last executing test programs: 3m53.144157611s ago: executing program 32 (id=12095): r0 = msgget$private(0x0, 0x31) msgsnd(r0, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) 3m51.655054485s ago: executing program 1 (id=12134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) 3m51.59546921s ago: executing program 1 (id=12136): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x200, 0xfff, 0x1, 0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001a00010029bd70000000000002202000000000000020000006001c004e23000008000300", @ANYRES32, @ANYBLOB="08000b00bd470000080001006401010008000700e000000108000200ffffffff080001000a0101020800060005000000080019"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 3m51.588508169s ago: executing program 1 (id=12139): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m51.5231322s ago: executing program 1 (id=12141): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 3m51.516276477s ago: executing program 1 (id=12143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 3m51.263142983s ago: executing program 1 (id=12148): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 3m51.246587437s ago: executing program 33 (id=12148): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 3m18.561424905s ago: executing program 3 (id=13262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 3m18.560233382s ago: executing program 3 (id=13264): open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 3m18.517318119s ago: executing program 3 (id=13266): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x60ed8, 0x16a41}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 3m18.436838907s ago: executing program 3 (id=13269): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x262) 3m18.431067096s ago: executing program 3 (id=13270): unshare(0x28000600) r0 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) 3m18.251974916s ago: executing program 3 (id=13272): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) 3m18.251854795s ago: executing program 34 (id=13272): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) 2m25.790663966s ago: executing program 4 (id=14614): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x16, 0x4) 2m25.708270828s ago: executing program 4 (id=14615): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000000000200000000002000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 2m25.707378185s ago: executing program 4 (id=14617): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x20008041}}], 0x1, 0x4000090) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x20, 0x0) 2m25.637004519s ago: executing program 4 (id=14618): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x20000000}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 2m25.479760929s ago: executing program 4 (id=14627): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 2m25.407080993s ago: executing program 4 (id=14630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x1c4, 0x0, 0x1af}]}) 2m9.375801324s ago: executing program 35 (id=14630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x1c4, 0x0, 0x1af}]}) 1m11.86087671s ago: executing program 0 (id=16241): mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) 1m11.800326903s ago: executing program 0 (id=16242): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m11.736818865s ago: executing program 0 (id=16245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1m11.659692722s ago: executing program 0 (id=16250): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff0000bb719b98fb73e53a0000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0xff7e, 0xd, 0x8, 0xe8, 0x17, "0000c000"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xd) 1m11.621468825s ago: executing program 0 (id=16254): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 1m11.53634322s ago: executing program 0 (id=16256): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m7.956700599s ago: executing program 5 (id=16300): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x98}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m7.869049257s ago: executing program 5 (id=16301): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)='O', 0xfe6a, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 1m7.816362089s ago: executing program 5 (id=16302): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) 1m7.816227282s ago: executing program 5 (id=16303): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m7.69271032s ago: executing program 5 (id=16305): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x200003fc}, 0x10) dup3(r1, r0, 0x0) 1m7.325974562s ago: executing program 5 (id=16308): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x3e8}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) 1m7.206748408s ago: executing program 36 (id=16308): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x3e8}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) 55.474066203s ago: executing program 37 (id=16256): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 49.533514589s ago: executing program 7 (id=16485): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 48.036134428s ago: executing program 7 (id=16514): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028"], 0xb0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 47.996133543s ago: executing program 7 (id=16516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002d0110a"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 47.914310551s ago: executing program 7 (id=16519): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 47.913735155s ago: executing program 7 (id=16521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x35, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2b, 0x0, [{0x48d, 0x0, 0xff}]}) 47.588241558s ago: executing program 7 (id=16527): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) 47.523288368s ago: executing program 38 (id=16527): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) 12.779933169s ago: executing program 2 (id=17151): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0xe22, 0x8}}}}}}, 0x0) 12.475906356s ago: executing program 2 (id=17153): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 12.34374272s ago: executing program 2 (id=17155): ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001a40)={0x8c, "895cd46771f00301c1ca639506f24c672ecfd2bd1050f9c5774eb3e02ce08f61bb32758aa48d8b91deae8e868458c5a16302ef180c82320b8e92c2821ee0eb19"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 12.205938911s ago: executing program 2 (id=17158): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 12.1206927s ago: executing program 2 (id=17159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="56c78e3c733d76696e65459beb1fb664f6ce6c0c7274696f7874656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '9p\x00'}], 0xa, "a3e5e03a7070de8de6546a722ca49e214119cd421a432e5b5a82e4c1e855ae35e7be342704b14020dfe04545"}, 0x3c) 12.050980423s ago: executing program 2 (id=17161): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockname$packet(r0, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 1.108424387s ago: executing program 8 (id=17329): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.02277024s ago: executing program 8 (id=17331): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000007480)=[{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004800)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000004b00)}], 0x5, 0x0, 0x0, 0x4010}], 0x1, 0x40000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 879.255913ms ago: executing program 6 (id=17333): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 813.429934ms ago: executing program 6 (id=17334): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 811.973899ms ago: executing program 6 (id=17335): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0xa8140180, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 703.699911ms ago: executing program 8 (id=17337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeed5002, 0x8, 0xfd, 0x3, 0x2, 0x42, 0x7, 0x0, 0x34, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x43, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0xeeef0000, 0x4000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0x8, 0x8, 0x81}, {0xb000, 0x8000000, 0xe, 0x6, 0x3, 0x2, 0x0, 0x40, 0xa, 0x9, 0x9, 0xf1}, {0x102fc001, 0x2000, 0x4, 0x5, 0x4c, 0x2, 0xab, 0x7f, 0x40, 0x83, 0xf7, 0x6}, {0x1000, 0x191bd000, 0xc, 0x9, 0xb5, 0x6, 0x1, 0x7, 0x80, 0x13, 0x1, 0x2}, {0x6000, 0x1, 0x9, 0xf2, 0x0, 0x2, 0x6, 0x1, 0x3, 0x7d, 0xff, 0x70}, {0x80a0000, 0x0, 0xa, 0x5, 0x12, 0x7, 0x5, 0xe0, 0x2, 0x6, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0x3000, 0x3}, 0x80000031, 0x0, 0xeeef0000, 0x2024, 0x400000006, 0x0, 0x0, [0x20d0, 0x1000, 0x400000000060, 0x6]}) 619.113535ms ago: executing program 9 (id=17339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000540)={@val={0xa, 0x88a8}, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x28, 0x64, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010102, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5a, 0x1, 0x8001, 0x0, 0x2}}}}}}}, 0x3a) 563.078244ms ago: executing program 6 (id=17340): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 407.898217ms ago: executing program 9 (id=17341): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000500)="68629dd69158", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) 272.170781ms ago: executing program 8 (id=17342): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x50, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 244.943343ms ago: executing program 9 (id=17343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 184.360599ms ago: executing program 6 (id=17344): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdfde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000000100bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="100000feffffff00280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 184.132416ms ago: executing program 9 (id=17345): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000a40)={0x0, 0x0, r2, r3, 0x36, 0x4, 0x5c, 0x1, {0x9, 0xf, 0x2, 0x527e, 0x8000, 0x4, 0x4, 0x9, 0x5, 0xc2f3, 0x8000, 0xfff, 0x4, 0x8, "01c89fb363d42ae3f6953c06fd140c69033e27d332ee6c56c6f070a4bfe47691"}}) 117.931838ms ago: executing program 8 (id=17346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x30}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 116.733138ms ago: executing program 9 (id=17347): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x8001, 0x0, 0x0, [], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 98.103715ms ago: executing program 9 (id=17348): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 24.806866ms ago: executing program 8 (id=17349): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "0200be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 0s ago: executing program 6 (id=17350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d83a38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000200)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730606dd502bbe5aee5fe4bf9d3f1942a29359035ed", 0x60}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000280)=""/151, 0x97}], 0x2}, 0x0) kernel console output (not intermixed with test programs): t:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 415.708847][ T41] audit: type=1400 audit(2000000697.976:72290): avc: denied { getopt } for pid=9536 comm="syz.5.15961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 415.720242][ T41] audit: type=1400 audit(2000000697.985:72291): avc: denied { read } for pid=9538 comm="syz.0.15962" dev="nsfs" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 415.737292][ T41] audit: type=1400 audit(2000000697.985:72292): avc: denied { open } for pid=9538 comm="syz.0.15962" path="net:[4026532895]" dev="nsfs" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 415.755817][ T41] audit: type=1400 audit(2000000697.985:72293): avc: denied { create } for pid=9538 comm="syz.0.15962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.763037][ T41] audit: type=1400 audit(2000000698.004:72294): avc: denied { bind } for pid=9538 comm="syz.0.15962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.975781][ T9558] team_slave_0: left allmulticast mode [ 415.981092][ T9558] team0 (unregistering): Port device team_slave_0 removed [ 415.983907][ T9558] team_slave_1: left allmulticast mode [ 415.989411][ T9558] team0 (unregistering): Port device team_slave_1 removed [ 416.143279][ T9563] netlink: 240 bytes leftover after parsing attributes in process `syz.5.15965'. [ 416.640652][ T9604] input: syz0 as /devices/virtual/input/input63 [ 417.029847][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 417.318026][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16006'. [ 417.651887][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16023'. [ 417.655776][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16023'. [ 417.797575][ T9683] pim6reg1: entered promiscuous mode [ 417.806067][ T9683] pim6reg1: entered allmulticast mode [ 417.889866][ T9685] netlink: 'syz.5.16028': attribute type 64 has an invalid length. [ 418.307488][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16040'. [ 418.322105][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16040'. [ 418.553682][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16045'. [ 419.252119][ T5090] Bluetooth: hci2: command 0x0c1a tx timeout [ 419.270449][T15747] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 419.281854][T15747] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 419.357571][ T9756] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 419.630033][ T9771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16066'. [ 419.633072][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16066'. [ 419.636036][ T9771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16066'. [ 419.641041][ T9771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16066'. [ 419.675462][ T9775] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 419.938862][ T9785] xt_hashlimit: size too large, truncated to 1048576 [ 420.529273][ T9812] syzkaller1: entered promiscuous mode [ 420.531100][ T9812] syzkaller1: entered allmulticast mode [ 420.581962][ T9814] trusted_key: syz.0.16084 sent an empty control message without MSG_MORE. [ 420.674785][ T9820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.873193][ T9833] o2cb: This node has not been configured. [ 420.877914][ T9833] o2cb: Cluster check failed. Fix errors before retrying. [ 420.880436][ T9833] (syz.0.16093,9833,0):user_dlm_register:674 ERROR: status = -22 [ 420.883008][ T9833] (syz.0.16093,9833,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 420.909600][ T10] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 420.917212][ T9837] xt_hashlimit: size too large, truncated to 1048576 [ 420.966153][ T41] kauditd_printk_skb: 175 callbacks suppressed [ 420.966165][ T41] audit: type=1400 audit(2000000702.898:72470): avc: denied { bpf } for pid=9836 comm="syz.5.16094" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 420.975883][ T41] audit: type=1400 audit(2000000702.898:72471): avc: denied { perfmon } for pid=9836 comm="syz.5.16094" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 421.078949][ T10] usb 12-1: Using ep0 maxpacket: 32 [ 421.082209][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.085978][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.089272][ T10] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 421.092890][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.099695][ T10] usb 12-1: config 0 descriptor?? [ 421.202669][ T41] audit: type=1400 audit(2000000703.123:72472): avc: denied { read } for pid=9846 comm="syz.0.16098" dev="nsfs" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 421.220589][ T41] audit: type=1400 audit(2000000703.123:72473): avc: denied { open } for pid=9846 comm="syz.0.16098" path="net:[4026532895]" dev="nsfs" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 421.228929][ T41] audit: type=1400 audit(2000000703.123:72474): avc: denied { create } for pid=9846 comm="syz.0.16098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 421.243028][ T41] audit: type=1400 audit(2000000703.123:72475): avc: denied { bind } for pid=9846 comm="syz.0.16098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 421.257391][ T41] audit: type=1400 audit(2000000703.132:72476): avc: denied { recv } for pid=9844 comm="syz.5.16096" saddr=127.0.0.1 src=59592 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 421.266535][ T41] audit: type=1400 audit(2000000703.141:72477): avc: denied { create } for pid=9848 comm="syz.0.16099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 421.275333][ T41] audit: type=1400 audit(2000000703.151:72478): avc: denied { ioctl } for pid=9848 comm="syz.0.16099" path="socket:[145842]" dev="sockfs" ino=145842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 421.284408][ T41] audit: type=1400 