last executing test programs: 45.106716023s ago: executing program 3 (id=204): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_setup(0x6961, &(0x7f0000000140)={0x0, 0xff8a, 0x38001, 0x3, 0x6}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0xf}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x22, 0x2004, @fd_index=0x2, 0x10000, 0x8, 0xffffffff, 0x1, 0x0, {0x2, r7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r9, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000900000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES64=r8], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r10 = syz_open_procfs(r1, &(0x7f0000000040)='net/fib_trie\x00') ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000000300)=0x13, 0x4) 44.955831715s ago: executing program 3 (id=207): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd60ad"], 0x0) 44.955294639s ago: executing program 3 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=local,m']) 44.829622101s ago: executing program 3 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') umount2(0x0, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) 44.829175276s ago: executing program 3 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000002060502000020000000000000000000140007c0080013400000000009001240000600c0df0001000771e1257c000300686173683a6e22312c6966616365797a3100000000050005000a"], 0x60}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8100) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000700)={{0x80, 0xfc}, 'port0\x00', 0x1a, 0x60004, 0x0, 0x0, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRESHEX, @ANYRES16=r0, @ANYBLOB="6375f0d6ae42a196f0bfc009e7e6a66aed4023eba27196e697dcb4ef0b92766ee7551cb8ca2f967f5aecad1a7d08ae75928cdf753c7e8c0b6f9ea9f5c9c392da3ba80df86496870e4d1fb16956c4e6d7708f852e2b0710f8067f83510a54c5dae627dc140ae6d5ace078", @ANYRES8=r3, @ANYRES32=r3], 0x50) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0x80, 0x80}, 'port0\x00', 0xa5, 0x20454, 0x0, 0x1, 0x7, 0x0, 0x6, 0x0, 0x5, 0x9}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r9, 0xc0485619, &(0x7f00000001c0)={0x80000001, 0x0, "dcc6f634e1403f2b003cd3306565209259a6936336eab171", {}, 0x400}) bind$alg(r8, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) quotactl_fd$Q_SETINFO(r10, 0x0, 0xee00, &(0x7f0000000540)={0x4, 0x7, 0x0, 0x2}) accept4(r8, 0x0, 0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000003000000000000000500000d"], 0x0, 0x4b, 0x0, 0x800, 0x0, 0x0, @void, @value}, 0x28) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 44.550585021s ago: executing program 3 (id=218): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20082, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000004000000000000000a0000002900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffffffffffff0000000000000000ffffffff00000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001900010000000570c8fdf3bab05831d89bcfda8fb897000000000037342fca8cf09362e6fe00e00000b00c57ca0000000000000000004656e07e77f7cd02652eab0000000000000100000000000000000a0020000000000031", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000010001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000fffffffffffffffffeffffffffffffff00"/112], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0), 0x1048b, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101800, 0x3) fdatasync(r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x692693d9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x4000}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x79}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 44.505248553s ago: executing program 32 (id=218): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20082, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000004000000000000000a0000002900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffffffffffff0000000000000000ffffffff00000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001900010000000570c8fdf3bab05831d89bcfda8fb897000000000037342fca8cf09362e6fe00e00000b00c57ca0000000000000000004656e07e77f7cd02652eab0000000000000100000000000000000a0020000000000031", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000010001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000fffffffffffffffffeffffffffffffff00"/112], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0), 0x1048b, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101800, 0x3) fdatasync(r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x692693d9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x4000}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x79}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2.030407523s ago: executing program 4 (id=965): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) 1.958324914s ago: executing program 4 (id=967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x4], [0x4]], '\x00', [{}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x800000}], '\x00', 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x27) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.829325752s ago: executing program 4 (id=973): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='freezer.parent_freezing\x00', 0x275a, 0x0) 1.780236366s ago: executing program 4 (id=975): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) 1.660011155s ago: executing program 0 (id=985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000290000/0x1000)=nil, 0x1000, 0x0, 0x4000810, 0xffffffffffffffff, 0x47447000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000004) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.659956578s ago: executing program 4 (id=986): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x20000, 0x200, 0x2, 0xfffffffd, 0x2}) 1.390292905s ago: executing program 1 (id=996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2404c081}, 0x8000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) pselect6(0x40, &(0x7f0000000840)={0xd1, 0x0, 0x3, 0x7fff, 0x6, 0x3, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0) 1.328375263s ago: executing program 1 (id=998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x12b003, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x36) 1.32806008s ago: executing program 0 (id=999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@loopback, 0x4e22, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x20, 0xc, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x800000000000001, 0x2cb, 0x6, 0x4000000000000}, {0x0, 0x8}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4055}, 0x4800) 1.327891193s ago: executing program 0 (id=1000): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x8c, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x0, 0x0, {0x0, 0x39c, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x1}, 0x401, 0x0, 0x2}}, @NL80211_ATTR_KEYS={0x3c, 0x51, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0xa, 0x4, "0ff658ff8c1c"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x8c}}, 0x4800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000180)={0x1, 0x400, 0x1, 0x1000, 0x3, [0x93a0, 0x3d3, 0x7, 0x7]}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="d9cb0800000000000000ad3de19eda81bc39ccbd630e8ef9170ccf07ef1800322d", 0x21) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c39203100400002b13008c00000008000300", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 250.34692ms ago: executing program 0 (id=1003): r0 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0) timerfd_create(0x7, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096060a0002"], 0x28}}, 0x0) 250.044146ms ago: executing program 2 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}]]}, 0x34}}, 0x50) 249.874637ms ago: executing program 0 (id=1006): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_type(r2, 0x0, 0x2, 0x0) write$cgroup_type(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x50}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 190.531283ms ago: executing program 2 (id=1007): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10020000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0) 190.366208ms ago: executing program 1 (id=1008): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 190.300381ms ago: executing program 2 (id=1009): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x61}, 0x40000020) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 190.239739ms ago: executing program 1 (id=1010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0x0, 0xfffff034}, {0x80000006, 0xfd, 0x0, 0x4}]}, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)}) 120.056065ms ago: executing program 1 (id=1011): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x4, 0xffe, 0xf, 0xff, 0x0, 0xfffc, 0x2401}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 119.905403ms ago: executing program 2 (id=1012): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b00000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) 50.313835ms ago: executing program 1 (id=1013): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "6c05004b"}, @global=@item_012={0x1, 0x1, 0x8, "c0"}]}}, 0x0}, 0x0) 50.075031ms ago: executing program 0 (id=1014): syz_emit_ethernet(0x3b6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0xffffffffffffffff, 0x440101) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 285.159µs ago: executing program 2 (id=1015): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffe2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="1802000000200000000000000000000085000000070000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r5}, 0x14) 83.915µs ago: executing program 4 (id=1016): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 45.673441][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.675913][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.678665][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.681101][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.683416][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.686087][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.688723][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.690772][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.693284][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.695610][ T40] audit: type=1400 audit(1743784737.376:110): avc: denied { read } for pid=5942 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.695634][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.698477][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.706362][ T40] audit: type=1400 audit(1743784737.376:111): avc: denied { open } for pid=5942 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.706460][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.707315][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.713304][ T40] audit: type=1400 audit(1743784737.376:112): avc: denied { mounton } for pid=5942 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.714028][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.715631][ T5296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.717129][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.723298][ T5296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.726364][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.727510][ T5296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.844496][ T40] audit: type=1400 audit(1743784737.526:113): avc: denied { module_request } for pid=5942 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.906663][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 45.980723][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 46.007891][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 46.197122][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.200001][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.202119][ T5942] bridge_slave_0: entered allmulticast mode [ 46.204531][ T5942] bridge_slave_0: entered promiscuous mode [ 46.246782][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.248911][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.250931][ T5938] bridge_slave_0: entered allmulticast mode [ 46.253433][ T5938] bridge_slave_0: entered promiscuous mode [ 46.256087][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.258167][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.260313][ T5942] bridge_slave_1: entered allmulticast mode [ 46.262666][ T5942] bridge_slave_1: entered promiscuous mode [ 46.292162][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.294736][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.297264][ T5938] bridge_slave_1: entered allmulticast mode [ 46.300310][ T5938] bridge_slave_1: entered promiscuous mode [ 46.330337][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.332469][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.334568][ T5949] bridge_slave_0: entered allmulticast mode [ 46.337093][ T5949] bridge_slave_0: entered promiscuous mode [ 46.340139][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.342247][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.344586][ T5949] bridge_slave_1: entered allmulticast mode [ 46.347035][ T5949] bridge_slave_1: entered promiscuous mode [ 46.364783][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 46.386959][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.407651][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.411778][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.415441][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.438728][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.442478][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.517621][ T5949] team0: Port device team_slave_0 added [ 46.523342][ T5942] team0: Port device team_slave_0 added [ 46.529061][ T5949] team0: Port device team_slave_1 added [ 46.543542][ T5942] team0: Port device team_slave_1 added [ 46.589434][ T5938] team0: Port device team_slave_0 added [ 46.617632][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.621313][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.623825][ T5944] bridge_slave_0: entered allmulticast mode [ 46.626975][ T5944] bridge_slave_0: entered promiscuous mode [ 46.630439][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.632372][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.639656][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.644403][ T5938] team0: Port device team_slave_1 added [ 