last executing test programs: 4m24.944148234s ago: executing program 2 (id=5559): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x400000, 0x2, 0x8}) 4m24.943795934s ago: executing program 2 (id=5563): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) 4m24.879378686s ago: executing program 2 (id=5566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0xfffffffc, 0x25dfdc01, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m24.814934124s ago: executing program 2 (id=5570): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x140e, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x10) 4m24.814290829s ago: executing program 2 (id=5572): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 4m24.813851712s ago: executing program 2 (id=5576): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000020c0)=0x496, 0x4) 4m8.722468964s ago: executing program 32 (id=5576): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000020c0)=0x496, 0x4) 2m31.707628084s ago: executing program 4 (id=10845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x0) 2m31.659121188s ago: executing program 4 (id=10846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) 2m31.654780907s ago: executing program 4 (id=10848): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) 2m31.573889385s ago: executing program 4 (id=10851): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000340)="c021", 0x2}], 0x1, 0xee, 0x7) 2m31.460410295s ago: executing program 4 (id=10855): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 2m31.370378204s ago: executing program 4 (id=10857): symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 2m15.186735335s ago: executing program 33 (id=10857): symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 1m38.567477007s ago: executing program 5 (id=12761): r0 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.484747486s ago: executing program 5 (id=12764): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 1m38.433443138s ago: executing program 5 (id=12765): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x38, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x22, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 1m38.383992652s ago: executing program 5 (id=12767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m38.332429334s ago: executing program 5 (id=12768): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd27, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008059}, 0x3000c81c) 1m37.926204758s ago: executing program 5 (id=12777): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m37.866313821s ago: executing program 34 (id=12777): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m9.571919333s ago: executing program 0 (id=13555): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r1, r2}, 0xc) 1m9.571210618s ago: executing program 0 (id=13557): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 1m9.519291407s ago: executing program 0 (id=13560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 1m9.41371491s ago: executing program 0 (id=13564): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m9.354551326s ago: executing program 0 (id=13566): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000300)={[{@gid={'gid', 0x3d, r1}}]}) 1m9.215597263s ago: executing program 0 (id=13569): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={0x0, 0xd, 0x20}, &(0x7f0000000500)=0xc) 1m9.185626768s ago: executing program 35 (id=13569): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={0x0, 0xd, 0x20}, &(0x7f0000000500)=0xc) 1.864535403s ago: executing program 3 (id=15549): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x81) 1.817533389s ago: executing program 3 (id=15552): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1.455507621s ago: executing program 1 (id=15569): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df4000000050002000700000008000300"], 0x44}}, 0x0) 1.45290683s ago: executing program 1 (id=15570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1.383711265s ago: executing program 7 (id=15571): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e0", 0x1}], 0x1}}], 0x1, 0x2000c000) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="a9", 0x1}], 0x1}, 0x8000) 1.334185114s ago: executing program 1 (id=15572): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.290934365s ago: executing program 1 (id=15573): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 1.158129526s ago: executing program 1 (id=15584): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 1.11672112s ago: executing program 1 (id=15579): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000005c0)={0x84, &(0x7f00000001c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x60b, 0x0) 893.579969ms ago: executing program 3 (id=15585): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x14001400, 0x0, 0x0, 0x0, 0x0, 0x0) 889.952184ms ago: executing program 3 (id=15587): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@remote, 0x4e22, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x5, 0x6, 0x5, 0x0, 0x40000000000000}, {0x9, 0x100009, 0x53e5, 0xb}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3}, {{@in=@loopback, 0xffffeffd, 0x32}, 0xa, @in=@multicast1, 0x1502, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) 846.114511ms ago: executing program 3 (id=15589): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 449.500057ms ago: executing program 7 (id=15592): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x91) umount2(&(0x7f0000000000)='./file0\x00', 0x1) getdents(r0, 0x0, 0x0) 430.583305ms ago: executing program 3 (id=15593): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 422.128791ms ago: executing program 7 (id=15594): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 290.910348ms ago: executing program 6 (id=15596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf250900000008000300", @ANYRES32=r3, @ANYBLOB="0500080006"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) 290.760755ms ago: executing program 7 (id=15597): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000040)=0x7fffffff, 0x4) 290.605327ms ago: executing program 6 (id=15598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0xa6ff, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 227.640565ms ago: executing program 7 (id=15599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0xe0ee, {0x4000, 0xeeee0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5d4193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd09ba345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e961c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375203000000000000005431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2f36e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) 225.01936ms ago: executing program 6 (id=15600): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r0, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) 138.357856ms ago: executing program 7 (id=15601): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x20008040}, 0x0) 73.693454ms ago: executing program 6 (id=15602): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7, 0xfffff001}, 0x10) 870.912µs ago: executing program 6 (id=15603): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x800, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file3\x00', 0x0) 0s ago: executing program 6 (id=15604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) kernel console output (not intermixed with test programs): usb 5-1: USB disconnect, device number 10 [ 340.521277][ T1753] syz_tun: left allmulticast mode [ 340.554699][ T1759] __nla_validate_parse: 6 callbacks suppressed [ 340.554710][ T1759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13331'. [ 340.688434][ T1770] lo speed is unknown, defaulting to 1000 [ 340.700044][ T3250] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 340.715401][ T1774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13338'. [ 340.752767][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 340.764305][ T1780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13341'. [ 340.838342][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 341.710332][ T40] kauditd_printk_skb: 162 callbacks suppressed [ 341.710342][ T40] audit: type=1400 audit(2000000076.215:67271): avc: denied { read write } for pid=1782 comm="syz.6.13344" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.720393][ T40] audit: type=1400 audit(2000000076.215:67272): avc: denied { open } for pid=1782 comm="syz.6.13344" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.729202][ T40] audit: type=1400 audit(2000000076.233:67273): avc: denied { block_suspend } for pid=1787 comm="syz.0.13342" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.747516][ T40] audit: type=1400 audit(2000000076.262:67274): avc: denied { recv } for pid=5923 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=37062 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 341.763761][ T40] audit: type=1400 audit(2000000076.271:67275): avc: denied { mount } for pid=1791 comm="syz.3.13347" name="/" dev="ocfs2_dlmfs" ino=116486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 341.766285][ T1792] (syz.3.13347,1792,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 341.773926][ T40] audit: type=1400 audit(2000000076.271:67276): avc: denied { add_name } for pid=1791 comm="syz.3.13347" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.787888][ T40] audit: type=1400 audit(2000000076.271:67277): avc: denied { create } for pid=1791 comm="syz.3.13347" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 341.801152][ T40] audit: type=1400 audit(2000000076.271:67278): avc: denied { associate } for pid=1791 comm="syz.3.13347" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 341.837417][ T40] audit: type=1400 audit(2000000076.336:67279): avc: denied { create } for pid=1802 comm="syz.3.13353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 341.845173][ T40] audit: type=1400 audit(2000000076.346:67280): avc: denied { setopt } for pid=1802 comm="syz.3.13353" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.129594][ T1846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13373'. [ 342.374800][ T1859] team0: Device xfrm1 is of different type [ 342.424313][ T1866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13382'. [ 342.836292][ T1891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13393'. [ 343.052839][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 343.192685][ T1911] batadv_slave_1: entered promiscuous mode [ 343.195332][ T1910] batadv_slave_1: left promiscuous mode [ 343.583019][ T1926] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13410'. [ 343.672447][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 343.704786][ T1932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13413'. [ 343.710098][ T1934] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 344.251766][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.737299][ T1953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13423'. [ 344.792190][ T1961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13426'. [ 346.588422][ T2076] loop5: detected capacity change from 0 to 7 [ 346.647122][ T30] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.650857][ T30] buffer_io_error: 70 callbacks suppressed [ 346.650867][ T30] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.657580][ T2076] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.661277][ T2076] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.663867][ T2076] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.667523][ T2076] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.670765][ T2076] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.673836][ T2076] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.676710][ T2076] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.679877][ T2076] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.682520][ T2076] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.686058][ T2076] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.688910][ T2076] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.692011][ T2076] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.694561][ T2076] ldm_validate_partition_table(): Disk read failed. [ 346.696734][ T2076] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.700023][ T2076] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.702788][ T2076] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.705889][ T2076] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.708736][ T2076] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.711803][ T2076] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.714349][ T2076] Dev loop5: unable to read RDB block 0 [ 346.716229][ T2076] loop5: unable to read partition table [ 346.718358][ T2076] loop5: partition table beyond EOD, truncated [ 346.720743][ T2076] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 347.031050][ T2130] __nla_validate_parse: 2 callbacks suppressed [ 347.031060][ T2130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13498'. [ 347.069486][ T40] kauditd_printk_skb: 169 callbacks suppressed [ 347.069529][ T40] audit: type=1400 audit(2000000081.228:67450): avc: denied { name_bind } for pid=2133 comm="syz.6.13500" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 347.107361][ T40] audit: type=1400 audit(2000000081.265:67451): avc: denied { create } for pid=2137 comm="syz.0.13502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 347.118364][ T40] audit: type=1400 audit(2000000081.274:67452): avc: denied { bind } for pid=2137 comm="syz.0.13502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 347.135230][ T40] audit: type=1400 audit(2000000081.284:67453): avc: denied { create } for pid=2139 comm="syz.6.13503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.141559][ T40] audit: type=1400 audit(2000000081.303:67454): avc: denied { shutdown } for pid=2139 comm="syz.6.13503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.148043][ T40] audit: type=1400 audit(2000000081.303:67455): avc: denied { getopt } for pid=2139 comm="syz.6.13503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.154395][ T40] audit: type=1400 audit(2000000081.303:67456): avc: denied { connect } for pid=2139 comm="syz.6.13503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.160964][ T40] audit: type=1400 audit(2000000081.303:67457): avc: denied { name_connect } for pid=2139 comm="syz.6.13503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 347.204660][ T40] audit: type=1400 audit(2000000081.359:67458): avc: denied { read open } for pid=2143 comm="syz.6.13505" path="time:[4026533200]" dev="nsfs" ino=4026533200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 347.235759][ T2149] openvswitch: netlink: nsh attr 0 has unexpected len 16 expected 0 [ 347.238380][ T2149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.266391][ T40] audit: type=1400 audit(2000000081.415:67459): avc: denied { read write } for pid=2150 comm="syz.6.13508" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 347.531770][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 347.704164][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.706758][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.709691][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.712274][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.716869][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.719506][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.721816][ T10] usb 5-1: Product: syz [ 347.723051][ T10] usb 5-1: Manufacturer: syz [ 347.728167][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 347.729978][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 347.732387][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 347.734270][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 348.002642][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 348.002717][ T53] usb 5-1: USB disconnect, device number 11 [ 348.004935][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 348.008687][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 