last executing test programs: 2m28.77104975s ago: executing program 3 (id=3953): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2m28.521212092s ago: executing program 3 (id=3948): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r3, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x20000000) 2m28.130290427s ago: executing program 3 (id=3960): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 2m27.240837974s ago: executing program 3 (id=3982): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m27.213339704s ago: executing program 3 (id=3984): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)='\"', 0x1) 2m26.770390006s ago: executing program 3 (id=3993): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@lld, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x72}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2}, 0xc) 2m26.649555005s ago: executing program 32 (id=3993): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@lld, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x72}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2}, 0xc) 2m3.819367548s ago: executing program 2 (id=4557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 2m3.722617173s ago: executing program 2 (id=4568): madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x66) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000500000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) 2m3.687734318s ago: executing program 2 (id=4562): syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m3.619939933s ago: executing program 2 (id=4564): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) 2m3.487712006s ago: executing program 2 (id=4566): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) 2m3.109775746s ago: executing program 2 (id=4575): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) 2m3.084664289s ago: executing program 33 (id=4575): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) 1m37.587926374s ago: executing program 0 (id=4920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="14000a00fdff3f44583fce686300000000e2564604002800050008"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x8c0) 1m37.444014587s ago: executing program 0 (id=4931): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getegid() 1m37.076892706s ago: executing program 0 (id=4926): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x257, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) 1m36.660601782s ago: executing program 0 (id=4929): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) 1m36.536981617s ago: executing program 0 (id=4933): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000400)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @random="2ba8e0112a2a"}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @empty, @empty, @remote, @mcast1}}}}, 0x0) 1m36.166050414s ago: executing program 0 (id=4937): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m36.104596187s ago: executing program 34 (id=4937): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 51.345041655s ago: executing program 5 (id=5595): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) close_range(r0, r0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 51.333769436s ago: executing program 5 (id=5597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 51.205377869s ago: executing program 5 (id=5598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d07, 0x0, 0xfffffffffffffffd}]}) 50.980628633s ago: executing program 5 (id=5601): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000140)={0x103243, 0x131, 0x2}, 0x18) 50.888883187s ago: executing program 6 (id=5602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=0 bRe', 0x12) 50.792948967s ago: executing program 5 (id=5603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x8080000, 0xf000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0xb000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x11000, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0xf}, {0x30000, 0x80a0000, 0x9}, {0x0, 0x13f1000, 0x11aba00d78cbb42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, {0x6000}, {0x1, 0x1}, 0x60000010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) 50.792667975s ago: executing program 6 (id=5604): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff0060031200000088fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 50.691342578s ago: executing program 6 (id=5606): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)="36b29fe0a1d5a82bfc", 0x9) 50.630372402s ago: executing program 6 (id=5608): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 50.61378869s ago: executing program 5 (id=5609): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, 0x0, r1, 0x1, 0x3, 0x43, 0x302297a8, 0x8001, 0x5, 0x2, 0x7, 0x9}) 50.575213971s ago: executing program 6 (id=5610): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1, 0x12) 50.128969673s ago: executing program 6 (id=5615): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r1, 0x1, 0xfd, 0x6, @multicast}, 0x14) 50.001637097s ago: executing program 35 (id=5615): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r1, 0x1, 0xfd, 0x6, @multicast}, 0x14) 35.584782712s ago: executing program 36 (id=5609): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, 0x0, r1, 0x1, 0x3, 0x43, 0x302297a8, 0x8001, 0x5, 0x2, 0x7, 0x9}) 4.380111922s ago: executing program 1 (id=6185): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x942, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') creat(&(0x7f0000000040)='./file2\x00', 0x40) 3.205573166s ago: executing program 1 (id=6194): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x80201, 0x88) writev(r0, &(0x7f00000031c0)=[{&(0x7f0000000740)="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", 0x188}], 0x1) 3.055866876s ago: executing program 7 (id=6195): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r1, 0x0, 0x0) 2.988012413s ago: executing program 1 (id=6197): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod$loop(0x0, 0xfff, 0x0) 2.002831177s ago: executing program 8 (id=6199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000ac0)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0xd6}}, 0x0, 0x0, 0xf, 0x0, "9b5a08e0719069cb20f3fa795fa2723354baab35ca053f231b16391630fbe119bf537c92b17e7eaba12cc62418ee7dc91505af420507d063caccd44a6e2d4a37f1b64e08f2dd4d448ac735c80ac352b7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0xfffffffa, @local, 0x23}, 0x1c) 2.002596741s ago: executing program 4 (id=6200): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1) 1.907842879s ago: executing program 1 (id=6201): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="e904a200", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @rand_addr=0x640100fc, @empty}, {0x4e1f, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x0, 0x0, @void}}}}}}}, 0x0) 1.809472097s ago: executing program 4 (id=6202): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x3, [0x1, 0x1, 0x67af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_EGRESS_BLOCK={0x33, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6a27}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x8) 1.7480362s ago: executing program 1 (id=6203): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) 1.441667141s ago: executing program 7 (id=6204): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0x4}, 0x0, &(0x7f0000005840)="00000002", 0x0) 1.28995704s ago: executing program 7 (id=6205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1,', 0x2) 1.171167502s ago: executing program 1 (id=6206): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) 1.070678835s ago: executing program 8 (id=6207): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 838.027878ms ago: executing program 8 (id=6208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="3c002380050005000a00000005000500060000000800090000001400080017000b00000007931c00ff01000005000f008d00000005000800fd0000000a0018000303030303030000080026"], 0x6c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 836.715322ms ago: executing program 4 (id=6209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd01, &(0x7f0000000000)) 660.724988ms ago: executing program 8 (id=6210): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 561.330825ms ago: executing program 4 (id=6211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 557.796323ms ago: executing program 7 (id=6212): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26c, 0x0, 0x200000000000000}]}) 481.016557ms ago: executing program 8 (id=6213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, r2, 0x601, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}}, 0x0) 324.540279ms ago: executing program 8 (id=6214): pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r0, 0x0, r2, 0x0, 0xd1af, 0x8) write$FUSE_INIT(r1, &(0x7f00000022c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0xc900, 0x20, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0xffffff0c) 323.135399ms ago: executing program 4 (id=6215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 118.691126ms ago: executing program 7 (id=6216): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) 65.941835ms ago: executing program 4 (id=6217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 0s ago: executing program 7 (id=6218): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') kernel console output (not intermixed with test programs): 3072][ T5806] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 289.819492][T16736] Bluetooth: MGMT ver 1.23 [ 289.834296][ T5806] usb 6-1: USB disconnect, device number 13 [ 290.088896][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.092747][ T5740] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 290.092767][ T5737] Bluetooth: hci0: command 0x041b tx timeout [ 290.383549][ T57] kernel write not supported for file /snd/seq (pid: 57 comm: kworker/2:1) [ 290.574501][T16695] net_ratelimit: 3126 callbacks suppressed [ 290.574516][T16695] Set syz1 is full, maxelem 6117 reached [ 290.643918][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 290.643931][ T42] audit: type=1800 audit(1787206241.178:8839): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 290.668245][ T42] audit: type=1800 audit(1787206241.188:8840): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 290.710887][ T42] audit: type=1800 audit(1787206241.248:8841): pid=16764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4885" name="new_id" dev="sysfs" ino=22408 res=0 errno=0 [ 290.778182][ T42] audit: type=1800 audit(1787206241.308:8842): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 290.801756][ T42] audit: type=1800 audit(1787206241.338:8843): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 290.870436][ T42] audit: type=1800 audit(1787206241.408:8844): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 290.941700][ T42] audit: type=1800 audit(1787206241.478:8845): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 290.954180][ T42] audit: type=1800 audit(1787206241.488:8846): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 290.992013][ T42] audit: type=1800 audit(1787206241.528:8847): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 291.047959][ T42] audit: type=1800 audit(1787206241.578:8848): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 292.168874][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 296.402535][ T852] e1000e 0000:00:02.0 eth1: Hardware Error [ 296.660448][ T42] kauditd_printk_skb: 649 callbacks suppressed [ 296.660466][ T42] audit: type=1800 audit(1787206247.188:9498): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 296.673724][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.687891][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.716580][ T42] audit: type=1800 audit(1787206247.238:9499): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 296.738988][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.741802][ T42] audit: type=1800 audit(1787206247.258:9500): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 296.750741][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.756781][ T42] audit: type=1800 audit(1787206247.288:9501): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 296.789109][ T42] audit: type=1800 audit(1787206247.318:9502): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 296.825782][ T42] audit: type=1800 audit(1787206247.358:9503): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 296.927619][ T42] audit: type=1800 audit(1787206247.458:9504): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 297.183462][ T42] audit: type=1800 audit(1787206247.718:9505): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 297.240425][ T42] audit: type=1800 audit(1787206247.778:9506): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 297.322814][ T42] audit: type=1800 audit(1787206247.858:9507): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 297.414743][T16852] loop7: detected capacity change from 0 to 7 [ 297.473653][T16852] Dev loop7: unable to read RDB block 7 [ 297.475691][T16852] loop7: unable to read partition table [ 297.477791][T16852] loop7: partition table beyond EOD, truncated [ 297.483383][T16852] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 297.599284][ T41] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 297.618817][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.758766][ T41] usb 10-1: Using ep0 maxpacket: 8 [ 297.761016][ T41] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.766960][ T41] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 297.773501][ T41] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 297.779082][ T41] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 297.783627][ T41] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 297.791576][ T41] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 297.797069][ T41] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.803683][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.889481][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'. [ 298.027215][ T41] usb 10-1: GET_CAPABILITIES returned 0 [ 298.031442][ T41] usbtmc 10-1:16.0: can't read capabilities [ 298.239366][ T41] usb 10-1: USB disconnect, device number 2 [ 298.936510][T16891] program syz.5.4932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.459855][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.473361][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.476941][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.486780][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.496497][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.304415][T16906] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.311972][T16906] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.314376][T16906] bridge_slave_0: entered allmulticast mode [ 300.333516][T16906] bridge_slave_0: entered promiscuous mode [ 300.336810][T16906] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.339735][T16906] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.342728][T16906] bridge_slave_1: entered allmulticast mode [ 300.347894][T16906] bridge_slave_1: entered promiscuous mode [ 300.386739][T16906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.393313][T16906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.417636][T16906] team0: Port device team_slave_0 added [ 300.420988][T16906] team0: Port device team_slave_1 added [ 300.434177][T16906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.436334][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.445016][T16906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.450476][T16906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.452891][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.460715][T16906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.483289][T16906] hsr_slave_0: entered promiscuous mode [ 300.485654][T16906] hsr_slave_1: entered promiscuous mode [ 300.487736][T16906] debugfs: 'hsr0' already exists in 'hsr' [ 300.490480][T16906] Cannot create hsr debugfs directory [ 300.708488][T16906] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.721451][T16906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.724404][T16906] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.733853][T16906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.736927][T16906] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.741456][T16906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.744268][T16906] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 300.748231][T16906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.772872][T16906] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.775376][T16906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.778867][T16906] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.781826][T16906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.845376][T16906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.868316][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.877723][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.931800][T16906] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.938023][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.940055][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.946297][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.948476][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.196809][T16906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.332355][T16906] veth0_vlan: entered promiscuous mode [ 301.343078][T16906] veth1_vlan: entered promiscuous mode [ 301.364699][T16906] veth0_macvtap: entered promiscuous mode [ 301.369041][T16906] veth1_macvtap: entered promiscuous mode [ 301.378499][T16906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.385949][T16906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.430862][ T5784] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.436867][ T5784] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.445021][ T5784] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.497857][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.510280][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.529980][ T5743] Bluetooth: hci3: command tx timeout [ 301.530047][ T5784] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.565021][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.568129][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.655704][T16971] 0x0000,0x40000000 overlaps existing 0x200000,0x100000 [ 301.690658][ T42] kauditd_printk_skb: 74 callbacks suppressed [ 301.690671][ T42] audit: type=1800 audit(1787206252.228:9582): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 301.711824][ T42] audit: type=1800 audit(1787206252.248:9583): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 301.725226][ T42] audit: type=1800 audit(1787206252.258:9584): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 301.878760][ T5806] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 302.029164][ T5806] usb 11-1: Using ep0 maxpacket: 8 [ 302.035297][ T5806] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.040488][ T5806] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 302.043977][ T5806] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 302.048474][ T5806] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 302.053550][ T5806] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 302.058151][ T5806] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 302.062963][ T5806] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.068221][ T5806] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.074142][ T42] audit: type=1800 audit(1787206252.608:9585): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169820 res=0 errno=0 [ 302.081045][ T42] audit: type=1800 audit(1787206252.608:9586): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=169849 res=0 errno=0 [ 302.087788][ T42] audit: type=1800 audit(1787206252.608:9587): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=169827 res=0 errno=0 [ 302.099143][ T42] audit: type=1800 audit(1787206252.618:9588): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=169828 res=0 errno=0 [ 302.105770][ T42] audit: type=1800 audit(1787206252.618:9589): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=169829 res=0 errno=0 [ 302.113477][ T42] audit: type=1800 audit(1787206252.618:9590): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169869 res=0 errno=0 [ 302.281216][ T5806] usb 11-1: GET_CAPABILITIES returned 0 [ 302.283024][ T5806] usbtmc 11-1:16.0: can't read capabilities [ 302.286697][ T42] audit: type=1800 audit(1787206252.818:9591): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169886 res=0 errno=0 [ 302.292639][ T102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 302.487685][ T5842] usb 11-1: USB disconnect, device number 2 [ 303.611471][ T5743] Bluetooth: hci3: command tx timeout [ 304.773293][T17031] team0: entered allmulticast mode [ 304.775037][T17031] team_slave_0: entered allmulticast mode [ 304.777081][T17031] team_slave_1: entered allmulticast mode [ 304.780284][T17031] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 305.691197][ T5743] Bluetooth: hci3: command tx timeout [ 305.919274][ T9535] hid-generic 0005:04F3:05DF.000F: unknown main item tag 0x0 [ 305.927289][ T9535] hid-generic 0005:04F3:05DF.000F: unknown main item tag 0x0 [ 305.967469][ T9535] hid-generic 0005:04F3:05DF.000F: hidraw1: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 306.516626][T17084] netlink: 'syz.5.4998': attribute type 4 has an invalid length. [ 306.741369][ T42] kauditd_printk_skb: 69 callbacks suppressed [ 306.741388][ T42] audit: type=1800 audit(1787206257.278:9661): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 306.769655][ T42] audit: type=1800 audit(1787206257.308:9662): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 306.780327][T17100] kAFS: bad VL server IP address [ 306.847274][ T42] audit: type=1800 audit(1787206257.378:9663): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 306.927108][ T42] audit: type=1800 audit(1787206257.438:9664): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 306.938417][ T42] audit: type=1800 audit(1787206257.468:9665): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 306.978921][ T42] audit: type=1800 audit(1787206257.488:9666): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34725 res=0 errno=0 [ 306.998649][ T42] audit: type=1800 audit(1787206257.498:9667): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34748 res=0 errno=0 [ 307.155150][ T42] audit: type=1800 audit(1787206257.688:9668): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 307.209182][ T57] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 307.210412][ T42] audit: type=1800 audit(1787206257.748:9669): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169996 res=0 errno=0 [ 307.312047][ T42] audit: type=1800 audit(1787206257.848:9670): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170011 res=0 errno=0 [ 307.369256][ T57] usb 10-1: Using ep0 maxpacket: 8 [ 307.374223][ T57] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.383906][ T57] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.387422][ T57] usb 10-1: config 0 has no interface number 0 [ 307.390157][ T57] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.393868][ T57] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.398755][ T57] usb 10-1: config 0 descriptor?? [ 307.406385][ T57] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 307.630704][ T5806] usb 10-1: USB disconnect, device number 3 [ 307.769060][ T5743] Bluetooth: hci3: command tx timeout [ 308.738411][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5025'. [ 308.745845][T17141] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5025'. [ 309.079114][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5036'. [ 309.257093][T17176] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5040'. [ 309.396227][ T5842] lg-g15 0003:046D:0A07.0010: hidraw2: USB HID v0.00 Device [syz0] on syz0 [ 309.404470][ T5842] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0010/input/input45 [ 309.714557][T17200] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x01 (-16) [ 310.209274][ T57] lg-g15 0003:046D:0A07.0011: hidraw2: USB HID v0.00 Device [syz0] on syz0 [ 310.216621][T17221] netlink: 'syz.1.5060': attribute type 4 has an invalid length. [ 310.218440][ T57] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0011/input/input46 [ 310.521207][ T57] lg-g15 0003:046D:0A07.0012: hidraw2: USB HID v0.00 Device [syz0] on syz0 [ 310.543505][ T57] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0012/input/input47 [ 310.570640][T17241] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 310.598661][T17241] CPU: 3 UID: 0 PID: 17241 Comm: syz.4.5067 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.598686][T17241] Tainted: [L]=SOFTLOCKUP [ 310.598690][T17241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 310.598699][T17241] Call Trace: [ 310.598703][T17241] [ 310.598708][T17241] dump_stack_lvl+0x100/0x190 [ 310.598730][T17241] sysfs_warn_dup.cold+0x1c/0x28 [ 310.598751][T17241] sysfs_create_dir_ns+0x24b/0x2b0 [ 310.598768][T17241] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 310.598782][T17241] ? find_held_lock+0x2b/0x80 [ 310.598801][T17241] ? kobject_add_internal+0x25f/0x930 [ 310.598817][T17241] ? kobject_add_internal+0x25f/0x930 [ 310.598833][T17241] ? class_dir_child_ns_type+0xd/0x60 [ 310.598854][T17241] kobject_add_internal+0x2c8/0x930 [ 310.598869][T17241] kobject_add+0x16a/0x1e0 [ 310.598881][T17241] ? __pfx_kobject_add+0x10/0x10 [ 310.598895][T17241] ? get_device_parent+0x1b3/0x4c0 [ 310.598911][T17241] ? kobject_put+0xb9/0x640 [ 310.598929][T17241] device_add+0x294/0x1970 [ 310.598948][T17241] ? lockdep_init_map_type+0x5c/0x250 [ 310.598960][T17241] ? __pfx_device_add+0x10/0x10 [ 310.598976][T17241] ? lockdep_init_map_type+0x5c/0x250 [ 310.598988][T17241] ? __init_waitqueue_head+0xca/0x150 [ 310.599006][T17241] tty_register_device_attr+0x388/0x7f0 [ 310.599021][T17241] ? lockdep_init_map_type+0x5c/0x250 [ 310.599033][T17241] ? __pfx_tty_register_device_attr+0x10/0x10 [ 310.599051][T17241] ? tty_port_init+0x156/0x1c0 [ 310.599067][T17241] gsm_activate_mux+0x155/0x2a0 [ 310.599082][T17241] gsmld_ioctl+0xbbc/0x15c0 [ 310.599102][T17241] ? __pfx_gsmld_ioctl+0x10/0x10 [ 310.599128][T17241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.599150][T17241] ? __pfx_gsmld_ioctl+0x10/0x10 [ 310.599165][T17241] tty_compat_ioctl+0x396/0x420 [ 310.599179][T17241] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 310.599193][T17241] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 310.599208][T17241] __do_fast_syscall_32+0x13a/0x8b0 [ 310.599221][T17241] do_fast_syscall_32+0x32/0x70 [ 310.599234][T17241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.599250][T17241] RIP: 0023:0xf6ffefec [ 310.599264][T17241] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 310.599270][T17241] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 310.599282][T17241] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 310.599289][T17241] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.599295][T17241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.599301][T17241] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 310.599307][T17241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.599321][T17241] [ 310.599335][T17241] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 311.778665][ T42] kauditd_printk_skb: 198 callbacks suppressed [ 311.778678][ T42] audit: type=1800 audit(1787206262.308:9869): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 311.830339][ T42] audit: type=1800 audit(1787206262.368:9870): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 311.938032][ T42] audit: type=1800 audit(1787206262.468:9871): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 312.074724][ T42] audit: type=1800 audit(1787206262.608:9872): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 312.132911][ T42] audit: type=1800 audit(1787206262.668:9873): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 312.196449][ T42] audit: type=1800 audit(1787206262.728:9874): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 312.197348][T17278] netlink: 'syz.5.5080': attribute type 4 has an invalid length. [ 312.223203][T17278] netlink: 'syz.5.5080': attribute type 8 has an invalid length. [ 312.230299][T17278] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5080'. [ 312.257919][ T42] audit: type=1800 audit(1787206262.788:9875): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 312.280038][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5081'. [ 312.306138][ T42] audit: type=1800 audit(1787206262.838:9876): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 312.345142][ T42] audit: type=1800 audit(1787206262.878:9877): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 312.366683][ T42] audit: type=1800 audit(1787206262.888:9878): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 312.426719][T17288] syz_tun: entered promiscuous mode [ 312.428520][T17288] macvtap1: entered promiscuous mode [ 312.431938][T17288] macvtap1: entered allmulticast mode [ 312.433645][T17288] syz_tun: entered allmulticast mode [ 312.448079][T17288] syz_tun: left allmulticast mode [ 312.454202][T17288] syz_tun: left promiscuous mode [ 312.478010][T17293] SQUASHFS error: Failed to read block 0x0: -5 [ 312.553493][T17298] loop9: detected capacity change from 0 to 7 [ 312.557125][T17298] Dev loop9: unable to read RDB block 7 [ 312.559224][T17298] loop9: unable to read partition table [ 312.561065][T17298] loop9: partition table beyond EOD, truncated [ 312.562985][T17298] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 312.898503][T17308] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 312.918628][T17308] CPU: 0 UID: 0 PID: 17308 Comm: syz.5.5091 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.918652][T17308] Tainted: [L]=SOFTLOCKUP [ 312.918657][T17308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 