last executing test programs: 2.869066686s ago: executing program 3 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0xa0, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x66, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xb3, 0x2, 0xd, 0x1ff}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24004851}, 0x20000014) 2.868407284s ago: executing program 3 (id=240): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x3, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x0, 0x400216, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0xc8b, 0x0, 0x0}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x28a80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 1.870231536s ago: executing program 3 (id=245): mkdir(&(0x7f0000000000)='./mydebug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./mydebug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydebug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='file amd5536udc_pci.c +p\n\x00', 0x19) close(r0) mkdir(&(0x7f0000000700)='./mysys\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='none\x00', &(0x7f0000000900)='./mysys\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, &(0x7f0000000b00)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./mysys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='0000:00:02.0\x00', 0xd) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mysys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000001300)='amd5536udc-pci\x00', 0xf) write(0xffffffffffffffff, &(0x7f0000001500)='0000:00:02.0\x00', 0xd) close(0xffffffffffffffff) nanosleep(&(0x7f0000002000)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./mysys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='0000:00:04.0\x00', 0xd) close(r3) 1.504620989s ago: executing program 0 (id=248): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000800703000000feffff720af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004704000001ed00b062030000000000000c440000000000007a0a00fe00ffffffd704000040000000b5000000000000009500000000000000023bc065b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 1.4203145s ago: executing program 0 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x4) write(r0, &(0x7f00000001c0)='200\x00', 0x4) write(r0, &(0x7f0000000200)='300\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='8\x00', 0x2) write(r1, &(0x7f00000002c0)='16\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000340), 0x1000) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x2) write(r0, &(0x7f0000000400)='400\x00', 0x4) write(r1, &(0x7f0000000440)='4\x00', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='hello\x00', 0x6) close(r4) close(r0) close(r1) close(r3) 1.263282238s ago: executing program 2 (id=250): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) timer_create(0x5, &(0x7f0000000040)={0x0, 0x36, 0x4, @tid=r2}, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x28a101, 0x0) pipe(&(0x7f00000045c0)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.262909059s ago: executing program 0 (id=251): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000001100)="0200"/128, 0x80) write(0xffffffffffffffff, &(0x7f0000001300)='1\x00', 0x2) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) 1.200384373s ago: executing program 2 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec004a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1.200034071s ago: executing program 0 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r6, {0x0, 0xec2fa4b81eaeea5e}, {0xc, 0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.199712164s ago: executing program 2 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1234567890\x00', 0xb) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='Conf 1\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r3, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r4, &(0x7f0000000740)='midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r6, &(0x7f00000008c0)='2\x00', 0x2) write(r5, &(0x7f0000000920)='\n\x00', 0x1) 1.048233188s ago: executing program 0 (id=255): syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0x8}, 0xbe}}}, 0x7) 1.047617224s ago: executing program 0 (id=256): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x1c, 0x1, 0x0, 0x40000005, 0x0}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f00000003c0)='./bus\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) writev(r4, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000000040)={0x4, 0xc5d, 0x9f82, 0x10}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x20, 0x0, 0x7}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 996.059284ms ago: executing program 3 (id=258): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400"], 0x0) unshare(0x28000600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) unshare(0x2a060400) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, 0xffffffffffffffff, 0x100000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc01c64b9, &(0x7f0000000500)={0x0, &(0x7f00000001c0), 0x0, 0x0, 0x65656565}) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 993.216453ms ago: executing program 1 (id=259): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r1 = openat(r0, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='\\010\\00x000001 2147483647 /tmp\n', 0x1f) 930.410963ms ago: executing program 1 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x4) write(r0, &(0x7f00000001c0)='200\x00', 0x4) write(r0, &(0x7f0000000200)='300\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='8\x00', 0x2) write(r1, &(0x7f00000002c0)='16\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000340), 0x1000) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x2) write(r0, &(0x7f0000000400)='400\x00', 0x4) write(r1, &(0x7f0000000440)='4\x00', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='hello\x00', 0x6) close(r4) close(r0) close(r1) close(r3) 859.666323ms ago: executing program 1 (id=261): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000001100)="0200"/128, 0x80) write(0xffffffffffffffff, &(0x7f0000001300)='1\x00', 0x2) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) 859.362998ms ago: executing program 1 (id=262): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000580)}, 0x7f}], 0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000900)='.', 0x1, 0x12, 0x0, 0x0) 739.002974ms ago: executing program 1 (id=263): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfffffffd, 0x0, 0x5, 0xff, 0x30, "10120d52000000200000f7490a0180002a00"}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x5, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 570.238049ms ago: executing program 2 (id=264): syz_emit_vhci(0x0, 0x0) 570.08964ms ago: executing program 2 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000090) 470.295435ms ago: executing program 1 (id=266): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x24040400) pipe2$watch_queue(0x0, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x8000, &(0x7f0000000280)=@un=@file={0x1, './bus\x00'}, 0x80) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x1, 0xa, 0x0, "f1d40300499dcb58ffffffffffffff00e59189d100", 0x34343459}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000240)={0x202001fe0000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x9000, 0x2000, &(0x7f0000a3e000/0x2000)=nil, 0x0, r7}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2a9e524, [{{0x9, 0x2, 0x48}}]}}, 0x0) eventfd(0x1ff) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r9, 0x3ba0, &(0x7f0000000300)={0x48, 0xb, 0xffffffffffffffff, 0x0, r10}) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES8=r11], 0x0) 470.174047ms ago: executing program 2 (id=267): mkdir(&(0x7f0000000000)='./mydebug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./mydebug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydebug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='file amd5536udc_pci.c +p\n\x00', 0x19) close(r0) mkdir(&(0x7f0000000700)='./mysys\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='none\x00', &(0x7f0000000900)='./mysys\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, &(0x7f0000000b00)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./mysys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mysys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000001300)='amd5536udc-pci\x00', 0xf) write(0xffffffffffffffff, &(0x7f0000001500)='0000:00:02.0\x00', 0xd) close(0xffffffffffffffff) nanosleep(&(0x7f0000002000)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./mysys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='0000:00:04.0\x00', 0xd) close(r3) 69.910988ms ago: executing program 3 (id=268): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 0s ago: executing program 3 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x4) write(r0, &(0x7f00000001c0)='200\x00', 0x4) write(r0, &(0x7f0000000200)='300\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='8\x00', 0x2) write(r1, &(0x7f00000002c0)='16\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000340), 0x1000) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x2) write(r0, &(0x7f0000000400)='400\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000004c0), 