last executing test programs: 2m0.130580683s ago: executing program 2 (id=307): r0 = socket(0x3, 0xa, 0x7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}, @IFLA_GRE_OKEY={0x8, 0x5, 0x846}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x81}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x74}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', r2, 0x1, 0x80, 0x9, 0xa7a1, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x67, 0x0, 0x5, 0x29, 0x0, @broadcast, @private=0xa010102, {[@timestamp_addr={0x44, 0x14, 0x68, 0x1, 0x6, [{@private=0xa010102, 0xfffff794}, {@loopback, 0x6}]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x50, [@private=0xa010100, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}]}, @timestamp={0x44, 0x10, 0x2e, 0x0, 0x6, [0x8, 0x9, 0x3]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf00ffff000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 2m0.079529366s ago: executing program 2 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a4000000000d0558bf73d06d22a000000000900010073797a30000000000800054000000002580000000e0a01020000000000000040010000000900020073797a32000080100001800600028006000180000000000900010073797a3000000000000000000019470b2504f89fdeb743afa2c2735e15df1fe6720980c78232da24294556fba5ebb8ba9c012cac5c4ee7e4271fb24612ec3c46391602b90c03c56b8d314e54815433767c"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m0.077321966s ago: executing program 2 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0xe691, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x80000000, 0x3, 0x7, 0x4, 0x80000000, 0xfffffffffffffffb], 0xab000, 0x1100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x26}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1m59.920544615s ago: executing program 2 (id=314): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0xffffffffffffff9d, 0x0}, 0x161) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 1m59.911984674s ago: executing program 2 (id=315): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x80c00100000000) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=',T', 0x2) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000100)={0x6, r2}) 1m59.650422985s ago: executing program 2 (id=319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)={0x40, 0x122, 0x26}, 0x18) mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x14d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) r4 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) (async, rerun: 64) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mkdir(0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 1m59.614885445s ago: executing program 32 (id=319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)={0x40, 0x122, 0x26}, 0x18) mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x14d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) r4 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) (async, rerun: 64) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mkdir(0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 33.944310553s ago: executing program 0 (id=1266): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 33.944168248s ago: executing program 0 (id=1267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xea9}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0xff}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000850}, 0x20008840) 33.944033449s ago: executing program 0 (id=1268): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a0104"], 0xe8}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 33.891137129s ago: executing program 0 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc00, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 33.890820069s ago: executing program 0 (id=1270): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x403, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x100, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x35f, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffffff7, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x20000fe}, 0x0, 0x0) unshare(0x28040680) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 33.62614434s ago: executing program 0 (id=1273): r0 = socket$inet6(0xa, 0x802, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) close_range(r0, 0xffffffffffffffff, 0x0) 33.62581415s ago: executing program 33 (id=1273): r0 = socket$inet6(0xa, 0x802, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) close_range(r0, 0xffffffffffffffff, 0x0) 33.345478751s ago: executing program 1 (id=1288): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) 33.345240474s ago: executing program 1 (id=1290): semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f00000002c0), 0x7) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 32.403662414s ago: executing program 1 (id=1298): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a0104000000000000000001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 32.403356469s ago: executing program 1 (id=1301): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc00, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 32.350705914s ago: executing program 1 (id=1303): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 32.190895026s ago: executing program 1 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc00, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 32.174187063s ago: executing program 34 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc00, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 2.620670599s ago: executing program 5 (id=2056): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x5}, 0x8) 2.620607232s ago: executing program 5 (id=2057): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c000049ff08800c000180060006"], 0x34}}, 0xc000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) 2.620505315s ago: executing program 5 (id=2058): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 2.556790374s ago: executing program 5 (id=2059): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_xt={0x34, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xa, 0x6, "0e415d023013"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)='e\a', 0x2) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0xd, 0x8, 0xfffffffc, 0xb6b, 0x4, "aa00003986b9ee6bd231334c1a280d7ea400"}) 2.353296709s ago: executing program 5 (id=2060): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 1.754398118s ago: executing program 6 (id=2067): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040042"], 0x7) 1.61380701s ago: executing program 6 (id=2068): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 1.612475022s ago: executing program 6 (id=2069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 1.612378057s ago: executing program 6 (id=2070): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x3, 0x7ff, 0x200, 0x8001, 0x81, 0x8c, 0x1, 0x9, r2}, 0x20) 760.596453ms ago: executing program 3 (id=2075): r0 = syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x727b, 0x0, 0x800000, 0x15b}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x26c8, 0xe00, 0x1, 0x0, 0x10) 685.517509ms ago: executing program 3 (id=2076): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040042"], 0x7) 685.403465ms ago: executing program 6 (id=2077): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 632.350523ms ago: executing program 6 (id=2078): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0xc, 0x0, 0x0}, 0x0) 585.441753ms ago: executing program 3 (id=2079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 582.623443ms ago: executing program 3 (id=2080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0)) 439.861559ms ago: executing program 3 (id=2082): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) 439.782663ms ago: executing program 3 (id=2083): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc2, 0xbd, 0xb, 0x20, 0x6f8, 0x301b, 0xbb39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0x8f, 0xe7, 0xe2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 343.59143ms ago: executing program 4 (id=2085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a31000000800500050002000000110003"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 343.397487ms ago: executing program 4 (id=2086): socket$rxrpc(0x21, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x98) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 279.840129ms ago: executing program 4 (id=2087): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040042"], 0x7) 172.462004ms ago: executing program 4 (id=2088): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) r2 = dup(r1) r3 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) 87.360349ms ago: executing program 4 (id=2089): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) 87.256505ms ago: executing program 5 (id=2090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@multicast]}) 0s ago: executing program 4 (id=2091): userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 0s ago: executing program 5 (id=2092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x9}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): start: -61 [ 107.909423][ T6016] usb 6-1: can't read configurations, error -61 [ 107.912446][ T6016] usb usb6-port1: unable to enumerate USB device [ 108.001719][ T837] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 108.047371][ T8590] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 108.050615][ T8590] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 108.079946][ T8593] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 108.102765][ T8588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.109522][ T8588] bond1: (slave bond2): making interface the new active one [ 108.113548][ T8588] bond1: (slave bond2): Enslaving as an active interface with an up link [ 108.122164][ T8588] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 108.127388][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.719'. [ 108.131148][ T8588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.152981][ T837] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.156798][ T837] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.161284][ T837] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.165264][ T837] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 108.169871][ T837] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 108.176856][ T837] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.181089][ T837] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.184857][ T837] usb 9-1: Product: syz [ 108.186948][ T837] usb 9-1: Manufacturer: syz [ 108.195530][ T837] cdc_wdm 9-1:1.0: skipping garbage [ 108.197922][ T837] cdc_wdm 9-1:1.0: skipping garbage [ 108.201419][ T837] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 108.204373][ T837] cdc_wdm 9-1:1.0: Unknown control protocol [ 108.398682][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 108.398699][ T40] audit: type=1326 audit(1755809312.778:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.714" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac18ebe9 code=0x7ffc0000 [ 108.408988][ T40] audit: type=1326 audit(1755809312.778:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.714" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac18ebe9 code=0x7ffc0000 [ 108.417562][ T40] audit: type=1326 audit(1755809312.778:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.714" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85ac18ebe9 code=0x7ffc0000 [ 108.427479][ T40] audit: type=1326 audit(1755809312.778:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.714" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac18ebe9 code=0x7ffc0000 [ 108.434688][ T40] audit: type=1326 audit(1755809312.778:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.714" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac18ebe9 code=0x7ffc0000 [ 108.442623][ T40] audit: type=1326 audit(1755809312.778:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.714" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f85ac18ebe9 code=0x7ffc0000 [ 108.450126][ T40] audit: type=1326 audit(1755809312.778:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.714" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac18ebe9 code=0x7ffc0000 [ 108.457974][ T40] audit: type=1326 audit(1755809312.778:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.714" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac18ebe9 code=0x7ffc0000 [ 108.466603][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 108.466621][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 108.466707][ T54] usb 9-1: USB disconnect, device number 3 [ 108.468731][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 108.475013][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 108.477335][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 108.481257][ T40] audit: type=1326 audit(1755809312.778:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.714" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f85ac18ebe9 code=0x7ffc0000 [ 108.489339][ T40] audit: type=1326 audit(1755809312.778:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.714" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac18ebe9 code=0x7ffc0000 [ 108.641435][ T8620] pim6reg1: entered promiscuous mode [ 108.643556][ T8620] pim6reg1: entered allmulticast mode [ 108.647153][ T8620] tmpfs: Unknown parameter 'sTú®#Üi' [ 109.233053][ T8624] netlink: 'syz.4.729': attribute type 10 has an invalid length. [ 109.235805][ T8624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.729'. [ 109.238659][ T8624] dummy0: entered promiscuous mode [ 109.240710][ T8624] bridge0: port 1(dummy0) entered blocking state [ 109.243224][ T8624] bridge0: port 1(dummy0) entered disabled state [ 109.245536][ T8624] dummy0: entered allmulticast mode [ 109.248122][ T8624] bridge0: port 1(dummy0) entered blocking state [ 109.250195][ T8624] bridge0: port 1(dummy0) entered forwarding state [ 109.684190][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.737'. [ 109.688442][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.737'. [ 109.756376][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 109.760130][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.739'. [ 110.403133][ T8697] 9pnet_virtio: no channels available for device syz [ 110.764917][ T8707] syz_tun: mtu less than device minimum [ 110.767317][ T8707] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 110.772343][ T8707] team0: Device hsr_slave_0 failed to register rx_handler [ 110.850898][ T8709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.757'. [ 111.037670][ T8722] syz_tun: left allmulticast mode [ 111.039819][ T8722] syz_tun: left promiscuous mode [ 111.042745][ T8722] bridge0: port 3(syz_tun) entered disabled state [ 111.052424][ T8722] bridge_slave_0: left allmulticast mode [ 111.054840][ T8722] bridge_slave_0: left promiscuous mode [ 111.057258][ T8722] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.062047][ T8722] bridge_slave_1: left allmulticast mode [ 111.063995][ T8722] bridge_slave_1: left promiscuous mode [ 111.065987][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.071255][ T8722] team0: Port device team_slave_0 removed [ 111.075334][ T8722] team0: Port device team_slave_1 removed [ 111.077567][ T8722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.079986][ T8722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.083854][ T8722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.087047][ T8722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.101933][ T8726] team0: Mode changed to "loadbalance" [ 111.106662][ T8725] binder: 8723:8725 ioctl 80089418 200000000280 returned -22 [ 111.260951][ T8732] netlink: 'syz.4.763': attribute type 11 has an invalid length. [ 111.261423][ T8733] netlink: 'syz.4.763': attribute type 11 has an invalid length. [ 111.353365][ T8737] evm: overlay not supported [ 111.476132][ T8750] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 112.028894][ T8777] netlink: 'syz.3.775': attribute type 5 has an invalid length. [ 112.109555][ T8780] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 