last executing test programs: 4.120415697s ago: executing program 3 (id=856): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/206, 0xce}], 0x1, 0x0, 0x0) 3.950856375s ago: executing program 1 (id=864): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 3.879261181s ago: executing program 1 (id=865): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="580000001500add417283b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000c73ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000a349a901088bf86de20d02669c03dfa12b82bbcec505a5c667504b69b487", 0x76}], 0x1) 3.305819319s ago: executing program 1 (id=874): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000010300000000000000000000010000021c00138006000240000600000600014000000000060001408100000044000f8008000940000000043800028006000340000000002c000180140003002001000000000000000000000000000014000400200100000000000000000000000000021400138006000240001200000600024000ff0000"], 0x88}}, 0x4) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x90) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x3) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe02}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000380)={'vcan0\x00'}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000cc0)={0x24, &(0x7f0000000b00)={0x40, 0x1, 0x10, {0x10, 0x10, "39ce6439f4cb2fb4d11525b29da0"}}, &(0x7f0000000b40)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "8b90a94589fe11f5090446964ca1a0f0ef83a5b1ff40df87377318e65315ce326d9dddb78edccf9c3a48e79552f12fea532cda2cba04aa57dbf6f156d32f53c27f04812e00d2e5764cf0631624e562eac0dc13c7aef152fc84f33502bcf839f187c9d3dcf756ffeb7157c3"}}, 0x0, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x8b}}}, &(0x7f0000000f40)={0x2c, 0x0, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e80), &(0x7f0000000f00)={0x20, 0x3, 0x1}}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) r2 = io_uring_setup(0x7d5, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 2.806263298s ago: executing program 0 (id=875): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0x0, 0x4, "01faf9"}) 2.806199212s ago: executing program 0 (id=876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.739837535s ago: executing program 3 (id=877): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000200), 0x4) 2.73873565s ago: executing program 0 (id=878): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) 2.711043168s ago: executing program 3 (id=880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x140}}, 0x0) 2.660498244s ago: executing program 0 (id=881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x17) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80000000}) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002100010000000000000000000a00000000000000f8ffa43d06347e4a00000000"], 0x24}}, 0x0) r4 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}, 0x1, 0x8}, 0x0) 2.660182674s ago: executing program 3 (id=882): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000000340)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xe8}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$packet(r5, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) dup2(r8, r9) setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f00000002c0), 0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x38, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xffffff1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x38}}, 0x0) 2.4905535s ago: executing program 1 (id=886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) 1.769894743s ago: executing program 3 (id=888): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000340)=""/135) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/439], 0x80}, 0x1, 0x7}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x79, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000100)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x50, 0x0}}], 0x414, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4140aecd, &(0x7f0000000040)) socket$kcm(0x11, 0x2, 0x0) 1.76806634s ago: executing program 1 (id=897): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000010300000000000000000000010000021c00138006000240000600000600014000000000060001408100000044000f8008000940000000043800028006000340000000002c000180140003002001000000000000000000000000000014000400200100000000000000000000000000021400138006000240001200000600024000ff0000"], 0x88}}, 0x4) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x90) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x3) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe02}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000cc0)={0x24, &(0x7f0000000b00)={0x40, 0x1, 0x10, {0x10, 0x10, "39ce6439f4cb2fb4d11525b29da0"}}, &(0x7f0000000b40)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "8b90a94589fe11f5090446964ca1a0f0ef83a5b1ff40df87377318e65315ce326d9dddb78edccf9c3a48e79552f12fea532cda2cba04aa57dbf6f156d32f53c27f04812e00d2e5764cf0631624e562eac0dc13c7aef152fc84f33502bcf839f187c9d3dcf756ffeb7157c3"}}, 0x0, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x8b}}}, &(0x7f0000000f40)={0x2c, 0x0, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e80), &(0x7f0000000f00)={0x20, 0x3, 0x1}}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.219923296s ago: executing program 0 (id=895): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) semget(0x3, 0x2, 0x284) semctl$IPC_RMID(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) utimes(&(0x7f0000000400)='./bus\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs, 0x0, 0x80400) recvmsg$unix(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f00000002c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000900)=""/245, 0xf5}], 0x4, &(0x7f00000006c0)=[@cred={{0x1c}}], 0x20}, 0x10000) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.oom.group\x00', 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000500)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 1.219843759s ago: executing program 2 (id=896): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.160989045s ago: executing program 2 (id=898): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = syz_io_uring_setup(0x12fd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000240)) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r6) io_uring_enter(r5, 0x49f7, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x320e, &(0x7f0000000280), &(0x7f0000000180), &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000400)={0x20000004}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) execveat(r9, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 590.038188ms ago: executing program 1 (id=899): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000010300000000000000000000010000021c00138006000240000600000600014000000000060001408100000044000f8008000940000000043800028006000340000000002c000180140003002001000000000000000000000000000014000400200100000000000000000000000000021400138006000240001200000600024000ff0000"], 0x88}}, 0x4) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x90) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x3) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000380)={'vcan0\x00'}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000cc0)={0x24, &(0x7f0000000b00)={0x40, 0x1, 0x10, {0x10, 0x10, "39ce6439f4cb2fb4d11525b29da0"}}, &(0x7f0000000b40)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "8b90a94589fe11f5090446964ca1a0f0ef83a5b1ff40df87377318e65315ce326d9dddb78edccf9c3a48e79552f12fea532cda2cba04aa57dbf6f156d32f53c27f04812e00d2e5764cf0631624e562eac0dc13c7aef152fc84f33502bcf839f187c9d3dcf756ffeb7157c3"}}, 0x0, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x8b}}}, &(0x7f0000000f40)={0x2c, 0x0, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e80), &(0x7f0000000f00)={0x20, 0x3, 0x1}}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) r3 = io_uring_setup(0x7d5, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 389.002141ms ago: executing program 3 (id=900): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"a0453822", 0x0, 0x6, 0x1, 0x0, 0x0, "33793e77c734c4df2a87ba315ab8da", "000100", "00007f10", "8606ba80", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1"]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) gettid() futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x800000000006, 0x0, 0x0, 0x0, 0x1000002) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000180)={"9bc378b2", 0x0, 0x0, 0x0, 0x0, 0x0, "30bea7a84ff0ffa1fa1a9399bcabb5", "e1de8f9b", "5496ca6d", "89d9cbc3", ["f0375d9e332c6776f9563670", "f46ff00fbf11c5a7f541ad56", "e635be89c0404e4322b14adc", "ddd0e7cde6659cd2091cf65f"]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="05000000010001", 0x7) 211.054383ms ago: executing program 2 (id=901): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a3000000000080041"], 0x38}}, 0x0) 131.190317ms ago: executing program 2 (id=902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) 130.845596ms ago: executing program 2 (id=903): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0xd0, 0x348, 0x348, 0xd0, 0xd0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xc8}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'vcan0\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'wlan1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [], [], 'ip6tnl0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@empty, @mcast2, [], [], 'pim6reg0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 60.170939ms ago: executing program 2 (id=904): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 0s ago: executing program 0 (id=905): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = epoll_create1(0x0) syz_io_uring_setup(0x12fd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r7) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r4}) r8 = syz_io_uring_setup(0x320e, &(0x7f0000000280), &(0x7f0000000180), &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000400)={0x20000004}) r10 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) execveat(r10, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): using dummy_hcd [ 118.649534][ T25] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 118.651833][ T25] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 118.658534][ T25] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 118.663377][ T25] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 118.670323][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 118.674346][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 118.678867][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.686127][ T25] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 118.689399][ T25] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 118.691334][ T25] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 118.693729][ T25] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 118.701358][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 118.709638][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 118.713573][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.718266][ T25] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 118.720639][ T25] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 118.723113][ T25] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 118.727173][ T25] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 118.734965][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 118.739508][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 118.743837][ T25] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.759789][ T25] usb 5-1: string descriptor 0 read error: -22 [ 118.761473][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 118.763674][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.789835][ T6521] batadv_slave_1: left promiscuous mode [ 118.794882][ T25] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 119.108582][ T6541] hub 9-0:1.0: USB hub found [ 119.110215][ T6541] hub 9-0:1.0: 1 port detected [ 119.251794][ T6544] netlink: 'syz.1.278': attribute type 4 has an invalid length. [ 119.274815][ T6544] netlink: 'syz.1.278': attribute type 4 has an invalid length. [ 120.352522][ T6568] overlayfs: missing 'lowerdir' [ 120.492307][ T6558] block nbd2: shutting down sockets [ 120.720121][ T6575] fuseblk: Unknown parameter 'appraise_type' [ 121.439815][ T59] usb 5-1: USB disconnect, device number 9 [ 121.619676][ T6585] ip6gretap0 speed is unknown, defaulting to 1000 [ 122.738931][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.257083][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 123.257330][ T39] audit: type=1400 audit(1726243786.267:761): avc: denied { setopt } for pid=6622 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.267077][ T39] audit: type=1400 audit(1726243786.267:762): avc: denied { bind } for pid=6622 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.268858][ T6624] PKCS8: Unsupported PKCS#8 version [ 123.353654][ T39] audit: type=1400 audit(1726243786.367:763): avc: denied { write } for pid=6622 comm="syz.0.295" path="socket:[12154]" dev="sockfs" ino=12154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.611056][ T39] audit: type=1400 audit(1726243786.607:764): avc: denied { write } for pid=6626 comm="syz.2.296" name="nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 123.618044][ T39] audit: type=1400 audit(1726243786.607:765): avc: denied { open } for pid=6626 comm="syz.2.296" path="/dev/nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 123.638537][ T39] audit: type=1400 audit(1726243786.627:766): avc: denied { bind } for pid=6626 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.645575][ T39] audit: type=1400 audit(1726243786.627:767): avc: denied { node_bind } for pid=6626 comm="syz.2.296" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 123.699690][ T39] audit: type=1400 audit(1726243786.717:768): avc: denied { ioctl } for pid=6627 comm="syz.3.297" path="/dev/uinput" dev="devtmpfs" ino=866 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.728577][ T6632] input: syz0 as /devices/virtual/input/input10 [ 123.775931][ T6634] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 123.789665][ T6634] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 123.811348][ T39] audit: type=1400 audit(1726243786.807:769): avc: denied { read } for pid=4814 comm="acpid" name="event4" dev="devtmpfs" ino=2730 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.916061][ T6632] dccp_invalid_packet: invalid packet type [ 123.918659][ T5398] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 123.923184][ T39] audit: type=1400 audit(1726243786.807:770): avc: denied { open } for pid=4814 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2730 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.120567][ T5398] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 124.123697][ T5398] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 124.126443][ T5398] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 124.131704][ T5398] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 124.135440][ T5398] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 124.138057][ T5398] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 124.139025][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 