audit(2000000703.151:72479): avc: denied { bind } for pid=9848 comm="syz.0.16099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 421.583774][ T10] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 421.688937][ T9888] bridge_slave_0: invalid flags given to default FDB implementation [ 421.732555][ T5090] Bluetooth: hci3: command 0x0c1a tx timeout [ 421.737458][T15747] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 421.739532][T15747] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 421.835869][ T54] usb 12-1: USB disconnect, device number 7 [ 422.834749][ T9952] __nla_validate_parse: 4 callbacks suppressed [ 422.834760][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16142'. [ 422.840902][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16142'. [ 422.979601][ T9964] sctp: [Deprecated]: syz.0.16149 (pid 9964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.979601][ T9964] Use struct sctp_sack_info instead [ 423.194777][ T40] usb 12-1: new full-speed USB device number 8 using dummy_hcd [ 423.315549][ T9981] misc userio: Invalid payload size [ 423.357911][ T40] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.362327][ T40] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.368190][ T40] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.372164][ T40] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.597946][ T40] usb 12-1: usb_control_msg returned -32 [ 423.599914][ T40] usbtmc 12-1:16.0: can't read capabilities [ 423.813734][ T6003] usb 12-1: USB disconnect, device number 8 [ 423.879161][T10003] netlink: 7 bytes leftover after parsing attributes in process `syz.6.16168'. [ 424.011602][T10011] (syz.6.16173,10011,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 424.539047][T10044] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.16186'. [ 425.271812][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16211'. [ 425.739108][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16218'. [ 426.255307][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16231'. [ 426.414213][T10154] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.16235'. [ 426.425364][T10154] netlink: ct family unspecified [ 426.480149][ T41] kauditd_printk_skb: 223 callbacks suppressed [ 426.480160][ T41] audit: type=1400 audit(2000000708.054:72703): avc: denied { read } for pid=10155 comm="syz.5.16236" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 426.499393][T10156] input input66: cannot allocate more than FF_MAX_EFFECTS effects [ 426.591317][ T41] audit: type=1400 audit(2000000708.157:72704): avc: denied { name_bind } for pid=10159 comm="syz.5.16238" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 426.717693][ T41] audit: type=1400 audit(2000000708.279:72705): avc: denied { read write } for pid=10163 comm="syz.5.16240" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.736079][ T41] audit: type=1400 audit(2000000708.279:72706): avc: denied { open } for pid=10163 comm="syz.5.16240" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.753434][ T41] audit: type=1400 audit(2000000708.288:72707): avc: denied { ioctl } for pid=10163 comm="syz.5.16240" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.760859][ T41] audit: type=1400 audit(2000000708.298:72708): avc: denied { watch } for pid=10165 comm="syz.0.16241" path="/4259/file0" dev="tmpfs" ino=21526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 426.834300][T10171] ip6gre0: Master is either lo or non-ether device [ 426.847137][ T41] audit: type=1400 audit(2000000708.400:72709): avc: denied { execmem } for pid=10170 comm="syz.6.16244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 426.888161][ T41] audit: type=1400 audit(2000000708.438:72710): avc: denied { name_bind } for pid=10177 comm="syz.5.16247" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 426.895131][ T41] audit: type=1400 audit(2000000708.438:72711): avc: denied { node_bind } for pid=10177 comm="syz.5.16247" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 426.941680][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16249'. [ 426.947632][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16249'. [ 426.985202][ T41] audit: type=1400 audit(2000000708.532:72712): avc: denied { watch watch_reads } for pid=10187 comm="syz.0.16254" path="/4263" dev="tmpfs" ino=21542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 426.988336][T10192] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 427.005691][T10192] @0Ù: renamed from bond_slave_1 (while UP) [ 427.244893][ T40] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 427.415940][ T40] usb 12-1: Using ep0 maxpacket: 8 [ 427.423348][ T40] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 427.426657][ T40] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.437170][ T40] usb 12-1: Product: syz [ 427.439664][ T40] usb 12-1: Manufacturer: syz [ 427.441230][ T40] usb 12-1: SerialNumber: syz [ 427.445045][ T40] usb 12-1: config 0 descriptor?? [ 427.450664][ T40] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 427.455772][ T40] dvb-usb: bulk message failed: -22 (2/0) [ 427.470771][ T40] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.479201][ T40] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 427.485261][ T40] usb 12-1: media controller created [ 427.499240][ T40] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.565323][ T1344] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 427.664712][T10186] dvb-usb: bulk message failed: -22 (4/0) [ 427.675729][T10186] cxusb: i2c read failed [ 427.678006][ T40] cxusb: set interface failed [ 427.682852][ T40] dvb-usb: bulk message failed: -22 (1/0) [ 427.708250][ T40] DVB: Unable to find symbol mt352_attach() [ 427.710186][ T40] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 427.747090][ T1344] usb 11-1: Using ep0 maxpacket: 32 [ 427.752240][ T1344] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 427.759506][ T1344] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 427.763884][ T1344] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 427.773331][ T1344] usb 11-1: Product: syz [ 427.774725][ T1344] usb 11-1: Manufacturer: syz [ 427.776327][ T1344] usb 11-1: SerialNumber: syz [ 427.781713][ T1344] usb 11-1: config 0 descriptor?? [ 427.783840][T10203] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 427.789736][ T40] rc_core: IR keymap rc-dvico-portable not found [ 427.791786][ T40] Registered IR keymap rc-empty [ 427.800236][ T40] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 427.805280][ T1344] hub 11-1:0.0: bad descriptor, ignoring hub [ 427.810430][ T1344] hub 11-1:0.0: probe with driver hub failed with error -5 [ 427.815078][ T40] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input67 [ 427.827243][ T40] dvb-usb: schedule remote query interval to 100 msecs. [ 427.829471][ T40] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 427.838739][ T40] usb 12-1: USB disconnect, device number 9 [ 427.962482][ T40] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 428.487553][T10203] usb 11-1: reset high-speed USB device number 21 using dummy_hcd [ 428.676425][T10203] usb 11-1: device firmware changed [ 428.686160][ T1344] usb 11-1: USB disconnect, device number 21 [ 428.858380][ T1344] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 429.020187][ T1344] usb 11-1: Using ep0 maxpacket: 32 [ 429.027889][ T1344] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 429.040636][ T1344] usb 11-1: string descriptor 0 read error: -22 [ 429.042725][ T1344] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 429.053503][ T1344] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 429.069935][ T1344] usb 11-1: config 0 descriptor?? [ 429.072620][T10208] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 429.087936][ T1344] hub 11-1:0.0: bad descriptor, ignoring hub [ 429.093036][ T1344] hub 11-1:0.0: probe with driver hub failed with error -5 [ 429.414329][ T6003] usb 11-1: USB disconnect, device number 22 [ 430.158473][T10265] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 430.420994][ T54] usb 12-1: new full-speed USB device number 10 using dummy_hcd [ 430.593371][ T54] usb 12-1: config 0 has an invalid interface number: 8 but max is 0 [ 430.600356][ T54] usb 12-1: config 0 has no interface number 0 [ 430.602437][ T54] usb 12-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 430.621405][ T54] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 430.625126][ T54] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 430.629794][ T54] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 430.635630][ T54] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 430.640705][ T54] usb 12-1: Product: syz [ 430.642072][ T54] usb 12-1: SerialNumber: syz [ 430.649805][ T54] usb 12-1: config 0 descriptor?? [ 430.656133][ T54] cm109 12-1:0.8: invalid payload size 0, expected 4 [ 430.661623][ T54] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.8/input/input68 [ 430.836707][T10298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.858932][T10298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.876437][ C1] cm109 12-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 431.268837][ C2] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 431.274248][ C2] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 431.276770][ C2] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 431.279083][ T53] usb 12-1: USB disconnect, device number 10 [ 431.281020][ C2] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 431.281032][ C2] cm109 12-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 431.328018][ T53] cm109 12-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 431.517951][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 431.528186][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 431.535460][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 431.546039][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 431.548654][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.566012][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 431.568512][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 431.571225][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 431.574893][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 431.580815][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.782057][T10305] xfrm0 speed is unknown, defaulting to 1000 [ 431.839015][ T41] kauditd_printk_skb: 111 callbacks suppressed [ 431.839027][ T41] audit: type=1400 audit(2000000713.070:72824): avc: denied { read write } for pid=7291 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.850156][ T41] audit: type=1400 audit(2000000713.070:72825): avc: denied { open } for pid=7291 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.858678][ T41] audit: type=1400 audit(2000000713.070:72826): avc: denied { ioctl } for pid=7291 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.867018][ T41] audit: type=1400 audit(2000000713.079:72827): avc: denied { mounton } for pid=10317 comm="syz.7.16310" path="/305/file0" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 431.935396][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.937838][T10305] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.940170][T10305] bridge_slave_0: entered allmulticast mode [ 431.942759][T10305] bridge_slave_0: entered promiscuous mode [ 431.945803][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.948496][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.953266][T10305] bridge_slave_1: entered allmulticast mode [ 431.955906][T10305] bridge_slave_1: entered promiscuous mode [ 431.970986][T10305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.975569][T10305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.991195][T10305] team0: Port device team_slave_0 added [ 431.994618][T10305] team0: Port device team_slave_1 added [ 432.010057][T10305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.012466][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.020490][T10305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.025256][T10305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.027525][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.036152][T10305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.061757][T10305] hsr_slave_0: entered promiscuous mode [ 432.064511][T10305] hsr_slave_1: entered promiscuous mode [ 432.168770][ T41] audit: type=1400 audit(2000000713.379:72828): avc: denied { create } for pid=10325 comm="syz.6.16311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 432.176169][T10326] __nla_validate_parse: 4 callbacks suppressed [ 432.176184][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16311'. [ 432.203238][ T41] audit: type=1400 audit(2000000713.388:72829): avc: denied { bind } for pid=10325 comm="syz.6.16311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 432.209619][ T41] audit: type=1400 audit(2000000713.388:72830): avc: denied { write } for pid=10325 comm="syz.6.16311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 432.211919][T10305] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 432.216465][ T41] audit: type=1400 audit(2000000713.416:72831): avc: denied { create } for pid=10305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.225072][ T41] audit: type=1400 audit(2000000713.416:72832): avc: denied { write } for pid=10305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.231459][ T41] audit: type=1400 audit(2000000713.416:72833): avc: denied { read } for pid=10305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.233400][T10305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.244781][T10305] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 432.261996][T10305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.264852][T10305] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 432.272006][T10305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.280930][T10305] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 432.294219][T10305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.323031][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.325419][T10305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.327885][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.330202][T10305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.361306][T10305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.370796][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.374686][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.397390][T10305] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.410050][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.412573][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.421551][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.424218][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.760086][T10305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.961858][T10305] veth0_vlan: entered promiscuous mode [ 432.975181][T10305] veth1_vlan: entered promiscuous mode [ 433.001624][T10305] veth0_macvtap: entered promiscuous mode [ 433.016236][T10305] veth1_macvtap: entered promiscuous mode [ 433.032249][T10305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.038954][T10305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.045799][ T101] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.052831][ T101] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.075644][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16315'. [ 433.079003][T10357] netlink: 'syz.7.16315': attribute type 21 has an invalid length. [ 433.084384][ T101] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.095180][ T101] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.203217][ T1293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.206100][ T1293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.232642][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.235544][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.482846][T10377] netlink: 40 bytes leftover after parsing attributes in process `syz.8.16323'. [ 433.668294][T15747] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 433.784691][ T62] Bluetooth: hci1: command tx timeout [ 433.827652][T15747] usb 11-1: Using ep0 maxpacket: 8 [ 433.836263][T15747] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.842918][T15747] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.847587][T15747] usb 11-1: config 0 interface 0 has no altsetting 0 [ 433.851174][T15747] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 433.855378][T15747] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.863088][T15747] usb 11-1: config 0 descriptor?? [ 433.880905][ T29] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 434.056287][ T29] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.063076][ T29] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.074324][ T29] usb 13-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 434.078630][ T29] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.089151][ T29] usb 13-1: config 0 descriptor?? [ 434.334520][T15747] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 434.339718][T15747] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 434.343432][T15747] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 434.345822][T15747] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 434.348236][T15747] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 434.351496][T15747] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 434.521194][ T5924] usb 11-1: USB disconnect, device number 23 [ 434.544844][ T29] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 434.554090][ T29] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 434.565828][ T29] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0D8C:0022.0015/input/input69 [ 434.601313][ T29] cm6533_jd 0003:0D8C:0022.