last executing test programs: 4.818712149s ago: executing program 0 (id=454): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) unshare(0x20000000) r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0xdd52, 0x400, 0x2, 0x2cf}, &(0x7f00000003c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000280)={0x0, r4, 0xd, {0x7, 0xa42}, 0x80}, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r5, r5, 0x0, 0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) close(r0) fcntl$addseals(r5, 0x409, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002bc0)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="a90e00360f01b12e120f20c06635040000000f22e08f3d81e99878e078e0f4362e1bdc0f18bfe8d90f7e909b00f30f09ba6100cced", 0x35}], 0x1, 0x0, &(0x7f00000002c0)=[@dstype3={0x7, 0x2}], 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f0000000240)=@multiplanar_mmap={0x3d8, 0x2, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x0, 0x0, 0x4, 0xd8, 0xff, 0x4d, "d738c738"}, 0x1ff, 0x1, {&(0x7f0000000080)=[{0x8, 0x5, {0x93}, 0x5}, {0xfffffffe, 0x1, {0x2}, 0x8}]}, 0x1, 0x0, r9}) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000040)="4f3bfde51b257f40", 0x8}], 0x1) r11 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00096e84bd9a000000000000"]) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) 4.646658887s ago: executing program 0 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x1411, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 4.645135097s ago: executing program 0 (id=460): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f0002000000090505020006", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)='0', 0xfe64) 3.220441832s ago: executing program 3 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x800, 0x27dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="9400000010000104000000000000000000000b00", @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c0000140006"], 0x94}}, 0x0) 3.220180892s ago: executing program 3 (id=482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000001f}, 0x20040004) 3.140412584s ago: executing program 3 (id=483): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x100100, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.140143066s ago: executing program 3 (id=484): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r1, &(0x7f0000000000)="1b125c0e881f66dfec0a57e6ba3515d3fd4ccda66c50d3deb41211f6ff2641170c898769ca9d0420f1354a308417a7a94a2d2c70541e2ec087181af34d4ebe584ddddbea0acd5e7e15f46fe138919491cccf1d5b6cec7b508c41b1", 0x5b) 1.759320328s ago: executing program 2 (id=495): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x400300, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.690464946s ago: executing program 2 (id=497): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_DEV_CREATE(r1, 0x5501) read$hiddev(r1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="700ffe0010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.630468592s ago: executing program 2 (id=499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) mkdirat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r8, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x7fffffff, 0x5, {{0x1f, 0x4, 0x2, 0x28, 0x7c, 0x67, 0x0, 0xfd, 0x2f, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0xf, 0x6a, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @noop, @end, @cipso={0x86, 0x55, 0x2, [{0x2, 0x5, "c9d7a3"}, {0x0, 0x11, "a22fcd0b96b82fad42b76e4da74e9e"}, {0x1, 0x6, "8a934304"}, {0x7, 0xc, "14cd2e7a2627bfca111f"}, {0x5, 0x9, "8318d890fd2670"}, {0x5, 0xe, "70fd2262027822e62dfd0405"}, {0x2, 0xc, "d4189654120a70d095a1"}, {0x4, 0x4, "b49c"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x8c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24044010}, 0x40) 1.56024311s ago: executing program 0 (id=501): r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x10940) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000080)=0xff, 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x5d, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r1, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) 1.551380948s ago: executing program 2 (id=503): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1000000, 0x4686da65, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 1.46036343s ago: executing program 2 (id=505): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001d000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x6a, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 1.459930721s ago: executing program 0 (id=506): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) close(r0) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) 1.390696313s ago: executing program 0 (id=508): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000280)={0x80, 0x0, 0x54}) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000000)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x60870f12b7202465, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}}, 0x1c}, 0x1, 0x0, 0x0, 0x5d2c7973c7bf8b01}, 0x20000050) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000000)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106d) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x288c80, 0x0) ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000040)=""/185) r7 = semget$private(0x0, 0x4000000009, 0x208) semop(r7, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semctl$SETALL(r7, 0x0, 0x11, 0x0) semctl$IPC_RMID(r7, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000000000)={0x4, 0x9}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000200)=0x2) fcntl$setown(r3, 0x8, 0xffffffffffffffff) 1.390534905s ago: executing program 2 (id=509): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)='0', 0xfe64) 1.100711793s ago: executing program 1 (id=517): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1000000}, {0x0}, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 1.029685581s ago: executing program 1 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000140)) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3, 0x1e0, 0x0, {}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3, 0x1e0, 0x0, {}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) (async) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x478}, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd(0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000140)={r8, 0xffff}) (async) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000140)={r8, 0xffff}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) clock_gettime(0x0, &(0x7f0000000180)) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000000000000900000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000000000200003fd31340e92c4bb80000000000008e00006beec76276aa90836caae08473d528b578f6b20a3d2345c07b3e62992b6f17b8cab2643694bc76e58d90865a386d2dea7004a20249045dc1eec532ff2ee3591dbda4f7"], 0x48}, 0x300}, 0x20048040) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101140, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xb9) 890.660436ms ago: executing program 1 (id=519): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001d000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x6a, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 890.467363ms ago: executing program 1 (id=520): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000067c0), 0x0, 0x0) preadv(r2, &(0x7f00000080c0)=[{&(0x7f0000007f80)=""/206, 0xce}], 0x1, 0x10000, 0x47d) getsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 737.71552ms ago: executing program 1 (id=521): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x408003) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 737.477951ms ago: executing program 1 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) close(r3) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000017090000fcffffffbf91000000000000b7020000020000008501000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROMREADMODE2(r6, 0x530c, &(0x7f0000000200)={0x90, 0x4, 0x1, 0x7, 0xac, 0x2c}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffe, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xb], 0x108}}) 67.322688ms ago: executing program 3 (id=523): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@t={0x81, 0x5, 0x0, 0xfe, @generic=0x7ff}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250601f2800c0002000aac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 3 (id=524): r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x10940) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x5d, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r1, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) kernel console output (not intermixed with test programs): [ 43.926373][ T40] audit: type=1400 audit(1759692390.413:60): avc: denied { rlimitinh } for pid=5843 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.934587][ T40] audit: type=1400 audit(1759692390.413:61): avc: denied { siginh } for pid=5843 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:16157' (ED25519) to the list of known hosts. [ 45.389260][ T40] audit: type=1400 audit(1759692391.893:62): avc: denied { name_bind } for pid=5854 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.422767][ T40] audit: type=1400 audit(1759692391.933:63): avc: denied { write } for pid=5855 comm="sh" path="pipe:[2001]" dev="pipefs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.438300][ T40] audit: type=1400 audit(1759692391.943:64): avc: denied { execute } for pid=5855 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.449357][ T40] audit: type=1400 audit(1759692391.943:65): avc: denied { execute_no_trans } for pid=5855 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.152648][ T40] audit: type=1400 audit(1759692394.663:66): avc: denied { mounton } for pid=5855 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.165904][ T5855] cgroup: Unknown subsys name 'net' [ 48.314174][ T5855] cgroup: Unknown subsys name 'cpuset' [ 48.319383][ T5855] cgroup: Unknown subsys name 'rlimit' [ 48.571961][ T5881] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.642853][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.189816][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 53.189832][ T40] audit: type=1400 audit(1759692399.703:80): avc: denied { execmem } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.435865][ T40] audit: type=1400 audit(1759692399.943:81): avc: denied { create } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.459294][ T40] audit: type=1400 audit(1759692399.943:82): avc: denied { read write } for pid=5940 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.484797][ T5306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.488806][ T5306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.492082][ T40] audit: type=1400 audit(1759692399.943:83): avc: denied { open } for pid=5940 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.492109][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.500788][ T5306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.508251][ T40] audit: type=1400 audit(1759692399.953:84): avc: denied { ioctl } for pid=5940 comm="syz-executor" path="socket:[5625]" dev="sockfs" ino=5625 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.509374][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.518651][ T5306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.521900][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.523609][ T5306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.530293][ T5306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.534440][ T5306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.537854][ T5306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.541748][ T5306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.542451][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.549265][ T40] audit: type=1400 audit(1759692400.053:85): avc: denied { read } for pid=5940 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.550148][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.554789][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.555482][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.557589][ T40] audit: type=1400 audit(1759692400.053:86): avc: denied { open } for pid=5940 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.562205][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.566803][ T40] audit: type=1400 audit(1759692400.053:87): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.567999][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.578952][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.592494][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.796208][ T40] audit: type=1400 audit(1759692400.303:88): avc: denied { module_request } for pid=5940 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.847255][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 54.000545][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 54.040564][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.044214][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.047413][ T5940] bridge_slave_0: entered allmulticast mode [ 54.051982][ T5940] bridge_slave_0: entered promiscuous mode [ 54.061392][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.064647][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.067341][ T5940] bridge_slave_1: entered allmulticast mode [ 54.071451][ T5940] bridge_slave_1: entered promiscuous mode [ 54.075720][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 