112.186022][ T8786] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 112.188147][ T8786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.191432][ T8786] vhci_hcd vhci_hcd.0: Device attached [ 112.196680][ T8787] usbip_core: unknown command [ 112.198931][ T8787] vhci_hcd: unknown pdu 67108864 [ 112.201300][ T8787] usbip_core: unknown command [ 112.204956][ T7156] vhci_hcd: stop threads [ 112.207102][ T7156] vhci_hcd: release socket [ 112.208552][ T7156] vhci_hcd: disconnect device [ 112.327934][ T8790] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 112.341895][ T8791] veth3: entered promiscuous mode [ 112.353353][ T8790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.362936][ T8791] vlan3: entered allmulticast mode [ 112.366053][ T8791] bond1: entered allmulticast mode [ 112.441886][ T54] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 112.456848][ T8794] overlayfs: upper fs does not support tmpfile. [ 112.460604][ T8794] __nla_validate_parse: 5 callbacks suppressed [ 112.460620][ T8794] netlink: 340 bytes leftover after parsing attributes in process `syz.4.781'. [ 112.622828][ T54] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 112.625511][ T54] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.628805][ T54] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.634100][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 112.639268][ T54] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.642909][ T54] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.645590][ T54] usb 8-1: Product: syz [ 112.646993][ T54] usb 8-1: Manufacturer: syz [ 112.648519][ T54] usb 8-1: SerialNumber: syz [ 112.650932][ T54] usb 8-1: config 0 descriptor?? [ 112.653952][ T54] hub 8-1:0.0: bad descriptor, ignoring hub [ 112.655942][ T54] hub 8-1:0.0: probe with driver hub failed with error -5 [ 112.663646][ T54] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 112.674108][ T6271] udevd[6271]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.716464][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.785'. [ 112.733633][ T5974] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 112.899884][ T8823] Failed to get privilege flags for destination (handle=0x2:0x7ff) [ 112.981802][ T837] usb 8-1: USB disconnect, device number 16 [ 128.269325][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'. [ 128.279196][ T8831] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 128.280899][ T8826] ALSA: seq fatal error: cannot create timer (-19) [ 128.288021][ T8831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.295258][ T8832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.792'. [ 128.302199][ T8832] overlayfs: invalid origin (0000) [ 128.338804][ T8846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.351151][ T8850] binder: 8848:8850 ioctl c018620c 200000000240 returned -22 [ 128.354223][ T8850] dlm: plock device version mismatch: kernel (1.2.0), user (808482864.808464432.808464432) [ 128.395495][ T8847] netlink: 'syz.3.798': attribute type 10 has an invalid length. [ 128.541822][ T3244] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 128.634164][ T8858] sp0: Synchronizing with TNC [ 128.662293][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 128.662306][ T40] audit: type=1400 audit(1755809333.048:1429): avc: denied { write } for pid=8862 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 128.690457][ T40] audit: type=1400 audit(1755809333.068:1430): avc: denied { map } for pid=8864 comm="syz.3.805" path="socket:[27777]" dev="sockfs" ino=27777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 128.704004][ T3244] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 128.706758][ T3244] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 128.710491][ T3244] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.714898][ T3244] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.717432][ T8867] netlink: 'syz.3.806': attribute type 64 has an invalid length. [ 128.717876][ T3244] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.717891][ T3244] usb 9-1: Product: syz [ 128.717898][ T3244] usb 9-1: Manufacturer: syz [ 128.717906][ T3244] usb 9-1: SerialNumber: syz [ 128.720447][ T8867] netlink: 'syz.3.806': attribute type 4 has an invalid length. [ 128.724229][ T3244] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 128.724482][ T8867] netlink: 152 bytes leftover after parsing attributes in process `syz.3.806'. [ 128.725932][ T3244] usb 9-1: no configuration chosen from 1 choice [ 128.759711][ T8870] netlink: 'syz.3.807': attribute type 10 has an invalid length. [ 128.764725][ T8870] team0: Port device dummy0 added [ 128.867666][ T8874] 9pnet_fd: p9_fd_create_unix (8874): problem connecting socket: ./file0: -111 [ 129.088115][ T8891] netlink: 'syz.3.814': attribute type 4 has an invalid length. [ 129.090734][ T8891] netlink: 17 bytes leftover after parsing attributes in process `syz.3.814'. [ 130.462762][ T8911] block nbd3: shutting down sockets [ 130.565095][ T40] audit: type=1400 audit(1755809334.948:1431): avc: denied { bind } for pid=8939 comm="syz.0.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 130.565588][ T8940] netlink: 'syz.0.830': attribute type 6 has an invalid length. [ 130.604594][ T8944] can0: slcan on ptm0. [ 130.672458][ T8943] can0 (unregistered): slcan off ptm0. [ 130.697057][ T8955] program syz.0.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.708409][ T8953] netlink: 108 bytes leftover after parsing attributes in process `syz.3.835'. [ 130.749877][ T8959] binder: BC_ATTEMPT_ACQUIRE not supported [ 130.751889][ T8959] binder: 8958:8959 ioctl c0306201 200000000180 returned -22 [ 130.764149][ T8964] syzkaller1: entered promiscuous mode [ 130.766036][ T8964] syzkaller1: entered allmulticast mode [ 130.772832][ T40] audit: type=1400 audit(1755809335.158:1432): avc: denied { validate_trans } for pid=8963 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 130.779768][ T40] audit: type=1400 audit(1755809335.168:1433): avc: denied { map } for pid=8963 comm="syz.3.839" path="socket:[28993]" dev="sockfs" ino=28993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.787674][ T40] audit: type=1400 audit(1755809335.168:1434): avc: denied { read write } for pid=8963 comm="syz.3.839" path="socket:[28993]" dev="sockfs" ino=28993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.889900][ T8969] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.841'. [ 130.919739][ T8972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.940246][ T8974] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 130.942472][ T8974] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 130.946230][ T8974] vhci_hcd vhci_hcd.0: Device attached [ 130.949571][ T8974] vhci_hcd vhci_hcd.0: port 0 already used [ 130.951774][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 130.961198][ T8976] vhci_hcd: connection closed [ 130.961434][ T7833] vhci_hcd: stop threads [ 130.964533][ T7833] vhci_hcd: release socket [ 130.965987][ T7833] vhci_hcd: disconnect device [ 131.322831][ T3244] usb 9-1: USB disconnect, device number 4 [ 131.342602][ T40] audit: type=1400 audit(1755809335.692:1435): avc: denied { mount } for pid=8993 comm="syz.4.848" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 131.351524][ T40] audit: type=1400 audit(1755809335.692:1436): avc: denied { unmount } for pid=8993 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 131.406407][ T9000] netlink: 'syz.4.851': attribute type 4 has an invalid length. [ 131.407488][ T8998] rtc_cmos 00:05: Alarms can be up to one day in the future [ 131.414300][ T8998] overlay: Unknown parameter 'subj_user' [ 131.419325][ T8998] sp0: Synchronizing with TNC [ 131.437834][ T9004] netlink: 'syz.4.852': attribute type 8 has an invalid length. [ 131.475673][ T9004] "syz.4.852" (9004) uses obsolete ecb(arc4) skcipher [ 131.479091][ T40] audit: type=1400 audit(1755809335.823:1437): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 131.491423][ T40] audit: type=1400 audit(1755809335.832:1438): avc: denied { setopt } for pid=9003 comm="syz.4.852" lport=33206 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 131.521572][ T9011] 9pnet_virtio: no channels available for device syz [ 131.819199][ T3244] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 131.840579][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 131.980203][ T3244] usb 9-1: Using ep0 maxpacket: 8 [ 131.983604][ T3244] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.986825][ T3244] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.992695][ T3244] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.995985][ T3244] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.000231][ T3244] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.004035][ T3244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.013067][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 132.018967][ T24] usb 8-1: config 0 has an invalid interface number: 247 but max is 0 [ 132.022613][ T24] usb 8-1: config 0 has no interface number 0 [ 132.026797][ T24] usb 8-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 132.030560][ T24] usb 8-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 132.034173][ T24] usb 8-1: Product: syz [ 132.035967][ T24] usb 8-1: Manufacturer: syz [ 132.039128][ T24] usb 8-1: config 0 descriptor?? [ 132.040070][ T9032] netlink: 'syz.0.860': attribute type 5 has an invalid length. [ 132.050204][ T9032] ip6erspan0: entered promiscuous mode [ 132.224325][ T3244] usb 9-1: GET_CAPABILITIES returned 0 [ 132.226649][ T3244] usbtmc 9-1:16.0: can't read capabilities [ 132.261152][ T9017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.264649][ T9017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.507298][ T9039] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP) [ 132.513331][ T9039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.856'. [ 133.041294][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 133.103625][ T3244] Process accounting resumed [ 133.132082][ T9051] netlink: 'syz.0.866': attribute type 1 has an invalid length. [ 133.141387][ T9051] bond3: entered promiscuous mode [ 133.143221][ T9051] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.148767][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 133.411113][ T6029] usb 8-1: USB disconnect, device number 17 [ 133.446614][ T34] usb 9-1: USB disconnect, device number 5 [ 133.777388][ T9056] FAULT_INJECTION: forcing a failure. [ 133.777388][ T9056] name failslab, interval 1, probability 0, space 0, times 1 [ 133.782242][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.1.867 Not tainted syzkaller #0 PREEMPT(full) [ 133.782264][ T9056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.782274][ T9056] Call Trace: [ 133.782280][ T9056] [ 133.782287][ T9056] dump_stack_lvl+0x16c/0x1f0 [ 133.782330][ T9056] should_fail_ex+0x512/0x640 [ 133.782359][ T9056] should_failslab+0xc2/0x120 [ 133.782380][ T9056] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 133.782396][ T9056] ? getname_flags.part.0+0x4c/0x550 [ 133.782420][ T9056] getname_flags.part.0+0x4c/0x550 [ 133.782443][ T9056] getname_flags+0x93/0xf0 [ 133.782459][ T9056] do_sys_openat2+0xb8/0x1d0 [ 133.782487][ T9056] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.782508][ T9056] ? __fget_files+0x20e/0x3c0 [ 133.782527][ T9056] __x64_sys_openat+0x174/0x210 [ 133.782550][ T9056] ? __pfx___x64_sys_openat+0x10/0x10 [ 133.782574][ T9056] ? ksys_write+0x1ac/0x250 [ 133.782596][ T9056] do_syscall_64+0xcd/0x4c0 [ 133.782616][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.782633][ T9056] RIP: 0033:0x7f068958d550 [ 133.782647][ T9056] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 133.782666][ T9056] RSP: 002b:00007f068a3a0b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 133.782691][ T9056] RAX: ffffffffffffffda RBX: 000000000014b002 RCX: 00007f068958d550 [ 133.782701][ T9056] RDX: 000000000014b002 RSI: 00007f068a3a0c10 RDI: 00000000ffffff9c [ 133.782711][ T9056] RBP: 00007f068a3a0c10 R08: 0000000000000000 R09: 002367732f766564 [ 133.782721][ T9056] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 133.782731][ T9056] R13: 00007f06897b6038 R14: 00007f06897b5fa0 R15: 00007ffc686fc928 [ 133.782746][ T9056] [ 133.870371][ T9059] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 133.873474][ T9059] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 133.878685][ T34] hid-generic 0005:046D:0009.0008: unknown main item tag 0x0 [ 133.882982][ T34] hid-generic 0005:046D:0009.0008: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 133.887691][ T9059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.918756][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.869'. [ 133.922862][ T9067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.969386][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 133.969398][ T40] audit: type=1400 audit(1755809338.152:1444): avc: denied { execute } for pid=9069 comm="syz.3.870" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=29704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 133.983141][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.871'. [ 134.010721][ T9077] 9pnet_virtio: no channels available for device syz [ 134.050634][ T9082] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 100 [ 134.051622][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 134.075659][ T9088] FAULT_INJECTION: forcing a failure. [ 134.075659][ T9088] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.082275][ T9088] CPU: 1 UID: 0 PID: 9088 Comm: syz.1.876 Not tainted syzkaller #0 PREEMPT(full) [ 134.082292][ T9088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.082299][ T9088] Call Trace: [ 134.082303][ T9088] [ 134.082307][ T9088] dump_stack_lvl+0x16c/0x1f0 [ 134.082322][ T9088] should_fail_ex+0x512/0x640 [ 134.082336][ T9088] strncpy_from_user+0x3b/0x2e0 [ 134.082348][ T9088] getname_flags.part.0+0x8f/0x550 [ 134.082365][ T9088] getname_flags+0x93/0xf0 [ 134.082376][ T9088] do_sys_openat2+0xb8/0x1d0 [ 134.082391][ T9088] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.082406][ T9088] ? __fget_files+0x20e/0x3c0 [ 134.082419][ T9088] __x64_sys_openat+0x174/0x210 [ 134.082434][ T9088] ? __pfx___x64_sys_openat+0x10/0x10 [ 134.082449][ T9088] ? ksys_write+0x1ac/0x250 [ 134.082462][ T9088] do_syscall_64+0xcd/0x4c0 [ 134.082477][ T9088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.082488][ T9088] RIP: 0033:0x7f068958d550 [ 134.082497][ T9088] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 134.082508][ T9088] RSP: 002b:00007f068a3a0b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 134.082522][ T9088] RAX: ffffffffffffffda RBX: 000000000014b002 RCX: 00007f068958d550 [ 134.082529][ T9088] RDX: 000000000014b002 RSI: 00007f068a3a0c10 RDI: 00000000ffffff9c [ 134.082536][ T9088] RBP: 00007f068a3a0c10 R08: 0000000000000000 R09: 002367732f766564 [ 134.082543][ T9088] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 134.082553][ T9088] R13: 00007f06897b6038 R14: 00007f06897b5fa0 R15: 00007ffc686fc928 [ 134.082565][ T9088] [ 134.082860][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.877'. [ 134.125692][ T9097] rtc_cmos 00:05: Alarms can be up to one day in the future [ 134.127680][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 134.194742][ T9104] netlink: 'syz.0.882': attribute type 9 has an invalid length. [ 134.228617][ T9113] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 134.232342][ T9115] cgroup: subsys name conflicts with all [ 134.234430][ T9113] netlink: 76 bytes leftover after parsing attributes in process `syz.1.884'. [ 134.242159][ T9113] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 134.335860][ T9131] FAULT_INJECTION: forcing a failure. [ 134.335860][ T9131] name failslab, interval 1, probability 0, space 0, times 0 [ 134.340730][ T9131] CPU: 1 UID: 0 PID: 9131 Comm: syz.0.887 Not tainted syzkaller #0 PREEMPT(full) [ 134.340749][ T9131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.340756][ T9131] Call Trace: [ 134.340760][ T9131] [ 134.340765][ T9131] dump_stack_lvl+0x16c/0x1f0 [ 134.340782][ T9131] should_fail_ex+0x512/0x640 [ 134.340796][ T9131] should_failslab+0xc2/0x120 [ 134.340811][ T9131] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 134.340823][ T9131] ? alloc_empty_file+0x55/0x1e0 [ 134.340840][ T9131] alloc_empty_file+0x55/0x1e0 [ 134.340855][ T9131] path_openat+0xda/0x2cb0 [ 134.340867][ T9131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.340881][ T9131] ? __pfx_path_openat+0x10/0x10 [ 134.340894][ T9131] do_filp_open+0x20b/0x470 [ 134.340906][ T9131] ? __pfx_do_filp_open+0x10/0x10 [ 134.340923][ T9131] ? alloc_fd+0x471/0x7d0 [ 134.340936][ T9131] do_sys_openat2+0x11b/0x1d0 [ 134.340951][ T9131] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.340967][ T9131] ? __fget_files+0x20e/0x3c0 [ 134.340980][ T9131] __x64_sys_openat+0x174/0x210 [ 134.340995][ T9131] ? __pfx___x64_sys_openat+0x10/0x10 [ 134.341011][ T9131] ? ksys_write+0x1ac/0x250 [ 134.341023][ T9131] do_syscall_64+0xcd/0x4c0 [ 134.341036][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.341047][ T9131] RIP: 0033:0x7f4b5118d550 [ 134.341057][ T9131] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 134.341068][ T9131] RSP: 002b:00007f4b51fc8b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 134.341080][ T9131] RAX: ffffffffffffffda RBX: 000000000014b002 RCX: 00007f4b5118d550 [ 134.341087][ T9131] RDX: 000000000014b002 RSI: 00007f4b51fc8c10 RDI: 00000000ffffff9c [ 134.341094][ T9131] RBP: 00007f4b51fc8c10 R08: 0000000000000000 R09: 002367732f766564 [ 134.341101][ T9131] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 134.341107][ T9131] R13: 00007f4b513b6038 R14: 00007f4b513b5fa0 R15: 00007ffeb0222ba8 [ 134.341117][ T9131] [ 134.443532][ T40] audit: type=1400 audit(1755809338.592:1445): avc: denied { accept } for pid=9134 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.445126][ T9135] tipc: Enabling of bearer rejected, failed to enable media [ 134.632887][ T9156] netlink: 'syz.0.892': attribute type 39 has an invalid length. [ 134.641461][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 134.718703][ T40] audit: type=1400 audit(1755809338.854:1446): avc: denied { accept } for pid=9147 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 134.813985][ T24] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 134.817589][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.834824][ T24] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 134.838843][ T24] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 134.842393][ T24] usb 6-1: Manufacturer: syz [ 134.845646][ T24] usb 6-1: config 0 descriptor?? [ 134.898240][ T24] rc_core: IR keymap rc-hauppauge not found [ 134.902119][ T24] Registered IR keymap rc-empty [ 134.904679][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 134.920150][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 135.066585][ T54] usb 6-1: USB disconnect, device number 18 [ 135.659741][ T9176] netlink: 'syz.1.896': attribute type 64 has an invalid length. [ 135.662737][ T9176] netlink: 'syz.1.896': attribute type 4 has an invalid length. [ 135.666072][ T9176] netlink: 152 bytes leftover after parsing attributes in process `syz.1.896'. [ 135.684991][ T9176] netlink: 128 bytes leftover after parsing attributes in process `syz.1.896'. [ 135.687925][ T9176] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 135.707863][ T9179] netlink: 'syz.4.897': attribute type 9 has an invalid length. [ 135.835343][ T9188] mkiss: ax0: crc mode is auto. [ 135.851907][ T9191] autofs: Bad value for 'fd' [ 135.855698][ T40] audit: type=1400 audit(1755809339.911:1447): avc: denied { mount } for pid=9184 comm="syz.0.900" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 135.856589][ T9191] program syz.0.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.892385][ T9185] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 135.895215][ T9189] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.901983][ T9189] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 135.909182][ T40] audit: type=1400 audit(1755809339.967:1448): avc: denied { unmount } for pid=5973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 135.979526][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 135.992153][ T9209] 9pnet_virtio: no channels available for device syz [ 136.084576][ T9217] netlink: 'syz.1.907': attribute type 6 has an invalid length. [ 136.122027][ T40] audit: type=1326 audit(1755809340.163:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.4.909" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85ac18ebe9 code=0x0 [ 136.142393][ T9226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.162824][ T9227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.907'. [ 136.227371][ T9234] 9pnet_virtio: no channels available for device syz [ 136.279829][ T9239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9239 comm=syz.1.907 [ 136.305080][ T40] audit: type=1326 audit(1755809340.332:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.0.915" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b5118ebe9 code=0x0 [ 136.443193][ T40] audit: type=1400 audit(1755809340.463:1451): avc: denied { mounton } for pid=9245 comm="syz.4.917" path="/183/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 136.443222][ T9247] tmpfs: Bad value for 'mpol' [ 136.472339][ T40] audit: type=1400 audit(1755809340.491:1452): avc: denied { watch_mount } for pid=9248 comm="syz.4.918" path="/184" dev="tmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.505951][ T40] audit: type=1400 audit(1755809340.519:1453): avc: denied { compute_member } for pid=9252 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 136.727373][ T9265] ntfs3(sr0): Primary boot signature is not NTFS. [ 136.729605][ T9265] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 137.115185][ T9273] block nbd1: shutting down sockets [ 137.132568][ T9282] block nbd1: Device being setup by another task [ 137.395848][ T9296] overlayfs: conflicting lowerdir path [ 138.108274][ T5974] Bluetooth: hci0: command 0x0406 tx timeout [ 138.791179][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.793982][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.718571][ T9365] input: syz1 as /devices/virtual/input/input18 [ 139.789763][ T9363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.956'. [ 140.020144][ T9371] veth0_to_bridge: left allmulticast mode [ 140.022176][ T9371] veth0_to_bridge: left promiscuous mode [ 140.024405][ T9371] bridge0: port 3(veth0_to_bridge) entered disabled state [ 140.028051][ T9371] bridge_slave_0: left allmulticast mode [ 140.030140][ T9371] bridge_slave_0: left promiscuous mode [ 140.032193][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.036865][ T9371] bridge_slave_1: left allmulticast mode [ 140.038810][ T9371] bridge_slave_1: left promiscuous mode [ 140.041029][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.046971][ T9371] bond0: (slave bond_slave_0): Releasing backup interface [ 140.050946][ T9371] bond0: (slave bond_slave_1): Releasing backup interface [ 140.057784][ T9371] team0: Port device team_slave_0 removed [ 140.061336][ T9371] team0: Port device team_slave_1 removed [ 140.064184][ T9371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.067089][ T9371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.076588][ T9371] vlan0: entered promiscuous mode [ 140.109840][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 140.109853][ T40] audit: type=1400 audit(1755809343.896:1456): avc: denied { connect } for pid=9372 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 140.134057][ T40] audit: type=1400 audit(1755809343.914:1457): avc: denied { mount } for pid=9374 comm="syz.1.960" name="/" dev="rpc_pipefs" ino=30134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 140.339711][ T5974] Bluetooth: hci0: command 0x0406 tx timeout [ 140.548706][ T40] audit: type=1400 audit(1755809344.307:1458): avc: denied { read } for pid=9388 comm="syz.3.966" lport=54269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.652499][ T9396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.969'. [ 140.656274][ T9396] netlink: 36 bytes leftover after parsing attributes in process `syz.3.969'. [ 140.864633][ T9406] random: crng reseeded on system resumption [ 140.874159][ T40] audit: type=1400 audit(1755809344.606:1459): avc: denied { write } for pid=9399 comm="syz.3.971" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 141.226939][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 141.623338][ T9428] netlink: 'syz.3.980': attribute type 8 has an invalid length. [ 141.987698][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 142.240384][ T40] audit: type=1400 audit(1755809345.879:1460): avc: denied { watch_sb watch_reads } for pid=9453 comm="syz.0.990" path="/255/file0" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.614091][ T9465] input: syz1 as /devices/virtual/input/input19 [ 142.680570][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.994'. [ 143.356971][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 143.419116][ T54] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 143.443796][ T9483] fido_id[9483]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.444099][ T9485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1001'. [ 144.350307][ T9448] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 144.504511][ T40] audit: type=1400 audit(1755809348.002:1461): avc: denied { bind } for pid=9518 comm="syz.0.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 144.804075][ T9534] netlink: 'syz.0.1022': attribute type 10 has an invalid length. [ 145.310848][ T6016] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 145.471122][ T6016] usb 6-1: Using ep0 maxpacket: 16 [ 145.473993][ T6016] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 145.476503][ T6016] usb 6-1: config 0 has no interface number 0 [ 145.478445][ T6016] usb 6-1: config 0 interface 48 has no altsetting 0 [ 145.482302][ T6016] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 145.485201][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.487716][ T6016] usb 6-1: Product: syz [ 145.489064][ T6016] usb 6-1: Manufacturer: syz [ 145.490634][ T6016] usb 6-1: SerialNumber: syz [ 145.492882][ T6016] usb 6-1: config 0 descriptor?? [ 145.710274][ T6016] usb 6-1: USB disconnect, device number 19 [ 145.817055][ T9564] netlink: 'syz.0.1033': attribute type 8 has an invalid length. [ 146.140470][ T9575] input: syz1 as /devices/virtual/input/input20 [ 146.190712][ T9574] debugfs: 'ttyS3' already exists in 'caif_serial' [ 146.890914][ T9610] netlink: 'syz.0.1043': attribute type 8 has an invalid length. [ 146.917657][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 147.427813][ T9559] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 148.023372][ T9636] netlink: 'syz.0.1053': attribute type 8 has an invalid length. [ 148.322092][ T9660] netlink: 'syz.1.1064': attribute type 8 has an invalid length. [ 148.445218][ T40] audit: type=1400 audit(1755809351.697:1462): avc: denied { map } for pid=9669 comm="syz.1.1069" path="socket:[30376]" dev="sockfs" ino=30376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.106990][ T9682] netlink: 'syz.3.1073': attribute type 10 has an invalid length. [ 149.160839][ T9654] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 149.239247][ T9696] input: syz1 as /devices/virtual/input/input21 [ 149.640447][ T6029] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 149.800767][ T6029] usb 6-1: Using ep0 maxpacket: 32 [ 149.804095][ T6029] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 149.806738][ T6029] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 149.809350][ T6029] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 149.812459][ T6029] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.815721][ T6029] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 149.819049][ T6029] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.823201][ T6029] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 149.826098][ T6029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.829718][ T6029] usb 6-1: config 0 descriptor?? [ 150.049340][ T6029] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 150.054521][ T6029] usb 6-1: USB disconnect, device number 20 [ 150.057679][ T6029] usblp0: removed [ 150.238528][ T9715] syzkaller1: entered promiscuous mode [ 150.240513][ T9715] syzkaller1: entered allmulticast mode [ 150.392233][ T40] audit: type=1400 audit(1755809353.511:1463): avc: denied { watch watch_reads } for pid=9720 comm="syz.4.1090" path="/sys/power/sync_on_suspend" dev="sysfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 150.581243][ T6029] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 150.841688][ T9710] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 150.891589][ T6029] usb 6-1: Using ep0 maxpacket: 32 [ 150.895029][ T6029] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 150.898043][ T6029] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 150.901442][ T6029] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 150.904747][ T6029] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.907884][ T6029] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.911313][ T6029] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 150.916785][ T6029] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 150.920099][ T6029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.924310][ T6029] usb 6-1: config 0 descriptor?? [ 151.142375][ T9703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.145422][ T9703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.153149][ T6029] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 151.364839][ T40] audit: type=1400 audit(1755809354.419:1464): avc: denied { read write } for pid=9702 comm="syz.1.1082" name="lp0" dev="devtmpfs" ino=3222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 151.372676][ T40] audit: type=1400 audit(1755809354.419:1465): avc: denied { open } for pid=9702 comm="syz.1.1082" path="/dev/usb/lp0" dev="devtmpfs" ino=3222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 151.427128][ C2] usblp0: nonzero read bulk status received: -71 [ 151.427517][ T6016] usb 6-1: USB disconnect, device number 21 [ 151.917706][ T54] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 152.060189][ T9768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1106'. [ 152.063260][ T9768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1106'. [ 152.088616][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 152.092425][ T54] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 152.095661][ T54] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 152.098434][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 152.101892][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.105684][ T54] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.109109][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.114724][ T54] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 152.117719][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.121346][ T54] usb 6-1: config 0 descriptor?? [ 152.341140][ T54] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 152.758490][ T40] audit: type=1400 audit(1755809355.719:1466): avc: denied { read } for pid=9778 comm="syz.3.1111" lport=40023 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 153.421997][ T9703] usblp0: removed [ 153.423967][ T6039] usb 6-1: USB disconnect, device number 22 [ 153.427666][ T6039] usblp0: removed [ 153.933463][ T9818] loop2: detected capacity change from 0 to 7 [ 153.936456][ T9818] Dev loop2: unable to read RDB block 7 [ 153.939110][ T9818] loop2: AHDI p2 [ 153.940344][ T9818] loop2: partition table partially beyond EOD, truncated [ 155.374202][ T40] audit: type=1400 audit(1755809358.170:1467): avc: denied { relabelfrom } for pid=9853 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 155.384185][ T40] audit: type=1400 audit(1755809358.170:1468): avc: denied { relabelto } for pid=9853 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 155.644787][ T5974] Bluetooth: hci0: unexpected event for opcode 0x202d [ 156.317492][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1145'. [ 156.368350][ T9884] netlink: 'syz.3.1147': attribute type 36 has an invalid length. [ 156.398278][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 156.470113][ T9893] netlink: 'syz.0.1151': attribute type 4 has an invalid length. [ 156.473880][ T9893] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1151'. [ 157.388283][ T40] audit: type=1400 audit(1755809360.050:1469): avc: denied { bind } for pid=9911 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.396551][ T40] audit: type=1400 audit(1755809360.050:1470): avc: denied { accept } for pid=9911 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.692919][ T9859] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 158.305778][ T34] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 158.364827][ T34] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 158.388401][ T9960] fido_id[9960]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.411853][ T9973] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 160.459348][T10033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1202'. [ 160.718167][ T40] audit: type=1400 audit(1755809363.174:1471): avc: denied { connect } for pid=10035 comm="syz.0.