last executing test programs: 3m49.041731856s ago: executing program 1 (id=6855): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) 3m49.002688384s ago: executing program 1 (id=6859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x5}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m48.931211229s ago: executing program 1 (id=6864): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x34, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x18, 0x145, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@local}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x34}}, 0x2004c000) 3m48.843989989s ago: executing program 1 (id=6868): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002c0001"], 0x28}], 0x1}, 0x0) 3m48.830870665s ago: executing program 1 (id=6872): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, r0, 0x0, 0x154) 3m48.769050329s ago: executing program 1 (id=6875): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x88801, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x3) 3m32.716654676s ago: executing program 32 (id=6875): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x88801, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x3) 3m8.202755156s ago: executing program 4 (id=8666): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3m8.119817309s ago: executing program 4 (id=8670): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x503, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m8.116432557s ago: executing program 4 (id=8672): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x5, 0x4) 3m7.912329061s ago: executing program 4 (id=8676): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 3m7.830862341s ago: executing program 4 (id=8681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r1], 0x24}}, 0x0) 3m7.801980841s ago: executing program 4 (id=8683): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x903f01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x6) 2m51.752835981s ago: executing program 33 (id=8683): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x903f01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x6) 2m22.814857037s ago: executing program 2 (id=10112): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 2m22.709641244s ago: executing program 2 (id=10115): r0 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) 2m22.709527401s ago: executing program 2 (id=10116): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 2m22.560026962s ago: executing program 2 (id=10121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r0], 0x1c}}, 0x804) 2m22.559807335s ago: executing program 2 (id=10123): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 2m22.495723332s ago: executing program 2 (id=10126): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x24, r0, 0x321, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2m17.078594792s ago: executing program 0 (id=10273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x7eed1c6096b46919, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m17.07824655s ago: executing program 0 (id=10275): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ppoll(&(0x7f00000001c0)=[{r0, 0x10c3}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 2m16.979746855s ago: executing program 0 (id=10276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) 2m6.628925866s ago: executing program 0 (id=10279): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 2m6.624403094s ago: executing program 0 (id=10280): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) 2m6.615142231s ago: executing program 0 (id=10282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24068810) 2m6.615073472s ago: executing program 34 (id=10282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24068810) 2m6.391546238s ago: executing program 35 (id=10126): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x24, r0, 0x321, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2.701863039s ago: executing program 7 (id=13827): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x10000, 0x0, 0x2a}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 2.616356442s ago: executing program 7 (id=13830): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x11, r2, 0x0, 0x3, 0x0, 0x0}) 2.400831461s ago: executing program 7 (id=13834): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x4, 0x21, 0x5, "43443af4ff8c8ad271d16eb2123b3b1bd68150cf080004a3a3026f60c75585bee41b9ac4620700000022c014cc874a103a41001894a7c1b380048cb4a000", "e2e6b11135c1ce32ffcca6b388251926088888aad5f38476d748212e81691cfcdaf180c177dd28f6fa00006ca0981b01ab00", "f9285f39fe8cf7000000000000000200000000fcffffffffffffff00", [0x200000000000000d, 0x8e]}) 1.957331945s ago: executing program 7 (id=13841): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd4) unshare(0x6020400) fcntl$notify(r0, 0x402, 0x8000003d) close_range(r0, 0xffffffffffffffff, 0x2) 1.599071624s ago: executing program 7 (id=13847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000004c0)={0x1, 0x0, @ioapic={0xdddd1000, 0x8, 0x3, 0x8, 0x0, [{0x1, 0x9, 0xfa, '\x00', 0x39}, {0xd, 0x20, 0x4}, {0x3, 0xb, 0x8e, '\x00', 0x98}, {0x6, 0x8a, 0x2, '\x00', 0x8}, {0x0, 0x7, 0x2, '\x00', 0x5}, {0x1, 0x2, 0x0, '\x00', 0x4}, {0x8, 0x3, 0x4, '\x00', 0x6}, {0x3, 0x1, 0x1, '\x00', 0xf2}, {0x40, 0x1, 0x52, '\x00', 0x6}, {0x6, 0xb9, 0x5}, {0x7e, 0x6, 0x2, '\x00', 0x1}, {0x0, 0x3, 0x6, '\x00', 0x1}, {0x6, 0x6, 0x8, '\x00', 0x9}, {0x0, 0xc, 0xf8, '\x00', 0x7}, {0x0, 0x8, 0x4, '\x00', 0x3}, {0x4, 0x9, 0x2e, '\x00', 0x4}, {0x6, 0x8, 0xff, '\x00', 0x84}, {0xc0, 0x8, 0x8, '\x00', 0x9}, {0x9, 0x1, 0x4, '\x00', 0x3}, {0xff, 0x2, 0xf, '\x00', 0x8}, {0x4, 0x2, 0x50, '\x00', 0x6}, {0xf, 0x10, 0x5, '\x00', 0x9}, {0xc3, 0x9, 0x6, '\x00', 0xf3}, {0x1, 0x7, 0xa3, '\x00', 0x84}]}}) 1.202684175s ago: executing program 7 (id=13854): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 828.791854ms ago: executing program 5 (id=13859): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 828.532066ms ago: executing program 3 (id=13860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x4c, r1, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "050bf39dd763100199dde7b6d2"}]}]}]}, 0x4c}}, 0x20004800) 766.18857ms ago: executing program 3 (id=13861): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f0000000480)="ef1e6b", &(0x7f0000000e00)=""/224}, 0x20) 766.022397ms ago: executing program 5 (id=13862): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0xacd, 0x0, 0xfff, 0xebcc, 0x4}) 765.87082ms ago: executing program 3 (id=13863): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 680.692231ms ago: executing program 3 (id=13864): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 605.983888ms ago: executing program 3 (id=13865): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 605.734108ms ago: executing program 5 (id=13866): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 513.407398ms