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 434.764713][ T5924] usb 13-1: USB disconnect, device number 2 [ 435.142955][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16329'. [ 435.145959][T10390] netlink: 'syz.6.16329': attribute type 26 has an invalid length. [ 435.761526][ T6025] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 435.933828][ T6025] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 435.939452][ T6025] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 435.956042][ T6025] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 435.959111][ T6025] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 435.962708][ T6025] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 435.971334][ T6025] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 435.974660][ T6025] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 435.982487][ T6025] usb 12-1: Product: syz [ 435.985114][ T6025] usb 12-1: Manufacturer: syz [ 435.998039][ T6025] cdc_wdm 12-1:1.0: skipping garbage [ 436.002231][ T6025] cdc_wdm 12-1:1.0: skipping garbage [ 436.007121][ T6025] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 436.007303][ T62] Bluetooth: hci1: command tx timeout [ 436.009950][ T6025] cdc_wdm 12-1:1.0: Unknown control protocol [ 436.425641][T10396] raw-gadget.0 gadget.7: fail, usb_ep_set_wedge returned -11 [ 436.429584][ T6025] usb 12-1: USB disconnect, device number 11 [ 437.111956][T10400] kexec: Could not allocate control_code_buffer [ 437.166430][T10412] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.16340'. [ 437.276231][ T41] kauditd_printk_skb: 71 callbacks suppressed [ 437.276241][ T41] audit: type=1400 audit(2000000718.161:72905): avc: denied { module_request } for pid=10415 comm="syz.6.16343" kmod="crypto-cmac(des)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 437.292150][ T41] audit: type=1400 audit(2000000718.161:72906): avc: denied { create } for pid=10417 comm="syz.8.16342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.311546][ T41] audit: type=1400 audit(2000000718.170:72907): avc: denied { write } for pid=10417 comm="syz.8.16342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.326452][ T41] audit: type=1400 audit(2000000718.170:72908): avc: denied { setopt } for pid=10417 comm="syz.8.16342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.341754][ T41] audit: type=1400 audit(2000000718.217:72909): avc: denied { create } for pid=10421 comm="syz.8.16344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 437.352947][ T41] audit: type=1400 audit(2000000718.217:72910): avc: denied { getopt } for pid=10421 comm="syz.8.16344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 437.364968][ T41] audit: type=1400 audit(2000000718.217:72911): avc: denied { connect } for pid=10421 comm="syz.8.16344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 437.375229][ T41] audit: type=1400 audit(2000000718.217:72912): avc: denied { name_connect } for pid=10421 comm="syz.8.16344" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 437.387771][ T41] audit: type=1400 audit(2000000718.245:72913): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59592 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 437.403098][ T41] audit: type=1400 audit(2000000718.245:72914): avc: denied { read write } for pid=2684 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.230181][ T62] Bluetooth: hci1: command tx timeout [ 438.600765][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16355'. [ 438.607294][T10451] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16355'. [ 439.398323][T10484] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 440.208265][ T5924] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 440.359914][T10523] loop5: detected capacity change from 0 to 2640 [ 440.366140][ T5517] buffer_io_error: 11 callbacks suppressed [ 440.366151][ T5517] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.371719][ T5517] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.374623][T10523] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.377352][T10523] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.381703][ T5517] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.384433][T10523] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.387553][ T5517] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.389621][ T5924] usb 12-1: Using ep0 maxpacket: 8 [ 440.390663][T10523] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.395059][ T5517] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.395684][ T5924] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.398067][T10523] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.406659][T10523] ldm_validate_partition_table(): Disk read failed. [ 440.406877][ T5924] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.411588][T10523] Dev loop5: unable to read RDB block 0 [ 440.416351][T10523] loop5: unable to read partition table [ 440.420608][ T5924] usb 12-1: config 0 interface 0 has no altsetting 0 [ 440.427555][T10523] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 440.427780][ T5924] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 440.436695][ T5924] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.445732][ T5924] usb 12-1: config 0 descriptor?? [ 440.452700][T10524] loop5: detected capacity change from 2640 to 524287999 [ 440.452746][ T62] Bluetooth: hci1: command tx timeout [ 440.902828][ T5924] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 440.905213][ T5924] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 440.910939][ T5924] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 440.913401][ T5924] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 440.915730][ T5924] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 440.918394][ T5924] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 441.102298][ T1040] usb 12-1: USB disconnect, device number 12 [ 441.981043][T32075] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 442.162529][T32075] usb 11-1: Using ep0 maxpacket: 8 [ 442.167663][T32075] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 442.170443][T32075] usb 11-1: config 0 has no interface number 0 [ 442.172496][T32075] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 442.179045][T32075] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 442.182809][T32075] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.186646][T32075] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 442.190862][T32075] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 442.193770][T32075] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.198476][T32075] usb 11-1: config 0 descriptor?? [ 442.210035][T32075] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 443.120467][ T41] kauditd_printk_skb: 92 callbacks suppressed [ 443.120481][ T41] audit: type=1400 audit(2000000723.626:73007): avc: denied { execute } for pid=10544 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 443.146418][ T41] audit: type=1400 audit(2000000723.626:73008): avc: denied { execute_no_trans } for pid=10544 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 443.181419][ T41] audit: type=1400 audit(2000000723.691:73009): avc: denied { create } for pid=10545 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 443.195863][ T41] audit: type=1400 audit(2000000723.691:73010): avc: denied { read write } for pid=10545 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 443.203861][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880331cb400: rx timeout, send abort [ 443.205290][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.210570][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880331cb400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 443.225356][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.229525][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.236927][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.243249][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.250344][ T41] audit: type=1400 audit(2000000723.691:73011): avc: denied { open } for pid=10545 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 443.268920][ T41] audit: type=1400 audit(2000000723.710:73012): avc: denied { ioctl } for pid=10545 comm="syz-executor" path="socket:[149866]" dev="sockfs" ino=149866 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 443.277798][ T41] audit: type=1400 audit(2000000723.738:73013): avc: denied { read } for pid=5121 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 443.285132][ T41] audit: type=1400 audit(2000000723.738:73014): avc: denied { search } for pid=5121 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.293985][ T41] audit: type=1400 audit(2000000723.738:73015): avc: denied { write search } for pid=5121 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.312656][ T41] audit: type=1400 audit(2000000723.738:73016): avc: denied { add_name } for pid=5121 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.563517][T10545] xfrm0 speed is unknown, defaulting to 1000 [ 443.767649][T10545] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.770192][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.772824][T10545] bridge_slave_0: entered allmulticast mode [ 443.776369][T10545] bridge_slave_0: entered promiscuous mode [ 443.783601][T10545] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.786247][T10545] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.789455][T10545] bridge_slave_1: entered allmulticast mode [ 443.792780][T10545] bridge_slave_1: entered promiscuous mode [ 443.819673][T10545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.825430][T10545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.850360][T10545] team0: Port device team_slave_0 added [ 443.855181][T10545] team0: Port device team_slave_1 added [ 443.877246][T10545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.879666][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.888923][T10545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.894176][T10545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.896520][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.904990][T10545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.937100][T10545] hsr_slave_0: entered promiscuous mode [ 443.939559][T10545] hsr_slave_1: entered promiscuous mode [ 443.941710][T10545] debugfs: 'hsr0' already exists in 'hsr' [ 443.943608][T10545] Cannot create hsr debugfs directory [ 444.068952][T10545] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 444.075287][T10545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.082888][T10545] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 444.090535][T10545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.097312][T10545] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 444.108222][T10545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.113192][T10545] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 444.122256][T10545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.149410][T10545] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.151883][T10545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.154380][T10545] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.156724][T10545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.215135][T10545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.229156][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.242324][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.288603][T10545] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.306732][ T1293] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.309193][ T1293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.330192][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.332615][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.564036][T10592] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.16406'. [ 444.639068][T10598] netlink: 20 bytes leftover after parsing attributes in process `syz.8.16408'. [ 444.658831][T32075] usb 11-1: USB disconnect, device number 24 [ 444.664276][T32075] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 444.753067][T10604] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 444.773334][T10545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.980918][T10545] veth0_vlan: entered promiscuous mode [ 445.004799][T10545] veth1_vlan: entered promiscuous mode [ 445.034310][T10545] veth0_macvtap: entered promiscuous mode [ 445.038958][T10545] veth1_macvtap: entered promiscuous mode [ 445.047473][T10545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.055350][T10545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.063135][ T1293] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.066010][ T1293] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.069743][ T1293] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.072869][ T1293] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.186056][ T213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.189126][ T213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.221294][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.230922][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.400132][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16424'. [ 445.412089][ T62] Bluetooth: hci2: command tx timeout [ 445.454975][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16424'. [ 445.476935][T10647] netlink: 'syz.7.16426': attribute type 2 has an invalid length. [ 445.479647][T10647] netlink: 'syz.7.16426': attribute type 2 has an invalid length. [ 445.589651][T10652] input: syz1 as /devices/virtual/input/input70 [ 445.990739][T10650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.236189][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16435'. [ 446.374657][ T79] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.380625][ T79] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.388468][ T79] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.393804][ T79] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.452626][ T5924] IPVS: starting estimator thread 0... [ 446.456007][ T79] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.463263][ T79] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.478843][ T79] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.484338][ T79] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.555744][T10675] IPVS: using max 48 ests per chain, 115200 per kthread [ 446.685683][T10693] erspan0: entered promiscuous mode [ 446.700327][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16446'. [ 446.849872][T10711] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.16454'. [ 447.092432][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16464'. [ 447.095471][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16464'. [ 447.096868][T10733] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.16463'. [ 447.633824][ T62] Bluetooth: hci2: command tx timeout [ 448.337395][T10754] kvm: MWAIT instruction emulated as NOP! [ 448.555444][ T41] kauditd_printk_skb: 191 callbacks suppressed [ 448.555455][ T41] audit: type=1400 audit(2000000728.717:73208): avc: denied { read write } for pid=10766 comm="syz.6.16479" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.581620][ T41] audit: type=1400 audit(2000000728.717:73209): avc: denied { open } for pid=10766 comm="syz.6.16479" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.606242][ T41] audit: type=1400 audit(2000000728.717:73210): avc: denied { ioctl } for pid=10766 comm="syz.6.16479" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.618247][ T41] audit: type=1400 audit(2000000728.745:73211): avc: denied { read } for pid=10768 comm="syz.8.16480" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 448.625970][ T41] audit: type=1400 audit(2000000728.745:73212): avc: denied { open } for pid=10768 comm="syz.8.16480" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 448.780898][ T41] audit: type=1400 audit(2000000728.932:73213): avc: denied { map } for pid=10772 comm="syz.7.16482" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=150319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 448.789246][ T41] audit: type=1400 