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.725554][ T40] audit: type=1400 audit(1755809363.174:1472): avc: denied { watch } for pid=10035 comm="syz.0.1203" path="/325/file0" dev="tmpfs" ino=1741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.298471][T10029] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 162.064427][ T40] audit: type=1400 audit(1755809364.437:1473): avc: denied { name_connect } for pid=10092 comm="syz.3.1223" dest=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 162.490116][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 163.023108][T10098] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 163.850083][ T6016] hid-generic 000B:0002:0009.000B: reserved main item tag 0xd [ 163.854767][ T6016] hid-generic 000B:0002:0009.000B: hidraw1: HID v100.01 Device [syz1] on syz1 [ 163.892198][T10144] fido_id[10144]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.106513][ T40] audit: type=1326 audit(1755809366.345:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.3.1245" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fb18ebe9 code=0x7ffc0000 [ 164.113021][ T40] audit: type=1326 audit(1755809366.345:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.3.1245" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fb18ebe9 code=0x7ffc0000 [ 164.119677][ T40] audit: type=1326 audit(1755809366.345:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.3.1245" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f05fb18ebe9 code=0x7ffc0000 [ 164.126191][ T40] audit: type=1400 audit(1755809366.345:1477): avc: denied { mounton } for pid=10151 comm="syz.3.1245" path="/proc/908/cgroup" dev="proc" ino=33911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 164.135627][ T40] audit: type=1326 audit(1755809366.345:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.3.1245" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fb18ebe9 code=0x7ffc0000 [ 164.145131][ T40] audit: type=1326 audit(1755809366.345:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.3.1245" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fb18ebe9 code=0x7ffc0000 [ 164.154822][ T40] audit: type=1326 audit(1755809366.345:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.3.1245" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f05fb18ebe9 code=0x7ffc0000 [ 164.164575][ T40] audit: type=1400 audit(1755809366.345:1481): avc: denied { remount } for pid=10151 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 164.173115][ T40] audit: type=1326 audit(1755809366.345:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10151 comm="syz.3.1245" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fb18ebe9 code=0x7ffc0000 [ 164.844929][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 166.082688][T10146] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 166.094171][T10194] input: syz1 as /devices/virtual/input/input27 [ 166.762035][T10216] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1268'. [ 167.218525][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.220922][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.224086][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.229426][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.231052][T10242] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1281'. [ 167.232708][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.312736][T10239] chnl_net:caif_netlink_parms(): no params data found [ 167.359706][T10239] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.362627][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.366728][T10239] bridge_slave_0: entered allmulticast mode [ 167.369366][T10239] bridge_slave_0: entered promiscuous mode [ 167.372041][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.374488][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.378599][T10239] bridge_slave_1: entered allmulticast mode [ 167.381259][T10239] bridge_slave_1: entered promiscuous mode [ 167.849635][T10239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.853706][T10239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.267554][T10283] openvswitch: netlink: IPv4 tun info is not correct [ 168.299142][T10239] team0: Port device team_slave_0 added [ 168.301766][T10239] team0: Port device team_slave_1 added [ 168.329047][T10239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.331028][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.342146][T10239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.346055][T10239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.348057][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.357294][T10239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.391591][T10239] hsr_slave_0: entered promiscuous mode [ 168.393619][T10239] hsr_slave_1: entered promiscuous mode [ 168.395378][T10239] debugfs: 'hsr0' already exists in 'hsr' [ 168.396994][T10239] Cannot create hsr debugfs directory [ 168.398328][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 168.446753][T10300] netlink: 'syz.4.1307': attribute type 29 has an invalid length. [ 168.450747][T10300] netlink: 'syz.4.1307': attribute type 29 has an invalid length. [ 168.453297][T10300] netlink: 'syz.4.1307': attribute type 29 has an invalid length. [ 168.457705][T10300] netlink: 'syz.4.1307': attribute type 29 has an invalid length. [ 168.465106][T10239] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.469202][T10239] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.472531][T10239] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.475927][T10239] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.509572][T10239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.517250][T10239] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.523278][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.526260][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.533205][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.535279][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.607841][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.610676][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.613006][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.615400][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.617669][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.618275][T10239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.674065][T10320] chnl_net:caif_netlink_parms(): no params data found [ 168.708104][T10320] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.710182][T10320] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.712249][T10320] bridge_slave_0: entered allmulticast mode [ 168.714694][T10320] bridge_slave_0: entered promiscuous mode [ 168.717040][T10320] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.719042][T10320] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.721067][T10320] bridge_slave_1: entered allmulticast mode [ 168.723186][T10320] bridge_slave_1: entered promiscuous mode [ 168.742542][T10320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.747895][T10320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.769269][T10320] team0: Port device team_slave_0 added [ 168.773159][T10320] team0: Port device team_slave_1 added [ 168.793066][T10320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.795321][T10320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.803676][T10320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.808072][T10320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.810682][T10320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.818410][T10320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.852681][T10320] hsr_slave_0: entered promiscuous mode [ 168.854801][T10320] hsr_slave_1: entered promiscuous mode [ 168.856754][T10320] debugfs: 'hsr0' already exists in 'hsr' [ 168.858557][T10320] Cannot create hsr debugfs directory [ 168.875450][T10239] veth0_vlan: entered promiscuous mode [ 169.046199][ T7832] bond0 (unregistering): Released all slaves [ 169.051303][ T7832] bond1 (unregistering): Released all slaves [ 169.057108][ T7832] bond2 (unregistering): Released all slaves [ 169.083045][T10239] veth1_vlan: entered promiscuous mode [ 169.107012][T10239] veth0_macvtap: entered promiscuous mode [ 169.111170][T10239] veth1_macvtap: entered promiscuous mode [ 169.124979][T10239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.130995][ T7832] tipc: Disabling bearer [ 169.133465][ T7832] tipc: Left network mode [ 169.135516][T10239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.143696][T10320] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 169.147224][ T7831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.150414][ T7831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.153851][T10320] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 169.157988][ T7831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.160774][ T7831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.164725][T10320] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 169.169313][T10320] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 169.194968][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.197757][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.213758][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.216998][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.228008][T10320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.229840][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 169.229853][ T40] audit: type=1400 audit(1755809371.134:1485): avc: denied { mounton } for pid=10239 comm="syz-executor" path="/syzkaller.M8m5LA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 169.243337][ T40] audit: type=1400 audit(1755809371.144:1486): avc: denied { mount } for pid=10239 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 169.245024][T10320] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.261039][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.263283][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.271504][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.274349][ T7833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.288124][T10351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1321'. [ 169.293297][T10351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1321'. [ 169.306290][ T7832] hsr_slave_0: left promiscuous mode [ 169.308414][ T7832] hsr_slave_1: left promiscuous mode [ 169.410050][ T5974] Bluetooth: hci3: command tx timeout [ 169.426879][T10320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.522516][T10320] veth0_vlan: entered promiscuous mode [ 169.527036][T10320] veth1_vlan: entered promiscuous mode [ 169.536677][T10320] veth0_macvtap: entered promiscuous mode [ 169.540079][T10320] veth1_macvtap: entered promiscuous mode [ 169.546085][T10320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.552052][T10320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.556813][ T1149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.561074][ T1149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.563779][ T1149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.566808][ T1149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.587409][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.590458][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.599197][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.602734][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.660959][T10394] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1314'. [ 169.702546][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1324'. [ 169.705917][T10390] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1324'. [ 169.709902][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1324'. [ 169.813476][T10414] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1328'. [ 169.817265][T10414] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1328'. [ 170.021273][T10459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1349'. [ 170.023114][ T40] audit: type=1400 audit(1755809371.873:1487): avc: denied { nlmsg_read } for pid=10457 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.114770][T10479] input: syz1 as /devices/virtual/input/input28 [ 170.623232][T10527] openvswitch: netlink: Missing valid actions attribute. [ 170.625681][T10527] openvswitch: netlink: Actions may not be safe on all matching packets [ 170.775821][ T5974] Bluetooth: hci2: command tx timeout [ 170.970985][ T40] audit: type=1400 audit(1755809372.762:1488): avc: denied { unmount } for pid=7194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 171.045418][T10579] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 171.046677][T10578] netlink: 'syz.6.1401': attribute type 10 has an invalid length. [ 171.048560][T10579] veth0_vlan: entered allmulticast mode [ 171.054156][T10579] bridge0: port 1(veth0_vlan) entered blocking state [ 171.057010][T10579] bridge0: port 1(veth0_vlan) entered disabled state [ 171.061335][T10579] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 171.072473][T10578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.077065][T10578] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 171.111941][T10589] input: syz1 as /devices/virtual/input/input29 [ 171.178698][T10603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.278294][T10622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=3 sclass=netlink_tcpdiag_socket pid=10622 comm=syz.3.1421 [ 171.332397][T10632] netlink: 'syz.4.1426': attribute type 4 has an invalid length. [ 171.335166][T10632] netlink: 'syz.4.1426': attribute type 11 has an invalid length. [ 171.337661][T10632] netlink: 'syz.4.1426': attribute type 1 has an invalid length. [ 171.340169][T10632] netlink: 'syz.4.1426': attribute type 6 has an invalid length. [ 171.394465][T10646] Illegal XDP return value 661749760 on prog (id 141) dev N/A, expect packet loss! [ 171.460163][T10348] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 171.631436][ T5974] Bluetooth: hci3: command tx timeout [ 171.667800][ T40] audit: type=1400 audit(1755809373.417:1489): avc: denied { ioctl } for pid=10652 comm="syz.3.1436" path="socket:[36058]" dev="sockfs" ino=36058 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.568924][ T40] audit: type=1400 audit(1755809374.249:1490): avc: denied { remount } for pid=10757 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 172.999781][ T5974] Bluetooth: hci2: command tx timeout [ 173.016279][ T40] audit: type=1400 audit(1755809374.670:1491): avc: denied { map } for pid=10843 comm="syz.4.1526" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 173.116985][ T6048] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 173.261898][ T40] audit: type=1326 audit(1755809374.904:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.5.1536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19ed8ebe9 code=0x7ffc0000 [ 173.269985][ T40] audit: type=1326 