46.664776][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.666784][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.669040][ T5944] bridge_slave_1: entered allmulticast mode [ 46.671381][ T5944] bridge_slave_1: entered promiscuous mode [ 46.674219][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.676233][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.683360][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.700435][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.702438][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.710002][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.768025][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.770118][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.777435][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.781128][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.783155][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.790393][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.801007][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.804053][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.806291][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.815373][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.847472][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.900178][ T5942] hsr_slave_0: entered promiscuous mode [ 46.902286][ T5942] hsr_slave_1: entered promiscuous mode [ 46.939527][ T5944] team0: Port device team_slave_0 added [ 46.945760][ T5949] hsr_slave_0: entered promiscuous mode [ 46.948612][ T5949] hsr_slave_1: entered promiscuous mode [ 46.951309][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.953834][ T5949] Cannot create hsr debugfs directory [ 46.983863][ T5944] team0: Port device team_slave_1 added [ 47.072254][ T5938] hsr_slave_0: entered promiscuous mode [ 47.074262][ T5938] hsr_slave_1: entered promiscuous mode [ 47.076281][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.078959][ T5938] Cannot create hsr debugfs directory [ 47.097109][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.100062][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.109422][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.115405][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.117480][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.125005][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.198553][ T5944] hsr_slave_0: entered promiscuous mode [ 47.200536][ T5944] hsr_slave_1: entered promiscuous mode [ 47.202369][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.204459][ T5944] Cannot create hsr debugfs directory [ 47.412553][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.417419][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.424955][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.428997][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.463123][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.467355][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.471118][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.474837][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.511546][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.515835][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.521237][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.526474][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.560879][ T5944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.570276][ T5944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.574168][ T5944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.578141][ T5944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.602206][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.628454][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.644512][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.646858][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.654973][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.657046][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.666931][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.683719][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.699526][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.704517][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.706533][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.716122][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.718184][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.739127][ T5940] Bluetooth: hci0: command tx timeout [ 47.740677][ T5947] Bluetooth: hci1: command tx timeout [ 47.744022][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.756719][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.765204][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.767280][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.769064][ T40] audit: type=1400 audit(1743784739.456:114): avc: denied { sys_module } for pid=5949 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.784423][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.790652][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.792759][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.811846][ T5947] Bluetooth: hci2: command tx timeout [ 47.811864][ T5940] Bluetooth: hci3: command tx timeout [ 47.818546][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.820603][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.830714][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.832952][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.859896][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.869849][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.911174][ T5949] veth0_vlan: entered promiscuous mode [ 47.915938][ T5949] veth1_vlan: entered promiscuous mode [ 47.934923][ T5949] veth0_macvtap: entered promiscuous mode [ 47.941725][ T5949] veth1_macvtap: entered promiscuous mode [ 47.957629][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.966455][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.970507][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.976932][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.979929][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.982317][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.984621][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.025391][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.029711][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.056786][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.059433][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.072215][ T5942] veth0_vlan: entered promiscuous mode [ 48.087652][ T5944] veth0_vlan: entered promiscuous mode [ 48.094306][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.095089][ T5942] veth1_vlan: entered promiscuous mode [ 48.096661][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.101291][ T5944] veth1_vlan: entered promiscuous mode [ 48.115540][ T5938] veth0_vlan: entered promiscuous mode [ 48.129903][ T5938] veth1_vlan: entered promiscuous mode [ 48.140706][ T5942] veth0_macvtap: entered promiscuous mode [ 48.147364][ T5942] veth1_macvtap: entered promiscuous mode [ 48.159063][ T5944] veth0_macvtap: entered promiscuous mode [ 48.165165][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.165463][ T5944] veth1_macvtap: entered promiscuous mode [ 48.174106][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.177933][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.182637][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.194480][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.197396][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.201534][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.209259][ T5938] veth0_macvtap: entered promiscuous mode [ 48.212561][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.215413][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.218116][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.222003][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.225933][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.228193][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.230740][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.233314][ T5942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.235783][ T5942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.246046][ T5938] veth1_macvtap: entered promiscuous mode [ 48.250798][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.253292][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.255874][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.259493][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.262908][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.272600][ T5944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.275195][ T5944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.277700][ T5944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.280452][ T5944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.295986][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.300393][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.303271][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.306680][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.310115][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.313320][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.318022][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.348450][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.351635][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.354317][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.357624][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.361284][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.364034][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.367585][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.370783][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.373446][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.388898][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.391685][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.394160][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.396621][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.416363][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.419936][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.453610][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.456878][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.500969][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.503311][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.525077][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.527305][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.533107][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.562125][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.564330][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.630504][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 48.659423][ T6022] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 48.661809][ T6022] lo: entered promiscuous mode [ 48.663377][ T6022] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 48.675165][ T6020] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 48.827278][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 48.839571][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.842576][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.845202][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.848206][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.851890][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.854829][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.857550][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.861161][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.876689][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 49.345129][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 49.412980][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 49.432317][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.436171][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.444208][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.447840][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.450960][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.454214][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.457038][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.460444][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.463736][ T6054] tipc: Enabling of bearer rejected, failed to enable media [ 49.472195][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 49.731296][ T6062] netlink: 'syz.2.18': attribute type 10 has an invalid length. [ 49.734369][ T6062] lo: entered promiscuous mode [ 49.736551][ T6062] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 49.808803][ T5947] Bluetooth: hci1: command tx timeout [ 49.888685][ T5947] Bluetooth: hci3: command tx timeout [ 49.889893][ T5296] Bluetooth: hci2: command tx timeout [ 50.143369][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 50.330003][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 50.343146][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.346595][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.349702][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.352506][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.355222][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.357993][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.361807][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.364835][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.373411][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'. [ 50.688487][ T5296] Bluetooth: hci4: command 0x1003 tx timeout [ 50.688503][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.091186][ T6096] netlink: 'syz.1.31': attribute type 10 has an invalid length. [ 51.093449][ T6096] lo: entered promiscuous mode [ 51.095055][ T6096] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 51.235850][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 51.235868][ T40] audit: type=1400 audit(1743784742.916:178): avc: denied { create } for pid=6113 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.257764][ T6118] ======================================================= [ 51.257764][ T6118] WARNING: The mand mount option has been deprecated and [ 51.257764][ T6118] and is ignored by this kernel. Remove the mand [ 51.257764][ T6118] option from the mount to silence this warning. [ 51.257764][ T6118] ======================================================= [ 51.258763][ T6116] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 51.270758][ T40] audit: type=1400 audit(1743784742.956:179): avc: denied { create } for pid=6115 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.276587][ T40] audit: type=1400 audit(1743784742.956:180): avc: denied { ioctl } for pid=6115 comm="syz.0.42" path="socket:[7786]" dev="sockfs" ino=7786 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.290070][ T40] audit: type=1400 audit(1743784742.976:181): avc: denied { setopt } for pid=6113 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.295480][ T40] audit: type=1400 audit(1743784742.976:182): avc: denied { mount } for pid=6117 comm="syz.1.43" name="/" dev="9p" ino=37880062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.302459][ T40] audit: type=1400 audit(1743784742.976:183): avc: denied { write } for pid=6117 comm="syz.1.43" name="/" dev="9p" ino=37880062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.309229][ T40] audit: type=1400 audit(1743784742.976:184): avc: denied { add_name } for pid=6117 comm="syz.1.43" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.316180][ T40] audit: type=1400 audit(1743784742.976:185): avc: denied { create } for pid=6117 comm="syz.1.43" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.326318][ T40] audit: type=1400 audit(1743784742.976:186): avc: denied { associate } for pid=6117 comm="syz.1.43" name="pids.