last executing test programs: 4m4.508151209s ago: executing program 0 (id=25): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) 4m4.43680691s ago: executing program 0 (id=26): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) (async) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x1, 0x4, 0x3, 0x3e, 0xfffffff7, 0x1db, 0x40, 0x223, 0x2, 0x6, 0x38, 0x1, 0x74, 0x7, 0x104}, [{0x6474e551, 0x3, 0x8, 0x3, 0x8000000000006, 0xffffffff, 0xffffffff00000001, 0x7}], "d44997a15dc48f2e5b625f0afb7fd28fc104843a288ac325b16059505df2ee2b5392bc696aa3eb78bd1a339a73e7151d93ea6ea48da6a3c2410dcfd758fe8c1d2cffd391d5c59bd1452774b2b9b10900c032aab3335b889a86c69f3df57673bfde16cae13e96da7a7e6324d0d775f7fd315f2ec303bd96beb98a00000000111a15aa039e00000000e2969ad40000000000", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb09) (async) close(r0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4m4.435155023s ago: executing program 0 (id=27): r0 = open(&(0x7f0000000040)='./file0\x00', 0x2a5c0, 0x148) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{r2, r3/1000+10000}, {0x0, 0xea60}}, 0x100) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4m4.357895557s ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ftruncate(0xffffffffffffffff, 0x4a8e) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x161200, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x4000, 0x4) syz_emit_ethernet(0x4e, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x5bf241, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000340)={0x0, 0x0, 0xc2082, 0xa, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r5, 0x0, 0x0, 0x0, 0x40000000}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) write(r4, &(0x7f0000000040)="bc20", 0x2) 4m4.278076771s ago: executing program 0 (id=30): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c016}, 0x40000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x600) 4m1.975159188s ago: executing program 0 (id=52): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000040)=[{0xb, 0x7, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x5}, {0x5, 0x8, 0x0, 0x1, 0x6}, {0x8, 0x9, 0x7, 0x7fff, 0x7}], 0x3, 0x28, 0x0, 0x6}) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 4m1.955820203s ago: executing program 32 (id=52): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000040)=[{0xb, 0x7, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x5}, {0x5, 0x8, 0x0, 0x1, 0x6}, {0x8, 0x9, 0x7, 0x7fff, 0x7}], 0x3, 0x28, 0x0, 0x6}) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 3m47.498036155s ago: executing program 1 (id=298): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x9, {0x1, 0x800, 0x0, {0x5, 0x4, 0x5, 0x0, 0x90, 0x1, 0xf, 0x4, 0x8, 0x8000, 0x6, r3, r4, 0x8, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffbfe, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a40), r7) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r8, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xa4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x9d, 0x7ff, 0x6, 0x8000000000000001}) close(r1) write$FUSE_ATTR(r5, &(0x7f0000006240)={0x78, 0x0, 0x0, {0x6, 0x6, 0x0, {0x2, 0x98, 0x0, 0x6, 0x100, 0xe3, 0xb9, 0x1, 0x91, 0x2000, 0x7, r3, 0x0, 0x40}}}, 0x78) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') read$FUSE(r9, &(0x7f0000004d00)={0x2020}, 0x2020) 3m46.638578204s ago: executing program 1 (id=306): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0xc, 0x7fff, {0x55, 0x2380, 0xa86, {0x8000, 0x1ff}, {0x8, 0x5}, @const={0x5, {0x8, 0x24eb, 0x3, 0x5000}}}, {0x56, 0x6, 0x4, {0x8, 0x9}, {0x3, 0x7}, @cond=[{0x9, 0x8318, 0x343, 0x5, 0x4, 0x3}, {0xa5e8, 0x1, 0x8e3, 0x3, 0x0, 0x8}]}}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x400) r3 = dup3(r2, r0, 0x80000) read$FUSE(r3, &(0x7f0000004040)={0x2020}, 0x2020) 3m45.77831713s ago: executing program 1 (id=333): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x601281, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfff7ffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xffffffff, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000000)={0x0, 0x4, 0x3, 0x6, 0x2, 0x87a9, 0x1, 0x5, 0xfffffffffffffffb, 0x7fff, 0x684d275, 0x1000000}) 3m45.717368516s ago: executing program 1 (id=336): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 3m45.717085673s ago: executing program 1 (id=338): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) flistxattr(r0, 0x0, 0x0) 3m45.358362097s ago: executing program 1 (id=347): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="228910986213087e9e739662c9f1256051a4ffec12caaea0f57e85477ca95cbb44bd35a958a1c2121c99fa32f501cb610db9d002453a9ccf0d3af9a631a7720bd2eaeb9a29c02da460cc856fcc24ef2ab3e80feac7e937b4677748ba20317471e5cedb30f519639a013c55ab285a8c2f12bdb88db1052d63a908b21437a1e7b622c7", 0x82) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$P9_RGETATTR(r2, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x820, {0x40, 0x4, 0x6}, 0x10c, 0x0, 0x0, 0x1, 0x40, 0x7f, 0x11bb, 0x765e, 0xffffffffffffffff, 0x4, 0xb2a, 0x9, 0x1ff, 0x10, 0x7, 0xb09, 0x3}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m45.315098801s ago: executing program 33 (id=347): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="228910986213087e9e739662c9f1256051a4ffec12caaea0f57e85477ca95cbb44bd35a958a1c2121c99fa32f501cb610db9d002453a9ccf0d3af9a631a7720bd2eaeb9a29c02da460cc856fcc24ef2ab3e80feac7e937b4677748ba20317471e5cedb30f519639a013c55ab285a8c2f12bdb88db1052d63a908b21437a1e7b622c7", 0x82) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$P9_RGETATTR(r2, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x820, {0x40, 0x4, 0x6}, 0x10c, 0x0, 0x0, 0x1, 0x40, 0x7f, 0x11bb, 0x765e, 0xffffffffffffffff, 0x4, 0xb2a, 0x9, 0x1ff, 0x10, 0x7, 0xb09, 0x3}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.813958471s ago: executing program 4 (id=987): syz_emit_ethernet(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 24.874946748s ago: executing program 4 (id=990): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) 24.037047526s ago: executing program 4 (id=993): setns(0xc9, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) dup(0xffffffffffffffff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0'}, 0xb) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x4004800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)) 23.174858822s ago: executing program 4 (id=997): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 21.268456164s ago: executing program 4 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) lchown(&(0x7f0000000a00)='./file0\x00', 0x0, 0x0) 18.912279641s ago: executing program 4 (id=1004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}}, 0x0) 15.632180111s ago: executing program 5 (id=1006): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 15.116285485s ago: executing program 5 (id=1009): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13.99747499s ago: executing program 3 (id=1011): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYRES32=r0, @ANYBLOB="0a0006000802110000010000060066008e880000"], 0x4c}}, 0x0) listns(0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x402) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000000, 0x0, 0x3, 0xa, 0xefd, 0x7ffe, 0x1, 0x13, 0x400, 0x4000002, 0x13, 0xbd55, 0xffffffa7, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa16, 0x1, 0x4, 0x0, 0x7, 0xf58, 0xffffffff]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 13.547584634s ago: executing program 5 (id=1013): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002600030328bd7000fedbff251f"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000844) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) 12.062601397s ago: executing program 5 (id=1014): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000940)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) 11.241840545s ago: executing program 5 (id=1016): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9.892570785s ago: executing program 2 (id=1018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) r1 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) ioctl$sock_SIOCADDDLCI(r1, 0x8980, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044828, &(0x7f0000000040)={0x2, 0x4f23, @private=0xa010101}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000d4c0), 0x0, 0x91) read$FUSE(0xffffffffffffffff, &(0x7f00000075c0)={0x2020}, 0x2020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x6, 0x5, 0x6, 0x0, 0xffffffffffffffff, 0x8d9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, r4, 0x301, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 9.320593857s ago: executing program 3 (id=1019): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/19, 0x13}], 0x1}, 0xf1a2}, {{0x0, 0x0, 0x0}, 0x200}], 0x2, 0x0, 0x0) 9.319902771s ago: executing program 2 (id=1020): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20000800) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 8.36901562s ago: executing program 2 (id=1021): openat$panthor(0xffffffffffffff9c, &(0x7f0000001f40), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x9) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xa) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.368596267s ago: executing program 3 (id=1022): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0x14c, 0x0, 0x0) 7.358783791s ago: executing program 3 (id=1023): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) 6.645320553s ago: executing program 2 (id=1024): syz_emit_ethernet(0x14e, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x118, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x1a, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9c, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa3"}, @ra, @generic, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r4, {0xeffe068f8514295, 0xfff2}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}}], 0x2, 0x880) shutdown(r5, 0x1) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x0, 0x1, 0x80}, 0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000380)={0x0, 0xfff}, 0x8) sendmsg$can_bcm(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000540)={0x2, 0xb91, 0x6, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "31f30a6a5cf99319e230c9652b48569c555bdb4d56707686efd7798ebf93b8268a4e6da92b4d6436d6de154e3c904f8c0ef09644a56700ec447ce9ccf3e973a7"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000200020000840900020073797a310000000005000100070000002800074c7566f206a3046240fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r9, 0x308, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x0) 5.337236062s ago: executing program 3 (id=1025): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)) 4.390210685s ago: executing program 3 (id=1026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 4.262082874s ago: executing program 2 (id=1027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650", 0x1a}, {0x0}], 0x3) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) 2.55608998s ago: executing program 5 (id=1028): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0xce20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x40}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/220, 0xdc}, 0x5}], 0x1, 0x60010000, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 0s ago: executing program 2 (id=1029): socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xfffffffffffffe13, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): 77, setting to 8 [ 49.835030][ T5838] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.835047][ T5838] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 49.835058][ T5838] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 49.837449][ T5838] usb 7-1: string descriptor 0 read error: -22 [ 49.837504][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.864290][ T5838] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 49.919571][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 49.937357][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 50.115387][ T5825] usb 7-1: USB disconnect, device number 2 [ 50.183959][ T5962] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 50.183997][ T5962] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 50.185173][ T5962] vhci_hcd vhci_hcd.0: Device attached [ 50.186564][ T5963] vhci_hcd: connection closed [ 50.188706][ T5783] vhci_hcd vhci_hcd.2: stop threads [ 50.188846][ T5783] vhci_hcd vhci_hcd.2: release socket [ 50.188861][ T5783] vhci_hcd vhci_hcd.2: disconnect device [ 50.568949][ T5981] process 'syz.0.26' launched './file0' with NULL argv: empty string added [ 50.570773][ T5980] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 50.584934][ T5979] process '/newroot/5/file0' started with executable stack [ 50.831087][ T5994] 0x000000000080-0x000000020000 : "" [ 50.835940][ T5994] ftl_cs: FTL header corrupt! [ 50.879843][ T5731] Bluetooth: hci2: command tx timeout [ 50.879959][ T5744] Bluetooth: hci1: command tx timeout [ 50.880006][ T5744] Bluetooth: hci0: command tx timeout [ 50.904369][ T5997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.33'. [ 50.905797][ T5997] tipc: Invalid UDP bearer configuration [ 50.905837][ T5997] tipc: Enabling of bearer rejected, failed to enable media [ 50.910092][ T5997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=5997 comm=syz.2.33 [ 50.929637][ T5997] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 51.046142][ T6005] netlink: 52 bytes leftover after parsing attributes in process `syz.2.36'. [ 51.070168][ T6005] jffs2: notice: (6005) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.081369][ T6005] openvswitch: netlink: Invalid VLAN frame [ 51.186370][ T6014] SELinux: failed to load policy [ 51.186402][ T6013] ======================================================= [ 51.186402][ T6013] WARNING: The mand mount option has been deprecated and [ 51.186402][ T6013] and is ignored by this kernel. Remove the mand [ 51.186402][ T6013] option from the mount to silence this warning. [ 51.186402][ T6013] ======================================================= [ 51.195502][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 51.195533][ T6013] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 51.275440][ T6026] warning: `syz.1.