last executing test programs: 599.734447ms ago: executing program 1 (id=641): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e2409570c"], 0x27) 599.370467ms ago: executing program 3 (id=642): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x40000, 0x1, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) 542.384837ms ago: executing program 1 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000540)={0x8, 0x0, [{0x0, 0x80000, 0x7, 0xffffffff, 0x0, 0x800}, {0x0, 0x4}, {0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x80000001, 0x8}, {0xc0000000, 0xad49, 0x0, 0x20000000, 0x4329, 0x0, 0x9}, {0xb, 0x0, 0x4, 0x80000000, 0x2, 0x8, 0x200}, {0x5, 0x0, 0x6, 0x9, 0x15b, 0x5, 0x80000001}, {0xc0000001, 0x5, 0x0, 0x10000, 0xce, 0x35e, 0x5}, {0xc0000001, 0x8, 0x0, 0x17c, 0x1, 0xe, 0x2}]}) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r4) 541.987805ms ago: executing program 3 (id=646): syz_emit_vhci(&(0x7f0000003800)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) 541.913802ms ago: executing program 3 (id=647): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc8, 0x5b67, 0x3, 0x7b05, 0xfffc}}}}, 0xe) 481.29472ms ago: executing program 1 (id=650): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = socket$inet(0x2, 0x1, 0x7) sendmmsg$inet(r6, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="9f75e61c9a3e7fdbf0743a564b4d7d2efa1694b09f76831e4006de3a94d4eecf", 0x20}], 0x1}}], 0x1, 0x4004811) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 481.183128ms ago: executing program 2 (id=651): unshare(0x6e000000) 481.069599ms ago: executing program 3 (id=652): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r1}) 412.814962ms ago: executing program 3 (id=653): unshare(0x6a040000) 352.653436ms ago: executing program 0 (id=655): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}, {0xa, 0x4e22, 0x7, @local, 0x8001}, 0xffffffffffffffff, 0x8}}, 0x48) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c92012000e00050017030a"], 0x17) 352.152347ms ago: executing program 1 (id=656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)='n', 0x1}], 0x1) recvfrom(r0, &(0x7f0000000140)=""/146, 0x92, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 301.926977ms ago: executing program 0 (id=657): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="46e0b6fb115e", 0x6}], 0x1) 301.747988ms ago: executing program 2 (id=658): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) 301.666676ms ago: executing program 0 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a30000000001400028006000100f5020000050002002000000008000500000000002c0004800800010000000001200007000c000100706f8369637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 232.48568ms ago: executing program 2 (id=660): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = socket$inet(0x2, 0x1, 0x7) sendmmsg$inet(r6, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="9f75e61c9a3e7fdbf0743a564b4d7d2efa1694b09f76831e4006de3a94d4eecf", 0x20}], 0x1}}], 0x1, 0x4004811) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 232.277328ms ago: executing program 0 (id=661): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000540)={0x8, 0x0, [{0x0, 0x80000, 0x7, 0xffffffff, 0x0, 0x800}, {0x0, 0x4}, {0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x80000001, 0x8}, {0xc0000000, 0xad49, 0x0, 0x20000000, 0x4329, 0x0, 0x9}, {0xb, 0x0, 0x4, 0x80000000, 0x2, 0x8, 0x200}, {0x5, 0x0, 0x6, 0x9, 0x15b, 0x5, 0x80000001}, {0xc0000001, 0x5, 0x0, 0x10000, 0xce, 0x35e, 0x5}, {0xc0000001, 0x8, 0x0, 0x17c, 0x1, 0xe, 0x2}]}) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r4) 152.252973ms ago: executing program 0 (id=662): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r5}, 0x8) 152.069321ms ago: executing program 3 (id=663): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x183098, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, 0x0) 110.547697ms ago: executing program 2 (id=664): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d382e23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002580)=""/4046, 0xfce, 0x12, 0x0, 0x0) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 80.193448ms ago: executing program 1 (id=665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 71.738988ms ago: executing program 2 (id=666): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x200}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x4040840) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c844}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 71.384047ms ago: executing program 0 (id=667): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r3], 0x44}}, 0x804) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r4, &(0x7f0000000040), 0x0, 0x48000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 6.120271ms ago: executing program 2 (id=668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) write(r2, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r2, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r3, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 0s ago: executing program 1 (id=669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:38264' (ED25519) to the list of known hosts. [ 48.490812][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 48.490830][ T42] audit: type=1400 audit(1785634778.056:141): avc: denied { mounton } for pid=5715 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.502861][ T42] audit: type=1400 audit(1785634778.066:142): avc: denied { mount } for pid=5715 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.506077][ T5715] cgroup: Unknown subsys name 'net' [ 48.519777][ T42] audit: type=1400 audit(1785634778.086:143): avc: denied { unmount } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.708678][ T5715] cgroup: Unknown subsys name 'cpuset' [ 48.715040][ T5715] cgroup: Unknown subsys name 'rlimit' [ 48.896578][ T42] audit: type=1400 audit(1785634778.466:144): avc: denied { setattr } for pid=5715 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.904437][ T42] audit: type=1400 audit(1785634778.476:145): avc: denied { create } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.912940][ T42] audit: type=1400 audit(1785634778.476:146): avc: denied { write } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.922807][ T42] audit: type=1400 audit(1785634778.476:147): avc: denied { read } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.932375][ T42] audit: type=1400 audit(1785634778.486:148): avc: denied { mounton } for pid=5715 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.944386][ T42] audit: type=1400 audit(1785634778.486:149): avc: denied { mount } for pid=5715 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.953333][ T42] audit: type=1400 audit(1785634778.486:150): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.969099][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.971445][ T5715] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.655200][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 54.655212][ T42] audit: type=1400 audit(1785634784.226:158): avc: denied { execmem } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.843005][ T42] audit: type=1400 audit(1785634784.406:159): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.862724][ T42] audit: type=1400 audit(1785634784.406:160): avc: denied { read write } for pid=5732 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.871667][ T42] audit: type=1400 audit(1785634784.416:161): avc: denied { open } for pid=5732 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.876718][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.880934][ T42] audit: type=1400 audit(1785634784.426:162): avc: denied { ioctl } for pid=5732 comm="syz-executor" path="socket:[7202]" dev="sockfs" ino=7202 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.885585][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.898858][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.899162][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.903350][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.903566][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.904598][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.905337][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.906882][ T5736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.912665][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.913293][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.915708][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.916107][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.916639][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.918937][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.921714][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.924006][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.928081][ T42] audit: type=1400 audit(1785634784.486:163): avc: denied { read } for pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.928916][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.929003][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.929911][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.932030][ T42] audit: type=1400 audit(1785634784.486:164): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.970406][ T42] audit: type=1400 audit(1785634784.496:165): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.979221][ T42] audit: type=1400 audit(1785634784.506:166): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.988345][ T42] audit: type=1400 audit(1785634784.546:167): avc: denied { sys_module } for pid=5732 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.666906][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.669872][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.672278][ T5733] bridge_slave_0: entered allmulticast mode [ 55.676209][ T5733] bridge_slave_0: entered promiscuous mode [ 55.681028][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.683348][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.685904][ T5733] bridge_slave_1: entered allmulticast mode [ 55.688716][ T5733] bridge_slave_1: entered promiscuous mode [ 55.753447][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.757936][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.760976][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.763587][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.767532][ T5732] bridge_slave_0: entered allmulticast mode [ 55.770295][ T5732] bridge_slave_0: entered promiscuous mode [ 55.773733][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.776002][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.778240][ T5732] bridge_slave_1: entered allmulticast mode [ 55.780933][ T5732] bridge_slave_1: entered promiscuous mode [ 55.807129][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.809374][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.812270][ T5734] bridge_slave_0: entered allmulticast mode [ 55.815193][ T5734] bridge_slave_0: entered promiscuous mode [ 55.819336][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.821763][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.824755][ T5734] bridge_slave_1: entered allmulticast mode [ 55.827320][ T5734] bridge_slave_1: entered promiscuous mode [ 55.889525][ T5733] team0: Port device team_slave_0 added [ 55.896135][ T5733] team0: Port device team_slave_1 added [ 55.900061][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.917174][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.922275][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.934222][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.948148][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.951521][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.955209][ T5746] bridge_slave_0: entered allmulticast mode [ 55.958281][ T5746] bridge_slave_0: entered promiscuous mode [ 55.963112][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.966182][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.969239][ T5746] bridge_slave_1: entered allmulticast mode [ 55.972951][ T5746] bridge_slave_1: entered promiscuous mode [ 55.987838][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.990839][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.001650][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.027401][ T5732] team0: Port device team_slave_0 added [ 56.042759][ T5734] team0: Port device team_slave_0 added [ 56.045768][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.049388][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.059785][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.073930][ T5732] team0: Port device team_slave_1 added [ 56.077785][ T5734] team0: Port device team_slave_1 added [ 56.100183][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.121958][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.132614][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.135042][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.143050][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.147690][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.149965][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.157909][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.167615][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.169796][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.177738][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.189269][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.191879][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.202895][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.241013][ T5733] hsr_slave_0: entered promiscuous mode [ 56.244638][ T5733] hsr_slave_1: entered promiscuous mode [ 56.249775][ T5746] team0: Port device team_slave_0 added [ 56.274914][ T5746] team0: Port device team_slave_1 added [ 56.296052][ T5734] hsr_slave_0: entered promiscuous mode [ 56.299074][ T5734] hsr_slave_1: entered promiscuous mode [ 56.301720][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 56.304253][ T5734] Cannot create hsr debugfs directory [ 56.329561][ T5732] hsr_slave_0: entered promiscuous mode [ 56.333105][ T5732] hsr_slave_1: entered promiscuous mode [ 56.336453][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 56.338430][ T5732] Cannot create hsr debugfs directory [ 56.341368][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.343594][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.351807][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.356458][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.358740][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.366750][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.496468][ T5746] hsr_slave_0: entered promiscuous mode [ 56.499532][ T5746] hsr_slave_1: entered promiscuous mode [ 56.502189][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 56.504086][ T5746] Cannot create hsr debugfs directory [ 56.810517][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.821695][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.824949][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.830767][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.834194][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.839732][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.843344][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.847533][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.908334][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.916638][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.920200][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.924788][ T5742] Bluetooth: hci2: command tx timeout [ 56.926062][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.931438][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.937930][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.941400][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.947491][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.004404][ T64] Bluetooth: hci1: command tx timeout [ 57.004412][ T5745] Bluetooth: hci3: command tx timeout [ 57.005509][ T5742] Bluetooth: hci0: command tx timeout [ 57.024640][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.031207][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.035374][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.042843][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.046759][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.052408][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.066614][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.072124][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.164739][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.170711][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.174833][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.181317][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.185670][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.190810][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.194692][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.200141][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.217927][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.249070][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.266870][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.283958][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.298549][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.301981][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.307897][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.311002][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.335809][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.338790][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.345485][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.348484][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.378069][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.422000][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.437327][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.440495][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.462654][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.470655][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.473608][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.501217][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.519064][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.522132][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.542310][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.545403][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.808241][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.823529][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.879178][ T5733] veth0_vlan: entered promiscuous mode [ 57.883931][ T5746] veth0_vlan: entered promiscuous mode [ 57.892383][ T5733] veth1_vlan: entered promiscuous mode [ 57.901975][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.908949][ T5746] veth1_vlan: entered promiscuous mode [ 57.915784][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.979540][ T5733] veth0_macvtap: entered promiscuous mode [ 57.991318][ T5734] veth0_vlan: entered promiscuous mode [ 57.994405][ T5732] veth0_vlan: entered promiscuous mode [ 58.001531][ T5733] veth1_macvtap: entered promiscuous mode [ 58.007002][ T5746] veth0_macvtap: entered promiscuous mode [ 58.016291][ T5732] veth1_vlan: entered promiscuous mode [ 58.020039][ T5746] veth1_macvtap: entered promiscuous mode [ 58.031376][ T5734] veth1_vlan: entered promiscuous mode [ 58.054228][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.066631][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.071493][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.076622][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.111095][ T5732] veth0_macvtap: entered promiscuous mode [ 58.126855][ T5732] veth1_macvtap: entered promiscuous mode [ 58.139157][ T5734] veth0_macvtap: entered promiscuous mode [ 58.156805][ T5734] veth1_macvtap: entered promiscuous mode [ 58.182135][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.194370][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.215101][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.221278][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.247236][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.255781][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.256120][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.258595][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.284713][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.315822][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.320022][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.338290][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.341684][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.385655][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.388862][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.406982][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.414536][ T5813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.419286][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.419351][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.422197][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.438156][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.471460][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.477498][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.511417][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.520038][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.551012][ T5886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5886 comm=syz.2.3 [ 58.558178][ T5886] netlink: 'syz.2.3': attribute type 12 has an invalid length. [ 58.562077][ T5886] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 58.565077][ T5886] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.567975][ T5886] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 58.571079][ T5886] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 58.574761][ T5886] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.578340][ T5886] Zero length message leads to an empty skb [ 58.580102][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.589822][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.594813][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.597266][ T5887] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 58.605413][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.633968][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.663924][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.671339][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.753272][ T5894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 58.761660][ T5894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5894 comm=syz.1.2 [ 58.764052][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.823940][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.873866][ T5813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.881927][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.887828][ T5813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.942704][ T5903] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 58.945293][ T5903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.953380][ T5903] vhci_hcd vhci_hcd.0: Device attached [ 59.004737][ T5742] Bluetooth: hci2: command tx timeout [ 59.027129][ T5905] vhci_hcd: connection closed [ 59.029783][ T5813] vhci_hcd vhci_hcd.2: stop threads [ 59.035527][ T5813] vhci_hcd vhci_hcd.2: release socket [ 59.037870][ T5813] vhci_hcd vhci_hcd.2: disconnect device [ 59.083913][ T64] Bluetooth: hci1: command tx timeout [ 59.084068][ T5742] Bluetooth: hci3: command tx timeout [ 59.090580][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 59.097717][ T5742] Bluetooth: hci0: command tx timeout [ 59.376668][ T5921] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 59.415725][ T5921] bridge1: entered promiscuous mode [ 59.473176][ T5923] bridge1: entered promiscuous mode [ 59.569037][ T5925] process 'syz.0.15' launched './file1' with NULL argv: empty string added [ 59.975953][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 59.975969][ T42] audit: type=1400 audit(1785634789.546:226): avc: denied { map_create } for pid=5948 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.985104][ T42] audit: type=1400 audit(1785634789.546:227): avc: denied { map_read map_write } for pid=5948 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.027708][ T42] audit: type=1400 audit(1785634789.596:228): avc: denied { read write } for pid=5950 comm="syz.2.23" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 60.035016][ T42] audit: type=1400 audit(1785634789.596:229): avc: denied { open } for pid=5950 comm="syz.2.23" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 60.042262][ T42] audit: type=1400 audit(1785634789.596:230): avc: denied { mounton } for pid=5950 comm="syz.2.23" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.241002][ T42] audit: type=1400 audit(1785634789.806:231): avc: denied { unmount } for pid=5950 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 60.308279][ T5742] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 60.309106][ T42] audit: type=1400 audit(1785634789.876:232): avc: denied { read write } for pid=5954 comm="syz.2.24" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.320144][ T42] audit: type=1400 audit(1785634789.876:233): avc: denied { open } for pid=5954 comm="syz.2.24" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.330078][ T42] audit: type=1400 audit(1785634789.876:234): avc: denied { ioctl } for pid=5954 comm="syz.2.24" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.448853][ T42] audit: type=1400 audit(1785634790.016:235): avc: denied { create } for pid=5956 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.754651][ T1045] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.934577][ T1045] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 60.937919][ T1045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.940844][ T1045] usb 7-1: Product: syz [ 60.942172][ T1045] usb 7-1: Manufacturer: syz [ 60.944339][ T1045] usb 7-1: SerialNumber: syz [ 60.956288][ T1045] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 60.968064][ T1045] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 60.977016][ T1045] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 61.084431][ T5742] Bluetooth: hci2: command tx timeout [ 61.164689][ T5742] Bluetooth: hci0: command tx timeout [ 61.165022][ T5745] Bluetooth: hci1: command tx timeout [ 61.168747][ T64] Bluetooth: hci3: command tx timeout [ 61.296417][ T5994] CacheFiles: No cache directory specified [ 61.512835][ T6014] netlink: 'syz.0.44': attribute type 39 has an invalid length. [ 61.658620][ T6021] netlink: 48 bytes leftover after parsing attributes in process `syz.1.46'. [ 61.767199][ T6028] FAULT_INJECTION: forcing a failure. [ 61.767199][ T6028] name failslab, interval 1, probability 0, space 0, times 1 [ 61.775831][ T6028] CPU: 2 UID: 0 PID: 6028 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT(full) [ 61.775854][ T6028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.775876][ T6028] Call Trace: [ 61.775892][ T6028] [ 61.775899][ T6028] dump_stack_lvl+0x100/0x190 [ 61.775972][ T6028] should_fail_ex.cold+0x5/0xa [ 61.775999][ T56] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.775994][ T6028] should_failslab+0xc2/0x120 [ 61.776026][ T6028] kmem_cache_alloc_noprof+0x91/0x6a0 [ 61.776045][ T6028] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 61.776070][ T6028] ? ptlock_alloc+0x1f/0x70 [ 61.776099][ T6028] ptlock_alloc+0x1f/0x70 [ 61.776123][ T6028] pte_alloc_one+0x82/0x3d0 [ 61.776148][ T6028] do_fault+0x86c/0x1750 [ 61.776174][ T6028] __handle_mm_fault+0x187d/0x2a00 [ 61.776204][ T6028] ? reacquire_held_locks+0xce/0x1e0 [ 61.776226][ T6028] ? __pfx___handle_mm_fault+0x10/0x10 [ 61.776255][ T6028] ? lock_vma_under_rcu+0x17c/0x590 [ 61.776284][ T6028] ? lockdep_hardirqs_on+0x78/0x100 [ 61.776337][ T6028] handle_mm_fault+0x37b/0xa30 [ 61.776367][ T6028] do_user_addr_fault+0x5a3/0x12f0 [ 61.776403][ T6028] exc_page_fault+0x6f/0xd0 [ 61.776423][ T6028] asm_exc_page_fault+0x26/0x30 [ 61.776439][ T6028] RIP: 0033:0x7f241fc728b6 [ 61.776454][ T6028] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 61.776469][ T6028] RSP: 002b:00007ffe2a119bd0 EFLAGS: 00010202 [ 61.776483][ T6028] RAX: 000000110c438000 RBX: ffffffff816ecbed RCX: 0000000000000005 [ 61.776494][ T6028] RDX: 0000000000000bed RSI: 0000000000003b2f RDI: 0000000000000020 [ 61.776504][ T6028] RBP: 0000000000000000 R08: 00007f2420010000 R09: 00007f2420012000 [ 61.776514][ T6028] R10: 00000000816ecbf1 R11: 0000000000000007 R12: 00007f2420026038 [ 61.776523][ T6028] R13: 000000000000036d R14: ffffffff816ecbed R15: 00007f2420b55720 [ 61.776532][ T6028] ? netdev_core_stats_inc.cold+0x5/0x8b [ 61.776552][ T6028] ? netdev_core_stats_inc.cold+0x5/0x8b [ 61.776580][ T6028] [ 61.776786][ T6028] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 61.869495][ T6028] FAULT_INJECTION: forcing a failure. [ 61.869495][ T6028] name fail_futex, interval 1, probability 0, space 0, times 1 [ 61.874871][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT(full) [ 61.874893][ T6028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.874902][ T6028] Call Trace: [ 61.874908][ T6028] [ 61.874914][ T6028] dump_stack_lvl+0x100/0x190 [ 61.874941][ T6028] should_fail_ex.cold+0x5/0xa [ 61.874962][ T6028] get_futex_key+0x1d2/0x14f0 [ 61.874988][ T6028] ? __pfx_get_futex_key+0x10/0x10 [ 61.875017][ T6028] ? fault_dirty_shared_page+0x16e/0x5a0 [ 61.875036][ T6028] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 61.875071][ T6028] ? __pfx_filemap_map_pages+0x10/0x10 [ 61.875096][ T6028] ? do_fault+0x644/0x1750 [ 61.875139][ T6028] futex_wake+0xf4/0x5e0 [ 61.875159][ T6028] ? __pfx_futex_wake+0x10/0x10 [ 61.875178][ T6028] ? __pfx___handle_mm_fault+0x10/0x10 [ 61.875218][ T6028] ? __pfx___css_rstat_updated+0x10/0x10 [ 61.875244][ T6028] do_futex+0x2b2/0x440 [ 61.875269][ T6028] ? __pfx_do_futex+0x10/0x10 [ 61.875291][ T6028] ? find_held_lock+0x2b/0x80 [ 61.875305][ T6028] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 61.875325][ T6028] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 61.875351][ T6028] __x64_sys_futex+0x34f/0x4d0 [ 61.875378][ T6028] ? __pfx___x64_sys_futex+0x10/0x10 [ 61.875411][ T6028] do_syscall_64+0x115/0x870 [ 61.875432][ T6028] ? clear_bhb_loop+0x40/0x90 [ 61.875452][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.875468][ T6028] RIP: 0033:0x7f241fd9e019 [ 61.875482][ T6028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.875497][ T6028] RSP: 002b:00007ffe2a119ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 61.875512][ T6028] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f241fd9e019 [ 61.875522][ T6028] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2420025fa8 [ 61.875532][ T6028] RBP: 0000000000001ec8 R08: 0000000000000004 R09: 0000000000000000 [ 61.875541][ T6028] R10: 00007f2420025fa0 R11: 0000000000000246 R12: 0000000000000000 [ 61.875551][ T6028] R13: 00007f2420025fac R14: 00007f2420025fa8 R15: 00007f2420025fa0 [ 61.875573][ T6028] [ 61.925577][ T56] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.935448][ T6028] FAULT_INJECTION: forcing a failure. [ 61.935448][ T6028] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.942201][ T56] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 61.944296][ T6028] CPU: 2 UID: 0 PID: 6028 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT(full) [ 61.944319][ T6028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.944329][ T6028] Call Trace: [ 61.944335][ T6028] [ 61.944343][ T6028] dump_stack_lvl+0x100/0x190 [ 61.944371][ T6028] should_fail_ex.cold+0x5/0xa [ 61.944398][ T6028] _copy_from_user+0x2e/0xd0 [ 61.944443][ T6028] get_timespec64+0x8d/0x240 [ 61.944464][ T6028] ? __pfx_get_timespec64+0x10/0x10 [ 61.944490][ T6028] __x64_sys_clock_nanosleep+0x1ce/0x480 [ 61.944512][ T6028] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 61.944540][ T6028] do_syscall_64+0x115/0x870 [ 61.944562][ T6028] ? clear_bhb_loop+0x40/0x90 [ 61.944584][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.944602][ T6028] RIP: 0033:0x7f241fd5e84e [ 61.944617][ T6028] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.944632][ T6028] RSP: 002b:00007ffe2a119c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 61.944648][ T6028] RAX: ffffffffffffffda RBX: 0000555567bbf500 RCX: 00007f241fd5e84e [ 61.944658][ T6028] RDX: 00007ffe2a119cc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.944667][ T6028] RBP: 00007f2420027da0 R08: 0000000000000000 R09: 0000000000000000 [ 61.944676][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000f406 [ 61.944685][ T6028] R13: 00007f242002609c R14: 000000000000f1ac R15: 00007f2420026090 [ 61.944707][ T6028] [ 62.041985][ T56] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.047146][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.050531][ T56] usb 8-1: Product: syz [ 62.052327][ T56] usb 8-1: Manufacturer: syz [ 62.054379][ T56] usb 8-1: SerialNumber: syz [ 62.269418][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.275253][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.286075][ T5998] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 62.294977][ T56] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 62.299808][ T9] usb 7-1: USB disconnect, device number 2 [ 62.303270][ T56] usb 8-1: USB disconnect, device number 2 [ 62.329423][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 62.337301][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 62.343133][ T9] ti_usb_3410_5052 7-1:2.0: device disconnected [ 62.764023][ T1045] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.923779][ T1045] usb 8-1: Using ep0 maxpacket: 8 [ 62.931027][ T1045] usb 8-1: config index 0 descriptor too short (expected 301, got 72) [ 62.936139][ T1045] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 62.939385][ T1045] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.942412][ T1045] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.947450][ T1045] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 62.950772][ T1045] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.954478][ T1045] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 62.957481][ T1045] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.164707][ T64] Bluetooth: hci2: command tx timeout [ 63.168373][ T6063] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 63.178073][ T1045] usb 8-1: GET_CAPABILITIES returned 0 [ 63.180343][ T1045] usbtmc 8-1:16.0: can't read capabilities [ 63.236241][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.60'. [ 63.244197][ T64] Bluetooth: hci3: command tx timeout [ 63.244449][ T5745] Bluetooth: hci1: command tx timeout [ 63.253766][ T5745] Bluetooth: hci0: command tx timeout [ 63.382905][ T5839] usb 8-1: USB disconnect, device number 3 [ 63.406014][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'. [ 63.994091][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 64.154151][ T6081] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 64.156971][ T6081] ref_ctr increment failed for inode: 0x55 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c1c4c80 [ 64.166101][ T6081] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 64.169778][ T6081] ref_ctr decrement failed for inode: 0x55 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c1c4c80 [ 64.173308][ T6081] uprobe: syz.3.65:6081 failed to unregister, leaking uprobe [ 64.396620][ T6093] null_blk: nullb1: using native zone append [ 64.440130][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'. [ 64.443883][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'. [ 64.468723][ T6093] null_blk: disk nullb1 created [ 64.581457][ T6107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.74'. [ 64.592643][ T6107] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6107 comm=syz.0.74 [ 64.701117][ T6120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6120 comm=syz.2.78 [ 64.707215][ T6120] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 64.734652][ T6120] macvtap1: entered allmulticast mode [ 64.762884][ T6120] macvtap2: entered allmulticast mode [ 64.790951][ T6128] binder: 6127:6128 ioctl c0306201 200000000080 returned -14 [ 64.799369][ T6128] binder: 6127:6128 ioctl c0306201 2000000003c0 returned -14 [ 64.862679][ T6133] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 64.876326][ T6133] sock: sock_set_timeout: `syz.0.82' (pid 6133) tries to set negative timeout [ 64.985302][ T42] kauditd_printk_skb: 115 callbacks suppressed [ 64.985318][ T42] audit: type=1400 audit(1785634794.546:351): avc: denied { mount } for pid=6142 comm="syz.2.85" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 65.021300][ T42] audit: type=1400 audit(1785634794.576:352): avc: denied { read write } for pid=5746 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.038585][ T42] audit: type=1400 audit(1785634794.576:353): avc: denied { open } for pid=5746 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.050667][ T42] audit: type=1400 audit(1785634794.576:354): avc: denied { ioctl } for pid=5746 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.065202][ T42] audit: type=1400 audit(1785634794.596:355): avc: denied { create } for pid=6147 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.071349][ T42] audit: type=1400 audit(1785634794.606:356): avc: denied { setopt } for pid=6147 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.077678][ T42] audit: type=1400 audit(1785634794.606:357): avc: denied { bind } for pid=6147 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.083886][ T42] audit: type=1400 audit(1785634794.616:358): avc: denied { sys_module } for pid=6149 comm="syz.2.88" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.118978][ T42] audit: type=1400 audit(1785634794.686:359): avc: denied { create } for pid=6149 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.125063][ T42] audit: type=1400 audit(1785634794.686:360): avc: denied { write } for pid=6149 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.248577][ T1045] IPVS: starting estimator thread 0... [ 65.344298][ T6167] IPVS: using max 30 ests per chain, 72000 per kthread [ 65.432400][ T6178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.97'. [ 65.438155][ T6178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.97'. [ 65.521763][ T56] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 65.588314][ T6186] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.803891][ T56] usb 8-1: Using ep0 maxpacket: 16 [ 65.822572][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 65.884997][ T56] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 65.920641][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.940082][ T56] usb 8-1: Product: syz [ 65.941567][ T56] usb 8-1: Manufacturer: syz [ 65.945832][ T56] usb 8-1: SerialNumber: syz [ 66.042732][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 66.046737][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 66.061720][ T56] usb 8-1: config 0 descriptor?? [ 66.086007][ T6201] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.091546][ T6201] block device autoloading is deprecated and will be removed. [ 66.176613][ T6205] Bluetooth: (null): Non-link packet received in non-active state [ 66.234612][ T56] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 66.260347][ T56] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 66.722381][ T56] em28xx 8-1:0.0: chip ID is em2765 [ 66.753372][ T6217] pimreg3: entered allmulticast mode [ 66.921379][ T6224] netlink: 112 bytes leftover after parsing attributes in process `syz.0.115'. [ 67.366846][ T56] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 67.374386][ T56] em28xx 8-1:0.0: board has no eeprom [ 67.526536][ T41] bridge0: entered promiscuous mode [ 67.886052][ T6265] loop4: detected capacity change from 0 to 2640 [ 67.890586][ T6265] Buffer I/O error on dev loop4, logical block 0, async page read [ 67.896277][ T6265] Buffer I/O error on dev loop4, logical block 0, async page read [ 67.899245][ T6265] Buffer I/O error on dev loop4, logical block 0, async page read [ 67.903378][ T6265] Buffer I/O error on dev loop4, logical block 0, async page read [ 67.906823][ T6265] Buffer I/O error on dev loop4, logical block 0, async page read [ 67.910198][ T6265] Buffer I/O error on dev loop4, logical block 0, async page read [ 67.912679][ T6265] Buffer I/O error on dev loop4, logical block 0, async page read [ 67.915825][ T6265] Buffer I/O error on dev loop4, logical block 0, async page read [ 67.918227][ T6265] ldm_validate_partition_table(): Disk read failed. [ 67.919770][ T6261] netlink: 'syz.2.128': attribute type 4 has an invalid length. [ 67.920711][ T6265] Buffer I/O error on dev loop4, logical block 0, async page read [ 67.920754][ T6265] Buffer I/O error on dev loop4, logical block 0, async page read [ 67.929867][ T6265] Dev loop4: unable to read RDB block 0 [ 67.931947][ T6265] loop4: unable to read partition table [ 67.934071][ T6265] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 68.071673][ T6270] Bluetooth: Error in BCSP hdr checksum [ 68.448617][ T6171] em28xx 8-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 68.500529][ T6278] binder: 6277:6278 ioctl c0306201 200000004a40 returned -22 [ 68.503849][ T56] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 68.507084][ T56] em28xx 8-1:0.0: dvb set to bulk mode. [ 68.511924][ T5883] em28xx 8-1:0.0: Binding DVB extension [ 68.540214][ T56] usb 8-1: USB disconnect, device number 4 [ 68.546525][ T56] em28xx 8-1:0.0: Disconnecting em28xx [ 68.571914][ T5883] em28xx 8-1:0.0: Registering input extension [ 68.574193][ T6281] syzkaller0: entered promiscuous mode [ 68.575857][ T56] em28xx 8-1:0.0: Closing input extension [ 68.576808][ T6281] syzkaller0: entered allmulticast mode [ 68.589889][ T6281] tipc: Started in network mode [ 68.593743][ T6281] tipc: Node identity 56fccb75c1fa, cluster identity 4711 [ 68.599024][ T6281] tipc: Enabled bearer , priority 0 [ 68.607895][ T6279] tipc: Resetting bearer [ 68.610684][ T56] em28xx 8-1:0.0: Freeing device [ 68.627309][ T6279] tipc: Disabling bearer [ 68.883116][ T6290] netlink: 'syz.1.138': attribute type 2 has an invalid length. [ 69.477151][ T6308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.144'. [ 69.485026][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 69.554117][ T6310] syzkaller0: entered promiscuous mode [ 69.555717][ T6310] syzkaller0: entered allmulticast mode [ 69.562011][ T6310] tipc: Enabled bearer , priority 0 [ 69.567810][ T6309] tipc: Resetting bearer [ 69.581804][ T6309] tipc: Disabling bearer [ 69.706373][ T6316] gadgetfs: bound to dummy_udc driver [ 69.943890][ T5883] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 69.946662][ C1] gadgetfs: connected [ 69.949670][ T5883] gadgetfs: disconnected [ 70.006349][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 70.006378][ T42] audit: type=1326 audit(1785634799.576:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.2.150" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc3c679e019 code=0x7ffc0000 [ 70.019534][ T42] audit: type=1326 audit(1785634799.586:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.2.150" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc3c679e019 code=0x7ffc0000 [ 70.125589][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 70.130497][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.193528][ T42] audit: type=1400 audit(1785634799.756:418): avc: denied { read } for pid=6337 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.357452][ T6345] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 70.372107][ T6345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.402776][ T6345] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 70.412741][ T42] audit: type=1400 audit(1785634799.976:419): avc: denied { write } for pid=6344 comm="syz.0.158" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.707560][ T42] audit: type=1400 audit(1785634800.276:420): avc: denied { setopt } for pid=6361 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.717542][ T42] audit: type=1400 audit(1785634800.286:421): avc: denied { bind } for pid=6361 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.888757][ T6369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6369 comm=syz.3.167 [ 70.907164][ T6369] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 70.927660][ T6369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.957616][ T6369] bond2: (slave dummy0): making interface the new active one [ 70.962577][ T6369] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 71.014593][ T42] audit: type=1400 audit(1785634800.586:422): avc: denied { create } for pid=6371 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 71.024508][ T42] audit: type=1400 audit(1785634800.596:423): avc: denied { bind } for pid=6371 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.033410][ T42] audit: type=1400 audit(1785634800.596:424): avc: denied { connect } for pid=6371 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.042140][ T42] audit: type=1400 audit(1785634800.596:425): avc: denied { write } for pid=6371 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.339397][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.342078][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.014839][ T6395] netlink: 14 bytes leftover after parsing attributes in process `syz.0.177'. [ 72.345964][ T6403] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 72.454616][ T6412] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 72.512078][ T6412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 72.520328][ T6412] bond3: (slave bond4): making interface the new active one [ 72.525096][ T6412] bond3: (slave bond4): Enslaving as an active interface with an up link [ 72.554875][ T6412] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 72.620786][ T6426] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 72.651372][ T6426] 8021q: adding VLAN 0 to HW filter on device bond5 [ 72.680440][ T6426] bond5: (slave gretap2): making interface the new active one [ 72.687955][ T6426] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 72.704374][ T6426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6426 comm=syz.3.186 [ 73.040818][ T6437] syzkaller0: entered promiscuous mode [ 73.043268][ T6437] syzkaller0: entered allmulticast mode [ 73.165372][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 73.204952][ T6441] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6441 comm=syz.2.190 [ 73.483952][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 73.510844][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 73.513843][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.518536][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.525548][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 73.534134][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.537868][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.912561][ T6462] sctp: [Deprecated]: syz.3.199 (pid 6462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.912561][ T6462] Use struct sctp_sack_info instead [ 73.961715][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 74.010351][ T6466] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6466 comm=syz.3.201 [ 74.216337][ T6466] veth1: entered allmulticast mode [ 74.294432][ T6466] bond6: (slave veth1): Enslaving as an active interface with an up link [ 74.352694][ T6470] bond6 (unregistering): (slave veth1): Releasing backup interface [ 74.361534][ T6470] bond6 (unregistering): Released all slaves [ 74.398954][ T6473] syz_tun: entered allmulticast mode [ 74.441554][ T6482] syzkaller0: entered promiscuous mode [ 74.444151][ T6482] syzkaller0: entered allmulticast mode [ 74.450932][ T6468] syz_tun: left allmulticast mode [ 74.578152][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.205'. [ 74.667031][ T6491] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 74.739732][ T6493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6493 comm=syz.3.205 [ 74.952947][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 74.955950][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 75.066117][ T41] IPVS: starting estimator thread 0... [ 75.173793][ T6505] IPVS: using max 45 ests per chain, 108000 per kthread [ 75.805749][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 75.829659][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 75.842084][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 75.842095][ T42] audit: type=1400 audit(1785634805.406:448): avc: denied { bind } for pid=6514 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.858345][ T6519] bond1: entered promiscuous mode [ 75.860576][ T6519] bond1: entered allmulticast mode [ 75.999630][ T6531] syzkaller0: entered promiscuous mode [ 76.003300][ T6531] syzkaller0: entered allmulticast mode [ 76.028095][ T6530] bridge_slave_0: left allmulticast mode [ 76.030549][ T6530] bridge_slave_0: left promiscuous mode [ 76.036370][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.038525][ T42] audit: type=1400 audit(1785634805.606:449): avc: denied { bind } for pid=6536 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.047532][ T6530] bridge_slave_1: left allmulticast mode [ 76.049592][ T6530] bridge_slave_1: left promiscuous mode [ 76.051527][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.071458][ T6530] bond0: (slave bond_slave_0): Releasing backup interface [ 76.079284][ T6530] bond0: (slave bond_slave_1): Releasing backup interface [ 76.087831][ T6530] team0: Port device team_slave_0 removed [ 76.093400][ T6530] team0: Port device team_slave_1 removed [ 76.097984][ T6530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.100498][ T6530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.104133][ T6530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.106510][ T6530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.109831][ T6530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.163175][ T6540] syzkaller0: entered promiscuous mode [ 76.165193][ T6540] syzkaller0: entered allmulticast mode [ 76.473183][ T6561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6561 comm=syz.0.225 [ 76.487627][ T42] audit: type=1400 audit(1785634806.056:450): avc: denied { mount } for pid=6563 comm="syz.2.226" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 76.522219][ T6561] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 76.551041][ T6561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.626908][ T6570] binder: 6569:6570 ioctl c0306201 200000000080 returned -14 [ 76.631280][ T6570] binder: 6569:6570 ioctl c0306201 2000000003c0 returned -14 [ 76.733736][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 76.897901][ T9] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 76.900965][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.906036][ T9] usb 7-1: Product: syz [ 76.907405][ T9] usb 7-1: Manufacturer: syz [ 76.913219][ T9] usb 7-1: SerialNumber: syz [ 76.931404][ T9] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 76.962923][ T9] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 76.977691][ T9] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 77.245265][ T42] audit: type=1400 audit(1785634806.816:451): avc: denied { name_bind } for pid=6584 comm="syz.0.234" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 77.254770][ T42] audit: type=1400 audit(1785634806.816:452): avc: denied { node_bind } for pid=6584 comm="syz.0.234" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 77.376052][ T42] audit: type=1400 audit(1785634806.946:453): avc: denied { write } for pid=6597 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.387289][ T42] audit: type=1400 audit(1785634806.956:454): avc: denied { setopt } for pid=6597 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.427390][ T42] audit: type=1400 audit(1785634806.996:455): avc: denied { setopt } for pid=6599 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.432409][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 77.541263][ T6602] syzkaller0: entered promiscuous mode [ 77.543015][ T6602] syzkaller0: entered allmulticast mode [ 77.661133][ T42] audit: type=1400 audit(1785634807.226:456): avc: denied { map } for pid=6609 comm="syz.3.244" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.672893][ T42] audit: type=1400 audit(1785634807.226:457): avc: denied { read write } for pid=6609 comm="syz.3.244" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.694585][ T6613] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 77.829582][ T6619] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 77.833831][ T6619] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 77.888396][ T6622] ehci-pci 0000:00:1d.7: remove, state 1 [ 77.894500][ T6622] usb usb1: USB disconnect, device number 1 [ 77.897630][ T6622] usb 1-1: USB disconnect, device number 2 [ 77.899604][ T6626] ======================================================= [ 77.899604][ T6626] WARNING: The mand mount option has been deprecated and [ 77.899604][ T6626] and is ignored by this kernel. Remove the mand [ 77.899604][ T6626] option from the mount to silence this warning. [ 77.899604][ T6626] ======================================================= [ 77.999677][ T6622] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 78.186598][ T6640] fuse: Bad value for 'fd' [ 78.265542][ T9] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 78.282839][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 78.308405][ T6648] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.368815][ T6648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 78.374518][ T6648] bond3: (slave bond4): Enslaving as an active interface with an up link [ 78.421706][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 78.431906][ T6648] bond3 (unregistering): (slave bond4): Releasing backup interface [ 78.444266][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 78.444999][ T6648] bond3 (unregistering): Released all slaves [ 78.447749][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 78.454005][ T9] usb 2-1: Product: QEMU USB Tablet [ 78.455950][ T9] usb 2-1: Manufacturer: QEMU [ 78.458024][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 78.494735][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input6 [ 78.514976][ T9] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 79.116898][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.273'. [ 79.168187][ T6683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6683 comm=syz.3.273 [ 79.433802][ T5839] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 79.603769][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 79.607043][ T5839] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 79.610092][ T5839] usb 6-1: config 0 has no interface number 0 [ 79.612284][ T5839] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.616216][ T5839] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 79.620089][ T5839] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.623522][ T5839] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 79.628614][ T5839] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 79.632166][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.637165][ T5839] usb 6-1: config 0 descriptor?? [ 79.644255][ T6589] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -110 [ 79.650707][ T5839] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 79.652673][ T9] usb 7-1: USB disconnect, device number 3 [ 79.689721][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 79.702111][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 79.703166][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 79.707204][ T9] ti_usb_3410_5052 7-1:2.0: device disconnected [ 79.717644][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.279'. [ 79.915799][ T5828] usb 6-1: USB disconnect, device number 2 [ 79.927031][ T5828] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 80.621853][ T6735] syz_tun: entered promiscuous mode [ 80.628074][ T6735] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 80.911046][ T6748] fuse: fd is not a fuse device [ 81.209163][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 81.209175][ T42] audit: type=1400 audit(1785634810.776:497): avc: denied { create } for pid=6753 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.222518][ T42] audit: type=1400 audit(1785634810.786:498): avc: denied { bind } for pid=6753 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.233795][ T42] audit: type=1400 audit(1785634810.786:499): avc: denied { listen } for pid=6753 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.236557][ T6754] geneve2: entered promiscuous mode [ 81.241625][ T42] audit: type=1400 audit(1785634810.786:500): avc: denied { accept } for pid=6753 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.416551][ T6762] netlink: 'syz.1.302': attribute type 1 has an invalid length. [ 81.483090][ T6766] loop0: detected capacity change from 0 to 131072 [ 81.488663][ T6764] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 81.503571][ T42] audit: type=1400 audit(1785634811.066:501): avc: denied { mount } for pid=6765 comm="syz.3.303" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.533049][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.302'. [ 81.538792][ T6762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.540419][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 81.634228][ T50] cfg80211: failed to load regulatory.db [ 81.664296][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 81.716335][ T42] audit: type=1400 audit(1785634811.286:502): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.834525][ T148] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 81.902733][ T42] audit: type=1326 audit(1785634811.466:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4599e019 code=0x7ffc0000 [ 81.913310][ T42] audit: type=1326 audit(1785634811.466:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4599e019 code=0x7ffc0000 [ 81.923924][ T42] audit: type=1326 audit(1785634811.476:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.310" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4a4599e019 code=0x7ffc0000 [ 81.935890][ T42] audit: type=1326 audit(1785634811.476:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4599e019 code=0x7ffc0000 [ 81.995506][ T148] usb 6-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 82.003746][ T148] usb 6-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 82.014103][ T148] usb 6-1: config 0 interface 0 has no altsetting 0 [ 82.016843][ T148] usb 6-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 82.020565][ T148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.030081][ T148] usb 6-1: config 0 descriptor?? [ 82.042513][ T6785] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 82.050636][ T6788] fuse: fd is not a fuse device [ 82.080500][ T6785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 82.145233][ T6785] bond3: (slave veth3): Enslaving as an active interface with a down link [ 82.170239][ T6785] netlink: 'syz.0.308': attribute type 10 has an invalid length. [ 82.173541][ T6785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.308'. [ 82.197511][ T6793] UBIFS error (pid: 6793): cannot open "ubi0_0", error -19 [ 82.385662][ T6801] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 82.392163][ T6801] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 82.471356][ T6806] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 82.474821][ T6806] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 82.482993][ T6806] tipc: Started in network mode [ 82.485075][ T6806] tipc: Node identity 080211, cluster identity 4711 [ 82.487683][ T6806] tipc: Enabled bearer , priority 0 [ 82.526030][ T148] usbhid 6-1:0.0: can't add hid device: -71 [ 82.532515][ T148] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 82.543405][ T148] usb 6-1: USB disconnect, device number 3 [ 82.779755][ T6829] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 82.814895][ T6832] binder: 6831:6832 ioctl c0306201 0 returned -14 [ 82.815326][ T6829] 8021q: adding VLAN 0 to HW filter on device bond5 [ 82.856834][ T6829] 8021q: adding VLAN 0 to HW filter on device bond5 [ 82.860404][ T6829] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 82.867196][ T6829] bond5: (slave gre1): Error -95 calling set_mac_address [ 82.892392][ T6836] netlink: 88 bytes leftover after parsing attributes in process `syz.3.327'. [ 82.898227][ T6837] gretap1: entered promiscuous mode [ 82.902653][ T6837] bond5: (slave gretap1): making interface the new active one [ 82.916730][ T6837] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 82.932689][ T6837] macvlan2: entered promiscuous mode [ 82.934704][ T6837] macvlan2: entered allmulticast mode [ 82.936918][ T6837] bond5: entered promiscuous mode [ 82.941741][ T6837] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 82.947250][ T6837] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 82.952764][ T6837] bond5: left promiscuous mode [ 83.102715][ T6850] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 83.159456][ T6851] mmap: syz.3.333 (6851) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.339156][ T6861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.336'. [ 83.497771][ T41] tipc: Node number set to 134353152 [ 83.523332][ T6868] md: superblock version 12389 not known [ 83.529630][ T6868] md: couldn't set array info. -22 [ 83.970550][ T6886] nicvf0: renamed from team0 (while UP) [ 83.977519][ T6886] nicvf0: Cannot enslave team device to itself [ 83.980103][ T6886] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 84.093853][ T6897] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 84.102737][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.108354][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.295147][ T6908] bridge2: port 1(macvlan2) entered blocking state [ 84.297949][ T6908] bridge2: port 1(macvlan2) entered disabled state [ 84.300869][ T6908] macvlan2: entered allmulticast mode [ 85.058716][ T6938] overlayfs: failed to clone upperpath [ 85.098930][ T6941] capability: warning: `syz.0.365' uses deprecated v2 capabilities in a way that may be insecure [ 85.168011][ T6945] syz.2.367 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.580710][ T6969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6969 comm=syz.2.376 [ 85.602368][ T6969] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 85.617256][ T6969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.637745][ T6969] bond2: (slave dummy0): making interface the new active one [ 85.641238][ T6969] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 85.696764][ T6973] fuse: fd is not a fuse device [ 86.021335][ T6977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 86.238710][ T6987] syzkaller0: entered promiscuous mode [ 86.241211][ T6987] syzkaller0: entered allmulticast mode [ 86.300400][ T6989] kvm: pic: level sensitive irq not supported [ 86.431153][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 86.431173][ T42] audit: type=1804 audit(1785634815.996:560): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.386" name="file0" dev="tmpfs" ino=599 res=1 errno=0 [ 86.433974][ T6998] uprobe: syz.0.386:6998 failed to unregister, leaking uprobe [ 86.438147][ T42] audit: type=1400 audit(1785634816.006:561): avc: denied { ioctl } for pid=6999 comm="syz.3.387" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.513497][ T42] audit: type=1400 audit(1785634816.076:562): avc: denied { write } for pid=7002 comm="syz.1.388" name="usb_gadget" dev="configfs" ino=6223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.526120][ T7000] xt_CT: No such helper "netbios-ns" [ 86.527304][ T42] audit: type=1400 audit(1785634816.086:563): avc: denied { write } for pid=7002 comm="syz.1.388" name="strings" dev="configfs" ino=15223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.536578][ T42] audit: type=1400 audit(1785634816.086:564): avc: denied { write } for pid=7002 comm="syz.1.388" name="functions" dev="configfs" ino=15221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.643924][ T7014] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 86.827056][ T7018] bond2: (slave dummy0): Releasing active interface [ 86.841305][ T7018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.167680][ T7024] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 87.188452][ T7024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.203876][ T7024] bond3: entered allmulticast mode [ 87.267356][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 87.277094][ T7027] vlan2: entered promiscuous mode [ 87.456723][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 87.469179][ T7031] 8021q: adding VLAN 0 to HW filter on device bond6 [ 87.502756][ T7031] bond6: (slave veth5): Enslaving as an active interface with an up link [ 87.703376][ T42] audit: type=1400 audit(1785634817.266:565): avc: denied { write } for pid=7041 comm="syz.3.403" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.724855][ T42] audit: type=1400 audit(1785634817.266:566): avc: denied { open } for pid=7041 comm="syz.3.403" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.725141][ T42] audit: type=1400 audit(1785634817.266:567): avc: denied { ioctl } for pid=7041 comm="syz.3.403" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.819826][ T7042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.828352][ T7042] batadv_slave_1: entered promiscuous mode [ 88.095359][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.407'. [ 88.173209][ T7050] ip6gre1: entered promiscuous mode [ 88.179462][ T7050] ip6gre1: entered allmulticast mode [ 88.194212][ T7053] tipc: Started in network mode [ 88.196023][ T7053] tipc: Node identity ac14140f, cluster identity 4711 [ 88.203157][ T7053] tipc: New replicast peer: 255.255.255.255 [ 88.215595][ T7053] tipc: Enabled bearer , priority 10 [ 88.230676][ T7050] netlink: 'syz.3.407': attribute type 6 has an invalid length. [ 88.234775][ T7050] netlink: 72 bytes leftover after parsing attributes in process `syz.3.407'. [ 88.520299][ T7059] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 88.527980][ T7059] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 88.531817][ T7059] tipc: Resetting bearer [ 88.732728][ T7068] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 88.741357][ T7066] bond2: (slave dummy0): Releasing active interface [ 88.756238][ T7066] bridge_slave_0: left allmulticast mode [ 88.758774][ T7066] bridge_slave_0: left promiscuous mode [ 88.761484][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.771215][ T7066] bridge_slave_1: left allmulticast mode [ 88.774128][ T7066] bridge_slave_1: left promiscuous mode [ 88.776804][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.785096][ T7066] bond0: (slave bond_slave_0): Releasing backup interface [ 88.793427][ T7066] bond0: (slave bond_slave_1): Releasing backup interface [ 88.811559][ T7066] team0: Port device team_slave_0 removed [ 88.820807][ T7066] team0: Port device team_slave_1 removed [ 88.823573][ T7066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.827075][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.831974][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.837567][ T7066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.870224][ T7069] team0: Port device xfrm0 added [ 88.888351][ T7071] tipc: Enabled bearer , priority 0 [ 88.917463][ T7068] bridge1: entered promiscuous mode [ 88.922085][ T7068] bond4: (slave bridge1): making interface the new active one [ 88.926676][ T7068] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 88.950062][ T7068] bridge2: entered promiscuous mode [ 88.955120][ T7068] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 89.251865][ T7088] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 89.259106][ T7089] overlayfs: failed to clone upperpath [ 89.344036][ T10] tipc: Node number set to 2886997007 [ 89.406387][ T42] audit: type=1400 audit(1785634818.976:568): avc: denied { ioctl } for pid=7092 comm="syz.2.420" path="socket:[15729]" dev="sockfs" ino=15729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.466440][ T7095] fuse: fd is not a fuse device [ 89.777407][ T42] audit: type=1400 audit(1785634819.346:569): avc: denied { map } for pid=7103 comm="syz.2.425" path="socket:[15734]" dev="sockfs" ino=15734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.823382][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 89.878548][ T7108] bridge1: port 1(veth7) entered blocking state [ 89.885949][ T7108] bridge1: port 1(veth7) entered disabled state [ 89.892386][ T7108] veth7: entered allmulticast mode [ 89.896911][ T7108] veth7: entered promiscuous mode [ 89.930721][ T7108] bridge1: port 2(veth0_to_bond) entered blocking state [ 89.938404][ T7108] bridge1: port 2(veth0_to_bond) entered disabled state [ 89.941596][ T7108] veth0_to_bond: entered allmulticast mode [ 89.945744][ T7108] veth0_to_bond: entered promiscuous mode [ 90.051373][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.429'. [ 90.394198][ T7130] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 90.567708][ T7142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.439'. [ 90.590972][ T12] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.607724][ T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.699539][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'. [ 90.794991][ T7159] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 91.033272][ T7168] netlink: 156 bytes leftover after parsing attributes in process `syz.1.449'. [ 91.251191][ T7168] tipc: Resetting bearer [ 91.456642][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 91.456657][ T42] audit: type=1400 audit(1785634821.026:578): avc: denied { write } for pid=7194 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.545765][ T42] audit: type=1400 audit(1785634821.116:579): avc: denied { write } for pid=7199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.560534][ T7205] fuse: fd is not a fuse device [ 91.641034][ T42] audit: type=1400 audit(1785634821.206:580): avc: denied { write } for pid=7210 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.685885][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 91.724426][ T7214] bond6: entered promiscuous mode [ 91.726638][ T7214] bond6: entered allmulticast mode [ 91.779298][ T7219] binder_alloc: 7218: pid 7218 spamming oneway? 