54.222398][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.261907][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.297756][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.301712][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.304910][ T5943] bridge_slave_0: entered allmulticast mode [ 54.308745][ T5943] bridge_slave_0: entered promiscuous mode [ 54.344972][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 54.352898][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.355187][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.357405][ T5943] bridge_slave_1: entered allmulticast mode [ 54.360169][ T5943] bridge_slave_1: entered promiscuous mode [ 54.381112][ T5940] team0: Port device team_slave_0 added [ 54.427944][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.430764][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.433292][ T5949] bridge_slave_0: entered allmulticast mode [ 54.435871][ T5949] bridge_slave_0: entered promiscuous mode [ 54.470233][ T5940] team0: Port device team_slave_1 added [ 54.488515][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.491131][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.493760][ T5949] bridge_slave_1: entered allmulticast mode [ 54.497454][ T5949] bridge_slave_1: entered promiscuous mode [ 54.519099][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.607786][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.613409][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.617204][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.620146][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.631523][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.646167][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.667567][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.670240][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.680498][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.795857][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.798786][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.802479][ T5952] bridge_slave_0: entered allmulticast mode [ 54.807102][ T5952] bridge_slave_0: entered promiscuous mode [ 54.814219][ T5949] team0: Port device team_slave_0 added [ 54.818394][ T5943] team0: Port device team_slave_0 added [ 54.822862][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.826290][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.829550][ T5952] bridge_slave_1: entered allmulticast mode [ 54.834139][ T5952] bridge_slave_1: entered promiscuous mode [ 54.840063][ T5949] team0: Port device team_slave_1 added [ 54.865424][ T5943] team0: Port device team_slave_1 added [ 55.029720][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.032602][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.044609][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.073705][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.076691][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.089054][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.098357][ T5940] hsr_slave_0: entered promiscuous mode [ 55.101223][ T5940] hsr_slave_1: entered promiscuous mode [ 55.106104][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.110356][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.121703][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.130027][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.134666][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.137612][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.149613][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.167710][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.225776][ T5952] team0: Port device team_slave_0 added [ 55.232228][ T5952] team0: Port device team_slave_1 added [ 55.412986][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.415356][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.427932][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.442175][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.444934][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.457565][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.484714][ T5949] hsr_slave_0: entered promiscuous mode [ 55.487966][ T5949] hsr_slave_1: entered promiscuous mode [ 55.491965][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 55.494519][ T5949] Cannot create hsr debugfs directory [ 55.516166][ T5943] hsr_slave_0: entered promiscuous mode [ 55.522156][ T5943] hsr_slave_1: entered promiscuous mode [ 55.525759][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 55.528028][ T5943] Cannot create hsr debugfs directory [ 55.590002][ T5950] Bluetooth: hci1: command tx timeout [ 55.600191][ T5950] Bluetooth: hci2: command tx timeout [ 55.600279][ T5954] Bluetooth: hci0: command tx timeout [ 55.665642][ T5952] hsr_slave_0: entered promiscuous mode [ 55.668575][ T5952] hsr_slave_1: entered promiscuous mode [ 55.670017][ T5954] Bluetooth: hci3: command tx timeout [ 55.671871][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 55.674478][ T5952] Cannot create hsr debugfs directory [ 56.024203][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.039276][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.046094][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.058595][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.091700][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.100561][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.105396][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.131621][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.170085][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.178835][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.185032][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.191209][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.268275][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.275001][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.283410][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.290885][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.363007][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.382627][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.420450][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.433442][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.438886][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.442451][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.456228][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.458976][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.471320][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.481304][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.483607][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.507420][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.510826][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.536098][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.571165][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.574136][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.600427][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.603426][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.612685][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.639506][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.652152][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.654372][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.656216][ T40] audit: type=1400 audit(1759692403.163:89): avc: denied { sys_module } for pid=5949 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.672321][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.675337][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.766017][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.818200][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.828712][ T5949] veth0_vlan: entered promiscuous mode [ 56.850758][ T5949] veth1_vlan: entered promiscuous mode [ 56.855627][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.878562][ T5940] veth0_vlan: entered promiscuous mode [ 56.910037][ T5940] veth1_vlan: entered promiscuous mode [ 56.918313][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.923798][ T5949] veth0_macvtap: entered promiscuous mode [ 56.936171][ T5949] veth1_macvtap: entered promiscuous mode [ 56.946354][ T5943] veth0_vlan: entered promiscuous mode [ 56.961577][ T5943] veth1_vlan: entered promiscuous mode [ 56.973707][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.990556][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.001959][ T5940] veth0_macvtap: entered promiscuous mode [ 57.010161][ T1153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.019680][ T5940] veth1_macvtap: entered promiscuous mode [ 57.022921][ T1153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.027208][ T1153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.033027][ T5952] veth0_vlan: entered promiscuous mode [ 57.042003][ T1153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.067011][ T5952] veth1_vlan: entered promiscuous mode [ 57.083419][ T5943] veth0_macvtap: entered promiscuous mode [ 57.088543][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.098285][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.105968][ T5943] veth1_macvtap: entered promiscuous mode [ 57.121717][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.143001][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.148631][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.155485][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.159917][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.168624][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.192093][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.195173][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.208368][ T5952] veth0_macvtap: entered promiscuous mode [ 57.218543][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.225765][ T5952] veth1_macvtap: entered promiscuous mode [ 57.238900][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.257823][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.258200][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.260322][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.262074][ T224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.264730][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.283877][ T224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.287597][ T224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.297442][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.322322][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.336007][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.338634][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.354067][ T6033] capability: warning: `syz.3.5' uses deprecated v2 capabilities in a way that may be insecure [ 57.355491][ T224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.362386][ T224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.372228][ T224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.375347][ T224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.381752][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.384958][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.439839][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.442486][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.457148][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.462720][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.491835][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.501837][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.520284][ T6043] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1'. [ 57.524579][ T6043] Zero length message leads to an empty skb [ 57.533019][ T6043] program syz.0.