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.353754][ T6029] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 51.407279][ T6033] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 51.515617][ T6039] cgroup: Invalid name [ 52.091006][ T6024] orangefs_mount: mount request failed with -4 [ 52.106337][ T43] kauditd_printk_skb: 126 callbacks suppressed [ 52.106402][ T43] audit: type=1400 audit(1788291137.815:292): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 52.389259][ T1690] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.447706][ T6049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=127 sclass=netlink_route_socket pid=6049 comm=syz.1.48 [ 52.543533][ T1690] usb 7-1: New USB device found, idVendor=0499, idProduct=1028, bcdDevice=32.06 [ 52.544409][ T1690] usb 7-1: config 10 has an invalid interface number: 159 but max is 1 [ 52.544423][ T1690] usb 7-1: config 10 has an invalid interface number: 142 but max is 1 [ 52.544436][ T1690] usb 7-1: config 10 has no interface number 0 [ 52.544444][ T1690] usb 7-1: config 10 has no interface number 1 [ 52.544473][ T1690] usb 7-1: config 10 interface 159 altsetting 74 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 52.544492][ T1690] usb 7-1: config 10 interface 142 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 52.544504][ T1690] usb 7-1: config 10 interface 142 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 52.544515][ T1690] usb 7-1: config 10 interface 142 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 52.544531][ T1690] usb 7-1: config 10 interface 142 altsetting 0 endpoint 0x5 has an invalid bInterval 246, changing to 11 [ 52.544545][ T1690] usb 7-1: config 10 interface 142 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 52.544557][ T1690] usb 7-1: config 10 interface 142 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 52.544569][ T1690] usb 7-1: config 10 interface 159 has no altsetting 0 [ 52.547258][ T1690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.547273][ T1690] usb 7-1: Product: syz [ 52.547281][ T1690] usb 7-1: Manufacturer: 緲酎茉龉☔䂵ಐ蟐⼨홓愾䯌ᣤ꾋ළ飫邵륱覂馽鋡๩㊓ǽ霈ӿ㴹ꃋ瘂蕃볳㥑ㆊ㌯퍧Ꮂ㽊孺䄣釽㮪귄ꌒ㊢㝩楈㬏끎슯够皋柘㧭㇚堫鋫䵣ᅐ欕霍ᴽ鉙旬塰옥閫ھ㚧嶻竎祹姠쩿蜓ꞁ棒䐀兀敎ꨳ䨉僛灢⃴혤ٍ嵜匈䨢࢞吜ꁮ़䬞声ᵙ헉ﳕ [ 52.547298][ T1690] usb 7-1: SerialNumber: syz [ 52.567881][ T43] audit: type=1400 audit(1788291138.275:293): avc: denied { unlink } for pid=6053 comm="syz.1.49" name="#1" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.586331][ T6054] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 52.594002][ T6054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.595042][ T6054] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 52.616896][ T6054] evm: overlay not supported [ 52.629888][ T5783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.663654][ T43] audit: type=1400 audit(1788291138.375:294): avc: denied { mount } for pid=6055 comm="syz.1.50" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.663934][ T5731] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 52.663954][ T5731] CPU: 0 UID: 0 PID: 5731 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) [ 52.663976][ T5731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.663989][ T5731] Workqueue: hci0 hci_rx_work [ 52.664030][ T5731] Call Trace: [ 52.664038][ T5731] [ 52.664045][ T5731] dump_stack_lvl+0x100/0x190 [ 52.664075][ T5731] sysfs_warn_dup.cold+0x1c/0x28 [ 52.664105][ T5731] sysfs_create_dir_ns+0x24b/0x2b0 [ 52.664148][ T5731] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 52.664171][ T5731] ? find_held_lock+0x2b/0x80 [ 52.664197][ T5731] ? kobject_add_internal+0x25f/0x930 [ 52.664219][ T5731] ? kobject_add_internal+0x25f/0x930 [ 52.664244][ T5731] ? do_raw_spin_unlock+0x145/0x1e0 [ 52.664259][ T5731] kobject_add_internal+0x2c8/0x930 [ 52.664279][ T5731] kobject_add+0x16a/0x1e0 [ 52.664302][ T5731] ? __pfx_kobject_add+0x10/0x10 [ 52.664325][ T5731] ? class_to_subsys+0x10f/0x150 [ 52.664350][ T5731] ? kobject_put+0xb9/0x640 [ 52.664371][ T5731] ? _raw_spin_unlock+0x28/0x50 [ 52.664406][ T5731] device_add+0x294/0x1970 [ 52.664428][ T5731] ? __pfx_dev_set_name+0x10/0x10 [ 52.664451][ T5731] ? __pfx_device_add+0x10/0x10 [ 52.664473][ T5731] ? mgmt_send_event_skb+0x2fb/0x460 [ 52.664501][ T5731] hci_conn_add_sysfs+0x1a3/0x260 [ 52.664524][ T5731] le_conn_complete_evt+0x122f/0x2130 [ 52.664558][ T5731] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 52.664584][ T5731] ? hci_event_packet+0x186/0xcd0 [ 52.664610][ T5731] ? hci_event_packet+0x186/0xcd0 [ 52.664643][ T5731] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 52.664680][ T5731] ? skb_pull_data+0x15f/0x1e0 [ 52.664708][ T5731] hci_le_meta_evt+0x34a/0x5f0 [ 52.664729][ T5731] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 52.664761][ T5731] hci_event_packet+0x51c/0xcd0 [ 52.664790][ T5731] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 52.664858][ T5731] ? __pfx_hci_event_packet+0x10/0x10 [ 52.664904][ T5731] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.664930][ T5731] hci_rx_work+0x451/0xfc0 [ 52.664962][ T5731] process_one_work+0xac7/0x1b10 [ 52.665000][ T5731] ? __pfx_process_one_work+0x10/0x10 [ 52.665025][ T5731] ? lock_acquire+0x1d1/0x380 [ 52.665048][ T5731] ? __pfx_hci_rx_work+0x10/0x10 [ 52.665073][ T5731] worker_thread+0x5ef/0xe50 [ 52.665103][ T5731] ? kthread+0x13a/0x450 [ 52.665126][ T5731] ? __pfx_worker_thread+0x10/0x10 [ 52.665149][ T5731] kthread+0x373/0x450 [ 52.665170][ T5731] ? __pfx_kthread+0x10/0x10 [ 52.665195][ T5731] ret_from_fork+0x730/0xd60 [ 52.665216][ T5731] ? __pfx_ret_from_fork+0x10/0x10 [ 52.665236][ T5731] ? __switch_to+0x800/0x10f0 [ 52.665261][ T5731] ? __pfx_kthread+0x10/0x10 [ 52.665286][ T5731] ret_from_fork_asm+0x1a/0x30 [ 52.665317][ T5731] [ 52.666463][ T5731] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 52.666498][ T5731] Bluetooth: hci0: failed to register connection device [ 52.667473][ T43] audit: type=1400 audit(1788291138.375:295): avc: denied { read write } for pid=6055 comm="syz.1.50" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.667677][ T43] audit: type=1400 audit(1788291138.375:296): avc: denied { open } for pid=6055 comm="syz.1.50" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.668280][ T43] audit: type=1400 audit(1788291138.375:297): avc: denied { read append } for pid=6055 comm="syz.1.50" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.668304][ T43] audit: type=1400 audit(1788291138.375:298): avc: denied { open } for pid=6055 comm="syz.1.50" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.734877][ T6058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.734948][ T6058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.744563][ T6058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.750305][ T6058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.755462][ T6058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 52.755494][ T6058] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.757811][ T6058] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.765015][ T6058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.765065][ T6058] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.773387][ T6058] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.793414][ T5783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.815948][ T43] audit: type=1400 audit(1788291138.525:299): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.836965][ T1690] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 52.844096][ T1690] snd-usb-audio 7-1:10.159: probe with driver snd-usb-audio failed with error -2 [ 52.850737][ T5783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.856098][ T1690] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 52.856312][ T1690] usb 7-1: invalid MIDI in EP 0 [ 52.874373][ T43] audit: type=1400 audit(1788291138.585:300): avc: denied { search } for pid=5444 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.874501][ T43] audit: type=1400 audit(1788291138.585:301): avc: denied { search } for pid=5444 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.916311][ T1690] snd-usb-audio 7-1:10.142: probe with driver snd-usb-audio failed with error -22 [ 52.921513][ T1690] usb 7-1: USB disconnect, device number 3 [ 52.946640][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:10.142/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 52.978437][ T5783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.157982][ T5783] bridge_slave_1: left allmulticast mode [ 53.158074][ T5783] bridge_slave_1: left promiscuous mode [ 53.160263][ T5733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.161877][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.164212][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.165249][ T5733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.166732][ T6083] xt_hl: Unknown Hop Limit match mode: 206 [ 53.168679][ T5733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.170875][ T5733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.187440][ T5783] bridge_slave_0: left allmulticast mode [ 53.187526][ T5783] bridge_slave_0: left promiscuous mode [ 53.189922][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.286610][ T6098] fuse: Unknown parameter '0x000000000000000d' [ 53.302058][ T5783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.313920][ T5783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.320878][ T5783] bond0 (unregistering): Released all slaves [ 53.418716][ T6114] syz.3.57 uses obsolete (PF_INET,SOCK_PACKET) [ 53.513166][ T6125] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.534787][ T6129] Bluetooth: MGMT ver 1.23 [ 53.553092][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 53.553159][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 53.808921][ T5783] hsr_slave_0: left promiscuous mode [ 53.814068][ T5783] hsr_slave_1: left promiscuous mode [ 53.814517][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.814555][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.827130][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.829605][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.844147][ T5783] veth1_macvtap: left promiscuous mode [ 53.844235][ T5783] veth0_macvtap: left promiscuous mode [ 53.844286][ T5783] veth1_vlan: left promiscuous mode [ 53.844326][ T5783] veth0_vlan: left promiscuous mode [ 53.850811][ T5733] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 54.005221][ T5783] team0 (unregistering): Port device team_slave_1 removed [ 54.013442][ T5783] team0 (unregistering): Port device team_slave_0 removed [ 54.106532][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.161056][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.161170][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.161438][ T6081] bridge_slave_0: entered allmulticast mode [ 54.162334][ T6081] bridge_slave_0: entered promiscuous mode [ 54.165093][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 54.165111][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.65'. [ 54.181497][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.181582][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.182084][ T6081] bridge_slave_1: entered allmulticast mode [ 54.182934][ T6081] bridge_slave_1: entered promiscuous mode [ 54.186327][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 54.193120][ T5808] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.193158][ T5808] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.193188][ T5808] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.193217][ T5808] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.256165][ T6081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.267630][ T6081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.293920][ T6081] team0: Port device team_slave_0 added [ 54.295203][ T6081] team0: Port device team_slave_1 added [ 54.335033][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.335072][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.335299][ T6081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.351910][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.351921][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.351933][ T6081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.374390][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 54.385275][ T6185] SELinux: syz.3.69 (6185) wrote to user. This is no longer supported. [ 54.443674][ T6081] hsr_slave_0: entered promiscuous mode [ 54.453162][ T6081] hsr_slave_1: entered promiscuous mode [ 54.455768][ T6081] debugfs: 'hsr0' already exists in 'hsr' [ 54.458023][ T6081] Cannot create hsr debugfs directory [ 54.500230][ T6190] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 54.507037][ T6190] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.546087][ T6195] 8021q: VLANs not supported on ipvlan0 [ 54.662373][ T6081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.665070][ T6081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.665629][ T6081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.671741][ T6081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.672845][ T6081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.676097][ T6081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.678857][ T6081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.683538][ T6081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.684701][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 54.735977][ T6081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.748046][ T6081] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.751201][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.751289][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.754883][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.754968][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.800005][ T5733] Bluetooth: hci1: command 0x0419 tx timeout [ 54.800070][ T5733] Bluetooth: hci0: command 0x0419 tx timeout [ 54.857523][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.020426][ T6081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.090235][ T6248] overlayfs: overlapping lowerdir path [ 55.197500][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.211384][ T5731] Bluetooth: hci3: command tx timeout [ 55.216616][ T6081] veth0_vlan: entered promiscuous mode [ 55.222305][ T6081] veth1_vlan: entered promiscuous mode [ 55.235500][ T6081] veth0_macvtap: entered promiscuous mode [ 55.241582][ T6081] veth1_macvtap: entered promiscuous mode [ 55.254772][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.262464][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.309703][ T5783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.310031][ T5783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.310330][ T5783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.310379][ T5783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.333668][ T325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.333726][ T325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.356750][ T325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.356810][ T325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.368522][ T6266] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 55.370789][ T6266] tipc: Started in network mode [ 55.370803][ T6266] tipc: Node identity 1000001, cluster identity 4369 [ 55.370813][ T6266] tipc: Node number set to 16777217 [ 55.371850][ T6266] tipc: Cannot configure node identity twice [ 55.372097][ T6266] __nla_validate_parse: 3 callbacks suppressed [ 55.372109][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 55.373341][ T6266] tipc: New replicast peer: 127.0.0.1 [ 55.373667][ T6266] tipc: Enabled bearer , priority 10 [ 55.409295][ T6272] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 55.490284][ T6280] No source specified [ 55.694062][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 55.785900][ T6297] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 55.858300][ T6299] netlink: 52 bytes leftover after parsing attributes in process `syz.3.89'. [ 56.283047][ T5731] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 56.283118][ T5731] CPU: 0 UID: 0 PID: 5731 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) [ 56.283154][ T5731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.283170][ T5731] Workqueue: hci3 hci_rx_work [ 56.283203][ T5731] Call Trace: [ 56.283208][ T5731] [ 56.283216][ T5731] dump_stack_lvl+0x100/0x190 [ 56.283245][ T5731] sysfs_warn_dup.cold+0x1c/0x28 [ 56.283270][ T5731] sysfs_create_dir_ns+0x24b/0x2b0 [ 56.283291][ T5731] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 56.283310][ T5731] ? find_held_lock+0x2b/0x80 [ 56.283333][ T5731] ? kobject_add_internal+0x25f/0x930 [ 56.283356][ T5731] ? kobject_add_internal+0x25f/0x930 [ 56.283381][ T5731] ? do_raw_spin_unlock+0x145/0x1e0 [ 56.283403][ T5731] kobject_add_internal+0x2c8/0x930 [ 56.283429][ T5731] kobject_add+0x16a/0x1e0 [ 56.283451][ T5731] ? __pfx_kobject_add+0x10/0x10 [ 56.283471][ T5731] ? class_to_subsys+0x10f/0x150 [ 56.283494][ T5731] ? kobject_put+0xb9/0x640 [ 56.283516][ T5731] ? _raw_spin_unlock+0x28/0x50 [ 56.283556][ T5731] device_add+0x294/0x1970 [ 56.283577][ T5731] ? __pfx_dev_set_name+0x10/0x10 [ 56.283598][ T5731] ? __pfx_device_add+0x10/0x10 [ 56.283617][ T5731] ? mgmt_send_event_skb+0x2fb/0x460 [ 56.283641][ T5731] hci_conn_add_sysfs+0x1a3/0x260 [ 56.283661][ T5731] le_conn_complete_evt+0x122f/0x2130 [ 56.283692][ T5731] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 56.283716][ T5731] ? hci_event_packet+0x186/0xcd0 [ 56.283746][ T5731] hci_le_conn_complete_evt+0x23c/0x3a0 [ 56.283773][ T5731] ? skb_pull_data+0x15f/0x1e0 [ 56.283796][ T5731] hci_le_meta_evt+0x34a/0x5f0 [ 56.283816][ T5731] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 56.283850][ T5731] hci_event_packet+0x51c/0xcd0 [ 56.283876][ T5731] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 56.283894][ T5731] ? __pfx_hci_event_packet+0x10/0x10 [ 56.283923][ T5731] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.283946][ T5731] hci_rx_work+0x451/0xfc0 [ 56.283974][ T5731] process_one_work+0xac7/0x1b10 [ 56.284008][ T5731] ? __pfx_process_one_work+0x10/0x10 [ 56.284033][ T5731] ? lock_acquire+0x1d1/0x380 [ 56.284056][ T5731] ? __pfx_hci_rx_work+0x10/0x10 [ 56.284083][ T5731] worker_thread+0x5ef/0xe50 [ 56.284116][ T5731] ? kthread+0x13a/0x450 [ 56.284137][ T5731] ? __pfx_worker_thread+0x10/0x10 [ 56.284160][ T5731] kthread+0x373/0x450 [ 56.284181][ T5731] ? __pfx_kthread+0x10/0x10 [ 56.284204][ T5731] ret_from_fork+0x730/0xd60 [ 56.284224][ T5731] ? __pfx_ret_from_fork+0x10/0x10 [ 56.284243][ T5731] ? __switch_to+0x800/0x10f0 [ 56.284265][ T5731] ? __pfx_kthread+0x10/0x10 [ 56.284289][ T5731] ret_from_fork_asm+0x1a/0x30 [ 56.284319][ T5731] [ 56.284389][ T5731] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 56.284419][ T5731] Bluetooth: hci3: failed to register connection device [ 56.341259][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 56.440614][ T6322] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 56.804375][ T6333] Illegal XDP return value 4294967274 on prog (id 13) dev N/A, expect packet loss! [ 56.879887][ T5733] Bluetooth: hci0: command 0x0419 tx timeout [ 56.879908][ T5731] Bluetooth: hci1: command 0x0419 tx timeout [ 56.913789][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 56.913921][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 56.987808][ T6344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.101'. [ 56.988335][ T6344] Unknown options in mask b7f2 [ 57.046683][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.101'. [ 57.139816][ T43] kauditd_printk_skb: 99 callbacks suppressed [ 57.139870][ T43] audit: type=1400 audit(1788291142.855:401): avc: denied { write } for pid=6346 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.279397][ T5731] Bluetooth: hci3: command tx timeout [ 57.669287][ T43] audit: type=1400 audit(1788291143.375:402): avc: denied { mount } for pid=6352 comm="syz.1.103" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.676993][ T43] audit: type=1400 audit(1788291143.385:403): avc: denied { create } for pid=6352 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.677026][ T43] audit: type=1400 audit(1788291143.385:404): avc: denied { write } for pid=6352 comm="syz.1.103" path="socket:[13651]" dev="sockfs" ino=13651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.795130][ T43] audit: type=1400 audit(1788291143.505:405): avc: denied { map_read map_write } for pid=6327 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.828023][ T6361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.106'. [ 57.926147][ T43] audit: type=1400 audit(1788291143.635:406): avc: denied { create } for pid=6365 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.932476][ T43] audit: type=1400 audit(1788291143.635:407): avc: denied { setopt } for pid=6365 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.985784][ T43] audit: type=1400 audit(1788291143.695:408): avc: denied { bind } for pid=6365 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.992737][ T43] audit: type=1400 audit(1788291143.695:409): avc: denied { ioctl } for pid=6365 comm="syz.2.108" path="socket:[13672]" dev="sockfs" ino=13672 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.994206][ T6366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=6366 comm=syz.2.108 [ 58.166702][ T43] audit: type=1400 audit(1788291143.875:410): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.301616][ T6378] tc_dump_action: action bad kind [ 58.418348][ T6389] netlink: Conntrack attr has 8 unknown bytes [ 58.418464][ T6389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.631603][ T6407] jffs2: notice: (6407) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 58.899481][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.121'. [ 58.961094][ T5731] Bluetooth: hci0: command 0x0419 tx timeout [ 58.971114][ T5731] Bluetooth: hci1: command 0x0419 tx timeout [ 59.369261][ T5731] Bluetooth: hci3: command tx timeout [ 59.418964][ T6420] kAFS: No cell specified [ 59.419263][ T6419] kAFS: No cell specified [ 59.420799][ T6419] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.793118][ T6422] netlink: 'syz.3.125': attribute type 10 has an invalid length. [ 59.800650][ T6422] team0: Device wg2 is of different type [ 59.891553][ T6436] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 59.891650][ T6436] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 59.892684][ T6436] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 59.892704][ T6436] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 59.892715][ T6436] page dumped because: unmovable page [ 59.892724][ T6436] page_owner info is not present (never set?) [ 60.418940][ T6486] input: syz0 as /devices/virtual/input/input6 [ 60.438229][ T6489] FAULT_INJECTION: forcing a failure. [ 60.438229][ T6489] name failslab, interval 1, probability 0, space 0, times 0 [ 60.438286][ T6489] CPU: 3 UID: 0 PID: 6489 Comm: syz.4.139 Not tainted syzkaller #0 PREEMPT(full) [ 60.438310][ T6489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.438317][ T6489] Call Trace: [ 60.438321][ T6489] [ 60.438326][ T6489] dump_stack_lvl+0x100/0x190 [ 60.438345][ T6489] should_fail_ex.cold+0x5/0xa [ 60.438361][ T6489] should_failslab+0xc2/0x120 [ 60.438374][ T6489] __kmalloc_cache_noprof+0x91/0x6d0 [ 60.438408][ T6489] ? down_write+0x146/0x1f0 [ 60.438421][ T6489] ? kvm_uevent_notify_change.part.0+0x94/0x450 [ 60.438438][ T6489] kvm_uevent_notify_change.part.0+0x94/0x450 [ 60.438453][ T6489] ? __pfx_kvm_vm_release+0x10/0x10 [ 60.438465][ T6489] kvm_put_kvm+0xf9/0xc10 [ 60.438477][ T6489] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.438488][ T6489] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.438504][ T6489] ? kvm_irqfd_release+0xd3/0x110 [ 60.438519][ T6489] ? __pfx_kvm_vm_release+0x10/0x10 [ 60.438531][ T6489] kvm_vm_release+0x3c/0x50 [ 60.438542][ T6489] __fput+0x3ff/0xb50 [ 60.438569][ T6489] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.438587][ T6489] task_work_run+0x150/0x240 [ 60.438603][ T6489] ? __pfx_task_work_run+0x10/0x10 [ 60.438623][ T6489] exit_to_user_mode_loop+0x1d8/0x700 [ 60.438635][ T6489] ? rcu_is_watching+0x13/0xc0 [ 60.438650][ T6489] do_syscall_64+0x661/0x790 [ 60.438663][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.438674][ T6489] RIP: 0033:0x7fe3ce99e159 [ 60.438683][ T6489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.438693][ T6489] RSP: 002b:00007fe3ccbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 60.438704][ T6489] RAX: 0000000000000000 RBX: 00007fe3cec25fa0 RCX: 00007fe3ce99e159 [ 60.438711][ T6489] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000004 [ 60.438717][ T6489] RBP: 00007fe3ccbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 60.438723][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.438729][ T6489] R13: 00007fe3cec26038 R14: 00007fe3cec25fa0 R15: 00007fff7c09c468 [ 60.438742][ T6489] [ 60.682620][ T6507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.757751][ T6522] erspan1: entered promiscuous mode [ 60.815238][ T6532] veth0_to_bond: entered allmulticast mode [ 61.019898][ T6551] ip6_vti0: entered promiscuous mode [ 61.019955][ T6551] ip6_vti0: entered allmulticast mode [ 61.039945][ T5733] Bluetooth: hci0: command 0x0419 tx timeout [ 61.040922][ T5731] Bluetooth: hci1: command 0x0419 tx timeout [ 61.043009][ T1040] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 61.043021][ T1040] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 61.107150][ T6554] FAULT_INJECTION: forcing a failure. [ 61.107150][ T6554] name fail_futex, interval 1, probability 0, space 0, times 1 [ 61.107217][ T6554] CPU: 3 UID: 0 PID: 6554 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(full) [ 61.107241][ T6554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.107249][ T6554] Call Trace: [ 61.107253][ T6554] [ 61.107258][ T6554] dump_stack_lvl+0x100/0x190 [ 61.107286][ T6554] should_fail_ex.cold+0x5/0xa [ 61.107302][ T6554] get_futex_key+0x1d0/0x14f0 [ 61.107318][ T6554] ? __pfx_get_futex_key+0x10/0x10 [ 61.107335][ T6554] futex_wait_setup+0x91/0x540 [ 61.107355][ T6554] __futex_wait+0x19f/0x300 [ 61.107372][ T6554] ? __pfx___futex_wait+0x10/0x10 [ 61.107387][ T6554] ? __pfx_try_to_wake_up+0x10/0x10 [ 61.107399][ T6554] ? futex_hash+0x311/0x400 [ 61.107412][ T6554] ? __pfx_futex_wake_mark+0x10/0x10 [ 61.107431][ T6554] ? find_held_lock+0x2b/0x80 [ 61.107459][ T6554] ? futex_wake+0x4ea/0x5e0 [ 61.107478][ T6554] futex_wait+0xe6/0x370 [ 61.107494][ T6554] ? __pfx_futex_wait+0x10/0x10 [ 61.107517][ T6554] do_futex+0x265/0x440 [ 61.107531][ T6554] ? __pfx_do_futex+0x10/0x10 [ 61.107548][ T6554] __x64_sys_futex+0x34f/0x4d0 [ 61.107564][ T6554] ? __pfx___x64_sys_futex+0x10/0x10 [ 61.107577][ T6554] ? kmem_cache_free+0x127/0x6c0 [ 61.107608][ T6554] do_syscall_64+0x123/0x790 [ 61.107625][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.107637][ T6554] RIP: 0033:0x7f605139e159 [ 61.107646][ T6554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.107657][ T6554] RSP: 002b:00007f60521de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 61.107667][ T6554] RAX: ffffffffffffffda RBX: 00007f6051625fa8 RCX: 00007f605139e159 [ 61.107675][ T6554] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6051625fa8 [ 61.107681][ T6554] RBP: 00007f6051625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 61.107688][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.107694][ T6554] R13: 00007f6051626038 R14: 00007ffcbff7aa20 R15: 00007ffcbff7ab08 [ 61.107708][ T6554] [ 61.449338][ T5731] Bluetooth: hci3: command tx timeout [ 62.356851][ T6710] syzkaller0: entered promiscuous mode [ 62.356932][ T6710] syzkaller0: entered allmulticast mode [ 63.120771][ T1040] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 63.120851][ T1040] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 63.121179][ T5731] Bluetooth: hci1: command 0x0419 tx timeout [ 64.079874][ T43] kauditd_printk_skb: 79 callbacks suppressed [ 64.079964][ T43] audit: type=1400 audit(1788291149.795:490): avc: denied { lock } for pid=6752 comm="syz.2.239" path="socket:[13207]" dev="sockfs" ino=13207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 64.108550][ T43] audit: type=1400 audit(1788291149.815:491): avc: denied { write } for pid=6755 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.108632][ T43] audit: type=1400 audit(1788291149.815:492): avc: denied { nlmsg_write } for pid=6755 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.167334][ T43] audit: type=1400 audit(1788291149.875:493): avc: denied { getopt } for pid=6764 comm="syz.4.243" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.234116][ T43] audit: type=1400 audit(1788291149.945:494): avc: denied { write } for pid=6774 comm="syz.3.250" name="001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.268932][ T43] audit: type=1400 audit(1788291149.975:495): avc: denied { block_suspend } for pid=6779 comm="syz.4.251" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.501476][ T43] audit: type=1400 audit(1788291150.215:496): avc: denied { name_bind } for pid=6797 comm="syz.2.260" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 64.525891][ T43] audit: type=1400 audit(1788291150.235:497): avc: denied { shutdown } for pid=6799 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.857842][ T43] audit: type=1400 audit(1788291150.565:498): avc: denied { create } for pid=6829 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.865584][ T43] audit: type=1400 audit(1788291150.565:499): avc: denied { write } for pid=6829 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.906760][ T6836] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 64.925967][ T6839] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 64.962105][ T6846] rnbd_client L607: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 65.003287][ T6846] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 65.003898][ T6846] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 65.199150][ T5731] Bluetooth: hci2: command 0x0419 tx timeout [ 65.199298][ T1040] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 65.199309][ T1040] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 67.289717][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.289837][ T1040] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 67.289858][ T1040] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 67.543211][ T6902] syz.2.294 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.589285][ T5817] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 67.691638][ T6915] kvm [6914]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10f [ 67.693669][ T6915] kvm [6914]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100 [ 67.749950][ T5817] usb 9-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 67.751036][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.751053][ T5817] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.751073][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.754435][ T5817] usb 9-1: config 0 descriptor?? [ 68.167878][ T5817] logitech 0003:046D:CA03.0002: unknown main item tag 0x4 [ 68.172094][ T5817] input: HID 046d:ca03 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:046D:CA03.0002/input/input8 [ 68.251833][ T5817] logitech 0003:046D:CA03.0002: input,hiddev0,hidraw1: USB HID v20.00 Device [HID 046d:ca03] on usb-dummy_hcd.4-1/input0 [ 68.251936][ T5817] logitech 0003:046D:CA03.0002: missing HID_OUTPUT_REPORT 0 [ 68.331364][ T5817] logitech 0003:046D:CA03.0002: probe with driver logitech failed with error -1 [ 68.367558][ T5817] usb 9-1: USB disconnect, device number 2 [ 68.708537][ T6953] FAULT_INJECTION: forcing a failure. [ 68.708537][ T6953] name failslab, interval 1, probability 0, space 0, times 0 [ 68.708601][ T6953] CPU: 1 UID: 0 PID: 6953 Comm: syz.3.314 Not tainted syzkaller #0 PREEMPT(full) [ 68.708625][ T6953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.708633][ T6953] Call Trace: [ 68.708637][ T6953] [ 68.708641][ T6953] dump_stack_lvl+0x100/0x190 [ 68.708669][ T6953] should_fail_ex.cold+0x5/0xa [ 68.708685][ T6953] should_failslab+0xc2/0x120 [ 68.708701][ T6953] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.708713][ T6953] ? sk_prot_alloc+0x60/0x2a0 [ 68.708732][ T6953] sk_prot_alloc+0x60/0x2a0 [ 68.708747][ T6953] sk_alloc+0x36/0xe80 [ 68.708765][ T6953] inet6_create+0x385/0x12b0 [ 68.708781][ T6953] ? inet6_create+0x7f/0x12b0 [ 68.708798][ T6953] __sock_create+0x339/0x860 [ 68.708814][ T6953] __sys_socket+0x14d/0x260 [ 68.708830][ T6953] ? __pfx___sys_socket+0x10/0x10 [ 68.708847][ T6953] __x64_sys_socket+0x72/0xb0 [ 68.708874][ T6953] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.708890][ T6953] do_syscall_64+0x123/0x790 [ 68.708903][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.708915][ T6953] RIP: 0033:0x7f605139e159 [ 68.708924][ T6953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.708935][ T6953] RSP: 002b:00007f60521de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 68.708946][ T6953] RAX: ffffffffffffffda RBX: 00007f6051625fa0 RCX: 00007f605139e159 [ 68.708954][ T6953] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 68.708961][ T6953] RBP: 00007f6051435024 R08: 0000000000000000 R09: 0000000000000000 [ 68.708969][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.708976][ T6953] R13: 00007f6051626038 R14: 00007f6051625fa0 R15: 00007ffcbff7ab08 [ 68.708995][ T6953] [ 69.034645][ T6984] __nla_validate_parse: 1 callbacks suppressed [ 69.034714][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.328'. [ 69.114666][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 69.114948][ T43] audit: type=1400 audit(1788291154.825:525): avc: denied { name_bind } for pid=6988 comm="syz.3.330" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 69.165047][ T6991] loop5: detected capacity change from 0 to 7 [ 69.173444][ T6991] Dev loop5: unable to read RDB block 7 [ 69.173517][ T6991] loop5: AHDI p1 p2 p3 [ 69.174844][ T6991] loop5: partition table partially beyond EOD, truncated [ 69.174971][ T6991] loop5: p1 start 1818582900 is beyond EOD, truncated [ 69.174985][ T6991] loop5: p3 start 335544320 is beyond EOD, truncated [ 69.310146][ T43] audit: type=1400 audit(1788291155.025:526): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.321089][ T43] audit: type=1400 audit(1788291155.035:527): avc: denied { read write } for pid=6999 comm="syz.4.335" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 69.321120][ T43] audit: type=1400 audit(1788291155.035:528): avc: denied { open } for pid=6999 comm="syz.4.335" path="/56/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 69.321139][ T43] audit: type=1400 audit(1788291155.035:529): avc: denied { ioctl } for pid=6999 comm="syz.4.335" path="/56/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 69.414513][ T43] audit: type=1400 audit(1788291155.125:530): avc: denied { nlmsg_tty_audit } for pid=7008 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 69.414592][ T43] audit: type=1400 audit(1788291155.125:531): avc: denied { nlmsg_write } for pid=7008 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 69.450184][ T7011] bpf: Bad value for 'gid' [ 69.644401][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.737427][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.772958][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.775371][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.775898][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.776285][ T5733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.776566][ T5733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.803026][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.809963][ T5731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.810366][ T5731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.812846][ T5731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.813886][ T5731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.859669][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.882597][ T43] audit: type=1400 audit(1788291155.595:532): avc: denied { map } for pid=7045 comm="syz.2.356" path="socket:[14952]" dev="sockfs" ino=14952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.883082][ T43] audit: type=1400 audit(1788291155.595:533): avc: denied { read } for pid=7045 comm="syz.2.356" path="socket:[14952]" dev="sockfs" ino=14952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.920245][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.938370][ T7051] pimreg: tun_chr_ioctl cmd 1074812118 [ 70.081086][ T7063] binder: 7061:7063 ioctl 40046205 0 returned -22 [ 70.084069][ T13] bridge_slave_1: left allmulticast mode [ 70.084132][ T13] bridge_slave_1: left promiscuous mode [ 70.084252][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.091799][ T13] bridge_slave_0: left allmulticast mode [ 70.091815][ T13] bridge_slave_0: left promiscuous mode [ 70.091911][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.117788][ T7065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.363'. [ 70.212249][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.217469][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.224749][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 70.231229][ T13] bond0 (unregistering): Released all slaves [ 70.312240][ T1040] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 70.347040][ T7083] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 70.360978][ T43] audit: type=1400 audit(1788291156.075:534): avc: denied { write } for pid=7084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.451587][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 70.482697][ T1040] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 70.486926][ T1040] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.511494][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.511617][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.511719][ T7032] bridge_slave_0: entered allmulticast mode [ 70.512499][ T7032] bridge_slave_0: entered promiscuous mode [ 70.516135][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.516210][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.516284][ T7032] bridge_slave_1: entered allmulticast mode [ 70.517011][ T7032] bridge_slave_1: entered promiscuous mode [ 70.555976][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.560370][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.584153][ T7032] team0: Port device team_slave_0 added [ 70.588729][ T7032] team0: Port device team_slave_1 added [ 70.636004][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.636067][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.636112][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.636988][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.636995][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.637008][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.671934][ T13] hsr_slave_0: left promiscuous mode [ 70.674491][ T13] hsr_slave_1: left promiscuous mode [ 70.675014][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.675027][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.677440][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.677451][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.687129][ T13] veth1_macvtap: left promiscuous mode [ 70.687152][ T13] veth0_macvtap: left promiscuous mode [ 70.687198][ T13] veth1_vlan: left promiscuous mode [ 70.687301][ T13] veth0_vlan: left promiscuous mode [ 70.699428][ T1040] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 70.845852][ T13] team0 (unregistering): Port device team_slave_1 removed [ 70.856294][ T13] team0 (unregistering): Port device team_slave_0 removed [ 70.929790][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 70.946449][ T7032] hsr_slave_0: entered promiscuous mode [ 70.947263][ T7032] hsr_slave_1: entered promiscuous mode [ 70.947686][ T7032] debugfs: 'hsr0' already exists in 'hsr' [ 70.947699][ T7032] Cannot create hsr debugfs directory [ 70.952545][ T2323] usb 9-1: USB disconnect, device number 3 [ 71.061499][ T5825] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.094126][ T7032] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.102317][ T7032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.102844][ T7032] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.115762][ T7032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.127126][ T70] cfg80211: failed to load regulatory.db [ 71.127680][ T7032] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.136859][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.136896][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.138407][ T7032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.139962][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 71.144173][ T7032] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.148814][ T7032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.165107][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.165185][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.165356][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.165400][ T7032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.179280][ T5102] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 71.190839][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.195806][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.201788][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.208736][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.215049][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.215126][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.217149][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.217193][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.219245][ T5825] usb 8-1: Using ep0 maxpacket: 16 [ 71.219699][ T5825] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 71.224644][ T5825] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.224661][ T5825] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.224672][ T5825] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 71.224685][ T5825] usb 8-1: config 0 interface 0 has no altsetting 0 [ 71.224700][ T5825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.226466][ T5825] usb 8-1: config 0 descriptor?? [ 71.293114][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 71.342858][ T5102] usb 7-1: unable to get BOS descriptor or descriptor too short [ 71.343724][ T5102] usb 7-1: not running at top speed; connect to a high speed hub [ 71.343750][ T5102] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.345349][ T5102] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.345383][ T5102] usb 7-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.345404][ T5102] usb 7-1: config 1 interface 0 has no altsetting 0 [ 71.366702][ T5102] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.372424][ T5102] usb 7-1: Product: syz [ 71.372441][ T5102] usb 7-1: Manufacturer: syz [ 71.372453][ T5102] usb 7-1: SerialNumber: syz [ 71.462850][ T7032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.599875][ T5102] cdc_ether 7-1:1.0: invalid descriptor buffer length [ 71.599941][ T5102] usb 7-1: No union descriptors [ 71.608291][ T5102] usb 7-1: USB disconnect, device number 4 [ 71.616188][ T7032] veth0_vlan: entered promiscuous mode [ 71.621845][ T7032] veth1_vlan: entered promiscuous mode [ 71.638278][ T5825] hid (null): global environment stack underflow [ 71.638351][ T5825] hid (null): invalid report_size 40548 [ 71.638392][ T5825] hid (null): report_id 0 is invalid [ 71.643481][ T7032] veth0_macvtap: entered promiscuous mode [ 71.646148][ T7032] veth1_macvtap: entered promiscuous mode [ 71.656095][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.660884][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.665699][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.665843][ T5808] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.715229][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.715298][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.756488][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.756552][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.787299][ T325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.787351][ T325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.838180][ T1040] usb 8-1: USB disconnect, device number 2 [ 71.839147][ T5733] Bluetooth: hci0: command tx timeout [ 71.873681][ T7173] mmap: syz.5.348 (7173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.988493][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.391'. [ 72.199643][ T25] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 72.354248][ T25] usb 9-1: not running at top speed; connect to a high speed hub [ 72.354302][ T25] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 72.361533][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.367102][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.367140][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.594344][ T5102] usb 9-1: USB disconnect, device number 4 [ 72.716149][ T7225] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3795657396 (242922073344 ns) > initial count (53003242880 ns). Using initial count to start timer. [ 72.723309][ T1040] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 72.889747][ T1040] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 72.893791][ T1040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.897443][ T1040] usb 8-1: config 0 descriptor?? [ 72.903438][ T1040] cp210x 8-1:0.0: cp210x converter detected [ 73.175560][ T7242] binder: 7241:7242 unknown command 0 [ 73.175617][ T7242] binder: 7241:7242 ioctl c0306201 200000000080 returned -22 [ 73.182008][ T7242] binder_alloc: 7241: binder_alloc_buf, no vma [ 73.197936][ T7244] 9p: Bad value for 'wfdno' [ 73.244776][ T7247] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.308244][ T1040] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 73.311432][ T1040] cp210x 8-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 73.311468][ T1040] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 73.320236][ T1040] usb 8-1: cp210x converter now attached to ttyUSB0 [ 73.338436][ T1040] usb 8-1: USB disconnect, device number 3 [ 73.370927][ T1040] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 73.373986][ T1040] cp210x 8-1:0.0: device disconnected [ 73.383113][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.423'. [ 73.388161][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.423'. [ 73.919197][ T5733] Bluetooth: hci0: command tx timeout [ 74.122457][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 74.122535][ T43] audit: type=1400 audit(1788291159.835:556): avc: denied { load_policy } for pid=7303 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 74.128265][ T7304] SELinux: invalid class [ 74.136924][ T7304] SELinux: failed to load policy [ 74.254508][ T7320] input: syz1 as /devices/virtual/input/input13 [ 74.558627][ T43] audit: type=1400 audit(1788291160.265:557): avc: denied { mount } for pid=7340 comm="syz.4.461" name="/" dev="ramfs" ino=19551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.619204][ T1690] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 74.780826][ T1690] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 74.782695][ T1690] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.782723][ T1690] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.782742][ T1690] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.782765][ T1690] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.782792][ T1690] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.789469][ T1690] usb 8-1: config 0 descriptor?? [ 75.160751][ T7379] program syz.4.479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.188303][ T43] audit: type=1400 audit(1788291160.895:558): avc: denied { create } for pid=7382 comm="syz.4.481" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.190934][ T43] audit: type=1400 audit(1788291160.905:559): avc: denied { write } for pid=7382 comm="syz.4.481" name="file0" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.190974][ T43] audit: type=1400 audit(1788291160.905:560): avc: denied { open } for pid=7382 comm="syz.4.481" path="/100/file0" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.191677][ T43] audit: type=1400 audit(1788291160.905:561): avc: denied { ioctl } for pid=7382 comm="syz.4.481" path="/100/file0" dev="tmpfs" ino=541 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.212116][ T1690] hid-multitouch 0003:0EEF:72C4.0004: unbalanced collection at end of report description [ 75.212579][ T1690] hid-multitouch 0003:0EEF:72C4.0004: probe with driver hid-multitouch failed with error -22 [ 75.214366][ T43] audit: type=1400 audit(1788291160.925:562): avc: denied { unlink } for pid=6081 comm="syz-executor" name="file0" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.411231][ T1690] usb 8-1: USB disconnect, device number 4 [ 75.609434][ T5825] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 75.760051][ T5825] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 75.761221][ T5825] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 75.761244][ T5825] usb 10-1: config 0 has no interface number 0 [ 75.763681][ T5825] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.763694][ T5825] usb 10-1: Product: syz [ 75.763702][ T5825] usb 10-1: Manufacturer: syz [ 75.763710][ T5825] usb 10-1: SerialNumber: syz [ 75.771827][ T5825] usb 10-1: config 0 descriptor?? [ 75.956274][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 76.019692][ T43] audit: type=1400 audit(1788291161.725:563): avc: denied { search } for pid=7404 comm="syz.3.490" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.019768][ T43] audit: type=1400 audit(1788291161.725:564): avc: denied { search } for pid=7404 comm="syz.3.490" name="events" dev="tracefs" ino=6243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.019853][ T43] audit: type=1400 audit(1788291161.725:565): avc: denied { write search } for pid=7404 comm="syz.3.490" name="events" dev="tracefs" ino=6243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.235114][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 76.235306][ C3] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 77.316567][ T5825] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 77.316680][ T5825] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 77.330716][ T5825] asix 10-1:0.251: probe with driver asix failed with error -71 [ 77.824190][ T5825] usb 10-1: USB disconnect, device number 2 [ 79.092127][ T7421] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.080978][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 81.082501][ T43] audit: type=1400 audit(1788291166.785:568): avc: denied { bind } for pid=7433 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.087560][ T43] audit: type=1400 audit(1788291166.795:569): avc: denied { name_bind } for pid=7433 comm="syz.4.500" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 81.092984][ T43] audit: type=1400 audit(1788291166.805:570): avc: denied { node_bind } for pid=7433 comm="syz.4.500" saddr=::ffff:10.1.1.