124.142221][ T5398] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.149676][ T5398] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 124.152483][ T5398] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 124.154900][ T5398] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 124.158898][ T5398] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 124.162547][ T5398] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 124.165375][ T5398] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 124.168429][ T5398] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.175679][ T5398] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 124.178939][ T5398] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 124.181700][ T5398] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 124.184422][ T5398] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 124.187514][ T5398] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 124.190704][ T5398] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 124.194601][ T5398] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.202462][ T5398] usb 6-1: string descriptor 0 read error: -22 [ 124.204674][ T5398] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 124.207044][ T5398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.221907][ T5398] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 124.262560][ T6639] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 124.264346][ T6639] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.267131][ T6639] vhci_hcd vhci_hcd.0: Device attached [ 124.275580][ T6640] vhci_hcd: connection closed [ 124.276743][ T45] vhci_hcd: stop threads [ 124.280619][ T45] vhci_hcd: release socket [ 124.282254][ T45] vhci_hcd: disconnect device [ 124.506245][ T6642] hub 9-0:1.0: USB hub found [ 124.508462][ T6642] hub 9-0:1.0: 1 port detected [ 124.659331][ T6644] netlink: 'syz.2.301': attribute type 7 has an invalid length. [ 124.661917][ T6644] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.301'. [ 124.676041][ T6644] netlink: 'syz.2.301': attribute type 3 has an invalid length. [ 124.678135][ T6644] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.301'. [ 125.310387][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1 [ 125.317454][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.324254][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.329193][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.333757][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.336538][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2 [ 125.339719][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.342399][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.346112][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.454463][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.468300][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.485727][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.515467][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.540436][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.545814][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.556654][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.568806][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.577703][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.602494][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.616802][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.625679][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.729483][ T6658] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 125.823951][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.826727][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.829326][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.832000][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.834312][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.836436][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.839068][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.841255][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.843320][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.845663][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.847649][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.849806][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.852571][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.854569][ T1995] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.873308][ T1995] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 126.949079][ T59] usb 6-1: USB disconnect, device number 11 [ 126.998339][ T1995] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 127.186037][ T1995] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.189390][ T1995] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 127.192779][ T1995] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.195490][ T1995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.210192][ T1995] usb 7-1: config 0 descriptor?? [ 127.246180][ T1995] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 127.489838][ T6669] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=775 (12400 ns) > initial count (11120 ns). Using initial count to start timer. [ 127.578293][ T1995] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 127.595988][ T5345] Bluetooth: hci3: link tx timeout [ 127.598832][ T5345] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.603437][ T4767] Bluetooth: hci3: link tx timeout [ 127.605164][ T4767] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.607784][ T4767] Bluetooth: hci3: link tx timeout [ 127.609633][ T4767] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.611801][ T4767] Bluetooth: hci3: link tx timeout [ 127.613476][ T4767] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.616317][ T4767] Bluetooth: hci3: link tx timeout [ 127.618242][ T4767] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.620849][ T4767] Bluetooth: hci3: link tx timeout [ 127.622567][ T4767] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.758408][ T1995] usb 6-1: Using ep0 maxpacket: 8 [ 127.764808][ T1995] usb 6-1: config 0 has an invalid interface number: 224 but max is 0 [ 127.768617][ T1995] usb 6-1: config 0 has no interface number 0 [ 127.770942][ T1995] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 127.774235][ T1995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.784861][ T1995] usb 6-1: config 0 descriptor?? [ 128.733063][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.313'. [ 128.761523][ T6705] sp0: Synchronizing with TNC [ 129.069347][ T1290] usb 7-1: USB disconnect, device number 9 [ 129.426694][ T57] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.561868][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 129.618892][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 129.630264][ T57] usb 5-1: config 0 has no interfaces? [ 129.641790][ T57] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 129.645619][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.650829][ T57] usb 5-1: Product: syz [ 129.652962][ T57] usb 5-1: Manufacturer: syz [ 129.655469][ T57] usb 5-1: SerialNumber: syz [ 129.670813][ T57] usb 5-1: config 0 descriptor?? [ 129.691040][ T4767] Bluetooth: hci3: command 0x0405 tx timeout [ 129.918965][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 129.918979][ T39] audit: type=1400 audit(1726243793.942:779): avc: denied { unmount } for pid=5341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 130.020796][ T6722] mac80211_hwsim hwsim3 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 130.145247][ T1995] usb 6-1: USB disconnect, device number 12 [ 130.199060][ T39] audit: type=1400 audit(1726243794.222:780): avc: denied { create } for pid=6726 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 130.248881][ T39] audit: type=1400 audit(1726243794.272:781): avc: denied { watch_reads } for pid=6726 comm="syz.1.319" path="/proc/261" dev="proc" ino=13933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 130.309586][ T39] audit: type=1400 audit(1726243794.332:782): avc: denied { mount } for pid=6726 comm="syz.1.319" name="/" dev="rpc_pipefs" ino=13935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 130.319532][ T6727] tmpfs: Bad value for 'mpol' [ 131.448290][ T1995] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 131.649761][ T1995] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.652797][ T1995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 131.655677][ T1995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.658872][ T1995] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.662084][ T1995] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.664449][ T1995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.668136][ T1995] usb 7-1: config 0 descriptor?? [ 131.671082][ T6736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.698179][ C0] sched: RT throttling activated [ 131.768090][ T39] audit: type=1400 audit(1726243795.782:783): avc: denied { create } for pid=6729 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.077376][ T5345] block nbd1: Receive control failed (result -32) [ 132.086694][ T6737] block nbd1: shutting down sockets [ 132.098789][ T1995] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 132.101630][ T1995] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 132.104433][ T1995] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 132.106801][ T1995] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 132.109444][ T1995] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 132.111926][ T1995] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 132.120807][ T1995] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 132.192237][ T39] audit: type=1400 audit(1726243796.212:784): avc: denied { setopt } for pid=6739 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.547935][ T10] usb 5-1: USB disconnect, device number 10 [ 132.558823][ T39] audit: type=1400 audit(1726243796.572:785): avc: denied { read } for pid=6735 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.882113][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883949][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.077400][ T6748] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 133.285028][ T39] audit: type=1400 audit(1726243797.302:786): avc: denied { bind } for pid=6751 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.306122][ T39] audit: type=1400 audit(1726243797.302:787): avc: denied { write } for pid=6751 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.339263][ T6753] PKCS8: Unsupported PKCS#8 version [ 133.676521][ T6760] binder: 6759:6760 ioctl c00c620f 20000340 returned -22 [ 133.678352][ T39] audit: type=1400 audit(1726243797.692:788): avc: denied { ioctl } for pid=6759 comm="syz.3.326" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.694152][ T6760] veth0_vlan: entered allmulticast mode [ 133.733136][ T6760] veth0_vlan: left promiscuous mode [ 133.735865][ T6760] veth0_vlan: entered promiscuous mode [ 134.139117][ T6767] 9pnet_fd: Insufficient options for proto=fd [ 134.147577][ T6767] Error parsing options; rc = [-22] [ 134.194990][ T5395] usb 7-1: USB disconnect, device number 10 [ 134.240483][ T6769] Bluetooth: MGMT ver 1.23 [ 134.490295][ T6779] binder_alloc: 6775: binder_alloc_buf, no vma [ 134.494468][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.943273][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 134.943284][ T39] audit: type=1400 audit(1726243798.962:797): avc: denied { ioctl } for pid=6781 comm="syz.0.333" path="socket:[13310]" dev="sockfs" ino=13310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.952419][ T39] audit: type=1400 audit(1726243798.972:798): avc: denied { bind } for pid=6781 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.963695][ T39] audit: type=1400 audit(1726243798.982:799): avc: denied { connect } for pid=6781 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.971738][ T39] audit: type=1400 audit(1726243798.992:800): avc: denied { write } for pid=6781 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.775371][ T39] audit: type=1400 audit(1726243799.792:801): avc: denied { ioctl } for pid=6795 comm="syz.1.337" path="/dev/nullb0" dev="devtmpfs" ino=693 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.929057][ T39] audit: type=1326 audit(1726243799.952:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.1.338" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f669877def9 code=0x0 [ 136.078604][ T4767] Bluetooth: hci3: command 0x0405 tx timeout [ 136.088963][ T39] audit: type=1400 audit(1726243800.112:803): avc: denied { ioctl } for pid=6803 comm="syz.2.339" path="socket:[15370]" dev="sockfs" ino=15370 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.221397][ C3] vxcan0: j1939_tp_rxtimer: 0xffff8881068acc00: rx timeout, send abort [ 136.358295][ T59] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 136.548253][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 136.552174][ T59] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.555737][ T59] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.559801][ T59] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.563340][ T59] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.567986][ T59] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.571272][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.725829][ C3] vxcan0: j1939_tp_rxtimer: 0xffff8881068acc00: abort rx timeout. Force session deactivation [ 136.795601][ T39] audit: type=1400 audit(1726243800.812:804): avc: denied { read write } for pid=6807 comm="syz.0.342" name="loop-control" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.807803][ T39] audit: type=1400 audit(1726243800.812:805): avc: denied { ioctl open } for pid=6807 comm="syz.0.342" path="/dev/loop-control" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.812658][ T59] usb 7-1: GET_CAPABILITIES returned 0 [ 136.817510][ T59] usbtmc 7-1:16.0: can't read capabilities [ 136.926402][ T6811] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 136.930148][ T6811] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 136.934884][ T39] audit: type=1400 audit(1726243800.822:806): avc: denied { setopt } for pid=6809 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.016675][ T1290] usb 7-1: USB disconnect, device number 11 [ 138.162235][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.248464][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 138.253407][ T6832] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 138.478751][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.482146][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.493248][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.498654][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.514302][ T6828] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.529930][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.658392][ T6835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.346'. [ 138.972013][ T5395] usb 8-1: USB disconnect, device number 8 [ 140.262777][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 140.262817][ T39] audit: type=1400 audit(1726243804.282:821): avc: denied { unmount } for pid=5346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 