312.918666][T17308] Call Trace: [ 312.918671][T17308] [ 312.918677][T17308] dump_stack_lvl+0x100/0x190 [ 312.918697][T17308] sysfs_warn_dup.cold+0x1c/0x28 [ 312.918717][T17308] sysfs_create_dir_ns+0x24b/0x2b0 [ 312.918734][T17308] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 312.918748][T17308] ? find_held_lock+0x2b/0x80 [ 312.918765][T17308] ? kobject_add_internal+0x25f/0x930 [ 312.918783][T17308] ? kobject_add_internal+0x25f/0x930 [ 312.918798][T17308] ? class_dir_child_ns_type+0xd/0x60 [ 312.918817][T17308] kobject_add_internal+0x2c8/0x930 [ 312.918833][T17308] kobject_add+0x16a/0x1e0 [ 312.918847][T17308] ? __pfx_kobject_add+0x10/0x10 [ 312.918863][T17308] ? get_device_parent+0x1b3/0x4c0 [ 312.918879][T17308] ? kobject_put+0xb9/0x640 [ 312.918895][T17308] device_add+0x294/0x1970 [ 312.918911][T17308] ? lockdep_init_map_type+0x5c/0x250 [ 312.918924][T17308] ? __pfx_device_add+0x10/0x10 [ 312.918945][T17308] ? lockdep_init_map_type+0x5c/0x250 [ 312.918958][T17308] ? __init_waitqueue_head+0xca/0x150 [ 312.918976][T17308] tty_register_device_attr+0x388/0x7f0 [ 312.918991][T17308] ? lockdep_init_map_type+0x5c/0x250 [ 312.919005][T17308] ? __pfx_tty_register_device_attr+0x10/0x10 [ 312.919025][T17308] ? tty_port_init+0x156/0x1c0 [ 312.919043][T17308] gsm_activate_mux+0x155/0x2a0 [ 312.919060][T17308] gsmld_ioctl+0xbbc/0x15c0 [ 312.919080][T17308] ? __pfx_gsmld_ioctl+0x10/0x10 [ 312.919105][T17308] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.919127][T17308] ? __pfx_gsmld_ioctl+0x10/0x10 [ 312.919142][T17308] tty_compat_ioctl+0x396/0x420 [ 312.919155][T17308] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 312.919169][T17308] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 312.919184][T17308] __do_fast_syscall_32+0x13a/0x8b0 [ 312.919197][T17308] do_fast_syscall_32+0x32/0x70 [ 312.919208][T17308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.919222][T17308] RIP: 0023:0xf7f73fec [ 312.919238][T17308] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 312.919243][T17308] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 312.919257][T17308] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 312.919265][T17308] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.919273][T17308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.919279][T17308] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 312.919285][T17308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.919299][T17308] [ 312.919314][T17308] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 313.438114][T17321] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5098'. [ 313.453170][ T100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.018743][T12165] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 314.168932][T12165] usb 9-1: Using ep0 maxpacket: 8 [ 314.174098][T12165] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 314.178071][T12165] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.180677][T12165] usb 9-1: config 0 has no interface number 0 [ 314.182692][T12165] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.186901][T12165] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.193813][T12165] usb 9-1: config 0 descriptor?? [ 314.198867][T12165] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 314.403726][ T57] usb 9-1: USB disconnect, device number 3 [ 315.381859][T17370] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5112'. [ 316.063989][T17396] gretap0: entered promiscuous mode [ 316.066436][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5129'. [ 316.073812][T17396] gretap0: left promiscuous mode [ 316.127479][T17400] input: syz0 as /devices/virtual/input/input48 [ 316.818609][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.820971][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.845101][ T42] kauditd_printk_skb: 147 callbacks suppressed [ 316.845113][ T42] audit: type=1800 audit(1787206267.378:10026): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 316.906975][ T42] audit: type=1800 audit(1787206267.438:10027): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 316.933020][ T42] audit: type=1800 audit(1787206267.458:10028): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 316.938516][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5157'. [ 316.949828][ T42] audit: type=1800 audit(1787206267.468:10029): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 316.964344][T17438] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5157'. [ 316.978741][ T42] audit: type=1800 audit(1787206267.508:10030): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 316.987667][ T42] audit: type=1800 audit(1787206267.518:10031): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175608 res=0 errno=0 [ 317.004745][ T42] audit: type=1800 audit(1787206267.538:10032): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 317.043637][ T42] audit: type=1800 audit(1787206267.578:10033): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 317.096200][ T42] audit: type=1800 audit(1787206267.628:10034): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 317.120469][ T42] audit: type=1800 audit(1787206267.658:10035): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 319.143378][ T5883] wiimote 0005:057E:0306.0013: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 319.161868][ T5883] wiimote 0005:057E:0306.0013: New device registered [ 319.226447][ T57] kernel write not supported for file /snd/seq (pid: 57 comm: kworker/2:1) [ 319.359404][ T57] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 319.508882][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 319.511544][ T57] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 319.519283][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.522070][ T57] usb 9-1: Product: syz [ 319.523460][ T57] usb 9-1: Manufacturer: syz [ 319.525501][ T57] usb 9-1: SerialNumber: syz [ 319.753592][T17541] wiimote 0005:057E:0306.0013: Device removed [ 319.763523][ T57] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.770436][ T57] usb 9-1: MIDIStreaming interface descriptor not found [ 319.873312][ T57] usb 9-1: USB disconnect, device number 4 [ 319.947188][T16807] udevd[16807]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.224633][T17571] dyndbg: expected <4096 bytes into control [ 320.251053][ T5883] wiimote 0005:057E:0306.0013: detected device: Nintendo Wii Remote (Gen 1) [ 320.296078][ T5883] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0013/input/input50 [ 320.383224][ T5883] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0013/input/input51 [ 320.419875][ T5883] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0013/input/input49 [ 321.911359][ T42] kauditd_printk_skb: 139 callbacks suppressed [ 321.911377][ T42] audit: type=1800 audit(1787206272.448:10175): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 322.004765][ T42] audit: type=1800 audit(1787206272.538:10176): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 322.051633][ T42] audit: type=1800 audit(1787206272.588:10177): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 322.085603][ T42] audit: type=1800 audit(1787206272.598:10178): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 322.104848][ T42] audit: type=1800 audit(1787206272.638:10179): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 322.144620][ T42] audit: type=1800 audit(1787206272.678:10180): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 322.169041][ T42] audit: type=1800 audit(1787206272.708:10181): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 322.198455][ T42] audit: type=1800 audit(1787206272.728:10182): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 322.218247][ T42] audit: type=1800 audit(1787206272.748:10183): pid=17641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5235" name="max_vclocks" dev="sysfs" ino=25606 res=0 errno=0 [ 322.268001][ T42] audit: type=1800 audit(1787206272.798:10184): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 327.778900][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 327.778914][ T42] audit: type=1800 audit(1787206278.308:10189): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 327.839339][ T42] audit: type=1800 audit(1787206278.368:10190): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 327.895556][ T42] audit: type=1800 audit(1787206278.428:10191): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 327.922153][ T42] audit: type=1800 audit(1787206278.448:10192): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 327.933100][ T42] audit: type=1800 audit(1787206278.458:10193): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 327.973461][ T42] audit: type=1800 audit(1787206278.508:10194): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 328.003323][T17664] zero sized request [ 328.008052][ T42] audit: type=1800 audit(1787206278.538:10195): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 328.028766][ T42] audit: type=1800 audit(1787206278.558:10196): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 328.062498][ T42] audit: type=1800 audit(1787206278.598:10197): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 328.080204][ T42] audit: type=1800 audit(1787206278.618:10198): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 328.602460][ T57] kernel write not supported for file bpf-map (pid: 57 comm: kworker/2:1) [ 328.733072][T17722] loop1: detected capacity change from 0 to 524287998 [ 328.910933][T17732] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.937149][T17732] IPv6: Can't replace route, no match found [ 328.955809][T17735] loop4: detected capacity change from 0 to 524287936 [ 329.903622][T17801] kAFS: Invalid Command on /proc/fs/afs/cells file [ 329.983323][T17805] kAFS: Invalid Command on /proc/fs/afs/cells file [ 330.081364][ T852] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 330.308682][ T852] usb 11-1: Using ep0 maxpacket: 32 [ 330.313980][ T852] usb 11-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40 [ 330.319322][ T852] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.328631][ T852] usb 11-1: too many endpoints for config 1 interface 1 altsetting 0: 254, using maximum allowed: 30 [ 330.332295][ T852] usb 11-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 330.354009][ T852] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 330.363328][ T852] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.365843][ T852] usb 11-1: Product: syz [ 330.378612][ T852] usb 11-1: Manufacturer: syz [ 330.380571][ T852] usb 11-1: SerialNumber: syz [ 330.389390][ T852] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.395252][ T852] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 330.413912][ T852] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.416385][ T852] snd-usb-audio 11-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 330.423650][ T852] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.502137][ T852] snd-usb-audio 11-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 330.557235][T17679] udevd[17679]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.604830][ T57] usb 11-1: USB disconnect, device number 3 [ 332.822604][ T42] kauditd_printk_skb: 141 callbacks suppressed [ 332.822616][ T42] audit: type=1800 audit(1787206283.358:10340): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 332.903041][ T42] audit: type=1800 audit(1787206283.438:10341): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 333.171053][ T42] audit: type=1800 audit(1787206283.708:10342): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 333.216355][ T1159] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 333.263319][ T42] audit: type=1800 audit(1787206283.798:10343): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 333.282006][ T42] audit: type=1800 audit(1787206283.818:10344): pid=17934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5368" name="drivers_probe" dev="sysfs" ino=627 res=0 errno=0 [ 333.304216][ T42] audit: type=1800 audit(1787206283.838:10345): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 333.315082][ T42] audit: type=1800 audit(1787206283.838:10346): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177466 res=0 errno=0 [ 333.328050][ T42] audit: type=1800 audit(1787206283.858:10347): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 333.364424][ T42] audit: type=1800 audit(1787206283.898:10348): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 333.403520][ T42] audit: type=1800 audit(1787206283.938:10349): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 333.423292][T17944] Line length is too long: Should be less than 4094 [ 333.888757][ T852] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 334.042442][ T852] usb 6-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.00 [ 334.049132][ T852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.053807][ T852] usb 6-1: Product: syz [ 334.055142][ T852] usb 6-1: Manufacturer: syz [ 334.062831][ T852] usb 6-1: SerialNumber: syz [ 334.074732][ T852] ums-datafab 6-1:1.0: USB Mass Storage device detected [ 334.089778][ T852] ums-datafab 6-1:1.0: This device (07c4,a000,0000 S 06 P ff) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 334.089778][ T852] Please send a copy of this message to and [ 334.109943][ T852] scsi host6: usb-storage 6-1:1.0 [ 334.179501][ T199] scsi 6:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0000 PQ: 0 ANSI: 0 CCS [ 334.285575][ T199] scsi 6:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0000 PQ: 0 ANSI: 0 CCS [ 334.505078][ T199] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 334.530603][ T199] sd 6:0:0:1: Attached scsi generic sg3 type 0 [ 335.238762][T18017] bond0: option slaves: invalid value (-veth0) [ 335.562782][T18028] netlink: Unknown nat attribute (0) [ 335.565078][T18028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.827659][T18041] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 335.831009][T18041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.126966][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5427'. [ 336.131338][T18063] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5427'. [ 336.134326][T18063] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5427'. [ 336.670389][ T9535] usb 6-1: USB disconnect, device number 14 [ 336.725317][ T1155] sd 6:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 336.732813][ T102] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 336.756567][ T102] sd 6:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 336.767398][ T1155] sd 6:0:0:0: [sdb] Sense not available. [ 336.778748][ T102] sd 6:0:0:1: [sdc] Sense not available. [ 336.785944][ T1155] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 336.788374][ T102] sd 6:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 336.795903][ T1155] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 336.797910][ T1155] sd 6:0:0:0: [sdb] Write Protect is off [ 336.800812][ T102] sd 6:0:0:1: [sdc] 0-byte physical blocks [ 336.820324][ T1155] sd 6:0:0:0: [sdb] Asking for cache data failed [ 336.822320][ T1155] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 336.826320][ T102] sd 6:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 336.830492][ T102] sd 6:0:0:1: [sdc] Asking for cache data failed [ 336.832603][ T102] sd 6:0:0:1: [sdc] Assuming drive cache: write through [ 336.939451][ T1155] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 337.082011][T17679] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 337.087417][ T102] sd 6:0:0:1: [sdc] Attached SCSI removable disk [ 337.481670][T18101] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 337.932223][ T42] kauditd_printk_skb: 131 callbacks suppressed [ 337.932240][ T42] audit: type=1800 audit(1787206288.468:10481): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 337.953235][ T42] audit: type=1800 audit(1787206288.488:10482): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 337.963116][ T42] audit: type=1800 audit(1787206288.498:10483): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 337.995713][ T42] audit: type=1800 audit(1787206288.528:10484): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 338.020057][ T42] audit: type=1800 audit(1787206288.558:10485): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 338.036354][ T42] audit: type=1800 audit(1787206288.568:10486): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 338.070083][ T42] audit: type=1800 audit(1787206288.608:10487): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 338.119788][ T42] audit: type=1800 audit(1787206288.658:10488): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 338.142914][ T42] audit: type=1800 audit(1787206288.678:10489): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16169 res=0 errno=0 [ 338.163719][ T42] audit: type=1800 audit(1787206288.698:10490): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 338.389358][T18145] block2mtd: too many arguments [ 339.011707][T18177] i2c i2c-0: delete_device: Extra parameters [ 339.112774][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5480'. [ 339.146877][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5480'. [ 339.183646][T18185] kvm: kvm [18184]: vcpu1, guest rIP: 0xfff0 Unhandled RDMSR(0x40000013) [ 339.745419][T18213] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 339.903128][T18219] Bluetooth: hci1: expected 121 bytes, got 2 bytes [ 339.907409][T18220] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 339.920729][T18220] CIFS: Attempting to mount //127.0.0.1/share [ 339.976385][T18220] CIFS: VFS: Error connecting to socket. Aborting operation. [ 339.981641][T18220] CIFS: VFS: cifs_mount failed w/return code = -111 [ 340.066332][T18231] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5503'. [ 340.072069][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5503'. [ 340.135571][T18234] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 340.143395][T18234] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 341.749618][T18327] batadv_slave_1: entered promiscuous mode [ 341.759418][T18322] batadv_slave_1: left promiscuous mode [ 342.408752][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.431088][T18357] CIFS: Attempting to mount //127.0.0.1/share [ 342.447437][T18357] CIFS: VFS: Error connecting to socket. Aborting operation. [ 342.451175][T18357] CIFS: VFS: cifs_mount failed w/return code = -111 [ 342.516736][T18362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5561'. [ 342.908716][ T852] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 342.983675][ T42] kauditd_printk_skb: 130 callbacks suppressed [ 342.983687][ T42] audit: type=1800 audit(1787206293.518:10621): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 343.025540][ T42] audit: type=1800 audit(1787206293.558:10622): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 343.055597][ T42] audit: type=1800 audit(1787206293.578:10623): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 343.058771][ T852] usb 9-1: Using ep0 maxpacket: 8 [ 343.066475][ T852] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 343.074069][ T852] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 343.082930][ T852] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 343.102825][ T42] audit: type=1800 audit(1787206293.638:10624): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16040 res=0 errno=0 [ 343.118641][ T852] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.122166][ T852] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.138627][ T852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.145665][ T42] audit: type=1800 audit(1787206293.678:10625): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179414 res=0 errno=0 [ 343.158743][ T42] audit: type=1800 audit(1787206293.678:10626): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=179443 res=0 errno=0 [ 343.167002][ T42] audit: type=1800 audit(1787206293.678:10627): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=179421 res=0 errno=0 [ 343.178370][ T42] audit: type=1800 audit(1787206293.678:10628): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=179422 res=0 errno=0 [ 343.191001][ T42] audit: type=1800 audit(1787206293.688:10629): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=179423 res=0 errno=0 [ 343.197446][ T42] audit: type=1800 audit(1787206293.698:10630): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179463 res=0 errno=0 [ 343.284955][T18399] netlink: 'syz.6.5578': attribute type 2 has an invalid length. [ 343.358670][ T852] usb 9-1: GET_CAPABILITIES returned 0 [ 343.360469][ T852] usbtmc 9-1:16.0: can't read capabilities [ 343.565073][ T852] usb 9-1: USB disconnect, device number 5 [ 344.633510][T18455] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 344.639896][T18455] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.411677][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.535599][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.547311][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.550692][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.555038][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.557877][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.634620][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.775457][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.972642][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.622369][ T12] bridge_slave_1: left allmulticast mode [ 346.628394][ T12] bridge_slave_1: left promiscuous mode [ 346.642057][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.662563][ T12] bridge_slave_0: left allmulticast mode [ 346.665359][ T12] bridge_slave_0: left promiscuous mode [ 346.669100][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.014279][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.030988][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.039602][ T12] bond0 (unregistering): Released all slaves [ 347.055030][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 347.502564][T18481] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.511865][T18481] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.519312][T18481] bridge_slave_0: entered allmulticast mode [ 347.525116][T18481] bridge_slave_0: entered promiscuous mode [ 347.535066][ T1159] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 347.608698][ T5740] Bluetooth: hci3: command tx timeout [ 347.627684][T18481] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.635209][T18481] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.640922][T18481] bridge_slave_1: entered allmulticast mode [ 347.651165][T18481] bridge_slave_1: entered promiscuous mode [ 347.785028][T18481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.803704][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 347.808435][T18481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.826628][ T12] hsr_slave_0: left promiscuous mode [ 347.834778][ T12] hsr_slave_1: left promiscuous mode [ 347.842096][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.847897][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.858482][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.863149][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.906128][ T12] veth1_macvtap: left promiscuous mode [ 347.915792][ T12] veth0_macvtap: left promiscuous mode [ 347.920740][ T12] veth1_vlan: left promiscuous mode [ 347.925980][ T12] veth0_vlan: left promiscuous mode [ 348.326895][ T42] kauditd_printk_skb: 70 callbacks suppressed [ 348.326912][ T42] audit: type=1800 audit(1787206298.858:10701): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 348.374859][ T12] team0 (unregistering): Port device team_slave_1 removed [ 348.384273][ T12] team0 (unregistering): Port device team_slave_0 removed [ 348.542868][ T42] audit: type=1800 audit(1787206299.078:10702): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 348.583554][T18481] team0: Port device team_slave_0 added [ 348.605629][T18481] team0: Port device team_slave_1 added [ 348.666950][T18481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.673536][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.686531][T18481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.715478][T18481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.721019][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.738885][T18481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.782221][ T42] audit: type=1800 audit(1787206299.308:10703): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 348.863411][T18481] hsr_slave_0: entered promiscuous mode [ 348.869138][T18481] hsr_slave_1: entered promiscuous mode [ 348.875905][T18481] debugfs: 'hsr0' already exists in 'hsr' [ 348.883314][T18481] Cannot create hsr debugfs directory [ 348.956565][ T42] audit: type=1800 audit(1787206299.488:10704): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 349.102875][ T42] audit: type=1800 audit(1787206299.638:10705): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 349.144928][ T42] audit: type=1800 audit(1787206299.678:10706): pid=18481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=26888 res=0 errno=0 [ 349.175035][ T42] audit: type=1800 audit(1787206299.678:10707): pid=18481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26887 res=0 errno=0 [ 349.198927][ T42] audit: type=1800 audit(1787206299.698:10708): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185697 res=0 errno=0 [ 349.240183][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 349.376944][ T42] audit: type=1800 audit(1787206299.908:10709): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 349.484799][T18481] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 349.523639][ T42] audit: type=1800 audit(1787206300.058:10710): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 349.563767][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.570794][T18481] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 349.597390][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.610437][T18481] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 349.624112][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.644769][T18481] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 349.686229][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.698672][ T5740] Bluetooth: hci3: command tx timeout [ 349.815607][T18567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5631'. [ 349.826608][T18567] netlink: 'syz.4.5631': attribute type 8 has an invalid length. [ 349.830018][T18567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5631'. [ 349.832241][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 349.906299][T18481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.943765][T18481] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.951080][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.953354][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.975064][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.977437][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.189926][T18584] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5637'. [ 350.693374][T18481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.048536][T18481] veth0_vlan: entered promiscuous mode [ 351.072807][T18481] veth1_vlan: entered promiscuous mode [ 351.148010][T18481] veth0_macvtap: entered promiscuous mode [ 351.204138][T18481] veth1_macvtap: entered promiscuous mode [ 351.273216][T14397] kernel read not supported for file /rfkill (pid: 14397 comm: kworker/2:5) [ 351.384772][T18481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.489773][T18481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.534486][ T5784] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.542646][ T5784] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.578920][ T5784] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.584281][ T5784] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.737600][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.743147][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.769675][ T5740] Bluetooth: hci3: command tx timeout [ 351.853579][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.858255][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.958011][T18641] misc userio: Begin command sent, but we're already running [ 352.360485][T18652] netlink: 'syz.7.5658': attribute type 2 has an invalid length. [ 352.363102][T18652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5658'. [ 352.440894][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5660'. [ 352.829900][T18673] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 352.840020][T14397] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 352.842736][T18673] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 353.015629][T14397] usb 12-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 353.030411][T14397] usb 12-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 353.034539][T14397] usb 12-1: Product: syz [ 353.039525][T14397] usb 12-1: Manufacturer: syz [ 353.041797][T14397] usb 12-1: SerialNumber: syz [ 353.047612][T14397] usb 12-1: config 0 descriptor?? [ 353.269934][T14397] usb 12-1: USB disconnect, device number 2 [ 353.368151][ T42] kauditd_printk_skb: 77 callbacks suppressed [ 353.368165][ T42] audit: type=1800 audit(1787206303.898:10788): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 353.446846][ T42] audit: type=1800 audit(1787206303.978:10789): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 353.529322][ T42] audit: type=1800 audit(1787206304.068:10790): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 353.574276][ T42] audit: type=1800 audit(1787206304.108:10791): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 353.603452][T18694] bond1: invalid ARP target 0.0.0.0 specified for addition [ 353.605892][T18694] bond1: option arp_ip_target: invalid value (0) [ 353.613950][T18694] bond1 (unregistering): Released all slaves [ 353.732212][ T42] audit: type=1800 audit(1787206304.268:10792): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 