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 82.627029][ T43] audit: type=1400 audit(1788291168.335:571): avc: denied { write } for pid=7437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.767490][ T43] audit: type=1400 audit(1788291169.475:572): avc: denied { write } for pid=7449 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.080677][ T43] audit: type=1400 audit(1788291171.785:573): avc: denied { write } for pid=7460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.186580][ T43] audit: type=1400 audit(1788291172.895:574): avc: denied { write } for pid=7469 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.869608][ T50] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 88.049830][ T50] usb 9-1: Using ep0 maxpacket: 32 [ 88.055682][ T50] usb 9-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 88.105765][ T50] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.105899][ T50] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.106025][ T50] usb 9-1: config 0 interface 0 has no altsetting 0 [ 88.106203][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.183489][ T50] usb 9-1: config 0 descriptor?? [ 88.601579][ T43] audit: type=1400 audit(1788291174.305:575): avc: denied { read } for pid=7471 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.631490][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.650724][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.768094][ T50] usbhid 9-1:0.0: can't add hid device: -71 [ 88.768816][ T50] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 88.931552][ T50] usb 9-1: USB disconnect, device number 5 [ 89.496329][ T43] audit: type=1400 audit(1788291175.205:576): avc: denied { write } for pid=7476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.102692][ T5733] Bluetooth: hci0: hcon ffff8880326d0000 sent 1 < count 5 [ 90.939860][ T43] audit: type=1400 audit(1788291176.645:577): avc: denied { write } for pid=7491 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.742048][ T7511] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 93.033272][ T70] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 93.222624][ T70] usb 7-1: Using ep0 maxpacket: 16 [ 93.228817][ T70] usb 7-1: New USB device found, idVendor=05ac, idProduct=9236, bcdDevice=f7.c8 [ 93.283152][ T70] usb 7-1: config 4 has an invalid interface number: 245 but max is 0 [ 93.283298][ T70] usb 7-1: config 4 has no interface number 0 [ 93.283630][ T70] usb 7-1: config 4 interface 245 altsetting 192 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 93.283664][ T70] usb 7-1: config 4 interface 245 altsetting 192 endpoint 0x8 has invalid wMaxPacketSize 0 [ 93.283695][ T70] usb 7-1: config 4 interface 245 has no altsetting 0 [ 93.357042][ T70] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.358168][ T70] usb 7-1: Product: syz [ 93.358200][ T70] usb 7-1: Manufacturer: syz [ 93.358249][ T70] usb 7-1: SerialNumber: syz [ 93.475319][ T43] audit: type=1400 audit(1788291179.185:578): avc: denied { write } for pid=7507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.939382][ T50] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 93.947515][ T70] appledisplay 7-1:4.245: Could not find int-in endpoint [ 93.986100][ T70] usbhid 7-1:4.245: couldn't find an input interrupt endpoint [ 94.075109][ T70] usb 7-1: USB disconnect, device number 5 [ 94.109387][ T50] usb 10-1: Using ep0 maxpacket: 32 [ 94.116224][ T50] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.151865][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.152007][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.152179][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.300680][ T50] usb 10-1: config 0 descriptor?? [ 94.422876][ T50] hub 10-1:0.0: USB hub found [ 94.567516][ T50] hub 10-1:0.0: 1 port detected [ 94.788499][ T50] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 94.856279][ T43] audit: type=1400 audit(1788291180.565:579): avc: denied { ioctl } for pid=7525 comm="syz.4.527" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.875534][ T50] usbhid 10-1:0.0: can't add hid device: -71 [ 94.876209][ T50] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 94.888088][ T43] audit: type=1400 audit(1788291180.595:580): avc: denied { write } for pid=7524 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.970700][ T50] usb 10-1: USB disconnect, device number 3 [ 95.527142][ T7531] SELinux: ebitmap start bit (1660944640) is beyond the end of the bitmap (1472) [ 95.533575][ T7531] SELinux: invalid class [ 95.846055][ T7531] SELinux: failed to load policy [ 97.868635][ T7546] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.167685][ T43] audit: type=1400 audit(1788291184.875:581): avc: denied { name_bind 0x1000000 } for pid=7561 comm="syz.4.536" path="socket:[18981]" dev="sockfs" ino=18981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 99.287670][ T43] audit: type=1400 audit(1788291184.995:582): avc: denied { getopt } for pid=7565 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.450802][ T7576] Bluetooth: MGMT ver 1.23 [ 100.918528][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.544'. [ 100.918727][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.544'. [ 102.652436][ T43] audit: type=1400 audit(1788291188.365:583): avc: denied { read } for pid=7581 comm="syz.4.546" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 102.657766][ T43] audit: type=1400 audit(1788291188.365:584): avc: denied { open } for pid=7581 comm="syz.4.546" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.455842][ T43] audit: type=1400 audit(1788291191.165:585): avc: denied { wake_alarm } for pid=7611 comm="syz.3.559" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.990610][ T7618] SELinux: invalid class [ 105.991816][ T7618] SELinux: failed to load policy [ 106.257703][ T43] audit: type=1400 audit(1788291191.965:586): avc: denied { append } for pid=7621 comm="syz.3.562" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.036372][ T7626] binder: 7625:7626 ioctl c0306201 200000000080 returned -14 [ 108.142098][ T5809] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 108.206118][ T7636] usb usb7: usbfs: process 7636 (syz.2.571) did not claim interface 0 before use [ 108.331008][ T5809] usb 9-1: Using ep0 maxpacket: 32 [ 108.358178][ T5809] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.388387][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.393442][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.397883][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.513621][ T5809] usb 9-1: config 0 descriptor?? [ 108.590288][ T5809] hub 9-1:0.0: USB hub found [ 108.813012][ T5809] hub 9-1:0.0: 1 port detected [ 109.106425][ T5809] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 109.181420][ T5809] usbhid 9-1:0.0: can't add hid device: -71 [ 109.185083][ T5809] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 109.270691][ T5809] usb 9-1: USB disconnect, device number 6 [ 111.345993][ T43] audit: type=1400 audit(1788291197.055:587): avc: denied { execute } for pid=7659 comm="syz.5.582" name="file0" dev="ramfs" ino=20672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 111.354298][ T43] audit: type=1400 audit(1788291197.065:588): avc: denied { execute_no_trans } for pid=7659 comm="syz.5.582" path="/file0" dev="ramfs" ino=20672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 114.133391][ T43] audit: type=1326 audit(1788291199.845:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.591" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f605139e159 code=0x0 [ 118.406433][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'. [ 120.415107][ T7737] ip6_vti0: left promiscuous mode [ 120.426839][ T7737] ip6_vti0: left allmulticast mode [ 121.854940][ T7737] erspan1: left promiscuous mode [ 124.894098][ T7412] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 125.063954][ T7412] usb 7-1: device descriptor read/64, error -71 [ 125.371148][ T7412] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 125.589614][ T7412] usb 7-1: device descriptor read/64, error -71 [ 125.714113][ T7412] usb usb7-port1: attempt power cycle [ 126.114134][ T7412] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 126.144141][ T7412] usb 7-1: device descriptor read/8, error -71 [ 126.414268][ T7412] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 126.454989][ T7412] usb 7-1: device descriptor read/8, error -71 [ 126.568685][ T7412] usb usb7-port1: unable to enumerate USB device [ 127.737938][ T43] audit: type=1400 audit(1788291213.435:590): avc: denied { bind } for pid=7780 comm="syz.4.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.604598][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.606257][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.004940][ T2323] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 138.225228][ T2323] usb 8-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=16.e6 [ 138.259923][ T2323] usb 8-1: config 228 has an invalid interface number: 234 but max is 1 [ 138.260079][ T2323] usb 8-1: config 228 has an invalid interface number: 40 but max is 1 [ 138.260202][ T2323] usb 8-1: config 228 has no interface number 0 [ 138.260252][ T2323] usb 8-1: config 228 has no interface number 1 [ 138.260559][ T2323] usb 8-1: config 228 interface 234 has no altsetting 0 [ 138.260580][ T2323] usb 8-1: config 228 interface 40 has no altsetting 0 [ 138.375643][ T2323] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.375786][ T2323] usb 8-1: Product: syz [ 138.378414][ T2323] usb 8-1: Manufacturer: syz [ 138.378433][ T2323] usb 8-1: SerialNumber: syz [ 138.866361][ T2323] keyspan 8-1:228.234: Keyspan - (without firmware) converter detected [ 138.935335][ T2323] keyspan 8-1:228.40: Keyspan - (without firmware) converter detected [ 139.012513][ T2323] usb 8-1: USB disconnect, device number 5 [ 139.045431][ T2323] keyspan 8-1:228.234: device disconnected [ 139.124189][ T2323] keyspan 8-1:228.40: device disconnected [ 144.417921][ T7880] EXT4-fs warning (device sda1): verify_group_input:161: Bad blocks count 0 [ 147.072713][ T43] audit: type=1400 audit(1788291232.785:591): avc: denied { mount } for pid=7896 comm="syz.4.678" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 147.112090][ T7898] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 147.741747][ T43] audit: type=1400 audit(1788291233.455:592): avc: denied { unmount } for pid=6081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 153.970348][ T5809] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 154.175444][ T5809] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.235843][ T5809] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.246838][ T5809] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 154.250794][ T5809] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 154.305768][ T5809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.311034][ T5809] usb 8-1: Product: syz [ 154.312794][ T5809] usb 8-1: Manufacturer: syz [ 154.314610][ T5809] usb 8-1: SerialNumber: syz [ 154.437131][ T5809] cdc_ether 8-1:1.0: bad CDC descriptors [ 154.642365][ T2323] usb 8-1: USB disconnect, device number 6 [ 156.169539][ T5809] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 156.363954][ T5809] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 156.415668][ T5809] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 156.415947][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.538347][ T5809] lg-g15 0003:046D:C222.0005: hidraw1: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 157.757082][ T5809] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/0003:046D:C222.0005/input/input21 [ 158.171904][ T5809] lg-g15 0003:046D:C222.0005: Error getting LED brightness: -71 [ 158.277375][ T5809] lg-g15 0003:046D:C222.0005: Error getting LED brightness: -71 [ 158.377554][ T5809] lg-g15 0003:046D:C222.0005: Error getting LED brightness: -71 [ 158.432508][ T5809] lg-g15 0003:046D:C222.0005: Error getting LED brightness: -71 [ 158.475946][ T5809] lg-g15 0003:046D:C222.0005: Error getting LED brightness: -71 [ 158.616103][ T5809] usb 9-1: USB disconnect, device number 7 [ 159.156484][ T7949] fido_id[7949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/9-1/report_descriptor': No such file or directory [ 160.451680][ T7962] netlink: 'syz.2.702': attribute type 3 has an invalid length. [ 162.689799][ T70] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 162.921351][ T70] usb 7-1: Using ep0 maxpacket: 32 [ 162.938666][ T70] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 162.954345][ T70] usb 7-1: config 0 has no interfaces? [ 163.047384][ T70] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.047596][ T70] usb 7-1: Product: syz [ 163.047704][ T70] usb 7-1: Manufacturer: syz [ 163.047758][ T70] usb 7-1: SerialNumber: syz [ 163.115793][ T70] usb 7-1: config 0 descriptor?? [ 165.605073][ T7412] usb 7-1: USB disconnect, device number 10 [ 169.439832][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 169.645527][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 169.713914][ T9] usb 8-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=2c.f3 [ 169.774119][ T9] usb 8-1: config 7 has an invalid interface number: 199 but max is 0 [ 169.774244][ T9] usb 8-1: config 7 has no interface number 0 [ 169.777629][ T9] usb 8-1: config 7 interface 199 has no altsetting 0 [ 169.823757][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.823985][ T9] usb 8-1: Product: syz [ 169.824133][ T9] usb 8-1: Manufacturer: syz [ 169.824229][ T9] usb 8-1: SerialNumber: syz [ 170.297125][ T9] pegasus 8-1:7.199: Missing or invalid endpoints [ 170.384138][ T9] usb 8-1: USB disconnect, device number 7 [ 170.972896][ T8014] netlink: 'syz.5.722': attribute type 5 has an invalid length. [ 173.301769][ T8025] FAULT_INJECTION: forcing a failure. [ 173.301769][ T8025] name failslab, interval 1, probability 0, space 0, times 0 [ 173.301939][ T8025] CPU: 1 UID: 0 PID: 8025 Comm: syz.3.723 Not tainted syzkaller #0 PREEMPT(full) [ 173.301989][ T8025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.302006][ T8025] Call Trace: [ 173.302019][ T8025] [ 173.302034][ T8025] dump_stack_lvl+0x100/0x190 [ 173.302130][ T8025] should_fail_ex.cold+0x5/0xa [ 173.302272][ T8025] should_failslab+0xc2/0x120 [ 173.302342][ T8025] __kmalloc_cache_node_noprof+0x94/0x720 [ 173.302398][ T8025] ? __get_vm_area_node+0x124/0x350 [ 173.302575][ T8025] __get_vm_area_node+0x124/0x350 [ 173.302700][ T8025] __vmalloc_node_range_noprof+0x268/0x1420 [ 173.302758][ T8025] ? __vcalloc_noprof+0x4d/0x80 [ 173.302914][ T8025] ? trace_event_buffer_commit+0x20a/0xa80 [ 173.303006][ T8025] ? __vcalloc_noprof+0x4d/0x80 [ 173.303220][ T8025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.303420][ T8025] ? __vcalloc_noprof+0x4d/0x80 [ 173.303477][ T8025] __vmalloc_node_noprof+0xad/0xf0 [ 173.303549][ T8025] ? __vcalloc_noprof+0x4d/0x80 [ 173.303636][ T8025] __vmalloc_noprof+0xa3/0x120 [ 173.303702][ T8025] ? __pfx___vmalloc_noprof+0x10/0x10 [ 173.303801][ T8025] ? __pfx___mutex_lock+0x10/0x10 [ 173.303954][ T8025] __vcalloc_noprof+0x4d/0x80 [ 173.304034][ T8025] kvm_arch_prepare_memory_region+0x35c/0x8d0 [ 173.304246][ T8025] kvm_set_memslot+0x139/0x1740 [ 173.304300][ T8025] ? kvm_set_memory_region+0xc43/0x15e0 [ 173.304447][ T8025] kvm_set_memory_region+0xe78/0x15e0 [ 173.304716][ T8025] kvm_vm_ioctl+0x1f21/0x42d0 [ 173.304868][ T8025] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 173.304993][ T8025] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 173.305103][ T8025] ? trace_event_buffer_commit+0x20a/0xa80 [ 173.305283][ T8025] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 173.305334][ T8025] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 173.305492][ T8025] ? kasan_quarantine_put+0x104/0x240 [ 173.305540][ T8025] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.305591][ T8025] ? find_held_lock+0x2b/0x80 [ 173.305628][ T8025] ? tomoyo_path_number_perm+0x28f/0x580 [ 173.305672][ T8025] ? tomoyo_path_number_perm+0x28f/0x580 [ 173.305844][ T8025] ? tomoyo_path_number_perm+0x188/0x580 [ 173.305925][ T8025] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.306151][ T8025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.306660][ T8025] ? selinux_file_ioctl+0x13b/0x290 [ 173.306690][ T8025] ? selinux_file_ioctl+0xb6/0x290 [ 173.306767][ T8025] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 173.306866][ T8025] __x64_sys_ioctl+0x18e/0x210 [ 173.306967][ T8025] do_syscall_64+0x123/0x790 [ 173.307051][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.307090][ T8025] RIP: 0033:0x7f605139e159 [ 173.307152][ T8025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.307174][ T8025] RSP: 002b:00007f60521de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.307211][ T8025] RAX: ffffffffffffffda RBX: 00007f6051625fa0 RCX: 00007f605139e159 [ 173.307232][ T8025] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004 [ 173.307242][ T8025] RBP: 00007f6051435024 R08: 0000000000000000 R09: 0000000000000000 [ 173.307252][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.307262][ T8025] R13: 00007f6051626038 R14: 00007f6051625fa0 R15: 00007ffcbff7ab08 [ 173.307506][ T8025] [ 173.428352][ T8025] syz.3.723: vmalloc error: size 1028, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 173.430323][ T8025] CPU: 1 UID: 0 PID: 8025 Comm: syz.3.723 Not tainted syzkaller #0 PREEMPT(full) [ 173.430362][ T8025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.430379][ T8025] Call Trace: [ 173.430403][ T8025] [ 173.430430][ T8025] dump_stack_lvl+0x100/0x190 [ 173.430562][ T8025] warn_alloc.cold+0x9e/0xb2 [ 173.430650][ T8025] ? __pfx_warn_alloc+0x10/0x10 [ 173.430679][ T8025] ? __kasan_kmalloc+0x8a/0xb0 [ 173.430921][ T8025] ? __get_vm_area_node+0x22b/0x350 [ 173.431092][ T8025] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 173.431198][ T8025] ? trace_event_buffer_commit+0x20a/0xa80 [ 173.431319][ T8025] ? __vcalloc_noprof+0x4d/0x80 [ 173.431467][ T8025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.431710][ T8025] ? __vcalloc_noprof+0x4d/0x80 [ 173.431743][ T8025] __vmalloc_node_noprof+0xad/0xf0 [ 173.431790][ T8025] ? __vcalloc_noprof+0x4d/0x80 [ 173.431910][ T8025] __vmalloc_noprof+0xa3/0x120 [ 173.431989][ T8025] ? __pfx___vmalloc_noprof+0x10/0x10 [ 173.432039][ T8025] ? __pfx___mutex_lock+0x10/0x10 [ 173.432204][ T8025] __vcalloc_noprof+0x4d/0x80 [ 173.432290][ T8025] kvm_arch_prepare_memory_region+0x35c/0x8d0 [ 173.432499][ T8025] kvm_set_memslot+0x139/0x1740 [ 173.432561][ T8025] ? kvm_set_memory_region+0xc43/0x15e0 [ 173.432664][ T8025] kvm_set_memory_region+0xe78/0x15e0 [ 173.432921][ T8025] kvm_vm_ioctl+0x1f21/0x42d0 [ 173.433104][ T8025] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 173.433233][ T8025] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 173.433354][ T8025] ? trace_event_buffer_commit+0x20a/0xa80 [ 173.433483][ T8025] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 173.433559][ T8025] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 173.433692][ T8025] ? kasan_quarantine_put+0x104/0x240 [ 173.433726][ T8025] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.433799][ T8025] ? find_held_lock+0x2b/0x80 [ 173.433850][ T8025] ? tomoyo_path_number_perm+0x28f/0x580 [ 173.433926][ T8025] ? tomoyo_path_number_perm+0x28f/0x580 [ 173.434043][ T8025] ? tomoyo_path_number_perm+0x188/0x580 [ 173.434133][ T8025] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.434340][ T8025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.434846][ T8025] ? selinux_file_ioctl+0x13b/0x290 [ 173.434885][ T8025] ? selinux_file_ioctl+0xb6/0x290 [ 173.434995][ T8025] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 173.435065][ T8025] __x64_sys_ioctl+0x18e/0x210 [ 173.435168][ T8025] do_syscall_64+0x123/0x790 [ 173.435311][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.435357][ T8025] RIP: 0033:0x7f605139e159 [ 173.435388][ T8025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.435404][ T8025] RSP: 002b:00007f60521de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.435426][ T8025] RAX: ffffffffffffffda RBX: 00007f6051625fa0 RCX: 00007f605139e159 [ 173.435439][ T8025] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004 [ 173.435452][ T8025] RBP: 00007f6051435024 R08: 0000000000000000 R09: 0000000000000000 [ 173.435466][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.435479][ T8025] R13: 00007f6051626038 R14: 00007f6051625fa0 R15: 00007ffcbff7ab08 [ 173.435726][ T8025] [ 173.599513][ T8025] Mem-Info: [ 173.599695][ T8025] active_anon:54143 inactive_anon:0 isolated_anon:0 [ 173.599695][ T8025] active_file:794 inactive_file:54251 isolated_file:0 [ 173.599695][ T8025] unevictable:1000 dirty:100 writeback:0 [ 173.599695][ T8025] slab_reclaimable:8745 slab_unreclaimable:69993 [ 173.599695][ T8025] mapped:35876 shmem:35754 pagetables:3911 [ 173.599695][ T8025] sec_pagetables:299 bounce:0 [ 173.599695][ T8025] kernel_misc_reclaimable:0 [ 173.599695][ T8025] free:413443 free_pcp:10053 free_cma:0 [ 173.599815][ T8025] Node 0 active_anon:182240kB inactive_anon:0kB active_file:3176kB inactive_file:216760kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:143504kB dirty:396kB writeback:0kB shmem:108636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13984kB pagetables:10852kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.599892][ T8025] Node 1 active_anon:34332kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:34380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:4792kB sec_pagetables:16kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.599969][ T8025] Node 0 DMA free:11864kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3000kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:44kB free_cma:0kB [ 173.600130][ T8025] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 173.600857][ T8025] Node 0 DMA32 free:60004kB boost:0kB min:27360kB low:34200kB high:41040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:179236kB inactive_anon:0kB active_file:3176kB inactive_file:216752kB unevictable:2000kB writepending:396kB zspages:0kB present:2080628kB managed:1253032kB mlocked:0kB bounce:0kB free_pcp:19700kB local_pcp:2412kB free_cma:0kB [ 173.601033][ T8025] lowmem_reserve[]: 0 0 0 0 0 [ 173.601340][ T8025] Node 1 Normal free:1582128kB boost:0kB min:39876kB low:49844kB high:59812kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34332kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:20032kB local_pcp:9688kB free_cma:0kB [ 173.601439][ T8025] lowmem_reserve[]: 0 0 0 0 0 [ 173.601562][ T8025] Node 0 DMA: 92*4kB (UM) 65*8kB (UM) 60*16kB (UM) 39*32kB (UM) 31*64kB (UM) 13*128kB (UM) 4*256kB (UM) 2*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 11864kB [ 173.608985][ T8025] Node 0 DMA32: 359*4kB (UE) 155*8kB (UME) 276*16kB (UME) 215*32kB (ME) 95*64kB (UME) 118*128kB (UME) 43*256kB (UM) 23*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 59988kB [ 173.632311][ T8025] Node 1 Normal: 383*4kB (UME) 357*8kB (UME) 195*16kB (UME) 131*32kB (UME) 196*64kB (UME) 181*128kB (UM) 173*256kB (UM) 163*512kB (UM) 144*1024kB (UME) 7*2048kB (UE) 304*4096kB (UM) = 1582132kB [ 173.632835][ T8025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.632851][ T8025] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.632868][ T8025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.632885][ T8025] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.632903][ T8025] 90781 total pagecache pages [ 173.632918][ T8025] 0 pages in swap cache [ 173.632933][ T8025] Free swap = 124996kB [ 173.632950][ T8025] Total swap = 124996kB [ 173.632968][ T8025] 1048443 pages RAM [ 173.632986][ T8025] 0 pages HighMem/MovableOnly [ 173.633005][ T8025] 285875 pages reserved [ 173.633024][ T8025] 0 pages cma reserved [ 175.377822][ T43] audit: type=1400 audit(1788291261.085:593): avc: denied { read append } for pid=8036 comm="syz.3.728" name="usbmon7" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.394562][ T43] audit: type=1400 audit(1788291261.095:594): avc: denied { open } for pid=8036 comm="syz.3.728" path="/dev/usbmon7" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.770723][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.730'. [ 176.613762][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 176.929328][ T1690] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 176.944410][ T43] audit: type=1400 audit(1788291262.645:595): avc: denied { read } for pid=8047 comm="syz.2.729" name="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.964174][ T43] audit: type=1400 audit(1788291262.665:596): avc: denied { read open } for pid=8047 comm="syz.2.729" path="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.009754][ T8045] veth2: entered promiscuous mode [ 177.157138][ T1690] usb 8-1: unable to get BOS descriptor or descriptor too short [ 177.170808][ T1690] usb 8-1: not running at top speed; connect to a high speed hub [ 177.171122][ T1690] usb 8-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 177.191820][ T1690] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.191979][ T1690] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.232999][ T1690] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.233240][ T1690] usb 8-1: Product: syz [ 177.234671][ T1690] usb 8-1: Manufacturer: syz [ 177.234703][ T1690] usb 8-1: SerialNumber: syz [ 177.882609][ T1690] usb 8-1: 3:0: failed to get current value for ch 0 (-71) [ 178.855353][ T1690] usb 8-1: USB disconnect, device number 8 [ 180.120590][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 180.176877][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 180.257292][ T7974] udevd[7974]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.869324][ T5817] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 181.033135][ T5817] usb 7-1: device descriptor read/64, error -71 [ 181.319417][ T5817] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 181.484844][ T5817] usb 7-1: device descriptor read/64, error -71 [ 181.595281][ T5817] usb usb7-port1: attempt power cycle [ 182.070992][ T5817] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 182.128804][ T5817] usb 7-1: device descriptor read/8, error -71 [ 182.371133][ T5817] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 182.396073][ T5817] usb 7-1: device descriptor read/8, error -71 [ 182.504399][ T5817] usb usb7-port1: unable to enumerate USB device [ 186.921243][ T43] audit: type=1400 audit(1788291272.635:597): avc: denied { read write } for pid=8111 comm="syz.4.760" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 186.925015][ T43] audit: type=1400 audit(1788291272.635:598): avc: denied { open } for pid=8111 comm="syz.4.760" path="/177/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 186.936066][ T43] audit: type=1400 audit(1788291272.645:599): avc: denied { ioctl } for pid=8111 comm="syz.4.760" path="/177/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 187.400504][ T8119] loop5: detected capacity change from 0 to 7 [ 187.431847][ T8119] loop5: [ 187.432179][ T8119] loop5: partition table partially beyond EOD, truncated [ 192.129650][ T5102] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 192.286498][ T5102] usb 10-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 192.307586][ T5102] usb 10-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.307756][ T5102] usb 10-1: config 0 interface 0 has no altsetting 0 [ 192.308090][ T5102] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.401520][ T5102] usb 10-1: config 0 descriptor?? [ 193.095171][ T5102] logitech-djreceiver 0003:046D:C70E.0006: unknown main item tag 0x1 [ 193.104076][ T5102] logitech-djreceiver 0003:046D:C70E.0006: ignoring exceeding usage max [ 193.285430][ T5102] logitech-djreceiver 0003:046D:C70E.0006: hidraw1: USB HID v0.01 Device [HID 046d:c70e] on usb-dummy_hcd.5-1/input0 [ 193.375995][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 193.477287][ T5102] usb 10-1: USB disconnect, device number 4 [ 194.088000][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.089969][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.167934][ T8172] fido_id[8172]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/report_descriptor': No such file or directory [ 196.088007][ T5731] Bluetooth: hci0: command 0x0419 tx timeout [ 198.160721][ T5733] Bluetooth: hci0: command 0x0419 tx timeout [ 200.194932][ T8209] netlink: 'syz.3.804': attribute type 11 has an invalid length. [ 200.249400][ T5731] Bluetooth: hci0: command 0x0419 tx timeout [ 201.406149][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.415094][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.420933][ T43] audit: type=1400 audit(1788291287.125:600): avc: denied { map } for pid=8216 comm="syz.2.808" path="pipe:[23643]" dev="pipefs" ino=23643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 201.516166][ T8221] bridge0: entered promiscuous mode [ 201.793827][ T43] audit: type=1400 audit(1788291287.505:601): avc: denied { map } for pid=8224 comm="syz.4.811" path="socket:[22234]" dev="sockfs" ino=22234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 202.052981][ T8221] syz.2.808 (8221) used greatest stack depth: 18896 bytes left [ 202.329396][ T5733] Bluetooth: hci0: command 0x0419 tx timeout [ 202.762869][ T5881] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 202.952059][ T5881] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 202.989751][ T5881] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.996629][ T5881] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.001130][ T5881] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 203.004836][ T5881] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 203.087232][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.093555][ T5881] usb 8-1: Product: syz [ 203.095926][ T5881] usb 8-1: Manufacturer: syz [ 203.098491][ T5881] usb 8-1: SerialNumber: syz [ 203.220030][ T5881] oti6858 8-1:1.0: required endpoints missing [ 203.472470][ T5881] usb 8-1: USB disconnect, device number 9 [ 210.564694][ T8299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.002285][ T9] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 211.203287][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 211.203588][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 211.247286][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.247409][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 211.247733][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.391439][ T8308] xt_policy: neither incoming nor outgoing policy selected [ 211.435002][ T9] uvcvideo 10-1:1.0: Found UVC 1.00 device (046d:0825) [ 212.110869][ T9] uvcvideo 10-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 212.114215][ T9] uvcvideo 10-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 212.114875][ T9] uvcvideo 10-1:1.0: No streaming interface found for terminal 32770. [ 212.216868][ T9] usb 10-1: USB disconnect, device number 5 [ 213.568168][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 213.589603][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 213.602141][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 213.606470][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 213.618950][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 213.624161][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 213.647174][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 213.652303][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 213.658772][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 213.669632][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 216.519546][ T5102] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 216.689314][ T5817] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 216.721717][ T5102] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.774122][ T5102] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.774236][ T5102] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.774371][ T5102] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.774511][ T5102] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.826154][ T5102] usb 10-1: config 0 descriptor?? [ 216.891734][ T5817] usb 8-1: Using ep0 maxpacket: 16 [ 216.901383][ T5817] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 216.920370][ T5817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.926356][ T5817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.930715][ T5817] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.935083][ T5817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.988933][ T5817] usb 8-1: config 0 descriptor?? [ 217.423556][ T43] audit: type=1400 audit(1788291303.125:602): avc: denied { mmap_zero } for pid=8348 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 217.454979][ T5102] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 217.455137][ T5102] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 217.455319][ T5102] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 217.455399][ T5102] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 217.455461][ T5102] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 217.455538][ T5102] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 217.455620][ T5102] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 217.455668][ T5102] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 217.455717][ T5102] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 217.455770][ T5102] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 217.615297][ T5102] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 217.615774][ T5817] microsoft 0003:045E:07DA.0008: unbalanced delimiter at end of report description [ 217.633674][ T5817] microsoft 0003:045E:07DA.0008: parse failed [ 217.637914][ T5817] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 217.712723][ T5102] usb 10-1: USB disconnect, device number 6 [ 217.832218][ T9] usb 8-1: USB disconnect, device number 10 [ 219.363624][ T8356] fido_id[8356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/report_descriptor': No such file or directory [ 223.403538][ T8398] netlink: 224 bytes leftover after parsing attributes in process `syz.4.886'. [ 229.392038][ T8458] tun0: tun_chr_ioctl cmd 2147767511 [ 230.904986][ T43] audit: type=1400 audit(1788291316.605:603): avc: denied { write } for pid=8470 comm="syz.5.914" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.931981][ T43] audit: type=1400 audit(1788291316.635:604): avc: denied { create } for pid=8470 comm="syz.5.914" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 231.081668][ T8471] netlink: 312 bytes leftover after parsing attributes in process `syz.5.914'. [ 231.149863][ T8471] netlink: 1 bytes leftover after parsing attributes in process `syz.5.914'. [ 231.590795][ T43] audit: type=1400 audit(1788291317.295:605): avc: denied { read } for pid=8470 comm="syz.5.914" name="file0" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 231.593794][ T43] audit: type=1400 audit(1788291317.305:606): avc: denied { write } for pid=8470 comm="syz.5.914" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.595980][ T43] audit: type=1400 audit(1788291317.305:607): avc: denied { setattr } for pid=8470 comm="syz.5.914" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.478233][ T8482] netlink: 112 bytes leftover after parsing attributes in process `syz.4.919'. [ 232.639399][ T5825] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 232.846183][ T5825] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 232.893860][ T5825] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 232.894248][ T5825] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 232.945717][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.945940][ T5825] usb 7-1: Product: syz [ 232.946046][ T5825] usb 7-1: Manufacturer: syz [ 232.946067][ T5825] usb 7-1: SerialNumber: syz [ 233.015594][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.921'. [ 233.475023][ T43] audit: type=1400 audit(1788291319.185:608): avc: denied { firmware_load } for pid=7412 comm="kworker/2:6" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 233.624954][ T7412] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.747144][ T43] audit: type=1400 audit(1788291319.455:609): avc: denied { setopt } for pid=8489 comm="syz.4.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.195015][ T5825] usb 7-1: USB disconnect, device number 15 [ 234.891604][ T7412] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 234.897267][ T7412] ath9k_htc: Failed to initialize the device [ 234.926063][ T5825] usb 7-1: ath9k_htc: USB layer deinitialized [ 235.361646][ T5825] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 235.839339][ T1040] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 236.033804][ T1040] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 236.058314][ T1040] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.069846][ T1040] usb 10-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 236.070005][ T1040] usb 10-1: Manufacturer: syz [ 236.156210][ T1040] usb 10-1: config 0 descriptor?? [ 236.271588][ T1040] pwc: Askey VC010 type 2 USB webcam detected. [ 236.627281][ T1040] pwc: recv_control_msg error -32 req 02 val 2b00 [ 236.648568][ T1040] pwc: recv_control_msg error -32 req 02 val 2700 [ 236.864573][ T1040] pwc: recv_control_msg error -71 req 04 val 1000 [ 236.867367][ T1040] pwc: recv_control_msg error -71 req 04 val 1300 [ 236.870393][ T1040] pwc: recv_control_msg error -71 req 04 val 1400 [ 236.873052][ T1040] pwc: recv_control_msg error -71 req 02 val 2000 [ 236.876405][ T1040] pwc: recv_control_msg error -71 req 02 val 2100 [ 236.882280][ T1040] pwc: recv_control_msg error -71 req 04 val 1500 [ 236.888485][ T1040] pwc: recv_control_msg error -71 req 02 val 2500 [ 236.895802][ T1040] pwc: recv_control_msg error -71 req 02 val 2400 [ 236.901268][ T1040] pwc: recv_control_msg error -71 req 02 val 2600 [ 236.908858][ T1040] pwc: recv_control_msg error -71 req 02 val 2900 [ 236.915788][ T1040] pwc: recv_control_msg error -71 req 02 val 2800 [ 236.935556][ T1040] pwc: recv_control_msg error -71 req 04 val 1100 [ 236.939699][ T1040] pwc: recv_control_msg error -71 req 04 val 1200 [ 237.037045][ T1040] pwc: Registered as video103. [ 237.122237][ T1040] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb10/10-1/input/input34 [ 237.233732][ T1040] usb 10-1: USB disconnect, device number 7 [ 240.404301][ T8521] netlink: 84 bytes leftover after parsing attributes in process `syz.5.936'. [ 243.748578][ T43] audit: type=1400 audit(1788291329.425:610): avc: denied { write } for pid=8537 comm="syz.4.941" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.368258][ T25] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 245.540063][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 245.606104][ T25] usb 9-1: New USB device found, idVendor=534d, idProduct=0021, bcdDevice= 0.40 [ 245.632293][ T25] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 175, changing to 7 [ 245.674746][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.677880][ T25] usb 9-1: Product: syz [ 245.683003][ T25] usb 9-1: Manufacturer: syz [ 245.684920][ T25] usb 9-1: SerialNumber: syz [ 246.863495][ T43] audit: type=1400 audit(1788291332.565:611): avc: denied { create } for pid=8551 comm="syz.2.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 247.035663][ T25] usb 9-1: USB disconnect, device number 8 [ 248.760206][ T43] audit: type=1400 audit(1788291334.405:612): avc: denied { bind } for pid=8551 comm="syz.2.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.348077][ T7974] udevd[7974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.314141][ T43] audit: type=1400 audit(1788291336.025:613): avc: denied { read } for pid=8565 comm="syz.4.950" lport=25779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.951189][ T5102] hid_parser_main: 15 callbacks suppressed [ 252.951388][ T5102] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 252.951501][ T5102] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 252.951557][ T5102] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 252.951621][ T5102] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 252.951698][ T5102] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 252.975262][ T5102] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 252.975345][ T5102] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 252.975416][ T5102] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 253.183241][ T5102] hid-generic 0000:0000:0001.0009: hidraw1: HID v0.10 Device [syz0] on syz1 [ 253.299732][ T25] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 253.507754][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 253.566098][ T25] usb 10-1: unable to get BOS descriptor or descriptor too short [ 253.569258][ T25] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 253.580544][ T25] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 253.584270][ T25] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 253.587300][ T25] usb 10-1: config 14 has no interface number 0 [ 253.590204][ T25] usb 10-1: config 14 has no interface number 1 [ 253.593279][ T25] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 253.600543][ T25] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 253.605113][ T25] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 253.609411][ T25] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 253.613825][ T25] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 253.618555][ T25] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.623632][ T25] usb 10-1: config 14 interface 57 has no altsetting 0 [ 253.626103][ T25] usb 10-1: config 14 interface 228 has no altsetting 0 [ 253.680157][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.687203][ T25] usb 10-1: Product: syz [ 253.688963][ T25] usb 10-1: Manufacturer: syz [ 253.690999][ T25] usb 10-1: SerialNumber: syz [ 254.196547][ T8576] fido_id[8576]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.436989][ T25] legousbtower 10-1:14.57: interrupt endpoints not found [ 254.957271][ T25] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 255.019502][ T25] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 255.285945][ T43] audit: type=1400 audit(1788291340.995:614): avc: denied { create } for pid=8581 comm="syz.3.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 255.475713][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.476147][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.642054][ T5809] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 255.851492][ T5809] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 255.943918][ T5809] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.944101][ T5809] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 255.944411][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.287074][ T5809] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 256.940833][ T8591] usb 10-1: LEGO USB Tower reset control request failed [ 256.949505][ T5102] usb 10-1: USB disconnect, device number 8 [ 257.252499][ T5102] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 258.093747][ T43] audit: type=1400 audit(1788291343.765:615): avc: denied { kexec_image_load } for pid=8600 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 258.635750][ T25] usb 7-1: USB disconnect, device number 17 [ 258.700190][ T25] idmouse 7-1:1.0: disconnected [ 259.211911][ T8611] netlink: 'syz.4.965': attribute type 4 has an invalid length. [ 259.344679][ T43] audit: type=1326 audit(1788291345.055:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.5.968" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe81579e159 code=0x0 [ 259.998366][ T5881] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 260.219811][ T5881] usb 8-1: Using ep0 maxpacket: 32 [ 260.265403][ T5881] usb 8-1: unable to get BOS descriptor or descriptor too short [ 260.265808][ T5881] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 260.305701][ T5881] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 260.305853][ T5881] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 260.307245][ T5881] usb 8-1: config 14 has no interface number 0 [ 260.307275][ T5881] usb 8-1: config 14 has no interface number 1 [ 260.307702][ T5881] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 260.307734][ T5881] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 260.307763][ T5881] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 260.307793][ T5881] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 260.307824][ T5881] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 260.307856][ T5881] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.307889][ T5881] usb 8-1: config 14 interface 57 has no altsetting 0 [ 260.307919][ T5881] usb 8-1: config 14 interface 228 has no altsetting 0 [ 260.415748][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.415901][ T5881] usb 8-1: Product: syz [ 260.416024][ T5881] usb 8-1: Manufacturer: syz [ 260.416055][ T5881] usb 8-1: SerialNumber: syz [ 261.180791][ T5881] legousbtower 8-1:14.57: interrupt endpoints not found [ 261.383864][ T70] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 261.609465][ T70] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.662276][ T70] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 261.662610][ T70] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.662642][ T70] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.662762][ T70] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.773128][ T5881] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 261.827742][ T5881] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 262.047944][ T70] usb 9-1: usb_control_msg returned -32 [ 262.049561][ T70] usbtmc 9-1:16.0: can't read capabilities [ 262.303928][ T70] usb 9-1: USB disconnect, device number 9 [ 263.138740][ T8642] netlink: 84 bytes leftover after parsing attributes in process `syz.2.977'. [ 264.039485][ T853] usb 8-1: USB disconnect, device number 11 [ 264.311701][ T853] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 267.020004][ T43] audit: type=1400 audit(1788291352.725:617): avc: denied { ioctl } for pid=8658 comm="syz.4.982" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24774 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.249595][ T853] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 272.168837][ T8686] netlink: 84 bytes leftover after parsing attributes in process `syz.5.996'. [ 272.307634][ T8689] netlink: 84 bytes leftover