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.612886][ T6048] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 57.615680][ T6048] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2'. [ 57.618591][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 57.669538][ T5954] Bluetooth: hci2: command tx timeout [ 57.670469][ T5950] Bluetooth: hci1: command tx timeout [ 57.749743][ T5950] Bluetooth: hci3: command tx timeout [ 58.060101][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 58.200349][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 58.200368][ T40] audit: type=1400 audit(1759692404.713:139): avc: denied { create } for pid=6061 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.212218][ T40] audit: type=1400 audit(1759692404.713:140): avc: denied { bind } for pid=6061 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.223849][ T40] audit: type=1400 audit(1759692404.713:141): avc: denied { read write } for pid=6061 comm="syz.1.12" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 58.235261][ T40] audit: type=1400 audit(1759692404.713:142): avc: denied { open } for pid=6061 comm="syz.1.12" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 58.351721][ T6043] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.354375][ T6043] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.357293][ T40] audit: type=1400 audit(1759692404.863:143): avc: denied { read write } for pid=6070 comm="syz.2.15" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.367363][ T40] audit: type=1400 audit(1759692404.863:144): avc: denied { open } for pid=6070 comm="syz.2.15" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.378064][ T6043] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.385368][ T6043] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.387762][ T6043] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.392459][ T6043] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.397941][ T6043] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.401463][ T6043] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.405796][ T6043] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.409104][ T6043] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.411244][ T6043] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.414253][ T6043] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.459623][ T40] audit: type=1400 audit(1759692404.963:145): avc: denied { ioctl } for pid=6076 comm="syz.2.16" path="socket:[10363]" dev="sockfs" ino=10363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.479570][ T40] audit: type=1400 audit(1759692404.973:146): avc: denied { read write } for pid=6080 comm="syz.0.17" name="video7" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.496622][ T40] audit: type=1400 audit(1759692404.973:147): avc: denied { open } for pid=6080 comm="syz.0.17" path="/dev/video7" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.505394][ T40] audit: type=1400 audit(1759692404.973:148): avc: denied { ioctl } for pid=6080 comm="syz.0.17" path="/dev/video7" dev="devtmpfs" ino=973 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.520497][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19'. [ 58.529280][ T1146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.534874][ T1146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.549805][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.683300][ T6109] tipc: Started in network mode [ 58.685160][ T6109] tipc: Node identity ac14140f, cluster identity 4711 [ 58.691288][ T6109] tipc: Enabled bearer , priority 10 [ 58.696285][ T6109] (syz.3.28,6109,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 58.700230][ T6109] (syz.3.28,6109,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 58.703830][ T6109] (syz.3.28,6109,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 58.707506][ T6109] (syz.3.28,6109,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 58.753987][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 58.796565][ T6111] comedi: valid board names for 8255 driver are: [ 58.801675][ T6111] 8255 [ 58.803328][ T6111] comedi: valid board names for vmk80xx driver are: [ 58.807398][ T6111] vmk80xx [ 58.811119][ T6111] comedi: valid board names for usbduxsigma driver are: [ 58.814019][ T6111] usbduxsigma [ 58.815474][ T6111] comedi: valid board names for usbduxfast driver are: [ 58.818117][ T6111] usbduxfast [ 58.819422][ T6111] comedi: valid board names for usbdux driver are: [ 58.821667][ T6111] usbdux [ 58.822756][ T6111] comedi: valid board names for ni6501 driver are: [ 58.825126][ T6111] ni6501 [ 58.826169][ T6111] comedi: valid board names for dt9812 driver are: [ 58.828671][ T6111] dt9812 [ 58.833585][ T6111] comedi: valid board names for ni_labpc_cs driver are: [ 58.837160][ T6111] ni_labpc_cs [ 58.838658][ T6111] comedi: valid board names for ni_daq_700 driver are: [ 58.841697][ T6111] ni_daq_700 [ 58.843167][ T6111] comedi: valid board names for labpc_pci driver are: [ 58.845822][ T6111] labpc_pci [ 58.847094][ T6111] comedi: valid board names for adl_pci9118 driver are: [ 58.850403][ T6111] pci9118dg [ 58.851921][ T6111] pci9118hg [ 58.853347][ T6111] pci9118hr [ 58.854862][ T6111] comedi: valid board names for 8255_pci driver are: [ 58.858931][ T6111] 8255_pci [ 58.861577][ T6111] comedi: valid board names for s526 driver are: [ 58.864323][ T6111] s526 [ 58.865737][ T6111] comedi: valid board names for multiq3 driver are: [ 58.868250][ T6111] multiq3 [ 58.869922][ T6111] comedi: valid board names for pcmuio driver are: [ 58.872406][ T6111] pcmuio48 [ 58.873447][ T6111] pcmuio96 [ 58.874528][ T6111] comedi: valid board names for pcmmio driver are: [ 58.876584][ T6111] pcmmio [ 58.877545][ T6111] comedi: valid board names for pcmda12 driver are: [ 58.879919][ T6111] pcmda12 [ 58.881123][ T6111] comedi: valid board names for pcmad driver are: [ 58.883732][ T6111] pcmad12 [ 58.885008][ T6111] pcmad16 [ 58.886286][ T6111] comedi: valid board names for ni_labpc driver are: [ 58.888672][ T6111] lab-pc-1200 [ 58.890059][ T6111] lab-pc-1200ai [ 58.891692][ T6111] lab-pc+ [ 58.893039][ T6111] comedi: valid board names for atmio16 driver are: [ 58.895894][ T6111] atmio16 [ 58.897376][ T6111] atmio16d [ 58.898958][ T6111] comedi: valid board names for ni_at_ao driver are: [ 58.902353][ T6111] at-ao-6 [ 58.903895][ T6111] at-ao-10 [ 58.905328][ T6111] comedi: valid board names for ni_at_a2150 driver are: [ 58.908108][ T6111] ni_at_a2150 [ 58.909786][ T6111] comedi: valid board names for adq12b driver are: [ 58.912534][ T6111] adq12b [ 58.913754][ T6111] comedi: valid board names for mpc624 driver are: [ 58.916447][ T6111] mpc624 [ 58.918002][ T6111] comedi: valid board names for c6xdigio driver are: [ 58.922051][ T6111] c6xdigio [ 58.923796][ T6111] comedi: valid board names for aio_iiro_16 driver are: [ 58.926804][ T6111] aio_iiro_16 [ 58.928283][ T6111] comedi: valid board names for aio_aio12_8 driver are: [ 58.931275][ T6111] aio_aio12_8 [ 58.932799][ T6111] aio_ai12_8 [ 58.934220][ T6111] aio_ao12_4 [ 58.936343][ T6111] comedi: valid board names for fl512 driver are: [ 58.939087][ T6111] fl512 [ 58.940510][ T6111] comedi: valid board names for dmm32at driver are: [ 58.943946][ T6111] dmm32at [ 58.945637][ T6111] comedi: valid board names for dt282x driver are: [ 58.948736][ T6111] dt2821 [ 58.950130][ T6111] dt2821-f [ 58.951493][ T6111] dt2821-g [ 58.952790][ T6111] dt2823 [ 58.954035][ T6111] dt2824-pgh [ 58.955432][ T6111] dt2824-pgl [ 58.956803][ T6111] dt2825 [ 58.958064][ T6111] dt2827 [ 58.959408][ T6111] dt2828 [ 58.960700][ T6111] dt2829 [ 58.962035][ T6111] dt21-ez [ 58.963607][ T6111] dt23-ez [ 58.965330][ T6111] dt24-ez [ 58.967062][ T6111] dt24-ez-pgl [ 58.968894][ T6111] comedi: valid board names for dt2817 driver are: [ 58.972118][ T6111] dt2817 [ 58.973322][ T6111] comedi: valid board names for dt2815 driver are: [ 58.975883][ T6111] dt2815 [ 58.977079][ T6111] comedi: valid board names for dt2814 driver are: [ 58.979819][ T6111] dt2814 [ 58.981064][ T6111] comedi: valid board names for dt2811 driver are: [ 58.983662][ T6111] dt2811-pgh [ 58.985229][ T6111] dt2811-pgl [ 58.986888][ T6111] comedi: valid board names for dt2801 driver are: [ 58.990284][ T6111] dt2801 [ 58.991574][ T6111] comedi: valid board names for das6402 driver are: [ 58.994283][ T6111] das6402-12 [ 58.995674][ T6111] das6402-16 [ 58.997036][ T6111] comedi: valid board names for das1800 driver are: [ 58.999834][ T6111] das-1701st [ 59.001167][ T6111] das-1701st-da [ 59.002704][ T6111] das-1702st [ 59.004802][ T6111] das-1702st-da [ 59.007225][ T6111] das-1702hr [ 59.008780][ T6111] das-1702hr-da [ 59.010345][ T6111] das-1701ao [ 59.011768][ T6111] das-1702ao [ 59.013166][ T6111] das-1801st [ 59.014516][ T6111] das-1801st-da [ 59.015923][ T6111] das-1802st [ 59.017471][ T6111] das-1802st-da [ 59.019294][ T6111] das-1802hr [ 59.021011][ T6111] das-1802hr-da [ 59.022884][ T6111] das-1801hc [ 59.024567][ T6111] das-1802hc [ 59.026197][ T6111] das-1801ao [ 59.027600][ T6111] das-1802ao [ 59.028805][ T6111] comedi: valid board names for das800 driver are: [ 59.032015][ T6111] das-800 [ 59.033332][ T6111] cio-das800 [ 59.034703][ T6111] das-801 [ 59.036004][ T6111] cio-das801 [ 59.037396][ T6111] das-802 [ 59.039939][ T6111] cio-das802 [ 59.041360][ T6111] cio-das802/16 [ 59.042896][ T6111] comedi: valid board names for isa-das08 driver are: [ 59.045947][ T6111] isa-das08 [ 59.047615][ T6111] das08-pgm [ 59.049379][ T6111] das08-pgh [ 59.051111][ T6111] das08-pgl [ 59.052568][ T6111] das08-aoh [ 59.053882][ T6111] das08-aol [ 59.055277][ T6111] das08-aom [ 59.056623][ T6111] das08/jr-ao [ 59.058010][ T6111] das08jr-16-ao [ 59.059641][ T6111] pc104-das08 [ 59.061052][ T6111] das08jr/16 [ 59.062469][ T6111] comedi: valid board names for das16m1 driver are: [ 59.065268][ T6111] das16m1 [ 59.066796][ T6111] comedi: valid board names for dac02 driver are: [ 59.069978][ T6111] dac02 [ 59.071270][ T6111] comedi: valid board names for rti802 driver are: [ 59.074027][ T6111] rti802 [ 59.075288][ T6111] comedi: valid board names for rti800 driver are: [ 59.077922][ T6111] rti800 [ 59.079254][ T6111] rti815 [ 59.080579][ T6111] comedi: valid board names for pcm3724 driver are: [ 59.083734][ T6111] pcm3724 [ 59.085281][ T6111] comedi: valid board names for pcl818 driver are: [ 59.088540][ T6111] pcl818l [ 59.090075][ T6111] pcl818h [ 59.091322][ T6111] pcl818hd [ 59.092561][ T6111] pcl818hg [ 59.093797][ T6111] pcl818 [ 59.094959][ T6111] pcl718 [ 59.096180][ T6111] pcm3718 [ 59.097503][ T6111] comedi: valid board names for pcl816 driver are: [ 59.100431][ T6111] pcl816 [ 59.101973][ T6111] pcl814b [ 59.103601][ T6111] comedi: valid board names for pcl812 driver are: [ 59.106935][ T6111] pcl812 [ 59.108177][ T6111] pcl812pg [ 59.111027][ T6111] acl8112pg [ 59.112530][ T6111] acl8112dg [ 59.113727][ T6111] acl8112hg [ 59.114865][ T6111] a821pgl [ 59.115907][ T6111] a821pglnda [ 59.117027][ T6111] a821pgh [ 59.118051][ T6111] a822pgl [ 59.119079][ T6111] a822pgh [ 59.121353][ T6111] a823pgl [ 59.122705][ T6111] a823pgh [ 59.124282][ T6111] pcl813 [ 59.125814][ T6111] pcl813b [ 59.127374][ T6111] acl8113 [ 59.128410][ T6111] iso813 [ 59.129448][ T6111] acl8216 [ 59.130449][ T6111] a826pg [ 59.131580][ T6111] comedi: valid board names for pcl730 driver are: [ 59.133645][ T6111] pcl730 [ 59.134627][ T6111] iso730 [ 59.135602][ T6111] acl7130 [ 59.136597][ T6111] pcm3730 [ 59.137596][ T6111] pcl725 [ 59.138577][ T6111] p8r8dio [ 59.140196][ T6111] acl7225b [ 59.141346][ T6111] p16r16dio [ 59.142575][ T6111] pcl733 [ 59.143635][ T6111] pcl734 [ 59.144727][ T6111] opmm-1616-xt [ 59.146228][ T6111] pearl-mm-p [ 59.147755][ T6111] ir104-pbf [ 59.149045][ T6111] comedi: valid board names for pcl726 driver are: [ 59.151816][ T6111] pcl726 [ 59.153092][ T6111] pcl727 [ 59.154131][ T6111] pcl728 [ 59.155222][ T6111] acl6126 [ 59.156351][ T6111] acl6128 [ 59.157686][ T6111] comedi: valid board names for pcl724 driver are: [ 59.159981][ T6111] pcl724 [ 59.161149][ T6111] pcl722 [ 59.162422][ T6111] pcl731 [ 59.163638][ T6111] acl7122 [ 59.164906][ T6111] acl7124 [ 59.166399][ T6111] pet48dio [ 59.168042][ T6111] pcmio48 [ 59.170226][ T6111] onyx-mm-dio [ 59.171899][ T6111] comedi: valid board names for pcl711 driver are: [ 59.174144][ T6111] pcl711 [ 59.175229][ T6111] pcl711b [ 59.176563][ T6111] acl8112hg [ 59.177958][ T6111] acl8112dg [ 59.179477][ T6111] comedi: valid board names for amplc_pc263 driver are: [ 59.182284][ T6111] pc263 [ 59.183507][ T6111] comedi: valid board names for amplc_pc236 driver are: [ 59.186583][ T6111] pc36at [ 59.188259][ T6111] comedi: valid board names for amplc_dio200 driver are: [ 59.192329][ T6111] pc212e [ 59.193627][ T6111] pc214e [ 59.194726][ T6111] pc215e [ 59.195865][ T6111] pc218e [ 59.197212][ T6111] pc272e [ 59.198581][ T6111] comedi: valid board names for comedi_parport driver are: [ 59.201716][ T6111] comedi_parport [ 59.203909][ T6111] comedi: valid board names for comedi_test driver are: [ 59.207313][ T6111] comedi_test [ 59.209032][ T6111] comedi: valid board names for comedi_bond driver are: [ 59.212266][ T6111] comedi_bond [ 59.363268][ T6121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32'. [ 59.373106][ T62] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.377479][ T62] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.409493][ T5995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.412031][ T6123] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.415977][ T6123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 59.440045][ T5995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.452102][ T6103] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.459737][ T6103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.462231][ T6103] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.464259][ T6103] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.510683][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.510850][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.528103][ T6129] overlayfs: failed lookup in lower (newroot/5, name='file1', err=-40): overlapping layers [ 59.579971][ T5995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.714755][ T6145] No source specified [ 59.820343][ T9] tipc: Node number set to 2886997007 [ 59.909613][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.059354][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 60.069038][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 60.074582][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 60.078832][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.083404][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.089100][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.093425][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.141237][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 60.318529][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 60.321080][ T29] usbtmc 5-1:16.0: can't read capabilities [ 60.339355][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.443507][ T6162] input: syz1 as /devices/virtual/input/input5 [ 60.451506][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 