last executing test programs: 3m12.44393795s ago: executing program 2 (id=2259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 3m12.367972022s ago: executing program 2 (id=2261): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) 3m12.366122589s ago: executing program 2 (id=2263): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x2000000) 3m12.319646299s ago: executing program 2 (id=2265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000180)) 3m12.273840857s ago: executing program 2 (id=2267): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 3m12.272937125s ago: executing program 2 (id=2270): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000005"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m56.229782665s ago: executing program 32 (id=2270): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000005"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m29.800783487s ago: executing program 0 (id=9007): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1m28.00401486s ago: executing program 0 (id=9023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 1m27.888160657s ago: executing program 0 (id=9031): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r0, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r0, 0x0, 0x0) 1m27.8572742s ago: executing program 0 (id=9033): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 1m27.810935458s ago: executing program 0 (id=9036): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x8) 1m27.668135986s ago: executing program 0 (id=9040): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xb00, &(0x7f0000000080)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m27.617174229s ago: executing program 33 (id=9040): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xb00, &(0x7f0000000080)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m3.806160733s ago: executing program 1 (id=10083): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000041000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.805419922s ago: executing program 1 (id=10084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x200008c4}, 0x0) 1m3.756802899s ago: executing program 1 (id=10086): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000001480)=[{0x1, 0xbe11, 0x0, 0x0}], 0x1}) 1m3.75555113s ago: executing program 1 (id=10088): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 1m3.700951386s ago: executing program 1 (id=10090): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 1m3.693003689s ago: executing program 1 (id=10092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 48.371576638s ago: executing program 3 (id=10698): r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000000)=[{0x1, 0xff00, 0x3000}], 0x1) semctl$GETNCNT(r0, 0x1, 0xe, 0x0) 47.542805071s ago: executing program 34 (id=10092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 47.483582468s ago: executing program 3 (id=10712): r0 = socket$kcm(0x11, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000540)=0xc) setresuid(r1, r1, r1) 47.424694296s ago: executing program 3 (id=10714): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 47.420213848s ago: executing program 3 (id=10716): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1, 0x0, 0xf8}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x4880}) 47.335748178s ago: executing program 3 (id=10720): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 47.327593343s ago: executing program 3 (id=10723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) 31.258621745s ago: executing program 35 (id=10723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) 1.792044216s ago: executing program 5 (id=11896): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) 1.79180695s ago: executing program 5 (id=11897): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 527.530416ms ago: executing program 6 (id=11927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000200)) 422.161021ms ago: executing program 4 (id=11931): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 358.814638ms ago: executing program 6 (id=11933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001180)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @from_mac=@device_b, {0xc, 0xe}}, @a_msdu}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008050}, 0x10000) 358.724945ms ago: executing program 4 (id=11934): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xab) keyctl$setperm(0x5, r0, 0x30022412) 308.895476ms ago: executing program 7 (id=11935): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 304.162923ms ago: executing program 6 (id=11936): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010026bdf0010000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="000002060000000000000000000000000000000008"], 0x38}}, 0x0) 303.893169ms ago: executing program 4 (id=11937): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44) 300.10689ms ago: executing program 5 (id=11938): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) close(r0) 297.792399ms ago: executing program 6 (id=11939): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 217.749369ms ago: executing program 7 (id=11940): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@local, r1}, 0x14) 217.687553ms ago: executing program 4 (id=11941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) 217.556979ms ago: executing program 7 (id=11942): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x19, 0x4, 0x8, 0x2}, 0x50) socket$phonet(0x23, 0x2, 0x1) close_range(r0, 0xffffffffffffffff, 0x2) 161.246969ms ago: executing program 6 (id=11943): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000dc0)={{@hyper}, {@any, 0x800000}, 0x400, "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"}, 0x418, 0x400}) 161.028044ms ago: executing program 5 (id=11944): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b9398", 0x1a3}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="9d2537bd2c77917d4f662d263471d5f77a9016e0577754f5ec2acc3f04a86ad4434e4b1b4b12cad8ecf5afbb0ea73569216033db177cc3cf50b0326c587d59ca51a7d8132ad604390453d4d7f7a4ddbeaa1fffcdb5724465ebe8b14d5d73bc8f742c16be9b0f45a831bc16d34c0c7bb14931e6789051b3a34c906d1efc84d59b1b9dd2b14c033c5a5dbb79582d8cf1524eef9326c16e9b521eeab824121929639a92b7df1834a93fd9ab88744a832c4c00ce928f65759c4c8b1e116e55b264297552777035cd1ac57c5521ca7eaabaa98ca220793308b8a10b0d76b0460fb700996a94571fc9b17ef6eabb3689f786eeb7fd2d5a8ed374d2959f59579e998c8bb91edf698ccb1cf6bda3163c", 0x10c}], 0x1}, 0x0) 987.357µs ago: executing program 7 (id=11945): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/134, 0x86}], 0x1, 0x4, 0x0) 859.185µs ago: executing program 6 (id=11946): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) 695.029µs ago: executing program 5 (id=11947): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 592.11µs ago: executing program 5 (id=11948): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) 533.596µs ago: executing program 4 (id=11949): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@mcast2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022, r1}) 493.511µs ago: executing program 7 (id=11950): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x9) 341.243µs ago: executing program 7 (id=11951): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) 0s ago: executing program 4 (id=11952): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) kernel console output (not intermixed with test programs): ALSA: mixer_oss: invalid OSS volume '' [ 215.242723][T29382] delete_channel: no stack [ 215.474783][ T6190] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 215.551707][T29432] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 215.635567][ T6190] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 215.641800][ T6190] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.645226][ T6190] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.652650][ T6190] usb 10-1: config 0 interface 0 has no altsetting 0 [ 215.655724][ T6190] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.660089][ T6190] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.668427][ T6190] usb 10-1: config 0 interface 0 has no altsetting 0 [ 215.675909][ T6190] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.679823][ T6190] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.684380][ T6190] usb 10-1: config 0 interface 0 has no altsetting 0 [ 215.686386][T29447] binder: 29446:29447 ioctl 40046205 0 returned -22 [ 215.688103][ T6190] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.690792][T29447] binder: 29446:29447 ioctl c0306201 2000000013c0 returned -11 [ 215.696546][ T6190] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.702179][ T6190] usb 10-1: config 0 interface 0 has no altsetting 0 [ 215.706109][ T6190] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.710057][ T6190] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.716214][ T6190] usb 10-1: config 0 interface 0 has no altsetting 0 [ 215.720026][ T6190] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.722989][ T6190] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.727254][ T6190] usb 10-1: config 0 interface 0 has no altsetting 0 [ 215.731500][ T6190] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.731535][ T6190] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.731559][ T6190] usb 10-1: config 0 interface 0 has no altsetting 0 [ 215.741485][ T6190] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.744653][ T6190] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.744678][ T6190] usb 10-1: config 0 interface 0 has no altsetting 0 [ 215.755185][ T6190] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 215.755209][ T6190] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 215.755224][ T6190] usb 10-1: Product: syz [ 215.755234][ T6190] usb 10-1: Manufacturer: syz [ 215.755241][ T6190] usb 10-1: SerialNumber: syz [ 215.758489][ T6190] usb 10-1: config 0 descriptor?? [ 215.775509][ T6190] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 215.934832][T29470] tipc: Started in network mode [ 215.936937][T29470] tipc: Node identity fe80000000000000000000000000001, cluster identity 3865 [ 215.944016][T29470] tipc: Enabled bearer , priority 10 [ 215.995893][ T6247] usb 10-1: USB disconnect, device number 2 [ 216.001013][ T6247] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 216.137269][ T6190] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 216.330227][ T6190] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 216.334304][ T6190] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.337400][ T6190] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.341687][ T6190] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.345184][ T6190] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.348526][ T6190] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.352013][ T6190] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.355588][ T6190] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.358377][ T6190] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.361966][ T6190] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.365154][ T6190] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.367916][ T6190] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.371808][ T6190] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.375155][ T6190] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.377982][ T6190] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.382017][ T6190] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.387821][ T6190] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.390698][ T6190] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.394621][ T6190] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.397588][ T6190] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.400545][ T6190] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.404481][ T6190] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.407453][ T6190] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.410664][ T6190] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.414054][ T6190] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.419784][ T6190] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 216.422682][ T6190] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 216.425260][ T6190] usb 9-1: Product: syz [ 216.426622][ T6190] usb 9-1: Manufacturer: syz [ 216.428086][ T6190] usb 9-1: SerialNumber: syz [ 216.431811][ T6190] usb 9-1: config 0 descriptor?? [ 216.440039][ T6190] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 216.653733][ T6190] usb 9-1: USB disconnect, device number 9 [ 216.659686][ T6190] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 217.144216][ T34] tipc: Node number set to 4269801488 [ 217.566956][T29618] loop6: detected capacity change from 0 to 7 [ 217.582511][T29618] Dev loop6: unable to read RDB block 7 [ 217.584369][T29618] loop6: unable to read partition table [ 217.586310][T29618] loop6: partition table beyond EOD, truncated [ 217.589364][T29618] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 217.943153][T29662] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10128'. [ 217.947771][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10128'. [ 218.409963][T29704] ALSA: seq fatal error: cannot create timer (-19) [ 218.735217][ T59] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 218.911158][ T59] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 218.915082][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.919877][ T59] usb 10-1: Product: syz [ 218.921716][ T59] usb 10-1: Manufacturer: syz [ 218.923686][ T59] usb 10-1: SerialNumber: syz [ 218.932280][ T59] usb 10-1: config 0 descriptor?? [ 219.154555][ T59] usb 10-1: USB disconnect, device number 3 [ 219.179236][T29813] netlink: zone id is out of range [ 219.181833][T29813] netlink: del zone limit has 4 unknown bytes [ 219.371215][T29836] FAT-fs (nullb0): bogus number of reserved sectors [ 219.373403][T29836] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 219.430059][ T6268] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 219.559823][ T40] kauditd_printk_skb: 234 callbacks suppressed [ 219.559839][ T40] audit: type=1400 audit(2000000046.302:83198): avc: denied { allowed } for pid=29850 comm="syz.3.10199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 219.570525][ T40] audit: type=1400 audit(2000000046.302:83199): avc: denied { create } for pid=29850 comm="syz.3.10199" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 219.577638][ T40] audit: type=1400 audit(2000000046.302:83200): avc: denied { map } for pid=29850 comm="syz.3.10199" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 219.587199][ T40] audit: type=1400 audit(2000000046.302:83201): avc: denied { read write } for pid=29850 comm="syz.3.10199" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 219.594533][T29853] xt_policy: neither incoming nor outgoing policy selected [ 219.594919][ T6268] usb 9-1: Using ep0 maxpacket: 8 [ 219.599671][ T40] audit: type=1400 audit(2000000046.311:83202): avc: denied { read write } for pid=6186 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.601147][ T6268] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 219.608244][ T40] audit: type=1400 audit(2000000046.311:83203): avc: denied { open } for pid=6186 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.610705][ T6268] usb 9-1: config 0 has no interface number 