after parsing attributes in process `syz.2.995'. [ 272.431073][ T8688] cgroup: fork rejected by pids controller in /syz4 [ 273.240239][ T43] audit: type=1400 audit(1788291358.945:618): avc: denied { write } for pid=8764 comm="syz.3.999" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 275.890480][ T43] audit: type=1400 audit(1788291361.595:619): avc: denied { listen } for pid=8803 comm="syz.3.1003" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 277.719824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 277.820607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 278.388927][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.135399][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.540570][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.861816][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.374900][ T5731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.391510][ T5731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.410944][ T5731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.448272][ T5731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.465114][ T5731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.199754][ T13] bridge_slave_1: left allmulticast mode [ 283.201217][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.333058][ T13] bridge_slave_0: left allmulticast mode [ 283.333251][ T13] bridge_slave_0: left promiscuous mode [ 283.337998][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.599776][ T5733] Bluetooth: hci3: command tx timeout [ 285.689596][ T5733] Bluetooth: hci3: command tx timeout [ 285.981208][ T43] audit: type=1400 audit(1788291371.695:620): avc: denied { create } for pid=8845 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.997471][ T43] audit: type=1400 audit(1788291371.705:621): avc: denied { write } for pid=8845 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 287.005697][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.129852][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.200452][ T13] bond0 (unregistering): Released all slaves [ 287.769178][ T5733] Bluetooth: hci3: command tx timeout [ 288.966543][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 289.033580][ T43] audit: type=1400 audit(1788291374.745:622): avc: denied { write } for pid=8856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.384394][ T43] audit: type=1400 audit(1788291375.095:623): avc: denied { ioctl } for pid=8861 comm="syz.2.1024" path="socket:[26006]" dev="sockfs" ino=26006 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.853112][ T5733] Bluetooth: hci3: command tx timeout [ 290.163793][ T43] audit: type=1400 audit(1788291375.865:624): avc: denied { write } for pid=8868 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.679548][ T13] hsr_slave_0: left promiscuous mode [ 290.702175][ T13] hsr_slave_1: left promiscuous mode [ 290.743208][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.743431][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.786893][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.787049][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.977528][ T13] veth1_macvtap: left promiscuous mode [ 290.977770][ T13] veth0_macvtap: left promiscuous mode [ 290.990798][ T13] veth1_vlan: left promiscuous mode [ 290.991533][ T13] veth0_vlan: left promiscuous mode [ 293.178499][ T43] audit: type=1400 audit(1788291378.885:625): avc: denied { map } for pid=8890 comm="syz.5.1028" path="socket:[26023]" dev="sockfs" ino=26023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 293.194436][ T43] audit: type=1400 audit(1788291378.885:626): avc: denied { read write } for pid=8890 comm="syz.5.1028" path="socket:[26023]" dev="sockfs" ino=26023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 293.255387][ T43] audit: type=1400 audit(1788291378.965:627): avc: denied { setopt } for pid=8890 comm="syz.5.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.372197][ T43] audit: type=1400 audit(1788291379.085:628): avc: denied { write } for pid=8890 comm="syz.5.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.789416][ T13] team0 (unregistering): Port device team_slave_1 removed [ 295.006918][ T13] team0 (unregistering): Port device team_slave_0 removed [ 296.665981][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 296.688838][ T8878] syzkaller0: entered promiscuous mode [ 296.688968][ T8878] syzkaller0: entered allmulticast mode [ 296.728908][ T8899] BUG: unable to handle page fault for address: fffffffffffffc10 [ 296.731518][ T8899] #PF: supervisor read access in kernel mode [ 296.733875][ T8899] #PF: error_code(0x0000) - not-present page [ 296.738438][ T8899] PGD eb99067 P4D eb99067 PUD eb9b067 PMD 0 [ 296.740473][ T8899] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 296.742894][ T8899] CPU: 2 UID: 0 PID: 8899 Comm: syz.2.1029 Not tainted syzkaller #0 PREEMPT(full) [ 296.745931][ T8899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.749197][ T8899] RIP: 0010:strnlen+0x4b/0x80 [ 296.751031][ T8899] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48 [ 296.757668][ T8899] RSP: 0018:ffffc9002422f120 EFLAGS: 00010246 [ 296.759579][ T8899] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 296.762147][ T8899] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 296.765030][ T8899] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 296.768551][ T8899] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 296.772028][ T8899] R13: ffff88801c6f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 296.775283][ T8899] FS: 00007f732a4976c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 296.779000][ T8899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.782146][ T8899] CR2: fffffffffffffc10 CR3: 000000005c589000 CR4: 0000000000352ef0 [ 296.785323][ T8899] Call Trace: [ 296.786909][ T8899] [ 296.788268][ T8899] trace_event_raw_event_drv_net_setup_tc+0x101/0x5d0 [ 296.791195][ T8899] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 296.794114][ T8899] ? __pfx___might_resched+0x10/0x10 [ 296.795786][ T8899] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 296.797619][ T8899] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 296.799575][ T8899] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 296.801528][ T8899] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 296.803754][ T8899] ? __pfx_down_write+0x10/0x10 [ 296.805372][ T8899] tcf_block_get_ext+0x7ed/0x1950 [ 296.807032][ T8899] tcf_block_get+0xa8/0x100 [ 296.808483][ T8899] ? __pfx_tcf_block_get+0x10/0x10 [ 296.810218][ T8899] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 296.812703][ T8899] ? lockdep_init_map_type+0x5c/0x250 [ 296.814976][ T8899] ? __pfx_qfq_init_qdisc+0x10/0x10 [ 296.816768][ T8899] qfq_init_qdisc+0x3d/0x370 [ 296.818319][ T8899] ? __pfx_qfq_init_qdisc+0x10/0x10 [ 296.820089][ T8899] qdisc_create+0x47b/0x1060 [ 296.822151][ T8899] tc_modify_qdisc+0xdcf/0x2120 [ 296.824393][ T8899] ? __mutex_lock+0x829/0x1bd0 [ 296.826594][ T8899] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 296.828872][ T8899] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 296.830802][ T8899] rtnetlink_rcv_msg+0x3c9/0xe90 [ 296.832875][ T8899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.835188][ T8899] ? trace_event_buffer_commit+0x20a/0xa80 [ 296.837715][ T8899] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 296.840477][ T8899] netlink_rcv_skb+0x159/0x420 [ 296.842749][ T8899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.845159][ T8899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.847415][ T8899] ? netlink_deliver_tap+0x1ae/0xcc0 [ 296.849380][ T8899] netlink_unicast+0x585/0x850 [ 296.851107][ T8899] ? __pfx_netlink_unicast+0x10/0x10 [ 296.853451][ T8899] netlink_sendmsg+0x8b0/0xda0 [ 296.855656][ T8899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.857983][ T8899] ? selinux_socket_sendmsg+0x198/0x2f0 [ 296.860410][ T8899] ____sys_sendmsg+0xa4d/0xbe0 [ 296.862676][ T8899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.864850][ T8899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.866939][ T8899] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 296.869690][ T8899] ___sys_sendmsg+0x190/0x1e0 [ 296.871411][ T8899] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.873714][ T8899] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 296.876344][ T8899] ? find_held_lock+0x2b/0x80 [ 296.878383][ T8899] __sys_sendmsg+0x160/0x210 [ 296.880604][ T8899] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.882975][ T8899] do_syscall_64+0x123/0x790 [ 296.885117][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.888070][ T8899] RIP: 0033:0x7f732959e159 [ 296.890330][ T8899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.897073][ T8899] RSP: 002b:00007f732a497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.899713][ T8899] RAX: ffffffffffffffda RBX: 00007f7329826180 RCX: 00007f732959e159 [ 296.902670][ T8899] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 296.905933][ T8899] RBP: 00007f7329635024 R08: 0000000000000000 R09: 0000000000000000 [ 296.909482][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.913012][ T8899] R13: 00007f7329826218 R14: 00007f7329826180 R15: 00007ffcfeb42308 [ 296.916148][ T8899] [ 296.917172][ T8899] Modules linked in: [ 296.918773][ T8899] CR2: fffffffffffffc10 [ 296.920466][ T8899] ---[ end trace 0000000000000000 ]--- [ 296.922821][ T8899] RIP: 0010:strnlen+0x4b/0x80 [ 296.922854][ T8899] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48 [ 296.922874][ T8899] RSP: 0018:ffffc9002422f120 EFLAGS: 00010246 [ 296.922892][ T8899] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 296.922905][ T8899] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 296.922917][ T8899] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 296.922929][ T8899] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 296.922941][ T8899] R13: ffff88801c6f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 296.922956][ T8899] FS: 00007f732a4976c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 296.922989][ T8899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.923004][ T8899] CR2: fffffffffffffc10 CR3: 000000005c589000 CR4: 0000000000352ef0 [ 296.923019][ T8899] Kernel panic - not syncing: Fatal exception [ 296.958061][ T8899] Kernel Offset: disabled [ 296.959419][ T8899] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:36:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9000324fb70 RCX=0000000000000002 RDX=1ffff92000649f72 RSI=ffffffff821193e9 RDI=ffffc9000324fb90 RBP=ffff88801d680780 RSP=ffffc9000324fae8 R8 =0000000000000001 R9 =0000000000000000 R10=8000000000000002 R11=0000000000000001 R12=0000000000000200 R13=0000000000000033 R14=ffffffff8ece5d00 R15=ffffffff8e3d6ac2 RIP=ffffffff82151dbf RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9798e1b780 ffffffff 00c00000 GS =0000 ffff8880d5b64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555cbd9d4168 CR3=000000002851f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000cc160081 Opmask01=0000000000000001 Opmask02=00000000bfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555cbd9f5884 0000555cbd9f5884 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced70a450 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555cbdabf1b0 0000555cbdaf1e90 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555cbd9dd870 0000555cbd9dd920 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a6425006469 702e73257325002f 6e75722f7261762f 0036353261687300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a410000414c 550b56005600000a 4b50570a5744530a 00131017444d5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001001400000024 fd80400ac73b28f1 6a97285500020014 0000004800000080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 000014e6000014e6 ffffffffffffffff 000600148fd1c414 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 befe0e4000000000 000080fe00010014 00000024fd80400a c73b28f16a972855 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000014e3000014e3 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000600148406075d c92a57d000000000 000080fe00010014 00000023fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000dead4ead RBX=ffffffff9bb8fb60 RCX=1ffffffff1dcf8da RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9bb8fb64 RBP=0000000000000082 RSP=ffffc90000107468 R8 =ffffffff8533e6e9 R9 =0000000000000000 R10=ffffffff948c5480 R11=000000000000761b R12=1ffff92000020e8e R13=ffff8880234a2080 R14=ffffffff9bb8fb58 R15=0000000000001587 RIP=ffffffff81e77af8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000240 CR3=0000000035e6f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfeb427f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfeb427f6 00007ffcfeb427fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7329635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7329635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73296357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7329635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000190 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000190 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afd015 RDI=ffffffff9bc60ca0 RBP=ffffffff9bc60c60 RSP=ffffc9002422e838 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000002d R14=0000000000000004 R15=ffffc9002422eb50 RIP=ffffffff85afd03f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f732a4976c0 ffffffff 00c00000 GS =0000 ffff8880d5d64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=000000005c589000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000004000010015 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001100010015 0000000900000050 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 00001fff01000045 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000f00000054 0000000000000050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000c 0000000400000024 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400010015 0000000200000048 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000818ffffffff ffffffff00060014 fe8aed157ca49016 00000000000080fe ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 0000081800000818 ffffffffffffffff 00060014fe8aed15 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ca4901600000000 000080fe00010014 00000005fd80400a c8f2cc626a972825 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000007e1000007e1 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000600140268e3e4 dc55b09500000000 000080fe00010014 00000003fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=84b3027fec0bad00 RBX=1ffff9200498ce96 RCX=0000000000000001 RDX=8000000052578027 RSI=00007fe814f75000 RDI=ffff888023890000 RBP=ffff888023890000 RSP=ffffc90024c674b0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=8000000052578027 R14=dffffc0000000000 R15=ffffea0001495e18 RIP=ffffffff828b5898 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2a3262 CR3=000000003c7be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000004000010015 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001100010015 0000000900000050 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 00001fff01000045 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000f00000054 0000000000000050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000c 0000000400000024 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400010015 0000000200000048 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000818ffffffff ffffffff00060014 fe8aed157ca49016 00000000000080fe ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 0000081800000818 ffffffffffffffff 00060014fe8aed15 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ca4901600000000 000080fe00010014 00000005fd80400a c8f2cc626a972825 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000007e1000007e1 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000600140268e3e4 dc55b09500000000 000080fe00010014 00000003fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000