353.788342][ T42] audit: type=1800 audit(1787206304.318:10793): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 353.848411][ T42] audit: type=1800 audit(1787206304.378:10794): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 353.848938][ T5740] Bluetooth: hci3: command tx timeout [ 353.883117][ T42] audit: type=1800 audit(1787206304.418:10795): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 353.911097][ T42] audit: type=1800 audit(1787206304.448:10796): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 353.946448][T18703] nfsd: exp_rootfh path not found ӥ)3 @$/ [ 354.006785][ T42] audit: type=1800 audit(1787206304.538:10797): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 354.228688][T14397] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 354.338828][ T5842] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 354.391129][T14397] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 354.395056][T14397] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 354.398453][T14397] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 354.407778][T14397] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 354.417883][T14397] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 354.422897][T14397] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 354.428322][T14397] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 354.432013][T14397] usb 6-1: Product: syz [ 354.433323][T14397] usb 6-1: Manufacturer: syz [ 354.443785][T14397] cdc_wdm 6-1:1.0: skipping garbage [ 354.449719][T14397] cdc_wdm 6-1:1.0: skipping garbage [ 354.457304][T14397] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 354.471705][T14397] cdc_wdm 6-1:1.0: Unknown control protocol [ 354.491242][ T5842] usb 9-1: Using ep0 maxpacket: 32 [ 354.499559][ T5842] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 354.509540][ T5842] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 354.521451][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 354.528954][ T5842] usb 9-1: Product: syz [ 354.530754][ T5842] usb 9-1: Manufacturer: syz [ 354.535151][ T5842] usb 9-1: SerialNumber: syz [ 354.548247][ T5842] usb 9-1: config 0 descriptor?? [ 354.554139][T18711] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 354.560128][ T5842] hub 9-1:0.0: bad descriptor, ignoring hub [ 354.565893][ T5842] hub 9-1:0.0: probe with driver hub failed with error -5 [ 354.682935][T14397] usb 6-1: USB disconnect, device number 15 [ 354.908850][ T5842] usb 9-1: USB disconnect, device number 6 [ 355.018112][T18728] MTRR 3 not used [ 355.392888][T18739] bridge0: entered promiscuous mode [ 355.395382][T18738] bridge0: left promiscuous mode [ 355.722163][ T10] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 355.878917][ T10] usb 12-1: Using ep0 maxpacket: 8 [ 355.882785][ T10] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.890845][ T10] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 355.896259][ T10] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.905310][ T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.915309][ T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.921269][ T10] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.937612][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.158270][ T10] usb 12-1: GET_CAPABILITIES returned 0 [ 356.163024][ T10] usbtmc 12-1:16.0: can't read capabilities [ 356.166423][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5715'. [ 356.171886][T18774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5715'. [ 356.209119][T14397] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 356.358778][T14397] usb 9-1: Using ep0 maxpacket: 8 [ 356.360776][ T10] usb 12-1: USB disconnect, device number 3 [ 356.362867][T14397] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 356.367286][T14397] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 356.370810][T14397] usb 9-1: config 0 has no interface number 0 [ 356.372837][T14397] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.376585][T14397] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 356.383632][T14397] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 356.389015][T14397] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 356.393569][T14397] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.407961][T14397] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.413048][T14397] usb 9-1: Product: syz [ 356.414530][T14397] usb 9-1: Manufacturer: syz [ 356.416100][T14397] usb 9-1: SerialNumber: syz [ 356.441456][T14397] usb 9-1: config 0 descriptor?? [ 356.681530][T14397] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 356.875023][T14397] usb 9-1: USB disconnect, device number 7 [ 356.941191][T18788] ima: policy update failed [ 357.763013][T18815] syz.4.5741 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 357.768721][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.380014][ T42] kauditd_printk_skb: 96 callbacks suppressed [ 358.380028][ T42] audit: type=1800 audit(1787206308.918:10894): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 358.580414][ T42] audit: type=1800 audit(1787206309.118:10895): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 358.702420][ T42] audit: type=1800 audit(1787206309.238:10896): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 358.741286][ T42] audit: type=1800 audit(1787206309.278:10897): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 358.814147][ T42] audit: type=1800 audit(1787206309.348:10898): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 358.881545][ T42] audit: type=1800 audit(1787206309.418:10899): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 358.997697][ T42] audit: type=1800 audit(1787206309.528:10900): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 359.057218][ T42] audit: type=1800 audit(1787206309.588:10901): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 359.118798][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 359.268753][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 359.272968][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.282449][ T10] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 359.287275][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 359.298614][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 359.301923][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 359.305556][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 359.318619][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.328638][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.335636][ T42] audit: type=1800 audit(1787206309.868:10902): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187458 res=0 errno=0 [ 359.348620][ T42] audit: type=1800 audit(1787206309.878:10903): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=187487 res=0 errno=0 [ 359.566118][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 359.567965][ T10] usbtmc 6-1:16.0: can't read capabilities [ 359.770426][ T5806] usb 6-1: USB disconnect, device number 16 [ 360.068053][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.075145][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.085464][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.095359][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.103320][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.037761][T18851] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.041642][T18851] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.044064][T18851] bridge_slave_0: entered allmulticast mode [ 361.046784][T18851] bridge_slave_0: entered promiscuous mode [ 361.050802][T18851] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.075209][T18851] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.091233][T18851] bridge_slave_1: entered allmulticast mode [ 361.095725][T18851] bridge_slave_1: entered promiscuous mode [ 361.187666][T18851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.207868][T18851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.259798][T18851] team0: Port device team_slave_0 added [ 361.263201][T18851] team0: Port device team_slave_1 added [ 361.286409][T18851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.291625][T18851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.301695][T18851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.306135][T18851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.308365][T18851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.316882][T18851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.340392][T18851] hsr_slave_0: entered promiscuous mode [ 361.342792][T18851] hsr_slave_1: entered promiscuous mode [ 361.354764][T18851] debugfs: 'hsr0' already exists in 'hsr' [ 361.362575][T18851] Cannot create hsr debugfs directory [ 361.607932][T18851] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 361.619023][T18851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.622088][T18851] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 361.627939][T18851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.631252][T18851] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 361.637705][T18851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.642386][T18851] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 361.651102][T18851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.678489][T18851] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.680837][T18851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.683235][T18851] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.685667][T18851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.804862][T18851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.841505][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.864031][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.940418][T18851] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.953888][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.956252][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.965187][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.967623][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.168791][ T5740] Bluetooth: hci4: command tx timeout [ 362.688179][T18928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.700529][T18928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.938514][T18928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.950064][T18928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.072499][T18851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.211048][T18928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.225893][T18928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.371409][ T5740] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 363.384833][ T5740] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 363.392723][ T5740] CPU: 3 UID: 0 PID: 5740 Comm: kworker/u34:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.392758][ T5740] Tainted: [L]=SOFTLOCKUP [ 363.392767][ T5740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.392783][ T5740] Workqueue: hci3 hci_rx_work [ 363.392816][ T5740] Call Trace: [ 363.392824][ T5740] [ 363.392832][ T5740] dump_stack_lvl+0x100/0x190 [ 363.392860][ T5740] sysfs_warn_dup.cold+0x1c/0x28 [ 363.392891][ T5740] sysfs_create_dir_ns+0x24b/0x2b0 [ 363.392921][ T5740] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 363.392949][ T5740] ? find_held_lock+0x2b/0x80 [ 363.392976][ T5740] ? kobject_add_internal+0x25f/0x930 [ 363.393004][ T5740] ? kobject_add_internal+0x25f/0x930 [ 363.393031][ T5740] ? do_raw_spin_unlock+0x145/0x1e0 [ 363.393058][ T5740] kobject_add_internal+0x2c8/0x930 [ 363.393086][ T5740] kobject_add+0x16a/0x1e0 [ 363.393108][ T5740] ? __pfx_kobject_add+0x10/0x10 [ 363.393135][ T5740] ? class_to_subsys+0x10f/0x150 [ 363.393171][ T5740] ? kobject_put+0xb9/0x640 [ 363.393187][ T5740] ? _raw_spin_unlock+0x28/0x50 [ 363.393214][ T5740] device_add+0x294/0x1970 [ 363.393241][ T5740] ? __pfx_dev_set_name+0x10/0x10 [ 363.393262][ T5740] ? __pfx_device_add+0x10/0x10 [ 363.393284][ T5740] ? find_held_lock+0x2b/0x80 [ 363.393310][ T5740] ? hci_find_link_key+0x1a4/0x3c0 [ 363.393328][ T5740] ? hci_find_link_key+0x1a4/0x3c0 [ 363.393352][ T5740] hci_conn_add_sysfs+0x1a3/0x260 [ 363.393385][ T5740] hci_conn_complete_evt+0x5bb/0x13f0 [ 363.393413][ T5740] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 363.393437][ T5740] ? __skb_clone+0x570/0x760 [ 363.393470][ T5740] ? skb_pull_data+0x15f/0x1e0 [ 363.393497][ T5740] hci_event_packet+0x8e9/0xcd0 [ 363.393524][ T5740] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 363.393546][ T5740] ? __pfx_hci_event_packet+0x10/0x10 [ 363.393575][ T5740] ? kcov_remote_start+0x387/0x670 [ 363.393597][ T5740] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.393632][ T5740] hci_rx_work+0x451/0xfc0 [ 363.393663][ T5740] process_one_work+0xa23/0x1940 [ 363.393701][ T5740] ? __pfx_process_one_work+0x10/0x10 [ 363.393738][ T5740] ? __pfx_hci_rx_work+0x10/0x10 [ 363.393767][ T5740] worker_thread+0x5ef/0xe50 [ 363.393805][ T5740] ? kthread+0x13a/0x450 [ 363.393828][ T5740] ? __pfx_worker_thread+0x10/0x10 [ 363.393852][ T5740] kthread+0x373/0x450 [ 363.393877][ T5740] ? __pfx_kthread+0x10/0x10 [ 363.393905][ T5740] ret_from_fork+0x730/0xd60 [ 363.393932][ T5740] ? __pfx_ret_from_fork+0x10/0x10 [ 363.393957][ T5740] ? __switch_to+0x800/0x10f0 [ 363.393976][ T5740] ? __pfx_kthread+0x10/0x10 [ 363.394005][ T5740] ret_from_fork_asm+0x1a/0x30 [ 363.394046][ T5740] [ 363.394074][ T5740] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 363.470623][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 363.470635][ T42] audit: type=1800 audit(1787206313.998:10942): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 363.473549][ T5740] Bluetooth: hci3: failed to register connection device [ 363.741283][T18928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.744475][T18928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.807753][ T42] audit: type=1800 audit(1787206314.338:10943): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 363.929791][T18851] veth0_vlan: entered promiscuous mode [ 363.942842][T18851] veth1_vlan: entered promiscuous mode [ 363.996383][T18851] veth0_macvtap: entered promiscuous mode [ 364.012530][T18851] veth1_macvtap: entered promiscuous mode [ 364.016969][ T42] audit: type=1800 audit(1787206314.548:10944): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 364.046075][T18851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.073137][T18851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.170779][ T5784] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.173734][ T5784] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.177890][ T5784] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.243483][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 364.258786][ T5740] Bluetooth: hci4: command tx timeout [ 364.348699][ T9652] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.364960][ T42] audit: type=1800 audit(1787206314.898:10945): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193572 