0 [ 219.618202][ T40] audit: type=1400 audit(2000000046.311:83204): avc: denied { ioctl } for pid=6186 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.620834][ T6268] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 219.633361][ T6268] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 219.637604][ T6268] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.641114][T29855] netlink: 'syz.3.10201': attribute type 2 has an invalid length. [ 219.641130][T29855] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10201'. [ 219.646581][ T6268] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.650524][ T6268] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 219.653631][ T6268] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.665746][ T6268] usb 9-1: config 0 descriptor?? [ 219.670714][ T6268] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 219.671941][T29859] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 219.701846][ T40] audit: type=1400 audit(2000000046.433:83205): avc: denied { create } for pid=29864 comm="syz.3.10203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.708816][ T40] audit: type=1400 audit(2000000046.433:83206): avc: denied { setopt } for pid=29864 comm="syz.3.10203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.715571][ T40] audit: type=1400 audit(2000000046.433:83207): avc: denied { connect } for pid=29864 comm="syz.3.10203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.885982][T29888] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 219.899161][ T29] usb 9-1: USB disconnect, device number 10 [ 219.913092][ T29] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 220.191606][T29933] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10227'. [ 220.223604][T29937] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 220.353419][T29954] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 220.562623][T29973] ALSA: seq fatal error: cannot create timer (-22) [ 221.106581][T30045] comedi: valid board names for 8255 driver are: [ 221.109441][T30045] 8255 [ 221.110328][T30045] comedi: valid board names for vmk80xx driver are: [ 221.112237][T30045] vmk80xx [ 221.113208][T30045] comedi: valid board names for usbduxsigma driver are: [ 221.115300][T30045] usbduxsigma [ 221.116460][T30045] comedi: valid board names for usbduxfast driver are: [ 221.120982][T30045] usbduxfast [ 221.122024][T30045] comedi: valid board names for usbdux driver are: [ 221.123985][T30045] usbdux [ 221.124891][T30045] comedi: valid board names for ni6501 driver are: [ 221.126857][T30045] ni6501 [ 221.127800][T30045] comedi: valid board names for dt9812 driver are: [ 221.131575][T30045] dt9812 [ 221.132520][T30045] comedi: valid board names for ni_labpc_cs driver are: [ 221.134646][T30045] ni_labpc_cs [ 221.135703][T30045] comedi: valid board names for ni_daq_700 driver are: [ 221.137250][T30050] usb usb9: usbfs: process 30050 (syz.4.10275) did not claim interface 16 before use [ 221.137708][T30045] ni_daq_700 [ 221.143457][T30045] comedi: valid board names for labpc_pci driver are: [ 221.146215][T30045] labpc_pci [ 221.147296][T30045] comedi: valid board names for adl_pci9118 driver are: [ 221.149433][T30045] pci9118dg [ 221.150585][T30045] pci9118hg [ 221.152190][T30045] pci9118hr [ 221.153241][T30045] comedi: valid board names for 8255_pci driver are: [ 221.155289][T30045] 8255_pci [ 221.156760][T30045] comedi: valid board names for s526 driver are: [ 221.158790][T30045] s526 [ 221.159896][T30045] comedi: valid board names for multiq3 driver are: [ 221.163225][T30045] multiq3 [ 221.164636][T30045] comedi: valid board names for pcmuio driver are: [ 221.167069][T30045] pcmuio48 [ 221.168098][T30045] pcmuio96 [ 221.169308][T30045] comedi: valid board names for pcmmio driver are: [ 221.171507][T30045] pcmmio [ 221.172969][T30045] comedi: valid board names for pcmda12 driver are: [ 221.176595][T30045] pcmda12 [ 221.178025][T30045] comedi: valid board names for pcmad driver are: [ 221.180588][T30045] pcmad12 [ 221.181987][T30045] pcmad16 [ 221.183561][T30045] comedi: valid board names for ni_labpc driver are: [ 221.186493][T30045] lab-pc-1200 [ 221.188059][T30045] lab-pc-1200ai [ 221.189630][T30045] lab-pc+ [ 221.191003][T30045] comedi: valid board names for atmio16 driver are: [ 221.193724][T30045] atmio16 [ 221.195852][T30045] atmio16d [ 221.197246][T30045] comedi: valid board names for ni_at_ao driver are: [ 221.199981][T30045] at-ao-6 [ 221.201331][T30045] at-ao-10 [ 221.202726][T30045] comedi: valid board names for ni_at_a2150 driver are: [ 221.213346][T30045] ni_at_a2150 [ 221.216690][T30045] comedi: valid board names for adq12b driver are: [ 221.219300][T30045] adq12b [ 221.220602][T30045] comedi: valid board names for mpc624 driver are: [ 221.223289][T30045] mpc624 [ 221.224611][T30045] comedi: valid board names for c6xdigio driver are: [ 221.227801][T30045] c6xdigio [ 221.229749][T30045] comedi: valid board names for aio_iiro_16 driver are: [ 221.232715][T30045] aio_iiro_16 [ 221.234182][T30045] comedi: valid board names for aio_aio12_8 driver are: [ 221.237535][T30045] aio_aio12_8 [ 221.239060][T30045] aio_ai12_8 [ 221.240545][T30045] aio_ao12_4 [ 221.241996][T30045] comedi: valid board names for fl512 driver are: [ 221.244648][T30045] fl512 [ 221.245900][T30045] comedi: valid board names for dmm32at driver are: [ 221.248824][T30045] dmm32at [ 221.250089][T30045] comedi: valid board names for dt282x driver are: [ 221.252772][T30045] dt2821 [ 221.254010][T30045] dt2821-f [ 221.255405][T30045] dt2821-g [ 221.256833][T30045] dt2823 [ 221.259136][T30045] dt2824-pgh [ 221.264561][T30045] dt2824-pgl [ 221.270103][T30045] dt2825 [ 221.271406][T30045] dt2827 [ 221.272708][T30045] dt2828 [ 221.274033][T30045] dt2829 [ 221.275347][T30045] dt21-ez [ 221.276767][T30045] dt23-ez [ 221.278145][T30045] dt24-ez [ 221.280119][T30045] dt24-ez-pgl [ 221.281904][T30045] comedi: valid board names for dt2817 driver are: [ 221.284690][T30045] dt2817 [ 221.285920][T30045] comedi: valid board names for dt2815 driver are: [ 221.288682][T30045] dt2815 [ 221.289963][T30045] comedi: valid board names for dt2814 driver are: [ 221.292934][T30045] dt2814 [ 221.294243][T30045] comedi: valid board names for dt2811 driver are: [ 221.296995][T30045] dt2811-pgh [ 221.298479][T30045] dt2811-pgl [ 221.299927][T30045] comedi: valid board names for dt2801 driver are: [ 221.304455][T30045] dt2801 [ 221.305757][T30045] comedi: valid board names for das6402 driver are: [ 221.308527][T30045] das6402-12 [ 221.309946][T30045] das6402-16 [ 221.313016][T30045] comedi: valid board names for das1800 driver are: [ 221.315760][T30045] das-1701st [ 221.317201][T30045] das-1701st-da [ 221.318327][T30045] das-1702st [ 221.319417][T30045] das-1702st-da [ 221.320596][T30045] das-1702hr [ 221.321652][T30045] das-1702hr-da [ 221.322853][T30045] das-1701ao [ 221.324000][T30045] das-1702ao [ 221.325436][T30045] das-1801st [ 221.326869][T30045] das-1801st-da [ 221.328431][T30045] das-1802st [ 221.329852][T30045] das-1802st-da [ 221.331376][T30045] das-1802hr [ 221.333525][T30045] das-1802hr-da [ 221.335013][T30045] das-1801hc [ 221.338710][T30045] das-1802hc [ 221.340309][T30045] das-1801ao [ 221.341833][T30045] das-1802ao [ 221.343298][T30045] comedi: valid board names for das800 driver are: [ 221.346539][T30045] das-800 [ 221.347886][T30045] cio-das800 [ 221.349326][T30045] das-801 [ 221.350646][T30045] cio-das801 [ 221.352018][T30045] das-802 [ 221.353347][T30045] cio-das802 [ 221.357312][T30045] cio-das802/16 [ 221.357940][T30073] binder: BINDER_SET_CONTEXT_MGR already set [ 221.359058][T30045] comedi: valid board names for isa-das08 driver are: [ 221.361618][T30073] binder: 30072:30073 ioctl 4018620d 200000000280 returned -16 [ 221.367155][T30045] isa-das08 [ 221.368212][T30045] das08-pgm [ 221.369445][T30045] das08-pgh [ 221.370921][T30045] das08-pgl [ 221.372047][T30045] das08-aoh [ 221.373108][T30045] das08-aol [ 221.374210][T30045] das08-aom [ 221.375782][T30045] das08/jr-ao [ 221.377256][T30045] das08jr-16-ao [ 221.378964][T30045] pc104-das08 [ 221.380508][T30045] das08jr/16 [ 221.381973][T30045] comedi: valid board names for das16m1 driver are: [ 221.384350][T30045] das16m1 [ 221.385396][T30045] comedi: valid board names for dac02 driver are: [ 221.389594][T30045] dac02 [ 221.391375][T30045] comedi: valid board names for rti802 driver are: [ 221.394452][T30045] rti802 [ 221.395690][T30045] comedi: valid board names for rti800 driver are: [ 221.399575][T30045] rti800 [ 221.400875][T30045] rti815 [ 221.402146][T30045] comedi: valid board names for pcm3724 driver are: [ 221.404921][T30045] pcm3724 [ 221.406247][T30045] comedi: valid board names for pcl818 driver are: [ 221.408414][T30045] pcl818l [ 221.409488][T30045] pcl818h [ 221.410459][T30045] pcl818hd [ 221.411439][T30045] pcl818hg [ 221.412545][T30045] pcl818 [ 221.413504][T30045] pcl718 [ 221.414455][T30045] pcm3718 [ 221.415468][T30045] comedi: valid board names for pcl816 driver are: [ 221.417673][T30045] pcl816 [ 221.418927][T30045] pcl814b [ 221.420218][T30045] comedi: valid board names for pcl812 driver are: [ 221.422219][T30045] pcl812 [ 221.423185][T30045] pcl812pg [ 221.424249][T30045] acl8112pg [ 221.425342][T30045] acl8112dg [ 221.426430][T30045] acl8112hg [ 221.427525][T30045] a821pgl [ 221.428570][T30045] a821pglnda [ 221.430362][T30045] a821pgh [ 221.431380][T30045] a822pgl [ 221.432417][T30045] a822pgh [ 221.433412][T30045] a823pgl [ 221.434681][T30045] a823pgh [ 221.436042][T30045] pcl813 [ 221.437269][T30045] pcl813b [ 221.438547][T30045] acl8113 [ 221.441194][T30045] iso813 [ 221.442445][T30045] acl8216 [ 221.443765][T30045] a826pg [ 221.445106][T30045] comedi: valid board names for pcl730 driver are: [ 221.447928][T30045] pcl730 [ 221.449139][T30045] iso730 [ 221.451181][T30045] acl7130 [ 221.452456][T30045] pcm3730 [ 221.453780][T30045] pcl725 [ 221.455019][T30045] p8r8dio [ 221.456340][T30045] acl7225b [ 221.457748][T30045] p16r16dio [ 221.459117][T30045] pcl733 [ 221.460460][T30045] pcl734 [ 221.462584][T30045] opmm-1616-xt [ 221.463881][T30045] pearl-mm-p [ 221.465124][T30045] ir104-pbf [ 221.466321][T30045] comedi: valid board names for pcl726 driver are: [ 221.468721][T30045] pcl726 [ 221.469878][T30045] pcl727 [ 221.471105][T30045] pcl728 [ 221.473124][T30045] acl6126 [ 221.474435][T30045] acl6128 [ 221.475726][T30045] comedi: valid board names for pcl724 driver are: [ 221.478453][T30045] pcl724 [ 221.479728][T30045] pcl722 [ 221.481098][T30045] pcl731 [ 221.482403][T30045] acl7122 [ 221.483875][T30045] acl7124 [ 221.485229][T30045] pet48dio [ 221.486585][T30045] pcmio48 [ 221.487906][T30045] onyx-mm-dio [ 221.489370][T30045] comedi: valid board names for pcl711 driver are: [ 221.492073][T30045] pcl711 [ 221.493456][T30045] pcl711b [ 221.494777][T30045] acl8112hg [ 221.496174][T30045] acl8112dg [ 221.497579][T30045] comedi: valid board names for amplc_pc263 driver are: [ 221.500469][T30045] pc263 [ 221.501999][T30045] comedi: valid board names for amplc_pc236 driver are: [ 221.505089][T30045] pc36at [ 221.506335][T30045] comedi: valid board names for amplc_dio200 driver are: [ 221.509257][T30045] pc212e [ 221.510514][T30045] pc214e [ 221.511779][T30045] pc215e [ 221.513037][T30045] pc218e [ 221.514325][T30045] pc272e [ 221.517664][T30045] comedi: valid board names for comedi_parport driver are: [ 221.520655][T30045] comedi_parport [ 221.522199][T30045] comedi: valid board names for comedi_test driver are: [ 221.525120][T30045] comedi_test [ 221.526690][T30045] comedi: valid board names for comedi_bond driver are: [ 221.529575][T30045] comedi_bond [ 221.603371][T30085] hub 8-0:1.0: USB hub found [ 221.605353][T30085] hub 8-0:1.0: 1 port detected [ 222.041489][T30133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10309'. [ 222.044749][T30133] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 222.047681][T30133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.104074][ T6188] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 222.112997][T30144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10314'. [ 222.115869][T30144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10314'. [ 222.242671][ T6283] kernel read not supported for file /vbi2 (pid: 6283 comm: kworker/1:5) [ 222.293479][T30160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.295847][T30160] IPv6: NLM_F_CREATE should be set when creating new route [ 222.298166][T30160] IPv6: NLM_F_CREATE should be set when creating new route [ 222.300753][T30160] IPv6: NLM_F_CREATE should be set when creating new route [ 222.310762][T30160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.765453][ T6283] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 222.930125][ T6283] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.933652][ T6283] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 222.938681][ T6283] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.942642][ T6283] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 222.951331][ T6283] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 222.957240][ T6283] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.961139][ T6283] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.964369][ T6283] usb 9-1: Product: syz [ 222.966093][ T6283] usb 9-1: Manufacturer: syz [ 222.973943][ T6283] cdc_wdm 9-1:1.0: skipping garbage [ 222.976104][ T6283] cdc_wdm 9-1:1.0: skipping garbage [ 222.985463][ T6283] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 222.987925][ T6283] cdc_wdm 9-1:1.0: Unknown control protocol [ 223.191867][ T6283] usb 9-1: USB disconnect, device number 11 [ 223.196691][T30242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10352'. [ 223.201106][T30242] tipc: Invalid UDP bearer configuration [ 223.201133][T30242] tipc: Enabling of bearer rejected, failed to enable media [ 223.442858][T30268] sg_read: process 5671 (syz.3.10360) changed security contexts after opening file descriptor, this is not allowed. [ 223.650293][T30285] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.10367'. [ 223.654051][T30285] openvswitch: netlink: Message has 5 unknown bytes. [ 223.687129][T30290] new mount options do not match the existing superblock, will be ignored [ 223.694201][T30290] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 223.926615][T30320] overlayfs: maximum fs stacking depth exceeded [ 224.057473][T30331] netlink: 'syz.4.10387': attribute type 1 has an invalid length. [ 224.235250][T30359] max out of range [ 224.308639][T30378] Failed to initialize the IGMP autojoin socket (err -2) [ 224.680969][T30435] program syz.3.10434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.730449][T30439] netlink: 165 bytes leftover after parsing attributes in process `syz.5.10435'. [ 224.766142][T30443] vim2m vim2m.0: vidioc_s_fmt queue busy [ 224.929938][ T40] kauditd_printk_skb: 264 callbacks suppressed [ 224.929955][ T40] audit: type=1400 audit(2000000051.325:83472): avc: denied { append } for pid=30453 comm="syz.4.10440" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.709806][ T40] audit: type=1400 audit(2000000052.055:83473): avc: denied { perfmon } for pid=30461 comm="syz.3.10441" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 225.711266][T30462] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10441'. [ 225.717081][T30448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.717588][T30448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 