audit(1755809374.904:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.5.1536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19ed8ebe9 code=0x7ffc0000 [ 173.279244][ T40] audit: type=1326 audit(1755809374.904:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10865 comm="syz.5.1536" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe19ed8ebe9 code=0x7ffc0000 [ 173.300456][ T6048] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.303648][ T6048] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 173.307434][ T6048] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 173.312826][ T6048] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 173.315758][ T6048] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 173.321538][ T6048] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 173.324297][ T6048] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 173.326765][ T6048] usb 8-1: Product: syz [ 173.328066][ T6048] usb 8-1: Manufacturer: syz [ 173.329563][ T6048] usb 8-1: SerialNumber: syz [ 173.331947][ T6048] usb 8-1: config 0 descriptor?? [ 173.515158][T10874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.517207][T10874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 173.519989][T10874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 173.522314][T10874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.524461][T10874] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 173.526887][T10874] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 173.548210][ T5974] Bluetooth: hci3: unexpected event for opcode 0x200c [ 173.551896][ T6048] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 173.554630][ T6048] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 173.619666][T10887] loop8: detected capacity change from 0 to 8 [ 173.622240][T10887] Dev loop8: unable to read RDB block 8 [ 173.624120][T10887] loop8: unable to read partition table [ 173.626022][T10887] loop8: partition table beyond EOD, truncated [ 173.631455][T10887] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 173.775729][ T6048] usb 8-1: USB disconnect, device number 18 [ 174.132854][ T838] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 174.305154][ T838] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.307847][ T838] usb 11-1: config 0 has no interface number 0 [ 174.314461][ T838] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.318000][ T838] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 174.321443][ T838] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 174.325582][ T838] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 174.329784][ T838] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 174.333156][ T838] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.337535][ T838] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.340517][ T838] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.343734][ T838] usb 11-1: config 0 descriptor?? [ 174.345885][T10911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 174.348527][T10911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 174.352092][ T838] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 174.567991][T10911] ldusb 11-1:0.55: Write buffer overflow, 65 bytes dropped [ 174.571067][ T6029] usb 11-1: USB disconnect, device number 2 [ 174.574810][ T6029] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 174.581850][ T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 174.742007][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 174.744857][ T10] usb 8-1: config 0 has an invalid interface number: 151 but max is 1 [ 174.747440][ T10] usb 8-1: config 0 has no interface number 1 [ 174.749395][ T10] usb 8-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.753731][ T10] usb 8-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 174.757793][ T10] usb 8-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 174.762141][ T10] usb 8-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 174.766068][ T10] usb 8-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.771109][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 174.775914][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.779724][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 174.785340][ T10] usb 8-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 174.788977][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.791818][ T10] usb 8-1: Product: syz [ 174.793159][ T10] usb 8-1: Manufacturer: syz [ 174.794609][ T10] usb 8-1: SerialNumber: syz [ 174.797232][ T10] usb 8-1: config 0 descriptor?? [ 174.799707][T10918] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 174.803173][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.806889][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.815423][ T10] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 174.977156][ T838] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 175.018280][ T6016] usb 8-1: USB disconnect, device number 19 [ 175.137645][ T838] usb 10-1: Using ep0 maxpacket: 32 [ 175.140349][ T838] usb 10-1: config 0 has an invalid interface number: 126 but max is 0 [ 175.142672][ T838] usb 10-1: config 0 has no interface number 0 [ 175.144421][ T838] usb 10-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 175.147726][ T838] usb 10-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.150909][ T838] usb 10-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 175.153839][ T838] usb 10-1: config 0 interface 126 has no altsetting 0 [ 175.157501][ T838] usb 10-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 175.160184][ T838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.162451][ T838] usb 10-1: Product: syz [ 175.163667][ T838] usb 10-1: Manufacturer: syz [ 175.165019][ T838] usb 10-1: SerialNumber: syz [ 175.167206][ T838] usb 10-1: config 0 descriptor?? [ 175.169065][T10942] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 175.597446][ T34] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 175.603437][ T838] ir_usb 10-1:0.126: IR Dongle converter detected [ 175.653303][T10968] kvm: pic: non byte write [ 175.736251][ T5974] Bluetooth: hci2: command 0x0419 tx timeout [ 175.757704][ T34] usb 11-1: Using ep0 maxpacket: 16 [ 175.760466][ T34] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 175.763758][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 175.768648][ T34] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 175.771306][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.773615][ T34] usb 11-1: Product: syz [ 175.774911][ T34] usb 11-1: Manufacturer: syz [ 175.776316][ T34] usb 11-1: SerialNumber: syz [ 175.778630][ T34] usb 11-1: config 0 descriptor?? [ 175.781989][ T34] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 175.784726][ T34] em28xx 11-1:0.0: Audio interface 0 found (Vendor Class) [ 175.817926][ T838] usb 10-1: IRDA class descriptor not found, device not bound [ 175.890817][T10980] __nla_validate_parse: 32 callbacks suppressed [ 175.890831][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1584'. [ 176.032101][ T838] usb 10-1: USB disconnect, device number 2 [ 176.425837][ T34] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 176.428731][ T34] em28xx 11-1:0.0: Config register raw data: 0xfffffffb [ 176.489115][T10999] loop2: detected capacity change from 0 to 7 [ 176.491931][T10999] Dev loop2: unable to read RDB block 7 [ 176.494121][T10999] loop2: unable to read partition table [ 176.496418][T10999] loop2: partition table beyond EOD, truncated [ 176.498620][T10999] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.705817][T11014] loop8: detected capacity change from 0 to 8 [ 176.708557][T11014] Dev loop8: unable to read RDB block 8 [ 176.710456][T11014] loop8: unable to read partition table [ 176.712239][T11014] loop8: partition table beyond EOD, truncated [ 176.714209][T11014] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 176.875032][ T5974] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 176.901455][ T6016] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 177.072563][ T6016] usb 9-1: Using ep0 maxpacket: 8 [ 177.075096][ T34] em28xx 11-1:0.0: Unknown AC97 audio processor detected! [ 177.075402][ T6016] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 177.079007][ T34] em28xx 11-1:0.0: couldn't setup AC97 register 2 [ 177.081635][ T6016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.085178][ T34] em28xx 11-1:0.0: couldn't setup AC97 register 4 [ 177.091454][ T34] em28xx 11-1:0.0: couldn't setup AC97 register 6 [ 177.095734][ T34] em28xx 11-1:0.0: couldn't setup AC97 register 54 [ 177.099006][ T6016] pvrusb2: Hardware description: Terratec Grabster AV400 [ 177.102053][ T6016] pvrusb2: ********** [ 177.103901][ T6016] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 177.108935][ T6016] pvrusb2: Important functionality might not be entirely working. [ 177.112701][ T6016] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 177.117532][ T6016] pvrusb2: ********** [ 177.308776][ T2489] pvrusb2: Invalid write control endpoint [ 177.329775][ T2489] pvrusb2: Invalid write control endpoint [ 177.331793][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 177.334850][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 177.337223][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 177.340974][ T2489] pvrusb2: Device being rendered inoperable [ 177.343466][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 177.346567][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 177.349859][ T2489] pvrusb2: Attached sub-driver cx25840 [ 177.351802][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 177.355619][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 177.524425][ T6016] usb 9-1: USB disconnect, device number 6 [ 177.527627][ T34] em28xx 11-1:0.0: couldn't setup AC97 register 56 [ 177.532954][ T34] usb 11-1: USB disconnect, device number 3 [ 177.779302][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1609'. [ 177.801697][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 177.801708][ T40] audit: type=1400 audit(1755809379.151:1498): avc: denied { write } for pid=11042 comm="syz.5.1610" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.814510][ T40] audit: type=1400 audit(1755809379.160:1499): avc: denied { unmount } for pid=10239 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 177.959914][ T5974] Bluetooth: hci2: command 0x0419 tx timeout [ 178.086505][T11052] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 178.186418][ T6016] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 178.345837][ T6016] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.349164][ T6016] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.355602][ T6016] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 178.359410][ T6016] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.362782][ T6016] usb 10-1: SerialNumber: syz [ 178.546113][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 178.550326][T11098] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1634'. [ 178.578921][T11100] loop8: detected capacity change from 0 to 8 [ 178.581951][T11100] Dev loop8: unable to read RDB block 8 [ 178.583925][T11100] loop8: unable to read partition table [ 178.584476][ T6016] usb 10-1: 0:2 : does not exist [ 178.585867][T11100] loop8: partition table beyond EOD, truncated [ 178.588905][ T6016] usb 10-1: unit 255 not found! [ 178.589892][T11100] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 178.594933][ T6016] usb 10-1: USB disconnect, device number 3 [ 178.606541][ T8841] udevd[8841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.626046][ T40] audit: type=1400 audit(1755809379.927:1500): avc: denied { listen } for pid=11103 comm="syz.3.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.644065][ T838] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 178.676130][ T6030] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 178.742511][T11113] validate_nla: 19 callbacks suppressed [ 178.742524][T11113] netlink: 'syz.3.1640': attribute type 13 has an invalid length. [ 178.746760][T11113] netlink: 'syz.3.1640': attribute type 27 has an invalid length. [ 178.804824][ T838] usb 11-1: Using ep0 maxpacket: 16 [ 178.809449][ T838] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 178.814627][ T838] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.821971][ T838] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.825897][ T838] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.829253][ T838] usb 11-1: Product: syz [ 178.831036][ T838] usb 11-1: Manufacturer: syz [ 178.833024][ T838] usb 11-1: SerialNumber: syz [ 178.836247][ T838] usb 11-1: config 0 descriptor?? [ 178.840424][ T838] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 178.844588][ T838] em28xx 11-1:0.0: Audio interface 0 found (Vendor Class) [ 178.859794][ T6030] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.864489][ T6030] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.869243][ T6030] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 178.872907][ T6030] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.877280][ T6030] usb 9-1: config 0 descriptor?? [ 178.922365][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 178.925264][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 178.928071][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 179.200175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.221026][ T40] audit: type=1400 audit(1755809380.470:1501): avc: denied { connect } for pid=11139 comm="syz.3.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.228725][ T5974] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 179.311789][ T6030] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 179.314800][ T6030] cp2112 0003:10C4:EA90.000C: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 179.492628][ T838] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 179.495663][ T838] em28xx 11-1:0.0: Config register raw data: 0xfffffffb [ 179.528804][ T6030] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE [ 179.606290][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 179.766617][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 179.770069][ T10] usb 10-1: config 6 has an invalid interface number: 2 but max is 0 [ 179.773303][ T10] usb 10-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 179.777494][ T10] usb 10-1: config 6 has no interface number 0 [ 179.780020][ T10] usb 10-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 179.784570][ T10] usb 10-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 179.788429][ T10] usb 10-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.795195][ T10] usb 10-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 179.798967][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.802230][ T10] usb 10-1: Product: syz [ 179.803976][ T10] usb 10-1: Manufacturer: syz [ 179.805942][ T10] usb 10-1: SerialNumber: syz [ 179.812314][ T10] hso 10-1:6.2: Failed to find INT IN ep [ 180.026269][ T6016] usb 10-1: USB disconnect, device number 4 [ 180.142527][ T838] em28xx 11-1:0.0: Unknown AC97 audio processor detected! [ 180.183546][ T5974] Bluetooth: hci2: command 0x0419 tx timeout [ 180.389777][ T34] usb 9-1: USB disconnect, device number 7 [ 180.591321][T11159] bpq0: entered allmulticast mode [ 180.638063][ T5974] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 180.792488][ T838] em28xx 11-1:0.0: couldn't setup AC97 register 4 [ 180.795117][ T838] em28xx 11-1:0.0: couldn't setup AC97 register 6 [ 180.797923][ T838] em28xx 11-1:0.0: couldn't setup AC97 register 54 [ 180.801537][ T838] em28xx 11-1:0.0: couldn't setup AC97 register 56 [ 180.807372][ T838] usb 11-1: USB disconnect, device number 4 [ 180.858310][ T40] audit: type=1400 audit(1755809382.013:1502): avc: denied { ioctl } for pid=11176 comm="syz.5.1668" path="socket:[37423]" dev="sockfs" ino=37423 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 180.870115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 180.904852][T11180] loop8: detected capacity change from 0 to 8 [ 180.907684][T11180] Dev loop8: unable to read RDB block 8 [ 180.909818][T11180] loop8: unable to read partition table [ 180.911990][T11180] loop8: partition table beyond EOD, truncated [ 180.914094][T11180] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 181.020736][T11196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1677'. [ 181.049601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 181.067276][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1680'. [ 181.107213][ T54] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=54 comm=kworker/3:1 [ 181.112051][T11204] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 181.129839][ T40] audit: type=1400 audit(1755809382.266:1503): avc: denied { read write } for pid=10239 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.137285][ T40] audit: type=1400 audit(1755809382.266:1504): avc: denied { open } for pid=10239 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.144288][ T40] audit: type=1400 audit(1755809382.266:1505): avc: denied { ioctl } for pid=10239 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.147762][ T5974] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 181.220619][ T5974] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 181.223811][ T5974] Bluetooth: hci3: Injecting HCI hardware error event [ 181.226066][ T5974] Bluetooth: hci3: hardware error 0x00 [ 181.295611][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 181.348331][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1686'. [ 181.468911][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.473951][ T34] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 181.477932][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.481581][ T34] usb 9-1: config 0 descriptor?? [ 181.584125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 181.591535][ T63] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 181.666144][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1697'. [ 181.669480][ T40] audit: type=1326 audit(1755809382.761:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.6.