140.307534][ T6860] ip6gretap0 speed is unknown, defaulting to 1000 [ 140.734608][ T1213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.748643][ T5395] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 140.864049][ T1213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.941348][ T39] audit: type=1400 audit(1726243804.962:822): avc: denied { execute } for pid=6865 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 140.949350][ T39] audit: type=1400 audit(1726243804.962:823): avc: denied { execute_no_trans } for pid=6865 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 140.954569][ T1213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.998577][ T5395] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.006999][ T5395] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.030496][ T5395] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 141.038527][ T5395] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 141.045180][ T5395] usb 5-1: Manufacturer: syz [ 141.058068][ T5395] usb 5-1: config 0 descriptor?? [ 141.167232][ T39] audit: type=1400 audit(1726243805.122:824): avc: denied { read } for pid=6866 comm="syz.2.356" path="socket:[14133]" dev="sockfs" ino=14133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.268715][ T1213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.320931][ T39] audit: type=1400 audit(1726243805.342:825): avc: denied { setopt } for pid=6866 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.362131][ T39] audit: type=1400 audit(1726243805.382:826): avc: denied { connect } for pid=6856 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.370306][ T39] audit: type=1400 audit(1726243805.392:827): avc: denied { ioctl } for pid=6856 comm="syz.0.351" path="socket:[14687]" dev="sockfs" ino=14687 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.543307][ T39] audit: type=1400 audit(1726243805.562:828): avc: denied { mounton } for pid=6875 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 141.558298][ T39] audit: type=1400 audit(1726243805.562:829): avc: denied { read } for pid=6875 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 141.560772][ T5345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.565691][ T39] audit: type=1400 audit(1726243805.562:830): avc: denied { open } for pid=6875 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 141.572129][ T5345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.579214][ T5345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.582767][ T5345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.585276][ T5345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 141.587447][ T5345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.706879][ T6875] ip6gretap0 speed is unknown, defaulting to 1000 [ 141.837087][ T1213] bridge_slave_1: left allmulticast mode [ 141.839280][ T1213] bridge_slave_1: left promiscuous mode [ 141.842843][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.888645][ T1213] bridge_slave_0: left allmulticast mode [ 141.890149][ T1213] bridge_slave_0: left promiscuous mode [ 141.891801][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.389155][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.397850][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.410745][ T1213] bond0 (unregistering): Released all slaves [ 142.731126][ T6894] binder: 6890:6894 ioctl c0306201 0 returned -14 [ 142.935824][ T6875] chnl_net:caif_netlink_parms(): no params data found [ 142.977827][ T1213] hsr_slave_0: left promiscuous mode [ 142.985028][ T1213] hsr_slave_1: left promiscuous mode [ 142.989365][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.992192][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.998866][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.001776][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.064212][ T1213] veth1_macvtap: left promiscuous mode [ 143.066559][ T1213] veth0_macvtap: left promiscuous mode [ 143.069075][ T1213] veth1_vlan: left promiscuous mode [ 143.071026][ T1213] veth0_vlan: left promiscuous mode [ 143.185688][ T10] usb 5-1: USB disconnect, device number 11 [ 143.599730][ T4767] Bluetooth: hci3: command tx timeout [ 144.405758][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 144.500569][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 145.240615][ T6926] netlink: 36 bytes leftover after parsing attributes in process `syz.3.365'. [ 145.251658][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.253885][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.256428][ T6875] bridge_slave_0: entered allmulticast mode [ 145.264330][ T6875] bridge_slave_0: entered promiscuous mode [ 145.270371][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.273005][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.275595][ T6875] bridge_slave_1: entered allmulticast mode [ 145.280438][ T6875] bridge_slave_1: entered promiscuous mode [ 145.336785][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.345815][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.435788][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 145.435800][ T39] audit: type=1400 audit(1726243809.452:835): avc: denied { write } for pid=6933 comm="syz.0.366" name="/" dev="9p" ino=36186022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.440761][ T6875] team0: Port device team_slave_0 added [ 145.443780][ T39] audit: type=1400 audit(1726243809.452:836): avc: denied { add_name } for pid=6933 comm="syz.0.366" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.451601][ T39] audit: type=1400 audit(1726243809.452:837): avc: denied { create } for pid=6933 comm="syz.0.366" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.458065][ T39] audit: type=1400 audit(1726243809.452:838): avc: denied { associate } for pid=6933 comm="syz.0.366" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 145.470427][ T6875] team0: Port device team_slave_1 added [ 145.478539][ T39] audit: type=1400 audit(1726243809.472:839): avc: denied { read write open } for pid=6933 comm="syz.0.366" path="/92/file0/bus" dev="9p" ino=36186039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.490422][ T39] audit: type=1400 audit(1726243809.512:840): avc: denied { map } for pid=6933 comm="syz.0.366" path="/92/file0/bus" dev="9p" ino=36186039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.498372][ T39] audit: type=1400 audit(1726243809.512:841): avc: denied { execute } for pid=6933 comm="syz.0.366" path="/92/file0/bus" dev="9p" ino=36186039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.506735][ T6934] netfs: Couldn't get user pages (rc=-14) [ 145.537786][ T39] audit: type=1400 audit(1726243809.552:842): avc: denied { write } for pid=6933 comm="syz.0.366" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.537936][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.538971][ T6934] random: crng reseeded on system resumption [ 145.547248][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.554309][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.555765][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.559838][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.568792][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.578392][ T5225] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 145.633537][ T6875] hsr_slave_0: entered promiscuous mode [ 145.636390][ T6875] hsr_slave_1: entered promiscuous mode [ 145.638964][ T6875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.641002][ T6875] Cannot create hsr debugfs directory [ 145.678609][ T4767] Bluetooth: hci3: command tx timeout [ 145.754096][ T5345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.759363][ T39] audit: type=1400 audit(1726243809.772:843): avc: denied { ioctl } for pid=6933 comm="syz.0.366" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.759836][ T6934] Restarting kernel threads ... done. [ 145.769076][ T5345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.772384][ T5345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.779478][ T5345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.780466][ T5225] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.784598][ T5225] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.788138][ T5345] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.791619][ T5225] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.793737][ T5345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.794030][ T5225] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.794043][ T5225] usb 8-1: SerialNumber: syz [ 145.837326][ T1213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.897386][ T6947] ip6gretap0 speed is unknown, defaulting to 1000 [ 145.938617][ T1213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.046909][ T5225] usb 8-1: 0:2 : does not exist [ 146.048383][ T5225] usb 8-1: unit 5 not found! [ 146.064180][ T5225] usb 8-1: USB disconnect, device number 9 [ 146.074181][ T1213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.083569][ T6947] chnl_net:caif_netlink_parms(): no params data found [ 146.100073][ T5350] udevd[5350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.177752][ T1213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.260710][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.262627][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.264543][ T6947] bridge_slave_0: entered allmulticast mode [ 146.266914][ T6947] bridge_slave_0: entered promiscuous mode [ 146.270370][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.272290][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.274256][ T6947] bridge_slave_1: entered allmulticast mode [ 146.276632][ T6947] bridge_slave_1: entered promiscuous mode [ 146.360418][ T6947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.364970][ T6947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.439496][ T39] audit: type=1400 audit(1726243810.462:844): avc: denied { unmount } for pid=5333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 146.445216][ T6875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.461582][ T6875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.473476][ T6947] team0: Port device team_slave_0 added [ 146.483079][ T6947] team0: Port device team_slave_1 added [ 146.487896][ T6875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.494682][ T6875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.518825][ T1213] bridge_slave_1: left allmulticast mode [ 146.520373][ T1213] bridge_slave_1: left promiscuous mode [ 146.521931][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.526673][ T1213] bridge_slave_0: left allmulticast mode [ 146.529431][ T1213] bridge_slave_0: left promiscuous mode [ 146.531003][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.819358][ T6973] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 146.821992][ T6973] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 146.837098][ T6973] vhci_hcd vhci_hcd.0: Device attached [ 147.038613][ T1995] vhci_hcd: vhci_device speed not set [ 147.115562][ T1995] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 147.260629][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.272861][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.277457][ T6977] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 147.280872][ T6977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 147.287732][ T1213] bond0 (unregistering): Released all slaves [ 147.363352][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.365151][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.373239][ T6947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.442921][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.445090][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.459137][ T6947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.581751][ T6947] hsr_slave_0: entered promiscuous mode [ 147.585001][ T6947] hsr_slave_1: entered promiscuous mode [ 147.587005][ T6947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.591273][ T6947] Cannot create hsr debugfs directory [ 147.758216][ T4767] Bluetooth: hci3: command tx timeout [ 147.770059][ T6974] vhci_hcd: connection reset by peer [ 147.772425][ T45] vhci_hcd: stop threads [ 147.773591][ T45] vhci_hcd: release socket [ 147.779846][ T45] vhci_hcd: disconnect device [ 147.890759][ T4767] Bluetooth: hci2: command tx timeout [ 147.937976][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.007680][ T6875] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.017512][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.019869][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.026151][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.028057][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.070451][ T1213] hsr_slave_0: left promiscuous mode [ 148.075195][ T1213] hsr_slave_1: left promiscuous mode [ 148.080959][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.083257][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.087581][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.092399][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.144429][ T1213] veth1_macvtap: left promiscuous mode [ 148.146449][ T1213] veth0_macvtap: left promiscuous mode [ 148.148893][ T1213] veth1_vlan: left promiscuous mode [ 148.150737][ T1213] veth0_vlan: left promiscuous mode [ 149.037752][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 149.113493][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 149.775377][ T7012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.777530][ T7012] IPv6: NLM_F_CREATE should be set when creating new route [ 149.849230][ T4767] Bluetooth: hci3: command tx timeout [ 149.914042][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.918250][ T4767] Bluetooth: hci2: command tx timeout [ 149.949070][ T6875] veth0_vlan: entered promiscuous mode [ 149.957635][ T6875] veth1_vlan: entered promiscuous mode [ 149.991110][ T6875] veth0_macvtap: entered promiscuous mode [ 150.010876][ T6875] veth1_macvtap: entered promiscuous mode [ 150.052724][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.055467][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.059366][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.070810][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.073538][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.076041][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.079194][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.083438][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.087274][ T6875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.096357][ T6875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.099164][ T6875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.101456][ T6875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.161852][ T6947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.166061][ T6947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.174949][ T6947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.179305][ T6947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.263306][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.269484][ T1213] IPVS: stop unused estimator thread 0... [ 