last executing test programs: 8.875798905s ago: executing program 1 (id=243): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r0, 0x25, 0x0, @val=@tcx}, 0x40) ptrace(0x10, 0x1) r5 = gettid() ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0xa) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f00000031c0)) 7.735039084s ago: executing program 3 (id=253): r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 7.581373236s ago: executing program 3 (id=254): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, 0x0) 5.750672047s ago: executing program 1 (id=258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.632455782s ago: executing program 3 (id=259): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r0, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fchdir(0xffffffffffffffff) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 5.548122428s ago: executing program 3 (id=260): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02}) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r6, @ANYBLOB=',rootmode=', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000001c0), 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "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"}) syz_open_dev$loop(&(0x7f0000000040), 0x7ff, 0x8000) getpid() 4.085718054s ago: executing program 3 (id=265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$EVIOCSABS20(r1, 0x40084507, 0x0) 4.016991297s ago: executing program 1 (id=266): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0xa, 0x10006d8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r8, &(0x7f0000000000), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000106f5704000000000000000000000000c56c5d8f9c98c7fda0007bfe0f82caf09a1a1f962f2f0aabe4b98703079f0911879233e0833b1f8ce6dd11fcada7b9b7d1a44dfa55519c2ce3f00b1905ce7448fec170cac77edecad85c4c60a11e1c327a990b5fe301", @ANYRESHEX=r7, @ANYBLOB="00000000000000001800128008000100767469000c00028008000400e0000002"], 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) userfaultfd(0x80001) 2.631887831s ago: executing program 0 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xe}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x3c}}, 0x0) 2.452152571s ago: executing program 0 (id=273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x60000000}, 0x44000) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) 2.347411465s ago: executing program 1 (id=274): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0xc008aeba, 0x0) 2.226679569s ago: executing program 0 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000580), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.161525703s ago: executing program 2 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r5, 0x0}]) dup3(r2, r3, 0x0) 2.081547032s ago: executing program 0 (id=278): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r0, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fchdir(0xffffffffffffffff) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 1.991420177s ago: executing program 0 (id=279): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0xd8cb786ad61489eb, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffff7d, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r6 = dup2(r5, r5) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r6, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.901006642s ago: executing program 1 (id=280): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000003640)="60c82576efc9d0a70afe7d1f701514e8ddaf2ce931aaab50d884297e2a3f44c2", 0x20}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000100)=""/121, 0x79}], 0x2}, 0x80000000}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0x1}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.900695413s ago: executing program 1 (id=281): lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x8008550e, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) read$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 1.769062722s ago: executing program 2 (id=282): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x4, &(0x7f0000000280)=0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 1.362110037s ago: executing program 3 (id=283): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003120000"], 0x0, 0x0}, 0x0) 1.230401328s ago: executing program 2 (id=284): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r4, &(0x7f00000000c0)="3f0302e9260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.00765438s ago: executing program 0 (id=285): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x0, &(0x7f0000000480)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x4c}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='ramfs\x00', 0x808, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) unlink(&(0x7f0000000340)='./file0\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/105, 0x69) 169.375025ms ago: executing program 2 (id=286): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000040)={@multicast1, @multicast2, @private=0xa010101}, 0xc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 68.912966ms ago: executing program 2 (id=287): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 0s ago: executing program 2 (id=288): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, "f13d760700"}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 63.361449][ T39] audit: type=1400 audit(1723357743.905:82): avc: denied { siginh } for pid=5259 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 64.600482][ T39] audit: type=1400 audit(1723357745.175:83): avc: denied { read } for pid=4806 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 64.613121][ T39] audit: type=1400 audit(1723357745.175:84): avc: denied { append } for pid=4806 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.626839][ T39] audit: type=1400 audit(1723357745.175:85): avc: denied { open } for pid=4806 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.638929][ T39] audit: type=1400 audit(1723357745.175:86): avc: denied { getattr } for pid=4806 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:3226' (ED25519) to the list of known hosts. [ 66.048370][ T39] audit: type=1400 audit(1723357746.625:87): avc: denied { name_bind } for pid=5314 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 68.790975][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 68.790989][ T39] audit: type=1400 audit(1723357749.365:90): avc: denied { mounton } for pid=5322 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.798747][ T5322] cgroup: Unknown subsys name 'net' [ 68.802445][ T39] audit: type=1400 audit(1723357749.375:91): avc: denied { mount } for pid=5322 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.820203][ T39] audit: type=1400 audit(1723357749.395:92): avc: denied { unmount } for pid=5322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.975404][ T5322] cgroup: Unknown subsys name 'rlimit' [ 69.136628][ T39] audit: type=1400 audit(1723357749.715:93): avc: denied { setattr } for pid=5322 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.146230][ T39] audit: type=1400 audit(1723357749.715:94): avc: denied { create } for pid=5322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.153900][ T39] audit: type=1400 audit(1723357749.715:95): avc: denied { write } for pid=5322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.162393][ T39] audit: type=1400 audit(1723357749.715:96): avc: denied { read } for pid=5322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.171134][ T39] audit: type=1400 audit(1723357749.725:97): avc: denied { mounton } for pid=5322 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.181778][ T39] audit: type=1400 audit(1723357749.725:98): avc: denied { mount } for pid=5322 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 69.191270][ T39] audit: type=1400 audit(1723357749.735:99): avc: denied { read } for pid=5044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 69.213577][ T5333] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 70.407178][ T5322] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.521741][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 75.521755][ T39] audit: type=1400 audit(1723357756.095:105): avc: denied { execmem } for pid=5339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.275068][ T39] audit: type=1400 audit(1723357756.845:106): avc: denied { mounton } for pid=5343 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 76.286788][ T39] audit: type=1400 audit(1723357756.855:107): avc: denied { mount } for pid=5343 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.297664][ T39] audit: type=1400 audit(1723357756.855:108): avc: denied { create } for pid=5343 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.307025][ T39] audit: type=1400 audit(1723357756.855:109): avc: denied { read write } for pid=5343 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.317947][ T39] audit: type=1400 audit(1723357756.855:110): avc: denied { open } for pid=5343 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.332026][ T5352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.332656][ T39] audit: type=1400 audit(1723357756.855:111): avc: denied { ioctl } for pid=5343 comm="syz-executor" path="socket:[6257]" dev="sockfs" ino=6257 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.337034][ T5352] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.346671][ T5353] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.351827][ T5352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.355227][ T5353] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.361216][ T5353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.361563][ T5352] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.365908][ T5353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.369375][ T5352] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.371623][ T5353] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.375243][ T5352] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.377611][ T5353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.381249][ T5352] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.389742][ T5360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.394503][ T5358] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.398430][ T39] audit: type=1400 audit(1723357756.975:112): avc: denied { read } for pid=5345 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.401115][ T5352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.407494][ T39] audit: type=1400 audit(1723357756.975:113): avc: denied { open } for pid=5345 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.407901][ T5350] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.410480][ T5352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.413833][ T5350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.414684][ T5350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.415073][ T5350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.420209][ T39] audit: type=1400 audit(1723357756.975:114): avc: denied { mounton } for pid=5345 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.429009][ T5352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.452499][ T5352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.462531][ T5352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.804346][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 76.822728][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 76.955817][ T5343] chnl_net:caif_netlink_parms(): no params data found [ 77.158758][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.162562][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.166496][ T5344] bridge_slave_0: entered allmulticast mode [ 77.170787][ T5344] bridge_slave_0: entered promiscuous mode [ 77.231582][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.235309][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.238822][ T5344] bridge_slave_1: entered allmulticast mode [ 77.243096][ T5344] bridge_slave_1: entered promiscuous mode [ 77.322101][ T5356] chnl_net:caif_netlink_parms(): no params data found [ 77.329417][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.334996][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.337598][ T5345] bridge_slave_0: entered allmulticast mode [ 77.340881][ T5345] bridge_slave_0: entered promiscuous mode [ 77.374946][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.415265][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.418678][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.422023][ T5343] bridge_slave_0: entered allmulticast mode [ 77.426370][ T5343] bridge_slave_0: entered promiscuous mode [ 77.432167][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.435817][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.440249][ T5343] bridge_slave_1: entered allmulticast mode [ 77.444313][ T5343] bridge_slave_1: entered promiscuous mode [ 77.447812][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.450705][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.453859][ T5345] bridge_slave_1: entered allmulticast mode [ 77.457798][ T5345] bridge_slave_1: entered promiscuous mode [ 77.490017][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.646868][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.681375][ T5344] team0: Port device team_slave_0 added [ 77.695128][ T5344] team0: Port device team_slave_1 added [ 77.724537][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.732516][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.740105][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.825597][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.828609][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.839757][ T5344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.922490][ T5345] team0: Port device team_slave_0 added [ 77.927812][ T5345] team0: Port device team_slave_1 added [ 77.953145][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.955707][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.965174][ T5344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.975431][ T5343] team0: Port device team_slave_0 added [ 78.065014][ T5343] team0: Port device team_slave_1 added [ 78.068112][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.071293][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.075111][ T5356] bridge_slave_0: entered allmulticast mode [ 78.079073][ T5356] bridge_slave_0: entered promiscuous mode [ 78.084272][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.087049][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.089689][ T5356] bridge_slave_1: entered allmulticast mode [ 78.094876][ T5356] bridge_slave_1: entered promiscuous mode [ 78.098246][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.100604][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.111326][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.118533][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.121579][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.133176][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.288967][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.292041][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.303116][ T5343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.339608][ T5356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.356434][ T5344] hsr_slave_0: entered promiscuous mode [ 78.361867][ T5344] hsr_slave_1: entered promiscuous mode [ 78.370280][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.373709][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.385041][ T5343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.393795][ T5356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.413348][ T5352] Bluetooth: hci2: command tx timeout [ 78.413442][ T5354] Bluetooth: hci1: command tx timeout [ 78.492582][ T5354] Bluetooth: hci0: command tx timeout [ 78.502494][ T5354] Bluetooth: hci3: command tx timeout [ 78.517477][ T5345] hsr_slave_0: entered promiscuous mode [ 78.521119][ T5345] hsr_slave_1: entered promiscuous mode [ 78.525111][ T5345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.528683][ T5345] Cannot create hsr debugfs directory [ 78.676037][ T5356] team0: Port device team_slave_0 added [ 78.681589][ T5356] team0: Port device team_slave_1 added [ 78.716431][ T5343] hsr_slave_0: entered promiscuous mode [ 78.719752][ T5343] hsr_slave_1: entered promiscuous mode [ 78.722768][ T5343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.725635][ T5343] Cannot create hsr debugfs directory [ 78.784850][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.787768][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.798108][ T5356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.847660][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.850444][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.860705][ T5356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.157462][ T5356] hsr_slave_0: entered promiscuous mode [ 79.160170][ T5356] hsr_slave_1: entered promiscuous mode [ 79.165471][ T5356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.168889][ T5356] Cannot create hsr debugfs directory [ 79.331096][ T5344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.339526][ T5344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.351420][ T5344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.384826][ T5344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.465445][ T5345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.481798][ T5345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.487910][ T5345] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.494230][ T5345] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.578729][ T5343] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.602964][ T5343] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.615211][ T5343] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.625673][ T5343] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.708618][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.729533][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.753806][ T5356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.763780][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.767436][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.777368][ T5356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.784431][ T5356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.791956][ T5356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.820176][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.823500][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.851689][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.867027][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.912024][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.915258][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.956094][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.958862][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.026113][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.138809][ T5343] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.154153][ T5356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.178952][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.182348][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.188118][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.191187][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.212734][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.237947][ T5356] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.274660][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.277720][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.300008][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.303319][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.356165][ T5344] veth0_vlan: entered promiscuous mode [ 80.361796][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.381074][ T5344] veth1_vlan: entered promiscuous mode [ 80.391768][ T5356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.445726][ T5345] veth0_vlan: entered promiscuous mode [ 80.463384][ T5345] veth1_vlan: entered promiscuous mode [ 80.469516][ T5344] veth0_macvtap: entered promiscuous mode [ 80.497303][ T5344] veth1_macvtap: entered promiscuous mode [ 80.502484][ T5354] Bluetooth: hci1: command tx timeout [ 80.502587][ T5352] Bluetooth: hci2: command tx timeout [ 80.513406][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.537317][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.565702][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.573121][ T5352] Bluetooth: hci3: command tx timeout [ 80.573424][ T5354] Bluetooth: hci0: command tx timeout [ 80.598760][ T5344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.617082][ T5344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.621062][ T5344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.627498][ T5344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.634352][ T5345] veth0_macvtap: entered promiscuous mode [ 80.671874][ T5345] veth1_macvtap: entered promiscuous mode [ 80.691807][ T5343] veth0_vlan: entered promiscuous mode [ 80.702999][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.718081][ T5343] veth1_vlan: entered promiscuous mode [ 80.735580][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.750166][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.757727][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.796048][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.801319][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.806890][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.827621][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.830273][ T5345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.831569][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.836245][ T5345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.841615][ T5345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.845330][ T5345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.897646][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.901251][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.908271][ T5356] veth0_vlan: entered promiscuous mode [ 80.926936][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 80.926963][ T39] audit: type=1400 audit(1723357761.495:117): avc: denied { mount } for pid=5344 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.935592][ T5343] veth0_macvtap: entered promiscuous mode [ 80.944992][ T39] audit: type=1400 audit(1723357761.495:118): avc: denied { mounton } for pid=5344 comm="syz-executor" path="/syzkaller.nE5WRc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.966505][ T5343] veth1_macvtap: entered promiscuous mode [ 80.975731][ T39] audit: type=1400 audit(1723357761.515:119): avc: denied { mount } for pid=5344 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.986673][ T39] audit: type=1400 audit(1723357761.515:120): avc: denied { unmount } for pid=5344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.996437][ T39] audit: type=1400 audit(1723357761.555:121): avc: denied { mounton } for pid=5344 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.997006][ T5356] veth1_vlan: entered promiscuous mode [ 81.007192][ T39] audit: type=1400 audit(1723357761.555:122): avc: denied { mount } for pid=5344 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.016103][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.024434][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.039813][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.044911][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.051987][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.085031][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.089402][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.094286][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.103260][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.110674][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.165037][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.168295][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.178254][ T5356] veth0_macvtap: entered promiscuous mode [ 81.201281][ T5343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.202033][ T39] audit: type=1400 audit(1723357761.775:123): avc: denied { read write } for pid=5344 comm="syz-executor" name="loop2" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.213491][ T5343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.213523][ T5343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.213548][ T5343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.234155][ T5356] veth1_macvtap: entered promiscuous mode [ 81.235740][ T39] audit: type=1400 audit(1723357761.775:124): avc: denied { open } for pid=5344 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.263645][ T39] audit: type=1400 audit(1723357761.775:125): avc: denied { ioctl } for pid=5344 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.273048][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.277256][ T39] audit: type=1400 audit(1723357761.815:126): avc: denied { prog_load } for pid=5407 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.281890][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.291002][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.298633][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.302921][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.308031][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.312151][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.317492][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.324108][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.330550][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.335839][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.340384][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.347485][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.351720][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.357087][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.363242][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.402059][ T5356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.408479][ T5356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.413325][ T5356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.417546][ T5356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.537127][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.551639][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.568878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.717355][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.721048][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.758055][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.763175][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.796433][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.810168][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.493599][ T5427] capability: warning: `syz.1.7' uses 32-bit capabilities (legacy support in use) [ 82.532931][ T5425] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.572748][ T5354] Bluetooth: hci2: command tx timeout [ 82.573346][ T5352] Bluetooth: hci1: command tx timeout [ 82.652646][ T5352] Bluetooth: hci0: command tx timeout [ 82.664458][ T5352] Bluetooth: hci3: command tx timeout [ 83.497051][ T5461] binder: BINDER_SET_CONTEXT_MGR already set [ 83.500150][ T5461] binder: 5459:5461 ioctl 4018620d 20000100 returned -16 [ 83.832421][ T56] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 84.032043][ T56] usb 5-1: device descriptor read/64, error -71 [ 84.164346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.322590][ T56] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 84.472348][ T56] usb 5-1: device descriptor read/64, error -71 [ 84.602709][ T56] usb usb5-port1: attempt power cycle [ 84.654482][ T5352] Bluetooth: hci1: command tx timeout [ 84.656688][ T5352] Bluetooth: hci2: command tx timeout [ 84.723152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.733576][ T5354] Bluetooth: hci3: command tx timeout [ 84.736609][ T5354] Bluetooth: hci0: command tx timeout [ 84.862488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.052365][ T56] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 85.074624][ T56] usb 5-1: device descriptor read/8, error -71 [ 85.322443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.372880][ T56] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 85.418074][ T56] usb 5-1: device descriptor read/8, error -71 [ 85.542682][ T56] usb usb5-port1: unable to enumerate USB device [ 86.334428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 86.489402][ T39] kauditd_printk_skb: 87 callbacks suppressed [ 86.489417][ T39] audit: type=1400 audit(1723357767.065:214): avc: denied { read } for pid=5486 comm="syz.0.26" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.511196][ T39] audit: type=1400 audit(1723357767.065:215): avc: denied { open } for pid=5486 comm="syz.0.26" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.656686][ T39] audit: type=1400 audit(1723357767.235:216): avc: denied { create } for pid=5486 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.676750][ T39] audit: type=1400 audit(1723357767.255:217): avc: denied { getopt } for pid=5486 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.782139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.884673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.921423][ T39] audit: type=1400 audit(1723357767.495:218): avc: denied { create } for pid=5501 comm="syz.1.28" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.973856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.987988][ T39] audit: type=1400 audit(1723357767.495:219): avc: denied { map } for pid=5501 comm="syz.1.