ago: executing program 5 (id=13867): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r0, &(0x7f0000000130)='0x0', 0x3) 482.725426ms ago: executing program 3 (id=13868): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000600)=0x33) 420.802904ms ago: executing program 5 (id=13869): pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) 338.894053ms ago: executing program 5 (id=13871): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) syz_usb_connect$uac2(0x2, 0x7b, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 338.048493ms ago: executing program 6 (id=13872): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x2070, 0x30, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{0x1b0, 0x1, [@m_simple={0xb0, 0x16, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x6, 0xffffffffffffffff, 0x4}}, @TCA_DEF_DATA={0xa, 0x3, 'vcan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x10000000, 0x7f, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xeb, 0x2, 0x401, 0xdd}}]}, {0x2d, 0x6, "6fa6f9ed095cb0677dcafb618347e2f4e0421953df3bc7fc96e095e0d16047b1e3e112809c1f0d81a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0xf2f2a92e329a0d7c}}}}, @m_gact={0xfc, 0x8, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x200, 0x6, 0x50000, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x450d, 0x5, 0x8, 0xd7, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18fe, 0x10000000}}]}, {0x91, 0x6, "698e7a010b79116730d8ead20f176655a05772ed77e8ca5ae8aca49c2a1b0f841e6d024c7239dd357c869b7913596bf5685a4ceefce81575f5fffbd6a929d1eba23ab56f9b2f7ecfe4c21a9a7a73d5b81fc49ffb9370ac5fba9fa8988f053f00507456f6e5a9c83ec4c976be8556e5f04be5bdf8179063f70ec8adf4cedc37e6f8f85977d87f93e163ba78eaea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x238, 0x1, [@m_connmark={0x110, 0x8, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x95, 0xd, 0x7, 0xe6, 0xe44}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x0, 0x8, 0x5}, 0x8}}]}, {0xa5, 0x6, "89a9b793feacbc2070309386654ec1cd8d37a3299f1028d14b50ca4fcb3c6b184dbb3f2b19df93c02003ef1dc162fc673b31d78922c38e390209a4ced850ddff69e79b57d742bba23d9194ff25ac1b35e604092eeb3569d91200f2a547863e2010b8f9f8b2728de375eff6b819741e2fea21a4349474ddc7ce453a429fd16d01d9288f79077216c999cf69f8a74e8d2326a6664698038e4a282af1b62850ab93e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x124, 0xf, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6004}, @TCA_MPLS_PROTO={0x6, 0x4, 0x11}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_BOS={0x5}]}, {0xcd, 0x6, "6c99d4221692e8a7202f405bf29722ea60f4e9d05188599a33424034366972939a09e3cd1374ad30186d705c439a69120128c4936d693ec15cfb1ffe8d9fad26aff76b3a07d50778f0795592fcba74b509db13e1a5560fb8fe847414261cc09169c75720bb2fedf1203a3ba29debbf69e9ee9d84780248c0f36bba0b335cbd2853a5754a08b39d08befee2107ac84b3f0495498ae40c0f8598f0adeb0b087a5d741c29566421ef15c4407732a38c15157deadc117d9954db5cdf5fa6200aa0b45c9fc0945f450c6791"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, {0x1c74, 0x1, [@m_pedit={0x1c70, 0x9, 0x0, 0x0, {{0xa}, {0x1c44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7f, 0x8, 0x8, 0x2, 0x6}, 0x4, 0xc}, [{0x4, 0x0, 0x0, 0x9, 0x1, 0x7}, {0x1, 0x2, 0x9, 0x2, 0xe, 0x2}, {0x7, 0xbe4a, 0x5, 0x4, 0x297, 0x7}, {0xfffffff8, 0x8, 0x100, 0x5, 0x5, 0x5}, {0xe0, 0x8, 0x0, 0x3, 0x8, 0x10001}, {0x9, 0x4, 0xc8, 0x1, 0x47f1, 0x87}, {0xe, 0x2, 0xfffffff9, 0x8, 0x800, 0x5}, {0x5, 0x6, 0x1, 0x9, 0x10}, {0x2, 0x6, 0x5, 0xc, 0x6, 