res=0 errno=0 [ 364.438170][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.441138][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.442062][ T42] audit: type=1800 audit(1787206314.978:10946): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193698 res=0 errno=0 [ 364.496495][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.499666][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.637156][ T42] audit: type=1800 audit(1787206315.168:10947): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 364.667938][ T42] audit: type=1800 audit(1787206315.198:10948): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 364.725045][ T42] audit: type=1800 audit(1787206315.258:10949): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 364.827979][ T42] audit: type=1800 audit(1787206315.348:10950): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 364.849943][ T42] audit: type=1800 audit(1787206315.378:10951): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 365.458713][ T5740] Bluetooth: hci3: command tx timeout [ 366.329203][ T5743] Bluetooth: hci4: command tx timeout [ 366.676291][T19011] binder: 19010:19011 ioctl c0306201 0 returned -14 [ 366.909205][T19019] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5797'. [ 367.528817][ T5743] Bluetooth: hci3: command tx timeout [ 367.649214][T19031] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 367.767205][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5805'. [ 367.811847][T19038] tipc: Started in network mode [ 367.813964][T19038] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 367.836804][T19038] tipc: Enabled bearer , priority 0 [ 368.066581][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5810'. [ 368.410903][ T5743] Bluetooth: hci4: command tx timeout [ 368.414757][T19060] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 368.496187][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 368.496200][ T42] audit: type=1800 audit(1787206319.028:11000): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 368.518103][ T42] audit: type=1800 audit(1787206319.028:11001): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193898 res=0 errno=0 [ 368.548159][ T42] audit: type=1800 audit(1787206319.078:11002): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193910 res=0 errno=0 [ 368.571812][ T42] audit: type=1800 audit(1787206319.108:11003): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 368.639905][ T42] audit: type=1800 audit(1787206319.178:11004): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 368.672371][ T42] audit: type=1800 audit(1787206319.178:11005): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193916 res=0 errno=0 [ 368.687013][ T42] audit: type=1800 audit(1787206319.198:11006): pid=17643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193952 res=0 errno=0 [ 368.724950][ T42] audit: type=1800 audit(1787206319.258:11007): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193970 res=0 errno=0 [ 368.801892][ T42] audit: type=1800 audit(1787206319.338:11008): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 368.847444][ T42] audit: type=1800 audit(1787206319.358:11009): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 368.901381][T19071] nbd: nbd1 already in use [ 368.948650][T12165] tipc: Node number set to 43690 [ 369.244348][T19084] jffs2: notice: (19084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 369.427577][T19094] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5831'. [ 369.608670][ T5740] Bluetooth: hci3: command tx timeout [ 369.790787][T16742] block nbd8: Receive control failed (result -32) [ 370.250865][T19137] openvswitch: netlink: IP tunnel dst address not specified [ 370.260961][T19137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.968895][ T5806] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 371.086654][T19168] ipvlan2: entered promiscuous mode [ 371.100281][T19168] team0: Device ipvlan2 failed to register rx_handler [ 371.118712][ T5806] usb 9-1: Using ep0 maxpacket: 8 [ 371.124997][ T5806] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 371.132526][ T5806] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 371.135323][ T5806] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.138374][ T5806] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.148315][ T5806] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.151684][ T5806] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.155896][ T5806] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.370511][ T5806] usb 9-1: GET_CAPABILITIES returned 0 [ 371.372265][ T5806] usbtmc 9-1:16.0: can't read capabilities [ 371.448703][ T5740] Bluetooth: hci4: command 0x0405 tx timeout [ 371.475930][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880763f3000: rx timeout, send abort [ 371.580129][T19160] usb 9-1: usbtmc_ioctl_clear_in_halt returned -32 [ 371.598502][ T5806] usb 9-1: USB disconnect, device number 8 [ 371.778529][T19183] jffs2: notice: (19183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 371.907716][T19186] usbcore.quirks: string doesn't fit in 127 chars. [ 371.981815][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880763f3000: abort rx timeout. Force session deactivation [ 372.406867][T19211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5886'. [ 372.737340][T19221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5891'. [ 372.748692][T19221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5891'. [ 372.985986][T19231] kAFS: bad VL server IP address [ 373.521655][ T42] kauditd_printk_skb: 108 callbacks suppressed [ 373.521673][ T42] audit: type=1800 audit(1787206324.058:11118): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 373.561943][ T42] audit: type=1800 audit(1787206324.058:11119): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194537 res=0 errno=0 [ 373.571738][ T42] audit: type=1800 audit(1787206324.078:11120): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 373.584068][ T42] audit: type=1800 audit(1787206324.118:11121): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 373.623945][ T42] audit: type=1800 audit(1787206324.158:11122): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 373.665956][ T42] audit: type=1800 audit(1787206324.198:11123): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 373.724263][ T42] audit: type=1800 audit(1787206324.258:11124): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 373.753792][ T42] audit: type=1800 audit(1787206324.288:11125): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 373.807027][ T42] audit: type=1800 audit(1787206324.338:11126): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 373.826049][ T42] audit: type=1800 audit(1787206324.358:11127): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194589 res=0 errno=0 [ 374.780085][T19308] sd 0:0:0:0: PR command failed: 1026 [ 374.786959][T19308] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 374.796428][T19308] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 374.877943][T19311] profile_transition: unconfined exec no attachment [ 374.879666][T19311] apparmor_bprm_creds_for_exec: label build failed [ 375.510735][T19336] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 32624. macoff=96 [ 375.659052][T19340] i2c i2c-1: new_device: Can't parse I2C address [ 376.363909][T19364] bond0: option slaves: interface +dumm{0}4`g_{ZX does not exist! [ 376.368718][T19365] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5952'. [ 377.728734][ T5806] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 377.879172][ T5806] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.891240][ T5806] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.900314][ T5806] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 377.913361][ T5806] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.927367][T19409] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.961133][ T5806] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.250579][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.252627][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.605740][ T42] kauditd_printk_skb: 108 callbacks suppressed [ 378.605752][ T42] audit: type=1800 audit(2000000003.120:11236): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 378.642724][ T42] audit: type=1800 audit(2000000003.160:11237): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 378.665519][ T42] audit: type=1800 audit(2000000003.180:11238): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34525 res=0 errno=0 [ 378.678394][ T42] audit: type=1800 audit(2000000003.190:11239): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34548 res=0 errno=0 [ 378.714662][ T9535] usb 9-1: USB disconnect, device number 9 [ 378.874363][ T42] audit: type=1800 audit(2000000003.390:11240): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 378.889837][ T102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.897065][ T42] audit: type=1800 audit(2000000003.410:11241): pid=19448 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.8.5991" name="usbip_status" dev="sysfs" ino=44120 res=0 errno=0 [ 378.906909][ T57] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 378.940759][ T42] audit: type=1800 audit(2000000003.460:11242): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 378.985949][ T42] audit: type=1800 audit(2000000003.500:11243): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 379.038488][ T42] audit: type=1800 audit(2000000003.550:11244): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 379.062231][ T57] usb 6-1: New USB device found, idVendor=04cb, idProduct=0104, bcdDevice= 0.00 [ 379.067586][ T57] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 379.077237][ T57] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 379.085974][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.093800][T19446] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 379.096414][T19446] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 379.099764][ T42] audit: type=1800 audit(2000000003.610:11245): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194867 res=0 errno=0 [ 379.113195][ T57] gspca_main: finepix-2.14.0 probing 04cb:0104 [ 379.227790][T19456] profile_transition: unconfined exec no attachment [ 379.227816][T19456] apparmor_bprm_creds_for_exec: label build failed [ 380.341625][ T5806] usb 6-1: USB disconnect, device number 17 [ 380.576821][T19473] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.753694][T19473] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.033309][T19473] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.324819][T19473] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.574173][ T13] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.609395][ T9652] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.614476][ T9652] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.620767][ T9652] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.922616][T19519] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6023'. [ 382.056728][T19526] clocksource: Switched to clocksource tsc [ 382.746486][T19554] batman_adv: batadv0: Adding interface: macvtap1 [ 382.758308][T19554] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.790641][T19554] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 382.791039][ T852] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 382.975168][T19517] syz.7.6022 (19517): drop_caches: 1 [ 382.978846][ T852] usb 13-1: Using ep0 maxpacket: 8 [ 382.983647][ T852] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 383.003287][ T852] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 383.005967][ T852] usb 13-1: config 0 has no interface number 0 [ 383.014860][ T852] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.025976][ T852] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 383.034682][ T852] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 383.049528][ T852] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 383.062796][ T852] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.074237][ T852] usb 13-1: config 0 descriptor?? [ 383.088184][ T852] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 383.118903][ T41] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 383.194404][T19570] kernel read not supported for file /eth0 (pid: 19570 comm: syz.7.6046) [ 383.283179][ T41] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 383.295653][ T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 383.302043][ T41] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 383.308734][ T41] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.321203][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.324796][ T41] usb 9-1: Product: syz [ 383.328438][ T41] usb 9-1: Manufacturer: syz [ 383.333199][ T41] usb 9-1: SerialNumber: syz [ 383.339903][ T41] hub 9-1:1.0: bad descriptor, ignoring hub [ 383.343960][ T41] hub 9-1:1.0: probe with driver hub failed with error -5 [ 383.549000][T19583] ima: Unable to open file: / (-22) [ 383.550077][T19582] ima: policy update failed [ 383.554129][ T41] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 383.635511][ T42] kauditd_printk_skb: 95 callbacks suppressed [ 383.635523][ T42] audit: type=1800 audit(2000000008.149:11341): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 383.662081][ T42] audit: type=1800 audit(2000000008.179:11342): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 383.725124][ T42] audit: type=1800 audit(2000000008.239:11343): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 383.743866][ T42] audit: type=1800 audit(2000000008.259:11344): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 383.785104][ T42] audit: type=1800 audit(2000000008.299:11345): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 383.921508][ T42] audit: type=1800 audit(2000000008.439:11346): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 383.957316][ T42] audit: type=1800 audit(2000000008.469:11347): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 383.998772][ T42] audit: type=1800 audit(2000000008.519:11348): pid=19599 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.6060" name="scan" dev="sysfs" ino=23184 res=0 errno=0 [ 384.023280][ T42] audit: type=1800 audit(2000000008.539:11349): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 384.077724][ T42] audit: type=1800 audit(2000000008.589:11350): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 384.768015][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6073'. [ 385.393425][ T41] usb 13-1: USB disconnect, device number 2 [ 385.413439][ T41] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 385.479378][ T24] usb 9-1: USB disconnect, device number 10 [ 385.484468][ T24] usblp1: removed [ 385.559817][T19649] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 385.568643][T19649] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 385.571167][T19649] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 385.574071][T19649] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 