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.337470][ T6118] netfs: Couldn't get user pages (rc=-14) [ 51.346721][ T40] audit: type=1400 audit(1743784743.006:187): avc: denied { read append open } for pid=6117 comm="syz.1.43" path="/13/file0/pids.current" dev="9p" ino=37880143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.898512][ T5940] Bluetooth: hci1: command tx timeout [ 51.915412][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 51.925573][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.930630][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.935135][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.938025][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.941081][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.944264][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.947087][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.950089][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.968646][ T5940] Bluetooth: hci2: command tx timeout [ 51.968799][ T5296] Bluetooth: hci3: command tx timeout [ 52.185327][ T6150] tipc: Started in network mode [ 52.186865][ T6150] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 52.191803][ T6150] tipc: Enabled bearer , priority 10 [ 52.410139][ T6171] block device autoloading is deprecated and will be removed. [ 52.542723][ T6184] bond_slave_0: entered promiscuous mode [ 52.545146][ T6184] bond_slave_1: entered promiscuous mode [ 52.546854][ T6184] macvlan2: entered promiscuous mode [ 52.549407][ T6184] bond0: entered promiscuous mode [ 52.552641][ T6184] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 53.056196][ T6235] vlan1: entered allmulticast mode [ 53.058008][ T6235] veth0_vlan: entered allmulticast mode [ 53.146981][ T6235] vlan1 (unregistering): left allmulticast mode [ 53.149556][ T6235] veth0_vlan (unregistering): left allmulticast mode [ 53.197823][ T834] tipc: Node number set to 4269801488 [ 53.254535][ T6246] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 53.311813][ T6253] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.515905][ T6271] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 53.695826][ T6292] FAULT_INJECTION: forcing a failure. [ 53.695826][ T6292] name failslab, interval 1, probability 0, space 0, times 1 [ 53.699546][ T6292] CPU: 3 UID: 0 PID: 6292 Comm: syz.0.109 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 53.699560][ T6292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.699566][ T6292] Call Trace: [ 53.699570][ T6292] [ 53.699574][ T6292] dump_stack_lvl+0x16c/0x1f0 [ 53.699607][ T6292] should_fail_ex+0x512/0x640 [ 53.699622][ T6292] ? fs_reclaim_acquire+0xae/0x150 [ 53.699637][ T6292] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 53.699651][ T6292] should_failslab+0xc2/0x120 [ 53.699663][ T6292] __kmalloc_noprof+0xd2/0x510 [ 53.699675][ T6292] tomoyo_realpath_from_path+0xc2/0x6e0 [ 53.699691][ T6292] ? tomoyo_profile+0x47/0x60 [ 53.699701][ T6292] tomoyo_path_number_perm+0x245/0x580 [ 53.699712][ T6292] ? tomoyo_path_number_perm+0x237/0x580 [ 53.699725][ T6292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 53.699738][ T6292] ? find_held_lock+0x2b/0x80 [ 53.699761][ T6292] ? find_held_lock+0x2b/0x80 [ 53.699773][ T6292] ? hook_file_ioctl_common+0x145/0x410 [ 53.699785][ T6292] ? __fget_files+0x20e/0x3c0 [ 53.699797][ T6292] security_file_ioctl+0x9b/0x240 [ 53.699812][ T6292] __x64_sys_ioctl+0xb7/0x200 [ 53.699826][ T6292] do_syscall_64+0xcd/0x260 [ 53.699840][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.699850][ T6292] RIP: 0033:0x7f8bebf8d169 [ 53.699859][ T6292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.699868][ T6292] RSP: 002b:00007f8becd74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.699877][ T6292] RAX: ffffffffffffffda RBX: 00007f8bec1a5fa0 RCX: 00007f8bebf8d169 [ 53.699883][ T6292] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 53.699888][ T6292] RBP: 00007f8becd74090 R08: 0000000000000000 R09: 0000000000000000 [ 53.699894][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.699899][ T6292] R13: 0000000000000000 R14: 00007f8bec1a5fa0 R15: 00007ffe5129f098 [ 53.699911][ T6292] [ 53.699915][ T6292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.955506][ T1140] Bluetooth: hci5: Frame reassembly failed (-84) [ 53.957727][ T6321] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 53.961132][ T1140] Bluetooth: hci5: Frame reassembly failed (-84) [ 53.968404][ T5947] Bluetooth: hci1: command tx timeout [ 54.048718][ T5954] Bluetooth: hci3: command tx timeout [ 54.050409][ T5947] Bluetooth: hci2: command tx timeout [ 54.208432][ T5296] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 54.208584][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 54.295943][ T6352] xt_hashlimit: size too large, truncated to 1048576 [ 54.758473][ T6367] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.828381][ T24] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 54.978397][ T24] usb 7-1: Invalid ep0 maxpacket: 16 [ 55.118398][ T24] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 55.222239][ T6371] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 55.268468][ T24] usb 7-1: Invalid ep0 maxpacket: 16 [ 55.271928][ T24] usb usb7-port1: attempt power cycle [ 55.303864][ T6373] ucma_write: process 52 (syz.3.122) changed security contexts after opening file descriptor, this is not allowed. [ 55.322514][ T6373] __nla_validate_parse: 5 callbacks suppressed [ 55.322524][ T6373] netlink: 108 bytes leftover after parsing attributes in process `syz.3.122'. [ 55.524959][ T6381] warning: `syz.3.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.532678][ T6381] tun0: tun_chr_ioctl cmd 1074025672 [ 55.534135][ T6381] tun0: ignored: set checksum disabled [ 55.618331][ T24] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 55.638921][ T24] usb 7-1: Invalid ep0 maxpacket: 16 [ 55.778433][ T24] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 55.799500][ T24] usb 7-1: Invalid ep0 maxpacket: 16 [ 55.801157][ T24] usb usb7-port1: unable to enumerate USB device [ 55.978520][ T5940] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 55.979167][ T5947] Bluetooth: hci5: command 0x1003 tx timeout [ 56.014187][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 56.031639][ T6395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.097729][ T6395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.168971][ T6395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.278349][ T6395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.422151][ T6395] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.433919][ T6395] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.442894][ T6395] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.450959][ T6395] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.545663][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 56.545674][ T40] audit: type=1400 audit(1743784748.226:281): avc: denied { connect } for pid=6402 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.555296][ T40] audit: type=1400 audit(1743784748.226:282): avc: denied { name_connect } for pid=6402 comm="syz.3.134" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 56.589021][ T40] audit: type=1400 audit(1743784748.276:283): avc: denied { ioctl } for pid=6406 comm="syz.3.135" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10002 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.622746][ T6411] Zero length message leads to an empty skb [ 56.680129][ T40] audit: type=1400 audit(1743784748.366:284): avc: denied { create } for pid=6414 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.688352][ T40] audit: type=1400 audit(1743784748.366:285): avc: denied { bind } for pid=6414 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.698204][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 57.253125][ T40] audit: type=1400 audit(1743784748.936:286): avc: denied { create } for pid=6417 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.257920][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 57.259238][ T40] audit: type=1400 audit(1743784748.936:287): avc: denied { create } for pid=6417 comm="syz.0.140" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.274493][ T40] audit: type=1400 audit(1743784748.936:288): avc: denied { create } for pid=6417 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 57.280839][ T40] audit: type=1400 audit(1743784748.936:289): avc: denied { write } for pid=6417 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 57.286046][ T40] audit: type=1400 audit(1743784748.946:290): avc: denied { setopt } for pid=6417 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.392948][ T6427] Bluetooth: MGMT ver 1.23 [ 57.396098][ T6427] dccp_v6_rcv: dropped packet with invalid checksum [ 57.483849][ T6433] tipc: Enabling of bearer rejected, failed to enable media [ 57.486344][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 57.546453][ T6437] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.553491][ T6437] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.609902][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'. [ 57.612544][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 57.614865][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 57.618373][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'. [ 57.757174][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 57.762589][ T6456] Bluetooth: MGMT ver 1.23 [ 57.842720][ T6460] ipvlan0: entered promiscuous mode [ 57.844326][ T6460] ipvlan0: entered allmulticast mode [ 57.845908][ T6460] veth0_vlan: entered allmulticast mode [ 58.032579][ T6479] XFS (nbd0): no-recovery mounts must be read-only. [ 58.048417][ T5940] Bluetooth: hci4: command 0x1003 tx timeout [ 58.048527][ T5296] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 58.187212][ T6490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.200275][ T6490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.821111][ T6511] nbd: must specify a size in bytes for the device [ 58.891206][ T6511] netlink: 'syz.0.175': attribute type 4 has an invalid length. [ 59.089633][ T6514] nbd0: detected capacity change from 0 to 67108884 [ 59.094601][ T5955] block nbd0: Send control failed (result -89) [ 59.096868][ T5955] block nbd0: Request send failed, requeueing [ 59.099403][ T5296] block nbd0: Receive control failed (result -32) [ 59.099634][ T72] block nbd0: Dead connection, failed to find a fallback [ 59.105010][ T72] block nbd0: shutting down sockets [ 59.107315][ T72] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.111483][ T72] Buffer I/O error on dev nbd0, logical block 0, async page read [ 59.114507][ T5955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.117051][ T5955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 59.119557][ T5955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.122191][ T5955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 59.125287][ T5955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.128946][ T5955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 59.132023][ T5955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.134737][ T5955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 59.137020][ T5955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.139591][ T5955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 59.141807][ T5955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.145870][ T5955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 59.149565][ T5955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.153572][ T5955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 59.155755][ T5955] ldm_validate_partition_table(): Disk read failed. [ 59.157988][ T5955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.160552][ T5955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 59.162747][ T5955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.166196][ T5955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 59.169573][ T5955] Dev nbd0: unable to read RDB block 0 [ 59.171911][ T5955] nbd0: unable to read partition table [ 59.179627][ T5955] ldm_validate_partition_table(): Disk read failed. [ 59.182630][ T5955] Dev nbd0: unable to read RDB block 0 [ 59.185356][ T5955] nbd0: unable to read partition table [ 59.492147][ T6528] random: crng reseeded on system resumption [ 59.858422][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.008518][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 60.014486][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 60.019237][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.40 [ 60.021682][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.024665][ T10] usb 6-1: Product: Р [ 60.026244][ T10] usb 6-1: Manufacturer: 㭨ﱘ튬婺利ᥙ卟믟劤∅择䐫쓵훀蘺囘枤㋊喽穃ꙐᎴ製锣뙗罉鶽ꦃ [ 60.031756][ T10] usb 6-1: SerialNumber: ო릈偌ূ楎ꞯꔬ퓼롸㱘句鳠脩鴺⚙誄ॱ侮₪饌硟鎉钺ꔿ嚵꥽崂㗲粃梌춏秙帾妟왱豋ꄪ♽敗왨뺁媆╍̭쥗鱷郆竑毠ⴧ뤏钢騘๟ᚺঙᖽﾭ疸ゞ茜҉⩥篻괋 [ 60.174981][ T6538] tipc: Started in network mode [ 60.176488][ T6538] tipc: Node identity 7f000001, cluster identity 4711 [ 60.180745][ T6538] tipc: Enabled bearer , priority 10 [ 60.231903][ T6538] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 60.514961][ T6557] vlan3: entered allmulticast mode [ 60.516520][ T6557] bond0: entered allmulticast mode [ 60.517965][ T6557] bond_slave_0: entered allmulticast mode [ 60.519969][ T6557] bond_slave_1: entered allmulticast mode [ 60.619000][ T6559] __nla_validate_parse: 6 callbacks suppressed [ 60.619059][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 60.687842][ T6563] netlink: 596 bytes leftover after parsing attributes in process `syz.3.195'. [ 60.764462][ T6571] FAULT_INJECTION: forcing a failure. [ 60.764462][ T6571] name failslab, interval 1, probability 0, space 0, times 0 [ 60.770793][ T6571] CPU: 3 UID: 0 PID: 6571 Comm: syz.3.199 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 60.770814][ T6571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.770823][ T6571] Call Trace: [ 60.770829][ T6571] [ 60.770835][ T6571] dump_stack_lvl+0x16c/0x1f0 [ 60.770880][ T6571] should_fail_ex+0x512/0x640 [ 60.770903][ T6571] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 60.770922][ T6571] should_failslab+0xc2/0x120 [ 60.770940][ T6571] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 60.770957][ T6571] ? __alloc_skb+0x2b2/0x380 [ 60.770978][ T6571] __alloc_skb+0x2b2/0x380 [ 60.770995][ T6571] ? __pfx___alloc_skb+0x10/0x10 [ 60.771015][ T6571] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 60.771040][ T6571] netlink_alloc_large_skb+0x69/0x130 [ 60.771061][ T6571] netlink_sendmsg+0x6a1/0xdd0 [ 60.771086][ T6571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.771112][ T6571] ____sys_sendmsg+0xa95/0xc70 [ 60.771133][ T6571] ? copy_msghdr_from_user+0x10a/0x160 [ 60.771151][ T6571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.771190][ T6571] ___sys_sendmsg+0x134/0x1d0 [ 60.771211][ T6571] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.771255][ T6571] __sys_sendmsg+0x16d/0x220 [ 60.771274][ T6571] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.771306][ T6571] do_syscall_64+0xcd/0x260 [ 60.771327][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.771343][ T6571] RIP: 0033:0x7f684398d169 [ 60.771356][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.771371][ T6571] RSP: 002b:00007f68447a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.771385][ T6571] RAX: ffffffffffffffda RBX: 00007f6843ba5fa0 RCX: 00007f684398d169 [ 60.771394][ T6571] RDX: 0000000000080040 RSI: 0000200000000180 RDI: 0000000000000003 [ 60.771402][ T6571] RBP: 00007f68447a2090 R08: 0000000000000000 R09: 0000000000000000 [ 60.771409][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.771417][ T6571] R13: 0000000000000000 R14: 00007f6843ba5fa0 R15: 00007ffe92e06de8 [ 60.771436][ T6571] [ 60.854026][ C3] vkms_vblank_simulate: vblank timer overrun [ 60.870756][ T6579] netlink: 'syz.0.203': attribute type 12 has an invalid length. [ 61.016801][ T6595] FAULT_INJECTION: forcing a failure. [ 61.016801][ T6595] name failslab, interval 1, probability 0, space 0, times 0 [ 61.020749][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.0.210 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 61.020764][ T6595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.020770][ T6595] Call Trace: [ 61.020776][ T6595] [ 61.020780][ T6595] dump_stack_lvl+0x16c/0x1f0 [ 61.020807][ T6595] should_fail_ex+0x512/0x640 [ 61.020818][ T6595] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 61.020831][ T6595] should_failslab+0xc2/0x120 [ 61.020842][ T6595] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 61.020852][ T6595] ? __d_alloc+0x31/0xaa0 [ 61.020865][ T6595] __d_alloc+0x31/0xaa0 [ 61.020875][ T6595] ? lockdep_init_map_type+0x5c/0x280 [ 61.020886][ T6595] d_alloc_pseudo+0x1c/0xc0 [ 61.020900][ T6595] alloc_file_pseudo+0xcf/0x230 [ 61.020913][ T6595] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 61.020929][ T6595] sock_alloc_file+0x50/0x210 [ 61.020942][ T6595] do_accept+0x240/0x530 [ 61.020952][ T6595] ? do_raw_spin_lock+0x12c/0x2b0 [ 61.020963][ T6595] ? __pfx_do_accept+0x10/0x10 [ 61.020979][ T6595] __sys_accept4+0x100/0x1b0 [ 61.020989][ T6595] ? __pfx___sys_accept4+0x10/0x10 [ 61.020998][ T6595] ? __pfx_ksys_write+0x10/0x10 [ 61.021009][ T6595] __x64_sys_accept4+0x96/0x100 [ 61.021018][ T6595] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.021030][ T6595] do_syscall_64+0xcd/0x260 [ 61.021053][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.021063][ T6595] RIP: 0033:0x7f8bebf8d169 [ 61.021071][ T6595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.021081][ T6595] RSP: 002b:00007f8becd74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 61.021090][ T6595] RAX: ffffffffffffffda RBX: 00007f8bec1a5fa0 RCX: 00007f8bebf8d169 [ 61.021096][ T6595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.021101][ T6595] RBP: 00007f8becd74090 R08: 0000000000000000 R09: 0000000000000000 [ 61.021107][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.021112][ T6595] R13: 0000000000000000 R14: 00007f8bec1a5fa0 R15: 00007ffe5129f098 [ 61.021123][ T6595] [ 61.228394][ T29] tipc: Node number set to 2130706433 [ 61.390337][ T1143] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.404042][ T6610] dccp_close: ABORT with 40 bytes unread [ 61.478785][ T1143] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.536386][ T1143] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.587721][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.590625][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.593500][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.601911][ T1143] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.603325][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.608747][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.610011][ T40] kauditd_printk_skb: 915 callbacks suppressed [ 61.610019][ T40] audit: type=1400 audit(1743784753.296:1206): avc: denied { rename } for pid=5337 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.619715][ T40] audit: type=1400 audit(1743784753.296:1207): avc: denied { unlink } for pid=5337 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.626612][ T40] audit: type=1400 audit(1743784753.296:1208): avc: denied { create } for pid=5337 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.633531][ T40] audit: type=1400 audit(1743784753.296:1209): avc: denied { mounton } for pid=6614 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.640839][ T40] audit: type=1400 audit(1743784753.296:1210): avc: denied { setopt } for pid=6612 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.648219][ T40] audit: type=1400 audit(1743784753.296:1211): avc: denied { create } for pid=6612 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.654396][ T40] audit: type=1400 audit(1743784753.306:1212): avc: denied { read } for pid=6612 comm="syz.0.220" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.662552][ T40] audit: type=1400 audit(1743784753.306:1213): avc: denied { read } for pid=6612 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.747637][ T1143] bridge_slave_1: left allmulticast mode [ 61.749867][ T1143] bridge_slave_1: left promiscuous mode [ 61.752389][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.758674][ T1143] bridge_slave_0: left allmulticast mode [ 61.760312][ T1143] bridge_slave_0: left promiscuous mode [ 61.761928][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.975068][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.980449][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.985071][ T1143] bond0 (unregistering): Released all slaves [ 61.995684][ T6614] chnl_net:caif_netlink_parms(): no params data found [ 62.114878][ T6614] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.117409][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.119916][ T6614] bridge_slave_0: entered allmulticast mode [ 62.122235][ T6614] bridge_slave_0: entered promiscuous mode [ 62.125072][ T6614] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.126945][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.131975][ T6614] bridge_slave_1: entered allmulticast mode [ 62.134401][ T6614] bridge_slave_1: entered promiscuous mode [ 62.169440][ T6614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.174241][ T6614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.239235][ T6614] team0: Port device team_slave_0 added [ 62.243197][ T6614] team0: Port device team_slave_1 added [ 62.285503][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.287994][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.297997][ T6614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.306529][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.309162][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.318464][ T6614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.336488][ T1143] hsr_slave_0: left promiscuous mode [ 62.339070][ T1143] hsr_slave_1: left promiscuous mode [ 62.340998][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.343071][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.346148][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.349860][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.369740][ T1143] veth1_macvtap: left promiscuous mode [ 62.371536][ T1143] veth0_macvtap: left promiscuous mode [ 62.373239][ T1143] veth1_vlan: left promiscuous mode [ 62.375676][ T1143] veth0_vlan: left promiscuous mode [ 62.743095][ T40] audit: type=1400 audit(1743784754.426:1214): avc: denied { mount } for pid=6640 comm="syz.0.223" name="/" dev="autofs" ino=13476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 62.803877][ T40] audit: type=1400 audit(1743784754.486:1215): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 62.905697][ T6648] NILFS (nbd2): device size too small [ 62.931838][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 62.984136][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 63.489937][ T6614] hsr_slave_0: entered promiscuous mode [ 63.491909][ T6614] hsr_slave_1: entered promiscuous mode [ 63.493795][ T6614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.495932][ T6614] Cannot create hsr debugfs directory [ 63.524521][ T6681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.536436][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.658448][ T5940] Bluetooth: hci0: command tx timeout [ 63.671845][ T6614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.679507][ T6614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.686092][ T6614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.691922][ T6614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.748864][ T6614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.763602][ T6614] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.770382][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.772645][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.781089][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.783250][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.798450][ T5943] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.889100][ T6614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.978482][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 63.985342][ T5943] usb 5-1: config 1 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.991474][ T5943] usb 5-1: config 1 interface 0 has no altsetting 0 [ 63.995590][ T5943] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.40 [ 63.999151][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.002070][ T5943] usb 5-1: Product: syz [ 64.003801][ T6614] veth0_vlan: entered promiscuous mode [ 64.003885][ T5943] usb 5-1: Manufacturer: syz [ 64.006948][ T5943] usb 5-1: SerialNumber: syz [ 64.009093][ T6614] veth1_vlan: entered promiscuous mode [ 64.024677][ T6614] veth0_macvtap: entered promiscuous mode [ 64.033599][ T6614] veth1_macvtap: entered promiscuous mode [ 64.041768][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.044554][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.047111][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.050252][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.053340][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.056078][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.060501][ T6614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.063906][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.066828][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.070653][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.073440][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.076015][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.078806][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.082284][ T6614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.088320][ T6614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.090614][ T6614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.093050][ T6614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.095743][ T6614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.140524][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.142676][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.156181][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.158401][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.239294][ T5943] usbhid 5-1:1.0: can't add hid device: -71 [ 64.241101][ T5943] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 64.257413][ T5943] usb 5-1: USB disconnect, device number 2 [ 64.283173][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 64.287708][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 64.481017][ T6743] netlink: 'syz.4.240': attribute type 10 has an invalid length. [ 64.483954][ T6743] lo: entered promiscuous mode [ 64.486108][ T6743] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 64.526290][ T6746] Bluetooth: MGMT ver 1.23 [ 64.528020][ T6746] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 64.532328][ T6746] xt_ecn: cannot match TCP bits for non-tcp packets [ 64.754084][ T6763] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.016835][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 65.039451][ T6781] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.098500][ T10] usbhid 6-1:1.0: can't add hid device: -32 [ 65.101234][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -32 [ 65.122072][ T5982] usb 6-1: USB disconnect, device number 2 [ 65.128930][ T6781] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.212867][ T6781] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.315862][ T6786] can0: slcan on ptm0. [ 65.321034][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 65.336421][ T6781] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.346709][ T6786] bond_slave_0: entered promiscuous mode [ 65.349192][ T6786] bond_slave_1: entered promiscuous mode [ 65.351689][ T6786] macvlan0: entered promiscuous mode [ 65.353704][ T6786] bond0: entered promiscuous mode [ 65.357087][ T6786] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 65.399409][ T6781] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.407405][ T6781] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.414548][ T6781] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.423049][ T6781] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.439868][ T6785] can0 (unregistered): slcan off ptm0. [ 65.553162][ T6811] netlink: 'syz.4.254': attribute type 3 has an invalid length. [ 65.625341][ T6824] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 65.720031][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 65.723076][ T6826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6826 comm=syz.4.259 [ 65.728483][ T5940] Bluetooth: hci0: command tx timeout [ 65.846499][ T6837] dccp_invalid_packet: invalid packet type [ 66.435538][ T6875] Attempt to restore checkpoint with obsolete wellknown handles [ 66.447152][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.279'. [ 66.450375][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.279'. [ 66.817310][ T6905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=6905 comm=syz.2.288 [ 66.818734][ T6058] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 66.853946][ T6911] syz_tun: entered allmulticast mode [ 66.867439][ T6910] syz_tun: left allmulticast mode [ 66.894324][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 66.894336][ T40] audit: type=1400 audit(1743784758.576:1246): avc: denied { read append } for pid=6912 comm="syz.0.290" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.900052][ T6913] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 66.903033][ T40] audit: type=1400 audit(1743784758.576:1247): avc: denied { open } for pid=6912 comm="syz.0.290" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.905758][ T6913] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 66.915956][ T6913] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 66.915995][ T40] audit: type=1400 audit(1743784758.596:1248): avc: denied { firmware_load } for pid=6912 comm="syz.0.290" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 66.948671][ T40] audit: type=1400 audit(1743784758.626:1249): avc: denied { ioctl } for pid=6912 comm="syz.0.290" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.970151][ T6058] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 66.973304][ T6058] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 66.976350][ T6058] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 66.979453][ T6058] usb 6-1: config 1 interface 0 has no altsetting 0 [ 66.983435][ T6058] usb 6-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.40 [ 66.986576][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.988732][ T6058] usb 6-1: Product: Џ [ 66.989902][ T6058] usb 6-1: Manufacturer: ᐁ [ 66.991255][ T6058] usb 6-1: SerialNumber: 춵다胜萙唫阾篊猦勺暪麦ﮍ큚ᛱ下咩깆⍶ん૏䳻捳틑꾒梻鋍蘡晗饌撳餗쟋⁄發⤇ၪ娏┮ꆱ붎袶䵯捯⓯é秔䞧ꙝ찁焿⺤ԓ [ 66.999402][ T6888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.002279][ T6888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.175975][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 67.293850][ T6058] usbhid 6-1:1.0: can't add hid device: -71 [ 67.296323][ T6058] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 67.301387][ T6058] usb 6-1: USB disconnect, device number 3 [ 67.794788][ T6928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.294'. [ 67.801536][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 68.043381][ T40] audit: type=1400 audit(1743784759.726:1250): avc: denied { setopt } for pid=6950 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 68.053487][ T40] audit: type=1400 audit(1743784759.736:1251): avc: denied { create } for pid=6952 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 68.058858][ T40] audit: type=1400 audit(1743784759.736:1252): avc: denied { setopt } for pid=6952 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 68.093023][ T6955] can0: slcan on ptm0. [ 68.179101][ T6967] dccp_v6_rcv: dropped packet with invalid checksum [ 68.194332][ T40] audit: type=1400 audit(1743784759.876:1253): avc: denied { ioctl } for pid=6963 comm="syz.1.309" path="socket:[12160]" dev="sockfs" ino=12160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 68.200575][ T6966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=6966 comm=syz.1.309 [ 68.204311][ T40] audit: type=1400 audit(1743784759.876:1254): avc: denied { write } for pid=6963 comm="syz.1.309" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.207981][ T6834] block nbd4: shutting down sockets [ 68.275130][ T6970] netlink: 830 bytes leftover after parsing attributes in process `syz.1.311'. [ 68.278002][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 68.302769][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 68.303706][ T40] audit: type=1400 audit(1743784759.986:1255): avc: denied { create } for pid=6973 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.307199][ T6977] tmpfs: Bad value for 'mpol' [ 68.315410][ T6977] xt_l2tp: v2 tid > 0xffff: 150994944 [ 68.340197][ T1021] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 68.424828][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 68.427426][ T6981] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 68.490153][ T1021] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 68.494019][ T1021] usb 7-1: config 0 has no interfaces? [ 68.497050][ T1021] usb 7-1: config 0 has no interfaces? [ 68.500155][ T1021] usb 7-1: config 0 has no interfaces? [ 68.502923][ T1021] usb 7-1: config 0 has no interfaces? [ 68.507677][ T1021] usb 7-1: config 0 has no interfaces? [ 68.510472][ T1021] usb 7-1: config 0 has no interfaces? [ 68.512676][ T1021] usb 7-1: config 0 has no interfaces? [ 68.515394][ T1021] usb 7-1: config 0 has no interfaces? [ 68.519760][ T1021] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 68.523575][ T1021] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 68.531186][ T1021] usb 7-1: Product: syz [ 68.532893][ T1021] usb 7-1: Manufacturer: syz [ 68.534747][ T1021] usb 7-1: SerialNumber: syz [ 68.542142][ T1021] usb 7-1: config 0 descriptor?? [ 68.553231][ T6991] nfs4: Unknown parameter ' ' [ 68.808702][ T7009] capability: warning: `syz.2.307' uses deprecated v2 capabilities in a way that may be insecure [ 68.812048][ T7009] 9pnet_rdma: rdma_create_trans (7009): problem binding to privport: 13 [ 68.830108][ T6955] can0 (unregistered): slcan off ptm0. [ 68.843977][ T5982] usb 7-1: USB disconnect, device number 6 [ 69.071794][ T834] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 69.073906][ T834] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 69.075925][ T834] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 69.077931][ T834] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 69.080657][ T834] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 69.082630][ T834] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 69.084649][ T834] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 69.089878][ T834] hid-generic 0005:16C0:5505.0002: hidraw1: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 69.131199][ T7028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 69.145953][ T7028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 69.188734][ T7030] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 69.191087][ T7030] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.195230][ T7030] vhci_hcd vhci_hcd.0: Device attached [ 69.199834][ T7031] vhci_hcd: connection closed [ 69.200705][ T65] vhci_hcd: stop threads [ 69.203545][ T65] vhci_hcd: release socket [ 69.204892][ T65] vhci_hcd: disconnect device [ 69.226782][ T7034] 9pnet_virtio: no channels available for device syz [ 69.303329][ T7038] overlayfs: failed to get index nlink (file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, err=-61) [ 69.379436][ T7040] gtp0: entered promiscuous mode [ 69.549641][ T7050] use of bytesused == 0 is deprecated and will be removed in the future, [ 69.552004][ T7050] use the actual size instead. [ 69.666278][ T5296] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 69.669809][ T5296] Bluetooth: hci2: Injecting HCI hardware error event [ 69.673256][ T5947] Bluetooth: hci2: hardware error 0x00 [ 69.767122][ T7065] --map-set only usable from mangle table [ 69.800015][ T7067] netlink: 'syz.4.348': attribute type 10 has an invalid length. [ 69.803215][ T7067] syz_tun: entered promiscuous mode [ 69.867415][ T7073] usb usb1: usbfs: process 7073 (syz.4.352) did not claim interface 0 before use [ 70.384933][ T5296] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 70.385497][ T7084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.387023][ T5296] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:30:62 sid 0x6c [ 70.458355][ T5296] Bluetooth: hci3: command 0x0405 tx timeout [ 70.565164][ T7090] batadv_slave_0: entered promiscuous mode [ 70.567741][ T7090] batadv_slave_0: left promiscuous mode [ 70.673644][ T7099] sp0: Synchronizing with TNC [ 70.677871][ T7099] netlink: 'syz.1.361': attribute type 16 has an invalid length. [ 70.681383][ T7099] netlink: 'syz.1.361': attribute type 17 has an invalid length. [ 70.692967][ T7099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.826634][ T7109] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 70.829315][ T7109] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.834597][ T7109] vhci_hcd vhci_hcd.0: Device attached [ 70.929331][ T7116] batman_adv: batadv0: Adding interface: dummy0 [ 70.931782][ T7116] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.939970][ T7116] batman_adv: batadv0: Interface activated: dummy0 [ 70.946001][ T7116] batadv0: mtu less than device minimum [ 70.948218][ T7116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.951685][ T7116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.954998][ T7116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.958296][ T7116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.961996][ T7116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.965425][ T7116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.968888][ T7116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.972173][ T7116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.975667][ T7116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.002641][ T7122] __nla_validate_parse: 2 callbacks suppressed [ 71.002656][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.368'. [ 71.035551][ T7127] lo: entered allmulticast mode [ 71.078003][ T7136] netlink: 104 bytes leftover after parsing attributes in process `syz.4.373'. [ 71.078365][ T66] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 71.080306][ T5943] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.094555][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.097222][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.120862][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 71.125907][ T7139] ip6tnl1: entered promiscuous mode [ 71.128204][ T7139] ip6tnl1: entered allmulticast mode [ 71.229931][ T5943] usb 6-1: Using ep0 maxpacket: 16 [ 71.235121][ T5943] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 71.238548][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.241605][ T5943] usb 6-1: Product: syz [ 71.243224][ T5943] usb 6-1: Manufacturer: syz [ 71.244888][ T5943] usb 6-1: SerialNumber: syz [ 71.250277][ T5943] usb 6-1: config 0 descriptor?? [ 71.254346][ T5943] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 71.260558][ T5943] usb 6-1: Detected FT232H [ 71.318388][ T1021] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.469583][ T1021] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.469864][ T7111] vhci_hcd: connection reset by peer [ 71.470249][ T5943] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 71.470548][ T5943] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 71.470801][ T5943] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 71.472417][ T5943] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 71.472596][ T1021] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.474012][ T5943] usb 6-1: USB disconnect, device number 4 [ 71.476179][ T1140] vhci_hcd: stop threads [ 71.478505][ T5943] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 71.479862][ T1140] vhci_hcd: release socket [ 71.481157][ T1021] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.481197][ T1021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.481217][ T1021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2033, setting to 1024 [ 71.482718][ T5943] ftdi_sio 6-1:0.0: device disconnected [ 71.484267][ T1021] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.484288][ T1021] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.484303][ T1021] usb 5-1: Product: syz [ 71.484315][ T1021] usb 5-1: Manufacturer: syz [ 71.485056][ T1140] vhci_hcd: disconnect device [ 71.487512][ T7133] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.520941][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.525265][ T1021] cdc_wdm 5-1:1.0: skipping garbage [ 71.527053][ T1021] cdc_wdm 5-1:1.0: skipping garbage [ 71.533041][ T1021] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 71.535315][ T1021] cdc_wdm 5-1:1.0: Unknown control protocol [ 71.639193][ T6058] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 71.728471][ T5947] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 71.728730][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 71.732853][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 71.735089][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 71.736914][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 