audit(2000000728.932:73214): avc: denied { read } for pid=10772 comm="syz.7.16482" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=150319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 448.809397][ T6003] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 448.874761][ T41] audit: type=1400 audit(2000000729.016:73215): avc: denied { create } for pid=10774 comm="syz.7.16483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 448.890038][ T41] audit: type=1400 audit(2000000729.016:73216): avc: denied { create } for pid=10774 comm="syz.7.16483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 448.901710][ T41] audit: type=1400 audit(2000000729.016:73217): avc: denied { ioctl } for pid=10774 comm="syz.7.16483" path="socket:[151835]" dev="sockfs" ino=151835 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 448.971346][ T6003] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.975251][ T6003] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.978382][ T6003] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 448.987204][ T6003] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 448.990405][ T6003] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.995172][ T6003] usb 11-1: config 0 descriptor?? [ 449.097783][ T6025] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 449.258018][ T6025] usb 13-1: Using ep0 maxpacket: 8 [ 449.264913][ T6025] usb 13-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 449.267924][ T6025] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.270773][ T6025] usb 13-1: Product: syz [ 449.272209][ T6025] usb 13-1: Manufacturer: syz [ 449.273805][ T6025] usb 13-1: SerialNumber: syz [ 449.276663][ T6025] usb 13-1: config 0 descriptor?? [ 449.322360][ T53] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 449.433785][ T6003] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 449.436522][ T6003] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 449.439082][ T6003] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 449.441662][ T6003] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 449.444190][ T6003] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 449.446528][ T6003] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 449.448869][ T6003] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 449.451467][ T6003] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 449.453951][ T6003] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 449.456417][ T6003] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 449.471912][ T6003] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 449.485204][ T53] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.492058][ T53] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 449.495497][ T53] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.501003][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.506284][ T6025] usb 13-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 449.511187][T10780] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 449.512350][ T6025] dvb_usb_rtl28xxu 13-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 449.519108][ T53] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 449.522273][ T6025] usb 13-1: USB disconnect, device number 3 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x90000) [ 449.654212][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 449.656795][ T1131] ata1: failed to read log page 10h (errno=-5) [ 449.658847][ T1131] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 449.661313][ T1131] ata1.00: irq_stat 0x41000000 [ 449.662909][ T1131] ata1.00: failed command: READ FPDMA QUEUED [ 449.665204][ T1131] ata1.00: cmd 60/80:70:ee:59:01/04:00:00:00:00/40 tag 14 ncq dma 589824 in [ 449.665204][ T1131] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 449.670888][ T1131] ata1.00: status: { DRDY } [ 449.672436][ T1131] ata1.00: error: { ABRT } [ 449.673949][ T1131] ata1.00: failed command: READ FPDMA QUEUED [ 449.676863][ T1131] ata1.00: cmd 60/00:78:ee:5e:01/03:00:00:00:00/40 tag 15 ncq dma 393216 in [ 449.676863][ T1131] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 449.682495][ T1131] ata1.00: status: { DRDY } [ 449.684126][ T1131] ata1.00: error: { ABRT } [ 449.689275][ T1131] ata1.00: configured for UDMA/100 [ 449.691271][ T1131] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 449.696000][ T1131] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 449.698841][ T1131] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 449.701550][ T1131] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 59 ee 00 04 80 00 [ 449.704273][ T1131] blk_print_req_error: 138 callbacks suppressed [ 449.704281][ T1131] I/O error, dev sda, sector 88558 op 0x0:(READ) flags 0x80700 phys_seg 65 prio class 2 [ 449.709848][ T1131] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 449.713141][ T1131] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 449.715699][ T1131] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 449.718583][ T1131] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 5e ee 00 03 00 00 [ 449.721383][ T1131] I/O error, dev sda, sector 89838 op 0x0:(READ) flags 0x80700 phys_seg 48 prio class 2 [ 449.724678][ T1131] ata1: EH complete [ 449.761200][ T1344] usb 12-1: USB disconnect, device number 13 [ 449.785310][ T1040] usb 11-1: USB disconnect, device number 25 [ 449.858265][ T62] Bluetooth: hci2: command tx timeout [ 449.858626][T10790] netlink: 'syz.9.16489': attribute type 21 has an invalid length. [ 449.875144][T10790] netlink: 'syz.9.16489': attribute type 21 has an invalid length. [ 449.992005][T10796] __nla_validate_parse: 4 callbacks suppressed [ 449.992017][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16492'. [ 449.997803][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16492'. [ 450.581090][T10842] netlink: 4400 bytes leftover after parsing attributes in process `syz.7.16516'. [ 450.762174][T10857] netlink: 84 bytes leftover after parsing attributes in process `syz.8.16523'. [ 450.768424][T10857] nbd: must specify at least one socket [ 451.016588][ T101] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.153070][ T101] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.154826][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 451.176186][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 451.184873][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 451.188530][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 451.192367][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 451.288262][ T101] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.368571][ T101] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.426013][T10869] xfrm0 speed is unknown, defaulting to 1000 [ 451.559073][T10869] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.562146][T10869] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.565145][T10869] bridge_slave_0: entered allmulticast mode [ 451.569147][T10869] bridge_slave_0: entered promiscuous mode [ 451.572415][T10869] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.574892][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.577479][T10869] bridge_slave_1: entered allmulticast mode [ 451.580910][T10869] bridge_slave_1: entered promiscuous mode [ 451.622435][ T223] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.643224][T10869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.646279][ T223] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.650443][T10869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.717725][T10869] team0: Port device team_slave_0 added [ 451.724301][ T223] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.730779][ T223] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.740974][T10869] team0: Port device team_slave_1 added [ 452.015328][ T101] bridge_slave_1: left allmulticast mode [ 452.017288][ T101] bridge_slave_1: left promiscuous mode [ 452.019310][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.023925][ T101] bridge_slave_0: left allmulticast mode [ 452.026764][ T101] bridge_slave_0: left promiscuous mode [ 452.028766][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.079244][ T5090] Bluetooth: hci2: command tx timeout [ 452.465336][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.517848][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.550651][ T101] bond0 (unregistering): Released all slaves [ 452.590173][T10924] sock: sock_set_timeout: `syz.8.16546' (pid 10924) tries to set negative timeout [ 452.593327][T10869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.593339][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.593353][T10869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.594791][T10869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.624419][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.645990][T10869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.667525][T10915] xfrm0 speed is unknown, defaulting to 1000 [ 452.671738][T10869] hsr_slave_0: entered promiscuous mode [ 452.674104][T10869] hsr_slave_1: entered promiscuous mode [ 452.676339][T10869] debugfs: 'hsr0' already exists in 'hsr' [ 452.678742][T10869] Cannot create hsr debugfs directory [ 452.869797][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16551'. [ 452.875810][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16551'. [ 452.887832][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16551'. [ 452.891136][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16551'. [ 453.122557][T10869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.128380][ T6003] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 453.284710][T10869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.294132][ T6003] usb 13-1: config index 0 descriptor too short (expected 45, got 36) [ 453.297103][ T6003] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.302172][ T6003] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.306931][ T6003] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.313121][ T6003] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.316524][ T6003] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.327418][ T6003] usb 13-1: config 0 descriptor?? [ 453.361471][ T5090] Bluetooth: hci0: command tx timeout [ 453.378383][ T101] hsr_slave_0: left promiscuous mode [ 453.386442][ T101] hsr_slave_1: left promiscuous mode [ 453.389157][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.394018][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.399751][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.402211][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.431061][ T101] veth1_to_batadv: left promiscuous mode [ 453.438809][ T101] veth1_macvtap: left promiscuous mode [ 453.440704][ T101] veth0_macvtap: left promiscuous mode [ 453.443643][ T101] veth1_vlan: left promiscuous mode [ 453.445490][ T101] veth0_vlan: left promiscuous mode [ 453.671683][ T101] team0 (unregistering): Port device team_slave_1 removed [ 453.696777][ T101] team0 (unregistering): Port device team_slave_0 removed [ 453.787722][ T6003] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 453.810688][ T6003] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 453.922906][ T41] kauditd_printk_skb: 147 callbacks suppressed [ 453.922920][ T41] audit: type=1400 audit(2000000733.742:73365): avc: denied { mount } for pid=10963 comm="syz.9.16564" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 454.017206][T10869] team0: Port device netdevsim1 removed [ 454.031198][T10869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.059004][ T54] usb 13-1: USB disconnect, device number 4 [ 454.154255][ T41] audit: type=1400 audit(2000000733.957:73366): avc: denied { create } for pid=10975 comm="syz.6.16569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 454.165486][ T41] audit: type=1400 audit(2000000733.957:73367): avc: denied { bind } for pid=10975 comm="syz.6.16569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 454.182134][ T41] audit: type=1400 audit(2000000733.957:73368): avc: denied { accept } for pid=10975 comm="syz.6.16569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 454.192920][ T41] audit: type=1400 audit(2000000733.957:73369): avc: denied { write } for pid=10975 comm="syz.6.16569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 454.214420][ T41] audit: type=1400 audit(2000000733.967:73370): avc: denied { recv } for pid=5716 comm="syz-executor" saddr=127.0.0.1 src=59592 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 454.272314][T10980] netlink: 64 bytes leftover after parsing attributes in process `syz.9.16571'. [ 454.300456][T10869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.330430][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16573'. [ 454.404844][ T41] audit: type=1400 audit(2000000734.191:73371): avc: denied { read write } for pid=10987 comm="syz.9.16574" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 454.414142][ T41] audit: type=1400 audit(2000000734.191:73372): avc: denied { bpf } for pid=10989 comm="syz.6.16575" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 454.420571][T10988] input: syz1 as /devices/virtual/input/input72 [ 454.423447][ T41] audit: type=1400 audit(2000000734.191:73373): avc: denied { perfmon } for pid=10989 comm="syz.6.16575" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 454.438369][ T41] audit: type=1400 audit(2000000734.200:73374): avc: denied { open } for pid=10987 comm="syz.9.16574" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 454.506459][ T101] IPVS: stop unused estimator thread 0... [ 454.595848][T10996] input: syz0 as /devices/virtual/input/input73 [ 454.669260][T10869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 454.681622][T10869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.687025][T10869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 454.732388][T10869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.742466][T10869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 454.750111][T10869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.812896][T10869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 454.832317][T10869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.949485][T10869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.970006][T10869] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.976191][ T1293] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.978609][ T1293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.988235][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.990646][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.259197][T10869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.310725][T10869] veth0_vlan: entered promiscuous mode [ 455.319928][T10869] veth1_vlan: entered promiscuous mode [ 455.344853][T10869] veth0_macvtap: entered promiscuous mode [ 455.356033][T10869] veth1_macvtap: entered promiscuous mode [ 455.367490][T10869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.373685][T10869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.379165][ T213] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.386150][ T213] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.393979][ T213] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.396986][ T213] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.505207][ T1293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.521798][ T1293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.567981][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.570590][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.595000][ T5090] Bluetooth: hci0: command tx timeout [ 455.666984][T11082] syzkaller1: entered promiscuous mode [ 455.669001][T11082] syzkaller1: entered allmulticast mode [ 456.112351][T11106] xfrm0 speed is unknown, defaulting to 1000 [ 456.239316][T11112] __nla_validate_parse: 1 callbacks suppressed [ 456.239330][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16621'. [ 456.507742][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16630'. [ 456.738778][T11143] netlink: 'syz.8.16636': attribute type 39 has an invalid length. [ 457.407292][T11192] binder: 11191:11192 ioctl c0306201 200000000080 returned -14 [ 457.491152][T11202] syzkaller1: entered promiscuous mode [ 457.493529][T11202] syzkaller1: entered allmulticast mode [ 457.537579][T11204] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.16664'. [ 457.689721][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 457.806834][ T5090] Bluetooth: hci0: command tx timeout [ 458.010125][T15747] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 458.173970][T15747] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.179508][T15747] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.187610][T15747] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.196771][T15747] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.202061][T15747] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.210219][T15747] usb 11-1: config 0 descriptor?? [ 