385.577111][T19649] page dumped because: unmovable page [ 385.579644][T19649] page_owner info is not present (never set?) [ 386.224414][T19680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6099'. [ 386.263044][T19680] veth0_macvtap: left promiscuous mode [ 386.336017][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6102'. [ 387.094679][T19727] tun0: tun_chr_ioctl cmd 2147767519 [ 387.652622][T19744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50150 [ 387.671055][T19744] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 387.679191][T19744] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 387.688947][T19744] page_type: f5(slab) [ 387.691538][T19744] raw: 04fff00000000040 ffff88801c043040 dead000000000100 dead000000000122 [ 387.698733][T19744] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 387.710865][T19744] head: 04fff00000000040 ffff88801c043040 dead000000000100 dead000000000122 [ 387.738609][T19744] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 387.753268][T19744] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 387.762558][T19744] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 387.770107][T19744] page dumped because: unmovable page [ 387.777217][T19744] page_owner tracks the page as allocated [ 387.779551][T19744] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17644, tgid 17644 (udevd), ts 378116757531, free_ts 371394499592 [ 387.802636][T19744] post_alloc_hook+0xfd/0x120 [ 387.804266][T19744] get_page_from_freelist+0xf46/0x3500 [ 387.806060][T19744] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 387.807921][T19744] new_slab+0xa2/0x660 [ 387.809816][T19744] refill_objects+0xe3/0x410 [ 387.811440][T19744] __pcs_replace_empty_main+0x372/0x680 [ 387.813356][T19744] __kmalloc_noprof+0x66b/0x820 [ 387.814936][T19744] tomoyo_realpath_from_path+0xb6/0x690 [ 387.817976][T19744] tomoyo_path2_perm+0x366/0x700 [ 387.826454][T19744] tomoyo_path_rename+0xfc/0x1a0 [ 387.828121][T19744] security_path_rename+0x18e/0x3c0 [ 387.831084][T19744] filename_renameat2+0x731/0xa60 [ 387.833909][T19744] __x64_sys_rename+0x81/0xb0 [ 387.835525][T19744] do_syscall_64+0x121/0x770 [ 387.846580][T19744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.848510][T19744] page last free pid 19153 tgid 19152 stack trace: [ 387.869048][T19744] free_pages_prepare+0x586/0xd80 [ 387.870739][T19744] __free_contig_range_common+0x14f/0x250 [ 387.880999][T19744] free_pages_bulk+0x12a/0x200 [ 387.882596][T19744] vm_area_free_pages+0xad/0x2b0 [ 387.884977][T19744] vfree+0x108/0x730 [ 387.886239][T19744] snd_dma_free_pages+0xd2/0x140 [ 387.887846][T19744] snd_pcm_lib_free_pages+0x172/0x390 [ 387.889843][T19744] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 387.891897][T19744] snd_pcm_release_substream+0x5b/0x70 [ 387.893858][T19744] snd_pcm_oss_release+0x16f/0x300 [ 387.895637][T19744] __fput+0x3ff/0xb50 [ 387.896962][T19744] task_work_run+0x150/0x240 [ 387.899996][T19744] get_signal+0x1bd/0x21e0 [ 387.901468][T19744] arch_do_signal_or_restart+0x91/0x7a0 [ 387.903301][T19744] exit_to_user_mode_loop+0x139/0x700 [ 387.905011][T19744] __do_fast_syscall_32+0x59f/0x8b0 [ 388.012103][T19759] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 388.139991][T19765] batman_adv: batadv0: Adding interface: dummy0 [ 388.144183][T19765] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.163169][T19765] batman_adv: batadv0: Interface activated: dummy0 [ 388.649274][ T42] kauditd_printk_skb: 98 callbacks suppressed [ 388.649286][ T42] audit: type=1800 audit(2000000013.169:11449): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 388.725568][ T42] audit: type=1800 audit(2000000013.239:11450): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 388.851064][ T42] audit: type=1800 audit(2000000013.369:11451): pid=19788 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.8.6149" name="memory.events.local" dev="tmpfs" ino=435 res=0 errno=0 [ 388.886604][ T42] audit: type=1800 audit(2000000013.399:11452): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 388.970266][ T42] audit: type=1800 audit(2000000013.489:11453): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 389.044782][ T42] audit: type=1800 audit(2000000013.559:11454): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 389.130684][ T42] audit: type=1800 audit(2000000013.629:11455): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 389.160166][ T42] audit: type=1800 audit(2000000013.669:11456): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 389.180128][ T42] audit: type=1800 audit(2000000013.689:11457): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 389.274623][ T42] audit: type=1800 audit(2000000013.789:11458): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 389.323422][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6159'. [ 389.487810][T19814] dvmrp8: entered allmulticast mode [ 389.799849][ T57] kernel read not supported for file /dsp (pid: 57 comm: kworker/2:1) [ 390.005788][ T9652] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.196670][T19832] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 390.271223][T19834] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6170'. [ 390.278201][T19834] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6170'. [ 390.296383][T19842] profile_transition: unconfined exec no attachment [ 390.296400][T19842] apparmor_bprm_creds_for_exec: label build failed [ 390.390334][ T9652] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.622411][ T9652] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.813181][T19862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6189'. [ 390.821581][ T9652] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.972244][T19866] dvmrp8: entered allmulticast mode [ 391.404657][T19881] profile_transition: unconfined exec no attachment [ 391.404673][T19881] apparmor_bprm_creds_for_exec: label build failed [ 391.615425][ T9652] bridge_slave_1: left allmulticast mode [ 391.638066][ T9652] bridge_slave_1: left promiscuous mode [ 391.645869][ T9652] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.715063][T19884] profile_transition: unconfined exec no attachment [ 391.715082][T19884] apparmor_bprm_creds_for_exec: label build failed [ 391.720256][ T9652] bridge_slave_0: left allmulticast mode [ 391.727894][ T9652] bridge_slave_0: left promiscuous mode [ 391.732853][ T9652] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.840703][T19888] profile_transition: unconfined exec no attachment [ 391.840727][T19888] apparmor_bprm_creds_for_exec: label build failed [ 392.026501][T19891] profile_transition: unconfined exec no attachment [ 392.026518][T19891] apparmor_bprm_creds_for_exec: label build failed [ 392.154504][T19895] profile_transition: unconfined exec no attachment [ 392.154522][T19895] apparmor_bprm_creds_for_exec: label build failed [ 392.510898][ T9652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.537099][ T9652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.551964][ T57] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 392.555098][ T9652] bond0 (unregistering): Released all slaves [ 392.565236][ T57] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz1] on syz0 [ 392.587596][T19908] profile_transition: unconfined exec no attachment [ 392.587613][T19908] apparmor_bprm_creds_for_exec: label build failed [ 392.597897][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 392.640352][T19910] profile_transition: unconfined exec no attachment [ 392.640369][T19910] apparmor_bprm_creds_for_exec: label build failed [ 392.698909][ T41] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 392.751033][T19911] profile_transition: unconfined exec no attachment [ 392.751051][T19911] apparmor_bprm_creds_for_exec: label build failed [ 392.858616][ T41] usb 12-1: Using ep0 maxpacket: 8 [ 392.867149][ T41] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 392.876456][ T41] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 392.881463][ T41] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.891866][ T41] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.907925][ T41] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.934084][ T41] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.959170][ T41] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.011583][T19915] profile_transition: unconfined exec no attachment [ 393.011605][T19915] apparmor_bprm_creds_for_exec: label build failed [ 393.216709][ T41] usb 12-1: GET_CAPABILITIES returned 0 [ 393.223630][ T41] usbtmc 12-1:16.0: can't read capabilities [ 393.362922][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 393.460843][ T41] usb 12-1: USB disconnect, device number 4 [ 393.525303][ T9652] hsr_slave_0: left promiscuous mode [ 393.545408][ T9652] hsr_slave_1: left promiscuous mode [ 393.554425][ T9652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.561410][ T9652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.570375][ T9652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.580918][ T9652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.684715][ T42] kauditd_printk_skb: 77 callbacks suppressed [ 393.684729][ T42] audit: type=1800 audit(2000000018.199:11536): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 393.699522][ T9652] veth1_macvtap: left promiscuous mode [ 393.701218][ T9652] veth0_macvtap: left promiscuous mode [ 393.713689][ T9652] veth1_vlan: left promiscuous mode [ 393.715418][ T9652] veth0_vlan: left promiscuous mode [ 394.016748][ T42] audit: type=1800 audit(2000000018.529:11537): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 394.082293][ T9652] team0 (unregistering): Port device team_slave_1 removed [ 394.123536][ T9652] team0 (unregistering): Port device team_slave_0 removed [ 394.124825][ T42] audit: type=1800 audit(2000000018.629:11538): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 394.250626][ T42] audit: type=1800 audit(2000000018.759:11539): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0 [ 394.278165][T19940] vhci_hcd vhci_hcd.0: remove, state 4 [ 394.282210][ T42] audit: type=1800 audit(2000000018.789:11540): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.6206" name="unbind" dev="sysfs" ino=36189 res=0 errno=0 [ 394.301327][T19940] usb usb38: USB disconnect, device number 1 [ 394.394931][ T42] audit: type=1800 audit(2000000018.909:11541): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 394.420669][T19942] jffs2: notice: (19942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 394.494058][T19929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6202'. [ 394.516481][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 394.559801][ T42] audit: type=1800 audit(2000000019.069:11542): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 394.609190][ T42] audit: type=1800 audit(2000000019.129:11543): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 394.696170][T19946] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6208'. [ 394.744626][T19948] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 394.760838][ T42] audit: type=1800 audit(2000000019.259:11544): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16427 res=0 errno=0 [ 394.798485][ T9651] vhci_hcd vhci_hcd.0: stop threads [ 394.814659][ T9651] vhci_hcd vhci_hcd.0: release socket [ 394.832002][ T9651] vhci_hcd vhci_hcd.0: disconnect device [ 394.841897][ T9651] vhci_hcd vhci_hcd.0: stop threads [ 394.859928][ T9651] vhci_hcd vhci_hcd.0: release socket [ 394.884696][ T9651] vhci_hcd vhci_hcd.0: disconnect device [ 394.901872][ T9651] vhci_hcd vhci_hcd.0: stop threads [ 394.914146][ T9651] vhci_hcd vhci_hcd.0: release socket [ 394.917106][ T42] audit: type=1800 audit(2000000019.429:11545): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0 [ 394.928698][ T9651] vhci_hcd vhci_hcd.0: disconnect device [ 394.942039][ T5784] vhci_hcd vhci_hcd.0: stop threads [ 394.945964][ T5784] vhci_hcd vhci_hcd.0: release socket [ 394.951709][ T5784] vhci_hcd vhci_hcd.0: disconnect device [ 394.961574][ T5784] vhci_hcd vhci_hcd.0: stop threads [ 394.968753][ T5784] vhci_hcd vhci_hcd.0: release socket [ 394.974142][ T5784] vhci_hcd vhci_hcd.0: disconnect device [ 394.986305][ T5784] vhci_hcd vhci_hcd.0: stop threads [ 394.993379][ T5784] vhci_hcd vhci_hcd.0: release socket [ 395.006852][ T5784] vhci_hcd vhci_hcd.0: disconnect device [ 395.017161][ T5784] vhci_hcd vhci_hcd.0: stop threads [ 395.025324][ T5784] vhci_hcd vhci_hcd.0: release socket [ 395.031713][ T5784] vhci_hcd vhci_hcd.0: disconnect device [ 395.035995][ T5784] vhci_hcd vhci_hcd.0: stop threads [ 395.042037][ T5784] vhci_hcd vhci_hcd.0: release socket [ 395.046029][ T5784] vhci_hcd vhci_hcd.0: disconnect device [ 395.051496][T19940] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 395.175224][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 395.223386][T19940] vhci_hcd vhci_hcd.0: remove, state 4 [ 395.227596][T19940] usb usb37: USB disconnect, device number 1 [ 395.284313][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 395.302860][T19968] profile_transition: 13 callbacks suppressed [ 395.302879][T19968] profile_transition: unconfined exec no attachment [ 395.309923][T19968] apparmor_bprm_creds_for_exec: 13 callbacks suppressed [ 395.309942][T19968] apparmor_bprm_creds_for_exec: label build failed [ 395.404827][T19971] profile_transition: unconfined exec no attachment [ 395.404851][T19971] apparmor_bprm_creds_for_exec: label build failed [ 395.437118][ T9652] vhci_hcd vhci_hcd.0: stop threads [ 395.440974][ T9652] vhci_hcd vhci_hcd.0: release socket [ 395.445706][T19940] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 395.447711][ T9652] vhci_hcd vhci_hcd.0: disconnect device [ 395.458000][ T9652] vhci_hcd vhci_hcd.0: stop threads [ 395.468819][ T9652] vhci_hcd vhci_hcd.0: release socket [ 395.470667][ T9652] vhci_hcd vhci_hcd.0: disconnect device [ 395.491976][ T9652] vhci_hcd vhci_hcd.0: stop threads [ 395.499523][ T9652] ================================================================== [ 395.501984][ T9652] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection.cold+0x2f1/0x37c [ 395.504700][ T9652] Read of size 8 at addr ffff8880292409d0 by task kworker/u32:6/9652 [ 395.508958][ T9652] [ 395.510145][ T9652] CPU: 3 UID: 0 PID: 9652 Comm: kworker/u32:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.510162][ T9652] Tainted: [L]=SOFTLOCKUP [ 395.510166][ T9652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 395.510175][ T9652] Workqueue: usbip_event event_handler [ 395.510194][ T9652] Call Trace: [ 395.510200][ T9652] [ 395.510204][ T9652] dump_stack_lvl+0x100/0x190 [ 395.510219][ T9652] print_report+0x13d/0x4b0 [ 395.510235][ T9652] ? __virt_addr_valid+0x239/0x430 [ 395.510249][ T9652] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 395.510265][ T9652] kasan_report+0xdf/0x1c0 [ 395.510276][ T9652] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 395.510294][ T9652] vhci_shutdown_connection.cold+0x2f1/0x37c [ 395.510311][ T9652] event_handler+0x216/0x570 [ 395.510323][ T9652] process_one_work+0xa23/0x1940 [ 395.510343][ T9652] ? __pfx_process_one_work+0x10/0x10 [ 395.510362][ T9652] ? __pfx_event_handler+0x10/0x10 [ 395.510374][ T9652] worker_thread+0x5ef/0xe50 [ 395.510392][ T9652] ? kthread+0x13a/0x450 [ 395.510407][ T9652] ? __pfx_worker_thread+0x10/0x10 [ 395.510423][ T9652] kthread+0x373/0x450 [ 395.510437][ T9652] ? __pfx_kthread+0x10/0x10 [ 395.510453][ T9652] ret_from_fork+0x730/0xd60 [ 395.510467][ T9652] ? __pfx_ret_from_fork+0x10/0x10 [ 395.510481][ T9652] ? __switch_to+0x800/0x10f0 [ 395.510491][ T9652] ? __pfx_kthread+0x10/0x10 [ 395.510507][ T9652] ret_from_fork_asm+0x1a/0x30 [ 395.510525][ T9652] [ 395.510529][ T9652] [ 395.559658][ T9652] Allocated by task 1: [ 395.561046][ T9652] kasan_save_stack+0x30/0x50 [ 395.562612][ T9652] kasan_save_track+0x14/0x30 [ 395.564162][ T9652] __kasan_kmalloc+0xaa/0xb0 [ 395.565705][ T9652] __kmalloc_noprof+0x324/0x820 [ 395.567397][ T9652] __usb_create_hcd+0x5e/0xac0 [ 395.569454][ T9652] vhci_hcd_probe+0xf3/0x4e0 [ 395.571502][ T9652] platform_probe+0x106/0x1d0 [ 395.573700][ T9652] really_probe+0x241/0xa60 [ 395.575729][ T9652] __driver_probe_device+0x210/0x460 [ 395.578137][ T9652] driver_probe_device+0x4a/0x140 [ 395.580319][ T9652] __device_attach_driver+0x1df/0x320 [ 395.582448][ T9652] bus_for_each_drv+0x159/0x1e0 [ 395.584042][ T9652] __device_attach+0x1e4/0x4d0 [ 395.585549][ T9652] device_initial_probe+0xaf/0xd0 [ 395.587466][ T9652] bus_probe_device+0x64/0x160 [ 395.589537][ T9652] device_add+0x121d/0x1970 [ 395.591558][ T9652] platform_device_add+0x35a/0x800 [ 395.593828][ T9652] platform_device_register_full+0x507/0x720 [ 395.596505][ T9652] vhci_hcd_init+0x1a1/0x2f0 [ 395.598612][ T9652] do_one_initcall+0x11c/0x6f0 [ 395.600713][ T9652] kernel_init_freeable+0x6ea/0x7b0 [ 395.602936][ T9652] kernel_init+0x21/0x1e0 [ 395.604816][ T9652] ret_from_fork+0x730/0xd60 [ 395.606958][ T9652] ret_from_fork_asm+0x1a/0x30 [ 395.609001][ T9652] [ 395.610161][ T9652] Freed by task 19940: [ 395.611984][ T9652] kasan_save_stack+0x30/0x50 [ 395.614166][ T9652] kasan_save_track+0x14/0x30 [ 395.616256][ T9652] kasan_save_free_info+0x3b/0x70 [ 395.618150][ T9652] __kasan_slab_free+0x5f/0x80 [ 395.619758][ T9652] kfree+0x22b/0x6c0 [ 395.621063][ T9652] usb_put_hcd+0x149/0x1f0 [ 395.622560][ T9652] vhci_hcd_remove+0x107/0x1b0 [ 395.624253][ T9652] platform_remove+0x5f/0x80 [ 395.626328][ T9652] device_remove+0xcb/0x180 [ 395.628338][ T9652] device_release_driver_internal+0x44e/0x620 [ 395.631079][ T9652] unbind_store+0xf8/0x110 [ 395.633020][ T9652] drv_attr_store+0x74/0xb0 [ 395.635033][ T9652] sysfs_kf_write+0xf2/0x150 [ 395.637066][ T9652] kernfs_fop_write_iter+0x3e0/0x5f0 [ 395.639476][ T9652] vfs_write+0x6af/0x1050 [ 395.641401][ T9652] ksys_write+0x12a/0x250 [ 395.643412][ T9652] __do_fast_syscall_32+0x13a/0x8b0 [ 395.645541][ T9652] do_fast_syscall_32+0x32/0x70 [ 395.647260][ T9652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 395.649328][ T9652] [ 395.650239][ T9652] Last potentially related work creation: [ 395.652059][ T9652] kasan_save_stack+0x30/0x50 [ 395.653631][ T9652] kasan_record_aux_stack+0xa7/0xc0 [ 395.655395][ T9652] insert_work+0x36/0x230 [ 395.657047][ T9652] __queue_work+0x9bc/0x12b0 [ 395.659087][ T9652] queue_work_on+0x1a9/0x1e0 [ 395.661215][ T9652] usb_hcd_giveback_urb+0x330/0x4a0 [ 395.663439][ T9652] unlink1+0x418/0x510 [ 395.665357][ T9652] usb_hcd_unlink_urb+0x131/0x210 [ 395.667552][ T9652] usb_kill_urb+0x121/0x320 [ 395.669641][ T9652] hub_quiesce+0x1e9/0x320 [ 395.671624][ T9652] hub_suspend+0x4ab/0x9e0 [ 395.673730][ T9652] usb_suspend_both+0x288/0x950 [ 395.675930][ T9652] usb_runtime_suspend+0x49/0x120 [ 395.678219][ T9652] __rpm_callback+0xc8/0x620 [ 395.680230][ T9652] rpm_callback+0x11f/0x150 [ 395.682328][ T9652] rpm_suspend+0x2f4/0x1220 [ 395.684298][ T9652] __pm_runtime_suspend+0xba/0x1a0 [ 395.686605][ T9652] usb_runtime_idle+0x7e/0x90 [ 395.688646][ T9652] rpm_idle+0x322/0x790 [ 395.690546][ T9652] pm_runtime_work+0x120/0x150 [ 395.692646][ T9652] process_one_work+0xa23/0x1940 [ 395.694952][ T9652] worker_thread+0x5ef/0xe50 [ 395.697154][ T9652] kthread+0x373/0x450 [ 395.698994][ T9652] ret_from_fork+0x730/0xd60 [ 395.701051][ T9652] ret_from_fork_asm+0x1a/0x30 [ 395.703241][ T9652] [ 395.704364][ T9652] Second to last potentially related work creation: [ 395.707249][ T9652] kasan_save_stack+0x30/0x50 [ 395.709323][ T9652] kasan_record_aux_stack+0xa7/0xc0 [ 395.711662][ T9652] insert_work+0x36/0x230 [ 395.713604][ T9652] __queue_work+0x9bc/0x12b0 [ 395.715765][ T9652] queue_work_on+0x1a9/0x1e0 [ 395.717765][ T9652] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 395.720055][ T9652] usb_hcd_submit_urb+0xab7/0x2150 [ 395.722367][ T9652] usb_submit_urb+0x827/0x19b0 [ 395.724413][ T9652] usb_start_wait_urb+0x10e/0x580 [ 395.726265][ T9652] usb_control_msg+0x328/0x4b0 [ 395.728073][ T9652] hub_ext_port_status+0x152/0x600 [ 395.730069][ T9652] hub_event+0xc63/0x4420 [ 395.731951][ T9652] process_one_work+0xa23/0x1940 [ 395.734119][ T9652] worker_thread+0x5ef/0xe50 [ 395.736303][ T9652] kthread+0x373/0x450 [ 395.738150][ T9652] ret_from_fork+0x730/0xd60 [ 395.740311][ T9652] ret_from_fork_asm+0x1a/0x30 [ 395.742368][ T9652] [ 395.743384][ T9652] The buggy address belongs to the object at ffff888029240000 [ 395.743384][ T9652] which belongs to the cache kmalloc-8k of size 8192 [ 395.748268][ T9652] The buggy address is located 2512 bytes inside of [ 395.748268][ T9652] freed 8192-byte region [ffff888029240000, ffff888029242000) [ 395.753240][ T9652] [ 395.754348][ T9652] The buggy address belongs to the physical page: [ 395.757066][ T9652] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29240 [ 395.760328][ T9652] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 395.764050][ T9652] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 395.767309][ T9652] page_type: f5(slab) [ 395.768787][ T9652] raw: 00fff00000000040 ffff88801c043180 dead000000000122 0000000000000000 [ 395.771929][ T9652] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 395.775151][ T9652] head: 00fff00000000040 ffff88801c043180 dead000000000122 0000000000000000 [ 395.778505][ T9652] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 395.781335][ T9652] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 395.784207][ T9652] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 395.787175][ T9652] page dumped because: kasan: bad access detected [ 395.789374][ T9652] page_owner tracks the page as allocated [ 395.791221][ T9652] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6731929997, free_ts 0 [ 395.797827][ T9652] post_alloc_hook+0xfd/0x120 [ 395.799404][ T9652] get_page_from_freelist+0xf46/0x3500 [ 395.801272][ T9652] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 395.803199][ T9652] new_slab+0xa2/0x660 [ 395.804589][ T9652] refill_objects+0xe3/0x410 [ 395.806181][ T9652] __pcs_replace_empty_main+0x372/0x680 [ 395.808029][ T9652] __kmalloc_cache_noprof+0x47b/0x6b0 [ 395.809859][ T9652] rd_alloc_device+0x5e/0xc0 [ 395.811378][ T9652] target_alloc_device+0xa8/0x1a50 [ 395.812957][ T9652] core_dev_setup_virtual_lun0+0xff/0x260 [ 395.814761][ T9652] target_core_init_configfs+0x327/0x6a0 [ 395.816791][ T9652] do_one_initcall+0x11c/0x6f0 [ 395.818400][ T9652] kernel_init_freeable+0x6ea/0x7b0 [ 395.820037][ T9652] kernel_init+0x21/0x1e0 [ 395.821419][ T9652] ret_from_fork+0x730/0xd60 [ 395.822869][ T9652] ret_from_fork_asm+0x1a/0x30 [ 395.824345][ T9652] page_owner free stack trace missing [ 395.826272][ T9652] [ 395.827143][ T9652] Memory state around the buggy address: [ 395.829026][ T9652] ffff888029240880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 395.831791][ T9652] ffff888029240900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 395.834675][ T9652] >ffff888029240980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 395.837944][ T9652] ^ [ 395.840286][ T9652] ffff888029240a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 395.843447][ T9652] ffff888029240a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 395.846769][ T9652] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 396.124378][T19976] profile_transition: unconfined exec no attachment [ 396.124401][T19976] apparmor_bprm_creds_for_exec: label build failed [ 396.254961][ T9652] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 396.257881][ T9652] CPU: 2 UID: 0 PID: 9652 Comm: kworker/u32:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.261682][ T9652] Tainted: [L]=SOFTLOCKUP [ 396.263387][ T9652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.267056][ T9652] Workqueue: usbip_event event_handler [ 396.268792][ T9652] Call Trace: [ 396.270110][ T9652] [ 396.271279][ T9652] dump_stack_lvl+0x100/0x190 [ 396.273303][ T9652] vpanic+0x553/0x970 [ 396.274856][ T9652] ? __pfx_vpanic+0x10/0x10 [ 396.276589][ T9652] ? mark_held_locks+0x40/0x70 [ 396.278091][ T9652] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 396.280578][ T9652] panic+0xd1/0xe0 [ 396.282075][ T9652] ? __pfx_panic+0x10/0x10 [ 396.283881][ T9652] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 396.286328][ T9652] ? preempt_schedule_common+0x3c/0xb0 [ 396.288495][ T9652] check_panic_on_warn.cold+0x19/0x34 [ 396.290238][ T9652] end_report.part.0+0x3a/0x90 [ 396.291810][ T9652] kasan_report.cold+0xe/0x18 [ 396.293607][ T9652] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 396.296009][ T9652] vhci_shutdown_connection.cold+0x2f1/0x37c [ 396.298152][ T9652] event_handler+0x216/0x570 [ 396.299872][ T9652] process_one_work+0xa23/0x1940 [ 396.301860][ T9652] ? __pfx_process_one_work+0x10/0x10 [ 396.304079][ T9652] ? __pfx_event_handler+0x10/0x10 [ 396.306119][ T9652] worker_thread+0x5ef/0xe50 [ 396.307685][ T9652] ? kthread+0x13a/0x450 [ 396.309468][ T9652] ? __pfx_worker_thread+0x10/0x10 [ 396.311523][ T9652] kthread+0x373/0x450 [ 396.313118][ T9652] ? __pfx_kthread+0x10/0x10 [ 396.314549][ T9652] ret_from_fork+0x730/0xd60 [ 396.316284][ T9652] ? __pfx_ret_from_fork+0x10/0x10 [ 396.318402][ T9652] ? __switch_to+0x800/0x10f0 [ 396.320356][ T9652] ? __pfx_kthread+0x10/0x10 [ 396.322227][ T9652] ret_from_fork_asm+0x1a/0x30 [ 396.324038][ T9652] [ 396.325930][ T9652] Dumping ftrace buffer: [ 396.327610][ T9652] (ftrace buffer empty) [ 396.329408][ T9652] Kernel Offset: disabled [ 396.331021][ T9652] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:03:52 Registers: info registers vcpu 0 CPU#0 RAX=000000f0b8509786 RBX=ffff88802b223d80 RCX=00000000000006e0 RDX=00000000000000f0 RSI=ffffffff81f9e245 RDI=ffff88801d350000 RBP=0000005c0f8e3ae9 RSP=ffffc90000007da8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000000fbf R13=0000000000000001 R14=0000000000000001 R15=ffff88802b223dc0 RIP=ffffffff81f9e258 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880969cf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000003001eff8 CR3=0000000029c71000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cb52580 RSI=ffffffff81b56e9e RDI=ffff88801cb52580 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b56e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096acf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033315ff8 CR3=000000000eb94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000004 RCX=0000000000000201 RDX=ffff888028fda580 RSI=ffffffff852865da RDI=ffff888028fda580 RBP=0000000000000040 RSP=ffffc900278df190 R8 =0000000000000001 R9 =0000000000000040 R10=0000000000000040 R11=0000000000000000 R12=ffffffff8c606153 R13=0000000000000040 R14=0000000000000003 R15=0000000085c9c531 RIP=ffffffff820a2adb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6920963300 ffffffff 00c00000 GS =0000 ffff888096bcf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005567bf2ed000 CR3=0000000051d65000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001852 0000001c00000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800029003000800 0288030800000119 0000000300000000 0000000200000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8803000400118403 0202001182030402 0011800302080004 8002040800010000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080608010e9e1f fffffffe08000480 0310078006051006 8004050805800205 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0780020680020580 020280022008000a 0077de0000000000 0000000000000001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff e70802b803000800 02b00300080002a0 0300080002980300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040011cc03000400 11c80300100011b8 0300080011b00300 080011a8030fffff ZMM25=5f9160c65f9160c6 5f9160c65f9160c6 5f9160c65f9160c6 5f9160c65f9160c6 5f9160c65f9160c6 5f9160c65f9160c6 5f9160c65f9160c6 5f9160c65f9160c6 ZMM26=6b7fecc86b7fecc8 6b7fecc86b7fecc8 6b7fecc86b7fecc8 6b7fecc86b7fecc8 6b7fecc86b7fecc8 6b7fecc86b7fecc8 6b7fecc86b7fecc8 6b7fecc86b7fecc8 ZMM27=cdb59b97cdb59b97 cdb59b97cdb59b97 cdb59b97cdb59b97 cdb59b97cdb59b97 cdb59b97cdb59b97 cdb59b97cdb59b97 cdb59b97cdb59b97 cdb59b97cdb59b97 ZMM28=000001b0000001af 000001ae000001ad 000001ac000001ab 000001aa000001a9 000001a8000001a7 000001a6000001a5 000001a4000001a3 000001a2000001a1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c6320000c6320000 c6320000c6320000 c6320000c6320000 c6320000c6320000 c6320000c6320000 c6320000c6320000 c6320000c6320000 c6320000c6320000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a33c75 RDI=ffffffff9bbe79a0 RBP=ffffffff9bbe7960 RSP=ffffc90006b3f5d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035363954 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b8e71ea R15=ffffffff85a33c10 RIP=ffffffff85a33c9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ccf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f49b632078 CR3=0000000024aca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000003 Opmask01=0000000000000001 Opmask02=0000000000040000 Opmask03=0000000000000000 Opmask04=00000000fffbffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc602272cb 00007ffc602272cb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc602277d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc602277d0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69636876205d3235 363954205b5d3736 363037342e353933 20205b3e363c0000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6363627620573235 3633542051573736 3630373424353333 2020513436360000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636876206463685f 69636876205d3034 393931545b5d3630 373534342e353933 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d6f6e72726520 303d736572203131 3935313d6f6e6920 227366737973223d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642022746e65 766575223d656d61 6e20226476656475 223d6d6d6f632064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c6961663d6573 7561632061746164 5f7463656c6c6f63 3d706f2064656e69 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666e6f636e755f3d 6a62757320353932 373639343932343d 7365732035393237 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000