1 buffers allocated for a total size of 4096 [ 91.807983][ T42] audit: type=1400 audit(1785634821.376:581): avc: denied { write } for pid=7217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.875626][ T42] audit: type=1400 audit(1785634821.446:582): avc: denied { write } for pid=7226 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.878817][ T7225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7225 comm=syz.3.463 [ 91.941445][ T42] audit: type=1400 audit(1785634821.506:583): avc: denied { write } for pid=7230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.953121][ T7234] netlink: 'syz.3.464': attribute type 11 has an invalid length. [ 91.992395][ T42] audit: type=1400 audit(1785634821.556:584): avc: denied { write } for pid=7235 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.003298][ T7234] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 92.012461][ T48] bridge1: port 2(veth0_to_bond) entered blocking state [ 92.015369][ T48] bridge1: port 2(veth0_to_bond) entered forwarding state [ 92.088475][ T42] audit: type=1400 audit(1785634821.656:585): avc: denied { write } for pid=7237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.119833][ T7240] 8021q: adding VLAN 0 to HW filter on device bond7 [ 92.141071][ T42] audit: type=1400 audit(1785634821.706:586): avc: denied { write } for pid=7243 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.141377][ T7240] bridge1: port 2(veth0_to_bond) entered disabled state [ 92.161424][ T7240] veth0_to_bond: left allmulticast mode [ 92.163302][ T7240] veth0_to_bond: left promiscuous mode [ 92.165899][ T7240] bridge1: port 2(veth0_to_bond) entered disabled state [ 92.172055][ T7240] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 92.409599][ T7256] Bluetooth: (null): Invalid header checksum [ 92.532573][ T7268] netlink: 'syz.1.472': attribute type 5 has an invalid length. [ 92.673126][ T7277] fuse: fd is not a fuse device [ 92.737700][ T7282] fuse: fd is not a fuse device [ 92.801009][ T7290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7290 comm=syz.0.481 [ 92.808246][ T7290] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 92.846685][ T7290] macvtap1: entered allmulticast mode [ 92.864336][ T7290] macvtap2: entered allmulticast mode [ 92.879610][ T7290] bond7: (slave bridge3): making interface the new active one [ 92.885022][ T7290] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 92.967947][ T42] audit: type=1400 audit(1785634822.536:587): avc: denied { create } for pid=7296 comm="syz.1.483" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.321497][ T7313] pimreg3: entered allmulticast mode [ 93.752631][ T7350] netlink: 'syz.2.502': attribute type 1 has an invalid length. [ 93.782302][ T7350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.846751][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.849958][ T7354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.852924][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.855530][ T7354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.873915][ T7354] 8021q: adding VLAN 0 to HW filter on device nicvf0 [ 93.891982][ T7354] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 93.963524][ T7350] bond3: (slave gretap1): making interface the new active one [ 93.974401][ T7350] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 94.529692][ T7372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7372 comm=syz.2.509 [ 94.542040][ T7375] memory length for this resource is wrong [ 94.569980][ T7375] isp1760 0000:00:03.0: probe with driver isp1760 failed with error -12 [ 94.634286][ T7383] nicvf0: renamed from team0 (while UP) [ 94.648814][ T7383] nicvf0: Cannot enslave team device to itself [ 94.652650][ T7383] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 94.663513][ T7385] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 94.686655][ T7385] 8021q: adding VLAN 0 to HW filter on device bond8 [ 94.717780][ T7385] bond8: (slave gretap3): making interface the new active one [ 94.721452][ T7385] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 95.012383][ T7407] kvm: pic: non byte read [ 95.015620][ T7407] kvm: pic: non byte read [ 95.018616][ T7407] kvm: pic: non byte read [ 95.021638][ T7407] kvm: pic: non byte read [ 95.024916][ T7407] kvm: pic: non byte read [ 95.027968][ T7407] kvm: pic: non byte read [ 95.030973][ T7407] kvm: pic: non byte read [ 95.035987][ T7407] kvm: pic: non byte read [ 95.038984][ T7407] kvm: pic: non byte read [ 95.041901][ T7407] kvm: pic: non byte read [ 95.315153][ T7409] SELinux: invalid class [ 95.315203][ T7422] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 95.319402][ T7422] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.325879][ T7422] vhci_hcd vhci_hcd.0: Device attached [ 95.346577][ T7428] __nla_validate_parse: 2 callbacks suppressed [ 95.346604][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.527'. [ 95.373318][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 95.389109][ T7411] fuse: fd is not a fuse device [ 95.392480][ T7409] SELinux: failed to load policy [ 95.399323][ T7419] memory length for this resource is wrong [ 95.443542][ T7419] isp1760 0000:00:03.0: probe with driver isp1760 failed with error -12 [ 95.503826][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 95.574016][ T9] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 95.577393][ T1045] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 95.726490][ T1045] usb 8-1: config 0 has no interfaces? [ 95.728255][ T1045] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 95.731240][ T1045] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.736450][ T1045] usb 8-1: config 0 descriptor?? [ 95.954476][ T7423] usb 43-1: recv xbuf, 0 [ 95.959973][ T13] vhci_hcd vhci_hcd.3: stop threads [ 95.962336][ T13] vhci_hcd vhci_hcd.3: release socket [ 95.964550][ T1045] usb 8-1: string descriptor 0 read error: -71 [ 95.968424][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 95.968461][ T1045] usb 8-1: USB disconnect, device number 5 [ 96.023927][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 96.642297][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 96.642326][ T42] audit: type=1400 audit(1785634826.206:597): avc: denied { ioctl } for pid=7460 comm="syz.2.541" path="socket:[16137]" dev="sockfs" ino=16137 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.661188][ T7463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'. [ 96.666206][ T42] audit: type=1400 audit(1785634826.226:598): avc: denied { create } for pid=7460 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 96.674649][ T42] audit: type=1400 audit(1785634826.226:599): avc: denied { write } for pid=7460 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 96.682883][ T42] audit: type=1400 audit(1785634826.236:600): avc: denied { ioctl } for pid=7460 comm="syz.2.541" path="socket:[16139]" dev="sockfs" ino=16139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 96.700428][ T7463] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.541:7463 [ 96.944532][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.546'. [ 96.955690][ T7478] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 96.960820][ T7478] batman_adv: batadv0: Adding interface: gretap3 [ 96.963448][ T7478] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.972410][ T7478] batman_adv: batadv0: Interface activated: gretap3 [ 97.019556][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.549'. [ 97.063246][ T42] audit: type=1400 audit(1785634826.626:601): avc: denied { cmd } for pid=7484 comm="iou-wrk-7485" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 97.069142][ T7480] SELinux: invalid class [ 97.078969][ T42] audit: type=1400 audit(1785634826.646:602): avc: denied { map } for pid=7484 comm="syz.3.550" path="/dev/ublkc0" dev="devtmpfs" ino=3052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.096335][ T7489] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 97.099153][ T7489] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.105371][ T7480] SELinux: failed to load policy [ 97.106443][ T7489] vhci_hcd vhci_hcd.0: Device attached [ 97.113761][ T42] audit: type=1400 audit(1785634826.676:603): avc: denied { bind } for pid=7484 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.113876][ T7485] Bluetooth: MGMT ver 1.23 [ 97.122003][ T42] audit: type=1400 audit(1785634826.686:604): avc: denied { write } for pid=7484 comm="syz.3.550" path="socket:[18687]" dev="sockfs" ino=18687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.271702][ T42] audit: type=1400 audit(1785634826.836:605): avc: denied { write } for pid=7492 comm="syz.3.552" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.294175][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 97.353843][ T24] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 97.363905][ T41] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 97.463123][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.553'. [ 97.467036][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.553'. [ 97.525270][ T41] usb 6-1: config 0 has no interfaces? [ 97.526956][ T41] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.532116][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.542057][ T41] usb 6-1: config 0 descriptor?? [ 97.548283][ T7507] tmpfs: Bad value for 'mpol' [ 97.593168][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 97.617431][ T42] audit: type=1400 audit(1785634827.186:606): avc: denied { create } for pid=7506 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.619499][ T7507] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.748080][ T7490] usb 39-1: recv xbuf, 0 [ 97.758140][ T13] vhci_hcd vhci_hcd.1: stop threads [ 97.761366][ T13] vhci_hcd vhci_hcd.1: release socket [ 97.762944][ T41] usb 6-1: string descriptor 0 read error: -71 [ 97.772404][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 97.780335][ T41] usb 6-1: USB disconnect, device number 4 [ 97.823751][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 98.484147][ T7542] overlay: Bad value for 'workdir' [ 98.647631][ T7558] fuse: fd is not a fuse device [ 98.660762][ T7558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=7558 comm=syz.0.572 [ 98.670360][ T7558] dns_resolver: Unsupported content type (234) [ 