ 110.409359][ T1142] __kasan_kmalloc+0xaa/0xb0 [ 110.411160][ T1142] drm_atomic_helper_crtc_duplicate_state+0x70/0xd0 [ 110.413563][ T1142] drm_atomic_get_crtc_state+0x16e/0x450 [ 110.415638][ T1142] drm_atomic_get_plane_state+0x436/0x590 [ 110.417734][ T1142] drm_atomic_set_property+0xa29/0x34e0 [ 110.419772][ T1142] drm_mode_atomic_ioctl+0x66f/0x25f0 [ 110.421788][ T1142] drm_ioctl_kernel+0x1f1/0x3e0 [ 110.423617][ T1142] drm_ioctl+0x5c9/0xc30 [ 110.425194][ T1142] __x64_sys_ioctl+0x190/0x200 [ 110.426975][ T1142] do_syscall_64+0xcd/0x260 [ 110.428675][ T1142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.430892][ T1142] [ 110.431808][ T1142] Freed by task 8494: [ 110.433282][ T1142] kasan_save_stack+0x33/0x60 [ 110.435011][ T1142] kasan_save_track+0x14/0x30 [ 110.436692][ T1142] kasan_save_free_info+0x3b/0x60 [ 110.438382][ T1142] __kasan_slab_free+0x51/0x70 [ 110.440217][ T1142] kfree+0x2b6/0x4d0 [ 110.441750][ T1142] drm_atomic_state_default_clear+0x455/0xe40 [ 110.444106][ T1142] __drm_atomic_state_free+0x185/0x2b0 [ 110.446213][ T1142] drm_client_modeset_commit_atomic+0x6b2/0x7e0 [ 110.448633][ T1142] drm_client_modeset_commit_locked+0x14d/0x580 [ 110.451079][ T1142] drm_client_modeset_commit+0x4f/0x80 [ 110.453188][ T1142] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 110.455962][ T1142] drm_fbdev_client_restore+0x2c/0x40 [ 110.458025][ T1142] drm_client_dev_restore+0x1f3/0x2a0 [ 110.460115][ T1142] drm_release+0x2c4/0x360 [ 110.461853][ T1142] __fput+0x3ff/0xb70 [ 110.463421][ T1142] task_work_run+0x14d/0x240 [ 110.465194][ T1142] syscall_exit_to_user_mode+0x27b/0x2a0 [ 110.467399][ T1142] do_syscall_64+0xda/0x260 [ 110.469139][ T1142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.471262][ T1142] [ 110.472219][ T1142] The buggy address belongs to the object at ffff888043536400 [ 110.472219][ T1142] which belongs to the cache kmalloc-512 of size 512 [ 110.477402][ T1142] The buggy address is located 9 bytes inside of [ 110.477402][ T1142] freed 512-byte region [ffff888043536400, ffff888043536600) [ 110.482420][ T1142] [ 110.483373][ T1142] The buggy address belongs to the physical page: [ 110.485827][ T1142] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43534 [ 110.489170][ T1142] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 110.492404][ T1142] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 110.495343][ T1142] page_type: f5(slab) [ 110.496907][ T1142] raw: 00fff00000000040 ffff88801b442c80 dead000000000100 dead000000000122 [ 110.500169][ T1142] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 110.503461][ T1142] head: 00fff00000000040 ffff88801b442c80 dead000000000100 dead000000000122 [ 110.506778][ T1142] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 110.510065][ T1142] head: 00fff00000000002 ffffea00010d4d01 ffffffffffffffff 0000000000000000 [ 110.513091][ T1142] head: 0000000200000004 0000000000000000 00000000ffffffff 0000000000000000 [ 110.516365][ T1142] page dumped because: kasan: bad access detected [ 110.518833][ T1142] page_owner tracks the page as allocated [ 110.521011][ T1142] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6561, tgid 6560 (syz.3.215), ts 62924486043, free_ts 62923662451 [ 110.528739][ T1142] post_alloc_hook+0x181/0x1b0 [ 110.530626][ T1142] get_page_from_freelist+0x10fc/0x35c0 [ 110.532524][ T1142] __alloc_frozen_pages_noprof+0x223/0x2370 [ 110.534721][ T1142] alloc_pages_mpol+0x1fb/0x550 [ 110.536624][ T1142] new_slab+0x23c/0x330 [ 110.538257][ T1142] ___slab_alloc+0xd9c/0x1940 [ 110.540084][ T1142] __slab_alloc.constprop.0+0x56/0xb0 [ 110.542152][ T1142] __kmalloc_cache_noprof+0xfb/0x3e0 [ 110.544248][ T1142] __ipv6_dev_mc_inc+0x2b9/0xc10 [ 110.546165][ T1142] ipv6_add_dev+0xb03/0x13f0 [ 110.547981][ T1142] addrconf_notify+0x53e/0x19e0 [ 110.549869][ T1142] notifier_call_chain+0xb9/0x410 [ 110.551855][ T1142] call_netdevice_notifiers_info+0xbe/0x140 [ 110.554139][ T1142] register_netdevice+0x17d0/0x2040 [ 110.556177][ T1142] ip6gre_newlink_common.constprop.0+0x14e/0x340 [ 110.558624][ T1142] ip6gre_newlink+0x17d/0x400 [ 110.560434][ T1142] page last free pid 6561 tgid 6560 stack trace: [ 110.562799][ T1142] __free_frozen_pages+0x69d/0xf90 [ 110.564776][ T1142] stack_depot_save_flags+0x354/0xa50 [ 110.566856][ T1142] kasan_save_stack+0x42/0x60 [ 110.568678][ T1142] kasan_save_track+0x14/0x30 [ 110.570518][ T1142] __kasan_kmalloc+0xaa/0xb0 [ 110.572326][ T1142] ref_tracker_alloc+0x18e/0x5b0 [ 110.574262][ T1142] inetdev_init+0x245/0x5a0 [ 110.576021][ T1142] inetdev_event+0xc5f/0x18a0 [ 110.577853][ T1142] notifier_call_chain+0xb9/0x410 [ 110.579837][ T1142] call_netdevice_notifiers_info+0xbe/0x140 [ 110.582137][ T1142] register_netdevice+0x17d0/0x2040 [ 110.584257][ T1142] ip6gre_newlink_common.constprop.0+0x14e/0x340 [ 110.586753][ T1142] ip6gre_newlink+0x17d/0x400 [ 110.588601][ T1142] rtnl_newlink+0xc42/0x2000 [ 110.590426][ T1142] rtnetlink_rcv_msg+0x95b/0xe90 [ 110.592364][ T1142] netlink_rcv_skb+0x16a/0x440 [ 110.594250][ T1142] [ 110.595047][ T1142] Memory state around the buggy address: [ 110.596968][ T1142] ffff888043536300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.599823][ T1142] ffff888043536380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.602696][ T1142] >ffff888043536400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.605584][ T1142] ^ [ 110.607209][ T1142] ffff888043536480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.610091][ T1142] ffff888043536500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.613080][ T1142] ================================================================== [ 110.621605][ T29] usb 6-1: USB disconnect, device number 8 [ 110.626421][ T1142] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.629091][ T1142] CPU: 1 UID: 0 PID: 1142 Comm: kworker/u32:7 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 110.632835][ T1142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.635861][ T1142] Workqueue: events_unbound commit_work [ 110.637437][ T1142] Call Trace: [ 110.638428][ T1142] [ 110.639283][ T1142] dump_stack_lvl+0x3d/0x1f0 [ 110.640848][ T1142] panic+0x71c/0x800 [ 110.642309][ T1142] ? __pfx_panic+0x10/0x10 [ 110.643681][ T1142] ? irqentry_exit+0x3b/0x90 [ 110.645188][ T1142] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.646975][ T1142] ? preempt_schedule_thunk+0x16/0x30 [ 110.648871][ T1142] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 110.651389][ T1142] ? preempt_schedule_common+0x44/0xc0 [ 110.653161][ T1142] ? check_panic_on_warn+0x1f/0xb0 [ 110.654724][ T1142] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 110.656961][ T1142] check_panic_on_warn+0xab/0xb0 [ 110.658611][ T1142] end_report+0x107/0x170 [ 110.660134][ T1142] kasan_report+0xee/0x110 [ 110.661495][ T1142] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 110.663837][ T1142] drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 110.666044][ T1142] ? preempt_schedule_thunk+0x16/0x30 [ 110.667735][ T1142] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 110.670142][ T1142] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 110.671982][ T1142] ? drm_atomic_helper_commit_hw_done+0x330/0x490 [ 110.674030][ T1142] drm_atomic_helper_commit_tail+0xcb/0xf0 [ 110.675967][ T1142] commit_tail+0x35b/0x400 [ 110.677417][ T1142] process_one_work+0x9cc/0x1b70 [ 110.679077][ T1142] ? __pfx_process_one_work+0x10/0x10 [ 110.681124][ T1142] ? assign_work+0x1a0/0x250 [ 110.682921][ T1142] worker_thread+0x6c8/0xf10 [ 110.684744][ T1142] ? __pfx_worker_thread+0x10/0x10 [ 110.686721][ T1142] kthread+0x3c2/0x780 [ 110.688128][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.689903][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.691707][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.693486][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.695280][ T1142] ? rcu_is_watching+0x12/0xc0 [ 110.697118][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.698900][ T1142] ret_from_fork+0x45/0x80 [ 110.700611][ T1142] ? __pfx_kthread+0x10/0x10 [ 110.702397][ T1142] ret_from_fork_asm+0x1a/0x30 [ 110.704250][ T1142] [ 110.706049][ T1142] Kernel Offset: disabled [ 110.707741][ T1142] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:19:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a43afc0 RCX=ffffffff81af33ae RDX=ffff88801d2fc880 RSI=ffffffff81af3388 RDI=0000000000000005 RBP=ffffc90000157d10 RSP=ffffc90000157c40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c793ee R12=1ffff9200002af8c R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4875f9 RIP=ffffffff81af3394 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69d4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f51cff8 CR3=000000004a914000 CR4=00352ef0 DR0=0100000100000000 DR1=0000000000000006 DR2=0000000000000005 DR3=0000000000000011 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ff860600 Opmask01=0000000000000fff Opmask02=000000003f3fefff Opmask03=0410008081001001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69253a6925632500 3d45444f4d564544 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe834000c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ffff0000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2b2a415943 