348.601025][ T3250] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 348.762922][ T3250] usb 11-1: config 0 has no interfaces? [ 348.766621][ T3250] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.770492][ T3250] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.774900][ T3250] usb 11-1: Product: syz [ 348.776841][ T3250] usb 11-1: Manufacturer: syz [ 348.778937][ T3250] usb 11-1: SerialNumber: syz [ 348.782848][ T2176] 9p: Unknown access argument 18446744073709551615: -34 [ 348.787327][ T3250] usb 11-1: config 0 descriptor?? [ 349.007929][ T53] usb 11-1: USB disconnect, device number 6 [ 349.597243][ T2225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13543'. [ 349.710278][ T2239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13550'. [ 349.802375][ T2247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13552'. [ 349.869293][ T2256] bpf: Bad value for 'gid' [ 350.329680][ T6081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.334839][ T6081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.338026][ T6081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.341447][ T6081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.344731][ T6081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.485146][ T1224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.488730][ T1224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 350.507570][ T2282] lo speed is unknown, defaulting to 1000 [ 350.563755][ T1224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.567138][ T1224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 350.599341][ T2282] chnl_net:caif_netlink_parms(): no params data found [ 350.671757][ T1224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.675312][ T1224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 350.682981][ T2282] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.686698][ T2282] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.689025][ T2282] bridge_slave_0: entered allmulticast mode [ 350.692367][ T2282] bridge_slave_0: entered promiscuous mode [ 350.695840][ T2282] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.698478][ T2282] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.701012][ T2282] bridge_slave_1: entered allmulticast mode [ 350.703757][ T2282] bridge_slave_1: entered promiscuous mode [ 350.719261][ T2282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.723982][ T2282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.743869][ T2282] team0: Port device team_slave_0 added [ 350.746912][ T2282] team0: Port device team_slave_1 added [ 350.773607][ T2282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.776071][ T2282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.785012][ T2282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.789388][ T2282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.791564][ T2282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.802288][ T2282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.821184][ T1224] bond0: (slave ): Releasing backup interface [ 350.857701][ T1224] netdevsim netdevsim0 (unregistering): left allmulticast mode [ 350.864732][ T1224] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.868684][ T1224] netdevsim netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 350.896030][ T2282] hsr_slave_0: entered promiscuous mode [ 350.898434][ T2282] hsr_slave_1: entered promiscuous mode [ 351.025808][ T1141] netdevsim netdevsim0 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.040491][ T2282] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 351.047298][ T1141] netdevsim netdevsim0 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.052028][ T2282] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 351.064100][ T4609] netdevsim netdevsim0 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.067230][ T2282] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 351.074122][ T2282] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 351.091627][ T4027] netdevsim netdevsim0 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.094837][ T1224] team0: left allmulticast mode [ 351.096438][ T1224] team_slave_0: left allmulticast mode [ 351.098196][ T1224] team_slave_1: left allmulticast mode [ 351.099987][ T1224] geneve0: left allmulticast mode [ 351.101829][ T1224] bridge0: port 3(team0) entered disabled state [ 351.106349][ T1224] bridge_slave_0: left allmulticast mode [ 351.108191][ T1224] bridge_slave_0: left promiscuous mode [ 351.110109][ T1224] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.143426][ T1224] batman_adv: batadv0: Interface deactivated: gretap1 [ 351.449089][ T1224] batman_adv: batadv0: Removing interface: gretap1 [ 351.493505][ T1224] geneve0 (unregistering): left promiscuous mode [ 351.496512][ T1224] team0: Port device geneve0 removed [ 352.326249][ T1224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.343453][ T1224] bond_slave_0: left allmulticast mode [ 352.346974][ T1224] bond0 (unregistering): (slave c@0): Releasing backup interface [ 352.397012][ T1224] @0: left allmulticast mode [ 352.400585][ T1224] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 352.439946][ T1224] bridge_slave_1: left allmulticast mode [ 352.442509][ T1224] bond0 (unregistering): Released all slaves [ 352.446800][ T1224] bond1 (unregistering): Released all slaves [ 352.516717][ T1224] bond2 (unregistering): Released all slaves [ 352.523064][ T1224] bond3 (unregistering): Released all slaves [ 352.529209][ T1224] bond4 (unregistering): Released all slaves [ 352.558179][ T64] Bluetooth: hci1: command tx timeout [ 352.609059][ T1224] bond5 (unregistering): Released all slaves [ 352.681788][ T1224] bond6 (unregistering): Released all slaves [ 352.721167][ T2327] netem: change failed [ 352.732706][ T2347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13594'. [ 352.741259][ T2347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13594'. [ 352.827801][ T2356] loop8: detected capacity change from 0 to 7 [ 352.836872][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 352.836882][ T40] audit: type=1400 audit(2000000086.624:67589): avc: denied { mounton } for pid=2357 comm="syz.1.13599" path="/3645/file0" dev="tmpfs" ino=18405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 352.839028][T30222] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 352.848725][T30222] loop8: partition table partially beyond EOD, truncated [ 352.851245][T30222] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 352.852343][ T40] audit: type=1400 audit(2000000086.643:67590): avc: denied { mount } for pid=2357 comm="syz.1.13599" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 352.854744][T30222] loop8: p2 start 956478 is beyond EOD, truncated [ 352.861033][ T2282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.863990][ T40] audit: type=1400 audit(2000000086.652:67591): avc: denied { mounton } for pid=2357 comm="syz.1.13599" path="/3645/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 352.874294][ T40] audit: type=1400 audit(2000000086.652:67592): avc: denied { mount } for pid=2357 comm="syz.1.13599" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 352.876689][ T2356] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 352.877680][ T2282] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.885812][ T2356] loop8: partition table partially beyond EOD, truncated [ 352.885929][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.888402][ T2356] loop8: p1 size 3651402975 extends beyond EOD, [ 352.890420][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.893035][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.895303][ T2356] truncated [ 352.897927][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.899497][ T40] audit: type=1400 audit(2000000086.652:67593): avc: denied { remount } for pid=2357 comm="syz.1.13599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 352.902343][ T2356] loop8: p2 start 956478 is beyond EOD, [ 352.909475][ T40] audit: type=1400 audit(2000000086.661:67594): avc: denied { create } for pid=2359 comm="syz.3.13600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 352.909502][ T40] audit: type=1400 audit(2000000086.671:67595): avc: denied { setopt } for pid=2359 comm="syz.3.13600" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 352.909523][ T40] audit: type=1400 audit(2000000086.680:67596): avc: denied { connect } for pid=2359 comm="syz.3.13600" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 352.909584][ T40] audit: type=1400 audit(2000000086.680:67597): avc: denied { write } for pid=2359 comm="syz.3.13600" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 352.909606][ T40] audit: type=1400 audit(2000000086.689:67598): avc: denied { unmount } for pid=6125 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 352.930211][ T2282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.941241][ T2356] truncated [ 352.972020][T30222] udevd[30222]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 352.982509][T30222] udevd[30222]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 353.058232][ T2282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.197981][ T2282] veth0_vlan: entered promiscuous mode [ 353.203738][ T2282] veth1_vlan: entered promiscuous mode [ 353.222580][ T2282] veth0_macvtap: entered promiscuous mode [ 353.227068][ T2282] veth1_macvtap: entered promiscuous mode [ 353.237447][ T2282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.244214][ T2282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.250442][ T224] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.254375][ T224] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.263809][ T224] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.267094][ T224] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.319914][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.322440][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.343516][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.348391][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.528714][ T2423] bond5: ARP target 4.0.0.0 is already present [ 353.531288][ T2423] bond5: option arp_ip_target: invalid value (4) [ 353.534808][ T2423] bond5 (unregistering): Released all slaves [ 353.621735][ T2435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13631'. [ 353.688532][ T2444] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13635'. [ 353.839414][ T2463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13644'. [ 354.591101][ T1224] : left promiscuous mode [ 354.683610][ T1224] tipc: Left network mode [ 354.770659][ T64] Bluetooth: hci1: command tx timeout [ 355.061333][ T1224] IPVS: stopping backup sync thread 32426 ... [ 355.306419][ T2573] kvm: kvm [2570]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 355.792468][ T1224] hsr_slave_0: left promiscuous mode [ 355.795299][ T1224] hsr_slave_1: left promiscuous mode [ 355.798266][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.800686][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.803978][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.806331][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.817961][ T1224] veth1_to_hsr: left allmulticast mode [ 355.820173][ T1224] veth1_to_hsr: left promiscuous mode [ 355.821988][ T1224] veth1_macvtap: left allmulticast mode [ 355.823886][ T1224] veth1_macvtap: left promiscuous mode [ 355.827908][ T1224] veth0_macvtap: left promiscuous mode [ 355.830254][ T1224] veth1_vlan: left allmulticast mode [ 355.832088][ T1224] veth1_vlan: left promiscuous mode [ 355.833797][ T1224] veth0_vlan: left promiscuous mode [ 355.949416][ T2642] netlink: 'syz.1.13718': attribute type 1 has an invalid length. [ 356.036989][ T2647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13719'. [ 356.062439][ T1224] vlan0 (unregistering): left allmulticast mode [ 356.065773][ T1224] veth0_vlan (unregistering): left allmulticast mode [ 356.255336][ T1224] team_slave_1 (unregistering): left promiscuous mode [ 356.259209][ T1224] team0 (unregistering): Port device team_slave_1 removed [ 356.289384][ T1224] team_slave_0 (unregistering): left promiscuous mode [ 356.294254][ T1224] team0 (unregistering): Port device team_slave_0 removed [ 356.570096][ T2661] sp0: Synchronizing with TNC [ 356.887354][ T2706] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 356.891946][ T2706] syzkaller0: group set to 0 [ 356.908805][ T3250] Process accounting resumed [ 356.923562][ T2712] GUP no longer grows the stack in syz.7.13745 (2712): 200000007000-20000000a000 (200000004000) [ 356.932879][ T2712] CPU: 1 UID: 0 PID: 2712 Comm: syz.7.13745 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.932908][ T2712] Tainted: [L]=SOFTLOCKUP [ 356.932912][ T2712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 356.932919][ T2712] Call Trace: [ 356.932923][ T2712] [ 356.932927][ T2712] dump_stack_lvl+0x16c/0x1f0 [ 356.932944][ T2712] gup_vma_lookup+0x1d2/0x220 [ 356.932959][ T2712] __get_user_pages+0x241/0x3590 [ 356.932977][ T2712] ? __x64_sys_setsockopt+0xbd/0x160 [ 356.932992][ T2712] ? do_syscall_64+0xcd/0xf80 [ 356.933003][ T2712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.933014][ T2712] ? __pfx___get_user_pages+0x10/0x10 [ 356.933032][ T2712] __gup_longterm_locked+0x2dd/0x17e0 [ 356.933046][ T2712] ? __lock_acquire+0x410/0x2890 [ 356.933061][ T2712] ? __pfx___gup_longterm_locked+0x10/0x10 [ 356.933082][ T2712] pin_user_pages+0x13c/0x160 [ 356.933096][ T2712] ? __pfx_pin_user_pages+0x10/0x10 [ 356.933114][ T2712] xdp_umem_create+0x741/0x1270 [ 356.933133][ T2712] xsk_setsockopt+0x9cf/0xc00 [ 356.933147][ T2712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.933165][ T2712] ? selinux_socket_setsockopt+0x6a/0x80 [ 356.933182][ T2712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.933196][ T2712] do_sock_setsockopt+0xf3/0x1d0 [ 356.933208][ T2712] __sys_setsockopt+0x1a0/0x230 [ 356.933224][ T2712] __x64_sys_setsockopt+0xbd/0x160 [ 356.933237][ T2712] ? do_syscall_64+0x91/0xf80 [ 356.933246][ T2712] ? lockdep_hardirqs_on+0x7c/0x110 [ 356.933256][ T2712] do_syscall_64+0xcd/0xf80 [ 356.933267][ T2712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.933277][ T2712] RIP: 0033:0x7fc3b058f7c9 [ 356.933286][ T2712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.933296][ T2712] RSP: 002b:00007fc3b140a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 356.933306][ T2712] RAX: ffffffffffffffda RBX: 00007fc3b07e5fa0 RCX: 00007fc3b058f7c9 [ 356.933313][ T2712] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 356.933319][ T2712] RBP: 00007fc3b0613f91 R08: 0000000000000020 R09: 0000000000000000 [ 356.933324][ T2712] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 356.933330][ T2712] R13: 00007fc3b07e6038 R14: 00007fc3b07e5fa0 R15: 00007ffcb32ebe78 [ 356.933344][ T2712] [ 356.994609][ T64] Bluetooth: hci1: command tx timeout [ 357.245321][ T1224] IPVS: stop unused estimator thread 0... [ 357.346707][ T2762] loop5: detected capacity change from 0 to 7 [ 357.396257][ C3] blk_print_req_error: 5 callbacks suppressed [ 357.396268][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.401440][ C3] buffer_io_error: 5 callbacks suppressed [ 357.401448][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 357.407399][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.411442][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 357.415310][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.419361][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 357.422923][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.427001][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 357.430510][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.433722][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 357.439613][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.443827][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 357.447691][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.450908][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 357.453649][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.457460][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 