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='hello\x00', 0x6) close(r5) close(r0) close(r1) close(r3) kernel console output (not intermixed with test programs): [ 37.796793][ T42] audit: type=1400 audit(1785409706.244:115): avc: denied { siginh } for pid=5638 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:54903' (ED25519) to the list of known hosts. [ 40.161696][ T42] audit: type=1400 audit(1785409708.644:116): avc: denied { name_bind } for pid=5650 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.137998][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 41.138016][ T42] audit: type=1400 audit(1785409709.614:119): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.203062][ T42] audit: type=1400 audit(1785409709.684:120): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.295225][ T42] audit: type=1400 audit(1785409709.774:121): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.338968][ T42] audit: type=1400 audit(1785409709.814:122): avc: denied { write } for pid=5663 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.641997][ T42] audit: type=1400 audit(1785409710.124:123): avc: denied { write } for pid=5666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.700210][ T42] audit: type=1400 audit(1785409710.174:124): avc: denied { write } for pid=5669 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.777649][ T42] audit: type=1400 audit(1785409710.254:125): avc: denied { write } for pid=5672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.834111][ T42] audit: type=1400 audit(1785409710.314:126): avc: denied { write } for pid=5675 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.906924][ T42] audit: type=1400 audit(1785409710.384:127): avc: denied { write } for pid=5678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.964750][ T42] audit: type=1400 audit(1785409710.444:128): avc: denied { write } for pid=5681 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.594723][ T5651] cgroup: Unknown subsys name 'net' [ 42.756096][ T5651] cgroup: Unknown subsys name 'cpuset' [ 42.762957][ T5651] cgroup: Unknown subsys name 'rlimit' [ 42.984661][ T5702] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.718487][ T5651] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.902601][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 46.902614][ T42] audit: type=1400 audit(1785409715.384:161): avc: denied { execmem } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.146341][ T42] audit: type=1400 audit(1785409715.624:162): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.157652][ T42] audit: type=1400 audit(1785409715.624:163): avc: denied { read write } for pid=5737 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.166414][ T42] audit: type=1400 audit(1785409715.624:164): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.171172][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.181435][ T42] audit: type=1400 audit(1785409715.634:165): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[7301]" dev="sockfs" ino=7301 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.181642][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.184456][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.187547][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.194080][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.194960][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.195167][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.195955][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.197144][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.200649][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.201729][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.202552][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.202731][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.204292][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.204433][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.204971][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.205333][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.205631][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.213134][ T42] audit: type=1400 audit(1785409715.694:166): avc: denied { read } for pid=5745 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.216806][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.217827][ T42] audit: type=1400 audit(1785409715.694:167): avc: denied { open } for pid=5745 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.218740][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.255595][ T42] audit: type=1400 audit(1785409715.694:168): avc: denied { mounton } for pid=5745 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.265308][ T42] audit: type=1400 audit(1785409715.704:169): avc: denied { module_request } for pid=5745 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.274655][ T42] audit: type=1400 audit(1785409715.724:170): avc: denied { sys_module } for pid=5750 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.007942][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.010811][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.013550][ T5750] bridge_slave_0: entered allmulticast mode [ 48.016291][ T5750] bridge_slave_0: entered promiscuous mode [ 48.020762][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.023129][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.025460][ T5750] bridge_slave_1: entered allmulticast mode [ 48.028136][ T5750] bridge_slave_1: entered promiscuous mode [ 48.063690][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.066013][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.068739][ T5737] bridge_slave_0: entered allmulticast mode [ 48.072036][ T5737] bridge_slave_0: entered promiscuous mode [ 48.080859][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.083218][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.085753][ T5741] bridge_slave_0: entered allmulticast mode [ 48.088405][ T5741] bridge_slave_0: entered promiscuous mode [ 48.101625][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.104395][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.106710][ T5737] bridge_slave_1: entered allmulticast mode [ 48.109383][ T5737] bridge_slave_1: entered promiscuous mode [ 48.126132][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.129101][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.131485][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.133795][ T5741] bridge_slave_1: entered allmulticast mode [ 48.137441][ T5741] bridge_slave_1: entered promiscuous mode [ 48.148506][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.150759][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.153159][ T5745] bridge_slave_0: entered allmulticast mode [ 48.156400][ T5745] bridge_slave_0: entered promiscuous mode [ 48.167300][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.183350][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.185788][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.188053][ T5745] bridge_slave_1: entered allmulticast mode [ 48.190697][ T5745] bridge_slave_1: entered promiscuous mode [ 48.200811][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.205301][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.224525][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.234300][ T5750] team0: Port device team_slave_0 added [ 48.243247][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.248256][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.252389][ T5750] team0: Port device team_slave_1 added [ 48.255591][ T5737] team0: Port device team_slave_0 added [ 48.264363][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.275559][ T5737] team0: Port device team_slave_1 added [ 48.306029][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.308318][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.316579][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.322026][ T5741] team0: Port device team_slave_0 added [ 48.341169][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.343655][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.353516][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.358172][ T5741] team0: Port device team_slave_1 added [ 48.361424][ T5745] team0: Port device team_slave_0 added [ 48.364019][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.366905][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.377065][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.387765][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.390648][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.400991][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.414051][ T5745] team0: Port device team_slave_1 added [ 48.450877][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.453343][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.463338][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.467851][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.470114][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.478186][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.482613][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.484865][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.494937][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.515096][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.518035][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.526566][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.561915][ T5750] hsr_slave_0: entered promiscuous mode [ 48.564429][ T5750] hsr_slave_1: entered promiscuous mode [ 48.576742][ T5737] hsr_slave_0: entered promiscuous mode [ 48.579021][ T5737] hsr_slave_1: entered promiscuous mode [ 48.580956][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.582839][ T5737] Cannot create hsr debugfs directory [ 48.614851][ T5741] hsr_slave_0: entered promiscuous mode [ 48.617192][ T5741] hsr_slave_1: entered promiscuous mode [ 48.619383][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.621858][ T5741] Cannot create hsr debugfs directory [ 48.639523][ T5745] hsr_slave_0: entered promiscuous mode [ 48.642827][ T5745] hsr_slave_1: entered promiscuous mode [ 48.645643][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.647933][ T5745] Cannot create hsr debugfs directory [ 49.006610][ T5750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.014628][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.017534][ T5750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.021758][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.025393][ T5750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.030949][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.043453][ T5750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.047581][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.086466][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.090900][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.094163][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.098294][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.100992][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.105786][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.110858][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.114934][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.172127][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.176506][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.181024][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.185467][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.188312][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.193687][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.196392][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.201114][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.242199][ T5754] Bluetooth: hci1: command tx timeout [ 49.242489][ T5744] Bluetooth: hci3: command tx timeout [ 49.245386][ T64] Bluetooth: hci2: command tx timeout [ 49.248051][ T5749] Bluetooth: hci0: command tx timeout [ 49.279761][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.286459][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.294601][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.298912][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.303339][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.307758][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.313582][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.318359][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.323531][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.352769][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.369188][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.371758][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.385878][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.390119][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.392460][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.435194][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.446358][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.448714][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.460528][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.463567][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.473702][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.505618][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.519982][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.522564][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.529075][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.547482][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.549999][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.576837][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.595233][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.597965][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.610840][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.613238][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.785057][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.819205][ T5750] veth0_vlan: entered promiscuous mode [ 49.835791][ T5750] veth1_vlan: entered promiscuous mode [ 49.859941][ T5750] veth0_macvtap: entered promiscuous mode [ 49.865474][ T5750] veth1_macvtap: entered promiscuous mode [ 49.875080][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.883327][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.894848][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.905088][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.910287][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.923224][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.926148][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.943576][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.984869][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.002508][ T5737] veth0_vlan: entered promiscuous mode [ 50.002791][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.007922][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.028135][ T5737] veth1_vlan: entered promiscuous mode [ 50.041505][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.044821][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.064626][ T5741] veth0_vlan: entered promiscuous mode [ 50.087473][ T5741] veth1_vlan: entered promiscuous mode [ 50.100117][ T5745] veth0_vlan: entered promiscuous mode [ 50.103047][ T5750] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.110367][ T5737] veth0_macvtap: entered promiscuous mode [ 50.120490][ T5737] veth1_macvtap: entered promiscuous mode [ 50.137424][ T5745] veth1_vlan: entered promiscuous mode [ 50.156510][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.175340][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.185807][ T5745] veth0_macvtap: entered promiscuous mode [ 50.190008][ T5741] veth0_macvtap: entered promiscuous mode [ 50.199445][ T5745] veth1_macvtap: entered promiscuous mode [ 50.204776][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.207621][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.211865][ T5741] veth1_macvtap: entered promiscuous mode [ 50.215761][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.218431][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.242263][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.246896][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.257978][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.265659][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.274626][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.278732][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.285414][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.308032][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.334810][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.338181][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.349037][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.352701][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.357309][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.362028][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.386562][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.391262][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.466838][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.469337][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.477258][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.480181][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.515945][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.520538][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.559479][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.563286][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.685167][ T5895] e1000e 0000:00:02.0: MSI/MSI-X disallowed for future drivers [ 50.699444][ T5895] e1000e 0000:00:02.0 eth1: removed PHC [ 50.705132][ T5896] tipc: Failed to remove unknown binding: 66,0,0/0:2445416042/2445416044 [ 50.710380][ T5896] tipc: Failed to remove unknown binding: 66,0,0/0:2445416042/2445416043 [ 50.715706][ T5896] tipc: Failed to remove unknown binding: 66,0,0/0:2445416042/2445416044 [ 50.719671][ T5896] tipc: Failed to remove unknown binding: 66,0,0/0:2445416042/2445416043 [ 50.862359][ T5895] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 50.924091][ T60] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 50.927105][ T60] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 50.929620][ T60] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 50.933101][ T60] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 50.935561][ T60] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 50.940904][ T60] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 50.945173][ T60] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 50.947679][ T60] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 50.950131][ T60] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 50.952724][ T60] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 50.965122][ T60] hid-generic 0004:FFFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 50.989960][ T5903] amd5536udc-pci 0000:00:04.0: probe with driver amd5536udc-pci failed with error -16 [ 51.183498][ T5824] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.322412][ T5749] Bluetooth: hci3: command tx timeout [ 51.322506][ T5744] Bluetooth: hci2: command tx timeout [ 51.324228][ T5749] Bluetooth: hci0: command tx timeout [ 51.325990][ T64] Bluetooth: hci1: command tx timeout [ 51.364611][ T5824] usb 7-1: config 0 has no interfaces? [ 51.367675][ T5824] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 51.374374][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.382154][ T5824] usb 7-1: config 0 descriptor?? [ 51.666156][ T5890] Set syz1 is full, maxelem 65536 reached [ 51.888926][ T5962] pci_bus 0000:01: busn_res: [bus 01] is released [ 51.928768][ T5962] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 51.938648][ T5962] pci 0000:00:04.0: PCI bridge to [bus 01] [ 51.943126][ T5962] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 51.946789][ T5962] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 51.952209][ T5962] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 51.957023][ T5962] pci 0000:00:04.0: enabling Extended Tags [ 51.961601][ T5824] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 51.977114][ T5962] pci 0000:00:04.0: Adding to iommu group 4 [ 51.995567][ T5962] pci 0000:00:04.0: PCI bridge to [bus 01] [ 52.001703][ T5962] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 52.008189][ T5962] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 52.013401][ T5962] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 52.016979][ T5962] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 52.021240][ T5962] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 52.024661][ T5962] pci 0000:00:04.0: PCI bridge to [bus 01] [ 52.027160][ T5962] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 52.032512][ T5962] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 52.037217][ T5962] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 52.112748][ T5962] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 52.121249][ T5962] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 52.149730][ T5824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.160047][ T5824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 52.167873][ T5824] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 52.180922][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 52.180940][ T42] audit: type=1400 audit(1785409720.654:226): avc: denied { read } for pid=5964 comm="syz.3.14" name="/" dev="configfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.185263][ T5824] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.198955][ T42] audit: type=1400 audit(1785409720.654:227): avc: denied { open } for pid=5964 comm="syz.3.14" path="/4/config" dev="configfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.199962][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.218337][ T5824] usb 5-1: Product: syz [ 52.219900][ T5824] usb 5-1: Manufacturer: syz [ 52.224636][ T5824] usb 5-1: SerialNumber: syz [ 52.249465][ T5824] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 52.254381][ T5824] cdc_ncm 5-1:1.0: bind() failure [ 52.325631][ T42] audit: type=1400 audit(1785409720.804:228): avc: denied { create } for pid=5968 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.340362][ T42] audit: type=1400 audit(1785409720.804:229): avc: denied { bind } for pid=5968 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.355227][ T42] audit: type=1400 audit(1785409720.814:230): avc: denied { write } for pid=5968 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.367748][ T42] audit: type=1400 audit(1785409720.844:231): avc: denied { name_bind } for pid=5973 comm="syz.1.17" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 52.387234][ T42] audit: type=1400 audit(1785409720.844:232): avc: denied { node_bind } for pid=5973 comm="syz.1.17" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.457058][ T42] audit: type=1400 audit(1785409720.934:233): avc: denied { create } for pid=5932 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.385979][ T42] audit: type=1400 audit(1785409721.864:234): avc: denied { write } for pid=5986 comm="syz.3.22" name="usb_gadget" dev="configfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.399364][ T42] audit: type=1400 audit(1785409721.874:235): avc: denied { add_name } for pid=5986 comm="syz.3.22" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.401809][ T5744] Bluetooth: hci2: command tx timeout [ 53.408191][ T5749] Bluetooth: hci3: command tx timeout [ 53.410076][ T64] Bluetooth: hci1: command tx timeout [ 53.411502][ T5754] Bluetooth: hci0: command tx timeout [ 53.429736][ T5987] UDC core: g1: couldn't find an available UDC or it's busy [ 53.563989][ T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.739198][ T60] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 53.743491][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.746838][ T60] usb 6-1: Product: syz [ 53.748589][ T60] usb 6-1: Manufacturer: syz [ 53.750563][ T60] usb 6-1: SerialNumber: syz [ 53.758207][ T60] usb 6-1: config 0 descriptor?? [ 53.928087][ T1946] usb 7-1: USB disconnect, device number 2 [ 54.001510][ T5991] netlink: 'syz.3.24': attribute type 3 has an invalid length. [ 54.065024][ T5997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.096639][ T6001] syzkaller0: entered promiscuous mode [ 54.098519][ T6001] syzkaller0: entered allmulticast mode [ 54.121911][ T5997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.179226][ T6002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.348083][ T50] usb 5-1: USB disconnect, device number 2 [ 55.052391][ T6020] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 55.170450][ T6024] Zero length message leads to an empty skb [ 55.481724][ T64] Bluetooth: hci3: command tx timeout [ 55.481761][ T5744] Bluetooth: hci0: command tx timeout [ 55.570515][ T6036] file system registered [ 55.595002][ T6038] netlink: 'syz.2.41': attribute type 3 has an invalid length. [ 55.671553][ T5824] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.833662][ T5824] usb 5-1: Dual-Role OTG device on HNP port [ 55.836254][ T5824] usb 5-1: New USB device found, idVendor=17b3, idProduct=0004, bcdDevice= 7.02 [ 55.839141][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.841983][ T5824] usb 5-1: Product: ACMESynth [ 55.843631][ T5824] usb 5-1: Manufacturer: ACME [ 55.845177][ T5824] usb 5-1: SerialNumber: 1234567890 [ 55.859440][ T5824] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 56.216957][ T5737] ffs_data_put(): freeing [ 56.384419][ T6074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.397969][ T50] usb 6-1: USB disconnect, device number 2 [ 56.439122][ T6074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.494652][ T6074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.501291][ T6079] syzkaller0: entered promiscuous mode [ 56.503484][ T6079] syzkaller0: entered allmulticast mode [ 56.737694][ T5526] usb 5-1: USB disconnect, device number 3 [ 56.861919][ T1946] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.015028][ T1946] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 57.018098][ T1946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.020754][ T1946] usb 8-1: Product: syz [ 57.022582][ T1946] usb 8-1: Manufacturer: syz [ 57.024181][ T1946] usb 8-1: SerialNumber: syz [ 57.028532][ T1946] usb 8-1: config 0 descriptor?? [ 57.228726][ T6117] pci_bus 0000:01: busn_res: [bus 01] is released [ 57.254630][ T6117] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 57.263415][ T6117] pci 0000:00:04.0: PCI bridge to [bus 01] [ 57.266146][ T6117] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 57.269340][ T6117] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 57.275380][ T6117] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 57.280101][ T6117] pci 0000:00:04.0: enabling Extended Tags [ 57.294661][ T6117] pci 0000:00:04.0: Adding to iommu group 4 [ 57.315287][ T6117] pci 0000:00:04.0: PCI bridge to [bus 01] [ 57.321721][ T6117] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 57.326923][ T6117] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 57.332354][ T6117] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 