4e754f4645425d05 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a474f475a054149 454648051a041a4f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe833f84d8 00006364755f796d 6d756400454d414e 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe833f84d8 00006364755f796d 6d75643d454d414e 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000042c3830284d8 00005e59485f4450 50485900454d414e 5f4344555f425355 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e6364755f796d6d 75642f6364752f31 2e6364755f796d6d 75642f6d726f6674 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff24e9f1c70 00007ff24e9f1c70 0000000000000181 0000000000000031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 647261646e617453 6e703a002a64626e 7c2a6d656d707c2a 6d63737c2a646200 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c7614522f0 000055c76146e390 000055c7614a2120 000055c76145d5c0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854b8065 RDI=ffffffff9ae04360 RBP=ffffffff9ae04320 RSP=ffffc90006117508 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3533343038386552 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9ae04320 R15=ffffffff854b8000 RIP=ffffffff854b808f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ad4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f5ffff8 CR3=00000000276f6000 CR4=00352ef0 DR0=0100000100000000 DR1=0000000000000006 DR2=0000000000000005 DR3=0000000000000011 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9aae811f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9aada0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9aada0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9aada0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9aada0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9aada0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9aada0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=0000000000000001 RCX=ffffc9000642f7ec RDX=0000000000000000 RSI=ffffffff81cc16fe RDI=ffff88805606ccc4 RBP=ffff88805606c880 RSP=ffffc9000642f818 R8 =1ef0d78603257027 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=ffffffff81a6e4a0 R13=ffffc9000642f948 R14=0000000000000000 R15=ffff88805606c880 RIP=ffffffff81a0b999 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555564594500 ffffffff 00c00000 GS =0000 ffff8880d6bd4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f345ae4aea2 CR3=0000000031b00000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008200029 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde83277c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f345ae0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f345ae0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f345ae0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f345ae0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f345ae0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f345ae0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7720647a253d6461 6572007269646b6d 206f742064656c69 61660064252f2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5205415f00184144 405700574c414e48 054a51054140494c 44430041000a0b00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=ffff88806a7278c0 RCX=ffffffff81a85246 RDX=ffff888022a64880 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900006f8e38 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88806a727840 R13=0000000000000000 R14=ffff8880542f0318 R15=ffffffff81aa9520 RIP=ffffffff81bb31a0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555570a56500 ffffffff 00c00000 GS =0000 ffff8880d6cd4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555564594808 CR3=000000004f7b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff815c2778 ffffffff815c2444 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff815c2444 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68ecc0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68ecc0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68ecc0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68ecc0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68ecc0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68ecc0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816b62aa ffffffff816b6288 ffffffff816b6268 ffffffff815fba85 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff817eb263 ffffffff817eb1d7 ffffffff00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816b62aa ffffffff816b6288 ffffffff816b6268 ffffffff815fba85 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000