357.460031][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.461092][ T2762] ldm_validate_partition_table(): Disk read failed. [ 357.463765][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 357.465220][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.473868][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 357.481469][ T2762] Dev loop5: unable to read RDB block 0 [ 357.484661][ T2773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13768'. [ 357.487016][ T2762] loop5: unable to read partition table [ 357.488418][ T2773] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13768'. [ 357.490042][ T2762] loop5: partition table beyond EOD, truncated [ 357.514089][ T2762] loop_reread_partitions: partition scan of loop5 (ʖxs) failed (rc=-5) [ 357.535364][ T2777] dvmrp6: left allmulticast mode [ 357.544753][ T2779] binder: 2778:2779 ioctl c0306201 200000000640 returned -22 [ 357.591991][ T2786] team0: Device gtp0 is up. Set it down before adding it as a team port [ 357.753775][ T2794] nbd2: detected capacity change from 0 to 549764202496 [ 357.757888][ T64] block nbd2: Receive control failed (result -32) [ 357.758583][T30222] block nbd2: Send control failed (result -32) [ 357.764149][T30222] block nbd2: Request send failed, requeueing [ 357.774598][ T30] block nbd2: Dead connection, failed to find a fallback [ 357.777944][ T30] block nbd2: shutting down sockets [ 357.780238][T30222] ldm_validate_partition_table(): Disk read failed. [ 357.782578][T30222] Dev nbd2: unable to read RDB block 0 [ 357.784537][T30222] nbd2: unable to read partition table [ 357.790291][T30222] ldm_validate_partition_table(): Disk read failed. [ 357.792497][T30222] Dev nbd2: unable to read RDB block 0 [ 357.794386][T30222] nbd2: unable to read partition table [ 358.155175][ T2302] libceph: connect (1)[c::]:6789 error -101 [ 358.157530][ T2302] libceph: mon0 (1)[c::]:6789 connect error [ 358.247609][ T40] kauditd_printk_skb: 256 callbacks suppressed [ 358.247620][ T40] audit: type=1400 audit(2000000091.684:67855): avc: denied { map_create } for pid=2850 comm="syz.1.13797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 358.254915][ T40] audit: type=1400 audit(2000000091.684:67856): avc: denied { map_read map_write } for pid=2850 comm="syz.1.13797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 358.287828][ T2839] ceph: No mds server is up or the cluster is laggy [ 358.372205][ T40] audit: type=1400 audit(2000000091.796:67857): avc: denied { setopt } for pid=2860 comm="syz.1.13802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 358.430571][ T40] audit: type=1400 audit(2000000091.861:67858): avc: denied { create } for pid=2867 comm="syz.1.13805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.437558][ T40] audit: type=1400 audit(2000000091.861:67859): avc: denied { connect } for pid=2867 comm="syz.1.13805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.443677][ T40] audit: type=1400 audit(2000000091.861:67860): avc: denied { ioctl } for pid=2867 comm="syz.1.13805" path="socket:[122604]" dev="sockfs" ino=122604 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.452358][ T40] audit: type=1400 audit(2000000091.861:67861): avc: denied { write } for pid=2867 comm="syz.1.13805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.482822][ T40] audit: type=1400 audit(2000000091.908:67862): avc: denied { mount } for pid=2873 comm="syz.1.13807" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 358.496262][ T40] audit: type=1400 audit(2000000091.917:67863): avc: denied { unmount } for pid=6125 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 358.502823][ T40] audit: type=1400 audit(2000000091.917:67864): avc: denied { mount } for pid=2875 comm="syz.6.13808" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 358.616054][ T2889] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 358.627154][ T2889] macsec1: entered promiscuous mode [ 358.629136][ T2889] macsec1: entered allmulticast mode [ 358.632576][ T2889] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 358.779211][ T2907] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.900333][ T2921] loop6: detected capacity change from 0 to 524279808 [ 359.019131][ T6190] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 359.210333][ T6190] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 359.214256][ T6190] usb 11-1: config 0 has no interface number 0 [ 359.216560][ T6190] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.220945][ T6190] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 359.223205][ T64] Bluetooth: hci1: command tx timeout [ 359.224310][ T6190] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 359.229882][ T6190] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 359.233567][ T6190] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 359.237007][ T6190] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 359.241307][ T6190] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 359.244170][ T6190] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.252368][ T6190] usb 11-1: config 0 descriptor?? [ 359.254572][ T2905] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 359.256952][ T2905] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 359.263253][ T6190] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 359.480242][ T2302] usb 11-1: USB disconnect, device number 7 [ 359.483971][ T2302] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 360.123071][ T2960] binder: 2953:2960 ioctl c018620c 200000000000 returned -1 [ 360.185536][ T2971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13843'. [ 360.501819][ T6190] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 360.538398][ T3029] tmpfs: Invalid gid '0x00000000ffffffff' [ 360.664283][ T6190] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 360.667782][ T6190] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 360.671991][ T6190] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.676000][ T6190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.680098][ T2977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 360.682499][ T2977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 360.689309][ T6190] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.915576][ T3250] usb 6-1: USB disconnect, device number 17 [ 361.695513][ T3069] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13879'. [ 361.878570][ T3087] netlink: 'syz.6.13888': attribute type 8 has an invalid length. [ 361.962357][ T3095] netlink: 'syz.7.13892': attribute type 9 has an invalid length. [ 361.965068][ T3095] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.13892'. [ 362.015933][ T3103] batadv_slave_1: entered promiscuous mode [ 362.018672][ T3102] batadv_slave_1: left promiscuous mode [ 362.404964][ T6691] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 362.459592][ T3140] kAFS: unable to lookup cell '(,cL' [ 362.461694][ T3140] kAFS: unable to lookup cell '\,' [ 362.566708][ T6691] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 362.569740][ T6691] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.573131][ T6691] usb 6-1: config 0 has no interfaces? [ 362.577430][ T6691] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 362.580350][ T6691] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 362.582990][ T6691] usb 6-1: Product: syz [ 362.584370][ T6691] usb 6-1: Manufacturer: syz [ 362.585846][ T6691] usb 6-1: SerialNumber: syz [ 362.588724][ T6691] usb 6-1: config 0 descriptor?? [ 362.656692][ T3155] sctp: Trying to GSO but underlying device doesn't support it. [ 362.806244][ T6691] usb 6-1: USB disconnect, device number 18 [ 363.591269][ T3211] syz_tun: entered allmulticast mode [ 363.594557][ T3210] syz_tun: left allmulticast mode [ 363.620836][ T40] kauditd_printk_skb: 203 callbacks suppressed [ 363.620845][ T40] audit: type=1400 audit(2000000096.706:68068): avc: denied { create } for pid=3212 comm="syz.1.13946" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 363.631578][ T40] audit: type=1400 audit(2000000096.706:68069): avc: denied { map } for pid=3212 comm="syz.1.13946" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=124389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 363.640165][ T40] audit: type=1400 audit(2000000096.715:68070): avc: denied { read write } for pid=3212 comm="syz.1.13946" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=124389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 363.648395][ T40] audit: type=1400 audit(2000000096.715:68071): avc: denied { execmem } for pid=3212 comm="syz.1.13946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 363.667783][ T40] audit: type=1400 audit(2000000096.762:68072): avc: denied { read } for pid=3214 comm="syz.1.13947" dev="nsfs" ino=4026532892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 363.674880][ T40] audit: type=1400 audit(2000000096.762:68073): avc: denied { open } for pid=3214 comm="syz.1.13947" path="net:[4026532892]" dev="nsfs" ino=4026532892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 363.682249][ T40] audit: type=1400 audit(2000000096.762:68074): avc: denied { create } for pid=3214 comm="syz.1.13947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 363.688899][ T40] audit: type=1400 audit(2000000096.762:68075): avc: denied { ioctl } for pid=3214 comm="syz.1.13947" path="socket:[127160]" dev="sockfs" ino=127160 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 363.777511][ T3250] e1000 0000:00:06.0 eth0: Reset adapter [ 363.945027][ T40] audit: type=1400 audit(2000000097.015:68076): avc: denied { create } for pid=3226 comm="syz.1.13953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.951929][ T40] audit: type=1400 audit(2000000097.015:68077): avc: denied { bind } for pid=3226 comm="syz.1.13953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 366.061852][ T224] wlan1: Trigger new scan to find an IBSS to join [ 366.062951][ T3250] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 367.134916][ T3237] netem: incorrect ge model size [ 367.137179][ T3237] netem: change failed [ 367.161569][ T3239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13960'. [ 367.224013][ T3249] vcan0: tx address claim with dest, not broadcast [ 367.339414][ T3266] binder: 3265:3266 unknown command 0 [ 367.341120][ T3266] binder: 3265:3266 ioctl c0306201 2000000005c0 returned -22 [ 367.534150][ T3288] netlink: 156 bytes leftover after parsing attributes in process `syz.6.13980'. [ 367.537260][ T3288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13980'. [ 368.463111][ T3359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14011'. [ 368.509401][ T3363] blkio.reset_stats is deprecated [ 368.686944][ T3374] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14018'. [ 368.700198][ T3376] netlink: 'syz.1.14019': attribute type 8 has an invalid length. [ 368.703212][ T3376] sch_fq: defrate 0 ignored. [ 368.973421][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 368.973431][ T40] audit: type=1400 audit(2000000101.719:68171): avc: denied { create } for pid=3400 comm="syz.3.14032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.981865][ T40] audit: type=1400 audit(2000000101.719:68172): avc: denied { setopt } for pid=3400 comm="syz.3.14032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.988196][ T40] audit: type=1400 audit(2000000101.719:68173): avc: denied { ioctl } for pid=3400 comm="syz.3.14032" path="socket:[125189]" dev="sockfs" ino=125189 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 369.007351][ T40] audit: type=1400 audit(2000000101.747:68174): avc: denied { create } for pid=3403 comm="syz.6.14034" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 369.021919][ T40] audit: type=1400 audit(2000000101.747:68175): avc: denied { map } for pid=3403 comm="syz.6.14034" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=125195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 369.029949][ T3406] netlink: 'syz.3.14033': attribute type 2 has an invalid length. [ 369.032585][ T3406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14033'. [ 369.035593][ T40] audit: type=1400 audit(2000000101.747:68176): avc: denied { read write } for pid=3403 comm="syz.6.14034" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=125195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 369.064007][ T40] audit: type=1400 audit(2000000101.794:68177): avc: denied { create } for pid=3409 comm="syz.1.14036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.072369][ T40] audit: type=1400 audit(2000000101.812:68178): avc: denied { setopt } for pid=3409 comm="syz.1.14036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.079938][ T40] audit: type=1400 audit(2000000101.822:68179): avc: denied { bind } for pid=3409 comm="syz.1.14036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.081410][ T3414] tipc: Started in network mode [ 369.086589][ T40] audit: type=1400 audit(2000000101.822:68180): avc: denied { name_bind } for pid=3409 comm="syz.1.14036" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 369.087757][ T3414] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 369.100290][ T3414] tipc: Enabled bearer , priority 10 [ 369.110790][ T3414] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14037'. [ 369.238557][ T46] wlan1: Trigger new scan to find an IBSS to join [ 369.343544][ T3445] netlink: 'syz.3.14053': attribute type 4 has an invalid length. [ 369.347471][ T3445] netlink: 'syz.3.14053': attribute type 8 has an invalid length. [ 369.350071][ T3445] netlink: 212 bytes leftover after parsing attributes in process `syz.3.14053'. [ 369.486641][ T3462] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 369.489652][ T3462] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 369.495136][ T3462] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 369.918704][ T3516] netlink: 'syz.3.14087': attribute type 9 has an invalid length. [ 369.978023][ T3522] netlink: 108 bytes leftover after parsing attributes in process `syz.3.14090'. [ 369.982574][ T3524] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.14092'. [ 370.306804][ T3250] tipc: Node number set to 8432298 [ 370.937500][ T3250] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 371.109952][ T3250] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 371.117361][ T3250] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.124332][ T3250] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 371.127394][ T3250] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 371.130268][ T3250] usb 12-1: Manufacturer: syz [ 371.134028][ T3250] usb 12-1: config 0 descriptor?? [ 371.137401][ T3604] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 371.183946][ T3250] rc_core: IR keymap rc-hauppauge not found [ 371.185877][ T3250] Registered IR keymap rc-empty [ 371.188572][ T3250] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 371.201267][ T3250] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input43 [ 371.400650][ T3250] usb 12-1: USB disconnect, device number 2 [ 371.469854][ T3623] macvlan0: left promiscuous mode [ 371.471698][ T3623] netlink: 'syz.3.14133': attribute type 2 has an invalid length. [ 371.536400][ T1189] wlan1: Trigger new scan to find an IBSS to join [ 371.610761][ T3634] Context (ID=0x1) not attached to queue pair (handle=0x1:0x3) [ 371.750864][ T3636] nbd3: detected capacity change from 0 to 127 [ 371.756619][ T64] block nbd3: Receive control failed (result -104) [ 372.488928][ T3712] nbd4: detected capacity change from 0 to 63 [ 372.493164][ T64] block nbd4: Receive control failed (result -104) [ 372.496156][ T46] wlan1: Trigger new scan to find an IBSS to join [ 372.579568][ T3730] SELinux: ebitmap: truncated map [ 372.585605][ T3730] SELinux: failed to load policy [ 372.685610][ T3737] __nla_validate_parse: 6 callbacks suppressed [ 372.685622][ T3737] netlink: 292 bytes leftover after parsing attributes in process `syz.3.14181'. [ 372.880896][ T3769] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14194'. [ 373.014745][ T3771] mkiss: ax0: crc mode is auto. [ 373.526145][ T1189] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 373.899105][ T3833] tipc: Enabling of bearer rejected, failed to enable media [ 374.350917][ T40] kauditd_printk_skb: 261 callbacks suppressed [ 374.350929][ T40] audit: type=1400 audit(2000000106.750:68442): avc: denied { read } for pid=3890 comm="syz.7.14253" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 374.360814][ T40] audit: type=1400 audit(2000000106.750:68443): avc: denied { open } for pid=3890 comm="syz.7.14253" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 374.414129][ T40] audit: type=1400 audit(2000000106.807:68444): avc: denied { create } for pid=3894 comm="syz.6.14255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 374.420796][ T40] audit: type=1400 audit(2000000106.807:68445): avc: denied { create } for pid=3894 comm="syz.6.14255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 374.433082][ T40] audit: type=1400 audit(2000000106.816:68446): avc: denied { read write } for pid=3898 comm="syz.1.14257" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 374.443109][ T40] audit: type=1400 audit(2000000106.816:68447): avc: denied { open } for pid=3898 comm="syz.1.14257" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 374.453602][ T40] audit: type=1400 audit(2000000106.825:68448): avc: denied { read write } for pid=3900 comm="syz.6.14258" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 374.462304][ T40] audit: type=1400 audit(2000000106.825:68449): avc: denied { open } for pid=3900 comm="syz.6.14258" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 374.499456][ T40] audit: type=1400 audit(2000000106.891:68450): avc: denied { ioctl } for pid=3908 comm="syz.1.14262" path="socket:[128262]" dev="sockfs" ino=128262 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.509017][ T40] audit: type=1400 audit(2000000106.891:68451): avc: denied { bind } for pid=3908 comm="syz.1.14262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.607486][ T3919] bond5: option xmit_hash_policy: invalid value (6) [ 374.610548][ T3919] bond5 (unregistering): Released all slaves [ 374.642932][ T3929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14267'. [ 374.644369][ T3928] overlayfs: missing 'workdir' [ 374.647432][ T3929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14267'. [ 375.175756][ T3972] team0: Device gtp1 is up. Set it down before adding it as a team port [ 375.301503][ T11] block nbd3: Connection timed out, retrying (0/1 alive) [ 375.305355][ T11] block nbd3: Connection timed out, retrying (0/1 alive) [ 375.307713][ T11] block nbd3: Connection timed out, retrying (0/1 alive) [ 375.309947][ T11] block nbd3: Connection timed out, retrying (0/1 alive) [ 375.314356][ T11] block nbd3: Dead connection, failed to find a fallback [ 375.316785][ T11] block nbd3: shutting down sockets [ 375.318523][ T11] blk_print_req_error: 49 callbacks suppressed [ 375.318532][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.325156][ T11] buffer_io_error: 48 callbacks suppressed [ 375.325165][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 375.329524][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.333026][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 375.335508][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.338521][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 375.340900][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.343918][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 375.347998][T30222] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.351832][T30222] Buffer I/O error on dev nbd3, logical block 0, async page read [ 375.354451][T30222] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.357626][T30222] Buffer I/O error on dev nbd3, logical block 1, async page read [ 375.360196][T30222] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.363242][T30222] Buffer I/O error on dev nbd3, logical block 2, async page read [ 375.366031][T30222] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.368920][T30222] Buffer I/O error on dev nbd3, logical block 3, async page read [ 375.371375][T30222] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.374445][T30222] Buffer I/O error on dev nbd3, logical block 0, async page read [ 375.377845][T30222] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.381047][T30222] Buffer I/O error on dev nbd3, logical block 1, async page read [ 375.384172][T30222] ldm_validate_partition_table(): Disk read failed. [ 375.386643][T30222] Dev nbd3: unable to read RDB block 0 [ 375.388945][T30222] nbd3: unable to read partition table [ 375.392818][T30222] ldm_validate_partition_table(): Disk read failed. [ 375.395122][T30222] Dev nbd3: unable to read RDB block 0 [ 375.397455][T30222] nbd3: unable to read partition table [ 375.747596][ T4029] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14317'. [ 375.870450][ T4041] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 376.020374][ T4052] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.056355][ T64] Bluetooth: hci2: unexpected event for opcode 0x200f [ 376.087086][ T4052] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.148783][ T4052] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.223421][ T4052] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.370821][ T224] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.373478][ T224] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.380748][ T224] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.387839][ T224] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.722246][ T2302] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 376.754234][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 376.903892][ T2302] usb 6-1: Using ep0 maxpacket: 16 [ 376.908783][ T2302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.913414][ T2302] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 376.925940][ T2302] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 376.930121][ T2302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.934366][ T2302] usb 6-1: config 0 descriptor?? [ 377.013775][ T4127] netlink: 108 bytes leftover after parsing attributes in process `syz.6.14361'. [ 377.017322][ T4127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14361'. [ 377.428803][ T3250] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 377.559987][ T2302] usbhid 6-1:0.0: can't add hid device: -71 [ 377.563243][ T2302] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 377.571288][ T2302] usb 6-1: USB disconnect, device number 19 [ 377.610118][ T3250] usb 11-1: Using ep0 maxpacket: 8 [ 377.613726][ T3250] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.616854][ T3250] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.618562][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14381'. [ 377.620573][ T3250] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 377.626468][ T4171] macsec1: entered allmulticast mode [ 377.628522][ T4171] bridge0: entered allmulticast mode [ 377.634050][ T4171] bridge0: port 1(macsec1) entered blocking state [ 377.635092][ T3250] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.636222][ T4171] bridge0: port 1(macsec1) entered disabled state [ 377.640216][ T3250] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 377.640230][ T3250] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.653798][ T4171] bridge0: left allmulticast mode [ 377.823719][ T90] wlan1: Creating new IBSS network, BSSID 66:39:a5:63:6a:d0 [ 377.851367][ T4186] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14388'. [ 377.860434][ T3250] usb 11-1: GET_CAPABILITIES returned 0 [ 377.862252][ T3250] usbtmc 11-1:16.0: can't read capabilities [ 378.085427][ T6190] usb 11-1: USB disconnect, device number 8 [ 378.465177][ T4226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14408'. [ 378.577097][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14416'. [ 378.708205][ T4253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14421'. [ 378.769783][ T4262] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14426'. [ 378.881169][ T4283] netlink: 'syz.1.14435': attribute type 3 has an invalid length. [ 378.883910][ T4283] netlink: 'syz.1.14435': attribute type 1 has an invalid length. [ 378.886889][ T4283] netlink: 212 bytes leftover after parsing attributes in process `syz.1.14435'. [ 378.889772][ T4283] NCSI netlink: No device for ifindex 813332851 [ 379.170746][ T6190] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 379.331064][ T6190] usb 12-1: Using ep0 maxpacket: 8 [ 379.334837][ T6190] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.339797][ T6190] usb 12-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 379.343031][ T6190] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.346267][ T6190] usb 12-1: Product: syz [ 379.348012][ T6190] usb 12-1: Manufacturer: syz [ 379.349861][ T6190] usb 12-1: SerialNumber: syz [ 379.354346][ T6190] usb 12-1: config 0 descriptor?? [ 379.485766][ T4317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14451'. [ 379.576632][ T6190] usb 12-1: USB disconnect, device number 3 [ 379.598474][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 379.759991][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.762935][ T24] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 379.766230][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.769044][ T24] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.772684][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 379.776308][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 379.781242][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.784213][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.786767][ T24] usb 6-1: Product: syz [ 379.788177][ T24] usb 6-1: Manufacturer: syz [ 379.791864][ T4312] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 379.794955][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 379.796642][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 379.799126][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 379.801066][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 379.981508][ T40] kauditd_printk_skb: 182 callbacks suppressed [ 379.981521][ T40] audit: type=1400 audit(2000000112.006:68634): avc: denied { create } for pid=4325 comm="syz.6.14455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.991612][ T40] audit: type=1400 audit(2000000112.016:68635): avc: denied { write } for pid=4325 comm="syz.6.14455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.998518][ T40] audit: type=1400 audit(2000000112.016:68636): avc: denied { read } for pid=4325 comm="syz.6.14455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.005425][ T40] audit: type=1400 audit(2000000112.016:68637): avc: denied { ioctl } for pid=4325 comm="syz.6.14455" path="socket:[131370]" dev="sockfs" ino=131370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.013642][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 380.013691][ T40] audit: type=1400 audit(2000000112.034:68638): avc: denied { sys_module } for pid=4325 comm="syz.6.14455" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 380.015808][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 380.016094][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 380.022866][ T40] audit: type=1400 audit(2000000112.034:68639): avc: denied { module_request } for pid=4325 comm="syz.6.14455" kmod="wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 380.024452][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 380.026778][ T40] audit: type=1400 audit(2000000112.034:68640): avc: denied { read write } for pid=4311 comm="syz.1.14449" name="cdc-wdm0" dev="devtmpfs" ino=3246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 380.034421][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 380.035660][ T40] audit: type=1400 audit(2000000112.034:68641): avc: denied { open } for pid=4311 comm="syz.1.14449" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 380.042694][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 380.042749][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 380.057223][ T6190] usb 6-1: USB disconnect, device number 20 [ 380.062502][ T40] audit: type=1400 audit(2000000112.091:68642): avc: denied { allowed } for pid=4329 comm="syz.6.14456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 380.071125][ T40] audit: type=1400 audit(2000000112.100:68643): avc: denied { create } for pid=4329 comm="syz.6.14456" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 380.142795][ T4336] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 380.146321][ T4336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 380.150273][ T4336] overlayfs: conflicting lowerdir path [ 380.170772][ T4340] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 380.174121][ T4340] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 380.178944][ T4340] vhci_hcd vhci_hcd.0: Device attached [ 380.444776][ T6190] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 380.453797][ T24] usb 49-1: new high-speed USB device number 3 using vhci_hcd [ 380.638593][ T6190] usb 11-1: config 0 has no interfaces? [ 380.640460][ T6190] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 380.645328][ T6190] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.652016][ T6190] usb 11-1: config 0 descriptor?? [ 380.796007][ T7751] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 380.873873][ T4341] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 380.881811][ T6190] usb 11-1: USB disconnect, device number 9 [ 380.883547][ T4609] vhci_hcd vhci_hcd.6: stop threads [ 380.886295][ T4609] vhci_hcd vhci_hcd.6: release socket [ 380.888680][ T4609] vhci_hcd vhci_hcd.6: disconnect device [ 380.956394][ T7751] usb 12-1: Using ep0 maxpacket: 16 [ 380.960362][ T7751] usb 12-1: config 0 has no interfaces? [ 380.962150][ T7751] usb 12-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 380.965118][ T7751] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.971325][ T7751] usb 12-1: config 0 descriptor?? [ 381.190938][ T6190] usb 12-1: USB disconnect, device number 4 [ 381.251700][ T4416] can0: slcan on ttyS3. [ 381.374173][ T4416] can0 (unregistered): slcan off ttyS3. [ 381.583912][ T4440] netlink: 116 bytes leftover after parsing attributes in process `syz.3.14508'. [ 381.586835][ T4440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14508'. [ 381.695790][ T4453] netlink: 830 bytes leftover after parsing attributes in process `syz.6.14514'. [ 381.754993][ T7751] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 381.907006][ T4478] lo speed is unknown, defaulting to 1000 [ 381.919959][ T7751] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 381.922677][ T7751] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 381.928254][ T7751] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 381.932253][ T7751] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 381.936711][ T7751] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 381.941547][ T7751] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.948235][ T7751] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.951228][ T7751] usb 6-1: Product: syz [ 381.952607][ T7751] usb 6-1: Manufacturer: syz [ 381.958367][ T7751] cdc_wdm 6-1:1.0: skipping garbage [ 381.960310][ T7751] cdc_wdm 6-1:1.0: skipping garbage [ 381.963938][ T7751] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 381.965941][ T7751] cdc_wdm 6-1:1.0: Unknown control protocol [ 382.053257][ T4495] tun0: tun_chr_ioctl cmd 1074025672 [ 382.054165][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14534'. [ 382.057758][ T4495] tun0: ignored: set checksum disabled [ 382.180976][ T64] Bluetooth: hci2: Malformed LE Event: 0x0d [ 382.235978][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.236495][ T4509] bond1: invalid ARP target 0.0.0.0 specified for addition [ 382.238076][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.240547][ T4509] bond1: option arp_ip_target: invalid value (0) [ 382.243197][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.246590][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.249217][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.250322][ T4509] bond1 (unregistering): Released all slaves [ 