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5778ebe9 code=0x7ffc0000 [ 181.676844][ T40] audit: type=1326 audit(1755809382.761:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.6.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5778ebe9 code=0x7ffc0000 [ 181.917713][ T34] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 181.976832][ T63] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 182.035662][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1708'. [ 182.075958][T11287] ipvlan2: entered promiscuous mode [ 182.118745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 182.130842][ T6029] usb 9-1: USB disconnect, device number 8 [ 182.134853][T11293] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 182.231095][ T63] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 182.578558][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.589222][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.593498][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.657147][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.660485][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.753843][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.761087][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.839596][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.844727][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.973430][ T61] team0: left allmulticast mode [ 182.975905][ T61] team_slave_0: left allmulticast mode [ 182.978106][ T61] team_slave_1: left allmulticast mode [ 182.980530][ T61] bridge0: port 3(team0) entered disabled state [ 182.985186][ T61] bridge_slave_1: left allmulticast mode [ 182.986974][ T61] bridge_slave_1: left promiscuous mode [ 182.988785][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.992272][ T61] bridge_slave_0: left allmulticast mode [ 182.994142][ T61] bridge_slave_0: left promiscuous mode [ 182.996436][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.083024][ T61] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 183.209215][ T6030] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 183.373077][ T6030] usb 9-1: Using ep0 maxpacket: 8 [ 183.379019][ T6030] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 183.382505][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.385621][ T61] bond_slave_0: left allmulticast mode [ 183.386899][ T6030] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.390485][ T6030] usb 9-1: Product: syz [ 183.391865][ T6030] usb 9-1: Manufacturer: syz [ 183.393408][ T6030] usb 9-1: SerialNumber: syz [ 183.394567][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.398624][ T6030] usb 9-1: config 0 descriptor?? [ 183.401197][ T61] bond_slave_1: left allmulticast mode [ 183.403892][ T61] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 183.406552][ T61] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 183.408832][ T61] bond0 (unregistering): Released all slaves [ 183.415590][ T61] bond1 (unregistering): (slave bond2): Releasing backup interface [ 183.419395][ T61] bond1 (unregistering): Released all slaves [ 183.427029][ T61] bond2 (unregistering): Released all slaves [ 183.433299][ T61] bond3 (unregistering): Released all slaves [ 183.433468][ T5974] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 183.503968][ T61] tipc: Left network mode [ 183.619379][ T6030] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 183.695868][ T61] hsr_slave_0: left promiscuous mode [ 183.698349][ T61] hsr_slave_1: left promiscuous mode [ 183.700226][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.703030][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.705930][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.708224][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.712779][ T61] veth1_macvtap: left promiscuous mode [ 183.714588][ T61] veth0_macvtap: left promiscuous mode [ 183.716372][ T61] veth1_vlan: left promiscuous mode [ 183.718191][ T61] veth0_vlan: left promiscuous mode [ 183.795428][ T61] team_slave_1 (unregistering): left promiscuous mode [ 183.798528][ T61] team0 (unregistering): Port device team_slave_1 removed [ 183.806538][ T61] team_slave_0 (unregistering): left promiscuous mode [ 183.811254][ T61] team0 (unregistering): Port device team_slave_0 removed [ 183.868672][T11356] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.974197][T11356] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.008578][T11374] binder: 11373:11374 ioctl c0306201 200000000480 returned -22 [ 184.050561][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 184.050573][ T40] audit: type=1400 audit(1755809384.997:1523): avc: denied { name_connect } for pid=11379 comm="syz.5.1735" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 184.078717][T11356] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.176547][T11356] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.239038][ T61] IPVS: stop unused estimator thread 0... [ 184.259626][ T7831] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.266178][ T1149] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.271816][ T1149] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.278321][ T1149] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.645045][ T63] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 184.811785][ T40] audit: type=1400 audit(1755809385.699:1524): avc: denied { read } for pid=11415 comm="syz.3.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.860611][T11421] syz_tun: entered allmulticast mode [ 184.868940][T11421] dvmrp1: entered allmulticast mode [ 184.879456][T11420] syz_tun: left allmulticast mode [ 184.907747][ T40] audit: type=1400 audit(1755809385.792:1525): avc: denied { lock } for pid=11422 comm="syz.6.1752" path="socket:[37804]" dev="sockfs" ino=37804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 184.916284][ T6030] usb write operation failed. (-71) [ 184.918821][ T6030] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 184.925041][ T6030] dvbdev: DVB: registering new adapter (Terratec H7) [ 184.927275][ T6030] usb 9-1: media controller created [ 184.929194][ T6030] usb read operation failed. (-71) [ 184.931119][ T6030] usb write operation failed. (-71) [ 184.933555][ T6030] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 184.936970][ T6030] usb 9-1: USB disconnect, device number 9 [ 185.101345][ T6029] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 185.218855][ T10] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 185.262881][ T6029] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.266945][ T6029] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.269993][ T6029] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 185.273273][ T6029] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.276386][ T6029] usb 8-1: config 0 descriptor?? [ 185.311942][T11437] netlink: 'syz.5.1758': attribute type 2 has an invalid length. [ 185.317220][T11437] : entered promiscuous mode [ 185.379177][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 185.389408][ T10] usb 11-1: config 0 has an invalid interface number: 56 but max is 0 [ 185.392971][ T10] usb 11-1: config 0 has no interface number 0 [ 185.396716][ T10] usb 11-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 185.399677][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.402357][ T10] usb 11-1: Product: syz [ 185.403744][ T10] usb 11-1: Manufacturer: syz [ 185.405373][ T10] usb 11-1: SerialNumber: syz [ 185.407871][ T10] usb 11-1: config 0 descriptor?? [ 185.417099][T11445] loop2: detected capacity change from 0 to 7 [ 185.420176][T11445] Dev loop2: unable to read RDB block 7 [ 185.422752][T11445] loop2: unable to read partition table [ 185.425619][T11445] loop2: partition table beyond EOD, truncated [ 185.428220][T11445] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.626126][ T10] peak_usb 11-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 185.840421][ T10] peak_usb 11-1:0.56 can0: sending command failure: -22 [ 185.842710][ T10] peak_usb 11-1:0.56 can0: sending command failure: -22 [ 185.844933][ T10] peak_usb 11-1:0.56 can0: sending command failure: -22 [ 185.903457][ T10] peak_usb 11-1:0.56: probe with driver peak_usb failed with error -22 [ 185.925235][ T6029] usb 8-1: string descriptor 0 read error: -22 [ 186.057399][ T6039] usb 11-1: USB disconnect, device number 5 [ 186.139975][ T6029] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 186.149080][ T6029] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 186.151600][ T6029] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 186.154192][ T6029] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 186.156583][ T6029] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 186.169487][ T6029] usb 8-1: USB disconnect, device number 20 [ 186.256377][ T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 186.259353][ T63] Bluetooth: hci2: Injecting HCI hardware error event [ 186.609954][ T6029] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 186.619050][ T40] audit: type=1400 audit(1755809387.392:1526): avc: denied { read } for pid=11472 comm="syz.6.1774" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.625574][ T40] audit: type=1400 audit(1755809387.392:1527): avc: denied { open } for pid=11472 comm="syz.6.1774" path="/119/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.632581][ T40] audit: type=1800 audit(1755809387.401:1528): pid=11473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1774" name="/" dev="9p" ino=2 res=0 errno=0 [ 186.704730][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 186.770076][ T6029] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.773445][ T6029] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.776434][ T6029] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 186.779437][ T6029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.783033][ T6029] usb 9-1: config 0 descriptor?? [ 186.814778][ T63] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 186.865188][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 186.872059][ T10] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 186.875316][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.879238][ T10] usb 10-1: config 0 descriptor?? [ 186.882355][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 186.972248][ T6039] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 186.979152][ T40] audit: type=1326 audit(1755809387.738:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.6.1786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5778ebe9 code=0x7ffc0000 [ 186.986459][ T40] audit: type=1326 audit(1755809387.738:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.6.1786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5778ebe9 code=0x7ffc0000 [ 186.993958][ T40] audit: type=1326 audit(1755809387.738:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.6.1786" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d5778ebe9 code=0x7ffc0000 [ 187.002133][ T40] audit: type=1326 audit(1755809387.738:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.6.1786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5778ebe9 code=0x7ffc0000 [ 187.107577][ T63] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 187.145067][ T6039] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.148055][ T6039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.151248][ T6039] usb 8-1: config 0 descriptor?? [ 187.153777][ T6039] cp210x 8-1:0.0: cp210x converter detected [ 187.329160][ T6029] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 187.331556][ T6029] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 187.334100][ T6029] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 187.336507][ T6029] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 187.338933][ T6029] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 187.342242][ T6029] playstation 0003:054C:0DF2.000F: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 187.542420][ T6029] playstation 0003:054C:0DF2.000F: Failed to retrieve feature with reportID 9: -71 [ 187.545353][ T6029] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense pairing info: -71 [ 187.548270][ T6029] playstation 0003:054C:0DF2.000F: Failed to get MAC address from DualSense [ 187.551060][ T6029] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 187.554162][ T6029] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -71 [ 187.558420][ T6029] usb 9-1: USB disconnect, device number 10 [ 187.570699][T11521] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1796'. [ 187.573963][T11521] unsupported nlmsg_type 40 [ 187.584498][ T6039] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 187.802770][ T6039] usb 8-1: cp210x converter now attached to ttyUSB0 [ 187.954645][ T6039] usb 10-1: USB disconnect, device number 5 [ 188.017181][ T10] usb 8-1: USB disconnect, device number 21 [ 188.020214][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 188.023542][ T10] cp210x 8-1:0.0: device disconnected [ 188.480200][ T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 188.575213][T11543] loop8: detected capacity change from 0 to 8 [ 188.577795][T11543] Dev loop8: unable to read RDB block 8 [ 188.579593][T11543] loop8: unable to read partition table [ 188.581608][T11543] loop8: partition table beyond EOD, truncated [ 188.583609][T11543] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 188.639979][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 188.642813][ T34] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 188.645840][ T34] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10 [ 188.649533][ T34] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024 [ 188.649552][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 188.651017][ T34] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 188.658475][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.658489][ T34] usb 9-1: Product: syz [ 188.658497][ T34] usb 9-1: Manufacturer: syz [ 188.658504][ T34] usb 9-1: SerialNumber: syz [ 188.659673][ T34] usb 9-1: config 0 descriptor?? [ 188.671871][ T6016] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 188.842868][ T6016] usb 11-1: Using ep0 maxpacket: 32 [ 188.852574][ T6016] usb 