458.594971][T11220] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 458.652629][T15747] hid_parser_main: 5 callbacks suppressed [ 458.652642][T15747] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 458.657178][T15747] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 458.659724][T15747] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 458.665749][T15747] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 458.668308][T15747] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 458.675000][T15747] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 458.827013][T11233] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 458.873268][T11236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.875799][T11236] IPv6: NLM_F_CREATE should be set when creating new route [ 458.920428][ T1936] usb 11-1: USB disconnect, device number 26 [ 459.140045][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16687'. [ 459.143281][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16687'. [ 459.321250][ T41] kauditd_printk_skb: 213 callbacks suppressed [ 459.321263][ T41] audit: type=1400 audit(2000000738.786:73588): avc: denied { connect } for pid=11258 comm="syz.9.16690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 459.334986][ T41] audit: type=1400 audit(2000000738.786:73589): avc: denied { setopt } for pid=11258 comm="syz.9.16690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 459.341877][ T41] audit: type=1400 audit(2000000738.795:73590): avc: denied { write } for pid=11258 comm="syz.9.16690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 459.349798][ T41] audit: type=1400 audit(2000000738.814:73591): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 459.364812][ T41] audit: type=1400 audit(2000000738.823:73592): avc: denied { read } for pid=11263 comm="syz.8.16691" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.372652][ T41] audit: type=1400 audit(2000000738.823:73593): avc: denied { open } for pid=11263 comm="syz.8.16691" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.386918][ T41] audit: type=1400 audit(2000000738.823:73594): avc: denied { ioctl } for pid=11263 comm="syz.8.16691" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.504749][ T41] audit: type=1400 audit(2000000738.954:73595): avc: denied { read write } for pid=11265 comm="syz.6.16692" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 459.536083][ T41] audit: type=1400 audit(2000000738.954:73596): avc: denied { open } for pid=11265 comm="syz.6.16692" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 459.548260][ T41] audit: type=1400 audit(2000000738.954:73597): avc: denied { mounton } for pid=11265 comm="syz.6.16692" path="/881/file0" dev="tmpfs" ino=4507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 459.563667][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16693'. [ 459.570236][T11272] netlink: 'syz.8.16693': attribute type 30 has an invalid length. [ 459.573159][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16693'. [ 460.030096][ T5090] Bluetooth: hci0: command tx timeout [ 460.296700][ T1344] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 460.398111][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16718'. [ 460.458503][ T1344] usb 13-1: Using ep0 maxpacket: 8 [ 460.461671][ T1344] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 460.464437][ T1344] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.467910][ T1344] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.471097][ T1344] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.474388][ T1344] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.480044][ T1344] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 460.483319][ T1344] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.717671][ T1344] usb 13-1: usb_control_msg returned -32 [ 460.719626][ T1344] usbtmc 13-1:16.0: can't read capabilities [ 461.093524][T11352] usb 13-1: usbtmc_ioctl_clear_in_halt returned -32 [ 461.274751][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16741'. [ 462.252437][ T5090] Bluetooth: hci0: command tx timeout [ 463.235257][T11417] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.16762'. [ 463.254723][ T6003] usb 13-1: USB disconnect, device number 5 [ 464.429411][T11468] loop8: detected capacity change from 0 to 7 [ 464.454196][T11468] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 464.456740][T11468] loop8: partition table partially beyond EOD, truncated [ 464.459385][T11468] loop8: p1 size 3850834742 extends beyond EOD, truncated [ 464.462833][T11468] loop8: p2 start 516240762 is beyond EOD, truncated [ 464.491670][ T5517] udevd[5517]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 464.594231][T11472] netlink: 'syz.8.16786': attribute type 11 has an invalid length. [ 464.682897][ T41] kauditd_printk_skb: 117 callbacks suppressed [ 464.682910][ T41] audit: type=1400 audit(2000000743.811:73715): avc: denied { create } for pid=11475 comm="syz.8.16788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.837552][ T41] audit: type=1400 audit(2000000743.952:73716): avc: denied { read write } for pid=11485 comm="syz.6.16793" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 464.847285][ T41] audit: type=1400 audit(2000000743.952:73717): avc: denied { open } for pid=11485 comm="syz.6.16793" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 464.859196][ T41] audit: type=1400 audit(2000000743.961:73718): avc: denied { ioctl } for pid=11485 comm="syz.6.16793" path="/dev/video1" dev="devtmpfs" ino=956 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 464.926084][ T41] audit: type=1400 audit(2000000744.036:73719): avc: denied { write } for pid=11483 comm="syz.8.16792" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 465.198703][ T41] audit: type=1400 audit(2000000744.288:73720): avc: denied { prog_load } for pid=11494 comm="syz.6.16797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 465.205503][ T41] audit: type=1400 audit(2000000744.288:73721): avc: denied { bpf } for pid=11494 comm="syz.6.16797" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 465.300233][ T41] audit: type=1400 audit(2000000744.391:73722): avc: denied { create } for pid=11500 comm="syz.9.16800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 465.312358][ T41] audit: type=1400 audit(2000000744.401:73723): avc: denied { write } for pid=11500 comm="syz.9.16800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 465.318965][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.9.16800'. [ 465.409220][ T41] audit: type=1400 audit(2000000744.485:73724): avc: denied { map_create } for pid=11505 comm="syz.9.16802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 465.454173][T11510] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 465.459318][T11510] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 465.463043][T11510] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 465.556580][T11518] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input74 [ 465.961894][ T1936] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 466.025349][ T29] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 466.132823][ T1936] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 466.137208][ T1936] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 466.144674][ T1936] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 466.148349][ T1936] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.154274][T11523] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 466.160233][ T1936] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.195649][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 466.198634][ T29] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.202359][ T29] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.205626][ T29] usb 11-1: config 0 interface 0 has no altsetting 0 [ 466.209962][ T29] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 466.213045][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.216962][ T29] usb 11-1: config 0 descriptor?? [ 466.375976][ T1936] usb 14-1: USB disconnect, device number 2 [ 466.519233][T11539] netlink: 'syz.8.16817': attribute type 5 has an invalid length. [ 466.574562][T11540] netlink: 'syz.8.16817': attribute type 5 has an invalid length. [ 466.656869][ T29] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 466.659229][ T29] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 466.661529][ T29] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 466.663877][ T29] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 466.666565][ T29] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 466.669293][ T29] mcp2221 0003:04D8:00DD.001A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 466.867405][T11526] i2c i2c-2: unsupported multi-msg i2c transaction [ 466.880993][ T29] usb 11-1: USB disconnect, device number 27 [ 467.129357][T11568] netlink: 'syz.8.16830': attribute type 29 has an invalid length. [ 467.134108][T11568] netlink: 'syz.8.16830': attribute type 29 has an invalid length. [ 467.138760][T11568] netlink: 500 bytes leftover after parsing attributes in process `syz.8.16830'. [ 467.543003][T15747] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 467.712849][T15747] usb 14-1: Using ep0 maxpacket: 8 [ 467.716009][T15747] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.725735][T15747] usb 14-1: config 0 has no interface number 0 [ 467.727724][T15747] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.727996][T11596] "syz.6.16843" (11596) uses obsolete ecb(arc4) skcipher [ 467.731307][T15747] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 467.738906][T15747] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.743351][T15747] usb 14-1: config 0 descriptor?? [ 467.748066][T15747] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 467.954143][T11606] netlink: 'syz.2.16848': attribute type 4 has an invalid length. [ 468.002120][T11606] netlink: 'syz.2.16848': attribute type 17 has an invalid length. [ 468.044104][ T40] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 468.204394][ T40] usb 11-1: Using ep0 maxpacket: 8 [ 468.210724][ T40] usb 11-1: config 0 has an invalid interface number: 186 but max is 0 [ 468.225814][ T40] usb 11-1: config 0 has no interface number 0 [ 468.228485][ T40] usb 11-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 468.232751][ T40] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 468.247211][ T40] usb 11-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 468.251256][ T40] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 468.255656][ T40] usb 11-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.263020][T11613] syzkaller1: entered promiscuous mode [ 468.264855][T11613] syzkaller1: entered allmulticast mode [ 468.283645][ T40] usb 11-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 468.289809][ T40] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.300535][ T40] usb 11-1: Product: syz [ 468.302154][ T40] usb 11-1: Manufacturer: syz [ 468.303815][ T40] usb 11-1: SerialNumber: syz [ 468.307259][ T40] usb 11-1: config 0 descriptor?? [ 468.530696][ T40] iowarrior 11-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 468.560034][ T54] usb 14-1: USB disconnect, device number 3 [ 468.653553][T11624] xfrm0 speed is unknown, defaulting to 1000 [ 468.752066][ T6003] usb 11-1: USB disconnect, device number 28 [ 468.804908][T11627] input: syz0 as /devices/virtual/input/input75 [ 469.163796][T11637] xfrm0 speed is unknown, defaulting to 1000 [ 469.903597][ T54] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 470.063813][ T54] usb 13-1: Using ep0 maxpacket: 8 [ 470.069888][ T54] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 470.075069][ T54] usb 13-1: config 0 has no interface number 0 [ 470.077005][ T54] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.085386][ T54] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 470.085401][ T54] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.096824][ T54] usb 13-1: config 0 descriptor?? [ 470.101601][ T41] kauditd_printk_skb: 110 callbacks suppressed [ 470.101610][ T41] audit: type=1400 audit(2000000748.874:73835): avc: denied { ioctl } for pid=11653 comm="syz.8.16868" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.115018][ T54] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 470.120593][ T41] audit: type=1400 audit(2000000748.893:73836): avc: denied { recv } for pid=54 comm="kworker/1:1" saddr=10.0.2.2 src=48060 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 470.128782][ T41] audit: type=1400 audit(2000000748.893:73837): avc: denied { read write } for pid=11678 comm="syz.9.16879" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.136144][ T41] audit: type=1400 audit(2000000748.893:73838): avc: denied { open } for pid=11678 comm="syz.9.16879" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.188446][ T41] audit: type=1400 audit(2000000748.958:73839): avc: denied { mounton } for pid=11682 comm="syz.6.16881" path="/938/file0" dev="tmpfs" ino=4799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 470.198670][ T41] audit: type=1400 audit(2000000748.967:73840): avc: denied { mount } for pid=11682 comm="syz.6.16881" name="/" dev="9p" ino=72876333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 470.207111][ T41] audit: type=1400 audit(2000000748.977:73841): avc: denied { write } for pid=11682 comm="syz.6.16881" name="/" dev="9p" ino=72876333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.215597][ T41] audit: type=1400 audit(2000000748.977:73842): avc: denied { add_name } for pid=11682 comm="syz.6.16881" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.224160][ T41] audit: type=1400 audit(2000000748.977:73843): avc: denied { create } for pid=11682 comm="syz.6.16881" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 470.231309][ T41] audit: type=1400 audit(2000000748.977:73844): avc: denied { associate } for pid=11682 comm="syz.6.16881" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 470.306188][ T1435] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 470.309206][ T1435] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 470.333391][ T10] usb 13-1: USB disconnect, device number 6 [ 470.568082][T11694] hpfs: Bad magic ... probably not HPFS [ 470.572206][T11694] hpfs: Bad magic ... probably not HPFS [ 470.918894][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16898'. [ 471.117893][T11736] tap0: tun_chr_ioctl cmd 1074025675 [ 471.119820][T11736] tap0: persist enabled [ 471.122150][T11736] tap0: tun_chr_ioctl cmd 1074025675 [ 471.124134][T11736] tap0: persist disabled [ 471.460892][T11767] Bluetooth: MGMT ver 1.23 [ 471.524879][T11773] tun0: tun_chr_ioctl cmd 1074025675 [ 471.526516][T11773] tun0: persist enabled [ 471.528788][T11773] tun0: tun_chr_ioctl cmd 1074025675 [ 471.530421][T11773] tun0: persist enabled [ 472.008940][T11816] kvm: user requested TSC rate below hardware speed [ 472.139731][T11821] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 472.410034][T11827] netem: change failed [ 472.427156][ T54] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 472.541553][T11831] syzkaller1: entered promiscuous mode [ 472.543458][T11831] syzkaller1: entered allmulticast mode [ 472.585901][ T54] usb 13-1: Using ep0 maxpacket: 32 [ 472.590969][ T54] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 472.597094][ T54] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 472.599790][ T54] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 472.602163][ T54] usb 13-1: Product: syz [ 472.603445][ T54] usb 13-1: Manufacturer: syz [ 472.604865][ T54] usb 13-1: SerialNumber: syz [ 472.610893][ T54] usb 13-1: config 0 descriptor?? [ 472.612927][T11823] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 472.615756][ T54] hub 13-1:0.0: bad descriptor, ignoring hub [ 472.617532][ T54] hub 13-1:0.0: probe with driver hub failed with error -5 [ 472.863981][ T6025] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 472.968142][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16956'. [ 473.035273][ T6025] usb 14-1: Using ep0 maxpacket: 32 [ 473.038645][ T6025] usb 14-1: config 0 has no interfaces? [ 473.040647][ T6025] usb 14-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 473.043900][ T6025] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.050474][ T6025] usb 14-1: config 0 descriptor?? [ 473.262625][T11823] usb 13-1: reset high-speed USB device number 7 using dummy_hcd [ 473.270667][ T6025] usb 14-1: USB disconnect, device number 4 [ 473.420636][T11823] usb 13-1: device firmware changed [ 473.422815][ T40] usb 13-1: USB disconnect, device number 7 [ 473.568797][ T40] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 473.622289][ T62] Bluetooth: hci0: command 0x1407 tx timeout [ 473.628662][ T5090] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 473.729071][ T40] usb 13-1: Using ep0 maxpacket: 32 [ 473.733287][ T40] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 473.742110][ T40] usb 13-1: string descriptor 