150.270492][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.296598][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.301645][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.375397][ T6947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.420601][ T6947] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.431054][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.433654][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.443308][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.446038][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.519577][ T6947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.522549][ T6947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.593714][ T7046] Process accounting resumed [ 150.708695][ T6947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.759690][ T6947] veth0_vlan: entered promiscuous mode [ 150.759848][ T7054] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 150.769219][ T6947] veth1_vlan: entered promiscuous mode [ 150.775174][ T7053] syz.0.377[7053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.775271][ T7053] syz.0.377[7053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.827774][ T6947] veth0_macvtap: entered promiscuous mode [ 150.839283][ T6947] veth1_macvtap: entered promiscuous mode [ 150.851248][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.854010][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.856659][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.860367][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.864020][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.870797][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.873557][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.876130][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.879344][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.882008][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.885075][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.891703][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.901838][ T6947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.904190][ T6947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.906486][ T6947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.909133][ T6947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.123690][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.136525][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.139642][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.142460][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.998296][ T4767] Bluetooth: hci2: command tx timeout [ 152.239187][ T1995] vhci_hcd: vhci_device speed not set [ 152.338631][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.381'. [ 152.353697][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 152.353707][ T39] audit: type=1400 audit(1726243816.372:854): avc: denied { write } for pid=7084 comm="syz.3.381" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 153.265371][ T7101] can0: slcan on ttyprintk. [ 153.357828][ T7104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 153.832210][ T7095] can0 (unregistered): slcan off ttyprintk. [ 154.088573][ T4767] Bluetooth: hci2: command tx timeout [ 154.249909][ T39] audit: type=1400 audit(1726243818.262:855): avc: denied { read } for pid=7123 comm="syz.3.389" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 154.261441][ T39] audit: type=1400 audit(1726243818.262:856): avc: denied { open } for pid=7123 comm="syz.3.389" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 154.275877][ T39] audit: type=1400 audit(1726243818.272:857): avc: denied { ioctl } for pid=7123 comm="syz.3.389" path="socket:[17633]" dev="sockfs" ino=17633 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.418969][ T6152] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.647403][ T6152] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.683332][ T6152] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.685934][ T6152] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.691274][ T6152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.699529][ T7119] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.703405][ T6152] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.930975][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 155.062672][ T7134] netlink: 'syz.0.387': attribute type 10 has an invalid length. [ 155.065623][ T7134] netlink: 2 bytes leftover after parsing attributes in process `syz.0.387'. [ 155.494411][ T39] audit: type=1400 audit(1726243819.512:858): avc: denied { read } for pid=7139 comm="syz.2.392" name="nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 155.538329][ T39] audit: type=1400 audit(1726243819.512:859): avc: denied { ioctl } for pid=7139 comm="syz.2.392" path="/dev/nvram" dev="devtmpfs" ino=633 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 155.830627][ T10] usb 5-1: USB disconnect, device number 12 [ 156.202723][ T39] audit: type=1400 audit(1726243820.222:860): avc: denied { mounton } for pid=7147 comm="syz.1.393" path="/6/file0/bus" dev="cgroup" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 156.203289][ T7151] overlayfs: failed to resolve './file1': -2 [ 156.336701][ T7159] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 156.386538][ T39] audit: type=1400 audit(1726243820.402:861): avc: denied { read } for pid=7154 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.866244][ T39] audit: type=1400 audit(1726243820.882:862): avc: denied { shutdown } for pid=7166 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.958469][ T5345] Bluetooth: hci3: command 0x206a tx timeout [ 156.962374][ T4767] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 157.190028][ T7178] netlink: 'syz.3.398': attribute type 4 has an invalid length. [ 157.194518][ T7177] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 157.230515][ T7178] netlink: 'syz.3.398': attribute type 4 has an invalid length. [ 157.329974][ T1290] IPVS: starting estimator thread 0... [ 157.344551][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 157.355737][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.360322][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.382256][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.385855][ T7180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.389533][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.392113][ T7180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.421036][ T7180] team0: Port device bridge0 added [ 157.421748][ T39] audit: type=1400 audit(1726243821.442:863): avc: denied { create } for pid=7179 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 157.458275][ T7181] IPVS: using max 33 ests per chain, 79200 per kthread [ 157.690313][ T39] audit: type=1326 audit(1726243821.712:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.2.402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 157.705729][ T39] audit: type=1326 audit(1726243821.712:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.2.402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 157.718574][ T39] audit: type=1326 audit(1726243821.732:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.2.402" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 157.738018][ T39] audit: type=1326 audit(1726243821.732:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.2.402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 157.771335][ T39] audit: type=1326 audit(1726243821.732:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.2.402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 157.782653][ T7186] netlink: 'syz.1.401': attribute type 4 has an invalid length. [ 157.798300][ T39] audit: type=1326 audit(1726243821.752:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.2.402" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 157.807476][ T39] audit: type=1326 audit(1726243821.752:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.2.402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 157.816550][ T39] audit: type=1326 audit(1726243821.752:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.2.402" exe="/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 157.824083][ T39] audit: type=1326 audit(1726243821.752:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.2.402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 157.834388][ T7186] netlink: 'syz.1.401': attribute type 4 has an invalid length. [ 158.180095][ T7192] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.377424][ T7200] binder: 7199:7200 ioctl c0306201 0 returned -14 [ 158.413162][ T7202] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 159.099724][ T7211] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 159.370291][ T7201] dccp_close: ABORT with 32 bytes unread [ 160.175080][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 160.318264][ T4767] Bluetooth: hci2: command 0x0405 tx timeout [ 160.938623][ T7248] syzkaller1: entered promiscuous mode [ 160.940230][ T7248] syzkaller1: entered allmulticast mode [ 160.953503][ T7248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.413'. [ 161.148862][ T4767] Bluetooth: hci0: command tx timeout [ 162.592685][ T7265] 9pnet_fd: Insufficient options for proto=fd [ 162.878865][ T39] kauditd_printk_skb: 82 callbacks suppressed [ 162.878907][ T39] audit: type=1326 audit(1726243826.902:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7253 comm="syz.0.415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258797def9 code=0x7fc00000 [ 163.590696][ T39] audit: type=1400 audit(1726243827.612:956): avc: denied { execute } for pid=7282 comm="syz.3.421" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.807098][ T7294] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.423' sets config #1 [ 165.802340][ T7307] overlayfs: failed to resolve './file1': -2 [ 165.861695][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 166.158926][ T39] audit: type=1400 audit(1726243830.172:957): avc: denied { ioctl } for pid=7313 comm="syz.0.428" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.243062][ T39] audit: type=1400 audit(1726243830.262:958): avc: denied { watch watch_reads } for pid=7311 comm="syz.1.427" path="pipe:[15420]" dev="pipefs" ino=15420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 166.584725][ T7325] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 262395 (only 8 groups) [ 166.626198][ T39] audit: type=1400 audit(1726243830.642:959): avc: denied { write } for pid=7324 comm="syz.3.430" name="task" dev="proc" ino=19657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 166.638477][ T39] audit: type=1400 audit(1726243830.642:960): avc: denied { add_name } for pid=7324 comm="syz.3.430" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 166.646913][ T39] audit: type=1400 audit(1726243830.642:961): avc: denied { create } for pid=7324 comm="syz.3.430" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 166.653821][ T39] audit: type=1400 audit(1726243830.652:962): avc: denied { associate } for pid=7324 comm="syz.3.430" name="cpu.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 166.713363][ T7327] team0: Port device team_slave_0 removed [ 166.716458][ T7327] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 167.255256][ T39] audit: type=1400 audit(1726243831.272:963): avc: denied { connect } for pid=7339 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.506976][ T39] audit: type=1400 audit(1726243831.522:964): avc: denied { append } for pid=7347 comm="syz.2.436" path="/15/file0/io.stat" dev="9p" ino=36186040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.665133][ T39] audit: type=1400 audit(1726243832.682:965): avc: denied { mounton } for pid=7347 comm="syz.2.436" path="/15/file0/file0" dev="9p" ino=36186025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.743909][ T7348] overlay: ./bus is not a directory [ 168.879217][ T7348] overlay: Unknown parameter '/!/µo¥O&AØ°' [ 168.910856][ T7367] Bluetooth: MGMT ver 1.23 [ 169.075064][ T39] audit: type=1400 audit(1726243833.092:966): avc: denied { connect } for pid=7372 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 169.136105][ T39] audit: type=1400 audit(1726243833.152:967): avc: denied { getopt } for pid=7372 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.219166][ T7377] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 170.204726][ T7397] 9pnet_fd: p9_fd_create_tcp (7397): problem connecting socket to 127.0.0.1 [ 170.291301][ T39] audit: type=1400 audit(1726243834.312:968): avc: denied { create } for pid=7392 comm="syz.2.445" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 170.855761][ T7407] tipc: Started in network mode [ 170.857276][ T7407] tipc: Node identity 101, cluster identity 4711 [ 170.865724][ T7407] tipc: Node number set to 257 [ 170.883720][ T7407] netlink: 236 bytes leftover after parsing attributes in process `syz.1.447'. [ 170.886241][ T7407] netlink: 236 bytes leftover after parsing attributes in process `syz.1.447'. [ 171.482125][ T39] audit: type=1326 audit(1726243835.502:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 171.494964][ T39] audit: type=1326 audit(1726243835.512:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 171.505757][ T39] audit: type=1326 audit(1726243835.512:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.449" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 171.517406][ T39] audit: type=1326 audit(1726243835.512:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 171.532253][ T39] audit: type=1326 audit(1726243835.512:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 171.541695][ T39] audit: type=1326 audit(1726243835.512:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.449" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c7577def9 code=0x7ffc0000 [ 171.602608][ T7418] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.251213][ T7434] tipc: Started in network mode [ 172.252844][ T7434] tipc: Node identity ac1414aa, cluster identity 4711 [ 172.259445][ T7434] tipc: Enabled bearer , priority 10 [ 173.111347][ T7454] 9pnet_fd: p9_fd_create_tcp (7454): problem connecting socket to 127.0.0.1 [ 173.324898][ T7443] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 173.389681][ T5398] tipc: Node number set to 2886997162 [ 173.578409][ T1995] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 173.800301][ T1995] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.803863][ T1995] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.812200][ T1995] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.815878][ T1995] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.818501][ T39] kauditd_printk_skb: 71 callbacks suppressed [ 173.818513][ T39] audit: type=1400 audit(1726243837.842:1046): avc: denied { listen } for pid=7458 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.835427][ T1995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.839196][ T1995] usb 8-1: config 0 descriptor?? [ 174.285949][ T1995] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max [ 174.298341][ T1995] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 174.314279][ T1995] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 174.753288][ T7471] vcan0: entered allmulticast mode [ 174.755992][ T7471] vcan0: left allmulticast mode [ 