60.458329][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.462949][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.472101][ T60] usb 7-1: device descriptor read/64, error -71 [ 60.524768][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 60.529113][ T6141] usbtmc 5-1:16.0: Unable to send data, error -71 [ 60.539917][ T1331] usb 5-1: USB disconnect, device number 2 [ 60.709916][ T5954] Bluetooth: hci0: command 0x040f tx timeout [ 60.739352][ T60] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.764600][ T6188] batadv0: entered promiscuous mode [ 60.767680][ T6188] macvtap1: entered promiscuous mode [ 60.768537][ T6190] FAT-fs (sr0): bogus number of reserved sectors [ 60.771470][ T6188] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 60.773128][ T6190] FAT-fs (sr0): Can't find a valid FAT filesystem [ 60.781736][ T6188] batadv0: left promiscuous mode [ 60.784362][ T6190] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.899457][ T60] usb 7-1: device descriptor read/64, error -71 [ 61.010540][ T60] usb usb7-port1: attempt power cycle [ 61.203560][ T5954] Bluetooth: hci3: unexpected event for opcode 0x0c0d [ 61.222362][ T1331] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.236273][ T6227] input: syz1 as /devices/virtual/input/input6 [ 61.244152][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.246711][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.349447][ T60] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 61.388926][ T60] usb 7-1: device descriptor read/8, error -71 [ 61.389294][ T1331] usb 8-1: Using ep0 maxpacket: 16 [ 61.398039][ T1331] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 61.406847][ T1331] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 61.411638][ T1331] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 61.416446][ T1331] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.431530][ T1331] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 61.435111][ T1331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.438954][ T1331] usb 8-1: Product: syz [ 61.441847][ T1331] usb 8-1: Manufacturer: syz [ 61.444494][ T1331] usb 8-1: SerialNumber: syz [ 61.460572][ T1331] usb 8-1: config 0 descriptor?? [ 61.510553][ T5954] Bluetooth: hci1: command 0x0419 tx timeout [ 61.520042][ T5954] Bluetooth: hci2: command 0x0419 tx timeout [ 61.564795][ T6248] tipc: Can't bind to reserved service type 2 [ 61.629272][ T60] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 61.633910][ T6252] vxlan0: entered promiscuous mode [ 61.640429][ T224] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.643555][ T224] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.646416][ T224] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.650216][ T60] usb 7-1: device descriptor read/8, error -71 [ 61.650226][ T224] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.672796][ T1331] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 61.692675][ T5340] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 61.697712][ T5340] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 61.703484][ T5340] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 61.707870][ T5340] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 61.741950][ T5944] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 61.745526][ T5340] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 61.755402][ T5340] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 61.762275][ T60] usb usb7-port1: unable to enumerate USB device [ 61.771267][ T5340] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 61.939443][ T6207] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 61.947614][ T9] usb 8-1: USB disconnect, device number 2 [ 62.059417][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.219277][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 62.223362][ T29] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 62.226758][ T29] usb 5-1: config 16 has an invalid interface number: 48 but max is 0 [ 62.230700][ T29] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 62.235066][ T29] usb 5-1: config 16 has no interface number 0 [ 62.237558][ T29] usb 5-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 62.241886][ T29] usb 5-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 62.246027][ T29] usb 5-1: config 16 interface 48 has no altsetting 0 [ 62.248114][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.251176][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.471118][ T29] usb 5-1: string descriptor 0 read error: -71 [ 62.479110][ T29] usb 5-1: USB disconnect, device number 3 [ 62.676259][ T1331] IPVS: starting estimator thread 0... [ 62.809563][ T6295] IPVS: using max 27 ests per chain, 64800 per kthread [ 62.861897][ T6306] __nla_validate_parse: 6 callbacks suppressed [ 62.861921][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.98'. [ 62.876406][ T6297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.879576][ T6297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.882444][ T6297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.885662][ T6297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.947371][ T6312] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 63.123807][ T6321] input: syz1 as /devices/virtual/input/input8 [ 63.198691][ T6326] tmpfs: Bad value for 'mpol' [ 63.279467][ T6332] netlink: 52 bytes leftover after parsing attributes in process `syz.2.109'. [ 63.288814][ T6328] netlink: 57 bytes leftover after parsing attributes in process `syz.3.107'. [ 63.308249][ T6328] netpci0: renamed from bridge_slave_0 (while UP) [ 63.346767][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 63.346786][ T40] audit: type=1400 audit(1759692409.853:238): avc: denied { nlmsg_write } for pid=6337 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.347707][ T6340] warning: `syz.0.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.351006][ T6009] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.410808][ T40] audit: type=1400 audit(1759692409.923:239): avc: denied { accept } for pid=6337 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.459718][ T40] audit: type=1400 audit(1759692409.973:240): avc: denied { read } for pid=6350 comm="syz.3.113" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.469592][ T40] audit: type=1400 audit(1759692409.973:241): avc: denied { open } for pid=6350 comm="syz.3.113" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.498517][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 63.519844][ T6009] usb 6-1: Using ep0 maxpacket: 8 [ 63.525374][ T6009] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.530793][ T6009] usb 6-1: config 0 has no interfaces? [ 63.535400][ T6009] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 63.540365][ T6009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.544809][ T6009] usb 6-1: Product: syz [ 63.546595][ T6009] usb 6-1: Manufacturer: syz [ 63.548544][ T6009] usb 6-1: SerialNumber: syz [ 63.551789][ T40] audit: type=1400 audit(1759692410.063:242): avc: denied { append } for pid=6356 comm="syz.3.115" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.555013][ T6009] usb 6-1: config 0 descriptor?? [ 63.619343][ T1331] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 63.749398][ C2] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 63.749414][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 63.775583][ T40] audit: type=1400 audit(1759692410.283:243): avc: denied { block_suspend } for pid=6365 comm="syz.3.118" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.777609][ T1331] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 63.783246][ T6009] usb 6-1: USB disconnect, device number 2 [ 63.791476][ T1331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.795320][ T1331] usb 7-1: Product: syz [ 63.796708][ T1331] usb 7-1: Manufacturer: syz [ 63.798230][ T1331] usb 7-1: SerialNumber: syz [ 63.814595][ T1331] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 63.846098][ T40] audit: type=1400 audit(1759692410.353:244): avc: denied { firmware_load } for pid=5995 comm="kworker/2:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 63.868465][ T5995] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 63.890353][ T6380] input: syz1 as /devices/virtual/input/input9 [ 63.892788][ T40] audit: type=1400 audit(1759692410.403:245): avc: denied { write } for pid=6379 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.895544][ T6381] netlink: 57 bytes leftover after parsing attributes in process `syz.3.121'. [ 63.940990][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 63.981652][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 63.994409][ T224] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.994540][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 63.997765][ T224] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.005260][ T224] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.009082][ T224] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.117282][ T40] audit: type=1400 audit(1759692410.623:246): avc: denied { create } for pid=6392 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.127800][ T40] audit: type=1400 audit(1759692410.633:247): avc: denied { ioctl } for pid=6392 comm="syz.0.127" path="socket:[9831]" dev="sockfs" ino=9831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.280167][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 64.302728][ T1331] usb 7-1: USB disconnect, device number 6 [ 64.340661][ T6401] bond1 (unregistering): Released all slaves [ 64.432482][ T6401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13577 sclass=netlink_route_socket pid=6401 comm=syz.1.130 [ 64.789405][ T5954] Bluetooth: hci0: command 0x040f tx timeout [ 64.847494][ T6409] input: syz1 as /devices/virtual/input/input10 [ 64.950208][ T5954] Bluetooth: hci3: command 0x0419 tx timeout [ 64.950424][ T5950] Bluetooth: hci2: command 0x0419 tx timeout [ 64.954188][ T5954] Bluetooth: hci1: command 0x0419 tx timeout [ 65.115112][ T5995] usb 7-1: Service connection timeout for: 256 [ 65.117712][ T5995] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 65.124177][ T5995] ath9k_htc: Failed to initialize the device [ 65.128344][ T1331] usb 7-1: ath9k_htc: USB layer deinitialized [ 65.216225][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'. [ 65.315046][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.323058][ T29] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 65.483437][ T6458] FAULT_INJECTION: forcing a failure. [ 65.483437][ T6458] name failslab, interval 1, probability 0, space 0, times 1 [ 65.492965][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.0.148 Not tainted syzkaller #0 PREEMPT(full) [ 65.492989][ T6458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.492999][ T6458] Call Trace: [ 65.493017][ T6458] [ 65.493024][ T6458] dump_stack_lvl+0x16c/0x1f0 [ 65.493062][ T6458] should_fail_ex+0x512/0x640 [ 65.493088][ T6458] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 65.493109][ T6458] should_failslab+0xc2/0x120 [ 65.493130][ T6458] __kmalloc_cache_noprof+0x72/0x780 [ 65.493157][ T6458] ? l2cap_chan_create+0x44/0x920 [ 65.493183][ T6458] ? l2cap_chan_create+0x44/0x920 [ 65.493203][ T6458] l2cap_chan_create+0x44/0x920 [ 65.493224][ T6458] lowpan_control_write+0x2dc/0x740 [ 65.493243][ T6458] ? __pfx_lowpan_control_write+0x10/0x10 [ 65.493266][ T6458] ? __debugfs_file_get+0x1fe/0x840 [ 65.493300][ T6458] full_proxy_write+0x12e/0x1a0 [ 65.493326][ T6458] ? __pfx_full_proxy_write+0x10/0x10 [ 65.493348][ T6458] vfs_write+0x29d/0x11d0 [ 65.493371][ T6458] ? __pfx___mutex_lock+0x10/0x10 [ 65.493387][ T6458] ? __pfx_vfs_write+0x10/0x10 [ 65.493413][ T6458] ? __fget_files+0x20e/0x3c0 [ 65.493440][ T6458] ksys_write+0x12a/0x250 [ 65.493458][ T6458] ? __pfx_ksys_write+0x10/0x10 [ 65.493483][ T6458] do_syscall_64+0xcd/0x4e0 [ 65.493502][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.493519][ T6458] RIP: 0033:0x7fb6dbf8eec9 [ 65.493535][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.493551][ T6458] RSP: 002b:00007fb6dce4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.493568][ T6458] RAX: ffffffffffffffda RBX: 00007fb6dc1e5fa0 RCX: 00007fb6dbf8eec9 [ 65.493579][ T6458] RDX: 000000000000001b RSI: 0000200000000140 RDI: 0000000000000003 [ 65.493589][ T6458] RBP: 00007fb6dce4d090 R08: 0000000000000000 R09: 0000000000000000 [ 65.493600][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.493610][ T6458] R13: 00007fb6dc1e6038 R14: 00007fb6dc1e5fa0 R15: 00007ffec4d70af8 [ 65.493634][ T6458] [ 65.512046][ T6460] input: syz1 as /devices/virtual/input/input11 [ 65.712763][ T60] IPVS: starting estimator thread 0... [ 65.764858][ T6489] FAULT_INJECTION: forcing a failure. [ 65.764858][ T6489] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.769435][ T6489] CPU: 1 UID: 0 PID: 6489 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(full) [ 65.769450][ T6489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.769456][ T6489] Call Trace: [ 65.769461][ T6489] [ 65.769465][ T6489] dump_stack_lvl+0x16c/0x1f0 [ 65.769480][ T6489] should_fail_ex+0x512/0x640 [ 65.769495][ T6489] _copy_to_user+0x32/0xd0 [ 65.769509][ T6489] simple_read_from_buffer+0xcb/0x170 [ 65.769529][ T6489] proc_fail_nth_read+0x197/0x240 [ 65.769543][ T6489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.769557][ T6489] ? rw_verify_area+0xcf/0x6c0 [ 65.769573][ T6489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.769586][ T6489] vfs_read+0x1e4/0xcf0 [ 65.769598][ T6489] ? __pfx___mutex_lock+0x10/0x10 [ 65.769609][ T6489] ? __pfx_vfs_read+0x10/0x10 [ 65.769623][ T6489] ? __fget_files+0x20e/0x3c0 [ 65.769638][ T6489] ksys_read+0x12a/0x250 [ 65.769648][ T6489] ? __pfx_ksys_read+0x10/0x10 [ 65.769663][ T6489] do_syscall_64+0xcd/0x4e0 [ 65.769674][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.769686][ T6489] RIP: 0033:0x7f2d1db8d8dc [ 65.769695][ T6489] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 65.769705][ T6489] RSP: 002b:00007f2d1ead9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.769715][ T6489] RAX: ffffffffffffffda RBX: 00007f2d1dde5fa0 RCX: 00007f2d1db8d8dc [ 65.769722][ T6489] RDX: 000000000000000f RSI: 00007f2d1ead90a0 RDI: 0000000000000004 [ 65.769728][ T6489] RBP: 00007f2d1ead9090 R08: 0000000000000000 R09: 0000000000000000 [ 65.769734][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.769740][ T6489] R13: 00007f2d1dde6038 R14: 00007f2d1dde5fa0 R15: 00007fff831c3638 [ 65.769753][ T6489] [ 65.799699][ T6481] IPVS: using max 44 ests per chain, 105600 per kthread [ 65.822773][ T6494] kernel profiling enabled (shift: 63) [ 65.859467][ T6494] profiling shift: 63 too large [ 65.864806][ T6494] ======================================================= [ 65.864806][ T6494] WARNING: The mand mount option has been deprecated and [ 65.864806][ T6494] and is ignored by this kernel. Remove the mand [ 65.864806][ T6494] option from the mount to silence this warning. [ 65.864806][ T6494] ======================================================= [ 65.876922][ T6494] cgroup: Unknown subsys name 'hash' [ 65.880301][ T6494] netlink: 'syz.1.160': attribute type 1 has an invalid length. [ 65.883595][ T6498] loop6: detected capacity change from 0 to 7 [ 65.903417][ T6498] Dev loop6: unable to read RDB block 7 [ 65.905953][ T6498] loop6: unable to read partition table [ 65.908367][ T6498] loop6: partition table beyond EOD, truncated [ 65.918976][ T6498] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 65.971528][ T6508] syz.1.165 uses obsolete (PF_INET,SOCK_PACKET) [ 66.319446][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.852244][ T6567] v: renamed from ip6_vti0 (while UP) [ 66.871250][ T5954] Bluetooth: hci0: command 0x040f tx timeout [ 67.030041][ T5954] Bluetooth: hci2: command 0x0419 tx timeout [ 67.030229][ T5950] Bluetooth: hci3: command 0x0419 tx timeout [ 67.032281][ T5954] Bluetooth: hci1: command 0x0419 tx timeout [ 67.108788][ T6597] 0·: renamed from hsr0 (while UP) [ 67.114244][ T6597] 0·: entered allmulticast mode [ 67.115934][ T6597] hsr_slave_0: entered allmulticast mode [ 67.118032][ T6597] hsr_slave_1: entered allmulticast mode [ 67.120944][ T6597] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 67.164218][ T6604] sctp: [Deprecated]: syz.0.183 (pid 6604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.164218][ T6604] Use struct sctp_sack_info instead [ 67.422991][ T6625] netlink: 'syz.3.190': attribute type 27 has an invalid length. [ 67.614718][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.623614][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.815103][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.828268][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.850405][ T6635] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.873515][ T6629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.877132][ T6629] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.886812][ T6629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.942171][ T224] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.948642][ T224] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.956622][ T224] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.965423][ T224] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.002500][ T6660] input: syz1 as /devices/virtual/input/input12 [ 68.039835][ T6660] __nla_validate_parse: 12 callbacks suppressed [ 68.039854][ T6660] netlink: 80 bytes leftover after parsing attributes in process `syz.0.198'. [ 68.062491][ T6635] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.114325][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 68.123543][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.203'. [ 68.248733][ T6684] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.255503][ T6684] overlayfs: failed to set xattr on upper [ 68.257351][ T6684] overlayfs: ...falling back to redirect_dir=nofollow. [ 68.260260][ T6684] overlayfs: ...falling back to index=off. [ 68.262663][ T6684] overlayfs: ...falling back to uuid=null. [ 68.282652][ T6688] can0: slcan on ttyS3. [ 68.298783][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 68.335001][ T6691] overlayfs: failed to resolve './file1/file0': -2 [ 68.350748][ T6694] input: syz1 as /devices/virtual/input/input13 [ 68.358255][ T6694] netlink: 80 bytes leftover after parsing attributes in process `syz.3.211'. [ 68.364291][ T6687] can0 (unregistered): slcan off ttyS3. [ 68.378226][ T6697] process 'syz.0.212' launched './file0' with NULL argv: empty string added [ 68.383211][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 68.383237][ T40] audit: type=1400 audit(1759692414.893:304): avc: denied { execute_no_trans } for pid=6696 comm="syz.0.212" path="/57/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.409813][ T6635] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.472877][ T6699] ./bus: Can't lookup blockdev [ 68.508141][ T40] audit: type=1400 audit(1759692415.013:305): avc: denied { read write } for pid=6700 comm="syz.2.214" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 68.520073][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.217'. [ 68.524404][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.0.217'. [ 68.525159][ T40] audit: type=1400 audit(1759692415.013:306): avc: denied { open } for pid=6700 comm="syz.2.214" path="/35/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 68.530120][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.217'. [ 68.537758][ T40] audit: type=1400 audit(1759692415.013:307): avc: denied { ioctl } for pid=6700 comm="syz.2.214" path="/35/file0/file0" dev="fuse" ino=3 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 68.548627][ T40] audit: type=1400 audit(1759692415.013:308): avc: denied { ioctl } for pid=6700 comm="syz.2.214" path="socket:[12045]" dev="sockfs" ino=12045 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.557633][ T40] audit: type=1400 audit(1759692415.033:309): avc: denied { write } for pid=6709 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.584106][ T6710] could not allocate digest TFM handle sha1-neon [ 68.665412][ T6710] could not allocate digest TFM handle hmac(sha1-neon) [ 69.110588][ T5950] Bluetooth: hci3: command 0x0419 tx timeout [ 69.120624][ T5942] Bluetooth: hci2: command 0x0419 tx timeout [ 69.120633][ T5950] Bluetooth: hci1: command 0x0419 tx timeout [ 69.267209][ T6701] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.270916][ T6701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.273898][ T6701] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.276637][ T6701] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.355088][ T40] audit: type=1400 audit(1759692415.863:310): avc: denied { connect } for pid=6734 comm="syz.2.222" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.432362][ T40] audit: type=1400 audit(1759692415.943:311): avc: denied { ioctl } for pid=6746 comm="syz.3.228" path="/dev/vhost-net" dev="devtmpfs" ino=1299 ioctlcmd=0xaf71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.463716][ T6745] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 69.476395][ T40] audit: type=1400 audit(1759692415.983:312): avc: denied { create } for pid=6744 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.484310][ T40] audit: type=1400 audit(1759692415.983:313): avc: denied { ioctl } for pid=6744 comm="syz.0.227" path="socket:[11028]" dev="sockfs" ino=11028 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.766078][ T6787] ip6gretap1: entered promiscuous mode [ 69.768441][ T6787] ip6gretap1: entered allmulticast mode [ 69.842049][ T6799] netlink: 152 bytes leftover after parsing attributes in process `syz.1.246'. [ 69.860341][ T1331] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 69.961804][ T6813] hugetlbfs: syz.2.250 (6813): Using mlock ulimits for SHM_HUGETLB is obsolete [ 70.053543][ T6815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.252'. [ 70.111778][ T6831] can0: slcan on ttyprintk. [ 70.189343][ T1331] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 70.203358][ T6830] can0 (unregistered): slcan off ttyprintk. [ 70.614229][ T6876] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 70.620723][ T6876] VFS: Can't find a romfs filesystem on dev nullb0. [ 70.620723][ T6876] [ 70.630421][ T5942] Bluetooth: hci0: command 0x040f tx timeout [ 70.729547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.955103][ T6898] random: crng reseeded on system resumption [ 71.062253][ T6900] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 71.163492][ T6912] capability: warning: `syz.0.283' uses 32-bit capabilities (legacy support in use) [ 71.177386][ T6907] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 71.309640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.349484][ T5942] Bluetooth: hci3: command 0x0419 tx timeout [ 71.352034][ T5942] Bluetooth: hci2: command 0x0419 tx timeout [ 71.354347][ T5950] Bluetooth: hci1: command 0x0419 tx timeout [ 71.471208][ T6926] atomic_op ffff888055654998 conn xmit_atomic 0000000000000000 [ 71.473021][ T6928] tmpfs: Unknown parameter 'sàìû̲V Oªë§s+~Ž’¾ó€3‡bÌNŽ×¹¥çêsRÞŽ¹Þ¯²a [ 71.473021][ T6928] §<J¼çÁO¦>( €%ž”š¡z‰Å﨩.({c[\”æoÄ#¸“)' [ 71.530411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 71.624368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.651060][ T6935] support for the xor transformation has been removed. [ 71.739521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.069355][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.076510][ T6953] input: syz1 as /devices/virtual/input/input14 [ 72.330121][ T54] cfg80211: failed to load regulatory.db [ 72.438366][ T6965] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 72.466420][ T6965] bond1: entered promiscuous mode [ 72.468652][ T6965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.493283][ T6967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.498520][ T6967] bond1: (slave bond2): making interface the new active one [ 72.501289][ T6967] bond2: entered promiscuous mode [ 72.504939][ T6967] bond1: (slave bond2): Enslaving as an active interface with an up link [ 72.550732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.589544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.689988][ T5977] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 72.709443][ T5954] Bluetooth: hci0: command 0x040f tx timeout [ 72.841275][ T5977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.844832][ T5977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.849927][ T5977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.853683][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.949343][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 73.026289][ T6988] Invalid option length (1048436) for dns_resolver key [ 73.066587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.073524][ T5977] usb 5-1: GET_CAPABILITIES returned 0 [ 73.076636][ T5977] usbtmc 5-1:16.0: can't read capabilities [ 73.097496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.169123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.169376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 73.297183][ T6968] random: crng reseeded on system resumption [ 73.366109][ T841] usb 5-1: USB disconnect, device number 4 [ 74.198706][ T6994] __nla_validate_parse: 7 callbacks suppressed [ 74.198721][ T6994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.314'. [ 74.229349][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.329429][ T841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.416396][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 74.416407][ T40] audit: type=1400 audit(1759692420.923:368): avc: denied { ioctl } for pid=6995 comm="syz.0.313" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13762 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.457755][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.316'. [ 74.479418][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 74.490498][ T841] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 74.493074][ T841] usb 6-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 74.496886][ T841] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.501584][ T841] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.504540][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.510657][ T841] usbtmc 6-1:16.0: bulk endpoints not found [ 74.739078][ T7014] input: syz1 as /devices/virtual/input/input15 [ 74.755520][ T7014] netlink: 80 bytes leftover after parsing attributes in process `syz.3.320'. [ 74.885672][ T7020] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.078287][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 75.132473][ T40] audit: type=1400 audit(1759692421.643:369): avc: denied { nosuid_transition } for pid=7032 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 75.139785][ T7033] overlay: ./file1 is not a directory [ 75.144234][ T40] audit: type=1400 audit(1759692421.643:370): avc: denied { transition } for pid=7032 comm="syz.2.329" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 