0 read error: -22 [ 473.745084][ T40] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 473.749230][ T40] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 473.755143][ T40] usb 13-1: config 0 descriptor?? [ 473.760515][T11841] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 473.764812][ T40] hub 13-1:0.0: bad descriptor, ignoring hub [ 473.767539][ T40] hub 13-1:0.0: probe with driver hub failed with error -5 [ 474.010669][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16961'. [ 474.014109][T11858] netlink: 'syz.6.16961': attribute type 30 has an invalid length. [ 474.016870][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16961'. [ 474.092790][ T10] usb 13-1: USB disconnect, device number 8 [ 474.097029][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16964'. [ 474.131018][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16965'. [ 474.134092][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16965'. [ 474.240796][T11873] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 474.478087][ T5090] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 474.482769][ T5090] Bluetooth: hci2: Injecting HCI hardware error event [ 474.489218][ T62] Bluetooth: hci2: hardware error 0x00 [ 474.920952][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16986'. [ 475.478602][T11943] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.16999'. [ 475.521765][ T41] kauditd_printk_skb: 168 callbacks suppressed [ 475.521777][ T41] audit: type=1400 audit(2000000754.949:74013): avc: denied { create } for pid=11945 comm="syz.8.17000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.541689][T11946] netlink: 'syz.8.17000': attribute type 3 has an invalid length. [ 475.545872][ T41] audit: type=1400 audit(2000000754.967:74014): avc: denied { create } for pid=11947 comm="syz.2.17001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 475.552596][ T41] audit: type=1400 audit(2000000754.967:74015): avc: denied { write } for pid=11945 comm="syz.8.17000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.567094][ T41] audit: type=1400 audit(2000000754.977:74016): avc: denied { read write } for pid=11949 comm="syz.2.17002" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 475.577762][ T41] audit: type=1400 audit(2000000754.977:74017): avc: denied { open } for pid=11949 comm="syz.2.17002" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 475.585698][ T41] audit: type=1400 audit(2000000754.995:74018): avc: denied { ioctl } for pid=11949 comm="syz.2.17002" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 475.594671][ T41] audit: type=1400 audit(2000000754.995:74019): avc: denied { create } for pid=11949 comm="syz.2.17002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 475.601020][ T41] audit: type=1400 audit(2000000754.995:74020): avc: denied { connect } for pid=11949 comm="syz.2.17002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 475.617507][ T41] audit: type=1400 audit(2000000755.042:74021): avc: denied { shutdown } for pid=11949 comm="syz.2.17002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 475.654464][ T54] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 475.678406][ T41] audit: type=1400 audit(2000000755.098:74022): avc: denied { create } for pid=11952 comm="syz.8.17003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 475.793082][T11960] xt_hashlimit: size too large, truncated to 1048576 [ 475.823566][ T54] usb 14-1: Using ep0 maxpacket: 8 [ 475.827960][ T54] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 475.831553][ T54] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.838564][ T54] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.842446][ T54] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.846764][ T54] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.852410][ T54] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 475.865538][ T54] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.090234][ T54] usb 14-1: usb_control_msg returned -32 [ 476.092717][ T54] usbtmc 14-1:16.0: can't read capabilities [ 476.113064][T11968] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 476.264934][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17014'. [ 476.307230][T11980] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 476.468642][T11987] usbtmc 14-1:16.0: stb usb_control_msg returned -32 [ 476.472126][ T54] usb 14-1: USB disconnect, device number 5 [ 476.646379][T15747] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 476.811680][T15747] usb 13-1: Using ep0 maxpacket: 8 [ 476.814898][T15747] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 476.817849][T15747] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.820957][T15747] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 476.824006][T15747] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.827264][T15747] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.832100][T15747] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 476.835091][T15747] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.874313][ T62] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 477.062584][T15747] usb 13-1: usb_control_msg returned -32 [ 477.068218][T15747] usbtmc 13-1:16.0: can't read capabilities [ 477.074089][T11998] syzkaller1: entered promiscuous mode [ 477.076052][T11998] syzkaller1: entered allmulticast mode [ 477.173889][T12000] loop5: detected capacity change from 0 to 2640 [ 477.176409][T12000] buffer_io_error: 12 callbacks suppressed [ 477.176418][T12000] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.186237][T12000] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.191464][T12000] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.197201][T12000] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.207710][T12000] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.210371][T12000] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.213814][T12000] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.216466][T12000] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.219134][T12000] ldm_validate_partition_table(): Disk read failed. [ 477.221313][T12000] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.225312][T12000] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.228021][T12000] Dev loop5: unable to read RDB block 0 [ 477.231434][T12000] loop5: unable to read partition table [ 477.235860][T12000] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 477.311823][T12008] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 477.452013][T12015] netlink: 207952 bytes leftover after parsing attributes in process `syz.9.17029'. [ 477.620204][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 477.887388][T12033] usbtmc 13-1:16.0: usb_control_msg returned -32 [ 478.028232][ T40] usb 13-1: USB disconnect, device number 9 [ 478.637782][ T62] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 478.641472][ T62] CPU: 3 UID: 0 PID: 62 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.641490][ T62] Tainted: [L]=SOFTLOCKUP [ 478.641495][ T62] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.641509][ T62] Workqueue: hci1 hci_rx_work [ 478.641532][ T62] Call Trace: [ 478.641538][ T62] [ 478.641543][ T62] dump_stack_lvl+0x100/0x190 [ 478.641561][ T62] sysfs_warn_dup.cold+0x1c/0x28 [ 478.641580][ T62] sysfs_create_dir_ns+0x24b/0x2b0 [ 478.641595][ T62] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 478.641610][ T62] ? find_held_lock+0x2b/0x80 [ 478.641622][ T62] ? kobject_add_internal+0x25f/0x930 [ 478.641639][ T62] ? kobject_add_internal+0x25f/0x930 [ 478.641659][ T62] ? do_raw_spin_unlock+0x145/0x1e0 [ 478.641682][ T62] kobject_add_internal+0x2c8/0x930 [ 478.641700][ T62] kobject_add+0x16a/0x1e0 [ 478.641716][ T62] ? __pfx_kobject_add+0x10/0x10 [ 478.641731][ T62] ? class_to_subsys+0x10f/0x150 [ 478.641769][ T62] ? kobject_put+0xb9/0x640 [ 478.641784][ T62] ? _raw_spin_unlock+0x28/0x50 [ 478.641801][ T62] device_add+0x294/0x1950 [ 478.641815][ T62] ? __pfx_dev_set_name+0x10/0x10 [ 478.641831][ T62] ? __pfx_device_add+0x10/0x10 [ 478.641844][ T62] ? mgmt_send_event_skb+0x2fb/0x460 [ 478.641867][ T62] hci_conn_add_sysfs+0x1a3/0x260 [ 478.641884][ T62] le_conn_complete_evt+0x11eb/0x1f60 [ 478.641901][ T62] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 478.641918][ T62] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 478.641933][ T62] ? skb_pull_data+0x15f/0x1e0 [ 478.641952][ T62] hci_le_meta_evt+0x34a/0x5f0 [ 478.641966][ T62] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 478.641981][ T62] hci_event_packet+0x51c/0xcd0 [ 478.641994][ T62] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 478.642008][ T62] ? __pfx_hci_event_packet+0x10/0x10 [ 478.642022][ T62] ? kcov_remote_start+0x374/0x660 [ 478.642035][ T62] ? lockdep_hardirqs_on+0x78/0x100 [ 478.642052][ T62] hci_rx_work+0x451/0xfc0 [ 478.642072][ T62] process_one_work+0xa0e/0x1980 [ 478.642094][ T62] ? __pfx_process_one_work+0x10/0x10 [ 478.642113][ T62] ? __pfx_hci_rx_work+0x10/0x10 [ 478.642126][ T62] worker_thread+0x5ef/0xe50 [ 478.642188][ T62] ? kthread+0x13a/0x450 [ 478.642202][ T62] ? __pfx_worker_thread+0x10/0x10 [ 478.642216][ T62] kthread+0x370/0x450 [ 478.642229][ T62] ? __pfx_kthread+0x10/0x10 [ 478.642244][ T62] ret_from_fork+0x72b/0xd50 [ 478.642261][ T62] ? __pfx_ret_from_fork+0x10/0x10 [ 478.642282][ T62] ? __switch_to+0x800/0x1100 [ 478.642299][ T62] ? __pfx_kthread+0x10/0x10 [ 478.642313][ T62] ret_from_fork_asm+0x1a/0x30 [ 478.642336][ T62] [ 478.642352][ T62] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 478.739012][ T62] Bluetooth: hci1: failed to register connection device [ 479.294953][T12067] loop2: detected capacity change from 0 to 7 [ 479.325051][T12067] Dev loop2: unable to read RDB block 7 [ 479.328173][T12067] loop2: unable to read partition table [ 479.332872][T12067] loop2: partition table beyond EOD, truncated [ 479.338475][T12067] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 479.909363][T12084] hpfs: Bad magic ... probably not HPFS [ 479.913295][T12084] hpfs: Bad magic ... probably not HPFS [ 480.890290][ T41] kauditd_printk_skb: 122 callbacks suppressed [ 480.890304][ T41] audit: type=1400 audit(2000000759.974:74145): avc: denied { read } for pid=12124 comm="syz.8.17073" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 480.904317][ T41] audit: type=1400 audit(2000000759.992:74146): avc: denied { open } for pid=12124 comm="syz.8.17073" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 480.914413][ T41] audit: type=1400 audit(2000000760.002:74147): avc: denied { ioctl } for pid=12124 comm="syz.8.17073" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 481.110581][T12097] ceph: No mds server is up or the cluster is laggy [ 481.114047][T12094] ceph: No mds server is up or the cluster is laggy [ 481.382064][ T41] audit: type=1400 audit(2000000760.442:74148): avc: denied { read } for pid=12130 comm="syz.9.17075" dev="nsfs" ino=4026533173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.401650][ T41] audit: type=1400 audit(2000000760.442:74149): avc: denied { open } for pid=12130 comm="syz.9.17075" path="net:[4026533173]" dev="nsfs" ino=4026533173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.414779][ T41] audit: type=1400 audit(2000000760.442:74150): avc: denied { create } for pid=12130 comm="syz.9.17075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 481.434010][ T41] audit: type=1400 audit(2000000760.442:74151): avc: denied { bind } for pid=12130 comm="syz.9.17075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 481.442727][ T41] audit: type=1400 audit(2000000760.442:74152): avc: denied { write } for pid=12130 comm="syz.9.17075" path="socket:[160372]" dev="sockfs" ino=160372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 481.461433][ T41] audit: type=1400 audit(2000000760.507:74153): avc: denied { load_policy } for pid=12134 comm="syz.6.17076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 481.469187][T12135] SELinux: ebitmap: start bit 512 comes after start bit 768 [ 481.474516][T12135] SELinux: failed to load policy [ 481.619560][ T41] audit: type=1400 audit(2000000760.657:74154): avc: denied { read } for pid=12140 comm="syz.9.17080" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 481.986588][T12163] netlink: 40 bytes leftover after parsing attributes in process `syz.8.17090'. [ 483.442395][T12197] KVM: debugfs: duplicate directory 12197-5 [ 483.772749][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17115'. [ 484.124679][T12228] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 484.451047][T12237] netlink: 'syz.9.17125': attribute type 3 has an invalid length. [ 484.789165][ T40] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 484.981427][ T40] usb 14-1: Using ep0 maxpacket: 16 [ 484.986007][ T40] usb 14-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.994245][ T40] usb 14-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.999820][ T40] usb 14-1: config 0 interface 0 has no altsetting 0 [ 485.002011][ T40] usb 14-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 485.015306][ T40] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.022254][ T40] usb 14-1: config 0 descriptor?? [ 485.131844][T12264] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.17136'. [ 485.489256][ T40] nzxt-smart2 0003:1E71:2009.001B: unknown main item tag 0x0 [ 485.499382][ T40] nzxt-smart2 0003:1E71:2009.001B: unknown main item tag 0x0 [ 485.503431][ T40] nzxt-smart2 0003:1E71:2009.001B: unknown main item tag 0x0 [ 485.508811][ T40] nzxt-smart2 0003:1E71:2009.001B: unknown main item tag 0x0 [ 485.511330][ T40] nzxt-smart2 0003:1E71:2009.001B: unknown main item tag 0x0 [ 485.518615][ T40] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 485.548943][T12281] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 485.890106][ T40] usb 14-1: USB disconnect, device number 6 [ 486.020494][T12301] veth0_to_team: entered promiscuous mode [ 486.032235][T12301] veth0_to_team: left promiscuous mode [ 486.248729][ T41] kauditd_printk_skb: 125 callbacks suppressed [ 486.248741][ T41] audit: type=1400 audit(2000000764.990:74280): avc: denied { allowed } for pid=12310 comm="syz.2.17155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 486.372733][ T41] audit: type=1400 audit(2000000765.111:74281): avc: denied { map_create } for pid=12315 comm="syz.2.17158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 486.382901][ T41] audit: type=1400 audit(2000000765.111:74282): avc: denied { read } for pid=12315 comm="syz.2.17158" dev="nsfs" ino=4026533419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 486.387280][T12316] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 486.395103][ T41] audit: type=1400 audit(2000000765.111:74283): avc: denied { open } for pid=12315 comm="syz.2.17158" path="net:[4026533419]" dev="nsfs" ino=4026533419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 486.406971][ T41] audit: type=1400 audit(2000000765.111:74284): avc: denied { create } for pid=12315 comm="syz.2.17158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.416597][ T41] audit: type=1400 audit(2000000765.111:74285): avc: denied { bind } for pid=12315 comm="syz.2.17158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.427699][ T41] audit: type=1400 audit(2000000765.111:74286): avc: denied { write } for pid=12315 comm="syz.2.17158" path="socket:[157526]" dev="sockfs" ino=157526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.458431][ T41] audit: type=1400 audit(2000000765.186:74287): avc: denied { write } for pid=12317 comm="syz.2.17159" name="/" dev="9p" ino=72876333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 486.476578][ T41] audit: type=1400 audit(2000000765.186:74288): avc: denied { add_name } for pid=12317 comm="syz.2.17159" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 486.481477][T12318] netfs: Couldn't get user pages (rc=-14) [ 486.496706][ T41] audit: type=1400 audit(2000000765.186:74289): avc: denied { create } for pid=12317 comm="syz.2.17159" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 487.255610][T12340] netlink: 'syz.8.17169': attribute type 13 has an invalid length. [ 487.260000][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17169'. [ 487.267290][ T1293] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.267353][T12340] netlink: 'syz.8.17169': attribute type 13 has an invalid length. [ 487.270863][ T1293] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.270885][ T1293] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.270904][ T1293] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.283133][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17169'. [ 487.608885][T12372] xt_hashlimit: size too large, truncated to 1048576 [ 488.589450][T12398] 9pnet_virtio: no channels available for device syz [ 488.723528][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17196'. [ 489.014131][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17210'. [ 489.033544][T12430] team0: Port device