175.025820][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.230698][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.318950][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.593271][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.796425][ T39] audit: type=1326 audit(1726243839.812:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.1.465" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5b417def9 code=0x0 [ 176.048285][ T39] audit: type=1400 audit(1726243840.062:1048): avc: denied { setopt } for pid=7484 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 176.231594][ T7496] 9pnet_fd: p9_fd_create_tcp (7496): problem connecting socket to 127.0.0.1 [ 176.253468][ T7487] netlink: 'syz.2.466': attribute type 4 has an invalid length. [ 176.379018][ T6152] usb 8-1: USB disconnect, device number 10 [ 176.839316][ T7502] 9pnet_fd: p9_fd_create_tcp (7502): problem connecting socket to 127.0.0.1 [ 177.004801][ T39] audit: type=1400 audit(1726243841.022:1049): avc: denied { ioctl } for pid=7500 comm="syz.2.470" path="/dev/rtc0" dev="devtmpfs" ino=867 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.357443][ T7509] Invalid ELF header magic: != ELF [ 177.366328][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 177.574096][ T39] audit: type=1326 audit(1726243841.592:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.3.471" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d7def9 code=0x0 [ 177.893246][ T39] audit: type=1400 audit(1726243841.902:1051): avc: denied { ioctl } for pid=7516 comm="syz.0.473" path="/dev/vhost-net" dev="devtmpfs" ino=1117 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 179.588515][ T6152] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 179.748417][ T6152] usb 5-1: device descriptor read/64, error -71 [ 179.811005][ T7543] netlink: 'syz.2.479': attribute type 5 has an invalid length. [ 180.018294][ T1995] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 180.028334][ T6152] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 180.074673][ T7551] 9pnet_fd: p9_fd_create_tcp (7551): problem connecting socket to 127.0.0.1 [ 180.126319][ T7552] 9pnet_fd: p9_fd_create_tcp (7552): problem connecting socket to 127.0.0.1 [ 180.188319][ T6152] usb 5-1: device descriptor read/64, error -71 [ 180.241498][ T1995] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.244379][ T1995] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.246938][ T1995] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.249921][ T1995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.255163][ T7541] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.258761][ T1995] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.308453][ T6152] usb usb5-port1: attempt power cycle [ 180.509467][ T25] usb 6-1: USB disconnect, device number 13 [ 180.728363][ T6152] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 180.760143][ T6152] usb 5-1: device descriptor read/8, error -71 [ 180.770317][ T7554] ip6gretap0 speed is unknown, defaulting to 1000 [ 181.043454][ T6152] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 181.043733][ T7559] dccp_close: ABORT with 36 bytes unread [ 181.054122][ T39] audit: type=1326 audit(1726243845.072:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.483" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d7def9 code=0x0 [ 181.092680][ T6152] usb 5-1: device descriptor read/8, error -71 [ 181.264362][ T6152] usb usb5-port1: unable to enumerate USB device [ 181.376670][ T7565] usb usb1: usbfs: process 7565 (syz.1.484) did not claim interface 0 before use [ 181.381192][ T7565] netlink: 'syz.1.484': attribute type 4 has an invalid length. [ 181.948112][ T7572] syzkaller1: entered promiscuous mode [ 181.950466][ T7572] syzkaller1: entered allmulticast mode [ 181.976024][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.486'. [ 182.023494][ T7573] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 182.058003][ T39] audit: type=1400 audit(1726243846.072:1053): avc: denied { write } for pid=7574 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.809449][ T7573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.811520][ T7573] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 182.858256][ T7573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.859900][ T7573] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 183.040283][ T39] audit: type=1400 audit(1726243847.062:1054): avc: denied { getopt } for pid=7616 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.280358][ T7625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.301163][ T7626] 9pnet_fd: p9_fd_create_tcp (7626): problem connecting socket to 127.0.0.1 [ 183.330283][ T39] audit: type=1400 audit(1726243847.352:1055): avc: denied { setopt } for pid=7616 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 183.369569][ T39] audit: type=1400 audit(1726243847.392:1056): avc: denied { create } for pid=7616 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 183.412964][ T7628] mkiss: ax0: crc mode is auto. [ 183.470398][ T7628] netlink: 'syz.2.490': attribute type 4 has an invalid length. [ 183.472519][ T7628] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.490'. [ 183.926826][ T7636] 9pnet_fd: p9_fd_create_tcp (7636): problem connecting socket to 127.0.0.1 [ 183.932759][ T39] audit: type=1400 audit(1726243847.952:1057): avc: denied { ioctl } for pid=7632 comm="syz.0.493" path="socket:[18154]" dev="sockfs" ino=18154 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.332127][ T39] audit: type=1400 audit(1726243848.322:1058): avc: denied { getopt } for pid=7637 comm="syz.3.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.342793][ T39] audit: type=1400 audit(1726243848.362:1059): avc: denied { nlmsg_read } for pid=7646 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.146226][ T39] audit: type=1400 audit(1726243849.162:1060): avc: denied { remount } for pid=7658 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 185.176931][ T39] audit: type=1400 audit(1726243849.172:1061): avc: denied { map } for pid=7658 comm="syz.3.498" path="/dev/dri/card0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 185.200730][ T7663] Bluetooth: MGMT ver 1.23 [ 186.009658][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 186.025184][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.503'. [ 186.148599][ T30] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 186.257860][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 186.291097][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'. [ 186.360137][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 186.362533][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.369376][ T30] usb 6-1: config 0 descriptor?? [ 186.376798][ T30] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input15 [ 186.541345][ T7691] 9pnet_fd: p9_fd_create_tcp (7691): problem connecting socket to 127.0.0.1 [ 187.041330][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 187.041340][ T39] audit: type=1326 audit(1726243851.062:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d7def9 code=0x7ffc0000 [ 187.068490][ T39] audit: type=1326 audit(1726243851.072:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.507" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9cc7d7def9 code=0x7ffc0000 [ 187.076381][ T39] audit: type=1326 audit(1726243851.072:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d7def9 code=0x7ffc0000 [ 187.088238][ T39] audit: type=1326 audit(1726243851.072:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.507" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cc7d7def9 code=0x7ffc0000 [ 187.096670][ T39] audit: type=1326 audit(1726243851.072:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d7def9 code=0x7ffc0000 [ 187.103238][ T39] audit: type=1326 audit(1726243851.072:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.507" exe="/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9cc7d7def9 code=0x7ffc0000 [ 187.118668][ T39] audit: type=1326 audit(1726243851.072:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d7def9 code=0x7ffc0000 [ 187.125613][ T39] audit: type=1326 audit(1726243851.072:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.507" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9cc7d7def9 code=0x7ffc0000 [ 187.134685][ T39] audit: type=1326 audit(1726243851.072:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d7def9 code=0x7ffc0000 [ 187.142938][ T39] audit: type=1326 audit(1726243851.072:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d7def9 code=0x7ffc0000 [ 187.155268][ T7697] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.409275][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 187.978418][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 188.170738][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.173654][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.178697][ T25] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 188.181290][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.186120][ T25] usb 5-1: config 0 descriptor?? [ 188.438209][ T7708] capability: warning: `syz.0.510' uses 32-bit capabilities (legacy support in use) [ 188.462891][ T5398] usb 6-1: USB disconnect, device number 14 [ 188.486341][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 188.505595][ T7720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.513'. [ 189.533338][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 189.535167][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 189.544307][ T25] usb 5-1: USB disconnect, device number 17 [ 190.003626][ T7734] ip6gretap0 speed is unknown, defaulting to 1000 [ 190.064196][ T7740] 9pnet_fd: p9_fd_create_tcp (7740): problem connecting socket to 127.0.0.1 [ 191.398228][ T8] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 191.548600][ T8] usb 6-1: device descriptor read/64, error -71 [ 191.773836][ T7767] syzkaller1: entered promiscuous mode [ 191.775637][ T7767] syzkaller1: entered allmulticast mode [ 191.790026][ T7767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.524'. [ 191.818558][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 191.978505][ T8] usb 6-1: device descriptor read/64, error -71 [ 192.099010][ T8] usb usb6-port1: attempt power cycle [ 192.734588][ T7780] vivid-000: ================= START STATUS ================= [ 192.737327][ T7780] vivid-000: Radio HW Seek Mode: Bounded [ 192.742572][ T7780] vivid-000: Radio Programmable HW Seek: false [ 192.744712][ T7780] vivid-000: RDS Rx I/O Mode: Block I/O [ 192.746622][ T7780] vivid-000: Generate RBDS Instead of RDS: false [ 192.748981][ T7780] vivid-000: RDS Reception: true [ 192.751684][ T7780] vivid-000: RDS Program Type: 0 inactive [ 192.753734][ T7780] vivid-000: RDS PS Name: inactive [ 192.755656][ T7780] vivid-000: RDS Radio Text: inactive [ 192.757717][ T7780] vivid-000: RDS Traffic Announcement: false inactive [ 192.760406][ T7780] vivid-000: RDS Traffic Program: false inactive [ 192.762633][ T7780] vivid-000: RDS Music: false inactive [ 192.764619][ T7780] vivid-000: ================== END STATUS ================== [ 192.768340][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 192.819371][ T8] usb 6-1: device descriptor read/8, error -71 [ 193.108443][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 193.148902][ T8] usb 6-1: device descriptor read/8, error -71 [ 193.269448][ T8] usb usb6-port1: unable to enumerate USB device [ 194.317843][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 194.339554][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.342201][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.308291][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 195.308309][ T39] audit: type=1400 audit(1726243859.312:1133): avc: denied { mount } for pid=7802 comm="syz.2.532" name="/" dev="gadgetfs" ino=20787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 195.378397][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 195.383119][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 196.170114][ T7830] syzkaller1: entered promiscuous mode [ 196.171813][ T7830] syzkaller1: entered allmulticast mode [ 196.185083][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'. [ 197.602091][ T39] audit: type=1400 audit(1726243861.622:1134): avc: denied { mount } for pid=7850 comm="syz.1.542" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 197.625786][ T7856] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 197.628680][ T7856] netlink: 224 bytes leftover after parsing attributes in process `syz.1.542'. [ 197.635461][ T39] audit: type=1326 audit(1726243861.652:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.1.542" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5b417def9 code=0x0 [ 198.432151][ T39] audit: type=1400 audit(1726243862.452:1136): avc: denied { unmount } for pid=6875 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 198.553558][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 198.557395][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 198.780732][ T7874] 9pnet_fd: p9_fd_create_tcp (7874): problem connecting socket to 127.0.0.1 [ 200.468623][ T7896] netlink: 1300 bytes leftover after parsing attributes in process `syz.3.554'. [ 200.492745][ T7896] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 200.497062][ T39] audit: type=1400 audit(1726243864.512:1137): avc: denied { setattr } for pid=7894 comm="syz.3.554" name="RAW" dev="sockfs" ino=20832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.565890][ T7902] 9pnet_fd: p9_fd_create_tcp (7902): problem connecting socket to 127.0.0.1 [ 201.425030][ T7912] 9pnet_fd: p9_fd_create_tcp (7912): problem connecting socket to 127.0.0.1 [ 201.506524][ T7908] fuse: Unknown parameter 'grou‚_id' [ 201.578857][ T7915] ip6gretap0 speed is unknown, defaulting to 1000 [ 201.978711][ T5398] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 202.158444][ T5398] usb 8-1: Using ep0 maxpacket: 32 [ 202.172556][ T5398] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 202.176076][ T5398] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.179488][ T5398] usb 8-1: Product: syz [ 202.183866][ T5398] usb 8-1: Manufacturer: syz [ 202.187421][ T5398] usb 8-1: SerialNumber: syz [ 202.194581][ T5398] usb 8-1: config 0 descriptor?? [ 202.423931][ T5398] snd-usb-6fire 8-1:0.0: unable to receive device firmware state. [ 202.426001][ T5398] snd-usb-6fire 8-1:0.0: probe with driver snd-usb-6fire failed with error -32 [ 202.613242][ T7928] syzkaller1: entered promiscuous mode [ 202.614741][ T7928] syzkaller1: entered allmulticast mode [ 202.626947][ T7928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.562'. [ 202.660593][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 202.671277][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 204.280972][ T30] usb 8-1: USB disconnect, device number 11 [ 204.607364][ T7954] netlink: 'syz.2.569': attribute type 4 has an invalid length. [ 204.690669][ T25] IPVS: starting estimator thread 0... [ 204.789302][ T7963] IPVS: using max 33 ests per chain, 79200 per kthread [ 205.080413][ T7969] 9pnet_fd: p9_fd_create_tcp (7969): problem connecting socket to 127.0.0.1 [ 205.163474][ T7974] netlink: 'syz.0.582': attribute type 4 has an invalid length. [ 205.223170][ T5398] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 206.630672][ T5398] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.633621][ T5398] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.636274][ T5398] usb 8-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 206.640813][ T5398] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.646419][ T5398] usb 8-1: config 0 descriptor?? [ 207.278052][ T5398] usbhid 8-1:0.0: can't add hid device: -71 [ 207.280409][ T5398] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 207.311901][ T5398] usb 8-1: USB disconnect, device number 12 [ 207.985952][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 208.209744][ T8005] ip6gretap0 speed is unknown, defaulting to 1000 [ 210.396694][ T8038] ip6gretap0 speed is unknown, defaulting to 1000 [ 212.079597][ T8062] netlink: 84 bytes leftover after parsing attributes in process `syz.3.593'. [ 212.232109][ T8070] ip6gretap0 speed is unknown, defaulting to 1000 [ 212.287593][ T8074] 9pnet_fd: p9_fd_create_tcp (8074): problem connecting socket to 127.0.0.1 [ 212.915992][ T8081] 9pnet_fd: p9_fd_create_tcp (8081): problem connecting socket to 127.0.0.1 [ 213.845032][ T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 214.031191][ T8] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.034568][ T8] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.038616][ T8] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.041671][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.059863][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.062638][ T8] usb 8-1: invalid MIDI out EP 0 [ 214.184161][ T8] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 214.542141][ T8083] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 214.544743][ T8083] netlink: 2 bytes leftover after parsing attributes in process `syz.3.596'. [ 214.547731][ T8083] bond0: entered promiscuous mode [ 214.549506][ T8083] bond_slave_0: entered promiscuous mode [ 214.551481][ T8083] bond_slave_1: entered promiscuous mode [ 214.553722][ T8083] bridge0: port 4(bond0) entered blocking state [ 214.555750][ T8083] bridge0: port 4(bond0) entered disabled state [ 214.557948][ T8083] bond0: entered allmulticast mode [ 214.560000][ T8083] bond_slave_0: entered allmulticast mode [ 214.561767][ T8083] bond_slave_1: entered allmulticast mode [ 214.596349][ T8] usb 8-1: USB disconnect, device number 13 [ 214.826881][ T8106] ip6gretap0 speed is unknown, defaulting to 1000 [ 215.658313][ T6152] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 215.889800][ T6152] usb 8-1: config 0 has an invalid interface number: 76 but max is 3 [ 215.892199][ T6152] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 215.894408][ T6152] usb 8-1: config 0 has an invalid interface number: 12 but max is 3 [ 215.896571][ T6152] usb 8-1: config 0 has an invalid interface number: 63 but max is 3 [ 215.932764][ T6152] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.935606][ T6152] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 215.937996][ T6152] usb 8-1: config 0 has no interface number 0 [ 215.950481][ T6152] usb 8-1: config 0 has no interface number 1 [ 215.952707][ T6152] usb 8-1: config 0 has no interface number 2 [ 215.956146][ T6152] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 215.961686][ T6152] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 215.967294][ T6152] usb 8-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 215.971749][ T6152] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 215.977427][ T6152] usb 8-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 215.981898][ T6152] usb 8-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 215.989403][ T6152] usb 8-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 215.994350][ T6152] usb 8-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 215.999682][ T6152] usb 8-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 216.002453][ T6152] usb 8-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 216.011418][ T6152] usb 8-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 216.018130][ T6152] usb 8-1: config 0 interface 76 has no altsetting 0 [ 216.019981][ T6152] usb 8-1: config 0 interface 12 has no altsetting 0 [ 216.024376][ T6152] usb 8-1: Dual-Role OTG device on HNP port [ 216.026228][ T6152] usb 8-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 216.028660][ T6152] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.032675][ T6152] usb 8-1: Product: syz [ 216.034872][ T6152] usb 8-1: Manufacturer: syz [ 216.037233][ T6152] usb 8-1: SerialNumber: syz [ 216.041262][ T6152] usb 8-1: config 0 descriptor?? [ 216.044766][ T6152] cp210x 8-1:0.76: cp210x converter detected [ 216.263258][ T8114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.268667][ T8114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.285236][ T8114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.291083][ T8114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.568831][ T6152] cp210x 8-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 216.571677][ T6152] cp210x 8-1:0.76: querying part number failed [ 216.583844][ T8130] netlink: 84 bytes leftover after parsing attributes in process `syz.2.607'. [ 216.588954][ T6152] usb 8-1: cp210x converter now attached to ttyUSB0 [ 216.598092][ T6152] cp210x 8-1:0.12: cp210x converter detected [ 216.600593][ T6152] cp210x 8-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 216.602530][ T6152] cp210x 8-1:0.12: querying part number failed [ 216.605354][ T6152] usb 8-1: cp210x converter now attached to ttyUSB1 [ 216.619936][ T6152] cp210x 8-1:0.63: cp210x converter detected [ 216.621954][ T6152] cp210x 8-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 216.623860][ T6152] cp210x 8-1:0.63: querying part number failed [ 216.626857][ T6152] usb 8-1: cp210x converter now attached to ttyUSB2 [ 216.644936][ T6152] usb 8-1: USB disconnect, device number 14 [ 216.699716][ T6152] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 216.701958][ T6152] cp210x 8-1:0.76: device disconnected [ 216.720689][ T6152] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 216.722949][ T6152] cp210x 8-1:0.12: device disconnected [ 216.739828][ T6152] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 216.742262][ T6152] cp210x 8-1:0.63: device disconnected [ 216.903089][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.604'. [ 216.974608][ T8139] netlink: 80 bytes leftover after parsing attributes in process `syz.1.604'. [ 217.392023][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 218.513795][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 219.643436][ T8177] ip6gretap0 speed is unknown, defaulting to 1000 [ 220.986924][ T8202] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 222.630601][ T8219] ip6gretap0 speed is unknown, defaulting to 1000 [ 222.848306][ T1995] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 223.030620][ T1995] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.034778][ T1995] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.037914][ T1995] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.041317][ T1995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.050711][ T1995] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.053076][ T1995] usb 6-1: invalid MIDI out EP 0 [ 223.089344][ T1995] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 223.126489][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.450118][ T8225] input: syz1 as /devices/virtual/input/input17 [ 223.618646][ T8229] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 223.625605][ T8229] netlink: 2 bytes leftover after parsing attributes in process `syz.1.634'. [ 223.645712][ T8229] bond0: entered promiscuous mode [ 223.647417][ T8229] bond_slave_0: entered promiscuous mode [ 223.649534][ T8229] bond_slave_1: entered promiscuous mode [ 223.651215][ T8229] bridge0: port 3(bond0) entered blocking state [ 223.652894][ T8229] bridge0: port 3(bond0) entered disabled state [ 223.654582][ T8229] bond0: entered allmulticast mode [ 223.655954][ T8229] bond_slave_0: entered allmulticast mode [ 223.657428][ T8229] bond_slave_1: entered allmulticast mode [ 223.662161][ T8229] bridge0: port 3(bond0) entered blocking state [ 223.663981][ T8229] bridge0: port 3(bond0) entered forwarding state [ 223.681362][ T1995] usb 6-1: USB disconnect, device number 19 [ 223.874053][ T8228] ip6gretap0 speed is unknown, defaulting to 1000 [ 224.558735][ T8247] bridge0: port 3(bond0) entered disabled state [ 224.561690][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.564669][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.578618][ T8247] bridge0: left promiscuous mode [ 226.092001][ T8266] batadv_slave_1: entered promiscuous mode [ 226.194235][ T8270] ip6gretap0 speed is unknown, defaulting to 1000 [ 227.431069][ T8265] batadv_slave_1: left promiscuous mode [ 227.756859][ T39] audit: type=1400 audit(1726243891.772:1138): avc: denied { ioctl } for pid=8295 comm="syz.3.642" path="socket:[21106]" dev="sockfs" ino=21106 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 228.034974][ T5225] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 228.240560][ T5225] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.244302][ T5225] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.247846][ T5225] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.258246][ T5225] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.271782][ T5225] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.275101][ T5225] usb 7-1: invalid MIDI out EP 0 [ 228.353901][ T5692] udevd[5692]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.374069][ T5225] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 228.394453][ T8305] ip6gretap0 speed is unknown, defaulting to 1000 [ 228.705984][ T8297] netlink: 'syz.2.641': attribute type 10 has an invalid length. [ 228.708049][ T8297] netlink: 2 bytes leftover after parsing attributes in process `syz.2.641'. [ 228.710394][ T8297] bond0: entered promiscuous mode [ 228.711802][ T8297] bond_slave_0: entered promiscuous mode [ 228.713431][ T8297] bond_slave_1: entered promiscuous mode [ 228.715144][ T8297] bridge0: port 3(bond0) entered blocking state [ 228.716816][ T8297] bridge0: port 3(bond0) entered disabled state [ 228.718579][ T8297] bond0: entered allmulticast mode [ 228.719931][ T8297] bond_slave_0: entered allmulticast mode [ 228.721382][ T8297] bond_slave_1: entered allmulticast mode [ 228.724291][ T8297] bridge0: port 3(bond0) entered blocking state [ 228.726027][ T8297] bridge0: port 3(bond0) entered forwarding state [ 228.739523][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.643'. [ 228.750911][ T1290] usb 7-1: USB disconnect, device number 12 [ 228.811367][ T8317] netlink: 80 bytes leftover after parsing attributes in process `syz.0.643'. [ 230.799908][ T8340] ip6gretap0 speed is unknown, defaulting to 1000 [ 231.089542][ T8349] 9pnet_fd: p9_fd_create_tcp (8349): problem connecting socket to 127.0.0.1 [ 231.895804][ T39] audit: type=1804 audit(1726243895.922:1139): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.656" name="/newroot/69/bus/bus" dev="overlay" ino=429 res=1 errno=0 [ 232.148513][ T39] audit: type=1326 audit(1726243896.152:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.1.663" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5b417def9 code=0x0 [ 232.979192][ T39] audit: type=1804 audit(1726243896.992:1141): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.657" name="/newroot/170/bus/file0" dev="overlay" ino=973 res=1 errno=0 [ 235.221195][ T8411] 9pnet_fd: p9_fd_create_tcp (8411): problem connecting socket to 127.0.0.1 [ 235.845722][ T8413] netlink: 'syz.3.665': attribute type 7 has an invalid length. [ 235.848729][ T8413] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.665'. [ 235.855640][ T8413] netlink: 'syz.3.665': attribute type 3 has an invalid length. [ 235.859935][ T8413] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.665'. [ 236.094555][ T8419] ip6gretap0 speed is unknown, defaulting to 1000 [ 237.412276][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 237.592851][ T8436] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 237.594644][ T8436] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 237.597574][ T8436] vhci_hcd vhci_hcd.0: Device attached [ 237.602844][ T8437] vhci_hcd: connection closed [ 237.604038][ T1104] vhci_hcd: stop threads [ 237.607306][ T1104] vhci_hcd: release socket [ 237.611432][ T1104] vhci_hcd: disconnect device [ 237.698934][ T39] audit: type=1804 audit(1726243901.722:1142): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.669" name="/newroot/75/bus/bus" dev="overlay" ino=439 res=1 errno=0 [ 239.432813][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.672'. [ 240.128378][ T5398] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 240.329020][ T5398] usb 7-1: Using ep0 maxpacket: 8 [ 240.340067][ T5398] usb 7-1: config 0 has an invalid interface number: 224 but max is 0 [ 240.342199][ T5398] usb 7-1: config 0 has no interface number 0 [ 240.343802][ T5398] usb 7-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 240.346126][ T5398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.367445][ T5398] usb 7-1: config 0 descriptor?? [ 241.434702][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.681'. [ 241.453586][ T39] audit: type=1326 audit(1726243905.472:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.0.680" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f258797def9 code=0x0 [ 241.479193][ T8493] sp0: Synchronizing with TNC [ 242.263278][ T5398] usb 7-1: USB disconnect, device number 13 [ 245.344443][ T8548] ip6gretap0 speed is unknown, defaulting to 1000 [ 245.625746][ T8545] bridge0: port 3(bond0) entered disabled state [ 245.628255][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.632095][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.666222][ T8545] bridge0: entered allmulticast mode [ 245.985141][ T8555] ip6gretap0 speed is unknown, defaulting to 1000 [ 246.756728][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.694'. [ 247.702885][ T8576] netlink: 80 bytes leftover after parsing attributes in process `syz.1.694'. [ 248.240163][ T8594] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 248.316477][ T8601] 9pnet_fd: p9_fd_create_tcp (8601): problem connecting socket to 127.0.0.1 [ 249.021011][ T8613] batadv_slave_1: entered promiscuous mode [ 249.938816][ T8612] batadv_slave_1: left promiscuous mode [ 250.281968][ T8632] bridge0: port 3(bond0) entered disabled state [ 250.283763][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.285134][ T8631] binder: 8628:8631 ioctl c0306201 0 returned -14 [ 250.285761][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.298303][ T8632] bridge0: entered allmulticast mode [ 250.398243][ T5398] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 250.578271][ T5398] usb 8-1: Using ep0 maxpacket: 16 [ 250.582669][ T5398] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.585844][ T5398] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.592577][ T5398] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.595415][ T5398] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.604110][ T5398] usb 8-1: config 0 descriptor?? [ 250.615908][ T5398] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 251.958615][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.711'. [ 252.081857][ T8657] netlink: 80 bytes leftover after parsing attributes in process `syz.0.711'. [ 252.501686][ T1290] usb 8-1: USB disconnect, device number 15 [ 252.775699][ T8665] 9pnet_fd: p9_fd_create_tcp (8665): problem connecting socket to 127.0.0.1 [ 253.424279][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 253.511866][ T8671] netlink: 80 bytes leftover after parsing attributes in process `syz.3.723'. [ 255.430015][ T5342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.432944][ T5342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.436066][ T5342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.449290][ T5342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.453160][ T5342] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 255.455459][ T5342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.468782][ T4767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.479303][ T4767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.481720][ T4767] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.484774][ T4767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.487348][ T4767] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 255.493677][ T4767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.524670][ T8711] ip6gretap0 speed is unknown, defaulting to 1000 [ 255.640227][ T8711] chnl_net:caif_netlink_parms(): no params data found [ 255.679740][ T5345] block nbd2: Receive control failed (result -32) [ 255.685539][ T8701] block nbd2: shutting down sockets [ 255.769029][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.788743][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.858209][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.866595][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.874248][ T8711] bridge_slave_0: entered allmulticast mode [ 255.877075][ T8711] bridge_slave_0: entered promiscuous mode [ 255.893228][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.895341][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.897930][ T8711] bridge_slave_1: entered allmulticast mode [ 255.903742][ T8711] bridge_slave_1: entered promiscuous mode [ 255.972020][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.978028][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.050435][ T8711] team0: Port device team_slave_0 added [ 256.055802][ T8711] team0: Port device team_slave_1 added [ 256.111022][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.112829][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.119526][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.123536][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.125309][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.132061][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.187073][ T8711] hsr_slave_0: entered promiscuous mode [ 256.189262][ T8711] hsr_slave_1: entered promiscuous mode [ 256.191303][ T8711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.193437][ T8711] Cannot create hsr debugfs directory [ 256.450347][ T8711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.544726][ T8711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.638334][ T8711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.650385][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.729'. [ 256.736357][ T8711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.750745][ T8730] netlink: 80 bytes leftover after parsing attributes in process `syz.2.729'. [ 256.820241][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804eeb1000: rx timeout, send abort [ 256.909434][ T8711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.916732][ T8711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.924183][ T8711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.929836][ T8711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 257.001568][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.025455][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.034054][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.036654][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.047174][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.049860][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.203089][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.241061][ T8711] veth0_vlan: entered promiscuous mode [ 257.248053][ T8711] veth1_vlan: entered promiscuous mode [ 257.270423][ T8711] veth0_macvtap: entered promiscuous mode [ 257.275485][ T8711] veth1_macvtap: entered promiscuous mode [ 257.287521][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.292432][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.295575][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.299264][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.302540][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.306120][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.311662][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.321573][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.322543][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804eeb1000: abort rx timeout. Force session deactivation [ 257.325113][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.330766][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.333823][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.336933][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.341289][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.345121][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.349339][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.353453][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.359491][ T8711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.361812][ T8711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.364074][ T8711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.366370][ T8711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.407846][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.413953][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.430390][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.432476][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.504615][ T39] audit: type=1326 audit(1726243921.522:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.730" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d7def9 code=0x0 [ 257.518333][ T5345] Bluetooth: hci3: command tx timeout [ 258.444718][ T39] audit: type=1326 audit(1726243922.462:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz.2.735" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c7577def9 code=0x0 [ 259.608514][ T5342] Bluetooth: hci3: command tx timeout [ 259.827542][ T8778] PKCS8: Unsupported PKCS#8 version [ 261.212654][ T8790] input: syz0 as /devices/virtual/input/input18 [ 261.423940][ T8790] dccp_invalid_packet: invalid packet type [ 261.463724][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 261.688386][ T5342] Bluetooth: hci3: command 0x040f tx timeout [ 261.918285][ T5225] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 262.110469][ T5225] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.113710][ T5225] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 262.116449][ T5225] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 262.120328][ T5225] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.126483][ T8800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.132156][ T5225] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.579611][ T8] usb 7-1: USB disconnect, device number 14 [ 263.150906][ T8808] syz.1.747[8808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.151380][ T8808] syz.1.747[8808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.758509][ T5342] Bluetooth: hci3: command 0x040f tx timeout [ 263.759243][ T5345] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 263.947465][ T39] audit: type=1800 audit(1726243927.962:1146): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.750" name="/" dev="anon_inodefs" ino=26809 res=0 errno=0 [ 264.429844][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.753'. [ 264.445357][ T8847] ip6gretap0 speed is unknown, defaulting to 1000 [ 264.493614][ T8846] netlink: 80 bytes leftover after parsing attributes in process `syz.2.753'. [ 265.449549][ T8856] PKCS8: Unsupported PKCS#8 version [ 265.632822][ T8855] overlayfs: failed to resolve './file1': -2 [ 265.838628][ T5345] Bluetooth: hci3: command 0x040f tx timeout [ 266.073331][ T8868] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 267.608596][ T1995] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 267.790392][ T1995] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.794371][ T1995] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.797861][ T1995] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.801243][ T1995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.807385][ T8883] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 267.813237][ T1995] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.918398][ T5345] Bluetooth: hci3: command 0x040f tx timeout [ 268.215085][ T1995] usb 5-1: USB disconnect, device number 18 [ 269.039560][ T8888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.763'. [ 269.067458][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.766'. [ 269.580293][ T8924] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 270.336119][ T8943] qnx6: unable to read the first superblock [ 270.713724][ T5345] Bluetooth: hci3: unexpected event for opcode 0x0406 [ 271.146239][ T8959] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 262395 (only 8 groups) [ 271.186322][ T5345] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 271.569439][ T39] audit: type=1326 audit(1726243935.592:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b57def9 code=0x7fc00000 [ 271.608342][ T5345] Bluetooth: hci0: command tx timeout [ 271.627906][ T39] audit: type=1326 audit(1726243935.622:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6b57def9 code=0x7fc00000 [ 272.201837][ T39] audit: type=1326 audit(1726243936.222:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b57def9 code=0x7fc00000 [ 272.221489][ T39] audit: type=1326 audit(1726243936.232:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7ffb6b57def9 code=0x7fc00000 [ 272.231863][ T39] audit: type=1326 audit(1726243936.232:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b57def9 code=0x7fc00000 [ 272.242275][ T39] audit: type=1326 audit(1726243936.232:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b57def9 code=0x7fc00000 [ 272.248321][ T39] audit: type=1326 audit(1726243936.232:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b57def9 code=0x7fc00000 [ 272.255881][ T39] audit: type=1326 audit(1726243936.232:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b57def9 code=0x7fc00000 [ 272.264458][ T39] audit: type=1326 audit(1726243936.232:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b57def9 code=0x7fc00000 [ 272.271285][ T39] audit: type=1326 audit(1726243936.232:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6b57def9 code=0x7fc00000 [ 272.732058][ T8988] Bluetooth: MGMT ver 1.23 [ 273.108922][ T9000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.794'. [ 274.827169][ T5342] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 274.831597][ T5342] Bluetooth: hci3: Injecting HCI hardware error event [ 274.861362][ T9037] 9pnet_fd: p9_fd_create_tcp (9037): problem connecting socket to 127.0.0.1 [ 275.278778][ T5342] Bluetooth: hci3: command 0x040f tx timeout [ 275.283387][ T5345] Bluetooth: hci3: hardware error 0x00 [ 275.640168][ T9062] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.813'. [ 275.759620][ T9067] tipc: Started in network mode [ 275.761231][ T9067] tipc: Node identity ac1414aa, cluster identity 4711 [ 275.763854][ T9067] tipc: Enabled bearer , priority 10 [ 276.900213][ T5457] tipc: Node number set to 2886997162 [ 277.414144][ T9090] team0: Port device team_slave_0 removed [ 277.443156][ T9090] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 277.558859][ T5345] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 277.678429][ T5342] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 280.520102][ T6152] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 280.653145][ T9141] mkiss: ax0: crc mode is auto. [ 280.712464][ T9140] netlink: 'syz.3.829': attribute type 4 has an invalid length. [ 280.714637][ T9140] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.829'. [ 280.800756][ T6152] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.809680][ T6152] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 280.812660][ T6152] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.815481][ T6152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.821163][ T9134] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 280.827774][ T6152] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.214551][ T8] usb 7-1: USB disconnect, device number 15 [ 282.068627][ T9171] Invalid ELF header magic: != ELF [ 282.115368][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.833'. [ 282.273405][ T9174] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 282.348510][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 282.348525][ T39] audit: type=1326 audit(1726243946.362:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.0.833" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f258797def9 code=0x0 [ 282.444800][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.837'. [ 282.505464][ T9182] netlink: 80 bytes leftover after parsing attributes in process `syz.3.837'. [ 282.875371][ T39] audit: type=1800 audit(1726243946.892:1163): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.840" name="/" dev="anon_inodefs" ino=26190 res=0 errno=0 [ 284.346490][ T39] audit: type=1400 audit(1726243948.362:1164): avc: denied { write } for pid=9220 comm="syz.0.850" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 284.535297][ T9239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.859'. [ 284.690831][ T9252] 9pnet_fd: p9_fd_create_tcp (9252): problem connecting socket to 127.0.0.1 [ 284.765672][ T39] audit: type=1400 audit(1726243948.782:1165): avc: denied { nlmsg_write } for pid=9253 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 285.118407][ T5342] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 285.450193][ T9265] 9pnet_fd: p9_fd_create_tcp (9265): problem connecting socket to 127.0.0.1 [ 285.594221][ T9270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.596840][ T9270] IPv6: NLM_F_CREATE should be set when creating new route [ 285.599286][ T9270] IPv6: NLM_F_CREATE should be set when creating new route [ 285.601370][ T9270] IPv6: NLM_F_CREATE should be set when creating new route [ 285.632944][ T39] audit: type=1400 audit(1726243949.652:1166): avc: denied { read } for pid=9272 comm="syz.0.869" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 285.655378][ T39] audit: type=1400 audit(1726243949.652:1167): avc: denied { open } for pid=9272 comm="syz.0.869" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 285.665951][ T39] audit: type=1400 audit(1726243949.652:1168): avc: denied { ioctl } for pid=9272 comm="syz.0.869" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 285.863040][ T39] audit: type=1400 audit(1726243949.882:1169): avc: denied { bind } for pid=9286 comm="syz.0.