75.156387][ T40] audit: type=1400 audit(1759692421.643:371): avc: denied { entrypoint } for pid=7032 comm="syz.2.329" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3075 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.168708][ T40] audit: type=1400 audit(1759692421.643:372): avc: denied { share } for pid=7032 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 75.177514][ T40] audit: type=1400 audit(1759692421.643:373): avc: denied { noatsecure } for pid=7032 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 75.352810][ T7051] syz.0.334 (7051) used greatest stack depth: 17704 bytes left [ 75.389709][ T7062] input: syz1 as /devices/virtual/input/input16 [ 75.401123][ T7062] netlink: 80 bytes leftover after parsing attributes in process `syz.2.336'. [ 75.412267][ T7066] futex_wake_op: syz.3.340 tries to shift op by 32; fix this program [ 75.416083][ T7067] futex_wake_op: syz.3.340 tries to shift op by 32; fix this program [ 75.463759][ T7067] bond3: entered promiscuous mode [ 75.466966][ T7067] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.472088][ T7067] bond0: (slave bond3): Enslaving as an active interface with an up link [ 75.577656][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 75.769631][ T841] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 75.782730][ T7093] input: syz1 as /devices/virtual/input/input17 [ 75.797964][ T7093] netlink: 80 bytes leftover after parsing attributes in process `syz.2.351'. [ 75.817773][ T40] audit: type=1400 audit(1759692422.323:374): avc: denied { getopt } for pid=7096 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.877760][ T40] audit: type=1400 audit(1759692422.383:375): avc: denied { mounton } for pid=7100 comm="syz.0.355" path="/100/bus" dev="tmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 75.911934][ T7108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'. [ 75.919589][ T841] usb 8-1: device descriptor read/64, error -71 [ 75.929885][ T7101] XFS (nullb0): Invalid superblock magic number [ 75.957535][ T40] audit: type=1400 audit(1759692422.463:376): avc: denied { getopt } for pid=7112 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.022388][ T7117] netlink: 'syz.0.358': attribute type 4 has an invalid length. [ 76.023297][ T7118] netlink: 'syz.0.358': attribute type 4 has an invalid length. [ 76.172506][ T7136] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 76.173599][ T7133] input: syz1 as /devices/virtual/input/input18 [ 76.178072][ T7135] IPVS: stopping backup sync thread 7136 ... [ 76.183037][ T841] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.195795][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 76.199905][ T40] audit: type=1400 audit(1759692422.703:377): avc: denied { create } for pid=7134 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 76.200508][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.218456][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.291012][ T7142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'. [ 76.316143][ T7144] FAULT_INJECTION: forcing a failure. [ 76.316143][ T7144] name failslab, interval 1, probability 0, space 0, times 0 [ 76.321420][ T7144] CPU: 2 UID: 0 PID: 7144 Comm: syz.2.369 Not tainted syzkaller #0 PREEMPT(full) [ 76.321444][ T7144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.321454][ T7144] Call Trace: [ 76.321472][ T7144] [ 76.321479][ T7144] dump_stack_lvl+0x16c/0x1f0 [ 76.321516][ T7144] should_fail_ex+0x512/0x640 [ 76.321561][ T7144] ? fs_reclaim_acquire+0xae/0x150 [ 76.321584][ T7144] should_failslab+0xc2/0x120 [ 76.321606][ T7144] __kmalloc_noprof+0xdd/0x880 [ 76.321632][ T7144] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 76.321657][ T7144] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 76.321676][ T7144] tomoyo_realpath_from_path+0xc2/0x6e0 [ 76.321697][ T7144] ? tomoyo_profile+0x47/0x60 [ 76.321720][ T7144] tomoyo_path_number_perm+0x245/0x580 [ 76.321745][ T7144] ? tomoyo_path_number_perm+0x237/0x580 [ 76.321772][ T7144] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 76.321800][ T7144] ? find_held_lock+0x2b/0x80 [ 76.321847][ T7144] ? find_held_lock+0x2b/0x80 [ 76.321872][ T7144] ? hook_file_ioctl_common+0x145/0x410 [ 76.321900][ T7144] ? __fget_files+0x20e/0x3c0 [ 76.321924][ T7144] security_file_ioctl+0x9b/0x240 [ 76.321945][ T7144] __x64_sys_ioctl+0xb7/0x210 [ 76.321980][ T7144] do_syscall_64+0xcd/0x4e0 [ 76.321998][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.322015][ T7144] RIP: 0033:0x7fb18218eec9 [ 76.322029][ T7144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.322045][ T7144] RSP: 002b:00007fb183065038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.322063][ T7144] RAX: ffffffffffffffda RBX: 00007fb1823e5fa0 RCX: 00007fb18218eec9 [ 76.322073][ T7144] RDX: 0000200000000200 RSI: 0000000000005418 RDI: 0000000000000003 [ 76.322083][ T7144] RBP: 00007fb183065090 R08: 0000000000000000 R09: 0000000000000000 [ 76.322092][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.322102][ T7144] R13: 00007fb1823e6038 R14: 00007fb1823e5fa0 R15: 00007ffece238fb8 [ 76.322126][ T7144] [ 76.322134][ T7144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 76.339352][ T841] usb 8-1: device descriptor read/64, error -71 [ 76.529574][ T841] usb usb8-port1: attempt power cycle [ 76.731313][ T7173] sctp: [Deprecated]: syz.2.379 (pid 7173) Use of int in maxseg socket option. [ 76.731313][ T7173] Use struct sctp_assoc_value instead [ 76.739912][ T7173] tmpfs: Unknown parameter 'm' [ 76.793574][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.796453][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.875839][ T841] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.912111][ T841] usb 8-1: device descriptor read/8, error -71 [ 77.042882][ T7197] netlink: 'syz.0.389': attribute type 2 has an invalid length. [ 77.046383][ T7197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.067415][ T6009] usb 6-1: USB disconnect, device number 3 [ 77.159551][ T841] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.168131][ T7206] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 77.180093][ T841] usb 8-1: device descriptor read/8, error -71 [ 77.185748][ T7206] xfrm1: entered promiscuous mode [ 77.188327][ T7206] xfrm1: entered allmulticast mode [ 77.237459][ T7209] input: syz1 as /devices/virtual/input/input19 [ 77.289613][ T841] usb usb8-port1: unable to enumerate USB device [ 77.347554][ T7213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.355191][ T7214] input: syz1 as /devices/virtual/input/input20 [ 77.358752][ T5954] Bluetooth: hci0: unexpected event for opcode 0x040e [ 78.129809][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.152563][ T7235] MTD: Couldn't look up './file0': -15 [ 78.154648][ T7235] ./file0: Can't lookup blockdev [ 78.183633][ T7237] input: syz1 as /devices/virtual/input/input21 [ 78.299645][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 78.307712][ T29] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 78.311769][ T29] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 78.315570][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 78.320712][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 78.324522][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.330430][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.333999][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.342523][ T29] usbtmc 5-1:16.0: bulk endpoints not found [ 78.558157][ T7253] bond0: entered promiscuous mode [ 78.561513][ T7253] bond_slave_0: entered promiscuous mode [ 78.564361][ T7253] bond_slave_1: entered promiscuous mode [ 78.567538][ T7256] input: syz1 as /devices/virtual/input/input22 [ 78.695925][ T7266] input: syz1 as /devices/virtual/input/input23 [ 78.739332][ T7265] tipc: Enabled bearer , priority 0 [ 78.743968][ T7263] tipc: Resetting bearer [ 79.432435][ T7291] __nla_validate_parse: 8 callbacks suppressed [ 79.432449][ T7291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.423'. [ 79.775623][ T7263] tipc: Disabling bearer [ 79.784320][ T7275] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 79.788507][ T7275] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 79.794210][ T7275] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 79.794234][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 79.794251][ T40] audit: type=1400 audit(1759692426.303:394): avc: denied { firmware_load } for pid=7274 comm="syz.2.418" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.876048][ T7301] input: syz1 as /devices/virtual/input/input24 [ 79.885837][ T7298] sp0: Synchronizing with TNC [ 79.888424][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 80.179332][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 80.284267][ T40] audit: type=1400 audit(1759692426.793:395): avc: denied { map } for pid=7318 comm="syz.3.436" path="/dev/video0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.296750][ T40] audit: type=1400 audit(1759692426.793:396): avc: denied { execute } for pid=7318 comm="syz.3.436" path="/dev/video0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.307629][ T40] audit: type=1400 audit(1759692426.793:397): avc: denied { shutdown } for pid=7318 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.329264][ T29] usb 7-1: device descriptor read/64, error -71 [ 80.401727][ T40] audit: type=1400 audit(1759692426.913:398): avc: denied { setopt } for pid=7329 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.445973][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 80.574046][ T40] audit: type=1400 audit(1759692427.083:399): avc: denied { mount } for pid=7342 comm="syz.3.444" name="/" dev="hugetlbfs" ino=15842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 80.579447][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 80.595055][ T40] audit: type=1400 audit(1759692427.103:400): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 80.639395][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 80.719962][ T29] usb 7-1: device descriptor read/64, error -71 [ 80.829757][ T29] usb usb7-port1: attempt power cycle [ 80.880033][ T9] usb 5-1: USB disconnect, device number 5 [ 81.169318][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 81.189846][ T29] usb 7-1: device descriptor read/8, error -71 [ 81.264530][ T7362] input: syz1 as /devices/virtual/input/input26 [ 81.271057][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 81.413884][ T7368] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 81.429388][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 81.443038][ T40] audit: type=1400 audit(1759692427.953:401): avc: denied { read } for pid=7367 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.451403][ T29] usb 7-1: device descriptor read/8, error -71 [ 81.560231][ T7374] FAULT_INJECTION: forcing a failure. [ 81.560231][ T7374] name failslab, interval 1, probability 0, space 0, times 0 [ 81.565227][ T7374] CPU: 3 UID: 0 PID: 7374 Comm: syz.3.453 Not tainted syzkaller #0 PREEMPT(full) [ 81.565244][ T7374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.565251][ T7374] Call Trace: [ 81.565266][ T7374] [ 81.565271][ T7374] dump_stack_lvl+0x16c/0x1f0 [ 81.565301][ T7374] should_fail_ex+0x512/0x640 [ 81.565322][ T7374] ? fs_reclaim_acquire+0xae/0x150 [ 81.565339][ T7374] should_failslab+0xc2/0x120 [ 81.565354][ T7374] __kmalloc_noprof+0xdd/0x880 [ 81.565373][ T7374] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 81.565390][ T7374] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 81.565403][ T7374] tomoyo_realpath_from_path+0xc2/0x6e0 [ 81.565418][ T7374] ? tomoyo_profile+0x47/0x60 [ 81.565435][ T7374] tomoyo_path_number_perm+0x245/0x580 [ 81.565468][ T7374] ? tomoyo_path_number_perm+0x237/0x580 [ 81.565489][ T7374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 81.565509][ T7374] ? find_held_lock+0x2b/0x80 [ 81.565540][ T7374] ? find_held_lock+0x2b/0x80 [ 81.565557][ T7374] ? hook_file_ioctl_common+0x145/0x410 [ 81.565576][ T7374] ? __fget_files+0x20e/0x3c0 [ 81.565593][ T7374] security_file_ioctl+0x9b/0x240 [ 81.565607][ T7374] __x64_sys_ioctl+0xb7/0x210 [ 81.565627][ T7374] do_syscall_64+0xcd/0x4e0 [ 81.565639][ T7374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.565652][ T7374] RIP: 0033:0x7f541558eec9 [ 81.565682][ T7374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.565693][ T7374] RSP: 002b:00007f54163fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.565708][ T7374] RAX: ffffffffffffffda RBX: 00007f54157e5fa0 RCX: 00007f541558eec9 [ 81.565716][ T7374] RDX: 0000200000000100 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 81.565723][ T7374] RBP: 00007f54163fc090 R08: 0000000000000000 R09: 0000000000000000 [ 81.565729][ T7374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.565736][ T7374] R13: 00007f54157e6038 R14: 00007f54157e5fa0 R15: 00007fff9bed4c98 [ 81.565751][ T7374] [ 81.565927][ T7374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.567518][ T40] audit: type=1400 audit(1759692428.073:402): avc: denied { ioctl } for pid=7371 comm="syz.0.452" path="socket:[13055]" dev="sockfs" ino=13055 ioctlcmd=0x8b15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.594846][ T29] usb usb7-port1: unable to enumerate USB device [ 81.648112][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 81.669040][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 81.672286][ T7380] netlink: 'syz.3.456': attribute type 11 has an invalid length. [ 81.672340][ T7380] netlink: 'syz.3.456': attribute type 