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.000818][ T39] audit: type=1400 audit(1723357767.495:220): avc: denied { read write } for pid=5501 comm="syz.1.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.192379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 88.025953][ T39] audit: type=1400 audit(1723357768.605:221): avc: denied { create } for pid=5506 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.036991][ T39] audit: type=1400 audit(1723357768.605:222): avc: denied { setopt } for pid=5506 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.047689][ T39] audit: type=1400 audit(1723357768.605:223): avc: denied { write } for pid=5508 comm="syz.1.33" name="event0" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.095635][ T5511] tipc: Started in network mode [ 88.099081][ T5511] tipc: Node identity 4, cluster identity 4711 [ 88.101706][ T5511] tipc: Node number set to 4 [ 88.336772][ T5520] syz.3.39 uses obsolete (PF_INET,SOCK_PACKET) [ 88.877641][ T835] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 89.064044][ T835] usb 8-1: Using ep0 maxpacket: 32 [ 89.074108][ T835] usb 8-1: config 0 has an invalid interface number: 202 but max is 0 [ 89.078053][ T835] usb 8-1: config 0 has no interface number 0 [ 89.080714][ T835] usb 8-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 89.089769][ T835] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 89.094428][ T835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.098243][ T835] usb 8-1: Product: syz [ 89.101680][ T835] usb 8-1: Manufacturer: syz [ 89.106473][ T835] usb 8-1: SerialNumber: syz [ 89.112520][ T835] usb 8-1: config 0 descriptor?? [ 89.156922][ T835] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 89.327725][ T11] usb 8-1: Failed to submit usb control message: -71 [ 89.337179][ T835] usb 8-1: USB disconnect, device number 2 [ 89.344058][ T11] usb 8-1: unable to send the bmi data to the device: -71 [ 89.348074][ T11] usb 8-1: unable to get target info from device [ 89.351145][ T11] usb 8-1: could not get target info (-71) [ 89.357634][ T11] usb 8-1: could not probe fw (-71) [ 89.399409][ T1383] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.403161][ T1383] ieee802154 phy1 wpan1: encryption failed: -22 [ 90.362341][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 90.545564][ T58] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.555525][ T58] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.563982][ T5405] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 90.570210][ T58] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.576086][ T58] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 90.580431][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.588039][ T5535] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.742421][ T5405] usb 8-1: Using ep0 maxpacket: 16 [ 90.747702][ T5405] usb 8-1: config 0 has no interfaces? [ 90.753702][ T5405] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 90.757786][ T5405] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.761861][ T5405] usb 8-1: Product: syz [ 90.764114][ T5405] usb 8-1: Manufacturer: syz [ 90.766259][ T5405] usb 8-1: SerialNumber: syz [ 90.788716][ T5405] usb 8-1: config 0 descriptor?? [ 91.006304][ T795] usb 8-1: USB disconnect, device number 3 [ 91.587622][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 91.587637][ T39] audit: type=1400 audit(1723357772.165:237): avc: denied { bind } for pid=5538 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.601203][ T39] audit: type=1400 audit(1723357772.165:238): avc: denied { bind } for pid=5538 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.241195][ T58] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 92.263113][ T58] input: Aiptek as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:17.0/input/input5 [ 92.273646][ T39] audit: type=1400 audit(1723357772.855:239): avc: denied { read } for pid=4809 comm="acpid" name="mouse2" dev="devtmpfs" ino=2395 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.285857][ T39] audit: type=1400 audit(1723357772.855:240): avc: denied { open } for pid=4809 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2395 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.296642][ T39] audit: type=1400 audit(1723357772.855:241): avc: denied { ioctl } for pid=4809 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2395 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.333548][ T58] usb 6-1: USB disconnect, device number 2 [ 92.336190][ C3] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 92.930553][ T39] audit: type=1400 audit(1723357773.505:242): avc: denied { map } for pid=5543 comm="syz.1.47" path="socket:[7085]" dev="sockfs" ino=7085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 93.048577][ T39] audit: type=1400 audit(1723357773.625:243): avc: denied { read } for pid=5543 comm="syz.1.47" name="uhid" dev="devtmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.062551][ T39] audit: type=1400 audit(1723357773.635:244): avc: denied { open } for pid=5543 comm="syz.1.47" path="/dev/uhid" dev="devtmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.074579][ T39] audit: type=1400 audit(1723357773.655:245): avc: denied { create } for pid=5543 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.085892][ T39] audit: type=1400 audit(1723357773.655:246): avc: denied { write } for pid=5543 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.092509][ T5546] Zero length message leads to an empty skb [ 97.063966][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 97.063981][ T39] audit: type=1400 audit(1723357777.645:248): avc: denied { mount } for pid=5566 comm="syz.1.56" name="/" dev="ramfs" ino=7110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.091178][ T39] audit: type=1400 audit(1723357777.665:249): avc: denied { mounton } for pid=5566 comm="syz.1.56" path="/18/file0" dev="ramfs" ino=7110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 97.102754][ T5567] overlayfs: maximum fs stacking depth exceeded [ 97.108491][ T39] audit: type=1400 audit(1723357777.665:250): avc: denied { mount } for pid=5566 comm="syz.1.56" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.190166][ T39] audit: type=1400 audit(1723357777.765:251): avc: denied { unmount } for pid=5345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.585085][ T5354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.595454][ T5354] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.599549][ T5354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.604630][ T5354] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.638589][ T5354] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.642791][ T5354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.693452][ T39] audit: type=1400 audit(1723357778.275:252): avc: denied { mounton } for pid=5578 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 98.277681][ T5578] chnl_net:caif_netlink_parms(): no params data found [ 98.593152][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.597356][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.601576][ T5578] bridge_slave_0: entered allmulticast mode [ 98.614135][ T5578] bridge_slave_0: entered promiscuous mode [ 98.623866][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.627548][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.652544][ T5578] bridge_slave_1: entered allmulticast mode [ 98.658386][ T5578] bridge_slave_1: entered promiscuous mode [ 98.775698][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.783714][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.874814][ T5578] team0: Port device team_slave_0 added [ 98.881335][ T5578] team0: Port device team_slave_1 added [ 98.984004][ T5352] Bluetooth: hci0: unexpected subevent 0x01 length: 78 > 18 [ 99.002737][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.005843][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.028829][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.038089][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.041316][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.058023][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.258893][ T5578] hsr_slave_0: entered promiscuous mode [ 99.264250][ T5578] hsr_slave_1: entered promiscuous mode [ 99.267617][ T5578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.271031][ T5578] Cannot create hsr debugfs directory [ 99.292027][ T39] audit: type=1400 audit(1723357779.865:253): avc: denied { ioctl } for pid=5608 comm="syz.3.70" path="socket:[10276]" dev="sockfs" ino=10276 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.496290][ T5578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.609173][ T5578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.724568][ T5578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.756175][ T834] cfg80211: failed to load regulatory.db [ 99.782763][ T5354] Bluetooth: hci4: command tx timeout [ 99.847577][ T5578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.068652][ T5578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.084999][ T5578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.123565][ T5578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.137933][ T5578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.240555][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.267034][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.280572][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.283751][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.286378][ T5354] Bluetooth: hci0: unexpected subevent 0x01 length: 78 > 18 [ 100.341916][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.345662][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.638449][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.708278][ T5578] veth0_vlan: entered promiscuous mode [ 100.727521][ T5578] veth1_vlan: entered promiscuous mode [ 100.775417][ T5578] veth0_macvtap: entered promiscuous mode [ 100.782147][ T5578] veth1_macvtap: entered promiscuous mode [ 100.801337][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.807537][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.812836][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.822379][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.825946][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.831436][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.838024][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.843998][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.850179][ T39] audit: type=1400 audit(1723357781.425:254): avc: denied { setopt } for pid=5631 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.861765][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.879804][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.887754][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.888345][ T39] audit: type=1400 audit(1723357781.465:255): avc: denied { bind } for pid=5631 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.892769][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.892783][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.892791][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.892802][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.892812][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.892823][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.894690][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.945349][ T5578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.949640][ T5578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.956187][ T5578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.960217][ T5578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.086005][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.089572][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.124341][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.127712][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.144185][ T39] audit: type=1400 audit(1723357781.725:256): avc: denied { mount } for pid=5578 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.448890][ T5352] Bluetooth: hci2: unexpected subevent 0x01 length: 78 > 18 [ 101.682666][ T39] audit: type=1400 audit(1723357782.255:257): avc: denied { setopt } for pid=5654 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.853313][ T5354] Bluetooth: hci4: command tx timeout [ 102.443640][ T5354] Bluetooth: hci0: unexpected subevent 0x01 length: 78 > 18 [ 102.545895][ T39] audit: type=1400 audit(1723357783.125:258): avc: denied { write } for pid=5669 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.566341][ T39] audit: type=1400 audit(1723357783.125:259): avc: denied { connect } for pid=5669 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.584660][ T39] audit: type=1400 audit(1723357783.125:260): avc: denied { name_connect } for pid=5669 comm="syz.3.94" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 102.650962][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 103.932358][ T5352] Bluetooth: hci4: command tx timeout [ 106.013758][ T5352] Bluetooth: hci4: command tx timeout [ 106.994983][ T39] audit: type=1400 audit(1723357787.575:261): avc: denied { read } for pid=5698 comm="syz.3.106" path="socket:[11413]" dev="sockfs" ino=11413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.105118][ T39] audit: type=1400 audit(1723357787.685:262): avc: denied { write } for pid=5698 comm="syz.3.106" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.224262][ T5707] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.224773][ T39] audit: type=1400 audit(1723357787.805:263): avc: denied { create } for pid=5706 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.247789][ T39] audit: type=1400 audit(1723357787.805:264): avc: denied { setopt } for pid=5706 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.256821][ T39] audit: type=1400 audit(1723357787.815:265): avc: denied { bind } for pid=5706 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.898221][ T39] audit: type=1400 audit(1723357788.475:266): avc: denied { bind } for pid=5712 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.916673][ T5713] Bluetooth: MGMT ver 1.23 [ 107.919931][ T39] audit: type=1400 audit(1723357788.495:267): avc: denied { write } for pid=5712 comm="syz.3.110" path="socket:[10746]" dev="sockfs" ino=10746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.257662][ T5354] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.264276][ T5354] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.268789][ T5354] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.288978][ T5354] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.302609][ T5354] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.317705][ T5354] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.880355][ T39] audit: type=1400 audit(1723357789.455:268): avc: denied { create } for pid=5730 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.897830][ T39] audit: type=1400 audit(1723357789.475:269): avc: denied { write } for pid=5730 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.084541][ T5732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.199671][ T5721] chnl_net:caif_netlink_parms(): no params data found [ 109.289557][ T39] audit: type=1400 audit(1723357789.865:270): avc: denied { write } for pid=5738 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.828594][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.831731][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.835476][ T5721] bridge_slave_0: entered allmulticast mode [ 109.839269][ T5721] bridge_slave_0: entered promiscuous mode [ 109.845716][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.850465][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.857874][ T5721] bridge_slave_1: entered allmulticast mode [ 109.862725][ T5721] bridge_slave_1: entered promiscuous mode [ 109.905129][ T39] audit: type=1400 audit(1723357790.485:271): avc: denied { bind } for pid=5749 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.929183][ T39] audit: type=1400 audit(1723357790.485:272): avc: denied { name_bind } for pid=5749 comm="syz.0.122" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.939947][ T39] audit: type=1400 audit(1723357790.485:273): avc: denied { node_bind } for pid=5749 comm="syz.0.122" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 109.970039][ T39] audit: type=1400 audit(1723357790.545:274): avc: denied { create } for pid=5749 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.985570][ T39] audit: type=1400 audit(1723357790.545:275): avc: denied { write } for pid=5749 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.111849][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.136454][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.293056][ T5721] team0: Port device team_slave_0 added [ 110.298366][ T5721] team0: Port device team_slave_1 added [ 110.331829][ T5761] warning: `syz.2.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.414637][ T5354] Bluetooth: hci5: command tx timeout [ 110.525383][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.529119][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.543314][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.548610][ T5763] netlink: 'syz.2.127': attribute type 10 has an invalid length. [ 110.598691][ T5763] batman_adv: batadv0: Adding interface: team0 [ 110.601778][ T5763] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.611846][ T5763] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 110.615923][ T5764] netlink: 'syz.2.127': attribute type 10 has an invalid length. [ 110.623549][ T5764] netlink: 2 bytes leftover after parsing attributes in process `syz.2.127'. [ 110.629067][ T5764] team0: entered promiscuous mode [ 110.632906][ T5764] team_slave_0: entered promiscuous mode [ 110.636782][ T5764] team_slave_1: entered promiscuous mode [ 110.643421][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.652925][ T5764] batman_adv: batadv0: Interface activated: team0 [ 110.655729][ T5764] batman_adv: batadv0: Interface deactivated: team0 [ 110.658746][ T5764] batman_adv: batadv0: Removing interface: team0 [ 110.670389][ T5764] bridge0: port 3(team0) entered blocking state [ 110.673777][ T5764] bridge0: port 3(team0) entered disabled state [ 110.680468][ T5764] team0: entered allmulticast mode [ 110.689220][ T5764] team_slave_0: entered allmulticast mode [ 110.691956][ T5764] team_slave_1: entered allmulticast mode [ 110.703339][ T5764] bridge0: port 3(team0) entered blocking state [ 110.706783][ T5764] bridge0: port 3(team0) entered forwarding state [ 