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 286.004264][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'. [ 286.244244][ T9314] 9pnet_fd: p9_fd_create_tcp (9314): problem connecting socket to 127.0.0.1 [ 286.997127][ T9323] 9pnet_fd: p9_fd_create_tcp (9323): problem connecting socket to 127.0.0.1 [ 287.237287][ T39] audit: type=1400 audit(1726243951.252:1170): avc: denied { getopt } for pid=9332 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 287.400362][ T9335] netlink: 'syz.2.896': attribute type 4 has an invalid length. [ 287.403928][ T9335] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.896'. [ 287.507847][ T39] audit: type=1326 audit(1726243951.522:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.0.895" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258797def9 code=0x7ffc0000 [ 287.523169][ T39] audit: type=1326 audit(1726243951.522:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.0.895" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f258797def9 code=0x7ffc0000 [ 287.531086][ T39] audit: type=1326 audit(1726243951.532:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.0.895" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258797def9 code=0x7ffc0000 [ 287.545577][ T39] audit: type=1326 audit(1726243951.532:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.0.895" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258797def9 code=0x7ffc0000 [ 287.558228][ T39] audit: type=1326 audit(1726243951.532:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.0.895" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f258797def9 code=0x7ffc0000 [ 287.575129][ T39] audit: type=1326 audit(1726243951.532:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.0.895" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258797def9 code=0x7ffc0000 [ 287.583285][ T39] audit: type=1326 audit(1726243951.532:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.0.895" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258797def9 code=0x7ffc0000 [ 287.598254][ T39] audit: type=1326 audit(1726243951.532:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.0.895" exe="/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f258797def9 code=0x7ffc0000 [ 287.614398][ T39] audit: type=1326 audit(1726243951.532:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.0.895" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258797def9 code=0x7ffc0000 [ 287.626416][ T39] audit: type=1326 audit(1726243951.532:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.0.895" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258797def9 code=0x7ffc0000 [ 288.213485][ T9340] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 288.247229][ T9351] 9pnet_fd: p9_fd_create_tcp (9351): problem connecting socket to 127.0.0.1 [ 288.421588][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.901'. [ 288.678383][ T9361] ------------[ cut here ]------------ [ 288.680763][ T9361] platform vkms: [drm] vblank wait timed out on crtc 0 [ 288.682893][ T9361] WARNING: CPU: 0 PID: 9361 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x333/0x550 [ 288.685902][ T9361] Modules linked in: [ 288.687100][ T9361] CPU: 0 UID: 0 PID: 9361 Comm: syz.2.904 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 288.691723][ T9361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.695206][ T9361] RIP: 0010:drm_wait_one_vblank+0x333/0x550 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 288.697259][ T9361] Code: 85 ed 0f 84 54 01 00 00 e8 aa e9 68 fc 4c 89 e7 e8 d2 84 85 00 89 e9 4c 89 ea 48 c7 c7 40 9f c6 8b 48 89 c6 e8 be 34 2b fc 90 <0f> 0b 90 90 e9 0e fe ff ff e8 7f e9 68 fc 90 48 8d 7b 08 48 b8 00 [ 288.704063][ T9361] RSP: 0018:ffffc90006477b28 EFLAGS: 00010286 [ 288.706368][ T9361] RAX: 0000000000000000 RBX: ffff88802546c000 RCX: ffffc90029532000 [ 288.709572][ T9361] RDX: 0000000000040000 RSI: ffffffff814e1d16 RDI: 0000000000000001 [ 288.712311][ T9361] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 288.715020][ T9361] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888025514010 [ 288.717719][ T9361] R13: ffff8880243b55c0 R14: 1ffff92000c8ef67 R15: 0000000000002826 [ 288.720476][ T9361] FS: 00007f9c765786c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 288.723530][ T9361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.725862][ T9361] CR2: 0000555568ea9808 CR3: 000000002bbf2000 CR4: 0000000000350ef0 [ 288.728942][ T9361] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.731667][ T9361] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.734393][ T9361] Call Trace: [ 288.735588][ T9361] [ 288.736626][ T9361] ? show_regs+0x8c/0xa0 [ 288.738115][ T9361] ? __warn+0xe5/0x3c0 [ 288.739594][ T9361] ? preempt_schedule_notrace+0x62/0xe0 [ 288.741519][ T9361] ? drm_wait_one_vblank+0x333/0x550 [ 288.743344][ T9361] ? report_bug+0x3c0/0x580 [ 288.744871][ T9361] ? handle_bug+0x3d/0x70 [ 288.746400][ T9361] ? exc_invalid_op+0x17/0x50 [ 288.748047][ T9361] ? asm_exc_invalid_op+0x1a/0x20 [ 288.749952][ T9361] ? __warn_printk+0x1a6/0x350 [ 288.751645][ T9361] ? drm_wait_one_vblank+0x333/0x550 [ 288.753607][ T9361] ? drm_wait_one_vblank+0x332/0x550 [ 288.755455][ T9361] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 288.757431][ T9361] ? mark_held_locks+0x9f/0xe0 [ 288.759366][ T9361] ? __pfx_autoremove_wake_function+0x10/0x10 [ 288.761466][ T9361] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.763270][ T9361] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 288.765247][ T9361] ? drm_vblank_get+0x14f/0x280 [ 288.766900][ T9361] drm_fb_helper_ioctl+0x156/0x1a0 [ 288.768742][ T9361] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 288.770694][ T9361] do_fb_ioctl+0x3d4/0x7d0 [ 288.772337][ T9361] ? __pfx_do_fb_ioctl+0x10/0x10 [ 288.774049][ T9361] ? do_vfs_ioctl+0x515/0x1ad0 [ 288.775735][ T9361] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 288.778086][ T9361] ? selinux_file_ioctl+0x180/0x270 [ 288.779956][ T9361] ? selinux_file_ioctl+0xb4/0x270 [ 288.781730][ T9361] fb_ioctl+0xf1/0x160 [ 288.783220][ T9361] ? __pfx_fb_ioctl+0x10/0x10 [ 288.784867][ T9361] __x64_sys_ioctl+0x193/0x220 [ 288.786552][ T9361] do_syscall_64+0xcd/0x250 [ 288.788509][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.790555][ T9361] RIP: 0033:0x7f9c7577def9 [ 288.792124][ T9361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.798848][ T9361] RSP: 002b:00007f9c76578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.801525][ T9361] RAX: ffffffffffffffda RBX: 00007f9c75935f80 RCX: 00007f9c7577def9 [ 288.804448][ T9361] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 288.807215][ T9361] RBP: 00007f9c757f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 288.809955][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.812673][ T9361] R13: 0000000000000000 R14: 00007f9c75935f80 R15: 00007ffef298c578 [ 288.815420][ T9361] [ 288.816503][ T9361] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 288.819046][ T9361] CPU: 0 UID: 0 PID: 9361 Comm: syz.2.904 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 288.822635][ T9361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.826354][ T9361] Call Trace: [ 288.827550][ T9361] [ 288.828605][ T9361] dump_stack_lvl+0x3d/0x1f0 [ 288.830227][ T9361] panic+0x6dc/0x7c0 [ 288.831610][ T9361] ? __pfx_panic+0x10/0x10 [ 288.833183][ T9361] ? show_trace_log_lvl+0x363/0x500 [ 288.835064][ T9361] ? drm_wait_one_vblank+0x333/0x550 [ 288.836897][ T9361] check_panic_on_warn+0xab/0xb0 [ 288.838616][ T9361] __warn+0xf1/0x3c0 [ 288.839991][ T9361] ? preempt_schedule_notrace+0x62/0xe0 [ 288.841910][ T9361] ? drm_wait_one_vblank+0x333/0x550 [ 288.843749][ T9361] report_bug+0x3c0/0x580 [ 288.845207][ T9361] handle_bug+0x3d/0x70 [ 288.846627][ T9361] exc_invalid_op+0x17/0x50 [ 288.848254][ T9361] asm_exc_invalid_op+0x1a/0x20 [ 288.849991][ T9361] RIP: 0010:drm_wait_one_vblank+0x333/0x550 [ 288.852035][ T9361] Code: 85 ed 0f 84 54 01 00 00 e8 aa e9 68 fc 4c 89 e7 e8 d2 84 85 00 89 e9 4c 89 ea 48 c7 c7 40 9f c6 8b 48 89 c6 e8 be 34 2b fc 90 <0f> 0b 90 90 e9 0e fe ff ff e8 7f e9 68 fc 90 48 8d 7b 08 48 b8 00 [ 288.858428][ T9361] RSP: 0018:ffffc90006477b28 EFLAGS: 00010286 [ 288.860509][ T9361] RAX: 0000000000000000 RBX: ffff88802546c000 RCX: ffffc90029532000 [ 288.863272][ T9361] RDX: 0000000000040000 RSI: ffffffff814e1d16 RDI: 0000000000000001 [ 288.866111][ T9361] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 288.868851][ T9361] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888025514010 [ 288.871557][ T9361] R13: ffff8880243b55c0 R14: 1ffff92000c8ef67 R15: 0000000000002826 [ 288.874249][ T9361] ? __warn_printk+0x1a6/0x350 [ 288.875952][ T9361] ? drm_wait_one_vblank+0x332/0x550 [ 288.877792][ T9361] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 288.879726][ T9361] ? mark_held_locks+0x9f/0xe0 [ 288.881440][ T9361] ? __pfx_autoremove_wake_function+0x10/0x10 [ 288.883558][ T9361] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.885660][ T9361] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 288.887710][ T9361] ? drm_vblank_get+0x14f/0x280 [ 288.889413][ T9361] drm_fb_helper_ioctl+0x156/0x1a0 [ 288.891194][ T9361] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 288.893121][ T9361] do_fb_ioctl+0x3d4/0x7d0 [ 288.894670][ T9361] ? __pfx_do_fb_ioctl+0x10/0x10 [ 288.896389][ T9361] ? do_vfs_ioctl+0x515/0x1ad0 [ 288.898108][ T9361] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 288.900464][ T9361] ? selinux_file_ioctl+0x180/0x270 [ 288.902259][ T9361] ? selinux_file_ioctl+0xb4/0x270 [ 288.904041][ T9361] fb_ioctl+0xf1/0x160 [ 288.905355][ T9361] ? __pfx_fb_ioctl+0x10/0x10 [ 288.907005][ T9361] __x64_sys_ioctl+0x193/0x220 [ 288.908664][ T9361] do_syscall_64+0xcd/0x250 [ 288.910246][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.912318][ T9361] RIP: 0033:0x7f9c7577def9 [ 288.913859][ T9361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.920381][ T9361] RSP: 002b:00007f9c76578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.923214][ T9361] RAX: ffffffffffffffda RBX: 00007f9c75935f80 RCX: 00007f9c7577def9 [ 288.925883][ T9361] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 288.928649][ T9361] RBP: 00007f9c757f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 288.931378][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.934073][ T9361] R13: 0000000000000000 R14: 00007f9c75935f80 R15: 00007ffef298c578 [ 288.936783][ T9361] [ 288.938415][ T9361] Kernel Offset: disabled [ 288.940047][ T9361] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:12:31 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85031285 RDI=ffffffff9a5b4fa0 RBP=ffffffff9a5b4f60 RSP=ffffc90006477500 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006e R14=ffffffff85031220 R15=0000000000000000 RIP=ffffffff850312af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f9c765786c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555568ea9808 CR3=000000002bbf2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a093 ffffffff8100a0af ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0af ffffffff8100a093 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a093 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc7df199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc7df19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc7df19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc7df19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc7df1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc7df1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc7f0b488 00007f9cc7f0b480 00007f9cc7f0b478 00007f9cc7f0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc8a6d100 00007f9cc7f0b440 00007f9c00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cc7f0b498 00007f9cc7f0b490 00007f9cc7f0b488 00007f9cc7f0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc900038d7148 RCX=ffffffff813ced16 RDX=ffff888028010000 RSI=ffffffff813cee49 RDI=0000000000000005 RBP=ffffc900038d7138 RSP=ffffc900038d7020 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc900038d7150 R13=ffffc900038d7158 R14=ffffc900038d0000 R15=ffffc900038d8000 RIP=ffffffff818bd040 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7091267d60 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000fffff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f709070b6a3 00007f709070b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe259e57c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555de4d870 000055555de4d860 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555de3d4a8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555de4b62c 000055555de4aff0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555de437c8 000055555de437b0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806021000010000 080806080103dc00 1000108803048080 8088080010800306 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100003ffffff ff0403ffffffff04 0480040100001408 060a0103fc003065 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c69662f2e01ffff ffffffffffffef08 0480030010001b80 0401c7080006142d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84002e01ffffffff fffffffffb081b80 0310800401000010 0806021000010000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080806080103dc00 1000108803048080 8088080010800306 1000148004010000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000002 RCX=ffffffff81d1fda4 RDX=ffff88804d6ea440 RSI=0000000000000007 RDI=0000000000000005 RBP=000000000003db0c RSP=ffffc900061a78a0 R8 =0000000000000005 R9 =0000000000000007 R10=0000000000000002 R11=0000000000000000 R12=0000000000000003 R13=ffff88802e4a9c80 R14=0000000000000000 R15=ffff888033955d90 RIP=ffffffff818bd14b RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f25886996c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2588698f98 CR3=0000000025b5a000 CR4=00350ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2587b0b488 00007f2587b0b480 00007f2587b0b478 00007f2587b0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f258866d100 00007f2587b0b440 00007f2587b0b458 00007f2587b0b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2587b0b498 00007f2587b0b490 00007f2587b0b488 00007f2587b0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000006d7daf RBX=0000000000000003 RCX=ffffffff8b170ab9 RDX=0000000000000000 RSI=ffffffff8b4cd740 RDI=ffffffff8bb0fc00 RBP=ffffed1003adb488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fd9 R10=ffff88806a937ecb R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6da440 R14=ffffffff90144d98 R15=0000000000000000 RIP=ffffffff8b171eaf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c36d3ed CR3=0000000025b5a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25879f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2587b0b488 00007f2587b0b480 00007f2587b0b478 00007f2587b0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f258866d100 00007f2587b0b440 00007f2587b00004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2587b0b498 00007f2587b0b490 00007f2587b0b488 00007f2587b0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000