57.335837][ T6117] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 57.340053][ T6117] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 57.343793][ T6117] pci 0000:00:04.0: PCI bridge to [bus 01] [ 57.346422][ T6117] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 57.351220][ T6117] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 57.355746][ T6117] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 57.402075][ T6117] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 57.412264][ T6117] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 57.469224][ T42] kauditd_printk_skb: 103 callbacks suppressed [ 57.469241][ T42] audit: type=1800 audit(1785409725.944:339): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.72" name="cluster_name" dev="configfs" ino=9206 res=0 errno=0 [ 57.479179][ T42] audit: type=1800 audit(1785409725.944:340): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.72" name="local" dev="configfs" ino=9816 res=0 errno=0 [ 57.559033][ T42] audit: type=1400 audit(1785409726.034:341): avc: denied { create } for pid=6126 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.656964][ T42] audit: type=1800 audit(1785409726.134:342): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.78" name="use" dev="configfs" ino=10774 res=0 errno=0 [ 57.666639][ T6133] syzkaller0: entered promiscuous mode [ 57.668915][ T6133] syzkaller0: entered allmulticast mode [ 57.730609][ T42] audit: type=1400 audit(1785409726.204:343): avc: denied { create } for pid=6138 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.738618][ T42] audit: type=1400 audit(1785409726.214:344): avc: denied { read write } for pid=6138 comm="syz.2.80" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.748795][ T42] audit: type=1400 audit(1785409726.234:345): avc: denied { open } for pid=6138 comm="syz.2.80" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.758068][ T42] audit: type=1400 audit(1785409726.234:346): avc: denied { ioctl } for pid=6138 comm="syz.2.80" path="/dev/vbi1" dev="devtmpfs" ino=979 ioctlcmd=0x562f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.768242][ T42] audit: type=1400 audit(1785409726.234:347): avc: denied { read } for pid=6138 comm="syz.2.80" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.779681][ T42] audit: type=1400 audit(1785409726.234:348): avc: denied { open } for pid=6138 comm="syz.2.80" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.992073][ T6149] syz.1.84(6149): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 58.192739][ T6159] syzkaller0: entered promiscuous mode [ 58.194818][ T6159] syzkaller0: entered allmulticast mode [ 58.313232][ T5737] ffs_data_put(): freeing [ 58.955708][ T5745] ffs_data_put(): freeing [ 59.345302][ T6214] syzkaller0: entered promiscuous mode [ 59.347387][ T6214] syzkaller0: entered allmulticast mode [ 59.653223][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.716634][ T6234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.726302][ T5824] usb 8-1: USB disconnect, device number 2 [ 59.775104][ T6234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.231420][ T5824] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.408761][ T5824] usb 5-1: Dual-Role OTG device on HNP port [ 60.416333][ T5824] usb 5-1: New USB device found, idVendor=17b3, idProduct=0004, bcdDevice= 7.02 [ 60.420166][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.423943][ T5824] usb 5-1: Product: ACMESynth [ 60.426027][ T5824] usb 5-1: Manufacturer: ACME [ 60.428054][ T5824] usb 5-1: SerialNumber: 1234567890 [ 60.452013][ T5824] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 61.087095][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.283517][ T6298] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 61.301420][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.353433][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.423972][ T5737] ffs_data_put(): freeing [ 61.426839][ T6308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.144'. [ 61.487981][ T29] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 61.492510][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.495150][ T29] usb 6-1: Product: syz [ 61.496827][ T29] usb 6-1: Manufacturer: syz [ 61.498782][ T29] usb 6-1: SerialNumber: syz [ 61.509790][ T29] usb 6-1: config 0 descriptor?? [ 61.521464][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 61.526220][ T60] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.530448][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.536698][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 61.540616][ T60] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 61.545607][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.552818][ T60] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 61.556544][ T60] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 61.559957][ T60] usb 8-1: Manufacturer: syz [ 61.565988][ T60] usb 8-1: config 0 descriptor?? [ 61.725172][ T5745] ffs_data_put(): freeing [ 61.801072][ T6336] netlink: 'syz.2.156': attribute type 6 has an invalid length. [ 61.805336][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 61.911423][ T60] rc_core: IR keymap rc-hauppauge not found [ 61.919402][ T6350] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 61.919605][ T60] Registered IR keymap rc-empty [ 61.925935][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.951975][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.972953][ T60] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 61.978070][ T60] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input5 [ 61.990113][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 62.021601][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 62.051691][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 62.071602][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 62.091675][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 62.112144][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 62.131489][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 62.151609][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 62.175343][ T5824] usb 5-1: USB disconnect, device number 4 [ 62.181587][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 62.211476][ T60] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 62.242916][ T60] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 62.247115][ T60] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 62.263736][ T60] usb 8-1: USB disconnect, device number 3 [ 62.697723][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 62.697740][ T42] audit: type=1400 audit(1785409731.174:388): avc: denied { write } for pid=6387 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.707943][ T6388] syzkaller0: entered promiscuous mode [ 62.711671][ T6388] syzkaller0: entered allmulticast mode [ 62.712863][ T42] audit: type=1400 audit(1785409731.174:389): avc: denied { nlmsg_read } for pid=6387 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.958794][ T42] audit: type=1800 audit(1785409731.434:390): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.182" name="idVendor" dev="configfs" ino=13363 res=0 errno=0 [ 62.967089][ T42] audit: type=1800 audit(1785409731.434:391): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.182" name="idProduct" dev="configfs" ino=13364 res=0 errno=0 [ 62.980760][ T42] audit: type=1800 audit(1785409731.434:392): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.182" name="serialnumber" dev="configfs" ino=13365 res=0 errno=0 [ 62.991584][ T42] audit: type=1800 audit(1785409731.434:393): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.182" name="manufacturer" dev="configfs" ino=13366 res=0 errno=0 [ 63.010170][ T42] audit: type=1800 audit(1785409731.434:394): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.182" name="configuration" dev="configfs" ino=13367 res=0 errno=0 [ 63.019909][ T42] audit: type=1800 audit(1785409731.434:395): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.182" name="configuration" dev="configfs" ino=13368 res=0 errno=0 [ 63.030484][ T42] audit: type=1800 audit(1785409731.434:396): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.182" name="UDC" dev="configfs" ino=13369 res=0 errno=0 [ 63.194189][ T6414] amd5536udc-pci 0000:00:04.0: probe with driver amd5536udc-pci failed with error -16 [ 63.870416][ T42] audit: type=1400 audit(1785409732.344:397): avc: denied { getopt } for pid=6423 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.941931][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 64.013554][ T5737] ffs_data_put(): freeing [ 64.113944][ T9] usb 5-1: Dual-Role OTG device on HNP port [ 64.116679][ T9] usb 5-1: New USB device found, idVendor=17b3, idProduct=0004, bcdDevice= 7.02 [ 64.119957][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.123881][ T9] usb 5-1: Product: ACMESynth [ 64.125887][ T9] usb 5-1: Manufacturer: ACME [ 64.127850][ T9] usb 5-1: SerialNumber: 1234567890 [ 64.140720][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.158375][ T6439] syzkaller0: entered allmulticast mode [ 64.173456][ T50] usb 6-1: USB disconnect, device number 3 [ 64.484077][ T6459] kvm: pic: single mode not supported [ 64.526676][ T6468] netlink: 'syz.0.208': attribute type 11 has an invalid length. [ 64.628432][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.632991][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.665241][ T6476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.708311][ T149] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 64.714087][ T149] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 64.721212][ T186] wlan1: authenticated [ 64.723115][ T6480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.732770][ T186] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 64.763688][ T6478] block device autoloading is deprecated and will be removed. [ 64.778961][ T186] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 64.779167][ T6476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.781742][ T186] wlan1: associated [ 65.479136][ T5741] ffs_data_put(): freeing [ 65.641502][ T149] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.685880][ T6499] pci 0000:00:04.0: PCI bridge to [bus 01] [ 65.688986][ T6499] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 65.695412][ T6499] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 65.699875][ T6499] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 65.755098][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 65.764509][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 65.767708][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 65.773498][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 65.793311][ T149] usb 6-1: Using ep0 maxpacket: 16 [ 65.797371][ T149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 65.806615][ T149] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 65.809817][ T149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.813153][ T149] usb 6-1: Product: syz [ 65.814708][ T149] usb 6-1: Manufacturer: syz [ 65.816544][ T149] usb 6-1: SerialNumber: syz [ 65.821992][ T149] usb 6-1: config 0 descriptor?? [ 65.829181][ T149] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 65.835357][ T149] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 66.074280][ T6516] amd5536udc-pci 0000:00:04.0: probe with driver amd5536udc-pci failed with error -16 [ 66.120452][ T5745] ffs_data_put(): freeing [ 66.424888][ T6528] pci 0000:00:04.0: PCI bridge to [bus 01] [ 66.427334][ T6528] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 66.432796][ T6528] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 66.437480][ T6528] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 66.438389][ T149] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 66.809722][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.813845][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.822800][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'. [ 66.845362][ T6542] veth3: entered allmulticast mode [ 66.863183][ T149] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 66.866309][ T149] em28xx 6-1:0.0: board has no eeprom [ 66.878826][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 67.211439][ T149] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 67.214742][ T149] em28xx 6-1:0.0: dvb set to bulk mode. [ 67.217452][ T5526] em28xx 6-1:0.0: Binding DVB extension [ 67.361431][ T6488] em28xx 6-1:0.0: write to i2c device at 0xe failed with unknown error (status=1) [ 67.539826][ T149] usb 6-1: USB disconnect, device number 4 [ 67.544910][ T149] em28xx 6-1:0.0: Disconnecting em28xx [ 67.563143][ T5526] em28xx 6-1:0.0: Registering input extension [ 67.566779][ T24] usb 5-1: USB disconnect, device number 5 [ 67.567430][ T149] em28xx 6-1:0.0: Closing input extension [ 67.637401][ T149] em28xx 6-1:0.0: Freeing device [ 67.712469][ T42] kauditd_printk_skb: 144 callbacks suppressed [ 67.712487][ T42] audit: type=1400 audit(1785409736.194:542): avc: denied { read } for pid=6563 comm="syz.2.244" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.728596][ T42] audit: type=1400 audit(1785409736.194:543): avc: denied { open } for pid=6563 comm="syz.2.244" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.738325][ T42] audit: type=1400 audit(1785409736.194:544): avc: denied { ioctl } for pid=6563 comm="syz.2.244" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.099776][ T6591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.120672][ T6567] block device autoloading is deprecated and will be removed. [ 68.156647][ T6591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.202700][ T6588] amd5536udc-pci 0000:00:04.0: probe with driver amd5536udc-pci failed with error -16 [ 68.223691][ T6593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.580499][ T42] audit: type=1800 audit(1785409737.054:545): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.251" name="cluster_name" dev="configfs" ino=12996 res=0 errno=0 [ 68.597010][ T42] audit: type=1800 audit(1785409737.064:546): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.251" name="local" dev="configfs" ino=13723 res=0 errno=0 [ 68.633250][ T6610] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 68.637724][ T6609] syzkaller0: entered promiscuous mode [ 68.640142][ T6609] syzkaller0: entered allmulticast mode [ 68.665693][ T42] audit: type=1800 audit(1785409737.144:547): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.254" name="idVendor" dev="configfs" ino=13727 res=0 errno=0 [ 68.672666][ T42] audit: type=1800 audit(1785409737.144:548): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.254" name="idProduct" dev="configfs" ino=13728 res=0 errno=0 [ 68.680205][ T42] audit: type=1800 audit(1785409737.144:549): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.254" name="serialnumber" dev="configfs" ino=13729 res=0 errno=0 [ 68.688135][ T42] audit: type=1800 audit(1785409737.144:550): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.254" name="manufacturer" dev="configfs" ino=13730 res=0 errno=0 [ 68.694789][ T42] audit: type=1800 audit(1785409737.144:551): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.254" name="configuration" dev="configfs" ino=13731 res=0 errno=0 [ 68.816720][ T5824] hid_parser_main: 22 callbacks suppressed [ 68.816735][ T5824] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.821761][ T5824] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.824279][ T5824] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.827020][ T5824] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.831292][ T5824] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.834261][ T5824] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.836696][ T5824] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.839972][ T5824] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.843344][ T5824] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.850933][ T5824] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.862966][ T5824] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.03 Device [syz1] on syz1 [ 68.925450][ T6627] fido_id[6627]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.119380][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.122010][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.141449][ T5824] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.177106][ T6636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.185751][ T6636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.284867][ T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 69.299615][ T5815] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.302905][ T5815] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.308585][ T5815] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.311458][ T5824] usb 8-1: Using ep0 maxpacket: 16 [ 69.314189][ T5815] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.316844][ T5824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.321893][ T5824] usb 8-1: config 0 has no interfaces? [ 69.324230][ T5824] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 69.327888][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.335379][ T5824] usb 8-1: config 0 descriptor?? [ 69.431458][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 69.437216][ T60] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 69.440871][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.444468][ T60] usb 5-1: Product: syz [ 69.446220][ T60] usb 5-1: Manufacturer: syz [ 69.448117][ T60] usb 5-1: SerialNumber: syz [ 69.452559][ T60] usb 5-1: config 0 descriptor?? [ 69.489427][ T6649] amd5536udc-pci 0000:00:04.0: probe with driver amd5536udc-pci failed with error -16 [ 69.651553][ T5824] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 69.712271][ T5526] usb 8-1: USB disconnect, device number 4 [ 69.779863][ T6654] pci_bus 0000:01: busn_res: [bus 01] is released [ 69.822801][ T5824] usb 6-1: too many configurations: 36, using maximum allowed: 8 [ 69.838019][ T5824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 69.841174][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.843869][ T5824] usb 6-1: Product: syz [ 69.845297][ T5824] usb 6-1: Manufacturer: syz [ 69.846904][ T5824] usb 6-1: SerialNumber: syz [ 69.858723][ T60] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 