71.738978][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 71.741389][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 71.743975][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 71.746598][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 71.749074][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 71.750841][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 71.752627][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 71.754368][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 71.756135][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 71.757922][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 71.759824][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 71.761662][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 71.763572][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 71.765359][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 71.767211][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 71.769046][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 71.802155][ T6623] usb 5-1: USB disconnect, device number 3 [ 71.802236][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 71.810899][ T6058] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 71.816504][ T6058] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.824159][ T6058] usb 9-1: Product: syz [ 71.825835][ T6058] usb 9-1: Manufacturer: syz [ 71.832385][ T6058] usb 9-1: SerialNumber: syz [ 71.842807][ T6058] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 71.901284][ T6058] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 72.271767][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 72.271816][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 72.271826][ T40] audit: type=1400 audit(1743784763.956:1301): avc: denied { read } for pid=7163 comm="syz.1.379" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.283167][ T40] audit: type=1400 audit(1743784763.956:1302): avc: denied { open } for pid=7163 comm="syz.1.379" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.304821][ T40] audit: type=1400 audit(1743784763.986:1303): avc: denied { ioctl } for pid=7163 comm="syz.1.379" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.690146][ T7172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.693044][ T7172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.733190][ T40] audit: type=1400 audit(1743784764.416:1304): avc: denied { map } for pid=7182 comm="syz.2.384" path="/proc/202/mounts" dev="proc" ino=14772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 72.741290][ T40] audit: type=1400 audit(1743784764.416:1305): avc: denied { execute } for pid=7182 comm="syz.2.384" path="/proc/202/mounts" dev="proc" ino=14772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 72.753005][ T40] audit: type=1400 audit(1743784764.426:1306): avc: denied { name_connect } for pid=7182 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 72.764688][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.385'. [ 72.796035][ T7192] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 72.877915][ T7195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.900019][ T40] audit: type=1400 audit(1743784764.586:1307): avc: denied { getopt } for pid=7202 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.929200][ T6058] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 72.931432][ T6058] ath9k_htc: Failed to initialize the device [ 72.950325][ T6058] usb 9-1: ath9k_htc: USB layer deinitialized [ 72.956127][ T834] usb 9-1: USB disconnect, device number 2 [ 73.075780][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 73.112798][ T40] audit: type=1400 audit(1743784764.796:1308): avc: denied { setopt } for pid=7208 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.120600][ T40] audit: type=1400 audit(1743784764.796:1309): avc: denied { accept } for pid=7208 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.420453][ T40] audit: type=1400 audit(1743784765.106:1310): avc: denied { read } for pid=7211 comm="syz.0.396" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.642251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.698585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.748409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 73.750659][ T58] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 73.898448][ T58] usb 9-1: Using ep0 maxpacket: 8 [ 73.902400][ T58] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.905361][ T58] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 73.908839][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 73.912122][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 73.915151][ T58] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 73.917678][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.924372][ T58] hub 9-1:1.0: bad descriptor, ignoring hub [ 73.926455][ T58] hub 9-1:1.0: probe with driver hub failed with error -5 [ 73.928943][ T58] cdc_wdm 9-1:1.0: skipping garbage [ 73.930456][ T58] cdc_wdm 9-1:1.0: skipping garbage [ 73.933549][ T58] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 73.935251][ T58] cdc_wdm 9-1:1.0: Unknown control protocol [ 73.978445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.058922][ T7223] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 74.087108][ T7223] veth3: entered promiscuous mode [ 74.090786][ T7223] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 74.132054][ T7226] netlink: 56 bytes leftover after parsing attributes in process `syz.1.401'. [ 74.148514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.544974][ T7215] cdc_wdm 9-1:1.0: Error autopm - -16 [ 74.547412][ T6058] usb 9-1: USB disconnect, device number 3 [ 74.678384][ T6058] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 74.808416][ T6058] usb 9-1: device descriptor read/64, error -71 [ 75.058387][ T6058] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 75.198397][ T6058] usb 9-1: device descriptor read/64, error -71 [ 75.286845][ T7255] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 75.305655][ T7255] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 75.318511][ T6058] usb usb9-port1: attempt power cycle [ 75.346953][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 75.353802][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 75.357229][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 75.586986][ T7271] fuse: Unknown parameter 'group_id\OIRsRsSp.( Rdz3w|6lvD{X [ 75.586986][ T7271] r@pAM!]@[yO@!xG*ʰ)}}dTf' [ 75.678403][ T6058] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 75.699034][ T6058] usb 9-1: device descriptor read/8, error -71 [ 75.938440][ T6058] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 75.958769][ T6058] usb 9-1: device descriptor read/8, error -71 [ 76.068714][ T6058] usb usb9-port1: unable to enumerate USB device [ 76.198458][ T66] vhci_hcd: vhci_device speed not set [ 77.138721][ T7343] netlink: 'syz.1.426': attribute type 1 has an invalid length. [ 77.140780][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 77.420500][ T7348] netlink: 'syz.4.427': attribute type 10 has an invalid length. [ 77.427183][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 77.502093][ T7348] bond0: (slave bond_slave_0): Releasing backup interface [ 77.547351][ T7355] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 77.591413][ T7355] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 77.596965][ T65] net_ratelimit: 12 callbacks suppressed [ 77.596979][ T65] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 77.605629][ T7355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.608219][ T7358] netlink: 152 bytes leftover after parsing attributes in process `syz.4.431'. [ 77.651781][ T7364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.698605][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.434'. [ 77.712686][ T65] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 77.874642][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 77.902114][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 77.902123][ T40] audit: type=1400 audit(1743784769.586:1317): avc: denied { ioctl } for pid=7391 comm="syz.2.440" path="socket:[15122]" dev="sockfs" ino=15122 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.958530][ T40] audit: type=1400 audit(1743784769.636:1318): avc: denied { ioctl } for pid=7392 comm="syz.0.439" path="socket:[17572]" dev="sockfs" ino=17572 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.014263][ T40] audit: type=1400 audit(1743784769.696:1319): avc: denied { setopt } for pid=7400 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.064282][ T7404] evm: overlay not supported [ 78.094650][ T40] audit: type=1400 audit(1743784769.776:1320): avc: denied { bind } for pid=7400 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.095445][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 78.108050][ T40] audit: type=1400 audit(1743784769.786:1321): avc: denied { ioctl } for pid=7400 comm="syz.1.442" path="socket:[16609]" dev="sockfs" ino=16609 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.114538][ T7401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.442'. [ 78.125038][ T7401] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=7401 comm=syz.1.442 [ 78.183928][ T40] audit: type=1400 audit(1743784769.866:1322): avc: denied { setcurrent } for pid=7411 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.188505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.193006][ T40] audit: type=1401 audit(1743784769.866:1323): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 78.889914][ T40] audit: type=1400 audit(1743784770.576:1324): avc: denied { setopt } for pid=7425 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.286800][ T40] audit: type=1400 audit(1743784770.966:1325): avc: denied { listen } for pid=7447 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.797542][ T7460] netlink: 'syz.0.463': attribute type 9 has an invalid length. [ 79.865992][ T40] audit: type=1326 audit(1743784771.546:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.2.465" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08eb58d169 code=0x0 [ 79.924984][ T7466] ALSA: seq fatal error: cannot create timer (-22) [ 80.111932][ T7470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7470 comm=syz.1.467 [ 80.168454][ T6058] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 80.183002][ T5943] kernel write not supported for file /input/event2 (pid: 5943 comm: kworker/3:3) [ 80.255652][ T7483] kvm: pic: non byte read [ 80.257835][ T7483] kvm: pic: non byte read [ 80.260415][ T7483] kvm: pic: non byte read [ 80.262425][ T7483] kvm: pic: non byte read [ 80.264482][ T7483] kvm: pic: non byte read [ 80.264983][ T7484] syzkaller0: entered promiscuous mode [ 80.266507][ T7483] kvm: pic: non byte read [ 80.267322][ T7484] syzkaller0: entered allmulticast mode [ 80.270663][ T7483] kvm: pic: single mode not supported [ 80.270895][ T7483] kvm: pic: non byte read [ 80.271407][ T78] syzkaller0: tun_net_xmit 48 [ 80.275327][ T7483] kvm: pic: non byte read [ 80.279222][ T7484] syzkaller0: create flow: hash 498006192 index 1 [ 80.299758][ T7482] syzkaller0: delete flow: hash 498006192 index 1 [ 80.318425][ T6058] usb 7-1: Using ep0 maxpacket: 8 [ 80.327539][ T6058] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 80.330499][ T6058] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.333649][ T6058] usb 7-1: config 0 has no interface number 0 [ 80.337884][ T6058] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 80.341890][ T6058] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.344239][ T6058] usb 7-1: Product: syz [ 80.345584][ T6058] usb 7-1: Manufacturer: syz [ 80.347391][ T6058] usb 7-1: SerialNumber: syz [ 80.359555][ T6058] usb 7-1: config 0 descriptor?? [ 80.364117][ T6058] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 80.365878][ T6058] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized! [ 80.371999][ T6058] usb 7-1: Failed to create links for entity 6 [ 80.373892][ T6058] usb 7-1: Failed to register entities (-22). [ 81.248472][ T5296] Bluetooth: hci3: command 0x0405 tx timeout [ 81.340675][ T64] cfg80211: failed to load regulatory.db [ 82.659237][ T7552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.502'. [ 82.874340][ T64] usb 7-1: USB disconnect, device number 7 [ 83.088447][ T58] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 83.254244][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.257319][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.260335][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.263847][ T58] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.266635][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.271825][ T58] usb 6-1: config 0 descriptor?? [ 83.681693][ T58] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 83.691394][ T58] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 83.941725][ T5978] usb 6-1: USB disconnect, device number 5 [ 85.086926][ T7650] cgroup: Unknown subsys name 'cpuset' [ 85.178686][ T5983] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.341868][ T5983] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.345979][ T5983] usb 6-1: config 0 has no interfaces? [ 85.348038][ T5983] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 85.352610][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.358231][ T5983] usb 6-1: config 0 descriptor?? [ 85.449157][ T7661] netlink: 52 bytes leftover after parsing attributes in process `syz.4.551'. [ 85.575561][ T5978] usb 6-1: USB disconnect, device number 6 [ 86.071339][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 86.071355][ T40] audit: type=1400 audit(1743784777.756:1338): avc: denied { bind } for pid=7699 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.205740][ T40] audit: type=1400 audit(1743784777.886:1339): avc: denied { write } for pid=7719 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.878390][ T5978] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 86.957388][ T40] audit: type=1400 audit(1743784778.636:1340): avc: denied { connect } for pid=7782 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.038351][ T5978] usb 9-1: Using ep0 maxpacket: 16 [ 87.042345][ T5978] usb 9-1: config 0 interface 0 has no altsetting 0 [ 87.044651][ T5978] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 87.047624][ T5978] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.053505][ T5978] usb 9-1: config 0 descriptor?? [ 87.468628][ T5978] hid (null): report_id 27461 is invalid [ 87.470869][ T5978] hid (null): unknown global tag 0xd [ 87.473191][ T5978] hid (null): unknown global tag 0xc [ 87.476341][ T5978] hid (null): unknown global tag 0xc [ 87.478510][ T5978] hid (null): global environment stack underflow [ 87.480856][ T5978] hid (null): unknown global tag 0xe [ 87.483996][ T5978] hid (null): report_id 3743697861 is invalid [ 87.669788][ T834] usb 9-1: USB disconnect, device number 8 [ 87.784625][ T40] audit: type=1326 audit(1743784779.466:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.1.625" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bd418d169 code=0x0 [ 87.974471][ T40] audit: type=1400 audit(1743784779.656:1342): avc: denied { watch_mount } for pid=7827 comm="syz.2.630" path="/142" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.214211][ T40] audit: type=1400 audit(1743784779.896:1343): avc: denied { read } for pid=7839 comm="syz.4.633" name="file0" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.588817][ T7847] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 89.134475][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 89.290030][ T29] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 89.292581][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.298406][ T29] usb 6-1: config 0 descriptor?? [ 89.301047][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 89.302221][ T29] cp210x 6-1:0.0: cp210x converter detected [ 89.645401][ T40] audit: type=1400 audit(1743784781.326:1344): avc: denied { read } for pid=7903 comm="syz.4.660" path="socket:[17212]" dev="sockfs" ino=17212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 89.690777][ T7909] netlink: 36 bytes leftover after parsing attributes in process `syz.2.662'. [ 89.709034][ T29] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 89.716409][ T29] usb 6-1: cp210x converter now attached to ttyUSB0 [ 89.913634][ T1021] usb 6-1: USB disconnect, device number 7 [ 89.920799][ T1021] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 89.983543][ T1021] cp210x 6-1:0.0: device disconnected [ 90.047358][ T40] audit: type=1400 audit(1743784781.726:1345): avc: denied { create } for pid=7933 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 90.071183][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 90.383982][ T7946] netlink: 96 bytes leftover after parsing attributes in process `syz.0.678'. [ 90.541524][ T40] audit: type=1400 audit(1743784782.226:1346): avc: denied { bind } for pid=7952 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.548449][ T40] audit: type=1400 audit(1743784782.226:1347): avc: denied { setopt } for pid=7952 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.925447][ T7974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.690'. [ 91.123599][ T7991] netlink: 32 bytes leftover after parsing attributes in process `syz.4.698'. [ 91.673566][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 91.673579][ T40] audit: type=1400 audit(1743784783.356:1350): avc: denied { create } for pid=8032 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 91.688404][ T40] audit: type=1400 audit(1743784783.366:1351): avc: denied { write } for pid=8032 comm="syz.2.717" path="socket:[17243]" dev="sockfs" ino=17243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 91.695578][ T40] audit: type=1400 audit(1743784783.376:1352): avc: denied { read } for pid=8032 comm="syz.2.717" path="socket:[17243]" dev="sockfs" ino=17243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.528968][ T1021] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 92.708514][ T1021] usb 9-1: Using ep0 maxpacket: 16 [ 92.711553][ T1021] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.717258][ T1021] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.721156][ T1021] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.726031][ T1021] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.729728][ T1021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.733892][ T1021] usb 9-1: config 0 descriptor?? [ 93.144043][ T1021] microsoft 0003:045E:07DA.0005: unbalanced collection at end of report description [ 93.147332][ T1021] microsoft 0003:045E:07DA.0005: parse failed [ 93.149969][ T1021] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 93.345067][ T1021] usb 9-1: USB disconnect, device number 9 [ 93.481118][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'. [ 93.721911][ T40] audit: type=1326 audit(1743784785.406:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.2.756" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08eb58d169 code=0x0 [ 95.148870][ T8204] usb 1-1: USB disconnect, device number 2 [ 95.340779][ T8214] netlink: 128 bytes leftover after parsing attributes in process `syz.2.798'. [ 95.437990][ T8225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.658649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 96.019037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.021497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.023893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.658383][ T5983] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 96.823025][ T5983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.826371][ T5983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.831529][ T5983] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.835455][ T5983] usb 6-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 96.838222][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.846264][ T5983] usb 6-1: config 0 descriptor?? [ 97.002425][ T8298] netlink: 116 bytes leftover after parsing attributes in process `syz.4.833'. [ 97.259221][ T5983] wacom 0003:056A:0309.0006: unbalanced collection at end of report description [ 97.261975][ T5983] wacom 0003:056A:0309.0006: parse failed [ 97.263561][ T5983] wacom 0003:056A:0309.0006: probe with driver wacom failed with error -22 [ 97.460954][ T6058] usb 6-1: USB disconnect, device number 8 [ 98.017399][ T40] audit: type=1400 audit(1743784789.696:1354): avc: denied { getopt } for pid=8326 comm="syz.4.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.107497][ T8335] netlink: 'syz.1.851': attribute type 4 has an invalid length. [ 98.110566][ T8335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.851'. [ 98.349419][ T40] audit: type=1326 audit(1743784790.036:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8350 comm="syz.1.859" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bd418d169 code=0x0 [ 98.467209][ T40] audit: type=1400 audit(1743784790.146:1356): avc: denied { module_request } for pid=8365 comm="syz.1.862" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 98.505483][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.973591][ T40] audit: type=1400 audit(1743784790.656:1357): avc: denied { mount } for pid=8380 comm="syz.2.869" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 99.392738][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 99.668450][ T1021] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 99.818414][ T1021] usb 9-1: Using ep0 maxpacket: 32 [ 99.824218][ T1021] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 99.827272][ T1021] usb 9-1: config 0 has no interface number 0 [ 99.832285][ T1021] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 99.837615][ T1021] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.841737][ T1021] usb 9-1: Product: syz [ 99.843785][ T1021] usb 9-1: Manufacturer: syz [ 99.850744][ T1021] usb 9-1: SerialNumber: syz [ 99.858855][ T1021] usb 9-1: config 0 descriptor?? [ 99.864664][ T1021] smsc95xx v2.0.0 [ 99.888375][ T5943] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 100.048417][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 100.051156][ T5943] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 100.053636][ T5943] usb 6-1: config 0 has no interface number 0 [ 100.057815][ T5943] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 100.061192][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.063484][ T5943] usb 6-1: Product: syz [ 100.065066][ T5943] usb 6-1: Manufacturer: syz [ 100.066368][ T5943] usb 6-1: SerialNumber: syz [ 100.069295][ T5943] usb 6-1: config 0 descriptor?? [ 100.275201][ T1021] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 100.279554][ T1021] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 100.476439][ T8416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.483880][ T8416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.510581][ T5943] usb 6-1: USB disconnect, device number 9 [ 100.669443][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.088400][ T1021] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 101.091601][ T1021] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 101.322241][ T40] audit: type=1400 audit(1743784793.006:1358): avc: denied { watch watch_reads } for pid=8456 comm="syz.0.901" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 102.452744][ T58] usb 9-1: USB disconnect, device number 10 [ 103.438471][ T834] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 103.493166][ T8573] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 103.538113][ T40] audit: type=1400 audit(1743784795.216:1359): avc: denied { getattr } for pid=8574 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.594298][ T834] usb 6-1: unable to get BOS descriptor or descriptor too short [ 103.609776][ T834] usb 6-1: config 8 has an invalid interface number: 91 but max is 0 [ 103.612894][ T834] usb 6-1: config 8 has no interface number 0 [ 103.614689][ T834] usb 6-1: config 8 interface 91 has no altsetting 0 [ 103.621229][ T834] usb 6-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=24.23 [ 103.624729][ T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.627741][ T834] usb 6-1: Product: syz [ 103.629475][ T834] usb 6-1: Manufacturer: syz [ 103.631190][ T834] usb 6-1: SerialNumber: syz [ 103.698697][ T8583] netlink: 136 bytes leftover after parsing attributes in process `syz.2.957'. [ 103.837720][ T40] audit: type=1400 audit(1743784795.516:1360): avc: denied { append } for pid=8562 comm="syz.1.947" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.856546][ T8563] netlink: 148 bytes leftover after parsing attributes in process `syz.1.947'. [ 103.872775][ T834] usb 6-1: bad CDC descriptors [ 103.875230][ T834] option 6-1:8.91: GSM modem (1-port) converter detected [ 103.880576][ T834] usb 6-1: USB disconnect, device number 10 [ 103.884837][ T834] option 6-1:8.91: device disconnected [ 103.922863][ T40] audit: type=1400 audit(1743784795.606:1361): avc: denied { ioctl } for pid=8597 comm="syz.0.964" path="socket:[21121]" dev="sockfs" ino=21121 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.929919][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 104.140823][ T40] audit: type=1400 audit(1743784795.826:1362): avc: denied { write } for pid=8616 comm="syz.4.973" name="fdinfo" dev="proc" ino=22633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 104.147910][ T40] audit: type=1400 audit(1743784795.826:1363): avc: denied { add_name } for pid=8616 comm="syz.4.973" name="freezer.parent_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 104.158029][ T40] audit: type=1400 audit(1743784795.826:1364): avc: denied { create } for pid=8616 comm="syz.4.973" name="freezer.parent_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 104.164855][ T40] audit: type=1400 audit(1743784795.826:1365): avc: denied { associate } for pid=8616 comm="syz.4.973" name="freezer.parent_freezing" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 104.495559][ T8659] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8659 comm=syz.2.991 [ 104.568330][ T58] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 104.660186][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1000'. [ 104.730211][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.733487][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.736251][ T58] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.740531][ T58] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.743229][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.754619][ T58] usb 9-1: config 0 descriptor?? [ 105.178176][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.182917][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.185172][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.187272][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.192141][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.195478][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.197269][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.200807][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.202805][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.204793][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.206618][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.208880][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.210984][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.213581][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.216383][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 105.219845][ T58] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 105.238685][ T58] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 105.276931][ T8683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8683 comm=syz.2.1002 [ 105.431342][ T24] usb 9-1: USB disconnect, device number 11 [ 105.931349][ T8709] netlink: 'syz.0.1014': attribute type 12 has an invalid length. [ 106.018907][ T8713] [ 106.019893][ T8713] ====================================================== [ 106.022471][ T8713] WARNING: possible circular locking dependency detected [ 106.024792][ T8713] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Not tainted [ 106.027512][ T8713] ------------------------------------------------------ [ 106.030458][ T8713] syz.4.1016/8713 is trying to acquire lock: [ 106.032263][ T8713] ffffffff906963a8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 106.035984][ T8713] [ 106.035984][ T8713] but task is already holding lock: [ 106.038826][ T8713] ffff888025649428 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 106.042907][ T8713] [ 106.042907][ T8713] which lock already depends on the new lock. [ 106.042907][ T8713] [ 106.046338][ T8713] [ 106.046338][ T8713] the