382.251300][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.255874][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.257925][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.260356][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.262699][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.265080][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.267167][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.269301][ T34] usb 6-1: USB disconnect, device number 21 [ 382.271310][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.273421][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.275340][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 382.699202][ T34] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 382.898704][ T34] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 382.901616][ T34] usb 12-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 382.905269][ T34] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 382.908932][ T34] usb 12-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.914571][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 382.918707][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.923363][ T34] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 382.926346][ T34] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 382.929100][ T34] usb 12-1: Product: syz [ 382.930446][ T34] usb 12-1: Manufacturer: syz [ 382.946869][ T4530] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 382.950152][ T34] cdc_wdm 12-1:1.0: skipping garbage [ 382.951927][ T34] cdc_wdm 12-1:1.0: skipping garbage [ 382.958394][ T34] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 382.962788][ T34] cdc_wdm 12-1:1.0: Unknown control protocol [ 383.037699][ T4556] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 383.053412][ T4556] bond5 (unregistering): Released all slaves [ 383.182680][ T3250] usb 12-1: USB disconnect, device number 5 [ 383.362849][ T4588] kvm: kvm [4587]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000030) = 0x6 [ 383.443824][ T4593] option changes via remount are deprecated (pid=4592 comm=syz.3.14577) [ 383.446745][ T4593] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 "" [ 383.578591][ T4602] netlink: 'syz.3.14581': attribute type 1 has an invalid length. [ 384.046599][ T34] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 384.116825][ T4651] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 384.187890][ T4661] __nla_validate_parse: 6 callbacks suppressed [ 384.187900][ T4661] netlink: 27 bytes leftover after parsing attributes in process `syz.7.14608'. [ 384.217767][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 384.225511][ T34] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.231952][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.236124][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.240765][ T34] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.246333][ T34] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.251976][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.479673][ T34] usb 11-1: GET_CAPABILITIES returned 0 [ 384.482715][ T34] usbtmc 11-1:16.0: can't read capabilities [ 384.696214][ T6190] usb 11-1: USB disconnect, device number 10 [ 384.816683][ T54] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 384.977601][ T54] usb 6-1: too many configurations: 83, using maximum allowed: 8 [ 384.988956][ T54] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 384.992861][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.996164][ T54] usb 6-1: Product: syz [ 384.997955][ T54] usb 6-1: Manufacturer: syz [ 385.000152][ T54] usb 6-1: SerialNumber: syz [ 385.202586][ T4699] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 385.207958][ T4699] bond5 (unregistering): Released all slaves [ 385.246878][ T4701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14626'. [ 385.250288][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14626'. [ 385.256394][ T54] rtl8150 6-1:1.0: couldn't reset the device [ 385.258645][ T54] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 385.264459][ T54] usb 6-1: USB disconnect, device number 22 [ 385.295099][ C2] blk_print_req_error: 138 callbacks suppressed [ 385.295111][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.297941][ C3] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.300062][ C2] buffer_io_error: 138 callbacks suppressed [ 385.300071][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.302944][ C3] Buffer I/O error on dev loop5, logical block 1, async page read [ 385.310066][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.314686][ C1] Buffer I/O error on dev loop5, logical block 2, async page read [ 385.326043][ C1] I/O error, dev loop5, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.329923][ C1] Buffer I/O error on dev loop5, logical block 3, async page read [ 385.330014][ T6190] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 385.333156][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.338609][ C1] Buffer I/O error on dev loop5, logical block 4, async page read [ 385.341168][ C1] I/O error, dev loop5, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.344156][ C1] Buffer I/O error on dev loop5, logical block 5, async page read [ 385.346592][ C1] I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.350041][ C1] Buffer I/O error on dev loop5, logical block 6, async page read [ 385.353633][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.357164][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.359947][ C0] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.363210][ C0] Buffer I/O error on dev loop5, logical block 1, async page read [ 385.366231][ C0] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.369375][ C0] Buffer I/O error on dev loop5, logical block 2, async page read [ 385.374919][ T5346] ldm_validate_partition_table(): Disk read failed. [ 385.378369][ T5346] Dev loop5: unable to read RDB block 0 [ 385.381123][ T40] kauditd_printk_skb: 215 callbacks suppressed [ 385.381136][ T40] audit: type=1400 audit(2000000373.056:68859): avc: denied { bpf } for pid=4711 comm="syz.6.14631" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.385323][ T5346] loop5: unable to read partition table [ 385.392288][ T5346] loop5: partition table beyond EOD, truncated [ 385.401184][ T4712] macvtap1: entered promiscuous mode [ 385.403447][ T4712] macvtap1: entered allmulticast mode [ 385.406386][ T4712] veth1_to_bridge: entered promiscuous mode [ 385.408838][ T4712] veth1_to_bridge: entered allmulticast mode [ 385.411858][ T4712] team0: Device macvtap1 failed to register rx_handler [ 385.414554][ T4712] veth1_to_bridge: left allmulticast mode [ 385.416753][ T4712] veth1_to_bridge: left promiscuous mode [ 385.497857][ T40] audit: type=1400 audit(2000000373.168:68860): avc: denied { name_bind } for pid=4715 comm="syz.3.14633" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 385.504653][ T40] audit: type=1400 audit(2000000373.168:68861): avc: denied { node_bind } for pid=4715 comm="syz.3.14633" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 385.545237][ T6190] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 385.547865][ T6190] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 385.550906][ T6190] usb 12-1: config 0 interface 0 has no altsetting 0 [ 385.554899][ T6190] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 385.557827][ T6190] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 385.560482][ T6190] usb 12-1: Product: syz [ 385.561856][ T6190] usb 12-1: Manufacturer: syz [ 385.563505][ T6190] usb 12-1: SerialNumber: syz [ 385.566285][ T6190] usb 12-1: config 0 descriptor?? [ 385.572166][ T6190] hub 12-1:0.0: bad descriptor, ignoring hub [ 385.574168][ T6190] hub 12-1:0.0: probe with driver hub failed with error -5 [ 385.579892][ T4718] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.14634'. [ 385.580395][ T6190] usb 12-1: selecting invalid altsetting 0 [ 385.661206][ T40] audit: type=1400 audit(2000000373.317:68862): avc: denied { ioctl } for pid=4723 comm="syz.6.14637" path="socket:[133756]" dev="sockfs" ino=133756 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 385.684582][ T40] audit: type=1400 audit(2000000373.345:68863): avc: denied { create } for pid=4725 comm="syz.6.14638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.691199][ T40] audit: type=1400 audit(2000000373.345:68864): avc: denied { write } for pid=4725 comm="syz.6.14638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.701705][ T40] audit: type=1400 audit(2000000373.345:68865): avc: denied { read } for pid=4725 comm="syz.6.14638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.709424][ T40] audit: type=1400 audit(2000000373.345:68866): avc: denied { ioctl } for pid=4725 comm="syz.6.14638" path="socket:[133757]" dev="sockfs" ino=133757 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.722633][ T40] audit: type=1400 audit(2000000373.373:68867): avc: denied { mount } for pid=4727 comm="syz.6.14639" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 385.814093][ T40] audit: type=1400 audit(2000000373.467:68868): avc: denied { mounton } for pid=4735 comm="syz.6.14643" path="/519/file0" dev="tmpfs" ino=2656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 385.896942][ T24] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 386.573472][ T4695] usb 12-1: reset high-speed USB device number 6 using dummy_hcd [ 386.732647][ T4695] usb 12-1: device firmware changed [ 386.742810][ T7751] usb 12-1: USB disconnect, device number 6 [ 386.923619][ T7751] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 387.095466][ T6190] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 387.108104][ T7751] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 387.111586][ T7751] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 387.115736][ T7751] usb 12-1: config 0 interface 0 has no altsetting 0 [ 387.121804][ T7751] usb 12-1: language id specifier not provided by device, defaulting to English [ 387.130067][ T7751] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 387.133905][ T7751] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 387.139105][ T7751] usb 12-1: Product: syz [ 387.142982][ T7751] usb 12-1: config 0 descriptor?? [ 387.149366][ T7751] hub 12-1:0.0: bad descriptor, ignoring hub [ 387.151915][ T7751] hub 12-1:0.0: probe with driver hub failed with error -5 [ 387.155590][ T7751] usb 12-1: selecting invalid altsetting 0 [ 387.278443][ T6190] usb 11-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 387.281959][ T6190] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 387.285572][ T6190] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 387.289142][ T6190] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 387.292637][ T6190] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.298922][ T6190] usb 11-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 387.301966][ T6190] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.304553][ T6190] usb 11-1: Product: syz [ 387.305956][ T6190] usb 11-1: Manufacturer: syz [ 387.307580][ T6190] usb 11-1: SerialNumber: syz [ 387.312991][ T6190] usb 11-1: config 0 descriptor?? [ 387.315211][ T4766] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 387.320278][ T6190] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input44 [ 387.490811][ T6190] usb 12-1: USB disconnect, device number 7 [ 387.630245][ T7751] usb 11-1: USB disconnect, device number 11 [ 387.630328][ C0] kbtab 11-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 387.964677][ T4781] netlink: 68 bytes leftover after parsing attributes in process `syz.7.14663'. [ 388.480611][ T4805] block nbd6: not configured, cannot reconfigure [ 389.001894][ T4825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14683'. [ 389.004617][ T4825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14683'. [ 389.434749][ T4871] Falling back ldisc for ttynull. [ 389.854987][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14732'. [ 389.857852][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14732'. [ 389.860663][ T4930] netlink: 'syz.3.14732': attribute type 11 has an invalid length. [ 389.863200][ T4930] netlink: 'syz.3.14732': attribute type 7 has an invalid length. [ 389.890297][ T4936] input: syz1 as /devices/virtual/input/input46 [ 389.892469][ T4936] input: failed to attach handler leds to device input46, error: -6 [ 390.419230][ T4982] netlink: 'syz.6.14754': attribute type 32 has an invalid length. [ 390.421932][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14754'. [ 390.433327][ T4982] bond1: Setting coupled_control to off (0) [ 390.549008][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14766'. [ 390.555131][ T5008] netlink: 'syz.1.14766': attribute type 30 has an invalid length. [ 390.560109][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14766'. [ 390.642180][ T5018] netlink: 'syz.6.14771': attribute type 21 has an invalid length. [ 390.644796][ T5018] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14771'. [ 390.649325][ T5018] netlink: 'syz.6.14771': attribute type 21 has an invalid length. [ 390.652052][ T5018] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14771'. [ 390.758201][ T40] kauditd_printk_skb: 193 callbacks suppressed [ 390.758215][ T40] audit: type=1400 audit(2000000378.086:69062): avc: denied { name_bind } for pid=5030 comm="syz.7.14777" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 390.771446][ T40] audit: type=1400 audit(2000000378.095:69063): avc: denied { node_bind } for pid=5030 comm="syz.7.14777" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 390.821182][ T40] audit: type=1400 audit(2000000378.151:69064): avc: denied { create } for pid=5035 comm="syz.1.14779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 390.838451][ T40] audit: type=1400 audit(2000000378.161:69065): avc: denied { ioctl } for pid=5035 comm="syz.1.14779" path="socket:[135496]" dev="sockfs" ino=135496 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 390.942700][ T40] audit: type=1400 audit(2000000378.254:69066): avc: denied { create } for pid=5042 comm="syz.1.14782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 390.978537][ T40] audit: type=1400 audit(2000000378.301:69067): avc: denied { mounton } for pid=5047 comm="syz.7.14785" path="/293/file0" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 390.996935][ T40] audit: type=1400 audit(2000000378.301:69068): avc: denied { setopt } for pid=5046 comm="syz.6.14784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 391.008211][ T40] audit: type=1400 audit(2000000378.320:69069): avc: denied { recv } for pid=5923 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=37062 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 391.065828][ T40] audit: type=1400 audit(2000000378.376:69070): avc: denied { mount } for pid=5054 comm="syz.6.14788" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 391.084338][ T40] audit: type=1400 audit(2000000378.394:69071): avc: denied { unmount } for pid=480 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 391.370988][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14796'. [ 391.436970][ T7751] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 391.600986][ T7751] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 391.604124][ T7751] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 391.607963][ T7751] usb 11-1: config 0 interface 0 has no altsetting 0 [ 391.614165][ T7751] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.617844][ T7751] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 391.630112][ T7751] usb 11-1: Product: syz [ 391.631930][ T7751] usb 11-1: Manufacturer: syz [ 391.633844][ T7751] usb 11-1: SerialNumber: syz [ 391.643294][ T7751] usb 11-1: config 0 descriptor?? [ 391.646467][ T7751] hub 11-1:0.0: bad descriptor, ignoring hub [ 391.648440][ T7751] hub 11-1:0.0: probe with driver hub failed with error -5 [ 391.652382][ T7751] usb 11-1: selecting invalid altsetting 0 [ 391.974487][ T5105] lo speed is unknown, defaulting to 1000 [ 392.172391][ T5114] netlink: 'syz.7.14816': attribute type 14 has an invalid