225.726292][T30462] netlink: zone id is out of range [ 225.730402][T30462] netlink: get zone limit has 8 unknown bytes [ 225.765252][ T40] audit: type=1400 audit(2000000052.101:83474): avc: denied { read write } for pid=30463 comm="syz.4.10443" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 225.773425][ T6228] hid_parser_main: 76 callbacks suppressed [ 225.773438][ T6228] hid-generic 000C:0007:000C.0005: unknown main item tag 0x0 [ 225.778534][ T6228] hid-generic 000C:0007:000C.0005: unknown main item tag 0x0 [ 225.778868][ T40] audit: type=1400 audit(2000000052.101:83475): avc: denied { open } for pid=30463 comm="syz.4.10443" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 225.783783][ T6228] hid-generic 000C:0007:000C.0005: unknown main item tag 0x0 [ 225.793124][ T40] audit: type=1400 audit(2000000052.139:83476): avc: denied { read write } for pid=30470 comm="syz.5.10445" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 225.794121][ T6228] hid-generic 000C:0007:000C.0005: unknown main item tag 0x0 [ 225.803591][ T40] audit: type=1400 audit(2000000052.139:83477): avc: denied { open } for pid=30470 comm="syz.5.10445" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 225.807000][ T6228] hid-generic 000C:0007:000C.0005: unknown main item tag 0x0 [ 225.816731][ T6228] hid-generic 000C:0007:000C.0005: unknown main item tag 0x0 [ 225.819780][ T6228] hid-generic 000C:0007:000C.0005: unknown main item tag 0x0 [ 225.822154][ T6228] hid-generic 000C:0007:000C.0005: unknown main item tag 0x0 [ 225.825851][ T6228] hid-generic 000C:0007:000C.0005: unknown main item tag 0x0 [ 225.828174][ T6228] hid-generic 000C:0007:000C.0005: unknown main item tag 0x0 [ 225.840648][ T6228] hid-generic 000C:0007:000C.0005: hidraw0: HID v14.24 Device [syz1] on syz0 [ 225.863697][T30472] fido_id[30472]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.912912][ T40] audit: type=1400 audit(2000000052.242:83478): avc: denied { create } for pid=30482 comm="syz.4.10447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.920494][ T40] audit: type=1400 audit(2000000052.242:83479): avc: denied { wake_alarm } for pid=30483 comm="syz.5.10448" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 225.946210][ T40] audit: type=1400 audit(2000000052.279:83480): avc: denied { read write } for pid=30486 comm="syz.5.10449" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 225.956479][ T40] audit: type=1400 audit(2000000052.279:83481): avc: denied { ioctl open } for pid=30486 comm="syz.5.10449" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.223345][T30515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10461'. [ 226.770786][T30552] CIFS: Unable to determine destination address [ 226.809222][T30555] tmpfs: Bad value for 'mpol' [ 226.952952][T30563] fuse: blksize only supported for fuseblk [ 227.097764][T30580] overlayfs: conflicting options: userxattr,metacopy=on [ 227.103495][T30582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10486'. [ 227.107190][ T6188] Bluetooth: hci1: command 0x0406 tx timeout [ 227.254530][T30605] nbd: must specify a size in bytes for the device [ 227.300035][T30611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10497'. [ 227.303784][T30611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10497'. [ 227.307008][T30611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10497'. [ 227.310040][T30611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10497'. [ 227.316937][T30611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10497'. [ 227.598917][T30648] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 227.875566][ T6188] Bluetooth: hci4: command 0x0c1a tx timeout [ 228.552308][T30755] ucma_write: process 5804 (syz.3.10550) changed security contexts after opening file descriptor, this is not allowed. [ 228.612448][T30765] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 228.618049][T30765] overlayfs: missing 'lowerdir' [ 228.631713][T30769] team0: Device gtp0 is of different type [ 229.026949][T30816] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 229.026949][T30816] The task syz.5.10572 (30816) triggered the difference, watch for misbehavior. [ 229.447146][ T6268] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 229.622552][ T6268] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 229.626400][ T6268] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 229.630280][ T6268] usb 9-1: Product: syz [ 229.632098][ T6268] usb 9-1: Manufacturer: syz [ 229.633981][ T6268] usb 9-1: SerialNumber: syz [ 229.638832][ T6268] usb 9-1: config 0 descriptor?? [ 229.645248][ T6268] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 229.648810][ T6268] dvb-usb: bulk message failed: -22 (2/0) [ 229.657168][ T6268] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.661771][ T6268] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 229.665071][ T6268] usb 9-1: media controller created [ 229.679956][ T6268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.864251][T30821] cxusb: i2c rd: len=4096 is too big! [ 229.864251][T30821] [ 229.867200][ T6268] cxusb: set interface failed [ 229.870310][ T6268] dvb-usb: bulk message failed: -22 (1/0) [ 229.893201][ T6268] DVB: Unable to find symbol mt352_attach() [ 229.895571][ T6268] dvb-usb: bulk message failed: -22 (5/0) [ 229.898858][ T6268] zl10353_read_register: readreg error (reg=127, ret==-121) [ 229.901818][ T6268] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 229.949722][ T6268] rc_core: IR keymap rc-dvico-mce not found [ 229.955828][ T6268] Registered IR keymap rc-empty [ 229.959980][ T6268] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 229.964481][ T6268] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input29 [ 229.969145][ T6268] dvb-usb: schedule remote query interval to 100 msecs. [ 229.972580][ T6268] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 229.977046][ T6268] usb 9-1: USB disconnect, device number 12 [ 230.029820][ T6268] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 230.215520][T30888] batman_adv: batadv0: Adding interface: gretap1 [ 230.218838][T30888] batman_adv: batadv0: Interface activated: gretap1 [ 230.317866][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 230.317884][ T40] audit: type=1400 audit(2000000056.367:83614): avc: denied { create } for pid=30897 comm="syz.3.10592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.328333][ T40] audit: type=1400 audit(2000000056.367:83615): avc: denied { node_bind } for pid=30896 comm="syz.5.10593" saddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 230.338575][ T40] audit: type=1400 audit(2000000056.367:83616): avc: denied { write } for pid=30897 comm="syz.3.10592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.347826][ T40] audit: type=1400 audit(2000000056.367:83617): avc: denied { write } for pid=30897 comm="syz.3.10592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.359190][ T40] audit: type=1400 audit(2000000056.385:83618): avc: denied { prog_load } for pid=30900 comm="syz.5.10594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.367207][ T40] audit: type=1400 audit(2000000056.385:83619): avc: denied { bpf } for pid=30900 comm="syz.5.10594" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.376509][ T40] audit: type=1400 audit(2000000056.385:83620): avc: denied { perfmon } for pid=30900 comm="syz.5.10594" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.387965][ T40] audit: type=1400 audit(2000000056.385:83621): avc: denied { prog_run } for pid=30900 comm="syz.5.10594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.395634][ T40] audit: type=1400 audit(2000000056.404:83622): avc: denied { bind } for pid=30902 comm="syz.3.10595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.404867][ T40] audit: type=1400 audit(2000000056.404:83623): avc: denied { write } for pid=30902 comm="syz.3.10595" path="socket:[85822]" dev="sockfs" ino=85822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.467071][T30917] hugetlbfs: Bad value for 'uid' [ 230.468720][T30917] hugetlbfs: Bad value for 'uid' [ 230.585603][T30934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.730866][T30955] openvswitch: netlink: IPv4 frag type 36 is out of range max 2 [ 230.920529][T30981] xt_l2tp: unknown flags: 51 [ 231.465006][T31043] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 231.494111][T31049] __nla_validate_parse: 5 callbacks suppressed [ 231.494122][T31049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10656'. [ 231.559685][T31066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10661'. [ 231.563443][T31066] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10661'. [ 231.785762][T31100] devtmpfs: Cannot change global quota limit on remount [ 231.985967][T31132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10683'. [ 231.988823][T31132] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 231.991212][T31132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.050741][T31151] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 232.524776][T31185] trusted_key: encrypted_key: key trusted:8sX not found [ 233.229966][ T6194] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.238123][ T6194] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.241354][ T6194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.244821][ T6194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.247318][ T6194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.259074][T31222] Failed to initialize the IGMP autojoin socket (err -2) [ 233.281674][T31237] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 233.289639][T31240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10719'. [ 233.318290][T31246] overlay: ./file0 is not a directory [ 233.412712][T31266] option changes via remount are deprecated (pid=31264 comm=syz.5.10727) [ 233.449838][T31281] xt_socket: unknown flags 0xe4 [ 233.486694][T31222] chnl_net:caif_netlink_parms(): no params data found [ 233.507465][T31222] smc: adding net device batadv0 with user defined pnetid SYZ0 [ 233.593235][ T80] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.653067][ T80] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.744404][ T80] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.767154][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 233.777856][T31222] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.781078][T31222] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.783838][T31222] bridge_slave_0: entered allmulticast mode [ 233.787013][T31222] bridge_slave_0: entered promiscuous mode [ 233.790564][T31222] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.792765][T31222] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.795088][T31222] bridge_slave_1: entered allmulticast mode [ 233.797807][T31222] bridge_slave_1: entered promiscuous mode [ 233.905974][ T80] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.929971][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 233.933542][ T29] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 233.936244][ T29] usb 10-1: config 179 has no interface number 0 [ 233.936269][ T29] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 233.936283][ T29] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 233.936296][ T29] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 101, changing to 10 [ 233.970028][ T29] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24697, setting to 1024 [ 233.974387][ T29] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 233.979632][ T29] usb 10-1: config 179 interface 65 has no altsetting 0 [ 233.982470][ T29] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 233.986099][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.014226][ T29] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input30 [ 234.058623][ T5368] input input30: unable to receive magic message: -110 [ 234.070141][ T5368] input input30: unable to receive magic message: -32 [ 234.075032][ T5368] input input30: unable to receive magic message: -32 [ 234.078799][T31222] team0: Port device team_slave_0 added [ 234.091280][ T5368] input input30: unable to receive magic message: -32 [ 234.112448][ T5368] input input30: unable to receive magic message: -32 [ 234.121125][ T5368] input input30: unable to receive magic message: -32 [ 234.144760][T31222] team0: Port device team_slave_1 added [ 234.146383][T31533] input input30: unable to receive magic message: -32 [ 234.178169][ T5368] input input30: unable to receive magic message: -32 [ 234.186693][ T5368] input input30: unable to receive magic message: -32 [ 234.219063][ T29] usb 10-1: USB disconnect, device number 4 [ 234.221158][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 234.273244][T31222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.275529][T31222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.286574][T31222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.296476][ T46] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 234.299598][ T46] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 234.319427][T31222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.321768][T31222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.331067][T31222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.335625][ T59] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 234.523295][T31222] hsr_slave_0: entered promiscuous mode [ 234.527324][T31222] hsr_slave_1: entered promiscuous mode [ 234.530730][T31222] debugfs: 'hsr0' already exists in 'hsr' [ 234.533191][T31222] Cannot create hsr debugfs directory [ 234.537503][ T80] bridge_slave_1: left allmulticast mode [ 234.539358][ T80] bridge_slave_1: left promiscuous mode [ 234.541332][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.551464][ T80] bridge_slave_0: left allmulticast mode [ 234.553325][ T80] bridge_slave_0: left promiscuous mode [ 234.555687][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.804753][ T6228] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 235.146695][ T6228] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 235.374810][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.379205][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.383876][ T80] bond0 (unregistering): (slave ): Releasing backup interface [ 235.391935][ T80] bond0 (unregistering): Released all slaves [ 235.402190][ T6188] Bluetooth: hci2: command tx timeout [ 235.402848][ T80] bond1 (unregistering): Released all slaves [ 235.415518][ T80] bond2 (unregistering): Released all slaves [ 235.426409][ T80] bond3 (unregistering): Released all slaves [ 235.436967][ T80] bond4 (unregistering): Released all slaves [ 235.451429][ T80] bond5 (unregistering): Released all slaves [ 235.458861][ T80] bond6 (unregistering): Released all slaves [ 235.469853][ T80] bond7 (unregistering): Released all slaves [ 235.483769][ T80] bond8 (unregistering): Released all slaves [ 235.675291][ T80] : left promiscuous mode [ 235.757845][ T80] tipc: Disabling bearer [ 235.767094][ T80] tipc: Left network mode [ 235.806384][ T40] kauditd_printk_skb: 235 callbacks suppressed [ 235.806395][ T40] audit: type=1400 audit(224.938:83859): avc: denied { create } for pid=32318 comm="syz.5.10753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.813044][T32319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10753'. [ 235.816732][ T40] audit: type=1400 audit(224.938:83860): avc: denied { write } for pid=32318 comm="syz.5.10753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.827605][T32324] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 235.830850][ T40] audit: type=1400 audit(224.938:83861): avc: denied { read } for pid=32318 comm="syz.5.10753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.909716][ T40] audit: type=1400 audit(225.032:83862): avc: denied { read } for pid=32355 comm="syz.4.10756" dev="nsfs" ino=4026532932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 235.918042][ T40] audit: type=1400 audit(225.032:83863): avc: denied { open } for pid=32355 comm="syz.4.10756" path="net:[4026532932]" dev="nsfs" ino=4026532932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 235.927849][ T40] audit: type=1400 audit(225.032:83864): avc: denied { create } for pid=32355 comm="syz.4.10756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 235.934279][ T40] audit: type=1400 audit(225.032:83865): avc: denied { setopt } for pid=32355 comm="syz.4.10756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 235.975625][T32413] tipc: Cannot configure node identity twice [ 236.047177][ T40] audit: type=1400 audit(225.163:83866): avc: denied { create } for pid=32436 comm="syz.4.10762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.054007][ T40] audit: type=1400 audit(225.163:83867): avc: denied { shutdown } for pid=32436 comm="syz.4.10762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.062894][ T40] audit: type=1400 audit(225.163:83868): avc: denied { read } for pid=32436 comm="syz.4.10762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.103652][T31222] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 236.132353][T31222] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 236.144106][T31222] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 236.154213][T31222] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 236.367101][T31222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.477871][T31222] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.533157][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.535565][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.540021][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.542193][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.557716][ T80] hsr_slave_0: left promiscuous mode [ 236.562208][ T80] hsr_slave_1: left promiscuous mode [ 236.565047][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.589074][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.592248][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.630628][ T80] veth1_macvtap: left promiscuous mode [ 236.633469][ T80] veth0_macvtap: left promiscuous mode [ 236.635895][ T80] veth1_vlan: left promiscuous mode [ 236.637608][ T80] veth0_vlan: left promiscuous mode [ 237.239905][T32576] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 237.282473][T32578] SELinux: Context is not valid (left unmapped). [ 237.422460][ T80] team0 (unregistering): Port device team_slave_1 removed [ 237.517842][ T80] team0 (unregistering): Port device team_slave_0 removed [ 237.521571][ T92] smc: removing ib device syz! [ 237.625530][ T6188] Bluetooth: hci2: command tx timeout [ 238.124647][ T97] smc: removing ib device sz1 [ 238.131349][ T6890] [SRW speed is unknown, defaulting to 1000 [ 238.136918][ T6890] sz1: Port: 1 Link DOWN [ 238.423664][T32642] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32642 comm=syz.4.10790 [ 238.425496][T31222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.638911][T31222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.737235][ C2] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 238.949205][T31222] veth0_vlan: entered promiscuous mode [ 238.958678][T31222] veth1_vlan: entered promiscuous mode [ 239.069386][T31222] veth0_macvtap: entered promiscuous mode [ 239.084945][T31222] veth1_macvtap: entered promiscuous mode [ 239.126386][ T321] 9pnet_fd: p9_fd_create_unix (321): problem connecting socket: qY3aK: -91 [ 239.213835][T31222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.232110][T31222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.255503][T31222] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 239.300187][T31222] wireguard: wg0: Could not create IPv4 socket [ 239.302684][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.306922][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.310556][ T46] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.315432][ T46] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.321330][ T46] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.326267][T31222] wireguard: wg1: Could not create IPv4 socket [ 239.329945][ T46] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.333392][ T46] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.346336][T31222] wireguard: wg2: Could not create IPv4 socket [ 239.349795][ T46] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.352472][ T46] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.356310][ T46] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.360929][ T46] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.369718][ T46] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.385636][ T362] ptrace attach of "/syz-executor exec"[364] was attempted by "/syz-executor exec"[362] [ 239.385882][ T46] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.419939][ T46] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.431715][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.502444][ T46] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.902168][ T437] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 240.108838][ T460] sp0: Synchronizing with TNC [ 240.612917][ T515] openvswitch: netlink: IPv6 tunnel dst address is zero [ 240.637657][ T520] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 240.876915][ C0] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 240.880147][ C0] sr 2:0:0:0: [sr0] tag#31 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 240.905856][ T6194] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.915177][ T6194] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.927511][ T6194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.932693][ T6194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.937984][ T6194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.965740][ T549] Failed to initialize the IGMP autojoin socket (err -2) [ 241.156710][ T40] kauditd_printk_skb: 233 callbacks suppressed [ 241.156726][ T40] audit: type=1400 audit(229.933:84102): avc: denied { write } for pid=585 comm="syz.5.10879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.204864][ T549] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.215071][ T40] audit: type=1400 audit(229.999:84103): avc: denied { map_create } for pid=658 comm="syz.5.10881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.222653][ T40] audit: type=1400 audit(229.999:84104): avc: denied { perfmon } for pid=658 comm="syz.5.10881" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.230891][ T40] audit: type=1400 audit(229.999:84105): avc: denied { map_read map_write } for pid=658 comm="syz.5.10881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.241656][ T40] audit: type=1400 audit(230.008:84106): avc: denied { prog_load } for pid=658 comm="syz.5.10881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.249320][ T40] audit: type=1400 audit(230.008:84107): avc: denied { bpf } for pid=658 comm="syz.5.10881" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.258217][ T40] audit: type=1400 audit(230.008:84108): avc: denied { prog_run } for pid=658 comm="syz.5.10881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.265802][ T40] audit: type=1400 audit(230.017:84109): avc: denied { read } for pid=5686 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 241.272935][ T40] audit: type=1400 audit(230.036:84110): avc: denied { execute } for pid=664 comm="syz.5.10882" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 241.280558][ T40] audit: type=1400 audit(230.036:84111): avc: denied { execute_no_trans } for pid=664 comm="syz.5.10882" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 241.329408][ T669] sp0: Synchronizing with TNC [ 241.524329][ T699] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 241.530862][ T699] cramfs: wrong magic [ 241.585498][ T706] [U] v3f"S/4:XTzWtlW= [ 241.587763][ T706] [U] J"e:" [ 241.629601][ T549] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.758017][ T549] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.768180][ T724] program syz.5.10897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.920621][ T549] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.093125][ T1148] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.119634][ T1148] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.123789][ T1148] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.135661][ T549] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 242.159762][ T46] netdevsim netdevsim6 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.162491][ T549] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 242.174815][ T549] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 242.181071][ T549] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 242.313751][ T829] 9pnet_fd: p9_fd_create_unix (829): problem connecting socket: ./file0: -111 [ 242.571737][ T549] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 242.588220][ T549] wireguard: wg0: Could not create IPv4 socket [ 242.591464][ T549] wireguard: wg1: Could not create IPv4 socket [ 242.594459][ T549] wireguard: wg2: Could not create IPv4 socket [ 243.574573][ T939] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 243.587584][ T939] CUSE: unknown device info "&b%ZW)3\my " [ 243.589734][ T939] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 243.594147][ T939] CUSE: DEVNAME unspecified [ 243.676411][ T951] tmpfs: Cannot disable swap on remount [ 243.999728][ T997] xt_time: unknown flags 0xf4 [ 244.145806][ T1013] nfs: Bad value for 'source' [ 245.011822][ T1055] devpts: Bad value for 'max' [ 245.259399][ T1099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10960'. [ 245.376998][ T1099] hsr_slave_1 (unregistering): left promiscuous mode [ 245.379819][ T1113] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 245.653486][ T1175] netlink: 'syz.5.10975': attribute type 2 has an invalid length. [ 245.656105][ T1175] netlink: 1184 bytes leftover after parsing attributes in process `syz.5.10975'. [ 245.848619][ T1212] netlink: zone id is out of range [ 245.850286][ T1212] netlink: zone id is out of range [ 245.859200][ T1212] netlink: set zone limit has 4 unknown bytes [ 246.343179][ T1276] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11004'. [ 246.546060][ T40] kauditd_printk_skb: 255 callbacks suppressed [ 246.546070][ T40] audit: type=1400 audit(234.984:84367): avc: denied { create } for pid=1307 comm="syz.5.11013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.557375][ T40] audit: type=1400 audit(234.994:84368): avc: denied { setopt } for pid=1307 comm="syz.5.11013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.563557][ T40] audit: type=1400 audit(234.994:84369): avc: denied { bind } for pid=1307 comm="syz.5.11013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.587113][ T6268] hid_parser_main: 221 callbacks suppressed [ 246.587125][ T6268] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 246.589056][ T40] audit: type=1400 audit(235.013:84370): avc: denied { read write } for pid=1310 comm="syz.5.11014" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 246.602087][ T40] audit: type=1400 audit(235.022:84371): avc: denied { open } for pid=1310 comm="syz.5.11014" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 246.605553][ T6268] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.610829][ T40] audit: type=1400 audit(235.050:84372): avc: denied { create } for pid=1316 comm="syz.4.11015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.619308][ T40] audit: type=1400 audit(235.059:84373): avc: denied { write } for pid=1316 comm="syz.4.11015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.629694][ T40] audit: type=1400 audit(235.059:84374): avc: denied { read } for pid=1316 comm="syz.4.11015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.636880][ T1315] fido_id[1315]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.673547][ T40] audit: type=1400 audit(235.106:84375): avc: denied { search } for pid=1323 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.692854][ T40] audit: type=1400 audit(235.106:84376): avc: denied { search } for pid=1323 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.017257][ T1377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11032'. [ 247.136872][ T1395] No control pipe specified [ 247.171197][ T1399] netlink: 344 bytes leftover after parsing attributes in process `syz.4.11037'. [ 247.311069][ T6268] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 247.509345][ T6268] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 247.512357][ T6268] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 247.517250][ T6268] usb 10-1: Product: syz [ 247.518621][ T6268] usb 10-1: Manufacturer: syz [ 247.520182][ T6268] usb 10-1: SerialNumber: syz [ 247.523492][ T6268] usb 10-1: config 0 descriptor?? [ 247.528863][ T6268] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 247.531289][ T6268] dvb-usb: bulk message failed: -22 (2/0) [ 247.536794][ T6268] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.540007][ T6268] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 247.542488][ T6268] usb 10-1: media controller created [ 247.551198][ T6268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.747752][ T1381] dvb-usb: bulk message failed: -22 (5/0) [ 247.751809][ T6268] cxusb: set interface failed [ 247.753359][ T6268] dvb-usb: bulk message failed: -22 (1/0) [ 247.773796][ T6268] DVB: Unable to find symbol mt352_attach() [ 247.776025][ T6268] dvb-usb: bulk message failed: -22 (5/0) [ 247.777904][ T6268] zl10353_read_register: readreg error (reg=127, ret==-121) [ 247.780259][ T6268] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 247.824303][ T6268] rc_core: IR keymap rc-dvico-mce not found [ 247.826765][ T6268] Registered IR keymap rc-empty [ 247.829400][ T6268] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 247.833480][ T6268] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input31 [ 247.840262][ T6268] dvb-usb: schedule remote query interval to 100 msecs. [ 247.842471][ T6268] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 247.848976][ T6268] usb 10-1: USB disconnect, device number 5 [ 247.887031][ T6268] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 247.984628][ C2] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 248.759149][ T6188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.762895][ T6188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.766701][ T6188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.770931][ T6188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.774942][ T6188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.792127][ T1559] Failed to initialize the IGMP autojoin socket (err -2) [ 248.980219][ T1559] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.109702][ T1559] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.216469][ T1559] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.292019][ T1559] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.409492][ T61] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.421854][ T61] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.446793][ T97] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.476104][ T1559] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 249.486017][ T97] netdevsim netdevsim6 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.492222][ T1559] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 249.504518][ T1559] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 249.515378][ T1559] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 249.571841][ T6188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.590125][ T6188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.593191][ T6188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.597322][ T6188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.600869][ T1734] bond_slave_0: entered promiscuous mode [ 249.603085][ T1734] bond_slave_0: entered allmulticast mode [ 249.603385][ T6188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.635169][ T1728] Failed to initialize the IGMP autojoin socket (err -2) [ 249.764944][ T1770] netlink: set zone limit has 4 unknown bytes [ 249.825570][ T1559] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 249.832906][ T1559] wireguard: wg0: Could not create IPv4 socket [ 249.841891][ T1559] wireguard: wg1: Could not create IPv4 socket [ 249.848303][ T1559] wireguard: wg2: Could not create IPv4 socket [ 250.023648][ T6194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.029237][ T6194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.032435][ T6194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.035871][ T6194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.042302][ T6194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.055737][ T1811] Failed to initialize the IGMP autojoin socket (err -2) [ 250.071571][ T1823] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11077'. [ 250.074795][ T1823] netem: change failed [ 250.282105][ T12] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.298581][ T1186] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.310253][ T1186] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.323572][ T12] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.751879][ T1811] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 250.765770][ T1811] wireguard: wg0: Could not create IPv4 socket [ 250.770378][ T1811] wireguard: wg1: Could not create IPv4 socket [ 250.773929][ T1811] wireguard: wg2: Could not create IPv4 socket [ 251.178988][ T2011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11096'. [ 251.721658][ T2073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11124'. [ 251.804219][ T2087] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 251.911381][ T40] kauditd_printk_skb: 358 callbacks suppressed [ 251.911393][ T40] audit: type=1400 audit(240.008:84735): avc: denied { read } for pid=2099 comm="syz.5.11133" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 251.922187][ T40] audit: type=1400 audit(240.008:84736): avc: denied { open } for pid=2099 comm="syz.5.11133" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 251.929890][ T40] audit: type=1400 audit(240.008:84737): avc: denied { ioctl } for pid=2099 comm="syz.5.11133" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 252.045078][ T2119] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11140'. [ 252.076442][ T40] audit: type=1400 audit(240.157:84738): avc: denied { allowed } for pid=2122 comm="syz.4.11141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 252.085063][ T40] audit: type=1400 audit(240.157:84739): avc: denied { read write } for pid=2124 comm="syz.5.11142" name="swradio1" dev="devtmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.093988][ T40] audit: type=1400 audit(240.157:84740): avc: denied { open } for pid=2124 comm="syz.5.11142" path="/dev/swradio1" dev="devtmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.101292][ T40] audit: type=1400 audit(240.167:84741): avc: denied { create } for pid=2122 comm="syz.4.11141" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.107695][ T40] audit: type=1400 audit(240.167:84742): avc: denied { map } for pid=2122 comm="syz.4.11141" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.118965][ T40] audit: type=1400 audit(240.167:84743): avc: denied { read write } for pid=2122 comm="syz.4.11141" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.127666][ T40] audit: type=1400 audit(240.176:84744): avc: denied { ioctl } for pid=2124 comm="syz.5.11142" path="/dev/swradio1" dev="devtmpfs" ino=992 ioctlcmd=0x5639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.239538][ T2144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11147'. [ 252.344250][ T2154] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 253.144380][ T2253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11177'. [ 254.476761][ T2351] netlink: 'syz.5.11197': attribute type 1 has an invalid length. [ 254.480468][ T2351] netlink: 'syz.5.11197': attribute type 2 has an invalid length. [ 254.484136][ T2351] netlink: 1172 bytes leftover after parsing attributes in process `syz.5.11197'. [ 254.512837][ T2356] netlink: 277 bytes leftover after parsing attributes in process `syz.5.11199'. [ 254.587873][ T2365] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 254.879279][ T2400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11213'. [ 254.882255][ T2400] netlink: 264 bytes leftover after parsing attributes in process `syz.4.11213'. [ 254.885553][ T2400] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11213'. [ 255.630934][ T2460] digital: digital_start_poll: Unknown protocol [ 255.689448][ T2469] binder: 2468:2469 ioctl c0306201 2000000003c0 returned -14 [ 255.894962][ T2503] [U] v3f"S/4:XTzWtlW= [ 256.011229][ T2521] [U] v3f"S/4:XTzWtlW= [ 256.014889][ T2519] [U] J"e:" [ 256.157775][ T2547] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 256.592850][ T6194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.597323][ T6194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.600992][ T6194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.606142][ T6194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.609649][ T6194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.626051][ T2612] Failed to initialize the IGMP autojoin socket (err -2) [ 256.787786][ T2647] tap0: tun_chr_ioctl cmd 1074025677 [ 256.789565][ T2647] tap0: linktype set to 270 [ 256.877023][ T2744] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 256.926097][ T2612] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.947355][ T2765] __nla_validate_parse: 1 callbacks suppressed [ 256.947366][ T2765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11278'. [ 257.015210][ T2780] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 257.015910][ T2781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11283'. [ 257.021387][ T2781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11283'. [ 257.024207][ T2781] netlink: 'syz.5.11283': attribute type 12 has an invalid length. [ 257.224111][ T2612] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.305418][ T40] kauditd_printk_skb: 242 callbacks suppressed [ 257.305428][ T40] audit: type=1400 audit(245.040:84987): avc: denied { bpf } for pid=2809 comm="syz.5.11286" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 257.313955][ T40] audit: type=1400 audit(245.059:84988): avc: denied { map_create } for pid=2809 comm="syz.5.11286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 257.320937][ T40] audit: type=1400 audit(245.059:84989): avc: denied { map_read map_write } for pid=2809 comm="syz.5.11286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 257.326861][ T40] audit: type=1400 audit(245.059:84990): avc: denied { read } for pid=5686 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 257.353046][ T2612] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.377763][ T40] audit: type=1400 audit(245.115:84991): avc: denied { read append } for pid=2823 comm="syz.5.11289" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.386815][ T40] audit: type=1400 audit(245.115:84992): avc: denied { open } for pid=2823 comm="syz.5.11289" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.396555][ T40] audit: type=1400 audit(245.115:84993): avc: denied { ioctl } for pid=2823 comm="syz.5.11289" path="/dev/comedi3" dev="devtmpfs" ino=1305 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.407299][ T40] audit: type=1400 audit(245.115:84994): avc: denied { search } for pid=2819 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.414739][ T40] audit: type=1400 audit(245.115:84995): avc: denied { search } for pid=2819 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.426716][ T40] audit: type=1400 audit(245.115:84996): avc: denied { search } for pid=2819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.450652][ T2612] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.607830][ T1186] netdevsim netdevsim6 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.622738][ T1186] netdevsim netdevsim6 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.623013][ T6188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.638575][ T6188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.638903][ T12] netdevsim netdevsim6 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.641941][ T6188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.646437][ T6188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.649094][ T6188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.651931][ T61] netdevsim netdevsim6 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.664729][ T2612] netdevsim netdevsim6 netdevsim0: renamed from eth18 [ 257.673208][ T2612] netdevsim netdevsim6 netdevsim1: renamed from eth19 [ 257.678743][ T2612] netdevsim netdevsim6 netdevsim2: renamed from eth20 [ 257.684516][ T2612] netdevsim netdevsim6 netdevsim3: renamed from eth21 [ 257.690273][ T2859] Failed to initialize the IGMP autojoin socket (err -2) [ 257.968340][ T2612] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 257.981118][ T2612] wireguard: wg0: Could not create IPv4 socket [ 257.985484][ T2612] wireguard: wg1: Could not create IPv4 socket [ 257.988882][ T2612] wireguard: wg2: Could not create IPv4 socket [ 257.995721][ T6188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.000267][ T6188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.004902][ T6188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.008433][ T6188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.010775][ T6188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.037903][ T2938] Failed to initialize the IGMP autojoin socket (err -2) [ 258.246292][ T2938] netdevsim netdevsim7 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.384635][ T2938] netdevsim netdevsim7 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.491266][ T2938] netdevsim netdevsim7 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.640067][ T3130] netlink: 'syz.5.11314': attribute type 3 has an invalid length. [ 258.642753][ T3130] netlink: 'syz.5.11314': attribute type 1 has an invalid length. [ 258.645447][ T3130] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.11314'. [ 258.695643][ T2938] netdevsim netdevsim7 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.776254][ T3147] netlink: 'syz.5.11318': attribute type 2 has an invalid length. [ 258.870807][ T46] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.898131][ T46] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.910822][ T61] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.923322][ T46] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.034972][ T1582] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.041344][ T1582] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.289868][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.293018][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.310187][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.312790][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.338071][ T1582] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 259.438585][ T3268] random: crng reseeded on system resumption [ 259.500446][ T1582] usb 10-1: Using ep0 maxpacket: 32 [ 259.506301][ T1582] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 259.510374][ T1582] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 259.513130][ T1582] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 259.516042][ T1582] usb 10-1: config 1 has no interface number 0 [ 259.517981][ T1582] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.522810][ T1582] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 259.528271][ T1582] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 259.532839][ T1582] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.543748][ T1582] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 260.099028][ T3341] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11349'. [ 260.143522][ T1582] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 260.204985][ T6188] Bluetooth: hci2: command tx timeout [ 260.359986][ T1582] usb 10-1: USB disconnect, device number 6 [ 260.367066][ T1582] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 260.501073][ T3460] netlink: 'syz.7.11366': attribute type 178 has an invalid length. [ 260.533792][ T3464] delete_channel: no stack [ 260.561487][ T3470] netlink: 84 bytes leftover after parsing attributes in process `syz.4.11369'. [ 260.564953][ T3470] netlink: 84 bytes leftover after parsing attributes in process `syz.4.11369'. [ 260.669649][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11376'. [ 260.833272][ T3507] binder: 3505:3507 ioctl c0306201 200000000080 returned -22 [ 261.181334][ T1748] IPVS: starting estimator thread 0... [ 261.183282][ T3548] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 261.273116][ T3550] IPVS: using max 46 ests per chain, 110400 per kthread [ 261.282798][ T3557] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11398'. [ 261.368720][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11403'. [ 261.375093][ T97] bond0: (slave bond_slave_0): interface is now down [ 261.377658][ T97] bond0: (slave bond_slave_1): interface is now down [ 261.381377][ T97] bond0: (slave batadv0): interface is now down [ 261.387714][ T97] bond0: now running without any active interface! [ 261.515191][ T3598] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 261.748442][ T3629] nbd: illegal input index 1879048192 [ 261.828911][ T840] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 262.010815][ T840] usb 10-1: Using ep0 maxpacket: 32 [ 262.014682][ T840] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 262.017504][ T840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.021753][ T840] usb 10-1: config 0 descriptor?? [ 262.029341][ T840] as10x_usb: device has been detected [ 262.031742][ T840] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 262.042601][ T840] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 262.069492][ T840] as10x_usb: error during firmware upload part1 [ 262.072634][ T840] Registered device nBox DVB-T Dongle [ 262.244856][ T34] usb 10-1: USB disconnect, device number 7 [ 262.263850][ T34] Unregistered device nBox DVB-T Dongle [ 262.264779][ T34] as10x_usb: device has been disconnected [ 262.387988][ T3703] __nla_validate_parse: 1 callbacks suppressed [ 262.387998][ T3703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11442'. [ 262.414833][ T3705] mkiss: ax0: crc mode is auto. [ 262.427597][ T6188] Bluetooth: hci2: command tx timeout [ 262.656460][ T40] kauditd_printk_skb: 377 callbacks suppressed [ 262.656477][ T40] audit: type=1400 audit(250.054:85374): avc: denied { create } for pid=3728 comm="syz.7.11450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.666566][ T40] audit: type=1400 audit(250.054:85375): avc: denied { write } for pid=3728 comm="syz.7.11450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.700913][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11452'. [ 262.706244][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11452'. [ 262.801597][ T40] audit: type=1400 audit(250.185:85376): avc: denied { read write } for pid=25694 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.811163][ T40] audit: type=1400 audit(250.194:85377): avc: denied { open } for pid=25694 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.821096][ T40] audit: type=1400 audit(250.194:85378): avc: denied { ioctl } for pid=25694 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.831450][ T40] audit: type=1400 audit(250.203:85379): avc: denied { create } for pid=3747 comm="syz.4.11457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 262.838510][ T40] audit: type=1400 audit(250.203:85380): avc: denied { ioctl } for pid=3747 comm="syz.4.11457" path="socket:[98576]" dev="sockfs" ino=98576 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 262.852147][ T40] audit: type=1400 audit(250.231:85381): avc: denied { create } for pid=3752 comm="syz.5.11460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 262.861672][ T40] audit: type=1400 audit(250.241:85382): avc: denied { read } for pid=3752 comm="syz.5.11460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 262.873683][ T40] audit: type=1400 audit(250.250:85383): avc: denied { create } for pid=3754 comm="syz.7.11461" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 263.433910][ T3820] input: syz1 as /devices/virtual/input/input32 [ 263.477708][ T3831] vlan0: entered promiscuous mode [ 263.486968][ T3831] team0: Port device vlan0 added [ 263.524912][ T3838] mkiss: ax0: crc mode is auto. [ 263.555715][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11488'. [ 263.651693][ T3870] __vm_enough_memory: pid: 3870, comm: syz.4.11493, bytes: 21200118820864 not enough memory for the allocation [ 263.848348][ T3891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input33 [ 263.999194][ T3249] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 264.010687][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11505'. [ 264.016015][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.185405][ T3249] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 264.188308][ T3249] usb 10-1: config 0 has no interface number 0 [ 264.190270][ T3249] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 264.194479][ T3249] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.198053][ T3249] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 264.203061][ T3249] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 264.205971][ T3249] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 264.208478][ T3249] usb 10-1: Product: syz [ 264.209794][ T3249] usb 10-1: SerialNumber: syz [ 264.213629][ T3249] usb 10-1: config 0 descriptor?? [ 264.216951][ T3249] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 264.220411][ T3249] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input34 [ 264.254353][ T3940] vlan0: entered promiscuous mode [ 264.264062][ T3940] vlan0: entered allmulticast mode [ 264.265678][ T3940] veth0_vlan: entered allmulticast mode [ 264.269958][ T3940] team0: Port device vlan0 added [ 264.453176][ C2] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 264.453369][ T34] usb 10-1: USB disconnect, device number 8 [ 264.455377][ C2] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 264.462220][ T34] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 264.661985][ T6188] Bluetooth: hci2: command tx timeout [ 264.805645][ T6188] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 264.908751][ T6194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.913510][ T6194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.916743][ T6194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.920533][ T6194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.923516][ T6194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.030481][ T4074] GUP no longer grows the stack in syz.5.11522 (4074): 200000007000-20000000a000 (200000004000) [ 265.034442][ T4074] CPU: 3 UID: 0 PID: 4074 Comm: syz.5.11522 Not tainted syzkaller #0 PREEMPT(full) [ 265.034457][ T4074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.034465][ T4074] Call Trace: [ 265.034468][ T4074] [ 265.034472][ T4074] dump_stack_lvl+0x16c/0x1f0 [ 265.034490][ T4074] gup_vma_lookup+0x1d2/0x220 [ 265.034505][ T4074] __get_user_pages+0x243/0x34a0 [ 265.034523][ T4074] ? xsk_setsockopt+0x6db/0x9a0 [ 265.034532][ T4074] ? do_sock_setsockopt+0xf3/0x1d0 [ 265.034546][ T4074] ? __sys_setsockopt+0x1a0/0x230 [ 265.034557][ T4074] ? __x64_sys_setsockopt+0xbd/0x160 [ 265.034569][ T4074] ? __pfx___get_user_pages+0x10/0x10 [ 265.034593][ T4074] __gup_longterm_locked+0x2dd/0x17e0 [ 265.034608][ T4074] ? __lock_acquire+0xb80/0x1ce0 [ 265.034628][ T4074] ? __pfx___gup_longterm_locked+0x10/0x10 [ 265.034650][ T4074] pin_user_pages+0x13c/0x160 [ 265.034666][ T4074] ? __pfx_pin_user_pages+0x10/0x10 [ 265.034682][ T4074] ? xdp_umem_create+0x652/0x1270 [ 265.034696][ T4074] xdp_umem_create+0x73c/0x1270 [ 265.034712][ T4074] xsk_setsockopt+0x6db/0x9a0 [ 265.034737][ T4074] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.034747][ T4074] ? find_held_lock+0x2b/0x80 [ 265.034762][ T4074] ? selinux_socket_setsockopt+0x6a/0x80 [ 265.034777][ T4074] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.034789][ T4074] do_sock_setsockopt+0xf3/0x1d0 [ 265.034807][ T4074] __sys_setsockopt+0x1a0/0x230 [ 265.034822][ T4074] __x64_sys_setsockopt+0xbd/0x160 [ 265.034834][ T4074] ? do_syscall_64+0x91/0x4c0 [ 265.034848][ T4074] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.034860][ T4074] do_syscall_64+0xcd/0x4c0 [ 265.034874][ T4074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.034885][ T4074] RIP: 0033:0x7f5e2218ebe9 [ 265.034893][ T4074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.034902][ T4074] RSP: 002b:00007f5e22f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.034912][ T4074] RAX: ffffffffffffffda RBX: 00007f5e223c5fa0 RCX: 00007f5e2218ebe9 [ 265.034918][ T4074] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 265.034924][ T4074] RBP: 00007f5e22211e19 R08: 0000000000000020 R09: 0000000000000000 [ 265.034930][ T4074] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 265.034935][ T4074] R13: 00007f5e223c6038 R14: 00007f5e223c5fa0 R15: 00007ffc2723da08 [ 265.034949][ T4074] [ 265.129571][ T3969] chnl_net:caif_netlink_parms(): no params data found [ 265.244085][ T3969] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.246370][ T3969] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.248648][ T3969] bridge_slave_0: entered allmulticast mode [ 265.253199][ T3969] bridge_slave_0: entered promiscuous mode [ 265.256764][ T3969] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.259171][ T3969] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.262989][ T3969] bridge_slave_1: entered allmulticast mode [ 265.265833][ T3969] bridge_slave_1: entered promiscuous mode [ 265.320780][ T3969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.325316][ T3969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.371524][ T3969] team0: Port device team_slave_0 added [ 265.374670][ T3969] team0: Port device team_slave_1 added [ 265.414072][ T3969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.416715][ T3969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.426331][ T3969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.430497][ T3969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.434167][ T3969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.443561][ T3969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.503452][ T3969] hsr_slave_0: entered promiscuous mode [ 265.506295][ T3969] hsr_slave_1: entered promiscuous mode [ 265.509566][ T3969] debugfs: 'hsr0' already exists in 'hsr' [ 265.511902][ T3969] Cannot create hsr debugfs directory [ 265.684769][ T3969] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.773836][ C2] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 265.785242][ T3969] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.847592][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11533'. [ 265.854520][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.894956][ T3969] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.993210][ T3969] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.171164][ T3969] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 266.317082][ T3969] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 266.326618][ T3969] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 266.336490][ T3969] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 266.410739][ T3969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.421381][ T3969] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.426460][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.428940][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.438767][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11548'. [ 266.440171][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.444936][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.467411][ T6188] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 266.467461][ T6188] Bluetooth: hci2: Dropping invalid advertising data [ 266.476707][ T6188] Bluetooth: hci2: Malformed LE Event: 0x02 [ 266.627180][ T3969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.638170][ T5147] debugfs: 'ttyS3' already exists in 'caif_serial' [ 266.665451][ T5157] sch_fq: defrate 0 ignored. [ 266.769464][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11560'. [ 266.812916][ T3969] veth0_vlan: entered promiscuous mode [ 266.819085][ T3969] veth1_vlan: entered promiscuous mode [ 266.836564][ T3969] veth0_macvtap: entered promiscuous mode [ 266.841379][ T3969] veth1_macvtap: entered promiscuous mode [ 266.850281][ T3969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.857022][ T3969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.863197][ T1148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.867490][ T1148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.871761][ T1148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.874547][ T1148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.886363][ T6188] Bluetooth: hci2: command tx timeout [ 266.924334][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.931291][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.949351][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.957276][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.123834][ T5249] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11580'. [ 267.130325][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.132968][ T5256] netlink: 'syz.5.11581': attribute type 6 has an invalid length. [ 267.134483][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.136289][ T5256] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11581'. [ 267.141897][ T6188] Bluetooth: hci1: command tx timeout [ 267.148066][ T5256] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.162926][ T5253] dvmrp17: entered allmulticast mode [ 267.176624][ T5253] dvmrp17: left allmulticast mode [ 267.247952][ T6188] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 267.252200][ T6188] CPU: 0 UID: 0 PID: 6188 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 267.252216][ T6188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.252224][ T6188] Workqueue: hci1 hci_rx_work [ 267.252243][ T6188] Call Trace: [ 267.252248][ T6188] [ 267.252252][ T6188] dump_stack_lvl+0x16c/0x1f0 [ 267.252268][ T6188] sysfs_warn_dup+0x7f/0xa0 [ 267.252283][ T6188] sysfs_create_dir_ns+0x24b/0x2b0 [ 267.252302][ T6188] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 267.252315][ T6188] ? find_held_lock+0x2b/0x80 [ 267.252329][ T6188] ? do_raw_spin_unlock+0x172/0x230 [ 267.252343][ T6188] kobject_add_internal+0x2c4/0x9b0 [ 267.252359][ T6188] kobject_add+0x16e/0x240 [ 267.252374][ T6188] ? __pfx_kobject_add+0x10/0x10 [ 267.252390][ T6188] ? do_raw_spin_unlock+0x172/0x230 [ 267.252402][ T6188] ? kobject_put+0xab/0x5a0 [ 267.252420][ T6188] device_add+0x288/0x1aa0 [ 267.252435][ T6188] ? __pfx_dev_set_name+0x10/0x10 [ 267.252445][ T6188] ? __pfx_device_add+0x10/0x10 [ 267.252459][ T6188] ? mgmt_send_event_skb+0x2fb/0x460 [ 267.252474][ T6188] hci_conn_add_sysfs+0x17e/0x230 [ 267.252486][ T6188] le_conn_complete_evt+0x1075/0x1d70 [ 267.252500][ T6188] ? trace_contention_end+0xdd/0x130 [ 267.252509][ T6188] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 267.252519][ T6188] ? hci_event_packet+0x459/0x11c0 [ 267.252533][ T6188] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 267.252545][ T6188] ? skb_pull_data+0x166/0x210 [ 267.252558][ T6188] hci_le_meta_evt+0x354/0x5e0 [ 267.252569][ T6188] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 267.252582][ T6188] hci_event_packet+0x682/0x11c0 [ 267.252592][ T6188] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 267.252604][ T6188] ? __pfx_hci_event_packet+0x10/0x10 [ 267.252616][ T6188] ? kcov_remote_start+0x3c9/0x6d0 [ 267.252627][ T6188] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.252643][ T6188] hci_rx_work+0x2c5/0x16b0 [ 267.252654][ T6188] ? rcu_is_watching+0x12/0xc0 [ 267.252669][ T6188] process_one_work+0x9cc/0x1b70 [ 267.252686][ T6188] ? __pfx_process_one_work+0x10/0x10 [ 267.252700][ T6188] ? assign_work+0x1a0/0x250 [ 267.252712][ T6188] worker_thread+0x6c8/0xf10 [ 267.252729][ T6188] ? __pfx_worker_thread+0x10/0x10 [ 267.252739][ T6188] kthread+0x3c2/0x780 [ 267.252750][ T6188] ? __pfx_kthread+0x10/0x10 [ 267.252760][ T6188] ? rcu_is_watching+0x12/0xc0 [ 267.252772][ T6188] ? __pfx_kthread+0x10/0x10 [ 267.252783][ T6188] ret_from_fork+0x5d4/0x6f0 [ 267.252793][ T6188] ? __pfx_kthread+0x10/0x10 [ 267.252803][ T6188] ret_from_fork_asm+0x1a/0x30 [ 267.252822][ T6188] [ 267.252837][ T6188] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 267.362038][ T6188] Bluetooth: hci1: failed to register connection device [ 267.828237][ T5318] debugfs: 'ttyS3' already exists in 'caif_serial' [ 268.348330][ T40] kauditd_printk_skb: 208 callbacks suppressed [ 268.348341][ T40] audit: type=1400 audit(255.376:85592): avc: denied { create } for pid=5370 comm="syz.7.11616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.358389][ T40] audit: type=1400 audit(255.386:85593): avc: denied { write } for pid=5370 comm="syz.7.11616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.430224][ T5379] netlink: 'syz.4.11618': attribute type 6 has an invalid length. [ 268.432584][ T5379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11618'. [ 268.436411][ T5379] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.439184][ T5379] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.469614][ T40] audit: type=1400 audit(255.488:85594): avc: denied { name_bind } for pid=5380 comm="syz.7.11619" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 268.484274][ T40] audit: type=1400 audit(255.498:85595): avc: denied { node_bind } for pid=5380 comm="syz.7.11619" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 268.508048][ T1424] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 268.664082][ T40] audit: type=1400 audit(255.676:85596): avc: denied { mounton } for pid=5398 comm="syz.5.11624" path="/" dev="tmpfs" ino=4129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 268.696786][ T40] audit: type=1400 audit(255.704:85597): avc: denied { create } for pid=5400 comm="syz.5.11625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 268.706764][ T40] audit: type=1400 audit(255.713:85598): avc: denied { sys_admin } for pid=5400 comm="syz.5.11625" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 269.176336][ T40] audit: type=1400 audit(256.153:85599): avc: denied { append } for pid=5423 comm="syz.5.11632" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 269.355187][ T6188] Bluetooth: hci1: command tx timeout [ 269.463290][ T40] audit: type=1400 audit(256.424:85600): avc: denied { read write } for pid=5436 comm="syz.7.11636" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 269.472033][ T40] audit: type=1400 audit(256.424:85601): avc: denied { open } for pid=5436 comm="syz.7.11636" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 269.838987][ T6188] block nbd0: Receive control failed (result -32) [ 270.068662][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11658'. [ 270.114739][ T5528] binder: 5527:5528 ioctl 4018620d 0 returned -22 [ 270.292779][ T5563] binder: 5562:5563 ioctl 4018620d 0 returned -22 [ 270.610971][ T5627] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 271.589843][ T6188] Bluetooth: hci1: command tx timeout [ 271.647368][ T5728] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11736'. [ 271.830017][ T5754] batadv_slave_1: entered promiscuous mode [ 271.833237][ T5753] batadv_slave_1: left promiscuous mode [ 271.874330][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11746'. [ 271.930964][ T5758] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11747'. [ 272.192867][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11760'. [ 272.512186][ T5826] netlink: 'syz.7.11768': attribute type 10 has an invalid length. [ 272.520040][ T5827] overlay: filesystem on ./bus not supported [ 272.694188][ T5850] batadv_slave_1: entered promiscuous mode [ 272.696779][ T5849] batadv_slave_1: left promiscuous mode [ 273.294805][ T5874] overlay: filesystem on ./bus not supported [ 273.421022][ T5893] batadv_slave_1: entered promiscuous mode [ 273.423673][ T5892] batadv_slave_1: left promiscuous mode [ 273.516633][ T5880] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.519537][ T5880] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.522240][ T5880] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 273.802581][ T6194] Bluetooth: hci1: command tx timeout [ 274.274414][ T5880] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 274.286079][ T5880] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.289826][ T5880] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.297224][ T5880] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.302279][ T5880] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.305859][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 274.305869][ T40] audit: type=1400 audit(260.951:85758): avc: denied { create } for pid=5925 comm="syz.5.11798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 274.322722][ T40] audit: type=1400 audit(260.951:85759): avc: denied { bind } for pid=5925 comm="syz.5.11798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 274.330111][ T40] audit: type=1400 audit(260.951:85760): avc: denied { module_request } for pid=5925 comm="syz.5.11798" kmod="crypto-essiv(cbc(aes),sha256)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 274.340829][ T5932] netlink: 'syz.7.11799': attribute type 2 has an invalid length. [ 274.372117][ T40] audit: type=1400 audit(261.017:85761): avc: denied { read write } for pid=5935 comm="syz.6.11800" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 274.393347][ T40] audit: type=1400 audit(261.017:85762): avc: denied { open } for pid=5935 comm="syz.6.11800" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 274.426741][ T40] audit: type=1400 audit(261.063:85763): avc: denied { create } for pid=5947 comm="syz.4.11805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.432684][ T40] audit: type=1400 audit(261.063:85764): avc: denied { write } for pid=5947 comm="syz.4.11805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.440057][ T40] audit: type=1400 audit(261.063:85765): avc: denied { read } for pid=5948 comm="syz.5.11806" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 274.448845][ T40] audit: type=1400 audit(261.063:85766): avc: denied { open } for pid=5948 comm="syz.5.11806" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 274.456432][ T40] audit: type=1400 audit(261.082:85767): avc: denied { execute } for pid=5952 comm="syz.7.11807" name="file1" dev="tmpfs" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 274.807338][T32568] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 274.875426][ T34] IPVS: starting estimator thread 0... [ 274.877973][ T5996] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 274.941845][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.948456][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.952734][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.958911][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.962533][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.970231][T32568] usb 9-1: Using ep0 maxpacket: 8 [ 274.975146][T32568] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.979050][T32568] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.985016][T32568] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.989053][ T5997] IPVS: using max 46 ests per chain, 110400 per kthread [ 274.991191][T32568] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.996654][T32568] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.000769][T32568] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.127604][ T6004] chnl_net:caif_netlink_parms(): no params data found [ 275.228593][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.231006][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.233405][ T6004] bridge_slave_0: entered allmulticast mode [ 275.240851][ T6004] bridge_slave_0: entered promiscuous mode [ 275.244730][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.245657][T32568] usb 9-1: GET_CAPABILITIES returned 0 [ 275.247651][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.248862][T32568] usbtmc 9-1:16.0: can't read capabilities [ 275.251153][ T6004] bridge_slave_1: entered allmulticast mode [ 275.255860][ T6004] bridge_slave_1: entered promiscuous mode [ 275.339592][ T6004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.345640][ T6004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.388211][ T6004] team0: Port device team_slave_0 added [ 275.391541][ T6004] team0: Port device team_slave_1 added [ 275.430531][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.433492][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.442891][ T6004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.447099][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.450990][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.458958][ T6004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.474342][ T5965] usb 9-1: usbtmc_ioctl_clear_out_halt returned -32 [ 275.480016][ T34] usb 9-1: USB disconnect, device number 13 [ 275.522481][ T6004] hsr_slave_0: entered promiscuous mode [ 275.526707][ T6004] hsr_slave_1: entered promiscuous mode [ 275.529272][ T6004] debugfs: 'hsr0' already exists in 'hsr' [ 275.531132][ T6004] Cannot create hsr debugfs directory [ 275.598800][ T63] Bluetooth: hci4: command 0x0c1a tx timeout [ 275.682606][ T6004] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.683992][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 275.778476][ T6004] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.900768][ T6004] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.978135][ T6004] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.141830][ T7079] netlink: 'syz.7.11845': attribute type 4 has an invalid length. [ 276.230156][ T6004] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.237557][ T6004] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.243551][ T6004] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.252639][ T6004] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.259429][ T7108] netlink: 'syz.4.11851': attribute type 25 has an invalid length. [ 276.262338][ T7108] netlink: 'syz.4.11851': attribute type 8 has an invalid length. [ 276.303284][ T6004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.314233][ T6004] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.320082][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.322288][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.330486][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.333085][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.432316][ T4416] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 276.455062][ T6004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.592807][ T4416] usb 12-1: Using ep0 maxpacket: 8 [ 276.596856][ T4416] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.600069][ T4416] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.603104][ T4416] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.609382][ T4416] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.615107][ T4416] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.616088][ T6004] veth0_vlan: entered promiscuous mode [ 276.618545][ T4416] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.623691][ T6004] veth1_vlan: entered promiscuous mode [ 276.642793][ T6004] veth0_macvtap: entered promiscuous mode [ 276.648549][ T6004] veth1_macvtap: entered promiscuous mode [ 276.662215][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.668639][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.674774][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.677595][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.681900][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.684848][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.723287][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.725847][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.740596][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.744141][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.849040][ T4416] usb 12-1: GET_CAPABILITIES returned 0 [ 276.851384][ T4416] usbtmc 12-1:16.0: can't read capabilities [ 276.983764][ T7156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 276.985959][ T7156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 276.990474][ T7156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.992441][ T7156] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 276.997568][ T7156] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 277.077251][ T7089] usb 12-1: usbtmc_ioctl_clear_out_halt returned -32 [ 277.088047][ T34] usb 12-1: USB disconnect, device number 2 [ 277.098090][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11862'. [ 277.373145][ T4416] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 277.410210][ T7211] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 277.413081][ T7211] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.416353][ T7211] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.521009][ T7228] netlink: 'syz.5.11874': attribute type 25 has an invalid length. [ 277.526792][ T7228] netlink: 'syz.5.11874': attribute type 8 has an invalid length. [ 277.534315][ T4416] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 277.538933][ T4416] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.543017][ T4416] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.548137][ T4416] usb 11-1: config 0 interface 0 has no altsetting 0 [ 277.553916][ T4416] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.562615][ T4416] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.567306][ T4416] usb 11-1: config 0 interface 0 has no altsetting 0 [ 277.571108][ T4416] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.578519][ T4416] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.582845][ T4416] usb 11-1: config 0 interface 0 has no altsetting 0 [ 277.585809][ T4416] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.589081][ T4416] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.592428][ T4416] usb 11-1: config 0 interface 0 has no altsetting 0 [ 277.595223][ T4416] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.599015][ T4416] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.603164][ T4416] usb 11-1: config 0 interface 0 has no altsetting 0 [ 277.606705][ T4416] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.611177][ T4416] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.615702][ T4416] usb 11-1: config 0 interface 0 has no altsetting 0 [ 277.619356][ T4416] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.624186][ T4416] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.627890][ T4416] usb 11-1: config 0 interface 0 has no altsetting 0 [ 277.632316][ T4416] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.636027][ T4416] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.641141][ T4416] usb 11-1: config 0 interface 0 has no altsetting 0 [ 277.645884][ T4416] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 277.649639][ T4416] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 277.654044][ T4416] usb 11-1: Product: syz [ 277.655837][ T4416] usb 11-1: Manufacturer: syz [ 277.657832][ T4416] usb 11-1: SerialNumber: syz [ 277.663955][ T4416] usb 11-1: config 0 descriptor?? [ 277.670059][ T4416] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 277.705348][ T4416] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 277.757684][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11884'. [ 277.890401][ T4416] usb 11-1: USB disconnect, device number 2 [ 277.894140][ T4416] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 278.807900][ T7292] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11895'. [ 278.829570][ T13] bond0: (slave rose0): link status definitely down, disabling slave [ 278.833863][ T13] bond0: now running without any active interface! [ 278.928976][ T7317] netlink: 'syz.7.11903': attribute type 1 has an invalid length. [ 278.932102][ T7317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.083563][ T6268] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 279.244374][ T6268] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 279.247818][ T6268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.250799][ T6268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.254148][ T6268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 279.258340][ T6268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.261080][ T6268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.264468][ T6268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 279.267770][ T6268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.271105][ T6268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.274728][ T6268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 279.280740][ T6268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.283623][ T6268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.287216][ T6268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 279.293964][ T6268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.296869][ T6268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.300371][ T6268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 279.303482][ T6268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.306361][ T6268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.310358][ T6268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 279.313495][ T6268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.316309][ T6268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.320136][ T6268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 279.323189][ T6268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.326208][ T6268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.330313][ T6268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 279.334299][ T6268] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 279.337229][ T6268] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 279.339937][ T6268] usb 10-1: Product: syz [ 279.341657][ T6268] usb 10-1: Manufacturer: syz [ 279.343220][ T6268] usb 10-1: SerialNumber: syz [ 279.346727][ T6268] usb 10-1: config 0 descriptor?? [ 279.353021][ T6268] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 279.532588][ T6188] Bluetooth: hci4: command 0x0c1a tx timeout [ 279.572043][ T3249] usb 10-1: USB disconnect, device number 9 [ 279.578002][ T3249] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 279.618263][ T6194] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.618272][ T6188] Bluetooth: hci1: command 0x041b tx timeout [ 279.703164][ T40] kauditd_printk_skb: 164 callbacks suppressed [ 279.703175][ T40] audit: type=1400 audit(265.993:85932): avc: denied { create } for pid=7372 comm="syz.4.11914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.715418][ T40] audit: type=1400 audit(266.002:85933): avc: denied { bind } for pid=7372 comm="syz.4.11914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.722852][ T40] audit: type=1400 audit(266.002:85934): avc: denied { accept } for pid=7372 comm="syz.4.11914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.732518][ T40] audit: type=1400 audit(266.002:85935): avc: denied { read } for pid=7372 comm="syz.4.11914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.741387][ T40] audit: type=1400 audit(266.030:85936): avc: denied { create } for pid=7376 comm="syz.4.11915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.750382][ T40] audit: type=1400 audit(266.030:85937): avc: denied { write } for pid=7376 comm="syz.4.11915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.758469][ T40] audit: type=1400 audit(266.030:85938): avc: denied { connect } for pid=7376 comm="syz.4.11915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.766062][ T40] audit: type=1400 audit(266.030:85939): avc: denied { name_connect } for pid=7376 comm="syz.4.11915" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 279.798612][ T40] audit: type=1400 audit(266.087:85940): avc: denied { shutdown } for pid=7376 comm="syz.4.11915" lport=58735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.807271][ T40] audit: type=1400 audit(266.087:85941): avc: denied { getopt } for pid=7376 comm="syz.4.11915" lport=58735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 280.221710][ T7426] openvswitch: netlink: Multiple metadata blocks provided [ 280.232002][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11931'. [ 280.385891][ T7451] netlink: 'syz.6.11939': attribute type 10 has an invalid length. [ 280.388865][ T7451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.395713][ T7451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.403782][ T7451] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 280.618034][ T7484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11952'. [ 280.644546][ T61] ------------[ cut here ]------------ [ 280.645057][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 280.647253][ T61] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 280.654413][ T61] WARNING: CPU: 3 PID: 61 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 280.657808][ T61] Modules linked in: [ 280.659381][ T61] CPU: 3 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 280.664127][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.668763][ T61] Workqueue: bond0 bond_mii_monitor [ 280.670589][ T61] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 280.672517][ T61] Code: 05 ff ff ff e8 54 a5 43 f8 c6 05 8e e5 1b 07 01 90 ba 48 00 00 00 48 c7 c6 a0 00 e6 8c 48 c7 c7 40 00 e6 8c e8 d4 48 02 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 9d ab 90 e8 ee 04 aa f8 e9 [ 280.679313][ T61] RSP: 0018:ffffc90000aef9f0 EFLAGS: 00010286 [ 280.681722][ T61] RAX: 0000000000000000 RBX: ffff88802d1e2000 RCX: ffffffff817a3388 [ 280.684866][ T61] RDX: ffff88801eaa4880 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 280.687558][ T61] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 280.690145][ T61] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200015df48 [ 280.692926][ T61] R13: ffff88802d1e2cc1 R14: ffffffff8c59e0c0 R15: ffffffff89b10d70 [ 280.695456][ T61] FS: 0000000000000000(0000) GS:ffff8880d69b5000(0000) knlGS:0000000000000000 [ 280.698312][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.700380][ T61] CR2: 0000001b2d21cff8 CR3: 0000000055c9b000 CR4: 0000000000352ef0 [ 280.702865][ T61] Call Trace: [ 280.703902][ T61] [ 280.704958][ T61] ethtool_op_get_link+0x1d/0x70 [ 280.706814][ T61] bond_check_dev_link+0x3f9/0x710 [ 280.708555][ T61] ? __pfx_bond_check_dev_link+0x10/0x10 [ 280.710331][ T61] bond_mii_monitor+0x3c0/0x2dc0 [ 280.711974][ T61] ? __pfx_bond_mii_monitor+0x10/0x10 [ 280.713733][ T61] ? rcu_is_watching+0x12/0xc0 [ 280.715278][ T61] process_one_work+0x9cc/0x1b70 [ 280.716984][ T61] ? __pfx_process_one_work+0x10/0x10 [ 280.718676][ T61] ? assign_work+0x1a0/0x250 [ 280.720319][ T61] worker_thread+0x6c8/0xf10 [ 280.721794][ T61] ? __kthread_parkme+0x19e/0x250 [ 280.723379][ T61] ? __pfx_worker_thread+0x10/0x10 [ 280.725199][ T61] kthread+0x3c2/0x780 [ 280.726957][ T61] ? __pfx_kthread+0x10/0x10 [ 280.728546][ T61] ? rcu_is_watching+0x12/0xc0 [ 280.730230][ T61] ? __pfx_kthread+0x10/0x10 [ 280.731683][ T61] ret_from_fork+0x5d4/0x6f0 [ 280.733144][ T61] ? __pfx_kthread+0x10/0x10 [ 280.734654][ T61] ret_from_fork_asm+0x1a/0x30 [ 280.736278][ T61] [ 280.737324][ T61] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 280.739756][ T61] CPU: 3 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 280.742592][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.746400][ T61] Workqueue: bond0 bond_mii_monitor [ 280.748238][ T61] Call Trace: [ 280.749308][ T61] [ 280.750249][ T61] dump_stack_lvl+0x3d/0x1f0 [ 280.751725][ T61] vpanic+0x6e8/0x7a0 [ 280.753019][ T61] ? __pfx_vpanic+0x10/0x10 [ 280.754509][ T61] ? __linkwatch_sync_dev+0x1ed/0x230 [ 280.756699][ T61] panic+0xca/0xd0 [ 280.757900][ T61] ? __pfx_panic+0x10/0x10 [ 280.759312][ T61] ? check_panic_on_warn+0x1f/0xb0 [ 280.760935][ T61] check_panic_on_warn+0xab/0xb0 [ 280.762494][ T61] __warn+0xf6/0x3c0 [ 280.763729][ T61] ? __pfx_vprintk_emit+0x10/0x10 [ 280.765633][ T61] ? __linkwatch_sync_dev+0x1ed/0x230 [ 280.767657][ T61] report_bug+0x3c3/0x580 [ 280.769034][ T61] ? __linkwatch_sync_dev+0x1ed/0x230 [ 280.770745][ T61] handle_bug+0x184/0x210 [ 280.772115][ T61] exc_invalid_op+0x17/0x50 [ 280.773575][ T61] asm_exc_invalid_op+0x1a/0x20 [ 280.775226][ T61] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 280.777363][ T61] Code: 05 ff ff ff e8 54 a5 43 f8 c6 05 8e e5 1b 07 01 90 ba 48 00 00 00 48 c7 c6 a0 00 e6 8c 48 c7 c7 40 00 e6 8c e8 d4 48 02 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 9d ab 90 e8 ee 04 aa f8 e9 [ 280.784814][ T61] RSP: 0018:ffffc90000aef9f0 EFLAGS: 00010286 [ 280.787393][ T61] RAX: 0000000000000000 RBX: ffff88802d1e2000 RCX: ffffffff817a3388 [ 280.790705][ T61] RDX: ffff88801eaa4880 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 280.793984][ T61] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 280.797159][ T61] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200015df48 [ 280.799858][ T61] R13: ffff88802d1e2cc1 R14: ffffffff8c59e0c0 R15: ffffffff89b10d70 [ 280.803040][ T61] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 280.805395][ T61] ? __warn_printk+0x198/0x350 [ 280.807444][ T61] ? __warn_printk+0x1a5/0x350 [ 280.809490][ T61] ethtool_op_get_link+0x1d/0x70 [ 280.811532][ T61] bond_check_dev_link+0x3f9/0x710 [ 280.813680][ T61] ? __pfx_bond_check_dev_link+0x10/0x10 [ 280.816051][ T61] bond_mii_monitor+0x3c0/0x2dc0 [ 280.817975][ T61] ? __pfx_bond_mii_monitor+0x10/0x10 [ 280.819675][ T61] ? rcu_is_watching+0x12/0xc0 [ 280.821229][ T61] process_one_work+0x9cc/0x1b70 [ 280.822807][ T61] ? __pfx_process_one_work+0x10/0x10 [ 280.824609][ T61] ? assign_work+0x1a0/0x250 [ 280.826276][ T61] worker_thread+0x6c8/0xf10 [ 280.827808][ T61] ? __kthread_parkme+0x19e/0x250 [ 280.829475][ T61] ? __pfx_worker_thread+0x10/0x10 [ 280.831178][ T61] kthread+0x3c2/0x780 [ 280.832592][ T61] ? __pfx_kthread+0x10/0x10 [ 280.834114][ T61] ? rcu_is_watching+0x12/0xc0 [ 280.836047][ T61] ? __pfx_kthread+0x10/0x10 [ 280.837692][ T61] ret_from_fork+0x5d4/0x6f0 [ 280.839338][ T61] ? __pfx_kthread+0x10/0x10 [ 280.840935][ T61] ret_from_fork_asm+0x1a/0x30 [ 280.842755][ T61] [ 280.844749][ T61] Kernel Offset: disabled [ 280.846363][ T61] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:16:10 Registers: info registers vcpu 0 CPU#0 RAX=ffffffffffffffff RBX=00007fa80ffc5fa0 RCX=ffffffffffffffa8 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=00007fa80fe11e19 RSP=00007fa810b94ff0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000246 R12=0000000000000000 R13=00007fa80ffc6038 R14=00007fa80ffc5fa0 R15=00007ffeaf846f48 RIP=00007fa80fc548f6 RFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa810b956c0 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffeaf846940 CR3=00000000642c7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeaf847456 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeaf847456 00007ffeaf84745c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa80fe12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa80fe12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa80fe12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa80fe12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa80fe12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa80fe12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa80ff974a8 00007fa80ff974a0 00007fa80ff97498 00007fa80ff97470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa810afd100 00007fa80ff97460 00007fa80ff97478 00007fa80ff974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa80ff974b8 00007fa80ff974b0 00007fa80ff974a8 00007fa80ff974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000001 RBX=0000000000000001 RCX=ffffc90021850001 RDX=ffffc9002184fd90 RSI=ffffffff8c162d00 RDI=ffffffff8c162d40 RBP=0000000000000001 RSP=ffffc9002184f988 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000121b7 R12=ffffc9002184fa88 R13=ffffc9002184fa38 R14=ffffc9002184fd88 R15=ffffc9002184fa6c RIP=ffffffff8b9453cd RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4ecdbad880 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdeb0a2880 CR3=000000002723b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000290410 Opmask02=00000000ffffffff Opmask03=0000000001041000 Opmask04=00000000fffffbff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd3578f80 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005647b2b16e20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ecd5f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ecd5f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 302d312f31627375 2f302e64313a3030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732534c1df1483 73732531a580b259 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 39c6d499dd670c0b 73737376170859a2 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 367570632f302f71 6d2f36706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003675 70632f302f716d2f 36706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030302f30303a 303030306963702f 736563697665642f 3d54524f505f544e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5354415453003635 34373d4449500079 6f72747365643d54 4e45564500303d54 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 160741101f4f697d 60766d120c140044 2b3e3b2c2d307c04 180012453d7e721d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e377f7f7f6f7f7f 7f7f7f7e7c7f577f 7b7f7f7f7f7f7f3f 3f1a3f753f7f7e5f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43382c41382c3938 2c38382c37382c36 382c35382c34382c 33382c32382c3138 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e554f2f00343031 2f44455441455243 00636563693d4d45 2f3d485341505300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f412f00003031 2f373d4441450034 00363534372f3d45 2f2f3d4500303d00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000018623b RBX=0000000000000002 RCX=ffffffff8b944c29 RDX=0000000000000000 RSI=ffffffff8de522d0 RDI=ffffffff8c162d80 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab6b90 R15=0000000000000000 RIP=ffffffff8b94378f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555767145c8 CR3=000000004b60f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812c7548 ffffffff81630235 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81630235 ffffffff812c7548 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812c7548 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2723df16 00007ffc2723df1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e223974a8 00007f5e223974a0 00007f5e22397498 00007f5e22397470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22efd100 00007f5e22397460 00007f5e00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e223974b8 00007f5e223974b0 00007f5e223974a8 00007f5e223974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000045 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646975 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90000aef360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000045 R14=ffffffff9b115060 R15=ffffffff85646910 RIP=ffffffff8564699f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d21cff8 CR3=0000000055c9b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812c7548 ffffffff81630235 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81630235 ffffffff812c7548 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812c7548 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2723df16 00007ffc2723df1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e223974a8 00007f5e223974a0 00007f5e22397498 00007f5e22397470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22efd100 00007f5e22397460 00007f5e00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e223974b8 00007f5e223974b0 00007f5e223974a8 00007f5e223974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000