110.711348][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.714159][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.725012][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.947395][ T5721] hsr_slave_0: entered promiscuous mode [ 110.973544][ T5721] hsr_slave_1: entered promiscuous mode [ 110.978911][ T5721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.982456][ T5721] Cannot create hsr debugfs directory [ 111.558785][ T5765] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 111.939440][ T5721] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.016324][ T5721] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.229197][ T5721] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.395384][ T5721] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.493540][ T5354] Bluetooth: hci5: command tx timeout [ 112.496741][ T5792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.136'. [ 112.562531][ T5792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.136'. [ 112.704931][ T5721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.767712][ T5721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.808783][ T5721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.833861][ T5721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.032764][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.097278][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.118592][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.122349][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.172029][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.176980][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.227115][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 113.227129][ T39] audit: type=1400 audit(1723357793.805:278): avc: denied { create } for pid=5809 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.255496][ T39] audit: type=1400 audit(1723357793.835:279): avc: denied { setopt } for pid=5809 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.306868][ T39] audit: type=1400 audit(1723357793.885:280): avc: denied { mounton } for pid=5811 comm="syz.3.143" path="/48/file0" dev="ramfs" ino=10915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 113.387926][ T5721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.392368][ T5721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.618831][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.668721][ T39] audit: type=1400 audit(1723357794.245:281): avc: denied { create } for pid=5814 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.692166][ T39] audit: type=1400 audit(1723357794.245:282): avc: denied { listen } for pid=5814 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.727579][ T5721] veth0_vlan: entered promiscuous mode [ 113.738770][ T5721] veth1_vlan: entered promiscuous mode [ 113.804814][ T5721] veth0_macvtap: entered promiscuous mode [ 113.835963][ T5721] veth1_macvtap: entered promiscuous mode [ 113.916765][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.948818][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.980416][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.005055][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.010080][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.015308][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.049585][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.054927][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.075800][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.081919][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.111161][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.158106][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.167346][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.174954][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.179815][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.189107][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.197272][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.201905][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.211465][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.217465][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.221993][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.230711][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.242814][ T5721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.247941][ T5721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.254145][ T5721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.258455][ T5721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.556231][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.570912][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.585693][ T5354] Bluetooth: hci5: command tx timeout [ 114.671262][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.676018][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.097790][ T5847] fuse: Bad value for 'fd' [ 115.116226][ T39] audit: type=1400 audit(1723357795.675:283): avc: denied { mounton } for pid=5842 comm="syz.0.151" path="/23/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.664176][ T5858] overlayfs: overlapping lowerdir path [ 115.677515][ T5858] overlayfs: overlapping lowerdir path [ 115.689836][ T5858] overlayfs: overlapping lowerdir path [ 115.798498][ T39] audit: type=1400 audit(1723357796.375:284): avc: denied { wake_alarm } for pid=5859 comm="syz.2.157" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.952809][ T39] audit: type=1400 audit(1723357796.525:285): avc: denied { ioctl } for pid=5861 comm="syz.2.158" path="socket:[12091]" dev="sockfs" ino=12091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.981508][ T5862] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 116.652424][ T5354] Bluetooth: hci5: command tx timeout [ 117.493858][ T39] audit: type=1400 audit(1723357798.075:286): avc: denied { read } for pid=5874 comm="syz.3.164" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.514157][ T39] audit: type=1400 audit(1723357798.075:287): avc: denied { open } for pid=5874 comm="syz.3.164" path="/dev/sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.754808][ T5880] overlayfs: overlapping lowerdir path [ 117.790768][ T5880] overlayfs: overlapping lowerdir path [ 117.807050][ T5880] overlayfs: overlapping lowerdir path [ 117.998487][ T5889] ptrace attach of "/syz-executor exec"[5721] was attempted by "/syz-executor exec"[5889] [ 118.444794][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 118.444808][ T39] audit: type=1400 audit(1723357799.025:291): avc: denied { execute } for pid=5904 comm="syz.3.177" path="/59/blkio.bfq.sectors_recursive" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.545928][ T39] audit: type=1400 audit(1723357799.115:292): avc: denied { ioctl } for pid=5909 comm="syz.3.180" path="/dev/vhost-net" dev="devtmpfs" ino=1117 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 118.551847][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 118.602045][ T39] audit: type=1400 audit(1723357799.175:293): avc: denied { read write } for pid=5906 comm="syz.1.176" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.616310][ T39] audit: type=1400 audit(1723357799.175:294): avc: denied { open } for pid=5906 comm="syz.1.176" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.627757][ T39] audit: type=1400 audit(1723357799.175:295): avc: denied { map } for pid=5906 comm="syz.1.176" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.656602][ T39] audit: type=1400 audit(1723357799.175:296): avc: denied { execute } for pid=5906 comm="syz.1.176" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.871827][ T5918] loop7: detected capacity change from 0 to 16384 [ 118.952372][ T5918] loop7: detected capacity change from 16384 to 16320 [ 119.064409][ T39] audit: type=1400 audit(1723357799.635:297): avc: denied { read } for pid=5916 comm="syz.3.182" name="card0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.065052][ T5928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5928 comm=syz.1.185 [ 119.076448][ T39] audit: type=1400 audit(1723357799.655:298): avc: denied { open } for pid=5916 comm="syz.3.182" path="/dev/dri/card0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.092334][ T5928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=5928 comm=syz.1.185 [ 119.131022][ T39] audit: type=1400 audit(1723357799.675:299): avc: denied { ioctl } for pid=5916 comm="syz.3.182" path="/dev/dri/card0" dev="devtmpfs" ino=637 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.285691][ T39] audit: type=1400 audit(1723357799.765:300): avc: denied { create } for pid=5935 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.675838][ T5236] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 121.098999][ T5236] usb 8-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=2b.e7 [ 121.104967][ T5236] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.109382][ T5236] usb 8-1: Product: syz [ 121.111223][ T5236] usb 8-1: Manufacturer: syz [ 121.128380][ T5236] usb 8-1: SerialNumber: syz [ 121.155145][ T5236] usb 8-1: config 0 descriptor?? [ 121.192369][ T5236] hub 8-1:0.0: bad descriptor, ignoring hub [ 121.197168][ T5236] hub 8-1:0.0: probe with driver hub failed with error -5 [ 121.206956][ T5236] mct_u232 8-1:0.0: MCT U232 converter detected [ 121.211439][ T5236] mct_u232 ttyUSB0: expected endpoint missing [ 121.602885][ T8] usb 8-1: USB disconnect, device number 4 [ 121.679552][ T8] mct_u232 8-1:0.0: device disconnected [ 123.480519][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 123.480611][ T39] audit: type=1400 audit(1723357804.055:306): avc: denied { create } for pid=5998 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 123.493233][ T39] audit: type=1400 