11-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 188.856103][ T6016] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.858672][ T6016] usb 11-1: Product: syz [ 188.860088][ T6016] usb 11-1: Manufacturer: syz [ 188.861649][ T6016] usb 11-1: SerialNumber: syz [ 188.863818][ T6016] usb 11-1: config 0 descriptor?? [ 188.868612][ T6016] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 188.884172][ T34] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input32 [ 189.087791][T11593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1828'. [ 189.099157][ T6030] usb 9-1: USB disconnect, device number 11 [ 189.227645][T11613] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1837'. [ 189.231056][T11613] nbd: must specify at least one socket [ 189.303048][T11620] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1840'. [ 189.305876][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1840'. [ 189.608703][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 189.608714][ T40] audit: type=1326 audit(1755809390.189:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11635 comm="syz.5.1847" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe19ed8ebe9 code=0x0 [ 189.696512][T11643] loop8: detected capacity change from 0 to 8 [ 189.700666][T11643] Dev loop8: unable to read RDB block 8 [ 189.703096][T11643] loop8: unable to read partition table [ 189.705372][T11643] loop8: partition table beyond EOD, truncated [ 189.707344][T11643] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 189.767697][T11655] binder: 11654:11655 ioctl 4018620d 0 returned -22 [ 189.770247][T11655] binder: 11654:11655 ioctl c0306201 0 returned -14 [ 189.918470][T11671] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 190.103174][T11698] kvm: user requested TSC rate below hardware speed [ 190.532021][ T6039] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 190.541912][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1879'. [ 190.589374][ T6016] gspca_ov534_9: reg_r err -71 [ 190.713700][ T6039] usb 9-1: Using ep0 maxpacket: 16 [ 190.719248][ T6039] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 190.722014][ T6039] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.726249][ T6039] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.730767][ T6039] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.733646][ T6039] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.736134][ T6039] usb 9-1: Product: syz [ 190.737431][ T6039] usb 9-1: Manufacturer: syz [ 190.738877][ T6039] usb 9-1: SerialNumber: syz [ 190.906209][ T6016] gspca_ov534_9: Unknown sensor 0000 [ 190.906243][ T6016] ov534_9 11-1:0.0: probe with driver ov534_9 failed with error -22 [ 190.912917][ T6016] usb 11-1: USB disconnect, device number 6 [ 191.141453][ T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 191.144829][ T63] Bluetooth: hci2: Injecting HCI hardware error event [ 191.163016][ T53] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 191.171787][ T6039] usb 9-1: 0:2 : does not exist [ 191.344498][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 191.348872][ T53] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 191.351671][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.354134][ T53] usb 10-1: Product: syz [ 191.355530][ T53] usb 10-1: Manufacturer: syz [ 191.357037][ T53] usb 10-1: SerialNumber: syz [ 191.359710][ T53] usb 10-1: config 0 descriptor?? [ 191.577854][ T53] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 191.824289][ T6039] usb 9-1: USB disconnect, device number 12 [ 191.831137][ T8841] udevd[8841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.371469][ T6039] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 192.404837][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1895'. [ 192.435815][ T53] usb write operation failed. (-71) [ 192.438121][ T53] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 192.441417][ T53] dvbdev: DVB: registering new adapter (Terratec H7) [ 192.443351][ T53] usb 10-1: media controller created [ 192.445212][ T53] usb read operation failed. (-71) [ 192.447492][ T53] usb write operation failed. (-71) [ 192.449825][ T53] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 192.453431][ T53] usb 10-1: USB disconnect, device number 6 [ 192.532428][ T6039] usb 11-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 192.535257][ T6039] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.538516][ T6039] usb 11-1: config 0 descriptor?? [ 193.348591][T11775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1905'. [ 193.440375][T11783] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 193.651484][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 194.233432][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 194.424843][T11858] input: syz0 as /devices/virtual/input/input33 [ 194.472825][ T6039] usb 11-1: Cannot set autoneg [ 194.477298][ T6039] MOSCHIP usb-ethernet driver 11-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 194.483410][ T6039] usb 11-1: USB disconnect, device number 7 [ 194.490034][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1950'. [ 194.494180][T11872] : entered promiscuous mode [ 194.502773][T11874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.544713][T11880] loop8: detected capacity change from 0 to 8 [ 194.547341][ T8841] Dev loop8: unable to read RDB block 8 [ 194.549149][ T8841] loop8: unable to read partition table [ 194.550965][ T8841] loop8: partition table beyond EOD, truncated [ 194.554425][T11880] Dev loop8: unable to read RDB block 8 [ 194.556205][T11880] loop8: unable to read partition table [ 194.558038][T11880] loop8: partition table beyond EOD, truncated [ 194.560926][T11880] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 194.639042][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1959'. [ 194.690474][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1962'. [ 194.694304][T11896] openvswitch: : Dropping previously announced user features [ 194.761630][T11902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 194.831754][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 194.836650][T11904] loop8: detected capacity change from 0 to 8 [ 194.839170][ T8841] Dev loop8: unable to read RDB block 8 [ 194.841140][ T8841] loop8: unable to read partition table [ 194.843015][ T8841] loop8: partition table beyond EOD, truncated [ 194.845554][T11904] Dev loop8: unable to read RDB block 8 [ 194.847362][T11904] loop8: unable to read partition table [ 194.849280][T11904] loop8: partition table beyond EOD, truncated [ 194.851321][T11904] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 194.990780][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 194.993557][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.996763][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.001079][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.004317][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.007307][ T10] usb 8-1: Product: syz [ 195.008639][ T10] usb 8-1: Manufacturer: syz [ 195.010151][ T10] usb 8-1: SerialNumber: syz [ 195.045183][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1972'. [ 195.049516][T11927] : entered promiscuous mode [ 195.051216][T11930] loop8: detected capacity change from 0 to 8 [ 195.053852][T11930] Dev loop8: unable to read RDB block 8 [ 195.055743][T11930] loop8: unable to read partition table [ 195.057630][T11930] loop8: partition table beyond EOD, truncated [ 195.060134][T11930] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 195.070729][T11933] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1974'. [ 195.237802][ T10] usb 8-1: 0:2 : does not exist [ 195.241645][ T10] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 195.254578][ T10] usb 8-1: USB disconnect, device number 22 [ 195.256244][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1984'. [ 195.259931][T11968] openvswitch: : Dropping previously announced user features [ 195.334329][ T63] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 195.336529][ T63] Bluetooth: hci2: unexpected event for opcode 0x203e [ 195.368659][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=6030 comm=kworker/1:4 [ 195.426209][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1994'. [ 195.429557][T11989] openvswitch: : Dropping previously announced user features [ 195.837673][T11913] 9pnet_fd: p9_fd_create_tcp (11913): problem connecting socket to 127.0.0.1 [ 196.142382][T12042] netlink: 'syz.4.2017': attribute type 10 has an invalid length. [ 196.148166][T12042] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 196.271636][T12056] binder_alloc: 12055: binder_alloc_buf, no vma [ 196.274348][T12056] binder: 12055:12056 ioctl c0306201 200000000500 returned -14 [ 196.490883][ T40] audit: type=1400 audit(1755809396.643:1550): avc: denied { link } for pid=12079 comm="syz.3.2034" name="#21" dev="tmpfs" ino=2743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.499900][ T40] audit: type=1400 audit(1755809396.643:1551): avc: denied { rename } for pid=12079 comm="syz.3.2034" name="#22" dev="tmpfs" ino=2743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.511084][ T40] audit: type=1400 audit(1755809396.662:1552): avc: denied { connect } for pid=12081 comm="syz.5.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.517196][ T40] audit: type=1400 audit(1755809396.662:1553): avc: denied { read } for pid=12081 comm="syz.5.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.518724][ T6030] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 196.679130][ T6030] usb 11-1: Using ep0 maxpacket: 16 [ 196.682190][ T6030] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.685521][ T6030] usb 11-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 196.688535][ T6030] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.693861][ T6030] usb 11-1: config 0 descriptor?? [ 196.711859][ T54] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 196.786023][ T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 196.883681][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.887908][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.891776][ T54] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 196.895560][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.899117][ T54] usb 9-1: config 0 descriptor?? [ 196.957117][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 196.959995][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 196.963586][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.969158][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 196.971931][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.974504][ T24] usb 8-1: Product: syz [ 196.975780][ T24] usb 8-1: Manufacturer: syz [ 196.977226][ T24] usb 8-1: SerialNumber: syz [ 196.978647][ T34] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 196.979603][ T24] usb 8-1: config 0 descriptor?? [ 196.983694][ T24] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 196.986739][ T24] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 197.128930][ T6030] greenasia 0003:0E8F:0012.0010: reserved main item tag 0xd [ 197.131979][ T6030] greenasia 0003:0E8F:0012.0010: item fetching failed at offset 4/5 [ 197.135447][ T6030] greenasia 0003:0E8F:0012.0010: parse failed [ 197.137919][ T6030] greenasia 0003:0E8F:0012.0010: probe with driver greenasia failed with error -22 [ 197.141458][ T34] usb 10-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 197.144729][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.147410][ T34] usb 10-1: Product: syz [ 197.148842][ T34] usb 10-1: Manufacturer: syz [ 197.150573][ T34] usb 10-1: SerialNumber: syz [ 197.152968][ T34] usb 10-1: config 0 descriptor?? [ 197.332946][ T54] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 197.335304][ T54] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 197.337667][ T54] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 197.339996][ T54] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 197.342541][ T53] usb 11-1: USB disconnect, device number 8 [ 197.344472][ T54] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 197.347514][ T54] playstation 0003:054C:0DF2.0011: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 197.371273][ T6039] usb 10-1: USB disconnect, device number 7 [ 197.546512][ T54] playstation 0003:054C:0DF2.0011: Invalid byte count transferred, expected 20 got 0 [ 197.549636][ T54] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense pairing info: -22 [ 197.552543][ T54] playstation 0003:054C:0DF2.0011: Failed to get MAC address from DualSense [ 197.555479][ T54] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 197.558734][ T54] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 197.627606][ T24] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 197.629982][ T24] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 197.761315][ T6039] usb 9-1: USB disconnect, device number 13 [ 197.920251][ T40] audit: type=1400 audit(1755809397.981:1554): avc: denied { getopt } for pid=12104 comm="syz.6.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 198.018246][ T40] audit: type=1400 audit(1755809398.074:1555): avc: denied { create } for pid=12123 comm="syz.5.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.024496][ T40] audit: type=1400 audit(1755809398.074:1556): avc: denied { ioctl } for pid=12123 comm="syz.5.2054" path="socket:[43173]" dev="sockfs" ino=43173 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 198.275837][ T24] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 198.279218][ T24] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 198.282130][ T24] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 198.285673][ T24] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 198.774471][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 198.827946][ T55] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 198.934830][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 198.936792][ T24] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 198.940499][ T10] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 198.943988][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.947329][ T10] usb 10-1: Product: syz [ 198.948455][ T24] usb 8-1: USB disconnect, device number 23 [ 198.949036][ T10] usb 10-1: Manufacturer: syz [ 198.952589][ T10] usb 10-1: SerialNumber: syz [ 198.954976][ T10] usb 10-1: config 0 descriptor?? [ 199.009669][ T55] usb 9-1: Using ep0 maxpacket: 32 [ 199.011014][ T63] Bluetooth: hci2: unexpected event for opcode 0x0042 [ 199.013383][ T55] usb 9-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 199.017470][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.021336][ T55] usb 9-1: config 0 descriptor?? [ 199.172616][ T10] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 199.456414][ T55] cypress 0003:04B4:BCA1.0012: hidraw1: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.4-1/input0 [ 199.499918][T12163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.570624][T12163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.633811][T12163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.669390][ T55] usb 9-1: USB disconnect, device number 14 [ 199.708097][T12163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.800575][ T7831] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.806021][ T7833] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.811208][ T7833] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.816512][ T1149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.033892][ T10] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 200.040795][ T10] usb 10-1: USB disconnect, device number 8 [ 200.096222][T12180] netlink: 'syz.3.2079': attribute type 1 has an invalid length. [ 200.098721][T12180] netlink: 'syz.3.2079': attribute type 4 has an invalid length. [ 200.101515][T12180] __nla_validate_parse: 4 callbacks suppressed [ 200.101523][T12180] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2079'. [ 200.107743][T12180] netlink: 'syz.3.2079': attribute type 1 has an invalid length. [ 200.110239][T12180] netlink: 'syz.3.2079': attribute type 4 has an invalid length. [ 200.112743][T12180] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2079'. [ 200.225285][ T40] audit: type=1400 audit(1755809400.132:1557): avc: denied { bind } for pid=12183 comm="syz.3.