69.867854][ T60] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 69.872558][ C1] ================================================================== [ 69.876016][ C1] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 69.879213][ C1] Read of size 1 at addr ffff888054a99913 by task migration/1/27 [ 69.883685][ C1] [ 69.884690][ C1] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 69.884715][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.884727][ C1] Stopper: 0x0 <- 0x0 [ 69.884764][ C1] Call Trace: [ 69.884780][ C1] [ 69.884787][ C1] dump_stack_lvl+0x100/0x190 [ 69.884820][ C1] print_report+0x13d/0x4b0 [ 69.884848][ C1] ? __virt_addr_valid+0x239/0x430 [ 69.884872][ C1] ? find_endpoint+0x2a3/0x2c0 [ 69.884893][ C1] kasan_report+0xdf/0x1c0 [ 69.884915][ C1] ? find_endpoint+0x2a3/0x2c0 [ 69.884937][ C1] find_endpoint+0x2a3/0x2c0 [ 69.884958][ C1] dummy_timer+0x2709/0x36f0 [ 69.884986][ C1] ? do_raw_spin_lock+0x128/0x260 [ 69.885014][ C1] ? find_held_lock+0x2b/0x80 [ 69.885038][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 69.885060][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 69.885081][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 69.885100][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 69.885123][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 69.885150][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 69.885174][ C1] ? rcu_is_watching+0x12/0xc0 [ 69.885199][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 69.885217][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 69.885242][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 69.885271][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 69.885300][ C1] handle_softirqs+0x1ea/0x9b0 [ 69.885322][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 69.885345][ C1] ? _raw_spin_unlock+0x28/0x50 [ 69.885374][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 69.885392][ C1] __irq_exit_rcu+0x162/0x210 [ 69.885412][ C1] irq_exit_rcu+0x9/0x30 [ 69.885432][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 69.885450][ C1] [ 69.885456][ C1] [ 69.885463][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 69.885483][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 69.885513][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 d0 05 e8 09 e8 ab ac 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 69.885532][ C1] RSP: 0018:ffffc90000667c10 EFLAGS: 00000202 [ 69.885561][ C1] RAX: 000000000000066b RBX: ffff88801f2ea540 RCX: 0000000000000000 [ 69.885574][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffff88801f2ebc38 [ 69.885585][ C1] RBP: ffffc90000667c68 R08: 0000000000000001 R09: 0000000000000000 [ 69.885595][ C1] R10: 0000000000000001 R11: ffffffff81d6005c R12: ffff8880339ba540 [ 69.885606][ C1] R13: 0000000000000000 R14: ffffffff9122ada4 R15: ffff88806a53b4c0 [ 69.885619][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 69.885648][ C1] __schedule+0x1264/0x6730 [ 69.885672][ C1] ? __pfx___schedule+0x10/0x10 [ 69.885690][ C1] ? find_held_lock+0x2b/0x80 [ 69.885715][ C1] ? schedule+0x225/0x2c0 [ 69.885731][ C1] schedule+0xdd/0x2c0 [ 69.885745][ C1] smpboot_thread_fn+0x893/0xaa0 [ 69.885776][ C1] ? kthread+0x13a/0x450 [ 69.885793][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 69.885826][ C1] kthread+0x370/0x450 [ 69.885845][ C1] ? __pfx_kthread+0x10/0x10 [ 69.885864][ C1] ret_from_fork+0x72b/0xd50 [ 69.885892][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 69.885915][ C1] ? __switch_to+0x800/0x10f0 [ 69.885932][ C1] ? __pfx_kthread+0x10/0x10 [ 69.885934][ T3269] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 69.885948][ C1] ret_from_fork_asm+0x1a/0x30 [ 69.885976][ C1] [ 69.885982][ C1] [ 70.004772][ C1] Allocated by task 6417: [ 70.006121][ C1] kasan_save_stack+0x30/0x50 [ 70.007606][ C1] kasan_save_track+0x14/0x30 [ 70.009110][ C1] __kasan_kmalloc+0xaa/0xb0 [ 70.010562][ C1] __kmalloc_noprof+0x322/0x820 [ 70.012097][ C1] usb_copy_descriptors+0xcd/0x320 [ 70.013708][ C1] f_midi2_bind+0x1dad/0x2770 [ 70.015189][ C1] usb_add_function+0x219/0x890 [ 70.016725][ C1] configfs_composite_bind+0xd83/0x1960 [ 70.018459][ C1] gadget_bind_driver+0x28c/0xbf0 [ 70.020068][ C1] really_probe+0x241/0xa60 [ 70.021513][ C1] __driver_probe_device+0x20e/0x450 [ 70.023187][ C1] driver_probe_device+0x4a/0x140 [ 70.024756][ C1] __driver_attach+0x21f/0x5b0 [ 70.026251][ C1] bus_for_each_dev+0x13e/0x1d0 [ 70.027765][ C1] bus_add_driver+0x305/0x5b0 [ 70.029269][ C1] driver_register+0x1e2/0x360 [ 70.030762][ C1] usb_gadget_register_driver_owner+0x132/0x210 [ 70.032709][ C1] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 70.034451][ C1] configfs_write_iter+0x302/0x4e0 [ 70.036044][ C1] vfs_write+0x6ac/0x1050 [ 70.037403][ C1] ksys_write+0x12a/0x250 [ 70.038790][ C1] do_syscall_64+0x115/0x870 [ 70.040248][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.042096][ C1] [ 70.042856][ C1] Freed by task 6562: [ 70.044107][ C1] kasan_save_stack+0x30/0x50 [ 70.045585][ C1] kasan_save_track+0x14/0x30 [ 70.047055][ C1] kasan_save_free_info+0x3b/0x70 [ 70.048648][ C1] __kasan_slab_free+0x5f/0x80 [ 70.050147][ C1] kfree+0x22b/0x6c0 [ 70.051382][ C1] usb_free_all_descriptors+0x81/0x1a0 [ 70.053090][ C1] purge_configs_funcs+0x285/0x510 [ 70.054689][ C1] configfs_composite_unbind+0xae/0x210 [ 70.056416][ C1] gadget_unbind_driver+0x20c/0x4f0 [ 70.058037][ C1] device_remove+0xcb/0x180 [ 70.059493][ C1] device_release_driver_internal+0x44e/0x620 [ 70.061385][ C1] driver_detach+0xd8/0x1b0 [ 70.062824][ C1] bus_remove_driver+0x13b/0x2e0 [ 70.064389][ C1] driver_unregister+0x76/0xb0 [ 70.065891][ C1] usb_gadget_unregister_driver+0x49/0x70 [ 70.067659][ C1] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 70.069441][ C1] configfs_write_iter+0x302/0x4e0 [ 70.071034][ C1] vfs_write+0x6ac/0x1050 [ 70.072398][ C1] ksys_write+0x12a/0x250 [ 70.073757][ C1] do_syscall_64+0x115/0x870 [ 70.075203][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.077042][ C1] [ 70.077800][ C1] The buggy address belongs to the object at ffff888054a99800 [ 70.077800][ C1] which belongs to the cache kmalloc-512 of size 512 [ 70.082088][ C1] The buggy address is located 275 bytes inside of [ 70.082088][ C1] freed 512-byte region [ffff888054a99800, ffff888054a99a00) [ 70.086268][ C1] [ 70.087035][ C1] The buggy address belongs to the physical page: [ 70.089056][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54a98 [ 70.091743][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 70.094356][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 70.096697][ C1] page_type: f5(slab) [ 70.097960][ C1] raw: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 70.100627][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 70.103286][ C1] head: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 70.105964][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 70.108628][ C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 70.111310][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 70.113986][ C1] page dumped because: kasan: bad access detected [ 70.115971][ C1] page_owner tracks the page as allocated [ 70.117741][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6417, tgid 6416 (syz.0.186), ts 63637220683, free_ts 62188618725 [ 70.124155][ C1] post_alloc_hook+0xfd/0x120 [ 70.125673][ C1] get_page_from_freelist+0xf48/0x3530 [ 70.127372][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 70.129255][ C1] new_slab+0xa2/0x640 [ 70.130540][ C1] refill_objects+0xe3/0x410 [ 70.131992][ C1] __pcs_replace_empty_main+0x376/0x680 [ 70.133721][ C1] __kmalloc_cache_noprof+0x479/0x6c0 [ 70.135393][ C1] snd_mixer_oss_build_test+0x7a/0x380 [ 70.136968][ C1] snd_mixer_oss_build_test_all+0x1ac/0x6e0 [ 70.138758][ C1] snd_mixer_oss_build_input+0x139/0xd50 [ 70.140455][ C1] snd_mixer_oss_notify_handler+0x48d/0x990 [ 70.142252][ C1] snd_card_register+0x2af/0x760 [ 70.143812][ C1] f_midi2_bind+0x1198/0x2770 [ 70.145301][ C1] usb_add_function+0x219/0x890 [ 70.146832][ C1] configfs_composite_bind+0xd83/0x1960 [ 70.148560][ C1] gadget_bind_driver+0x28c/0xbf0 [ 70.150181][ C1] page last free pid 5740 tgid 5740 stack trace: [ 70.152148][ C1] __free_frozen_pages+0x79f/0x1090 [ 70.153790][ C1] qlist_free_all+0x47/0xf0 [ 70.155219][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 70.156923][ C1] __kasan_slab_alloc+0x69/0x90 [ 70.158454][ C1] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 70.160212][ C1] do_getname+0x35/0x390 [ 70.161673][ C1] vfs_fstatat+0xd0/0xe0 [ 70.163238][ C1] __do_sys_newfstatat+0x9d/0x120 [ 70.165147][ C1] do_syscall_64+0x115/0x870 [ 70.166946][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.169249][ C1] [ 70.170193][ C1] Memory state around the buggy address: [ 70.172367][ C1] ffff888054a99800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.175427][ C1] ffff888054a99880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.178496][ C1] >ffff888054a99900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.181578][ C1] ^ [ 70.183398][ C1] ffff888054a99980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.186482][ C1] ffff888054a99a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.189578][ C1] ================================================================== [ 70.192655][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.195372][ C1] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 70.198236][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.201411][ C1] Stopper: 0x0 <- 0x0 [ 70.202688][ C1] Call Trace: [ 70.203748][ C1] [ 70.204664][ C1] dump_stack_lvl+0x100/0x190 [ 70.206161][ C1] vpanic+0x552/0x970 [ 70.207430][ C1] ? __pfx_vpanic+0x10/0x10 [ 70.208893][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 70.210512][ C1] ? find_endpoint+0x2a3/0x2c0 [ 70.212032][ C1] panic+0xd1/0xe0 [ 70.213234][ C1] ? __pfx_panic+0x10/0x10 [ 70.214642][ C1] ? end_report.part.0+0x23/0x90 [ 70.216355][ C1] ? rcu_is_watching+0x12/0xc0 [ 70.217886][ C1] ? end_report.part.0+0x23/0x90 [ 70.219466][ C1] ? check_panic_on_warn+0x1f/0x90 [ 70.221103][ C1] check_panic_on_warn.cold+0x19/0x34 [ 70.222814][ C1] end_report.part.0+0x3a/0x90 [ 70.224352][ C1] kasan_report.cold+0xe/0x18 [ 70.225843][ C1] ? find_endpoint+0x2a3/0x2c0 [ 70.227365][ C1] find_endpoint+0x2a3/0x2c0 [ 70.228883][ C1] dummy_timer+0x2709/0x36f0 [ 70.230365][ C1] ? do_raw_spin_lock+0x128/0x260 [ 70.231955][ C1] ? find_held_lock+0x2b/0x80 [ 70.233465][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 70.235221][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 70.236999][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.238858][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 70.240629][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 70.242515][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 70.244081][ C1] ? rcu_is_watching+0x12/0xc0 [ 70.245613][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.247434][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 70.249028][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 70.250666][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 70.252455][ C1] handle_softirqs+0x1ea/0x9b0 [ 70.254196][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 70.255813][ C1] ? _raw_spin_unlock+0x28/0x50 [ 70.257387][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 70.259183][ C1] __irq_exit_rcu+0x162/0x210 [ 70.260676][ C1] irq_exit_rcu+0x9/0x30 [ 70.262008][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 70.263772][ C1] [ 70.264735][ C1] [ 70.265675][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.267550][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 70.269597][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 d0 05 e8 09 e8 ab ac 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 70.276288][ C1] RSP: 0018:ffffc90000667c10 EFLAGS: 00000202 [ 70.278607][ C1] RAX: 000000000000066b RBX: ffff88801f2ea540 RCX: 0000000000000000 [ 70.281129][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffff88801f2ebc38 [ 70.283615][ C1] RBP: ffffc90000667c68 R08: 0000000000000001 R09: 0000000000000000 [ 70.286063][ C1] R10: 0000000000000001 R11: ffffffff81d6005c R12: ffff8880339ba540 [ 70.288529][ C1] R13: 0000000000000000 R14: ffffffff9122ada4 R15: ffff88806a53b4c0 [ 70.291001][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 70.292864][ C1] __schedule+0x1264/0x6730 [ 70.294311][ C1] ? __pfx___schedule+0x10/0x10 [ 70.295846][ C1] ? find_held_lock+0x2b/0x80 [ 70.297342][ C1] ? schedule+0x225/0x2c0 [ 70.298730][ C1] schedule+0xdd/0x2c0 [ 70.300014][ C1] smpboot_thread_fn+0x893/0xaa0 [ 70.301584][ C1] ? kthread+0x13a/0x450 [ 70.302925][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 70.304639][ C1] kthread+0x370/0x450 [ 70.305921][ C1] ? __pfx_kthread+0x10/0x10 [ 70.307374][ C1] ret_from_fork+0x72b/0xd50 [ 70.308877][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 70.310569][ C1] ? __switch_to+0x800/0x10f0 [ 70.312286][ C1] ? __pfx_kthread+0x10/0x10 [ 70.314091][ C1] ret_from_fork_asm+0x1a/0x30 [ 70.315962][ C1] [ 70.317622][ C1] Kernel Offset: disabled [ 70.319013][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:08:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000113d11 RBX=ffffffff8e891480 RCX=ffffffff8bbb22d5 RDX=0000000000000000 RSI=ffffffff8e1a6f32 RDI=ffffffff8c402680 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bbb089f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33823ffc CR3=0000000059956000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee3a75d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff12aee566 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff12aee566 00007fff12aee56c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee39a354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee39a354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee39a3564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee39a354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee39bf1600 00007fee39bf15e0 00007fee39bf15e8 00007fee39bf1618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee39bf15f8 00007fee39bf15c8 00007fee39bf1600 00007fee39bf15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc900006a0640 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9b6fa20b R15=ffffffff85a38b00 RIP=ffffffff85a38b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c38bda6 CR3=0000000026fc9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6dd66a66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6dd66a66 00007ffe6dd66a6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80e54354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80e54354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80e543564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80e54354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000302e63 64755f796d6d7564 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865000a64657275 6769666e6f63203a 7463656e6e6f635f 6273755f7a797300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40000a41405750 424c434b4a46051f 5146404b4b4a465f 4756505f5f5c5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80e55f15f8 00007f80e55f15c8 00007f80e55f1600 00007f80e55f15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffff1100ab5711b RBX=ffff888055ab8910 RCX=ffffffff8296c3bf RDX=0000000000000000 RSI=ffffffff8296c400 RDI=ffff888055ab88d8 RBP=ffff888055ab8910 RSP=ffffc90003d179a8 R8 =0000000000000007 R9 =0000000000000001 R10=ffff888055ab8910 R11=0000000000000000 R12=0000000000000001 R13=dffffc0000000000 R14=ffff88803855e178 R15=ffffc90003d17b20 RIP=ffffffff8296c410 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe9c1595880 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005652286fdf70 CR3=0000000048a39000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000007f78000 Opmask01=0000000000000000 Opmask02=0000000001000017 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7bf84240 00007ffd7bf84240 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7bf84190 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005652286fdf30 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005652284ab050 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d005d392d00312d 360036006273753d ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff00000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f002f73 75622f7379732f00 2f6d657473797362 75732f7379732f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005652286f0c40 00005652286f4ec0 00005652286f06f0 00005652286df7d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005652286e8f40 00005652286f4a60 00005652286f4a20 00005652286edfa0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005652286dfb10 00005652286e71f0 00005652286eef10 00005652286e55a0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005652284a93b0 00005652286e98d0 00005652286f7360 00005652286e4a00 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000574d586d10 0000000000000021 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000003 RSI=ffffffff8e181079 RDI=ffffe8fefc77ac08 RBP=dffffc0000000000 RSP=ffffc9000f4af8f8 R8 =0000000000000000 R9 =0000000000000001 R10=dffffc0000000000 R11=0000000000000003 R12=0000000000000000 R13=0000000000000000 R14=ffff88805673f000 R15=ffffe8fefc77ac00 RIP=ffffffff81e29d71 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdb3188d6c0 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe9c0bfddf4 CR3=0000000059c42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee69b2226 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee69b2226 00007ffee69b222c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdb30a354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdb30a354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdb30a3564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdb30a354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000312e63 64755f796d6d7564 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865000a64657275 6769666e6f63203a 7463656e6e6f635f 6273755f7a797300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40000a41405750 424c434b4a46051f 5146404b4b4a465f 4756505f5f5c5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdb30bf15f8 00007fdb30bf15c8 00007fdb30bf1600 00007fdb30bf15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000