length. [ 392.271235][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 392.431601][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 392.435610][ T24] usb 6-1: config 0 has an invalid interface number: 209 but max is 0 [ 392.438378][ T24] usb 6-1: config 0 has no interface number 0 [ 392.440417][ T24] usb 6-1: config 0 interface 209 has no altsetting 0 [ 392.444722][ T24] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 392.448678][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.451552][ T24] usb 6-1: Product: syz [ 392.453033][ T24] usb 6-1: Manufacturer: syz [ 392.454594][ T24] usb 6-1: SerialNumber: syz [ 392.457923][ T24] usb 6-1: config 0 descriptor?? [ 392.619139][ T7751] usb 11-1: USB disconnect, device number 12 [ 392.679007][ T5105] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14812'. [ 392.689381][ T24] usb 6-1: USB disconnect, device number 23 [ 392.763233][ T7751] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 392.925029][ T7751] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 392.928239][ T7751] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 392.931827][ T7751] usb 11-1: config 0 interface 0 has no altsetting 0 [ 392.936889][ T7751] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 392.940009][ T7751] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 392.942585][ T7751] usb 11-1: Product: syz [ 392.943954][ T7751] usb 11-1: Manufacturer: syz [ 392.945958][ T7751] usb 11-1: SerialNumber: syz [ 392.949713][ T7751] usb 11-1: config 0 descriptor?? [ 392.954057][ T7751] hub 11-1:0.0: bad descriptor, ignoring hub [ 392.957006][ T7751] hub 11-1:0.0: probe with driver hub failed with error -5 [ 392.961229][ T7751] usb 11-1: selecting invalid altsetting 0 [ 393.224324][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14819'. [ 393.257418][ T5124] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.288148][ T3250] usb 11-1: USB disconnect, device number 13 [ 393.826009][ T62] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.829255][ T62] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.832045][ T62] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.835198][ T62] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.196550][ T5147] misc userio: Begin command sent, but we're already running [ 394.379678][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.383807][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.756970][ T5194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 394.761509][ T5194] bond0: (slave bond5): Enslaving as a backup interface with a down link [ 395.123544][ T64] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 395.376476][ T24] IPVS: starting estimator thread 0... [ 395.479776][ T5227] IPVS: using max 50 ests per chain, 120000 per kthread [ 395.688116][ T5251] __nla_validate_parse: 4 callbacks suppressed [ 395.688127][ T5251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14878'. [ 396.129508][ T40] kauditd_printk_skb: 131 callbacks suppressed [ 396.129519][ T40] audit: type=1400 audit(2000000383.107:69203): avc: denied { create } for pid=5286 comm="syz.3.14895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 396.140675][ T40] audit: type=1400 audit(2000000383.107:69204): avc: denied { setopt } for pid=5286 comm="syz.3.14895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 396.149348][ T40] audit: type=1400 audit(2000000383.116:69205): avc: denied { connect } for pid=5286 comm="syz.3.14895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 396.271207][ T6190] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 396.381608][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14898'. [ 396.431655][ T6190] usb 6-1: Using ep0 maxpacket: 8 [ 396.436172][ T6190] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 396.439105][ T6190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.441648][ T6190] usb 6-1: Product: syz [ 396.443102][ T6190] usb 6-1: Manufacturer: syz [ 396.444589][ T6190] usb 6-1: SerialNumber: syz [ 396.461961][ T6190] usb 6-1: config 0 descriptor?? [ 396.465597][ T6190] option 6-1:0.0: GSM modem (1-port) converter detected [ 396.514793][ T40] audit: type=1400 audit(2000000383.471:69206): avc: denied { create } for pid=5303 comm="syz.3.14901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 396.521712][ T40] audit: type=1400 audit(2000000383.471:69207): avc: denied { setopt } for pid=5303 comm="syz.3.14901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 396.528504][ T40] audit: type=1400 audit(2000000383.471:69208): avc: denied { write } for pid=5303 comm="syz.3.14901" path="socket:[135969]" dev="sockfs" ino=135969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 396.682577][ T10] usb 6-1: USB disconnect, device number 25 [ 396.688659][ T10] option 6-1:0.0: device disconnected [ 396.735002][ T40] audit: type=1400 audit(2000000383.677:69209): avc: denied { create } for pid=5313 comm="syz.7.14905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.744203][ T40] audit: type=1400 audit(2000000383.687:69210): avc: denied { connect } for pid=5313 comm="syz.7.14905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.751315][ T40] audit: type=1400 audit(2000000383.687:69211): avc: denied { write } for pid=5313 comm="syz.7.14905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.758244][ T40] audit: type=1400 audit(2000000383.696:69212): avc: denied { read } for pid=5313 comm="syz.7.14905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.770468][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14906'. [ 397.041627][ T5353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14919'. [ 397.497881][ T5419] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14951'. [ 397.500899][ T5419] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14951'. [ 398.160409][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14978'. [ 398.167680][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14978'. [ 398.295513][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14985'. [ 398.538623][ T34] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 398.709822][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 398.713932][ T34] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 398.717623][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.727066][ T34] pvrusb2: Hardware description: Terratec Grabster AV400 [ 398.729282][ T34] pvrusb2: ********** [ 398.730697][ T34] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 398.734558][ T34] pvrusb2: Important functionality might not be entirely working. [ 398.737030][ T34] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 398.740603][ T34] pvrusb2: ********** [ 398.903772][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14999'. [ 398.950968][ T2491] pvrusb2: Invalid write control endpoint [ 398.994547][ T2491] pvrusb2: Invalid write control endpoint [ 398.997367][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 399.001425][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 399.003824][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 399.006906][ T2491] pvrusb2: Device being rendered inoperable [ 399.010987][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 399.013682][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 399.025848][ T2491] pvrusb2: Attached sub-driver cx25840 [ 399.027903][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 399.031682][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 399.160661][ T5493] pvrusb2: Attempted to execute control transfer when device not ok [ 399.164960][ T6190] usb 12-1: USB disconnect, device number 8 [ 399.263508][ T1148] failed while handling packet from 1:16384 [ 399.429020][ T64] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 399.435060][ T64] Bluetooth: hci3: Injecting HCI hardware error event [ 399.439137][ T6081] Bluetooth: hci3: hardware error 0x00 [ 399.973213][ T5643] debugfs: 'ttyS3' already exists in 'caif_serial' [ 400.068150][ T5619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.115175][ T5652] ptrace attach of "/syz-executor exec"[2282] was attempted by ""[5652] [ 400.276883][ T5666] 9p: Unknown uid 00000000004294967295 [ 400.325913][ T5669] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 400.327927][ T5669] dvmrp1: linktype set to 774 [ 400.431766][ T5619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.610317][ T5690] batadv_slave_1: entered promiscuous mode [ 400.612753][ T5689] batadv_slave_1: left promiscuous mode [ 401.087098][ T5738] lo speed is unknown, defaulting to 1000 [ 401.174824][ T5752] netlink: 'syz.6.15101': attribute type 4 has an invalid length. [ 401.322452][ T836] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 401.324853][ T836] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 401.327256][ T836] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 401.337734][ T836] hid-generic 0006:0004:0009.000B: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 401.370036][ T5766] fido_id[5766]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 401.383606][ T1189] wlan1: Selected IBSS BSSID 00:8d:8d:ff:00:00 based on configured SSID [ 401.470617][ T5782] loop7: detected capacity change from 0 to 7 [ 401.473783][T30222] buffer_io_error: 130 callbacks suppressed [ 401.473796][T30222] Buffer I/O error on dev loop7, logical block 0, async page read [ 401.482629][T30222] Buffer I/O error on dev loop7, logical block 0, async page read [ 401.485913][T30222] Buffer I/O error on dev loop7, logical block 0, async page read [ 401.489193][T30222] Buffer I/O error on dev loop7, logical block 0, async page read [ 401.494143][T30222] Buffer I/O error on dev loop7, logical block 0, async page read [ 401.498004][T30222] Buffer I/O error on dev loop7, logical block 0, async page read [ 401.501683][T30222] Buffer I/O error on dev loop7, logical block 0, async page read [ 401.504936][T30222] ldm_validate_partition_table(): Disk read failed. [ 401.507941][T30222] Buffer I/O error on dev loop7, logical block 0, async page read [ 401.511322][T30222] Buffer I/O error on dev loop7, logical block 0, async page read [ 401.515467][T30222] Buffer I/O error on dev loop7, logical block 0, async page read [ 401.518757][T30222] Dev loop7: unable to read RDB block 0 [ 401.521155][T30222] loop7: unable to read partition table [ 401.523979][T30222] loop7: partition table beyond EOD, truncated [ 401.527314][ T5782] ldm_validate_partition_table(): Disk read failed. [ 401.530179][ T5782] Dev loop7: unable to read RDB block 0 [ 401.532645][ T5782] loop7: unable to read partition table [ 401.535562][ T5782] loop7: partition table beyond EOD, truncated [ 401.538228][ T5782] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P) failed (rc=-5) [ 401.623464][ T40] kauditd_printk_skb: 260 callbacks suppressed [ 401.623480][ T40] audit: type=1400 audit(2000000644.247:69473): avc: denied { create } for pid=5792 comm="syz.3.15118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 401.640166][ T40] audit: type=1400 audit(2000000644.247:69474): avc: denied { connect } for pid=5792 comm="syz.3.15118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 401.650939][ T6081] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 401.683611][ T40] audit: type=1400 audit(2000000644.312:69475): avc: denied { read write } for pid=5777 comm="syz.7.15112" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.690967][ T40] audit: type=1400 audit(2000000644.312:69476): avc: denied { open } for pid=5777 comm="syz.7.15112" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.698609][ T40] audit: type=1400 audit(2000000644.312:69477): avc: denied { ioctl } for pid=5777 comm="syz.7.15112" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 402.306179][ T40] audit: type=1400 audit(2000000644.892:69478): avc: denied { read } for pid=5807 comm="syz.7.15125" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 402.313305][ T40] audit: type=1400 audit(2000000644.892:69479): avc: denied { open } for pid=5807 comm="syz.7.15125" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 402.336349][ T40] audit: type=1400 audit(2000000644.892:69480): avc: denied { ioctl } for pid=5807 comm="syz.7.15125" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 402.646618][ T40] audit: type=1400 audit(2000000645.210:69481): avc: denied { append } for pid=5812 comm="syz.1.15127" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 402.652476][ T5813] input: syz1 as /devices/virtual/input/input48 [ 402.653954][ T40] audit: type=1400 audit(2000000645.210:69482): avc: denied { ioctl } for pid=5812 comm="syz.1.15127" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 402.732124][ T24] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 402.891532][ T24] usb 12-1: Using ep0 maxpacket: 32 [ 402.897711][ T24] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.901228][ T24] usb 12-1: config 0 has no interfaces? [ 402.903227][ T24] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 402.906398][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.910449][ T24] usb 12-1: config 0 descriptor?? [ 403.130578][ T24] usb 12-1: USB disconnect, device number 9 [ 403.493926][ T5883] bridge_slave_1: left allmulticast mode [ 403.495939][ T5883] bridge_slave_1: left promiscuous mode [ 403.497812][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.908648][ T5883] bridge_slave_0: left allmulticast mode [ 403.910602][ T5883] bridge_slave_0: left promiscuous mode [ 403.912670][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.478201][ T1417] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 404.683003][ T5935] tun0: tun_chr_ioctl cmd 1074025675 [ 404.684742][ T5935] tun0: persist disabled [ 404.812852][ T5941] tmpfs: Invalid uid '0x00000000ffffffff' [ 405.148995][ T5959] __nla_validate_parse: 2 callbacks suppressed [ 405.149011][ T5959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15195'. [ 405.169710][ T11] block nbd4: Possible stuck request ffff888028568000: control (read@0,1024B). Runtime 30 seconds [ 405.174465][ T11] block nbd4: Possible stuck request ffff888028568200: control (read@1024,1024B). Runtime 30 seconds [ 405.178529][ T11] block nbd4: Possible stuck request ffff888028568400: control (read@2048,1024B). Runtime 30 seconds [ 405.183380][ T11] block nbd4: Possible stuck request ffff888028568600: control (read@3072,1024B). Runtime 30 seconds [ 405.276996][ T5969] netlink: 'syz.1.15200': attribute type 11 has an invalid length. [ 405.365697][ T5979] netlink: 56 bytes leftover after parsing attributes in process `syz.6.15204'. [ 405.438974][ T5990] misc userio: Can't change port type on an already running userio instance [ 405.854228][ T6190] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 406.015842][ T6190] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD [ 406.019506][ T6190] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 198, changing to 11 [ 406.022965][ T6190] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 42683, setting to 1024 [ 406.028294][ T6190] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.031125][ T6190] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.033662][ T6190] usb 12-1: Product: syz [ 406.035015][ T6190] usb 12-1: Manufacturer: syz [ 406.036627][ T6190] usb 12-1: SerialNumber: syz [ 406.040189][ T6190] usb 12-1: config 0 descriptor?? [ 406.042301][ T6001] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 406.269326][ T6001] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 406.490654][ T6190] usb 12-1: USB disconnect, device number 10 [ 406.977498][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 406.977510][ T40] audit: type=1400 audit(2000000649.258:69615): avc: denied { recv } for pid=6064 comm="modprobe" saddr=127.0.0.1 src=37062 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 407.033222][ T40] audit: type=1400 audit(2000000649.305:69616): avc: denied { execmem } for pid=6068 comm="syz.3.15244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 407.053831][ T40] audit: type=1400 audit(2000000649.324:69617): avc: denied { create } for pid=6070 comm="syz.6.15246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.061441][ T40] audit: type=1400 audit(2000000649.324:69618): avc: denied { write } for pid=6070 comm="syz.6.15246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.069307][ T6071] netlink: 64 bytes leftover after parsing attributes in process `syz.6.15246'. [ 407.077948][ T40] audit: type=1400 audit(2000000649.343:69619): avc: denied { nlmsg_write } for pid=6070 comm="syz.6.15246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.262229][ T40] audit: type=1400 audit(2000000649.520:69620): avc: denied { read } for pid=6089 comm="syz.7.15252" dev="nsfs" ino=4026532950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 407.272014][ T40] audit: type=1400 audit(2000000649.530:69621): avc: denied { open } for pid=6089 comm="syz.7.15252" path="net:[4026532950]" dev="nsfs" ino=4026532950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 407.276166][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15250'. [ 407.280253][ T40] audit: type=1400 audit(2000000649.530:69622): avc: denied { create } for pid=6089 comm="syz.7.15252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.292083][ T40] audit: type=1400 audit(2000000649.530:69623): avc: denied { bind } for pid=6089 comm="syz.7.15252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.298391][ T40] audit: type=1400 audit(2000000649.530:69624): avc: denied { write } for pid=6089 comm="syz.7.15252" path="socket:[141516]" dev="sockfs" ino=141516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.622348][ T6120] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 407.689523][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15269'. [ 407.950148][ T6081] Bluetooth: hci1: link tx timeout [ 407.954202][ T6081] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 407.957597][ T6081] Bluetooth: hci1: link tx timeout [ 407.959260][ T6081] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 407.962474][ T6081] Bluetooth: hci1: link tx timeout [ 407.964143][ T6081] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 407.966548][ T6081] Bluetooth: hci1: link tx timeout [ 407.968244][ T6081] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 408.153603][ T34] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 408.282294][ T10] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 408.294277][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15283'. [ 408.324689][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 408.328124][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 7 [ 408.331932][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 408.337351][ T34] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 408.340540][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.343211][ T34] usb 6-1: Product: syz [ 408.344620][ T34] usb 6-1: Manufacturer: syz [ 408.346221][ T34] usb 6-1: SerialNumber: syz [ 408.350501][ T34] usb 6-1: config 0 descriptor?? [ 408.353397][ T34] hub 6-1:0.0: bad descriptor, ignoring hub [ 408.355389][ T34] hub 6-1:0.0: probe with driver hub failed with error -5 [ 408.359454][ T34] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input50 [ 408.463707][ T10] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 408.467598][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.472505][ T10] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 408.476661][ T10] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 408.480047][ T10] usb 12-1: Manufacturer: syz [ 408.483800][ T10] usb 12-1: config 0 descriptor?? [ 408.518947][ T6195] netlink: 'syz.6.15289': attribute type 11 has an invalid length. [ 408.521598][ T6195] netlink: 44 bytes leftover after parsing attributes in process `syz.6.15289'. [ 408.551238][ T10] rc_core: IR keymap rc-hauppauge not found [ 408.553194][ T10] Registered IR keymap rc-empty [ 408.555743][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 408.560076][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input51 [ 408.652919][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15291'. [ 408.722226][ T6206] Attempt to restore checkpoint with obsolete wellknown handles [ 408.762330][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.766138][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.447713][ T6081] Bluetooth: hci1: command tx timeout [ 410.181474][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15325'. [ 410.417071][ T6289] SELinux: security_context_str_to_sid () failed with errno=-22 [ 410.496862][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15334'. [ 410.680077][ T6318] vcan0: entered allmulticast mode [ 410.757382][ T6324] overlayfs: failed to clone lowerpath [ 411.194555][ T6348] syzkaller1: entered promiscuous mode [ 411.196418][ T6348] syzkaller1: entered allmulticast mode [ 411.316343][ T6356] __nla_validate_parse: 3 callbacks suppressed [ 411.316355][ T6356] netlink: 360 bytes leftover after parsing attributes in process `syz.3.15363'. [ 411.672348][ T6081] Bluetooth: hci1: command 0x0406 tx timeout [ 411.909011][ T6386] block device autoloading is deprecated and will be removed. [ 412.022787][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15379'. [ 412.350334][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 412.350351][ T40] audit: type=1400 audit(2000000654.279:69768): avc: denied { write } for pid=6415 comm="syz.1.15389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 412.367838][ T40] audit: type=1400 audit(2000000654.298:69769): avc: denied { module_request } for pid=6422 comm="syz.6.15392" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 412.393184][ T40] audit: type=1400 audit(2000000654.317:69770): avc: denied { sys_module } for pid=6422 comm="syz.6.15392" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 412.400725][ T40] audit: type=1400 audit(2000000654.326:69771): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=37062 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 412.421134][ T10] usb 6-1: USB disconnect, device number 26 [ 412.426330][ T40] audit: type=1400 audit(2000000654.345:69772): avc: denied { read } for pid=6426 comm="syz.3.15393" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 412.437091][ T40] audit: type=1400 audit(2000000654.345:69773): avc: denied { open } for pid=6426 comm="syz.3.15393" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 412.446649][ T40] audit: type=1400 audit(2000000654.364:69774): avc: denied { ioctl } for pid=6426 comm="syz.3.15393" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 412.456459][ T40] audit: type=1400 audit(2000000654.364:69775): avc: denied { setopt } for pid=6429 comm="syz.1.15394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 412.498738][ T40] audit: type=1400 audit(2000000654.420:69776): avc: denied { name_bind } for pid=6433 comm="syz.1.15397" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 412.502927][ T836] usb 12-1: USB disconnect, device number 11 [ 412.511184][ T40] audit: type=1400 audit(2000000654.420:69777): avc: denied { node_bind } for pid=6433 comm="syz.1.15397" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 412.637743][ T6453] binder: 6452:6453 ioctl c0306201 2000000003c0 returned -22 [ 412.830443][ T6476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15415'. [ 413.404977][ T6190] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 413.576669][ T6190] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 413.580091][ T6190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.582923][ T6190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.586380][ T6190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 413.590114][ T6190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.592974][ T6190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.596355][ T6190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 413.599807][ T6190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.602681][ T6190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.606031][ T6190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 413.609721][ T6190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.612448][ T6190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.615808][ T6190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 413.618909][ T6190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.622129][ T6190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.625745][ T6190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 413.628692][ T6190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.632118][ T6190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.635497][ T6190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 413.638558][ T6190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.641701][ T6190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.645114][ T6190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 413.648149][ T6190] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.651144][ T6190] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.654884][ T6190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 413.659490][ T6190] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 413.662613][ T6190] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 413.665230][ T6190] usb 6-1: Product: syz [ 413.666619][ T6190] usb 6-1: Manufacturer: syz [ 413.668139][ T6190] usb 6-1: SerialNumber: syz [ 413.671334][ T6190] usb 6-1: config 0 descriptor?? [ 413.676341][ T6190] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 413.886283][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 413.953826][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 413.956277][ T10] usb 6-1: USB disconnect, device number 27 [ 413.963064][ T10] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 414.173930][ T6570] netlink: 'syz.7.15457': attribute type 1 has an invalid length. [ 414.289059][ T6578] lo speed is unknown, defaulting to 1000 [ 414.363305][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15461'. [ 414.463215][ T6593] could not open pipe file descriptor [ 414.984875][ T6619] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.15481'. [ 415.257894][ T6653] netlink: 'syz.3.15497': attribute type 9 has an invalid length. [ 415.653233][ T6688] netlink: 'syz.1.15511': attribute type 29 has an invalid length. [ 415.656548][ T6688] netlink: 'syz.1.15511': attribute type 29 has an invalid length. [ 415.665638][ T6688] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15511'. [ 416.517298][ T3250] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 416.702354][ T3250] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.705816][ T3250] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.708847][ T3250] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.730900][ T3250] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.736591][ T3250] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.740842][ T3250] usb 12-1: config 0 descriptor?? [ 417.105028][ T6759] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.108995][ T6759] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.168599][ T6759] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.172570][ T6759] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.203866][ T3250] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 417.252180][ T6759] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.256162][ T6759] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.340763][ T6759] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.344773][ T6759] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.466836][ T10] usb 12-1: USB disconnect, device number 12 [ 417.503034][ T1148] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.506381][ T1148] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.514859][ T1148] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.517643][ T1148] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.536111][ T1141] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.538792][ T1141] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.547871][ T1224] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.550754][ T1224] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.653422][ T6787] gre0: Master is either lo or non-ether device [ 417.712624][ T40] kauditd_printk_skb: 249 callbacks suppressed [ 417.712640][ T40] audit: type=1400 audit(2000000659.291:70027): avc: denied { create } for pid=6790 comm="syz.1.15555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.724580][ T40] audit: type=1400 audit(2000000659.300:70028): avc: denied { write } for pid=6790 comm="syz.1.15555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.737094][ T40] audit: type=1400 audit(2000000659.300:70029): avc: denied { nlmsg_write } for pid=6790 comm="syz.1.15555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.745038][ T40] audit: type=1400 audit(2000000659.319:70030): avc: denied { create } for pid=6792 comm="syz.1.15556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.753501][ T40] audit: type=1400 audit(2000000659.319:70031): avc: denied { write } for pid=6792 comm="syz.1.15556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.762335][ T40] audit: type=1400 audit(2000000659.319:70032): avc: denied { read } for pid=6792 comm="syz.1.15556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.768852][ T40] audit: type=1400 audit(2000000659.328:70033): avc: denied { ioctl } for pid=6792 comm="syz.1.15556" path="socket:[144666]" dev="sockfs" ino=144666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.777516][ T40] audit: type=1400 audit(2000000659.328:70034): avc: denied { create } for pid=6794 comm="syz.6.15557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.867191][ T40] audit: type=1400 audit(2000000659.441:70035): avc: denied { create } for pid=6808 comm="syz.6.15564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 417.873745][ T40] audit: type=1400 audit(2000000659.441:70036): avc: denied { write } for pid=6808 comm="syz.6.15564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 417.967234][ T6818] lo speed is unknown, defaulting to 1000 [ 418.480976][ T6853] lo speed is unknown, defaulting to 1000 [ 418.602792][ T29] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 418.773908][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 418.778250][ T29] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 418.782452][ T29] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 418.786896][ T29] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.792438][ T29] usb 6-1: config 1 interface 0 has no altsetting 0 [ 418.797249][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 418.800888][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.804371][ T29] usb 6-1: Product: syz [ 418.807640][ T29] usb 6-1: Manufacturer: syz [ 418.809679][ T29] usb 6-1: SerialNumber: syz [ 419.038411][ T29] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 419.061573][ T64] Bluetooth: hci2: unexpected event for opcode 0x080b [ 419.135823][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15596'. [ 419.169046][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15598'. [ 419.458549][ C3] ================================================================== [ 419.461309][ C3] BUG: KASAN: double-free in inet_sock_destruct+0x597/0x830 [ 419.463738][ C3] Free of addr ffff888037f47e80 by task swapper/3/0 [ 419.466199][ C3] [ 419.468025][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.468041][ C3] Tainted: [L]=SOFTLOCKUP [ 419.468045][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 419.468052][ C3] Call Trace: [ 419.468056][ C3] [ 419.468061][ C3] dump_stack_lvl+0x116/0x1f0 [ 419.468076][ C3] print_report+0xcd/0x630 [ 419.468089][ C3] ? __virt_addr_valid+0x81/0x610 [ 419.468100][ C3] ? __phys_addr+0xe8/0x180 [ 419.468109][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.468123][ C3] kasan_report_invalid_free+0xb8/0xe0 [ 419.468136][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.468149][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.468496][ C3] check_slab_allocation+0xc3/0xf0 [ 419.468509][ C3] kfree+0x21d/0x6e0 [ 419.468524][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.468538][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.468550][ C3] inet_sock_destruct+0x597/0x830 [ 419.468567][ C3] ? inet6_cleanup_sock+0x10b/0x200 [ 419.468579][ C3] ? __pfx_sctp_v6_destruct_sock+0x10/0x10 [ 419.468589][ C3] __sk_destruct+0x85/0xbc0 [ 419.468603][ C3] sk_destruct+0xc2/0xf0 [ 419.468615][ C3] __sk_free+0xf4/0x3e0 [ 419.468628][ C3] sk_free+0x6a/0x90 [ 419.468640][ C3] sctp_endpoint_destroy_rcu+0xd3/0x100 [ 419.468652][ C3] ? rcu_core+0x797/0x15f0 [ 419.468665][ C3] rcu_core+0x79c/0x15f0 [ 419.468680][ C3] ? __pfx_rcu_core+0x10/0x10 [ 419.468697][ C3] handle_softirqs+0x219/0x950 [ 419.468712][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 419.468727][ C3] __irq_exit_rcu+0x109/0x170 [ 419.468741][ C3] irq_exit_rcu+0x9/0x30 [ 419.468754][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 419.468771][ C3] [ 419.468775][ C3] [ 419.468779][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.468790][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 419.468801][ C3] Code: 46 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 f9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 419.468810][ C3] RSP: 0018:ffffc90000197de8 EFLAGS: 00000286 [ 419.468820][ C3] RAX: 000000000029dced RBX: 0000000000000003 RCX: ffffffff8b7766d9 [ 419.468826][ C3] RDX: 0000000000000000 RSI: ffffffff8dacb6f9 RDI: ffffffff8bf2a580 [ 419.468832][ C3] RBP: ffffed1003bdf000 R08: 0000000000000001 R09: ffffed100d4e673d [ 419.468839][ C3] R10: ffff88806a7339eb R11: ffff88801def8b30 R12: 0000000000000003 [ 419.468845][ C3] R13: ffff88801def8000 R14: ffffffff908878d0 R15: 0000000000000000 [ 419.468853][ C3] ? ct_kernel_exit+0x139/0x190 [ 419.468865][ C3] default_idle+0x13/0x20 [ 419.468875][ C3] default_idle_call+0x6c/0xb0 [ 419.468886][ C3] do_idle+0x38d/0x510 [ 419.468902][ C3] ? __pfx_do_idle+0x10/0x10 [ 419.468917][ C3] cpu_startup_entry+0x4f/0x60 [ 419.468932][ C3] start_secondary+0x21d/0x2d0 [ 419.468942][ C3] ? __pfx_start_secondary+0x10/0x10 [ 419.468954][ C3] common_startup_64+0x13e/0x148 [ 419.468969][ C3] [ 419.468972][ C3] [ 419.564489][ C3] Allocated by task 6893: [ 419.565881][ C3] kasan_save_stack+0x33/0x60 [ 419.567419][ C3] kasan_save_track+0x14/0x30 [ 419.568935][ C3] __kasan_kmalloc+0xaa/0xb0 [ 419.570426][ C3] __kmalloc_noprof+0x33d/0x910 [ 419.572035][ C3] cipso_v4_sock_setattr+0xbb/0x4c0 [ 419.573715][ C3] netlbl_conn_setattr+0x4b8/0x620 [ 419.575361][ C3] selinux_netlbl_socket_connect_locked+0x14d/0x220 [ 419.577441][ C3] selinux_netlbl_socket_connect+0x26/0x40 [ 419.579305][ C3] selinux_socket_connect+0x64/0x80 [ 419.580993][ C3] security_socket_connect+0xc6/0x240 [ 419.582719][ C3] __sys_connect_file+0x8f/0x1a0 [ 419.584316][ C3] __sys_connect+0x13b/0x160 [ 419.585809][ C3] __x64_sys_connect+0x72/0xb0 [ 419.587353][ C3] do_syscall_64+0xcd/0xf80 [ 419.588810][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.590697][ C3] [ 419.591530][ C3] Freed by task 0: [ 419.592746][ C3] kasan_save_stack+0x33/0x60 [ 419.594266][ C3] kasan_save_track+0x14/0x30 [ 419.595808][ C3] kasan_save_free_info+0x3b/0x60 [ 419.597438][ C3] __kasan_slab_free+0x5f/0x80 [ 419.599012][ C3] kfree+0x2f8/0x6e0 [ 419.600308][ C3] inet_sock_destruct+0x597/0x830 [ 419.601934][ C3] __sk_destruct+0x85/0xbc0 [ 419.603412][ C3] sk_destruct+0xc2/0xf0 [ 419.604804][ C3] __sk_free+0xf4/0x3e0 [ 419.606158][ C3] sk_free+0x6a/0x90 [ 419.607435][ C3] sctp_endpoint_destroy_rcu+0xd3/0x100 [ 419.609216][ C3] rcu_core+0x79c/0x15f0 [ 419.610603][ C3] handle_softirqs+0x219/0x950 [ 419.612176][ C3] __irq_exit_rcu+0x109/0x170 [ 419.613692][ C3] irq_exit_rcu+0x9/0x30 [ 419.615066][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 419.616886][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.618803][ C3] [ 419.619604][ C3] The buggy address belongs to the object at ffff888037f47e80 [ 419.619604][ C3] which belongs to the cache kmalloc-64 of size 64 [ 419.623957][ C3] The buggy address is located 0 bytes inside of [ 419.623957][ C3] 64-byte region [ffff888037f47e80, ffff888037f47ec0) [ 419.628060][ C3] [ 419.628857][ C3] The buggy address belongs to the physical page: [ 419.630893][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37f47 [ 419.633705][ C3] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 419.635963][ C3] page_type: f5(slab) [ 419.637252][ C3] raw: 00fff00000000000 ffff88801b4428c0 ffffea0000a5da80 dead000000000004 [ 419.639963][ C3] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 419.642666][ C3] page dumped because: kasan: bad access detected [ 419.644702][ C3] page_owner tracks the page as allocated [ 419.646483][ C3] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6616, tgid 6615 (syz.2.323), ts 73432904366, free_ts 73394484332 [ 419.652523][ C3] post_alloc_hook+0x1af/0x220 [ 419.654071][ C3] get_page_from_freelist+0xd0b/0x31a0 [ 419.655845][ C3] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 419.657739][ C3] new_slab+0xaf/0x430 [ 419.659061][ C3] ___slab_alloc+0xe18/0x1c90 [ 419.660580][ C3] __slab_alloc.constprop.0+0x63/0x110 [ 419.662304][ C3] __kmalloc_node_noprof+0x4d8/0x930 [ 419.664000][ C3] alloc_slab_obj_exts+0x43/0xf0 [ 419.665619][ C3] new_slab+0x353/0x430 [ 419.666964][ C3] ___slab_alloc+0xe18/0x1c90 [ 419.668483][ C3] __slab_alloc.constprop.0+0x63/0x110 [ 419.670225][ C3] __kmalloc_cache_noprof+0x485/0x800 [ 419.671977][ C3] copy_verifier_state+0xc1b/0x1030 [ 419.673644][ C3] do_check_common+0x5859/0xc640 [ 419.675242][ C3] bpf_check+0x8b63/0xcb70 [ 419.676676][ C3] bpf_prog_load+0x114e/0x2cc0 [ 419.678217][ C3] page last free pid 6627 tgid 6627 stack trace: [ 419.680278][ C3] __free_frozen_pages+0x7df/0x1170 [ 419.681958][ C3] tlb_remove_table_rcu+0x2b2/0x390 [ 419.683656][ C3] rcu_core+0x79c/0x15f0 [ 419.685035][ C3] handle_softirqs+0x219/0x950 [ 419.686603][ C3] __irq_exit_rcu+0x109/0x170 [ 419.688138][ C3] irq_exit_rcu+0x9/0x30 [ 419.689514][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 419.691350][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.693261][ C3] [ 419.694046][ C3] Memory state around the buggy address: [ 419.695845][ C3] ffff888037f47d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 419.698379][ C3] ffff888037f47e00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 419.700926][ C3] >ffff888037f47e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 419.703468][ C3] ^ [ 419.704782][ C3] ffff888037f47f00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 419.707353][ C3] ffff888037f47f80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 419.709911][ C3] ================================================================== [ 419.712530][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 419.714831][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.718026][ C3] Tainted: [L]=SOFTLOCKUP [ 419.719429][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 419.722817][ C3] Call Trace: [ 419.723907][ C3] [ 419.724844][ C3] dump_stack_lvl+0x3d/0x1f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 419.726321][ C3] vpanic+0x640/0x6f0 [ 419.727709][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.729395][ C3] panic+0xca/0xd0 [ 419.730617][ C3] ? __pfx_panic+0x10/0x10 [ 419.732077][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.733750][ C3] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 419.735682][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 419.737342][ C3] check_panic_on_warn+0xab/0xb0 [ 419.738976][ C3] end_report+0x107/0x160 [ 419.740406][ C3] kasan_report_invalid_free+0xc8/0xe0 [ 419.742330][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.743962][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.745614][ C3] check_slab_allocation+0xc3/0xf0 [ 419.747264][ C3] kfree+0x21d/0x6e0 [ 419.748525][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.750283][ C3] ? inet_sock_destruct+0x597/0x830 [ 419.751955][ C3] inet_sock_destruct+0x597/0x830 [ 419.753575][ C3] ? inet6_cleanup_sock+0x10b/0x200 [ 419.755252][ C3] ? __pfx_sctp_v6_destruct_sock+0x10/0x10 [ 419.757239][ C3] __sk_destruct+0x85/0xbc0 [ 419.758737][ C3] sk_destruct+0xc2/0xf0 [ 419.760135][ C3] __sk_free+0xf4/0x3e0 [ 419.761489][ C3] sk_free+0x6a/0x90 [ 419.762763][ C3] sctp_endpoint_destroy_rcu+0xd3/0x100 [ 419.764548][ C3] ? rcu_core+0x797/0x15f0 [ 419.766006][ C3] rcu_core+0x79c/0x15f0 [ 419.767405][ C3] ? __pfx_rcu_core+0x10/0x10 [ 419.768939][ C3] handle_softirqs+0x219/0x950 [ 419.770504][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 419.772232][ C3] __irq_exit_rcu+0x109/0x170 [ 419.773766][ C3] irq_exit_rcu+0x9/0x30 [ 419.775149][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 419.776978][ C3] [ 419.777945][ C3] [ 419.778913][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.780848][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 419.782645][ C3] Code: 46 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 f9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 419.789574][ C3] RSP: 0018:ffffc90000197de8 EFLAGS: 00000286 [ 419.792012][ C3] RAX: 000000000029dced RBX: 0000000000000003 RCX: ffffffff8b7766d9 [ 419.795131][ C3] RDX: 0000000000000000 RSI: ffffffff8dacb6f9 RDI: ffffffff8bf2a580 [ 419.798259][ C3] RBP: ffffed1003bdf000 R08: 0000000000000001 R09: ffffed100d4e673d [ 419.801428][ C3] R10: ffff88806a7339eb R11: ffff88801def8b30 R12: 0000000000000003 [ 419.804400][ C3] R13: ffff88801def8000 R14: ffffffff908878d0 R15: 0000000000000000 [ 419.806913][ C3] ? ct_kernel_exit+0x139/0x190 [ 419.808497][ C3] default_idle+0x13/0x20 [ 419.809899][ C3] default_idle_call+0x6c/0xb0 [ 419.811470][ C3] do_idle+0x38d/0x510 [ 419.812793][ C3] ? __pfx_do_idle+0x10/0x10 [ 419.814275][ C3] cpu_startup_entry+0x4f/0x60 [ 419.815838][ C3] start_secondary+0x21d/0x2d0 [ 419.817375][ C3] ? __pfx_start_secondary+0x10/0x10 [ 419.819061][ C3] common_startup_64+0x13e/0x148 [ 419.820689][ C3] [ 419.822193][ C3] Kernel Offset: disabled [ 419.823601][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:58:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000000 RBX=00007fdabacb0000 RCX=ffffffff8b7099f2 RDX=ffff88805487c980 RSI=ffffffff8b709a00 RDI=0000000000000006 RBP=0000000000000001 RSP=ffffc9000706f960 R8 =0000000000000006 R9 =00007fdabacb5fff R10=00007fdabacb0000 R11=ffff88805487d4b0 R12=0000000000000001 R13=00007fdabacb5fff R14=00007fdabacb3fff R15=ffff88803483d410 RIP=ffffffff81bee3d7 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68fd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdabacb2fe8 CR3=000000002aa9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 696d5f6d61706269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003d8 0000000000005c28 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000003a229f RBX=0000000000000001 RCX=ffffffff8b7766d9 RDX=0000000000000000 RSI=ffffffff8dacb6f9 RDI=ffffffff8bf2a580 RBP=ffffed1003bda498 RSP=ffffc90000177de8 R8 =0000000000000001 R9 =ffffed100d4a673d R10=ffff88806a5339eb R11=ffff88801ded2ff0 R12=0000000000000001 R13=ffff88801ded24c0 R14=ffffffff908878d0 R15=0000000000000000 RIP=ffffffff8b774dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69fd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3a9776a6b0 CR3=0000000038655000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003cfc 0000001800000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030008000a1000 4c1000060070ce0a 000000f600000004 0000000200000002 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806060101ba0000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000292974 6e65707265732863 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 62632873746301ff fffffffffffffeff 0804b00300080004 a80300080004a003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007265 687069636b7301ff ffffffffffffffe3 080484034c040004 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004800401000000 0806060101ba0000 0000000000000000 0000000000000000 ZMM25=cf933515cf933515 cf933515cf933515 cf933515cf933515 cf933515cf933515 cf933515cf933515 cf933515cf933515 cf933515cf933515 cf933515cf933515 ZMM26=1218474812184748 1218474812184748 1218474812184748 1218474812184748 1218474812184748 1218474812184748 1218474812184748 1218474812184748 ZMM27=52df0f5552df0f55 52df0f5552df0f55 52df0f5552df0f55 52df0f5552df0f55 52df0f5552df0f55 52df0f5552df0f55 52df0f5552df0f55 52df0f5552df0f55 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9c5100009c510000 9c5100009c510000 9c5100009c510000 9c5100009c510000 9c5100009c510000 9c5100009c510000 9c5100009c510000 9c5100009c510000 info registers vcpu 2 CPU#2 RAX=00000000002a64d9 RBX=0000000000000002 RCX=ffffffff8b7766d9 RDX=0000000000000000 RSI=ffffffff8dacb6f9 RDI=ffffffff8bf2a580 RBP=ffffed1003bda930 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=ffff88801ded54b0 R12=0000000000000002 R13=ffff88801ded4980 R14=ffffffff908878d0 R15=0000000000000000 RIP=ffffffff8b774dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6afd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0097488f98 CR3=0000000034b21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0ba5cd50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0096615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f009661505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0096615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f009661506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00966150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00966151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff8e2d6c80 RCX=ffffffff819dec2a RDX=ffff88801def8000 RSI=000000000000000d RDI=000000000000001f RBP=00000001000001b3 RSP=ffffc900006f8558 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000021b4 R11=0000000000012890 R12=1ffff920000df0ac R13=dffffc0000000000 R14=000000000000000d R15=000000000000000d RIP=ffffffff81bede60 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bfd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0097488f98 CR3=000000003623e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=000000000000000f Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000017 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558968bb93 000055558968bb20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558968cf54 000055558968cf50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555589694ec6 0000555589694dd0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558968bf98 000055558968bf90 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558968d148 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a797301ffffffff ffffffffdf080e80 0300040020888208 000a800401c71000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000080606 0128b80688820400 0ea0030000000000 003172656c6c616b ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffdf0806 8003040800141000 0410000602718c0e 80040880a2d39408 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffffff3 0806a00300000000 00003172656c6c61 6b7a797301ffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 013ffc1000000401 000000080606017d de01000000000000 0000000000000002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffaa000000000000 0000000000000080 fe003cc80f0097ec 6000000040000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100020dd861c006c 08000306800404a4 a808000100000208 06060123ccffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff01ffffffff fffffffff30806a0 0300000000000031 72656c6c616b7a79 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666666666 0a313531315f6f66 6e69646f6d5f4449 5f455551494e555f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 315f6f666e69646f 6d5f44495f455551 494e555f5f207220 3864636135336239 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f455551494e555f 5f20722037306461 3533623966666666 666666660a303531 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 494e555f5f207220 6266646235336239 6666666666666666 0a393530315f6f66 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3533623966666666 666666660a383530 315f6f666e69646f 6d5f44495f455551 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a373530315f6f66 6e69646f6d5f4449 5f455551494e555f 5f20722065326562 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d5f44495f455551 494e555f5f207220 3136656235336239 6666666666666666