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 200.293022][ T24] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 200.367912][ T54] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=54 comm=kworker/3:1 [ 200.372415][T12195] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 200.465259][ T24] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 200.468549][ T24] usb 11-1: config 1 has no interface number 0 [ 200.470885][ T24] usb 11-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 200.474844][ T24] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 200.477980][ T24] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.483173][ T24] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 200.486322][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.488813][ T24] usb 11-1: Product: syz [ 200.490182][ T24] usb 11-1: Manufacturer: syz [ 200.491657][ T24] usb 11-1: SerialNumber: syz [ 200.494296][T12177] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 200.517583][ T6039] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 200.705360][ T6039] usb 8-1: Using ep0 maxpacket: 32 [ 200.708303][ T6039] usb 8-1: config 0 has an invalid interface number: 172 but max is 0 [ 200.711623][ T6039] usb 8-1: config 0 has no interface number 0 [ 200.713415][T12177] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 200.717012][ T6039] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 200.720176][ T6039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.723036][ T6039] usb 8-1: Product: syz [ 200.724598][ T6039] usb 8-1: Manufacturer: syz [ 200.726322][ T6039] usb 8-1: SerialNumber: syz [ 200.728985][ T6039] usb 8-1: config 0 descriptor?? [ 200.732216][ T6039] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 200.759854][T12208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.762088][T12208] IPv6: NLM_F_CREATE should be set when creating new route [ 200.764329][T12208] IPv6: NLM_F_CREATE should be set when creating new route [ 200.766995][T12208] ------------[ cut here ]------------ [ 200.768672][T12208] WARNING: CPU: 3 PID: 12208 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xb9d/0x10d0 [ 200.771749][T12208] Modules linked in: [ 200.773155][T12208] CPU: 3 UID: 0 PID: 12208 Comm: syz.5.2092 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 200.778174][T12208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.781521][T12208] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0 [ 200.783313][T12208] Code: 24 20 48 8b 6c 24 38 e8 11 34 8f fa e8 0c 34 8f fa 89 de 44 89 ef e8 82 2e 8f fa 41 39 dd 0f 84 cb fd ff ff e8 f4 33 8f fa 90 <0f> 0b 90 e9 bd fd ff ff e8 e6 33 8f fa 48 8d 7d 38 be 01 00 00 00 [ 200.789334][T12208] RSP: 0018:ffffc90004837138 EFLAGS: 00010283 [ 200.791192][T12208] RAX: 0000000000002197 RBX: 0000000000000001 RCX: ffffc90007391000 [ 200.793648][T12208] RDX: 0000000000080000 RSI: ffffffff872c5d4c RDI: 0000000000000004 [ 200.796240][T12208] RBP: ffff888036a12000 R08: 0000000000000004 R09: 0000000000000002 [ 200.798977][T12208] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90004837290 [ 200.801482][T12208] R13: 0000000000000002 R14: ffff888056b53c00 R15: ffff88802a0e0800 [ 200.803864][T12208] FS: 00007fe19fc126c0(0000) GS:ffff8880d69bc000(0000) knlGS:0000000000000000 [ 200.806805][T12208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.808877][T12208] CR2: 0000000000000000 CR3: 0000000028e8c000 CR4: 0000000000352ef0 [ 200.811297][T12208] Call Trace: [ 200.812367][T12208] [ 200.813305][T12208] notifier_call_chain+0xb9/0x410 [ 200.814872][T12208] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 200.816610][T12208] atomic_notifier_call_chain+0x71/0x1c0 [ 200.818353][T12208] call_fib_notifiers+0x33/0x70 [ 200.819869][T12208] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 200.821845][T12208] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 200.824080][T12208] ? ip6_route_multipath_add+0x1364/0x1bd0 [ 200.826009][T12208] ? rcu_is_watching+0x12/0xc0 [ 200.827590][T12208] ? lock_release+0x201/0x2f0 [ 200.829117][T12208] ip6_route_multipath_add+0xb4f/0x1bd0 [ 200.830861][T12208] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 200.832724][T12208] ? lock_release+0x201/0x2f0 [ 200.834206][T12208] ? avc_has_perm_noaudit+0x149/0x3b0 [ 200.835845][T12208] ? inet6_rtm_newroute+0xe4/0x1a0 [ 200.837477][T12208] inet6_rtm_newroute+0xe4/0x1a0 [ 200.839270][T12208] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 200.840985][T12208] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 200.842675][T12208] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 200.844248][T12208] ? rcu_is_watching+0x12/0xc0 [ 200.845746][T12208] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 200.847534][T12208] ? lock_release+0x201/0x2f0 [ 200.849173][T12208] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 200.850882][T12208] rtnetlink_rcv_msg+0x95b/0xe90 [ 200.852417][T12208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.854119][T12208] ? ref_tracker_free+0x37c/0x830 [ 200.855651][T12208] netlink_rcv_skb+0x155/0x420 [ 200.857129][T12208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.858856][T12208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.860718][T12208] ? netlink_deliver_tap+0x1ae/0xd30 [ 200.862330][T12208] netlink_unicast+0x5aa/0x870 [ 200.863781][T12208] ? __pfx_netlink_unicast+0x10/0x10 [ 200.865411][T12208] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 200.867256][T12208] netlink_sendmsg+0x8d1/0xdd0 [ 200.868716][T12208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.870686][T12208] ____sys_sendmsg+0xa95/0xc70 [ 200.872152][T12208] ? copy_msghdr_from_user+0x10a/0x160 [ 200.873794][T12208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.875422][T12208] ? __pfx_futex_wake_mark+0x10/0x10 [ 200.877014][T12208] ___sys_sendmsg+0x134/0x1d0 [ 200.878462][T12208] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.880109][T12208] ? futex_private_hash_put+0x11c/0x300 [ 200.881854][T12208] ? rcu_is_watching+0x12/0xc0 [ 200.883336][T12208] __sys_sendmsg+0x16d/0x220 [ 200.884758][T12208] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.886327][T12208] ? __x64_sys_futex+0x1e0/0x4c0 [ 200.887841][T12208] do_syscall_64+0xcd/0x4c0 [ 200.889267][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.891092][T12208] RIP: 0033:0x7fe19ed8ebe9 [ 200.892496][T12208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.898185][T12208] RSP: 002b:00007fe19fc12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.900717][T12208] RAX: ffffffffffffffda RBX: 00007fe19efb5fa0 RCX: 00007fe19ed8ebe9 [ 200.903343][T12208] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 200.905752][T12208] RBP: 00007fe19ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.908126][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.910523][T12208] R13: 00007fe19efb6038 R14: 00007fe19efb5fa0 R15: 00007ffdc5c14018 [ 200.912943][T12208] [ 200.913916][T12208] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.916064][T12208] CPU: 3 UID: 0 PID: 12208 Comm: syz.5.2092 Not tainted syzkaller #0 PREEMPT(full) [ 200.918864][T12208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.922030][T12208] Call Trace: [ 200.923062][T12208] [ 200.923969][T12208] dump_stack_lvl+0x3d/0x1f0 [ 200.925383][T12208] vpanic+0x6e8/0x7a0 [ 200.926616][T12208] ? __pfx_vpanic+0x10/0x10 [ 200.927999][T12208] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 200.929620][T12208] panic+0xca/0xd0 [ 200.930747][T12208] ? __pfx_panic+0x10/0x10 [ 200.932122][T12208] check_panic_on_warn+0xab/0xb0 [ 200.933617][T12208] __warn+0xf6/0x3c0 [ 200.934813][T12208] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 200.936380][T12208] report_bug+0x3c3/0x580 [ 200.937705][T12208] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 200.939294][T12208] handle_bug+0x184/0x210 [ 200.940600][T12208] exc_invalid_op+0x17/0x50 [ 200.941985][T12208] asm_exc_invalid_op+0x1a/0x20 [ 200.943470][T12208] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0 [ 200.945269][T12208] Code: 24 20 48 8b 6c 24 38 e8 11 34 8f fa e8 0c 34 8f fa 89 de 44 89 ef e8 82 2e 8f fa 41 39 dd 0f 84 cb fd ff ff e8 f4 33 8f fa 90 <0f> 0b 90 e9 bd fd ff ff e8 e6 33 8f fa 48 8d 7d 38 be 01 00 00 00 [ 200.951169][T12208] RSP: 0018:ffffc90004837138 EFLAGS: 00010283 [ 200.953018][T12208] RAX: 0000000000002197 RBX: 0000000000000001 RCX: ffffc90007391000 [ 200.955400][T12208] RDX: 0000000000080000 RSI: ffffffff872c5d4c RDI: 0000000000000004 [ 200.957794][T12208] RBP: ffff888036a12000 R08: 0000000000000004 R09: 0000000000000002 [ 200.960261][T12208] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90004837290 [ 200.962626][T12208] R13: 0000000000000002 R14: ffff888056b53c00 R15: ffff88802a0e0800 [ 200.964988][T12208] ? nsim_fib_event_nb+0xb9c/0x10d0 [ 200.966610][T12208] ? nsim_fib_event_nb+0xb9c/0x10d0 [ 200.968188][T12208] notifier_call_chain+0xb9/0x410 [ 200.969756][T12208] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 200.971415][T12208] atomic_notifier_call_chain+0x71/0x1c0 [ 200.973110][T12208] call_fib_notifiers+0x33/0x70 [ 200.974601][T12208] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 200.976555][T12208] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 200.978893][T12208] ? ip6_route_multipath_add+0x1364/0x1bd0 [ 200.980660][T12208] ? rcu_is_watching+0x12/0xc0 [ 200.982097][T12208] ? lock_release+0x201/0x2f0 [ 200.983524][T12208] ip6_route_multipath_add+0xb4f/0x1bd0 [ 200.985187][T12208] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 200.987017][T12208] ? lock_release+0x201/0x2f0 [ 200.988475][T12208] ? avc_has_perm_noaudit+0x149/0x3b0 [ 200.990110][T12208] ? inet6_rtm_newroute+0xe4/0x1a0 [ 200.991663][T12208] inet6_rtm_newroute+0xe4/0x1a0 [ 200.993183][T12208] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 200.994833][T12208] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 200.996463][T12208] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 200.998027][T12208] ? rcu_is_watching+0x12/0xc0 [ 200.999575][T12208] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 201.001283][T12208] ? lock_release+0x201/0x2f0 [ 201.002712][T12208] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 201.004386][T12208] rtnetlink_rcv_msg+0x95b/0xe90 [ 201.005931][T12208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.007574][T12208] ? ref_tracker_free+0x37c/0x830 [ 201.009170][T12208] netlink_rcv_skb+0x155/0x420 [ 201.010670][T12208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.012331][T12208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.013932][T12208] ? netlink_deliver_tap+0x1ae/0xd30 [ 201.015516][T12208] netlink_unicast+0x5aa/0x870 [ 201.016989][T12208] ? __pfx_netlink_unicast+0x10/0x10 [ 201.018701][T12208] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 201.020523][T12208] netlink_sendmsg+0x8d1/0xdd0 [ 201.021980][T12208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.023579][T12208] ____sys_sendmsg+0xa95/0xc70 [ 201.025010][T12208] ? copy_msghdr_from_user+0x10a/0x160 [ 201.026661][T12208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.028275][T12208] ? __pfx_futex_wake_mark+0x10/0x10 [ 201.029901][T12208] ___sys_sendmsg+0x134/0x1d0 [ 201.031369][T12208] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.032949][T12208] ? futex_private_hash_put+0x11c/0x300 [ 201.034613][T12208] ? rcu_is_watching+0x12/0xc0 [ 201.036054][T12208] __sys_sendmsg+0x16d/0x220 [ 201.037464][T12208] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.039031][T12208] ? __x64_sys_futex+0x1e0/0x4c0 [ 201.040535][T12208] do_syscall_64+0xcd/0x4c0 [ 201.041922][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.043703][T12208] RIP: 0033:0x7fe19ed8ebe9 [ 201.045065][T12208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.050850][T12208] RSP: 002b:00007fe19fc12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.053381][T12208] RAX: ffffffffffffffda RBX: 00007fe19efb5fa0 RCX: 00007fe19ed8ebe9 [ 201.055765][T12208] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 201.058143][T12208] RBP: 00007fe19ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 201.060543][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.062921][T12208] R13: 00007fe19efb6038 R14: 00007fe19efb5fa0 R15: 00007ffdc5c14018 [ 201.065299][T12208] [ 201.067383][T12208] Kernel Offset: disabled [ 201.068743][T12208] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:50:05 Registers: info registers vcpu 0 CPU#0 RAX=000000000028acc4 RBX=0000000000000000 RCX=ffffffff8b939c29 RDX=ffffed100d486656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe19fc11f98 CR3=0000000028e8c000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000004 DR2=0000000000006d33 DR3=0000000000000404 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc5c14526 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc5c14526 00007ffdc5c1452c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ef874a8 00007fe19ef874a0 00007fe19ef87498 00007fe19ef87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19faed100 00007fe19ef87460 00007fe19ef87478 00007fe19ef874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ef874b8 00007fe19ef874b0 00007fe19ef874a8 00007fe19ef874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000370b84 RBX=0000000000000001 RCX=ffffffff8b939c29 RDX=ffffed100d4a6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe19efb7dac CR3=0000000050135000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000040000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b1bb690 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b1bb816 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b1bb816 00007ffc4b1bb81c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05fb212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05fb212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05fb212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05fb212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05fb212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05fb212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc9000013d000 RBX=ffff8881054c8c00 RCX=ffffffff819bea27 RDX=1ffff11020a99106 RSI=ffffffff866d4e84 RDI=ffff8881054c8830 RBP=0000000000000001 RSP=ffffc90000648ea0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000648ff8 R12=ffffc9000013d008 R13=ffff8881054c8828 R14=ffff888106301800 R15=0000000000000000 RIP=ffffffff866d4ed2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558ecad4df40 CR3=000000004cb37000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2a03d4d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2a03d656 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2a03d656 00007fff2a03d65c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d57812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d57812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d57812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d57812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d57812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d57812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856438c5 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc90004836aa0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=000000000000006d R14=ffffffff9b10dfe0 R15=ffffffff85643860 RIP=ffffffff856438ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe19fc126c0 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000028e8c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc5c14526 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc5c14526 00007ffdc5c1452c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ee12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ef874a8 00007fe19ef874a0 00007fe19ef87498 00007fe19ef87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19faed100 00007fe19ef87460 00007fe19ef87478 00007fe19ef874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe19ef874b8 00007fe19ef874b0 00007fe19ef874a8 00007fe19ef874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000