7 has an invalid length. [ 81.782431][ T7390] can0: slcan on ttyS3. [ 81.860323][ T7390] can0 (unregistered): slcan off ttyS3. [ 81.910905][ T7394] policy can only be matched on NF_INET_PRE_ROUTING [ 81.910923][ T7394] unable to load match [ 82.009562][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.169372][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 82.173757][ T34] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 82.177260][ T34] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 82.186042][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 82.191628][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 82.196298][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 82.203415][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.207733][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.216275][ T34] usbtmc 5-1:16.0: bulk endpoints not found [ 82.324559][ T7404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.465'. [ 82.371878][ T40] audit: type=1400 audit(1759692428.883:403): avc: denied { accept } for pid=7405 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.419471][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 82.492765][ T7412] tipc: Started in network mode [ 82.494912][ T7412] tipc: Node identity ac14140f, cluster identity 4711 [ 82.498410][ T7412] tipc: Enabled bearer , priority 10 [ 82.621237][ T7416] input: syz1 as /devices/virtual/input/input27 [ 82.826357][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 83.123304][ T7440] input: syz1 as /devices/virtual/input/input28 [ 83.132016][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 83.150371][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.481'. [ 83.579375][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 83.619404][ T53] tipc: Node number set to 2886997007 [ 83.739361][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 83.743191][ T29] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 83.747357][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.751151][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.604703][ T7479] __nla_validate_parse: 1 callbacks suppressed [ 84.604722][ T7479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.493'. [ 84.690570][ T7485] input: syz1 as /devices/virtual/input/input29 [ 84.786559][ T841] usb 5-1: USB disconnect, device number 6 [ 85.097088][ T7526] input: syz1 as /devices/virtual/input/input30 [ 85.102150][ T7526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=7526 comm=syz.1.513 [ 85.229314][ T6636] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 85.233576][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 85.270325][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 85.342658][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 85.342672][ T40] audit: type=1400 audit(1759692431.853:407): avc: denied { listen } for pid=7539 comm="syz.1.518" lport=60920 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.354186][ T40] audit: type=1400 audit(1759692431.853:406): avc: denied { listen } for pid=7539 comm="syz.1.518" lport=60920 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.362297][ T40] audit: type=1400 audit(1759692431.853:408): avc: denied { accept } for pid=7539 comm="syz.1.518" lport=60920 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.389452][ T6636] usb 5-1: Using ep0 maxpacket: 8 [ 85.391679][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 85.395942][ T6636] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.401971][ T6636] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.406082][ T6636] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.410665][ T9] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 85.413683][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 85.418196][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 85.423168][ T6636] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.427460][ T6636] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.430972][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.435495][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.438702][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.441358][ T6636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.452105][ T9] usbtmc 7-1:16.0: bulk endpoints not found [ 85.517603][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.520'. [ 85.521594][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.520'. [ 85.528140][ T7546] gretap0: entered promiscuous mode [ 85.532533][ T7546] gretap0: left promiscuous mode [ 85.660708][ T6636] usb 5-1: GET_CAPABILITIES returned 0 [ 85.663256][ T6636] usbtmc 5-1:16.0: can't read capabilities [ 85.705448][ T7551] syzkaller0: entered promiscuous mode [ 85.707767][ T7551] syzkaller0: entered allmulticast mode [ 85.718191][ T40] audit: type=1400 audit(1759692432.223:409): avc: denied { relabelfrom } for pid=7550 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.724804][ T40] audit: type=1400 audit(1759692432.223:410): avc: denied { relabelto } for pid=7550 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.865020][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.978854][ T5977] usb 5-1: USB disconnect, device number 7 [ 86.280820][ T6636] usb 8-1: USB disconnect, device number 8 [ 86.320452][ T7555] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 86.324287][ T7555] netlink: 228 bytes leftover after parsing attributes in process `syz.3.523'. [ 86.328619][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 86.462205][ T7556] ------------[ cut here ]------------ [ 86.462849][ T7556] [ 86.462870][ T7556] ====================================================== [ 86.462874][ T7556] WARNING: possible circular locking dependency detected [ 86.462878][ T7556] syzkaller #0 Not tainted [ 86.462883][ T7556] ------------------------------------------------------ [ 86.462886][ T7556] syz.3.524/7556 is trying to acquire lock: [ 86.462892][ T7556] ffffffff8e0cf5c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 86.462945][ T7556] [ 86.462945][ T7556] but task is already holding lock: [ 86.462948][ T7556] ffff88801b0a8018 (&pool->lock){-.-.}-{2:2}, at: destroy_workqueue+0x1d9/0xaa0 [ 86.462970][ T7556] [ 86.462970][ T7556] which lock already depends on the new lock. [ 86.462970][ T7556] [ 86.462974][ T7556] [ 86.462974][ T7556] the existing dependency chain (in reverse order) is: [ 86.462979][ T7556] [ 86.462979][ T7556] -> #3 (&pool->lock){-.-.}-{2:2}: [ 86.462998][ T7556] _raw_spin_lock+0x2e/0x40 [ 86.463029][ T7556] __queue_work+0x26b/0x1160 [ 86.463050][ T7556] queue_work_on+0x15f/0x1f0 [ 86.463069][ T7556] rpm_suspend+0xeba/0x11d0 [ 86.463100][ T7556] rpm_idle+0x5b4/0x730 [ 86.463119][ T7556] __pm_runtime_idle+0xba/0x1a0 [ 86.463137][ T7556] __device_attach+0x37e/0x4b0 [ 86.463156][ T7556] bus_probe_device+0x17f/0x1c0 [ 86.463172][ T7556] device_add+0x1148/0x1aa0 [ 86.463194][ T7556] serial_base_port_add+0x362/0x4c0 [ 86.463215][ T7556] serial_core_register_port+0x13c/0x25d0 [ 86.463234][ T7556] serial8250_register_8250_port+0x15a3/0x23e0 [ 86.463257][ T7556] serial_pnp_probe+0x431/0x910 [ 86.463279][ T7556] pnp_device_probe+0x2a5/0x4d0 [ 86.463299][ T7556] really_probe+0x23e/0xa90 [ 86.463318][ T7556] __driver_probe_device+0x1de/0x440 [ 86.463338][ T7556] driver_probe_device+0x4c/0x1b0 [ 86.463358][ T7556] __driver_attach+0x283/0x580 [ 86.463379][ T7556] bus_for_each_dev+0x13e/0x1d0 [ 86.463395][ T7556] bus_add_driver+0x2e9/0x690 [ 86.463412][ T7556] driver_register+0x15c/0x4b0 [ 86.463435][ T7556] serial8250_init+0xc9/0x1e0 [ 86.463469][ T7556] do_one_initcall+0x120/0x6e0 [ 86.463489][ T7556] kernel_init_freeable+0x5c2/0x910 [ 86.463512][ T7556] kernel_init+0x1c/0x2b0 [ 86.463529][ T7556] ret_from_fork+0x56d/0x730 [ 86.463545][ T7556] ret_from_fork_asm+0x1a/0x30 [ 86.463564][ T7556] [ 86.463564][ T7556] -> #2 (&dev->power.lock){-...}-{3:3}: [ 86.463585][ T7556] _raw_spin_lock_irqsave+0x3a/0x60 [ 86.463607][ T7556] __pm_runtime_resume+0xa9/0x170 [ 86.463628][ T7556] __uart_start+0x1b0/0x500 [ 86.463651][ T7556] uart_write+0x218/0xb30 [ 86.463666][ T7556] n_tty_write+0x41e/0x11e0 [ 86.463686][ T7556] file_tty_write.constprop.0+0x500/0x9b0 [ 86.463701][ T7556] redirected_tty_write+0xd4/0x150 [ 86.463716][ T7556] vfs_write+0x7d0/0x11d0 [ 86.463731][ T7556] ksys_write+0x12a/0x250 [ 86.463754][ T7556] do_syscall_64+0xcd/0x4e0 [ 86.463767][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.463783][ T7556] [ 86.463783][ T7556] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 86.463803][ T7556] _raw_spin_lock_irqsave+0x3a/0x60 [ 86.463824][ T7556] serial8250_console_write+0x181/0x1890 [ 86.463847][ T7556] console_flush_all+0x801/0xc60 [ 86.463870][ T7556] console_unlock+0xd8/0x210 [ 86.463891][ T7556] vprintk_emit+0x3d7/0x680 [ 86.463913][ T7556] _printk+0xc7/0x100 [ 86.463929][ T7556] register_console+0xc2d/0x11b0 [ 86.463952][ T7556] univ8250_console_init+0x5f/0x90 [ 86.463977][ T7556] console_init+0x14f/0x680 [ 86.463999][ T7556] start_kernel+0x29f/0x4e0 [ 86.464017][ T7556] x86_64_start_reservations+0x18/0x30 [ 86.464040][ T7556] x86_64_start_kernel+0x130/0x190 [ 86.464063][ T7556] common_startup_64+0x13e/0x148 [ 86.464083][ T7556] [ 86.464083][ T7556] -> #0 (console_owner){-.-.}-{0:0}: [ 86.464104][ T7556] __lock_acquire+0x12a6/0x1ce0 [ 86.464123][ T7556] lock_acquire+0x179/0x350 [ 86.464137][ T7556] console_lock_spinning_enable+0x72/0x80 [ 86.464160][ T7556] console_flush_all+0x7aa/0xc60 [ 86.464182][ T7556] console_unlock+0xd8/0x210 [ 86.464204][ T7556] vprintk_emit+0x3d7/0x680 [ 86.464226][ T7556] _printk+0xc7/0x100 [ 86.464242][ T7556] report_bug+0x435/0x580 [ 86.464265][ T7556] handle_bug+0x184/0x210 [ 86.464281][ T7556] exc_invalid_op+0x17/0x50 [ 86.464296][ T7556] asm_exc_invalid_op+0x1a/0x20 [ 86.464310][ T7556] destroy_workqueue+0x319/0xaa0 [ 86.464323][ T7556] nci_unregister_device+0x68/0x300 [ 86.464345][ T7556] virtual_ncidev_close+0x4b/0xa0 [ 86.464363][ T7556] __fput+0x402/0xb70 [ 86.464383][ T7556] task_work_run+0x150/0x240 [ 86.464401][ T7556] exit_to_user_mode_loop+0xec/0x130 [ 86.464421][ T7556] do_syscall_64+0x419/0x4e0 [ 86.464434][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.464447][ T7556] [ 86.464447][ T7556] other info that might help us debug this: [ 86.464447][ T7556] [ 86.464450][ T7556] Chain exists of: [ 86.464450][ T7556] console_owner --> &dev->power.lock --> &pool->lock [ 86.464450][ T7556] [ 86.464466][ T7556] Possible unsafe locking scenario: [ 86.464466][ T7556] [ 86.464469][ T7556] CPU0 CPU1 [ 86.464472][ T7556] ---- ---- [ 86.464474][ T7556] lock(&pool->lock); [ 86.464480][ T7556] lock(&dev->power.lock); [ 86.464487][ T7556] lock(&pool->lock); [ 86.464494][ T7556] lock(console_owner); [ 86.464500][ T7556] [ 86.464500][ T7556] *** DEADLOCK *** [ 86.464500][ T7556] [ 86.464502][ T7556] 5 locks held by syz.3.524/7556: [ 86.464509][ T7556] #0: ffffffff8e078288 (wq_pool_mutex){+.+.}-{4:4}, at: destroy_workqueue+0x16f/0xaa0 [ 86.464532][ T7556] #1: ffff88802c02b888 (&wq->mutex){+.+.}-{4:4}, at: destroy_workqueue+0x17a/0xaa0 [ 86.464555][ T7556] #2: ffff88801b0a8018 (&pool->lock){-.-.}-{2:2}, at: destroy_workqueue+0x1d9/0xaa0 [ 86.464578][ T7556] #3: ffffffff8e1afa00 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 86.464615][ T7556] #4: ffffffff8e1afa70 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 86.464656][ T7556] [ 86.464656][ T7556] stack backtrace: [ 86.464665][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.3.524 Not tainted syzkaller #0 PREEMPT(full) [ 86.464684][ T7556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.464695][ T7556] Call Trace: [ 86.464701][ T7556] [ 86.464708][ T7556] dump_stack_lvl+0x116/0x1f0 [ 86.464725][ T7556] print_circular_bug+0x275/0x350 [ 86.464754][ T7556] check_noncircular+0x14c/0x170 [ 86.464775][ T7556] __lock_acquire+0x12a6/0x1ce0 [ 86.464799][ T7556] lock_acquire+0x179/0x350 [ 86.464816][ T7556] ? console_lock_spinning_enable+0x61/0x80 [ 86.464842][ T7556] ? console_lock_spinning_enable+0x4a/0x80 [ 86.464869][ T7556] console_lock_spinning_enable+0x72/0x80 [ 86.464893][ T7556] ? console_lock_spinning_enable+0x61/0x80 [ 86.464917][ T7556] console_flush_all+0x7aa/0xc60 [ 86.464944][ T7556] ? __pfx_console_flush_all+0x10/0x10 [ 86.464972][ T7556] ? is_printk_cpu_sync_owner+0x32/0x40 [ 86.465001][ T7556] console_unlock+0xd8/0x210 [ 86.465024][ T7556] ? __pfx_console_unlock+0x10/0x10 [ 86.465048][ T7556] ? do_raw_spin_unlock+0x140/0x230 [ 86.465072][ T7556] ? _printk+0xc7/0x100 [ 86.465088][ T7556] ? __down_trylock_console_sem+0xb0/0x140 [ 86.465110][ T7556] vprintk_emit+0x3d7/0x680 [ 86.465134][ T7556] ? __pfx_vprintk_emit+0x10/0x10 [ 86.465160][ T7556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.465179][ T7556] _printk+0xc7/0x100 [ 86.465198][ T7556] ? __pfx__printk+0x10/0x10 [ 86.465218][ T7556] ? __pfx___might_resched+0x10/0x10 [ 86.465243][ T7556] ? rcu_is_watching+0x12/0xc0 [ 86.465270][ T7556] ? report_bug+0x429/0x580 [ 86.465294][ T7556] ? report_bug+0x417/0x580 [ 86.465319][ T7556] ? destroy_workqueue+0x319/0xaa0 [ 86.465335][ T7556] report_bug+0x435/0x580 [ 86.465359][ T7556] ? destroy_workqueue+0x319/0xaa0 [ 86.465375][ T7556] handle_bug+0x184/0x210 [ 86.465395][ T7556] exc_invalid_op+0x17/0x50 [ 86.465415][ T7556] asm_exc_invalid_op+0x1a/0x20 [ 86.465431][ T7556] RIP: 0010:destroy_workqueue+0x319/0xaa0 [ 86.465450][ T7556] Code: e8 1c ee 37 00 49 8d 6d 68 48 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 2d 06 00 00 49 8b 45 68 48 39 c5 74 7f e8 f8 ed 