98.815824][ T7573] warning: `syz.3.577' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.824454][ T7573] openvswitch: netlink: Key type 168 is out of range max 32 [ 98.831388][ T7573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 98.835622][ T7573] macvlan0: entered promiscuous mode [ 98.867823][ T7580] netlink: 7 bytes leftover after parsing attributes in process `syz.2.575'. [ 99.350926][ T64] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 99.509292][ T64] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 100.322935][ T7711] random: crng reseeded on system resumption [ 100.507677][ T64] Bluetooth: Frame is too long (len 78, expected len 4) [ 101.001984][ T7793] netlink: 'syz.0.667': attribute type 1 has an invalid length. [ 101.023478][ T7793] 8021q: adding VLAN 0 to HW filter on device bond9 [ 101.079665][ T7793] bond9: (slave gretap4): making interface the new active one [ 101.082994][ T7793] bond9: (slave gretap4): Enslaving as an active interface with an up link [ 101.089708][ T7799] BUG: unable to handle page fault for address: fffffffffffffc10 [ 101.092928][ T7799] #PF: supervisor read access in kernel mode [ 101.096100][ T7799] #PF: error_code(0x0000) - not-present page [ 101.096214][ T7793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7793 comm=syz.0.667 [ 101.099718][ T7799] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 101.099765][ T7799] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 101.109207][ T7799] CPU: 1 UID: 0 PID: 7799 Comm: syz.1.669 Not tainted syzkaller #0 PREEMPT(full) [ 101.112487][ T7799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.116390][ T7799] RIP: 0010:strnlen+0x4b/0x80 [ 101.118467][ T7799] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 101.126233][ T7799] RSP: 0018:ffffc90003496ee0 EFLAGS: 00010246 [ 101.128690][ T7799] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 101.131884][ T7799] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 101.135109][ T7799] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 101.138341][ T7799] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 101.141535][ T7799] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 101.144385][ T7799] FS: 00007f2420b896c0(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 101.147199][ T7799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.149265][ T7799] CR2: fffffffffffffc10 CR3: 000000003dff8000 CR4: 0000000000352ef0 [ 101.151779][ T7799] Call Trace: [ 101.152841][ T7799] [ 101.153917][ T7799] ? kasan_save_track+0x14/0x30 [ 101.155988][ T7799] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 101.158213][ T7799] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 101.160667][ T7799] ? __pfx___might_resched+0x10/0x10 [ 101.162862][ T7799] ? trace_contention_end+0x126/0x160 [ 101.165048][ T7799] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 101.167352][ T7799] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 101.169813][ T7799] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 101.171722][ T7799] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 101.173744][ T7799] ? __pfx_down_write+0x10/0x10 [ 101.175678][ T7799] tcf_block_offload_unbind+0xad/0x170 [ 101.177563][ T7799] __tcf_block_put+0x11a/0x2a0 [ 101.179529][ T7799] tcf_block_put_ext+0xf6/0x1d0 [ 101.181448][ T7799] tcf_block_put+0xb6/0x100 [ 101.183330][ T7799] ? __pfx_tcf_block_put+0x10/0x10 [ 101.185444][ T7799] ? hrtimer_active+0x1c5/0x240 [ 101.187439][ T7799] ? __pfx_htb_destroy+0x10/0x10 [ 101.189553][ T7799] ? __pfx_htb_destroy+0x10/0x10 [ 101.191594][ T7799] htb_destroy+0x122/0xbc0 [ 101.193422][ T7799] ? __pfx_qdisc_reset_queue+0x10/0x10 [ 101.195679][ T7799] ? __pfx_htb_destroy+0x10/0x10 [ 101.197730][ T7799] ? htb_reset+0x28d/0x510 [ 101.199572][ T7799] ? __asan_memset+0x23/0x50 [ 101.201500][ T7799] ? __pfx_htb_reset+0x10/0x10 [ 101.203337][ T7799] ? qdisc_reset+0x322/0x670 [ 101.204909][ T7799] ? __pfx_htb_destroy+0x10/0x10 [ 101.206969][ T7799] __qdisc_destroy+0x109/0x530 [ 101.208982][ T7799] qdisc_put+0xb0/0xf0 [ 101.210293][ T7799] qdisc_graft+0xdcc/0x1780 [ 101.212004][ T7799] ? __pfx_qdisc_graft+0x10/0x10 [ 101.214022][ T7799] ? netem_init+0x1ff/0x350 [ 101.215929][ T7799] ? rcu_is_watching+0x12/0xc0 [ 101.217908][ T7799] ? qdisc_create+0x5d4/0x1060 [ 101.219859][ T7799] tc_modify_qdisc+0x10df/0x2120 [ 101.221639][ T7799] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 101.223425][ T7799] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 101.225633][ T7799] rtnetlink_rcv_msg+0x3c9/0xe90 [ 101.227706][ T7799] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.229973][ T7799] ? ref_tracker_free+0x37e/0x6c0 [ 101.231842][ T7799] netlink_rcv_skb+0x159/0x420 [ 101.233645][ T7799] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.235934][ T7799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.238087][ T7799] ? netlink_deliver_tap+0x1ae/0xcc0 [ 101.240271][ T7799] netlink_unicast+0x585/0x850 [ 101.242254][ T7799] ? __pfx_netlink_unicast+0x10/0x10 [ 101.244448][ T7799] netlink_sendmsg+0x8b0/0xda0 [ 101.246443][ T7799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.248482][ T7799] ? selinux_socket_sendmsg+0x198/0x2f0 [ 101.250813][ T7799] ____sys_sendmsg+0xa4d/0xbe0 [ 101.252818][ T7799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.254961][ T7799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.257141][ T7799] ___sys_sendmsg+0x190/0x1e0 [ 101.259087][ T7799] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.261198][ T7799] ? __lock_acquire+0x49f/0x1a40 [ 101.263252][ T7799] __sys_sendmsg+0x160/0x210 [ 101.265168][ T7799] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.267281][ T7799] do_syscall_64+0x115/0x870 [ 101.268969][ T7799] ? clear_bhb_loop+0x40/0x90 [ 101.270504][ T7799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.272342][ T7799] RIP: 0033:0x7f241fd9e019 [ 101.273733][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.279633][ T7799] RSP: 002b:00007f2420b89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.282099][ T7799] RAX: ffffffffffffffda RBX: 00007f2420025fa0 RCX: 00007f241fd9e019 [ 101.284453][ T7799] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 101.287501][ T7799] RBP: 00007f241fe3500c R08: 0000000000000000 R09: 0000000000000000 [ 101.290584][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.293678][ T7799] R13: 00007f2420026038 R14: 00007f2420025fa0 R15: 00007ffe2a119b88 [ 101.296546][ T7799] [ 101.297561][ T7799] Modules linked in: [ 101.298774][ T7799] CR2: fffffffffffffc10 [ 101.300080][ T7799] ---[ end trace 0000000000000000 ]--- [ 101.301733][ T7799] RIP: 0010:strnlen+0x4b/0x80 [ 101.303208][ T7799] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 101.309083][ T7799] RSP: 0018:ffffc90003496ee0 EFLAGS: 00010246 [ 101.310965][ T7799] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 101.313330][ T7799] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 101.315797][ T7799] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 101.318320][ T7799] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 101.320784][ T7799] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 101.323373][ T7799] FS: 00007f2420b896c0(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 101.326316][ T7799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.328617][ T7799] CR2: fffffffffffffc10 CR3: 000000003dff8000 CR4: 0000000000352ef0 [ 101.331147][ T7799] Kernel panic - not syncing: Fatal exception [ 101.333723][ T7799] Kernel Offset: disabled [ 101.335178][ T7799] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:40:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000095284 RBX=ffffffff8e891480 RCX=ffffffff8bbbd2d5 RDX=0000000000000001 RSI=ffffffff8c402600 RDI=ffffffff81df2bd7 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000000 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=ffffffff81d6005c R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bbbb89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc3c67eb700 CR3=000000002fa5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff828ee4d1 ffffffff828ee2ca ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff828ee2ca ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe808136d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe808136d6 00007ffe808136dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3c68355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3c683562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3c6835793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3c6835621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff828ee2ca ffffffff81ae5b3a ffffffff81ae5b0c ffffffff81ae5b00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a39335 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc90003496740 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b6fe1eb R15=ffffffff85a392d0 RIP=ffffffff85a3935f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2420b896c0 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=000000003dff8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2a11a076 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2a11a076 00007ffe2a11a07c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f241fe355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f241fe3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f241fe35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f241fe35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f241fff25f8 00007f241fff25c8 00007f241fff2600 00007f241fff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000e072 RBX=0000000000000075 RCX=ffffffff81e8b18e RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc90003477968 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff9200068ef30 R13=0000000000000200 R14=ffff888048e18000 R15=ffffc90003477a38 RIP=ffffffff820a5c00 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa242b846c0 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa241d89180 CR3=0000000039b90000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffc0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc76e6e3a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc76e6e3a6 00007ffc76e6e3ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa241e355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa241e3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa241e35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa241e35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa241ff25f8 00007fa241ff25c8 00007fa241ff2600 00007fa241ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000066ce4 RBX=ffff88801eed2540 RCX=ffffffff8bbbd2d5 RDX=0000000000000001 RSI=ffffffff8c402600 RDI=ffffffff81df2bd7 RBP=ffffed1003dda4a8 RSP=ffffc90000197e00 R8 =0000000000000000 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=ffffffff81d6005c R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbbb89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33204ff8 CR3=000000002c3e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7ae64586 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7ae64586 00007ffe7ae6458c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a45a355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a45a3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a45a35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a45a35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a45bf25f8 00007f4a45bf25c8 00007f4a45bf2600 00007f4a45bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000114 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000