audit(1723357804.055:307): avc: denied { map } for pid=5998 comm="syz.2.207" path="socket:[11244]" dev="sockfs" ino=11244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.505198][ T39] audit: type=1400 audit(1723357804.055:308): avc: denied { read accept } for pid=5998 comm="syz.2.207" path="socket:[11244]" dev="sockfs" ino=11244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.519005][ T39] audit: type=1400 audit(1723357804.055:309): avc: denied { write } for pid=5998 comm="syz.2.207" path="socket:[11243]" dev="sockfs" ino=11243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 125.079133][ T39] audit: type=1400 audit(1723357805.655:310): avc: denied { accept } for pid=6020 comm="syz.3.217" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.614010][ T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 125.802347][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 125.807754][ T25] usb 8-1: config 0 has no interfaces? [ 125.822402][ T25] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 125.825909][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.841704][ T25] usb 8-1: Product: syz [ 125.843596][ T25] usb 8-1: Manufacturer: syz [ 125.845636][ T25] usb 8-1: SerialNumber: syz [ 125.865370][ T25] usb 8-1: config 0 descriptor?? [ 126.073087][ T25] usb 8-1: USB disconnect, device number 5 [ 126.696942][ T6035] netlink: 68 bytes leftover after parsing attributes in process `syz.2.224'. [ 126.700689][ T39] audit: type=1400 audit(1723357807.275:311): avc: denied { write } for pid=6034 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.727612][ T39] audit: type=1400 audit(1723357807.275:312): avc: denied { nlmsg_write } for pid=6034 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.880415][ T39] audit: type=1400 audit(1723357809.455:313): avc: denied { getopt } for pid=6061 comm="syz.3.234" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.997633][ T39] audit: type=1400 audit(1723357809.575:314): avc: denied { bind } for pid=6064 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.015699][ T39] audit: type=1400 audit(1723357809.595:315): avc: denied { connect } for pid=6064 comm="syz.3.236" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.276095][ T39] audit: type=1400 audit(1723357811.855:316): avc: denied { write } for pid=6090 comm="syz.0.245" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.302501][ T835] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 131.314924][ T39] audit: type=1400 audit(1723357811.895:317): avc: denied { connect } for pid=6090 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.371428][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.377080][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.380500][ T6093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.495936][ T835] usb 6-1: Using ep0 maxpacket: 32 [ 131.500681][ T835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.512858][ T835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.522457][ T835] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.530267][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.542151][ T835] usb 6-1: config 0 descriptor?? [ 131.566397][ T835] hub 6-1:0.0: USB hub found [ 131.705967][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 131.766447][ T39] audit: type=1400 audit(1723357812.345:318): avc: denied { write } for pid=6096 comm="syz.3.248" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.788835][ T6083] ptrace attach of "/syz-executor exec"[5721] was attempted by "/syz-executor exec"[6083] [ 131.790325][ T6097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.843166][ T39] audit: type=1400 audit(1723357812.415:319): avc: denied { lock } for pid=6082 comm="syz.1.243" path="socket:[12548]" dev="sockfs" ino=12548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 132.585950][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.602191][ T6105] bridge_slave_0: left allmulticast mode [ 132.607074][ T6105] bridge_slave_0: left promiscuous mode [ 132.609381][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.977681][ T6123] ptrace attach of "/syz-executor exec"[5578] was attempted by "/syz-executor exec"[6123] [ 134.050722][ T835] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 134.058754][ T835] usbhid 6-1:0.0: can't add hid device: -71 [ 134.061636][ T835] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 134.102778][ T835] usb 6-1: USB disconnect, device number 3 [ 134.611142][ T39] audit: type=1400 audit(1723357815.196:320): avc: denied { setopt } for pid=6128 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.582783][ T5405] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.776126][ T5405] usb 5-1: Using ep0 maxpacket: 8 [ 135.780723][ T5405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.789482][ T5405] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 135.793830][ T5405] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 135.797209][ T5405] usb 5-1: Manufacturer: syz [ 135.800973][ T5405] usb 5-1: config 0 descriptor?? [ 135.808675][ T5405] appledisplay 5-1:0.0: Could not find int-in endpoint [ 135.813471][ T5405] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 135.943888][ T39] audit: type=1400 audit(1723357816.516:321): avc: denied { listen } for pid=6150 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.077784][ T795] usb 5-1: USB disconnect, device number 6 [ 137.005118][ T6156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28432 sclass=netlink_route_socket pid=6156 comm=syz.1.266 [ 137.550364][ T6171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.273'. [ 137.555783][ T6171] netlink: 43 bytes leftover after parsing attributes in process `syz.0.273'. [ 137.559699][ T6171] netlink: 'syz.0.273': attribute type 5 has an invalid length. [ 137.565072][ T6171] netlink: 43 bytes leftover after parsing attributes in process `syz.0.273'. [ 138.752383][ T835] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 138.932617][ T835] usb 6-1: Using ep0 maxpacket: 8 [ 138.938328][ T835] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 138.944166][ T835] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 138.950415][ T835] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.959422][ T835] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 138.965462][ T835] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 138.971526][ T835] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.979166][ T5406] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 138.986090][ T835] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 138.992700][ T835] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 138.998064][ T835] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.011640][ T835] usb 6-1: string descriptor 0 read error: -22 [ 139.015369][ T835] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 139.019687][ T835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.044318][ T835] adutux 6-1:168.0: interrupt endpoints not found [ 139.165605][ T5406] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.173052][ T5406] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.178286][ T5406] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 139.184725][ T5406] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.199955][ T5406] usb 8-1: config 0 descriptor?? [ 139.316028][ T795] usb 6-1: USB disconnect, device number 4 [ 139.627917][ T5406] hid (null): bogus close delimiter [ 139.814627][ T6206] overlayfs: overlapping lowerdir path [ 139.820194][ T6206] overlayfs: overlapping lowerdir path [ 139.827467][ T5406] usb 8-1: language id specifier not provided by device, defaulting to English [ 139.832439][ T6206] overlayfs: overlapping lowerdir path [ 139.974345][ T6209] ------------[ cut here ]------------ [ 139.977987][ T6209] kernel BUG at drivers/android/binder.c:1173! [ 139.983214][ T6209] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 139.988433][ T6209] CPU: 3 UID: 0 PID: 6209 Comm: syz.2.288 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 139.992982][ T6209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 139.997715][ T6209] RIP: 0010:binder_inc_ref_for_node+0x1051/0x11f0 [ 140.016805][ T6209] Code: f9 e9 2c f3 ff ff 48 8b 7c 24 10 e8 99 d2 47 f9 e9 30 fe ff ff 48 8b 7c 24 60 e8 ba d2 47 f9 e9 ae fc ff ff e8 e0 9c ea f8 90 <0f> 0b e8 68 d3 47 f9 e9 15 fb ff ff 4c 89 e7 e8 3b d2 47 f9 e9 32 [ 140.039447][ T6209] RSP: 0018:ffffc90003dff920 EFLAGS: 00010283 [ 140.042086][ T6209] RAX: 0000000000001986 RBX: ffff888053b00810 RCX: ffffc900034d1000 [ 140.045474][ T6209] RDX: 0000000000040000 RSI: ffffffff889fded0 RDI: 0000000000000004 [ 140.058714][ T6209] RBP: ffffc90003dff9b0 R08: 0000000000000004 R09: 0000000000000000 [ 140.063166][ T6209] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888047697a00 [ 140.068406][ T6209] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 140.072789][ T6209] FS: 00007fad05ebb6c0(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 140.077380][ T6209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.079933][ T39] audit: type=1400 audit(1723357820.546:322): avc: denied { map } for pid=6208 comm="syz.2.288" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.080727][ T6209] CR2: 000000110c334086 CR3: 000000002327c000 CR4: 0000000000350ef0 [ 140.096467][ T6209] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.100459][ T6209] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.104573][ T6209] Call Trace: [ 140.106011][ T6209] [ 140.107501][ T6209] ? show_regs+0x8c/0xa0 [ 140.109692][ T6209] ? die+0x36/0xa0 [ 140.111391][ T6209] ? do_trap+0x232/0x430 [ 140.113023][ T6209] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 140.115299][ T6209] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 140.118196][ T6209] ? do_error_trap+0xf4/0x230 [ 140.120498][ T6209] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 140.123187][ T6209] ? handle_invalid_op+0x34/0x40 [ 140.125454][ T6209] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 140.128057][ T6209] ? exc_invalid_op+0x2e/0x50 [ 140.130692][ T6209] ? asm_exc_invalid_op+0x1a/0x20 [ 140.133567][ T6209] ? binder_inc_ref_for_node+0x1050/0x11f0 [ 140.136830][ T6209] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 140.140190][ T6209] ? __pfx___might_resched+0x10/0x10 [ 140.143167][ T6209] binder_thread_write+0x248d/0x3ac0 [ 140.146079][ T6209] ? __pfx_binder_thread_write+0x10/0x10 [ 140.149266][ T6209] ? find_held_lock+0x2d/0x110 [ 140.153307][ T6209] ? __might_fault+0x13b/0x190 [ 140.156024][ T6209] ? binder_debug+0xdf/0x1b0 [ 140.158616][ T6209] ? __pfx_binder_debug+0x10/0x10 [ 140.161163][ T6209] ? __might_fault+0xe3/0x190 [ 140.163476][ T6209] binder_ioctl+0x2250/0x6b10 [ 140.165600][ T6209] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.168529][ T6209] ? do_vfs_ioctl+0x515/0x1ad0 [ 140.171177][ T6209] ? __pfx_binder_ioctl+0x10/0x10 [ 140.174012][ T6209] ? ioctl_has_perm.constprop.0.isra.0+0x2f0/0x470 [ 140.177569][ T6209] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 140.181229][ T6209] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 140.185038][ T6209] ? selinux_file_ioctl+0x180/0x270 [ 140.187815][ T6209] ? selinux_file_ioctl+0xb4/0x270 [ 140.190402][ T6209] ? __pfx_binder_ioctl+0x10/0x10 [ 140.193025][ T6209] __x64_sys_ioctl+0x193/0x220 [ 140.195631][ T6209] do_syscall_64+0xcd/0x250 [ 140.198207][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.201486][ T6209] RIP: 0033:0x7fad051779f9 [ 140.203835][ T6209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.212913][ T6209] RSP: 002b:00007fad05ebb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.216925][ T6209] RAX: ffffffffffffffda RBX: 00007fad05305f80 RCX: 00007fad051779f9 [ 140.221242][ T6209] RDX: 00000000200003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 140.225654][ T6209] RBP: 00007fad051e58ee R08: 0000000000000000 R09: 0000000000000000 [ 140.229948][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.234307][ T6209] R13: 0000000000000000 R14: 00007fad05305f80 R15: 00007fff7689f448 [ 140.238306][ T6209] [ 140.240022][ T6209] Modules linked in: [ 140.243477][ T6209] ---[ end trace 0000000000000000 ]--- [ 140.246349][ T6209] RIP: 0010:binder_inc_ref_for_node+0x1051/0x11f0 [ 140.250268][ T6209] Code: f9 e9 2c f3 ff ff 48 8b 7c 24 10 e8 99 d2 47 f9 e9 30 fe ff ff 48 8b 7c 24 60 e8 ba d2 47 f9 e9 ae fc ff ff e8 e0 9c ea f8 90 <0f> 0b e8 68 d3 47 f9 e9 15 fb ff ff 4c 89 e7 e8 3b d2 47 f9 e9 32 [ 140.252370][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.262827][ T6209] RSP: 0018:ffffc90003dff920 EFLAGS: 00010283 [ 140.267625][ T6209] RAX: 0000000000001986 RBX: ffff888053b00810 RCX: ffffc900034d1000 [ 140.272894][ T6209] RDX: 0000000000040000 RSI: ffffffff889fded0 RDI: 0000000000000004 [ 140.273988][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.277104][ T6209] RBP: ffffc90003dff9b0 R08: 0000000000000004 R09: 0000000000000000 [ 140.283352][ T6209] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888047697a00 [ 140.287116][ T6209] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 140.291811][ T6209] FS: 00007fad05ebb6c0(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 140.296405][ T6209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.300658][ T6209] CR2: 000000110c334086 CR3: 000000002327c000 CR4: 0000000000350ef0 [ 140.304753][ T6209] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.309513][ T6209] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.313421][ T6209] Kernel panic - not syncing: Fatal exception [ 140.317041][ T6209] Kernel Offset: disabled [ 140.318921][ T6209] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:30:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000538959 RBX=0000000000000000 RCX=ffffffff8b120709 RDX=0000000000000000 RSI=ffffffff8b4cc500 RDI=ffffffff8bb08f00 RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed100d606fd9 R10=ffff88806b037ecb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff9012d898 R15=0000000000000000 RIP=ffffffff8b121aff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c355658 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056442f90b490 000056442f8cb6b0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccbec8de0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccbec8380 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d4385058e297ef73 7373253238be4249 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737372a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6575712f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6575712f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 000065756575712f 32706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000331 0000323030302e44 3630303a43363532 3a333030302f302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264b3e3b263d3e3b 263c3e3b263e3e3b 26393e3b26383e3b 263b3e3b263a3e3b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 260a0a0a0a0a3a38 375b4f59410a007d 6c7966263a672632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88806b12d2e0 RCX=ffffffff88112edf RDX=1ffff1100d625a74 RSI=ffffffff8bb08e80 RDI=ffffffff8bb08ec0 RBP=1ffff92000030fb0 RSP=ffffc90000187d40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=ffff88806b12d3a0 R14=ffffffff9012d898 R15=0000000000000001 RIP=ffffffff817bc2c2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000203a1000 CR3=000000004567e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056442f905210 000056442f8f47b0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccbec8d60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccbec8380 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d4385058e297ef73 7373253238be4249 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737372a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f32706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003275 70632f302f716d2f 32706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000331 0000323030302e44 3630303a43363532 3a333030302f302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264b3e3b263d3e3b 263c3e3b263e3e3b 26393e3b26383e3b 263b3e3b263a3e3b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 260a0a0a0a0a3a38 375b4f59410a007d 6c7966263a672632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000000008 RBX=ffffc9000332f148 RCX=0000000000000001 RDX=0000000000000005 RSI=ffffffff8b49d6c0 RDI=0000000000000005 RBP=ffffffff8b49d6c0 RSP=ffffc9000332f098 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000002 R11=0000000000000000 R12=0000000000000005 R13=0000000000000015 R14=ffffffff90afa3c2 R15=ffffc9000332f17d RIP=ffffffff818a7ecf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc5e50e650 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2956d66a3 00007fb2956d66a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5e510850 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555901c04a8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555901cd4a0 00005555901cd2e0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555901d05f4 00005555901d05f0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000031333335 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0030010001b8803 03ffffffff041af8 0303ffffffff041a e8030010001ad803 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010a800418838388 8208000100000608 06060109f003ffff ffff040ad0030010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000ac0030010000a b0030010001b8803 03ffffffff041af8 0303ffffffff041a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e8030010001ad803 0010001ac8030008 001ac0030008001a b8030208001ab003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008001aa8030010 001a98030008001a 90030208001a8803 0884c38ca208001a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 626c74656e206220 3034303839323539 6666666666666666 0a38312e79656b5f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3038393235396666 6666666666660a36 7670695f6665645f 6873686d6f645f6c ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666666660a347670 695f6665645f6873 686d6f645f6c626c 74656e2062203038 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3932353966666666 666666660a646573 756e755f6c617672 65746e695f746572 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3932353966666666 666666660a736761 72665f6e6170776f 6c20622030616261 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030636361393235 3966666666666666 660a312e79656b5f 5f20622030386361 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b5f5f2062203030 6461393235396666 6666666666660a32 2e79656b5f5f2062 info registers vcpu 3 CPU#3 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe6265 RDI=ffffffff9519f6a0 RBP=ffffffff9519f660 RSP=ffffc90003dff300 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000064 R14=ffffffff84fe6200 R15=0000000000000000 RIP=ffffffff84fe628f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fad05ebb6c0 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c334086 CR3=000000002327c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffced2bcc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bfc1e66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bfc1e66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bfc1e66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bfc1e66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bfc1e6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bfc1e6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000