existing dependency chain (in reverse order) is: [ 106.048872][ T8713] [ 106.048872][ T8713] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 106.051313][ T8713] blk_alloc_queue+0x619/0x760 [ 106.052950][ T8713] blk_mq_alloc_queue+0x179/0x290 [ 106.054815][ T8713] __blk_mq_alloc_disk+0x29/0x120 [ 106.056537][ T8713] loop_add+0x496/0xb70 [ 106.057889][ T8713] loop_init+0x164/0x270 [ 106.059270][ T8713] do_one_initcall+0x120/0x6e0 [ 106.060785][ T8713] kernel_init_freeable+0x5c2/0x900 [ 106.062810][ T8713] kernel_init+0x1c/0x2b0 [ 106.064807][ T8713] ret_from_fork+0x45/0x80 [ 106.066763][ T8713] ret_from_fork_asm+0x1a/0x30 [ 106.068842][ T8713] [ 106.068842][ T8713] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 106.071625][ T8713] fs_reclaim_acquire+0x102/0x150 [ 106.074054][ T8713] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 106.076444][ T8713] __alloc_skb+0x2b2/0x380 [ 106.077793][ T8713] alloc_uevent_skb+0x7d/0x210 [ 106.079172][ T8713] kobject_uevent_env+0xca4/0x1870 [ 106.080749][ T8713] kobject_synth_uevent+0x7d4/0x8a0 [ 106.082281][ T8713] bus_uevent_store+0x3d/0x90 [ 106.083711][ T8713] bus_attr_store+0x71/0xb0 [ 106.085162][ T8713] sysfs_kf_write+0xef/0x150 [ 106.086598][ T8713] kernfs_fop_write_iter+0x351/0x510 [ 106.088181][ T8713] vfs_write+0x5ba/0x1180 [ 106.089523][ T8713] ksys_write+0x12a/0x240 [ 106.090843][ T8713] do_syscall_64+0xcd/0x260 [ 106.092228][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.093995][ T8713] [ 106.093995][ T8713] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 106.096146][ T8713] __lock_acquire+0x1173/0x1ba0 [ 106.097566][ T8713] lock_acquire+0x179/0x350 [ 106.098941][ T8713] __mutex_lock+0x199/0xb90 [ 106.100346][ T8713] kobject_uevent_env+0xb36/0x1870 [ 106.101905][ T8713] loop_set_status+0x9c7/0xb90 [ 106.103638][ T8713] loop_set_status_old+0x162/0x1d0 [ 106.105566][ T8713] lo_ioctl+0x695/0x26d0 [ 106.107260][ T8713] blkdev_ioctl+0x274/0x6d0 [ 106.109067][ T8713] __x64_sys_ioctl+0x190/0x200 [ 106.110967][ T8713] do_syscall_64+0xcd/0x260 [ 106.112815][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.115207][ T8713] [ 106.115207][ T8713] other info that might help us debug this: [ 106.115207][ T8713] [ 106.118886][ T8713] Chain exists of: [ 106.118886][ T8713] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 106.118886][ T8713] [ 106.123668][ T8713] Possible unsafe locking scenario: [ 106.123668][ T8713] [ 106.126446][ T8713] CPU0 CPU1 [ 106.128460][ T8713] ---- ---- [ 106.130391][ T8713] lock(&q->q_usage_counter(io)#24); [ 106.132329][ T8713] lock(fs_reclaim); [ 106.134654][ T8713] lock(&q->q_usage_counter(io)#24); [ 106.137552][ T8713] lock(uevent_sock_mutex); [ 106.139335][ T8713] [ 106.139335][ T8713] *** DEADLOCK *** [ 106.139335][ T8713] [ 106.142283][ T8713] 3 locks held by syz.4.1016/8713: [ 106.144097][ T8713] #0: ffff888025684368 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2a/0xb90 [ 106.147459][ T8713] #1: ffff888025649428 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 106.151696][ T8713] #2: ffff888025649460 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 106.156000][ T8713] [ 106.156000][ T8713] stack backtrace: [ 106.158120][ T8713] CPU: 0 UID: 0 PID: 8713 Comm: syz.4.1016 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 106.158145][ T8713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.158156][ T8713] Call Trace: [ 106.158163][ T8713] [ 106.158172][ T8713] dump_stack_lvl+0x116/0x1f0 [ 106.158195][ T8713] print_circular_bug+0x275/0x350 [ 106.158221][ T8713] check_noncircular+0x14c/0x170 [ 106.158245][ T8713] __lock_acquire+0x1173/0x1ba0 [ 106.158263][ T8713] lock_acquire+0x179/0x350 [ 106.158275][ T8713] ? kobject_uevent_env+0xb36/0x1870 [ 106.158297][ T8713] ? __pfx___might_resched+0x10/0x10 [ 106.158321][ T8713] __mutex_lock+0x199/0xb90 [ 106.158340][ T8713] ? kobject_uevent_env+0xb36/0x1870 [ 106.158360][ T8713] ? kfree+0x252/0x4d0 [ 106.158381][ T8713] ? kobject_uevent_env+0xb36/0x1870 [ 106.158404][ T8713] ? __pfx___mutex_lock+0x10/0x10 [ 106.158424][ T8713] ? __asan_memcpy+0x3c/0x60 [ 106.158447][ T8713] ? kobject_get_path+0x8e/0x2a0 [ 106.158467][ T8713] ? kobject_uevent_env+0xb36/0x1870 [ 106.158488][ T8713] kobject_uevent_env+0xb36/0x1870 [ 106.158518][ T8713] ? __asan_memcpy+0x3c/0x60 [ 106.158542][ T8713] loop_set_status+0x9c7/0xb90 [ 106.158563][ T8713] loop_set_status_old+0x162/0x1d0 [ 106.158577][ T8713] ? __pfx_loop_set_status_old+0x10/0x10 [ 106.158600][ T8713] ? find_held_lock+0x2b/0x80 [ 106.158619][ T8713] ? is_bpf_text_address+0x8a/0x1a0 [ 106.158645][ T8713] ? stack_trace_save+0x8e/0xc0 [ 106.158663][ T8713] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.158681][ T8713] lo_ioctl+0x695/0x26d0 [ 106.158698][ T8713] ? __lock_acquire+0x5ca/0x1ba0 [ 106.158712][ T8713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.158729][ T8713] ? __pfx_lo_ioctl+0x10/0x10 [ 106.158744][ T8713] ? find_held_lock+0x2b/0x80 [ 106.158761][ T8713] ? avc_has_extended_perms+0x33a/0x1090 [ 106.158779][ T8713] ? avc_has_extended_perms+0x47c/0x1090 [ 106.158796][ T8713] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 106.158810][ T8713] ? kasan_quarantine_put+0x10a/0x240 [ 106.158823][ T8713] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.158842][ T8713] ? find_held_lock+0x2b/0x80 [ 106.158862][ T8713] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.158878][ T8713] ? blkdev_common_ioctl+0x1dd/0x2250 [ 106.158904][ T8713] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.158921][ T8713] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 106.158945][ T8713] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.158967][ T8713] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 106.158988][ T8713] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 106.159014][ T8713] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.159046][ T8713] ? __pfx_lo_ioctl+0x10/0x10 [ 106.159063][ T8713] blkdev_ioctl+0x274/0x6d0 [ 106.159084][ T8713] ? __pfx_blkdev_ioctl+0x10/0x10 [ 106.159107][ T8713] ? selinux_file_ioctl+0x180/0x270 [ 106.159129][ T8713] ? selinux_file_ioctl+0xb4/0x270 [ 106.159152][ T8713] ? __pfx_blkdev_ioctl+0x10/0x10 [ 106.159174][ T8713] __x64_sys_ioctl+0x190/0x200 [ 106.159195][ T8713] do_syscall_64+0xcd/0x260 [ 106.159217][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.159234][ T8713] RIP: 0033:0x7fefadb8d169 [ 106.159249][ T8713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.159267][ T8713] RSP: 002b:00007fefae9a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.159283][ T8713] RAX: ffffffffffffffda RBX: 00007fefadda5fa0 RCX: 00007fefadb8d169 [ 106.159294][ T8713] RDX: 0000200000000280 RSI: 0000000000004c02 RDI: 0000000000000003 [ 106.159304][ T8713] RBP: 00007fefadc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.159313][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.159321][ T8713] R13: 0000000000000000 R14: 00007fefadda5fa0 R15: 00007ffc2294bd08 [ 106.159336][ T8713] [ 106.218350][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 106.440083][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.443195][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.445989][ T29] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 106.448740][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.452377][ T29] usb 6-1: config 0 descriptor?? [ 106.860242][ T29] uclogic 0003:5543:0042.0008: unbalanced collection at end of report description [ 106.863867][ T29] uclogic 0003:5543:0042.0008: parse failed [ 106.866016][ T29] uclogic 0003:5543:0042.0008: probe with driver uclogic failed with error -22 [ 107.060533][ T6006] usb 6-1: USB disconnect, device number 11 VM DIAGNOSIS: 16:39:57 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854de3c0 RDI=ffffffff9ae224a0 RBP=ffffffff9ae22460 RSP=ffffc90003d8ed00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e34312e36 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35c44e6 R15=dffffc0000000000 RIP=ffffffff854de3e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fefae9a46c0 ffffffff 00c00000 GS =0000 ffff8880d69b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8becd52f98 CR3=00000000326de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000008000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bec00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bec00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bec00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bec00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bec00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bec00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bec17c488 00007f8bec17c480 00007f8bec17c478 00007f8bec17c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8beccdd100 00007f8bec17c440 00007f8bec170004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bec17c498 00007f8bec17c490 00007f8bec17c488 00007f8bec17c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 de48050900006f79 d4f0490000afe41f 80ac80c80000a158 0089d13c01f28407 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e803364bd91ade0 94ed95f343d2ccb2 15d8de010219cf91 6756f5b8b202b14b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f28432950f81af5 1ad5cd9d5f0ffae5 ca1b0d0f2aec3962 fd4cbc77dff5e43a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36c8cd55943cb70b 51fccc464a9162a0 8c1e023a5da0be81 e01273172eba5b0e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f10281aa71e3ed3 94bc5b90c687fc6d 0bf94508b6af7ff2 b3cf422d4de7f014 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000fad64 RBX=0000000000000001 RCX=ffffffff8b71d419 RDX=ffffed100d4a65be RSI=ffffffff8bf45f80 RDI=ffffffff8191a8d1 RBP=ffffed1003ad0488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d682440 R14=ffffffff90864110 R15=0000000000000000 RIP=ffffffff8b71bcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005582c9dde908 CR3=0000000032774000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=0de4f6c0c3618e13 fe9e712182a9c975 0de4f6c0c3618e13 fe9e712182a9c975 0de4f6c0c3618e13 fe9e712182a9c975 0de4f6c0c3618e13 fe9e712182a9c975 ZMM18=099ff739655c2e0f 00df58eb8e875b89 099ff739655c2e0f 00df58eb8e875b89 099ff739655c2e0f 00df58eb8e875b89 099ff739655c2e0f 00df58eb8e875b89 ZMM19=9707000000000000 0000000000000009 9707000000000000 0000000000000008 9707000000000000 0000000000000007 9707000000000000 0000000000000006 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=fe9e7121fe9e7121 fe9e7121fe9e7121 fe9e7121fe9e7121 fe9e7121fe9e7121 fe9e7121fe9e7121 fe9e7121fe9e7121 fe9e7121fe9e7121 fe9e7121fe9e7121 ZMM22=c3618e13c3618e13 c3618e13c3618e13 c3618e13c3618e13 c3618e13c3618e13 c3618e13c3618e13 c3618e13c3618e13 c3618e13c3618e13 c3618e13c3618e13 ZMM23=0de4f6c00de4f6c0 0de4f6c00de4f6c0 0de4f6c00de4f6c0 0de4f6c00de4f6c0 0de4f6c00de4f6c0 0de4f6c00de4f6c0 0de4f6c00de4f6c0 0de4f6c00de4f6c0 ZMM24=8e875b898e875b89 8e875b898e875b89 8e875b898e875b89 8e875b898e875b89 8e875b898e875b89 8e875b898e875b89 8e875b898e875b89 8e875b898e875b89 ZMM25=00df58eb00df58eb 00df58eb00df58eb 00df58eb00df58eb 00df58eb00df58eb 00df58eb00df58eb 00df58eb00df58eb 00df58eb00df58eb 00df58eb00df58eb ZMM26=655c2e0f655c2e0f 655c2e0f655c2e0f 655c2e0f655c2e0f 655c2e0f655c2e0f 655c2e0f655c2e0f 655c2e0f655c2e0f 655c2e0f655c2e0f 655c2e0f655c2e0f ZMM27=099ff739099ff739 099ff739099ff739 099ff739099ff739 099ff739099ff739 099ff739099ff739 099ff739099ff739 099ff739099ff739 099ff739099ff739 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9507000095070000 9507000095070000 9507000095070000 9507000095070000 9507000095070000 9507000095070000 9507000095070000 9507000095070000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a4415a0 RCX=ffffffff81af29c9 RDX=ffff88802318a440 RSI=ffffffff81af29a3 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000323f7f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4882b5 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a63b040 RIP=ffffffff81af29a5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555b1d6500 ffffffff 00c00000 GS =0000 ffff8880d6bb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f08ec2d56c0 CR3=0000000023df6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe20244690 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08eb60f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08eb60f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08eb60f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08eb60f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08eb60f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08eb60f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000ef5d4 RBX=0000000000000003 RCX=ffffffff8b71d419 RDX=ffffed100d4e65be RSI=ffffffff8bf45f80 RDI=ffffffff8191a8d1 RBP=ffffed1003bd3000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801de98000 R14=ffffffff90864110 R15=0000000000000000 RIP=ffffffff8b71bcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f01fffc CR3=00000000326de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefadc0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefadc0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefadc0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefadc0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefadc0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefadc0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5474e8e2c81d95b 23436a8d0de383b3 5bae8f8f0a64d595 452eb6f9dc3a3543 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5474e8e2c81d95b 23436a8d0de383b3 5bae8f8f0a64d595 452eb6f9dc3a3543 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080cfac758b45524 0e998532a8315abf aa563c0a07ed0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46aa4e4f9030d454 d8976caf09311181 dcd79496e848b9ba 31c5e47449bec48f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3204358e9f7cd5cc 41d3e540ce91007f 9012b5634707c53a c5544af8f4b3b459 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5386bd3d12cbcf5 b707a1c19a320435 8e9f7cd5cc41d3e5 40ce91007f9012b5 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 634707c53ac5544a f8f4b3b45946aa4e 4f9030d454d8976c af09311181dcd794 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 96e848b9ba31c5e4 7449bec48f080cfa c758b455240e9985 32a8315abfaa563c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a07ed9e8cc7efb0 02325343611d66ab 9c43f0af135e1394 3bc713955759ee46 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000