37 00 90 <0f> 0b 90 48 c7 c6 60 18 6c 8b 48 8d 93 78 01 00 00 48 c7 c7 80 0d [ 86.465468][ T7556] RSP: 0018:ffffc90006d9fd48 EFLAGS: 00010093 [ 86.465482][ T7556] RAX: 0000000000000000 RBX: ffff88802c02b800 RCX: ffffffff8183243a [ 86.465494][ T7556] RDX: ffff88805442c900 RSI: ffffffff81832538 RDI: 0000000000000005 [ 86.465506][ T7556] RBP: ffff88802a3ef024 R08: 0000000000000005 R09: 0000000000000000 [ 86.465517][ T7556] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 86.465527][ T7556] R13: ffff88802a3ef000 R14: dffffc0000000000 R15: 0000000000000001 [ 86.465541][ T7556] ? destroy_workqueue+0x21a/0xaa0 [ 86.465557][ T7556] ? destroy_workqueue+0x318/0xaa0 [ 86.465575][ T7556] ? destroy_workqueue+0x318/0xaa0 [ 86.465593][ T7556] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 86.465636][ T7556] nci_unregister_device+0x68/0x300 [ 86.465661][ T7556] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 86.465679][ T7556] virtual_ncidev_close+0x4b/0xa0 [ 86.465697][ T7556] __fput+0x402/0xb70 [ 86.465723][ T7556] task_work_run+0x150/0x240 [ 86.465751][ T7556] ? __pfx_task_work_run+0x10/0x10 [ 86.465773][ T7556] ? __pfx___do_sys_close_range+0x10/0x10 [ 86.465797][ T7556] exit_to_user_mode_loop+0xec/0x130 [ 86.465819][ T7556] do_syscall_64+0x419/0x4e0 [ 86.465835][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.465851][ T7556] RIP: 0033:0x7f541558eec9 [ 86.465865][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.465881][ T7556] RSP: 002b:00007fff9bed4df8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 86.465897][ T7556] RAX: 0000000000000000 RBX: 00007f54157e7da0 RCX: 00007f541558eec9 [ 86.465908][ T7556] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 86.465942][ T7556] RBP: 00007f54157e7da0 R08: 00000000000007ec R09: 0000000d9bed50ef [ 86.465953][ T7556] R10: 00000000003ff5f0 R11: 0000000000000246 R12: 0000000000015419 [ 86.465963][ T7556] R13: 00007f54157e6090 R14: ffffffffffffffff R15: 00007fff9bed4f10 [ 86.465979][ T7556] [ 86.885424][ T7556] WARNING: CPU: 0 PID: 7556 at kernel/workqueue.c:5925 destroy_workqueue+0x319/0xaa0 [ 86.888642][ T7556] Modules linked in: [ 86.889862][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.3.524 Not tainted syzkaller #0 PREEMPT(full) [ 86.892876][ T7556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.896565][ T7556] RIP: 0010:destroy_workqueue+0x319/0xaa0 [ 86.898833][ T7556] Code: e8 1c ee 37 00 49 8d 6d 68 48 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 2d 06 00 00 49 8b 45 68 48 39 c5 74 7f e8 f8 ed 37 00 90 <0f> 0b 90 48 c7 c6 60 18 6c 8b 48 8d 93 78 01 00 00 48 c7 c7 80 0d [ 86.906331][ T7556] RSP: 0018:ffffc90006d9fd48 EFLAGS: 00010093 [ 86.908840][ T7556] RAX: 0000000000000000 RBX: ffff88802c02b800 RCX: ffffffff8183243a [ 86.912058][ T7556] RDX: ffff88805442c900 RSI: ffffffff81832538 RDI: 0000000000000005 [ 86.915199][ T7556] RBP: ffff88802a3ef024 R08: 0000000000000005 R09: 0000000000000000 [ 86.918445][ T7556] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 86.922001][ T7556] R13: ffff88802a3ef000 R14: dffffc0000000000 R15: 0000000000000001 [ 86.925289][ T7556] FS: 000055555ef52500(0000) GS:ffff8880d6e67000(0000) knlGS:0000000000000000 [ 86.928663][ T7556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.930702][ T7556] CR2: 00007f54163dbd58 CR3: 000000005fe95000 CR4: 0000000000352ef0 [ 86.933036][ T7556] Call Trace: [ 86.934058][ T7556] [ 86.935233][ T7556] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 86.937456][ T7556] nci_unregister_device+0x68/0x300 [ 86.939569][ T7556] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 86.941848][ T7556] virtual_ncidev_close+0x4b/0xa0 [ 86.943893][ T7556] __fput+0x402/0xb70 [ 86.945470][ T7556] task_work_run+0x150/0x240 [ 86.947290][ T7556] ? __pfx_task_work_run+0x10/0x10 [ 86.949285][ T7556] ? __pfx___do_sys_close_range+0x10/0x10 [ 86.951986][ T7556] exit_to_user_mode_loop+0xec/0x130 [ 86.954760][ T7556] do_syscall_64+0x419/0x4e0 [ 86.957145][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.959562][ T7556] RIP: 0033:0x7f541558eec9 [ 86.961348][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.968507][ T7556] RSP: 002b:00007fff9bed4df8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 86.971795][ T7556] RAX: 0000000000000000 RBX: 00007f54157e7da0 RCX: 00007f541558eec9 [ 86.975292][ T7556] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 86.979084][ T7556] RBP: 00007f54157e7da0 R08: 00000000000007ec R09: 0000000d9bed50ef [ 86.982463][ T7556] R10: 00000000003ff5f0 R11: 0000000000000246 R12: 0000000000015419 [ 86.985207][ T7556] R13: 00007f54157e6090 R14: ffffffffffffffff R15: 00007fff9bed4f10 [ 86.987571][ T7556] [ 86.988737][ T7556] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.991683][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.3.524 Not tainted syzkaller #0 PREEMPT(full) [ 86.996153][ T7556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.000931][ T7556] Call Trace: [ 87.002305][ T7556] [ 87.003514][ T7556] dump_stack_lvl+0x3d/0x1f0 [ 87.005379][ T7556] vpanic+0x640/0x6f0 [ 87.007005][ T7556] ? destroy_workqueue+0x319/0xaa0 [ 87.009175][ T7556] panic+0xca/0xd0 [ 87.010908][ T7556] ? __pfx_panic+0x10/0x10 [ 87.013139][ T7556] ? check_panic_on_warn+0x1f/0xb0 [ 87.015662][ T7556] check_panic_on_warn+0xab/0xb0 [ 87.017702][ T7556] __warn+0xf6/0x3c0 [ 87.019300][ T7556] ? destroy_workqueue+0x319/0xaa0 [ 87.021194][ T7556] report_bug+0x3c3/0x580 [ 87.022965][ T7556] ? destroy_workqueue+0x319/0xaa0 [ 87.025278][ T7556] handle_bug+0x184/0x210 [ 87.027192][ T7556] exc_invalid_op+0x17/0x50 [ 87.029044][ T7556] asm_exc_invalid_op+0x1a/0x20 [ 87.031037][ T7556] RIP: 0010:destroy_workqueue+0x319/0xaa0 [ 87.033309][ T7556] Code: e8 1c ee 37 00 49 8d 6d 68 48 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 2d 06 00 00 49 8b 45 68 48 39 c5 74 7f e8 f8 ed 37 00 90 <0f> 0b 90 48 c7 c6 60 18 6c 8b 48 8d 93 78 01 00 00 48 c7 c7 80 0d [ 87.042552][ T7556] RSP: 0018:ffffc90006d9fd48 EFLAGS: 00010093 [ 87.045204][ T7556] RAX: 0000000000000000 RBX: ffff88802c02b800 RCX: ffffffff8183243a [ 87.048388][ T7556] RDX: ffff88805442c900 RSI: ffffffff81832538 RDI: 0000000000000005 [ 87.051666][ T7556] RBP: ffff88802a3ef024 R08: 0000000000000005 R09: 0000000000000000 [ 87.054768][ T7556] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 87.057893][ T7556] R13: ffff88802a3ef000 R14: dffffc0000000000 R15: 0000000000000001 [ 87.061493][ T7556] ? destroy_workqueue+0x21a/0xaa0 [ 87.064095][ T7556] ? destroy_workqueue+0x318/0xaa0 [ 87.066339][ T7556] ? destroy_workqueue+0x318/0xaa0 [ 87.068335][ T7556] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 87.070684][ T7556] nci_unregister_device+0x68/0x300 [ 87.072800][ T7556] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 87.075233][ T7556] virtual_ncidev_close+0x4b/0xa0 [ 87.077397][ T7556] __fput+0x402/0xb70 [ 87.079312][ T7556] task_work_run+0x150/0x240 [ 87.081581][ T7556] ? __pfx_task_work_run+0x10/0x10 [ 87.083771][ T7556] ? __pfx___do_sys_close_range+0x10/0x10 [ 87.086042][ T7556] exit_to_user_mode_loop+0xec/0x130 [ 87.088178][ T7556] do_syscall_64+0x419/0x4e0 [ 87.090029][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.092679][ T7556] RIP: 0033:0x7f541558eec9 [ 87.094706][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.103015][ T7556] RSP: 002b:00007fff9bed4df8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 87.106501][ T7556] RAX: 0000000000000000 RBX: 00007f54157e7da0 RCX: 00007f541558eec9 [ 87.109893][ T7556] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 87.113448][ T7556] RBP: 00007f54157e7da0 R08: 00000000000007ec R09: 0000000d9bed50ef [ 87.116330][ T7556] R10: 00000000003ff5f0 R11: 0000000000000246 R12: 0000000000015419 [ 87.118779][ T7556] R13: 00007f54157e6090 R14: ffffffffffffffff R15: 00007fff9bed4f10 [ 87.121075][ T7556] [ 88.262840][ T7556] Shutting down cpus with NMI [ 88.265161][ T7556] Kernel Offset: disabled [ 88.266657][ T7556] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:27:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852342c5 RDI=ffffffff9ab75a40 RBP=ffffffff9ab75a00 RSP=ffffc90006d9f780 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000038 R14=ffffffff9ab75a00 R15=ffffffff85234260 RIP=ffffffff852342ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555ef52500 ffffffff 00c00000 GS =0000 ffff8880d6e67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f54163dbd58 CR3=000000005fe95000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9bed51a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9bed51a6 00007fff9bed51ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5415612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5415612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5415612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5415612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f541561305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f541561313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54157b74a8 00007f54157b74a0 00007f54157b7498 00007f54157b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f541631d100 00007f54157b7460 00007f54157b0004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54157b74b8 00007f54157b74b0 00007f54157b74a8 00007f54157b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff8169a146 RDX=ffff888029212480 RSI=ffffffff8169d17c RDI=0000000000000000 RBP=ffff88801b0a8000 RSP=ffffc90006287be8 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a73b280 R15=ffffed1003615000 RIP=ffffffff8169d17d RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b30323ffc CR3=000000003a058000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=9ba664da5cc90ab4 8a99befafc764efc 9ba664da5cc90ab4 8a99befafc764efc 9ba664da5cc90ab4 8a99befafc764efc 9ba664da5cc90ab4 8a99befafc764efc ZMM18=fc05419338552241 59298ea0be666172 fc05419338552241 59298ea0be666172 fc05419338552241 59298ea0be666172 fc05419338552241 59298ea0be666172 ZMM19=a105000000000000 0000000000000005 a105000000000000 0000000000000004 a105000000000000 0000000000000003 a105000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008ffffffee0000 0000030000000000 0008ffffffde0000 0000030000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008ffffffce0000 0000030000000000 0008ffffffbe0000 03e6000000080004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800080000 0014000000280000 003c000000500000 0070000000050000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0484000584032204 00058003282c1009 1c03884700000014 fcd3001603052408 ZMM25=d753e8c5d753e8c5 d753e8c5d753e8c5 d753e8c5d753e8c5 d753e8c5d753e8c5 d753e8c5d753e8c5 d753e8c5d753e8c5 d753e8c5d753e8c5 d753e8c5d753e8c5 ZMM26=a925d5a6a925d5a6 a925d5a6a925d5a6 a925d5a6a925d5a6 a925d5a6a925d5a6 a925d5a6a925d5a6 a925d5a6a925d5a6 a925d5a6a925d5a6 a925d5a6a925d5a6 ZMM27=e767085be767085b e767085be767085b e767085be767085b e767085be767085b e767085be767085b e767085be767085b e767085be767085b e767085be767085b ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6b0300006b030000 6b0300006b030000 6b0300006b030000 6b0300006b030000 6b0300006b030000 6b0300006b030000 6b0300006b030000 6b0300006b030000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a83b540 RCX=ffffffff81af1df3 RDX=ffff88801d2d4900 RSI=ffffffff81af1dcd RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c39a46 R12=1ffff9200002af80 R13=0000000000000001 R14=0000000000000001 R15=ffffed100d5076a9 RIP=ffffffff81af1dd3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7067000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005618232a8808 CR3=0000000063c86000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff831c39c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff831c3b46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff831c3b46 00007fff831c3b4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d1dc12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d1dc12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d1dc12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d1dc12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d1dc1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d1dc1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88801b0a8000 RCX=ffffffff8b53f7b6 RDX=ffffed1003615001 RSI=0000000000000004 RDI=ffff88801b0a8000 RBP=0000000000000003 RSP=ffffc9000337fac0 R8 =0000000000000000 R9 =ffffed1003615000 R10=ffff88801b0a8003 R11=ffffc9002e1c2000 R12=ffffed1003615000 R13=0000000000000000 R14=ffff88806a93b280 R15=0000000000000003 RIP=ffffffff8b53f7ae RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7167000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f54163daf98 CR3=000000003aa51000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffece2394c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffece2394c6 00007ffece2394cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb182212fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb182212fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb182212fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb182212fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb18221305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb18221313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1823b74a8 00007fb1823b74a0 00007fb1823b7498 00007fb1823b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb182f1d100 00007fb1823b7460 00007fb1823b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1823b74b8 00007fb1823b74b0 00007fb1823b74a8 00007fb1823b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000