team_slave_0 removed [ 489.210966][T12441] 9pnet_virtio: no channels available for device syz [ 489.614242][T12450] loop5: detected capacity change from 0 to 7 [ 489.626081][T12450] Dev loop5: unable to read RDB block 7 [ 489.627981][T12450] loop5: unable to read partition table [ 489.631362][T12450] loop5: partition table beyond EOD, truncated [ 489.634213][T12450] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 489.736810][ T1936] usb 11-1: new low-speed USB device number 29 using dummy_hcd [ 489.898411][ T1936] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.901778][ T1936] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.904791][ T1936] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 489.908773][ T1936] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 489.912104][ T1936] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.917685][T12448] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 489.923449][ T1936] hub 11-1:1.0: bad descriptor, ignoring hub [ 489.925622][ T1936] hub 11-1:1.0: probe with driver hub failed with error -5 [ 489.928410][ T1936] cdc_wdm 11-1:1.0: skipping garbage [ 489.930382][ T1936] cdc_wdm 11-1:1.0: skipping garbage [ 489.933636][ T1936] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 489.935998][ T1936] cdc_wdm 11-1:1.0: Unknown control protocol [ 490.236698][ T6003] libceph: connect (1)[c::]:6789 error -101 [ 490.240711][ T6003] libceph: mon0 (1)[c::]:6789 connect error [ 490.336030][T12459] ceph: No mds server is up or the cluster is laggy [ 490.409645][T12465] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 490.758109][T12448] cdc_wdm 11-1:1.0: Error autopm - -16 [ 490.758228][ T5924] usb 11-1: USB disconnect, device number 29 [ 490.794690][ T6003] usb 13-1: new full-speed USB device number 10 using dummy_hcd [ 490.922932][ T5924] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 490.957785][ T6003] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.961213][ T6003] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.966018][ T6003] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 490.969250][ T6003] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.083474][ T5924] usb 11-1: Using ep0 maxpacket: 16 [ 491.087280][ T5924] usb 11-1: config 4 has an invalid interface number: 76 but max is 0 [ 491.090786][ T5924] usb 11-1: config 4 has no interface number 0 [ 491.093596][ T5924] usb 11-1: config 4 interface 76 has no altsetting 0 [ 491.099147][ T5924] usb 11-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=68.11 [ 491.103242][ T5924] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.107869][ T5924] usb 11-1: Product: syz [ 491.109782][ T5924] usb 11-1: Manufacturer: syz [ 491.111898][ T5924] usb 11-1: SerialNumber: syz [ 491.195754][ T6003] usb 13-1: usb_control_msg returned -32 [ 491.197674][ T6003] usbtmc 13-1:16.0: can't read capabilities [ 491.336230][ T5924] keyspan 11-1:4.76: Keyspan 1 port adapter converter detected [ 491.339669][ T5924] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 87 [ 491.342619][ T5924] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 7 [ 491.347667][ T5924] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 81 [ 491.351252][ T5924] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 1 [ 491.353850][ T5924] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 2 [ 491.356497][ T5924] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 85 [ 491.359194][ T5924] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 5 [ 491.363731][ T5924] usb 11-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 491.368788][ T5924] usb 11-1: USB disconnect, device number 30 [ 491.376646][ T5924] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 491.380381][ T5924] keyspan 11-1:4.76: device disconnected [ 491.575203][T12477] usbtmc 13-1:16.0: usbtmc_ioctl_request failed -32 [ 491.579016][T15747] usb 13-1: USB disconnect, device number 10 [ 491.619333][ T41] kauditd_printk_skb: 128 callbacks suppressed [ 491.619349][ T41] audit: type=1400 audit(2000000770.015:74418): avc: denied { read write } for pid=10545 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.637094][ T41] audit: type=1400 audit(2000000770.015:74419): avc: denied { open } for pid=10545 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.649633][ T41] audit: type=1400 audit(2000000770.015:74420): avc: denied { ioctl } for pid=10545 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.657073][T12479] netlink: 'syz.9.17228': attribute type 3 has an invalid length. [ 491.658029][ T41] audit: type=1400 audit(2000000770.052:74421): avc: denied { create } for pid=12478 comm="syz.9.17228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 491.668841][ T41] audit: type=1400 audit(2000000770.052:74422): avc: denied { write } for pid=12478 comm="syz.9.17228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 491.675878][ T41] audit: type=1400 audit(2000000770.052:74423): avc: denied { read } for pid=12478 comm="syz.9.17228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 491.914876][T12489] 9pnet_virtio: no channels available for device syz [ 491.915656][ T41] audit: type=1400 audit(2000000770.286:74424): avc: denied { mounton } for pid=12488 comm="syz.6.17232" path="/1049/file0" dev="tmpfs" ino=5369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 491.924698][ T41] audit: type=1400 audit(2000000770.296:74425): avc: denied { unlink } for pid=12488 comm="syz.6.17232" name="#1d" dev="tmpfs" ino=5375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 491.932380][ T41] audit: type=1400 audit(2000000770.296:74426): avc: denied { mount } for pid=12488 comm="syz.6.17232" name="/" dev="overlay" ino=5370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 491.940650][ T41] audit: type=1400 audit(2000000770.324:74427): avc: denied { unmount } for pid=2684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 491.971365][T12491] xt_hashlimit: size too large, truncated to 1048576 [ 492.161624][T12498] netlink: 'syz.8.17235': attribute type 8 has an invalid length. [ 492.164927][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17235'. [ 492.171326][T12498] bond0: entered promiscuous mode [ 492.176626][T12498] bond_slave_0: entered promiscuous mode [ 492.178661][T12498] bond_slave_1: entered promiscuous mode [ 492.183507][T12498] gretap0: entered promiscuous mode [ 492.186275][T12498] ip6gretap0: entered promiscuous mode [ 492.188724][T12498] debugfs: 'hsr1' already exists in 'hsr' [ 492.190633][T12498] Cannot create hsr debugfs directory [ 492.198407][T12498] hsr1: entered promiscuous mode [ 492.310627][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17241'. [ 492.801367][T12538] xt_hashlimit: size too large, truncated to 1048576 [ 493.327875][T12565] netlink: 'syz.9.17263': attribute type 14 has an invalid length. [ 493.330574][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17263'. [ 493.334234][T12567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.336610][T12567] IPv6: NLM_F_CREATE should be set when creating new route [ 493.344199][ T1293] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.347240][T12565] netlink: 'syz.9.17263': attribute type 14 has an invalid length. [ 493.350958][ T1293] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.354314][ T1293] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.357229][ T1293] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.360189][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17263'. [ 493.380946][T12571] 9pnet_virtio: no channels available for device syz [ 493.669594][T12592] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 494.286850][T12616] input: syz0 as /devices/virtual/input/input76 [ 494.606469][T12620] kvm: user requested TSC rate below hardware speed [ 494.832973][T12624] netlink: 44 bytes leftover after parsing attributes in process `syz.6.17290'. [ 495.934686][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 496.083677][T12659] 9pnet_virtio: no channels available for device syz [ 496.757250][T12683] netlink: 208240 bytes leftover after parsing attributes in process `syz.9.17315'. [ 496.975237][ T41] kauditd_printk_skb: 136 callbacks suppressed [ 496.975248][ T41] audit: type=1400 audit(2000000775.031:74564): avc: denied { read } for pid=12688 comm="syz.9.17318" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 496.985621][ T41] audit: type=1400 audit(2000000775.031:74565): avc: denied { open } for pid=12688 comm="syz.9.17318" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 497.119510][ T41] audit: type=1400 audit(2000000775.162:74566): avc: denied { ioctl } for pid=12694 comm="syz.8.17321" path="socket:[162104]" dev="sockfs" ino=162104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 497.144420][ T41] audit: type=1400 audit(2000000775.162:74567): avc: denied { read } for pid=12694 comm="syz.8.17321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 497.176395][ T41] audit: type=1400 audit(2000000775.218:74568): avc: denied { create } for pid=12696 comm="syz.9.17322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 497.191733][ T41] audit: type=1400 audit(2000000775.227:74569): avc: denied { write } for pid=12696 comm="syz.9.17322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 497.198911][ T41] audit: type=1400 audit(2000000775.237:74570): avc: denied { nlmsg_write } for pid=12696 comm="syz.9.17322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 497.218935][T12699] netlink: 168 bytes leftover after parsing attributes in process `syz.9.17322'. [ 497.237042][ T41] audit: type=1400 audit(2000000775.265:74571): avc: denied { read write } for pid=12700 comm="syz.8.17324" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 497.251683][ T41] audit: type=1400 audit(2000000775.265:74572): avc: denied { open } for pid=12700 comm="syz.8.17324" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 497.268153][ T41] audit: type=1400 audit(2000000775.265:74573): avc: denied { mount } for pid=12700 comm="syz.8.17324" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 497.379101][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17325'. [ 497.382392][T12707] netlink: 'syz.8.17325': attribute type 3 has an invalid length. [ 497.386140][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17325'. [ 497.404386][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17325'. [ 497.407821][T12707] netlink: 'syz.8.17325': attribute type 3 has an invalid length. [ 497.531981][T12711] netlink: 'syz.8.17329': attribute type 9 has an invalid length. [ 497.534652][T12711] __nla_validate_parse: 1 callbacks suppressed [ 497.534661][T12711] netlink: 32 bytes leftover after parsing attributes in process `syz.8.17329'. [ 497.588130][T12714] SELinux: ebitmap: high bit 1536 is not equal to the expected value 1152 [ 497.594353][T12714] SELinux: failed to load policy [ 497.746414][T12722] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.17334'. [ 498.405958][T12742] Bluetooth: MGMT ver 1.23 [ 498.412485][T12742] Bluetooth: hci1: expected 2178 bytes, got 2 bytes [ 498.501700][T12750] netlink: 'syz.6.17344': attribute type 22 has an invalid length. [ 498.510278][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17344'. [ 498.526635][ T79] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.526668][T12750] netlink: 'syz.6.17344': attribute type 22 has an invalid length. [ 498.529739][ T79] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.532710][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17344'. [ 498.539472][ T79] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.546546][ T79] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.609805][ C3] ================================================================== [ 498.612549][ C3] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0xa51/0xb30 [ 498.615174][ C3] Read of size 2 at addr ffff8881497c6434 by task syz.8.17349/12754 [ 498.618582][ C3] [ 498.620108][ C3] CPU: 3 UID: 0 PID: 12754 Comm: syz.8.17349 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.620133][ C3] Tainted: [L]=SOFTLOCKUP [ 498.620142][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.620152][ C3] Call Trace: [ 498.620156][ C3] [ 498.620161][ C3] dump_stack_lvl+0x100/0x190 [ 498.620177][ C3] print_report+0x13d/0x4b0 [ 498.620193][ C3] ? __virt_addr_valid+0x239/0x430 [ 498.620209][ C3] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 498.620220][ C3] kasan_report+0xdf/0x1d0 [ 498.620232][ C3] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 498.620245][ C3] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 498.620257][ C3] __dev_queue_xmit+0x270/0x4950 [ 498.620272][ C3] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 498.620289][ C3] ? kmalloc_reserve+0x148/0x350 [ 498.620301][ C3] ? __kasan_kfree_large+0x30/0x80 [ 498.620313][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 498.620598][ C3] ? __asan_memset+0x23/0x50 [ 498.620614][ C3] ? __alloc_skb+0x4e9/0x710 [ 498.620629][ C3] ? __alloc_skb+0x5b7/0x710 [ 498.620644][ C3] ? __asan_memcpy+0x3c/0x60 [ 498.620659][ C3] ? __asan_memcpy+0x3c/0x60 [ 498.620674][ C3] ? skb_copy_header+0x20/0x2b0 [ 498.620688][ C3] ? __pskb_copy_fclone+0x498/0xdb0 [ 498.620699][ C3] ? __pfx_netif_rx_internal+0x10/0x10 [ 498.620710][ C3] ? __asan_memmove+0x3c/0x60 [ 498.620724][ C3] ? hsr_create_tagged_frame+0x795/0xf00 [ 498.620750][ C3] hsr_forward_skb+0xdcf/0x28a0 [ 498.620767][ C3] ? __pfx_hsr_drop_frame+0x10/0x10 [ 498.620784][ C3] ? __pfx_hsr_forward_skb+0x10/0x10 [ 498.620804][ C3] hsr_handle_frame+0x82f/0xac0 [ 498.620820][ C3] ? __pfx_hsr_handle_frame+0x10/0x10 [ 498.620837][ C3] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 498.620855][ C3] ? find_held_lock+0x2b/0x80 [ 498.620866][ C3] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 498.620881][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 498.620896][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 498.620909][ C3] ? is_bpf_text_address+0x94/0x1a0 [ 498.620922][ C3] ? kernel_text_address+0x8d/0x100 [ 498.620936][ C3] ? __kernel_text_address+0xd/0x30 [ 498.620958][ C3] __netif_receive_skb_list_core+0x353/0x940 [ 498.620975][ C3] ? kfree_skbmem+0x15d/0x210 [ 498.620987][ C3] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 498.621002][ C3] ? lock_acquire+0x1b1/0x370 [ 498.621016][ C3] ? tun_get_user+0x1e31/0x3c20 [ 498.621053][ C3] ? tun_chr_write_iter+0xdc/0x200 [ 498.621066][ C3] ? vfs_write+0x6ac/0x1070 [ 498.621077][ C3] ? ksys_write+0x12a/0x250 [ 498.621089][ C3] netif_receive_skb_list_internal+0x722/0xd40 [ 498.621106][ C3] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 498.621122][ C3] ? __lock_acquire+0x4a5/0x2630 [ 498.621139][ C3] ? dev_gro_receive+0x238/0x3060 [ 498.621168][ C3] napi_complete_done+0x221/0x940 [ 498.621185][ C3] ? __pfx_napi_complete_done+0x10/0x10 [ 498.621200][ C3] ? find_held_lock+0x2b/0x80 [ 498.621212][ C3] ? gro_cell_poll+0x441/0x690 [ 498.621227][ C3] ? gro_cell_poll+0x441/0x690 [ 498.621243][ C3] gro_cell_poll+0x46e/0x690 [ 498.621260][ C3] __napi_poll.constprop.0+0xaf/0x450 [ 498.621275][ C3] net_rx_action+0xa40/0xf20 [ 498.621291][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 498.621307][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 498.621318][ C3] ? sched_clock+0x38/0x60 [ 498.621330][ C3] ? sched_clock_cpu+0x6c/0x570 [ 498.621345][ C3] ? sched_clock+0x38/0x60 [ 498.621356][ C3] ? rcu_is_watching+0x12/0xc0 [ 498.621373][ C3] handle_softirqs+0x1ea/0xa00 [ 498.621388][ C3] ? trace_csd_function_exit+0x75/0x200 [ 498.621402][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 498.621417][ C3] ? irqtime_account_irq+0x176/0x2d0 [ 498.621431][ C3] ? tun_rx_batched.isra.0+0x402/0x750 [ 498.621443][ C3] do_softirq+0xac/0xe0 [ 498.621458][ C3] [ 498.621462][ C3] [ 498.621466][ C3] __local_bh_enable_ip+0xf8/0x120 [ 498.621482][ C3] tun_rx_batched.isra.0+0x407/0x750 [ 498.621496][ C3] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 498.621510][ C3] ? rcu_is_watching+0x12/0xc0 [ 498.621526][ C3] ? tun_get_user+0x1cc8/0x3c20 [ 498.621541][ C3] tun_get_user+0x1e31/0x3c20 [ 498.621557][ C3] ? __pfx_tun_get_user+0x10/0x10 [ 498.621571][ C3] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 498.621600][ C3] ? find_held_lock+0x2b/0x80 [ 498.621610][ C3] ? tun_get+0x191/0x370 [ 498.621622][ C3] ? tun_get+0x191/0x370 [ 498.621636][ C3] tun_chr_write_iter+0xdc/0x200 [ 498.621650][ C3] vfs_write+0x6ac/0x1070 [ 498.621662][ C3] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 498.621676][ C3] ? __pfx_vfs_write+0x10/0x10 [ 498.621687][ C3] ? find_held_lock+0x2b/0x80 [ 498.621701][ C3] ksys_write+0x12a/0x250 [ 498.621712][ C3] ? __pfx_ksys_write+0x10/0x10 [ 498.621724][ C3] ? rcu_is_watching+0x12/0xc0 [ 498.621741][ C3] do_syscall_64+0x10b/0xf80 [ 498.621753][ C3] ? clear_bhb_loop+0x40/0x90 [ 498.621766][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.621777][ C3] RIP: 0033:0x7fd6d899cdd9 [ 498.621787][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.621798][ C3] RSP: 002b:00007fd6d9849028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 498.621810][ C3] RAX: ffffffffffffffda RBX: 00007fd6d8c15fa0 RCX: 00007fd6d899cdd9 [ 498.621818][ C3] RDX: 000000000000007a RSI: 0000200000000400 RDI: 0000000000000004 [ 498.621824][ C3] RBP: 00007fd6d8a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 498.621831][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.621838][ C3] R13: 00007fd6d8c16038 R14: 00007fd6d8c15fa0 R15: 00007ffde2c14bc8 [ 498.621870][ C3] [ 498.621876][ C3] [ 498.808256][ C3] The buggy address belongs to the physical page: [ 498.810407][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000959 pfn:0x1497c6 [ 498.813527][ C3] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 498.815937][ C3] raw: 057ff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 498.818766][ C3] raw: 0000000200000959 0000000000000000 00000000ffffffff 0000000000000000 [ 498.821582][ C3] page dumped because: kasan: bad access detected [ 498.823702][ C3] page_owner tracks the page as freed [ 498.825493][ C3] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 12296, tgid 12295 (syz.8.17150), ts 486022686855, free_ts 486718987080 [ 498.831634][ C3] post_alloc_hook+0x153/0x170 [ 498.833241][ C3] get_page_from_freelist+0x11a6/0x33b0 [ 498.835121][ C3] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 498.837077][ C3] alloc_pages_mpol+0x1fb/0x540 [ 498.838706][ C3] folio_alloc_mpol_noprof+0x36/0x260 [ 498.840494][ C3] vma_alloc_folio_noprof+0xed/0x1d0 [ 498.842269][ C3] do_anonymous_page+0xb46/0x2050 [ 498.843907][ C3] __handle_mm_fault+0x1d2c/0x2a00 [ 498.845643][ C3] handle_mm_fault+0x36d/0xa20 [ 498.845655][T15747] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 498.847270][ C3] do_user_addr_fault+0x74c/0x12f0 [ 498.847288][ C3] exc_page_fault+0x6f/0xd0 [ 498.847300][ C3] asm_exc_page_fault+0x26/0x30 [ 498.847310][ C3] page last free pid 12295 tgid 12295 stack trace: [ 498.847317][ C3] free_unref_folios+0xa0d/0x16f0 [ 498.847331][ C3] folios_put_refs+0x571/0xa90 [ 498.847346][ C3] free_pages_and_swap_cache+0x22d/0x3b0 [ 498.847361][ C3] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 498.847375][ C3] tlb_flush_mmu+0xe9/0x590 [ 498.847388][ C3] __zap_vma_range+0x230e/0x4bf0 [ 498.847398][ C3] unmap_vmas+0x299/0x5f0 [ 498.869082][ C3] exit_mmap+0x1ef/0xa10 [ 498.870518][ C3] __mmput+0x12a/0x410 [ 498.871902][ C3] mmput+0x67/0x80 [ 498.873165][ C3] do_exit+0x833/0x2a60 [ 498.874566][ C3] do_group_exit+0xd5/0x2a0 [ 498.876134][ C3] __x64_sys_exit_group+0x3e/0x50 [ 498.877818][ C3] x64_sys_call+0x102c/0x1530 [ 498.879427][ C3] do_syscall_64+0x10b/0xf80 [ 498.881190][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.883699][ C3] [ 498.884713][ C3] Memory state around the buggy address: [ 498.887119][ C3] ffff8881497c6300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 498.890582][ C3] ffff8881497c6380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 498.894223][ C3] >ffff8881497c6400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 498.896962][ C3] ^ [ 498.898835][ C3] ffff8881497c6480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 498.901462][ C3] ffff8881497c6500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 498.904089][ C3] ================================================================== [ 498.906940][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 498.909441][ C3] CPU: 3 UID: 0 PID: 12754 Comm: syz.8.17349 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.913019][ C3] Tainted: [L]=SOFTLOCKUP [ 498.914456][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.917825][ C3] Call Trace: [ 498.918957][ C3] [ 498.919926][ C3] dump_stack_lvl+0x100/0x190 [ 498.921493][ C3] vpanic+0x552/0x970 [ 498.922826][ C3] ? __pfx_vpanic+0x10/0x10 [ 498.924303][ C3] ? mark_held_locks+0x40/0x70 [ 498.925911][ C3] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 498.927903][ C3] panic+0xd1/0xe0 [ 498.929160][ C3] ? __pfx_panic+0x10/0x10 [ 498.930646][ C3] ? check_panic_on_warn+0x1f/0x90 [ 498.932357][ C3] check_panic_on_warn.cold+0x19/0x34 [ 498.934139][ C3] end_report.part.0+0x3a/0x90 [ 498.935755][ C3] kasan_report.cold+0xe/0x18 [ 498.937324][ C3] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 498.939241][ C3] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 498.940982][ C3] __dev_queue_xmit+0x270/0x4950 [ 498.942645][ C3] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 498.944660][ C3] ? kmalloc_reserve+0x148/0x350 [ 498.946332][ C3] ? __kasan_kfree_large+0x30/0x80 [ 498.948026][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 498.949909][ C3] ? __asan_memset+0x23/0x50 [ 498.951420][ C3] ? __alloc_skb+0x4e9/0x710 [ 498.952960][ C3] ? __alloc_skb+0x5b7/0x710 [ 498.954515][ C3] ? __asan_memcpy+0x3c/0x60 [ 498.956054][ C3] ? __asan_memcpy+0x3c/0x60 [ 498.957574][ C3] ? skb_copy_header+0x20/0x2b0 [ 498.959227][ C3] ? __pskb_copy_fclone+0x498/0xdb0 [ 498.960873][ C3] ? __pfx_netif_rx_internal+0x10/0x10 [ 498.962583][ C3] ? __asan_memmove+0x3c/0x60 [ 498.964128][ C3] ? hsr_create_tagged_frame+0x795/0xf00 [ 498.965991][ C3] hsr_forward_skb+0xdcf/0x28a0 [ 498.967607][ C3] ? __pfx_hsr_drop_frame+0x10/0x10 [ 498.969328][ C3] ? __pfx_hsr_forward_skb+0x10/0x10 [ 498.971179][ C3] hsr_handle_frame+0x82f/0xac0 [ 498.972803][ C3] ? __pfx_hsr_handle_frame+0x10/0x10 [ 498.974545][ C3] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 498.976749][ C3] ? find_held_lock+0x2b/0x80 [ 498.978329][ C3] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 498.980719][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 498.982459][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 498.984453][ C3] ? is_bpf_text_address+0x94/0x1a0 [ 498.986170][ C3] ? kernel_text_address+0x8d/0x100 [ 498.987859][ C3] ? __kernel_text_address+0xd/0x30 [ 498.989567][ C3] __netif_receive_skb_list_core+0x353/0x940 [ 498.991652][ C3] ? kfree_skbmem+0x15d/0x210 [ 498.993244][ C3] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 498.995408][ C3] ? lock_acquire+0x1b1/0x370 [ 498.996972][ C3] ? tun_get_user+0x1e31/0x3c20 [ 498.998599][ C3] ? tun_chr_write_iter+0xdc/0x200 [ 499.000294][ C3] ? vfs_write+0x6ac/0x1070 [ 499.001868][ C3] ? ksys_write+0x12a/0x250 [ 499.003423][ C3] netif_receive_skb_list_internal+0x722/0xd40 [ 499.005482][ C3] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 499.007697][ C3] ? __lock_acquire+0x4a5/0x2630 [ 499.009346][ C3] ? dev_gro_receive+0x238/0x3060 [ 499.011045][ C3] napi_complete_done+0x221/0x940 [ 499.012802][ C3] ? __pfx_napi_complete_done+0x10/0x10 [ 499.014610][ C3] ? find_held_lock+0x2b/0x80 [ 499.016189][ C3] ? gro_cell_poll+0x441/0x690 [ 499.017787][ C3] ? gro_cell_poll+0x441/0x690 [ 499.019387][ C3] gro_cell_poll+0x46e/0x690 [ 499.020924][ C3] __napi_poll.constprop.0+0xaf/0x450 [ 499.022705][ C3] net_rx_action+0xa40/0xf20 [ 499.024331][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 499.026030][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 499.027781][ C3] ? sched_clock+0x38/0x60 [ 499.029263][ C3] ? sched_clock_cpu+0x6c/0x570 [ 499.030886][ C3] ? sched_clock+0x38/0x60 [ 499.032383][ C3] ? rcu_is_watching+0x12/0xc0 [ 499.034057][ C3] handle_softirqs+0x1ea/0xa00 [ 499.035670][ C3] ? trace_csd_function_exit+0x75/0x200 [ 499.037514][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 499.039273][ C3] ? irqtime_account_irq+0x176/0x2d0 [ 499.041018][ C3] ? tun_rx_batched.isra.0+0x402/0x750 [ 499.042821][ C3] do_softirq+0xac/0xe0 [ 499.044205][ C3] [ 499.045304][ C3] [ 499.046307][ C3] __local_bh_enable_ip+0xf8/0x120 [ 499.048008][ C3] tun_rx_batched.isra.0+0x407/0x750 [ 499.049754][ C3] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 499.051704][ C3] ? rcu_is_watching+0x12/0xc0 [ 499.053301][ C3] ? tun_get_user+0x1cc8/0x3c20 [ 499.054954][ C3] tun_get_user+0x1e31/0x3c20 [ 499.056625][ C3] ? __pfx_tun_get_user+0x10/0x10 [ 499.058311][ C3] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 499.060082][ C3] ? find_held_lock+0x2b/0x80 [ 499.061690][ C3] ? tun_get+0x191/0x370 [ 499.063168][ C3] ? tun_get+0x191/0x370 [ 499.064580][ C3] tun_chr_write_iter+0xdc/0x200 [ 499.066348][ C3] vfs_write+0x6ac/0x1070 [ 499.067774][ C3] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 499.069592][ C3] ? __pfx_vfs_write+0x10/0x10 [ 499.071206][ C3] ? find_held_lock+0x2b/0x80 [ 499.072779][ C3] ksys_write+0x12a/0x250 [ 499.074221][ C3] ? __pfx_ksys_write+0x10/0x10 [ 499.075856][ C3] ? rcu_is_watching+0x12/0xc0 [ 499.077534][ C3] do_syscall_64+0x10b/0xf80 [ 499.079106][ C3] ? clear_bhb_loop+0x40/0x90 [ 499.080702][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.082610][ C3] RIP: 0033:0x7fd6d899cdd9 [ 499.084053][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.090329][ C3] RSP: 002b:00007fd6d9849028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.093045][ C3] RAX: ffffffffffffffda RBX: 00007fd6d8c15fa0 RCX: 00007fd6d899cdd9 [ 499.095643][ C3] RDX: 000000000000007a RSI: 0000200000000400 RDI: 0000000000000004 [ 499.098324][ C3] RBP: 00007fd6d8a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 499.100910][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.103491][ C3] R13: 00007fd6d8c16038 R14: 00007fd6d8c15fa0 R15: 00007ffde2c14bc8 [ 499.106085][ C3] [ 499.107900][ C3] Kernel Offset: disabled [ 499.109343][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:45:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000016 RBX=ffffffff9b3df7c0 RCX=0000000000000008 RDX=0000000000000000 RSI=ffffffff8df1fe7a RDI=ffffffff8c1c3600 RBP=0000000000000202 RSP=ffffc90000007d08 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000009 R13=dffffc0000000000 R14=ffff888037bf6ac0 R15=1ffff92000000fa6 RIP=ffffffff8b8cf121 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd1ec069880 ffffffff 00c00000 GS =0000 ffff8880d6376000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faef4f86400 CR3=0000000034a77000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000effffdff Opmask03=0000000082000020 Opmask04=00000000fbffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005556de3a3b50 00005556de3a3b50 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005556de386170 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005556de398e30 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1eb9f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffff00000000ff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732625ad483f13 73732625c8b446c3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737273737326 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 43004a5b4e51505c 1105110c00080f0c 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ebbc379b1dc9d989 000055538b540d2a 0000000000000051 0000000000000039 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000411 0000000000000070 000000322d633200 307761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c44422c43422c42 422c41422c39422c 38422c37422c3242 2c31422c30422c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 412c36412c35412c 34412c33412c3141 2c46392c45392c38 392c36392c45382c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43382c41382c3938 2c38382c37382c36 382c35382c34382c 33382c32382c3138 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1eb9f1b30 00004d5500304530 0000000000000021 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000034371d331b2c 00002c3100302c1d 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff88802ad3c7a8 RBX=0000000000000007 RCX=ffffffff81e4c478 RDX=ffff88802a5dc4b0 RSI=0000000000000000 RDI=ffff88802ad3c7c0 RBP=ffffc900037af5b8 RSP=ffffc900037af490 R8 =0000000000000001 R9 =fffff520006f5e80 R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffff88804554b000 R14=ffff888037b08f88 R15=ffff88804554c000 RIP=ffffffff850250ea RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f79b0a43300 ffffffff 00c00000 GS =0000 ffff8880d6476000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055de88320f40 CR3=0000000037a70000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=1581b09c02be16c8 d79ebdbe5384f870 1581b09c02be16c8 d79ebdbe5384f870 1581b09c02be16c8 d79ebdbe5384f870 1581b09c02be16c8 d79ebdbe5384f870 ZMM18=8e3d59cf8886ff5c 46fb100c0fc4f6ea 8e3d59cf8886ff5c 46fb100c0fc4f6ea 8e3d59cf8886ff5c 46fb100c0fc4f6ea 8e3d59cf8886ff5c 46fb100c0fc4f6ea ZMM19=c556000000000000 0000000000000004 c556000000000000 0000000000000003 c556000000000000 0000000000000002 c556000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1003000400030b80 041881c5a8fe0800 0100000008060601 2ab40010000ba003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 048010000b900302 d410000b80034080 821000020079f812 1000068080961000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004060142ee0010 000108000480e210 000193cac4b09f91 a284a310000b9b80 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000b800340808210 00020079f8121000 0680809610000004 060142ee00100001 ZMM25=fcd5dc8ffcd5dc8f fcd5dc8ffcd5dc8f fcd5dc8ffcd5dc8f fcd5dc8ffcd5dc8f fcd5dc8ffcd5dc8f fcd5dc8ffcd5dc8f fcd5dc8ffcd5dc8f fcd5dc8ffcd5dc8f ZMM26=0e0a892c0e0a892c 0e0a892c0e0a892c 0e0a892c0e0a892c 0e0a892c0e0a892c 0e0a892c0e0a892c 0e0a892c0e0a892c 0e0a892c0e0a892c 0e0a892c0e0a892c ZMM27=ce1dfb98ce1dfb98 ce1dfb98ce1dfb98 ce1dfb98ce1dfb98 ce1dfb98ce1dfb98 ce1dfb98ce1dfb98 ce1dfb98ce1dfb98 ce1dfb98ce1dfb98 ce1dfb98ce1dfb98 ZMM28=000000e0000000df 000000de000000dd 000000dc000000db 000000da000000d9 000000d8000000d7 000000d6000000d5 000000d4000000d3 000000d2000000d1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fa5a0000fa5a0000 fa5a0000fa5a0000 fa5a0000fa5a0000 fa5a0000fa5a0000 fa5a0000fa5a0000 fa5a0000fa5a0000 fa5a0000fa5a0000 fa5a0000fa5a0000 info registers vcpu 2 CPU#2 RAX=ffffffff84e43fd0 RBX=ffff88802b3c5400 RCX=ffffffff84d8640d RDX=1ffffffff1e66213 RSI=ffffffff84d8641a RDI=ffff88802b3c5400 RBP=ffffffff8f331020 RSP=ffffc90000648d48 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000020 R11=0000000000000000 R12=ffff88802b3c541c R13=ffff888029e892a0 R14=0000000000000000 R15=ffffffff865ac6b6 RIP=ffffffff84e43fd5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1c9286f780 ffffffff 00c00000 GS =0000 ffff8880d6576000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faef4f86400 CR3=0000000038428000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001800000 Opmask01=0000000000008000 Opmask02=000000003511003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc495b6798 00007ffc495b6798 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc495b6ca0 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c92a43b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cb5a1e60d0 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 441414ac00000002 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66206e6f69746174 6963696c6f532072 6574756f5220676e 6979616c6564203a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373657264646120 4c4c20726f66206e 6f69746174696369 6c6f532072657475 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 414b4056051f5600 0056564057414144 054c4c05574a4305 4b4a4c5144514c46 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 37313d7373657264 64615f7473616364 616f72625f77656e 0034323d72646963 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d7265626d756e 5f6b726f7774656e 5f77656e00353532 2e30322e30322e32 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00302e3535322e35 35322e3535323d6b 73616d5f74656e62 75735f77656e0030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e30322e30322e32 37313d7265626d75 6e5f6b726f777465 6e5f77656e003535 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e30322e30322e 3237313d73736572 6464615f74736163 64616f72625f7765 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e0034323d726469 635f74656e627573 5f77656e0038362e 30322e30322e3237 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000000 0000000000000100 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc900006f784a RCX=ffffffff8b866b8f RDX=ffff88802a6f2500 RSI=ffffffff8b866b33 RDI=ffff88802a6f2500 RBP=ffffffff9b17486e RSP=ffffc900006f77d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000065 R11=0000000000086251 R12=0000000000000065 R13=0000000000000009 R14=ffffc900006f7840 R15=dffffc0000000000 RIP=ffffffff82088c15 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd6d98496c0 ffffffff 00c00000 GS =0000 ffff8880d6676000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efe2ce17dac CR3=000000002652c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000fefc8000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde2c150b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde2c150b6 00007ffde2c150bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d8a3334c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d8a3338c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d8a334f0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d8a3337e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d8bed5f8 00007fd6d8bed5c8 00007fd6d8bed600 00007fd6d8bed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000