0x20}, {0x9, 0x3, 0xb8, 0x5, 0x7, 0x81}, {0x777, 0x9, 0x2, 0xc, 0x2, 0x3}, {0x9, 0x8, 0x0, 0x7, 0x28ae}, {0x1, 0x6, 0xffffffff, 0x1ff, 0x5b02dc02, 0x6}, {0x10001, 0x200, 0x1, 0x6c68, 0xb, 0x1000}, {0x2, 0x7, 0x5, 0x1c, 0x100, 0x10000}, {0x1, 0xc4c7, 0x58c5, 0x2, 0x9, 0x4}, {0x5, 0x8a0d, 0x3, 0x80, 0xffff, 0x800}, {0x1, 0x7, 0xde2, 0xf, 0x3, 0x80}, {0x3, 0xf, 0x7, 0xbd, 0xfff, 0x7}, {0x7f, 0x40, 0xe0000000, 0x8, 0xc, 0x10001}, {0x4, 0x77, 0x58e1, 0x31, 0x2, 0x4}, {0x0, 0x9, 0x7, 0x4, 0x800, 0x18}, {0x8000, 0x1, 0x1, 0x800, 0x9, 0x80}, {0xf67e, 0x3, 0x9, 0x76f, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x1, 0xb, 0x8}, {0x7, 0xae1, 0x7ff, 0x61b, 0x63de, 0x29}, {0x9, 0x8000, 0x0, 0xa8, 0x5, 0x5}, {0xd0c5, 0x10000, 0x677, 0x7fffffff, 0x3, 0x1}, {0xa, 0xf, 0x8, 0x7, 0xff, 0x7fffffff}, {0x400, 0x0, 0x4, 0x7, 0xffffffff, 0x7}, {0xd, 0x8, 0x9, 0x282c, 0x6, 0x100}, {0x8, 0x6, 0xfffffffe, 0x5, 0x1, 0x5c}, {0x2, 0x7fff, 0x7, 0x7ff, 0x1, 0x7ff}, {0x40, 0x7, 0x6bc19791, 0x0, 0x3, 0x1}, {0xfffffffc, 0x3, 0x2, 0x6b, 0xe7, 0x1}, {0x1, 0x10, 0x6, 0xdf31, 0x7, 0xfffff148}, {0xdd47, 0x7fffffff, 0x6cd9, 0xfff, 0x3e1d, 0x1}, {0x10001, 0x0, 0x8, 0x7, 0x8b, 0x4}, {0x1, 0x3, 0x2, 0x0, 0x5, 0x5}, {0x8, 0x3, 0x2, 0x0, 0x5d97110b, 0x6}, {0x26, 0x1, 0x80000000, 0x6, 0x80000000}, {0x10, 0x7, 0x6, 0xc6, 0x3, 0x3}, {0x3ff, 0x80, 0x0, 0x100, 0xf85, 0x6}, {0x3, 0xffffffc0, 0x0, 0xff, 0x81}, {0xea, 0x10000, 0xfffffbff, 0x9, 0x4, 0x7}, {0x7ff, 0x1, 0x0, 0x9, 0xf, 0x9}, {0xfffffff8, 0x8, 0x9, 0x80, 0x2}, {0x0, 0x8, 0x0, 0x2, 0x1, 0x4886}, {0x8, 0x94, 0x2, 0x2361, 0x1}, {0x536, 0x6, 0xfffffff7, 0xfff, 0x9, 0x1}, {0x4, 0x8, 0x2b3, 0x7, 0x6, 0x9}, {0xe, 0x4, 0xfffffff1, 0xdea3, 0x1ff, 0x4ac65423}, {0xa, 0x8, 0x8001, 0x6, 0xfffffff7, 0x9}, {0x2000, 0x4, 0x0, 0x4, 0x9, 0xf3f5c6e}, {0x0, 0x81, 0x2, 0x40, 0xffffffff, 0x8}, {0x7, 0xd1d8, 0x7, 0x7ff, 0x3, 0x9}, {0xffffffff, 0x1, 0x7, 0x7, 0x0, 0x4}, {0xf, 0x80000000, 0x1, 0x3, 0x5, 0x8}, {0xd6, 0x5, 0x91, 0x3, 0x66, 0x4}, {0x5, 0xffffff80, 0x9, 0x1054, 0x7, 0x8}, {0x4, 0x7, 0x7, 0x1, 0xba67, 0x7fff}, {0x1, 0xc000000, 0x4, 0xfff, 0x4, 0x3}, {0x4, 0x2, 0x3, 0x2, 0xa, 0x8001}, {0x7fff, 0xb2b9, 0x1000, 0x9, 0x6ec00, 0x5}, {0xa, 0x7, 0x3, 0xffff62bd, 0x800, 0x4}, {0x3, 0xa, 0x6, 0x5, 0x7, 0x889}, {0x1, 0xe, 0x3, 0x945, 0x5, 0x3ff}, {0x400, 0x2, 0x1895, 0xe, 0x8, 0xfff}, {0x6, 0x99, 0x5, 0x4, 0x80, 0x5}, {0x9, 0xc, 0x2, 0x7, 0x8, 0xb245}, {0x73d, 0x10, 0x1, 0xb3, 0x5, 0x919}, {0xffffff35, 0x2, 0xfffffffc, 0x5, 0x1, 0x4945}, {0x6, 0x55, 0x967a, 0xe, 0x3, 0x4}, {0x0, 0x0, 0x75, 0x2, 0x8, 0x5}, {0x7, 0x5, 0x400c0000, 0xffffff81, 0x401, 0x8}, {0x922a, 0x9, 0x3, 0x0, 0x6, 0x81}, {0xf, 0x8, 0x1, 0x1, 0x7, 0x4}, {0x2, 0x4, 0x2, 0x4411, 0xffffffff, 0x5}, {0x0, 0xa9e, 0x5, 0x800, 0x4000000, 0x8}, {0xffffff80, 0x5, 0x2, 0x8000, 0x80000000, 0x3}, {0x8, 0x8, 0x4, 0x9, 0xfffffff8, 0x9}, {0x80000001, 0xfffffffe, 0x4, 0x4, 0x1, 0x3}, {0x8, 0x9, 0x8, 0x7, 0x2, 0x80}, {0x7f000000, 0x1, 0x2, 0x80, 0x5, 0x7fff}, {0x75, 0x36, 0x9, 0x4, 0xa1c, 0xb}, {0x3, 0x5a02, 0x4, 0x10001, 0x0, 0x3}, {0xfffff000, 0x6, 0x1, 0x5, 0x5, 0x4}, {0x9, 0x7fff, 0x9, 0x2, 0x6, 0xfffffffe}, {0x79e, 0x3, 0x5, 0x9, 0x1, 0x7fff}, {0x2, 0x8, 0x4, 0x2, 0x2, 0x4}, {0xc8, 0x3, 0x0, 0x5, 0x15, 0x5}, {0x3, 0x6, 0x5, 0x100, 0x5f25, 0x2}, {0x3ff, 0x5, 0x10001, 0x8, 0xd32, 0xf}, {0x9, 0x2, 0x2, 0x7, 0x8, 0x401}, {0x9, 0x6, 0x0, 0xb, 0xc70, 0x7}, {0x40, 0x1, 0x9b9a48e0, 0xc5, 0x2, 0x7fffffff}, {0x7, 0x101, 0xeb, 0x800, 0x1, 0xd2e}, {0x6, 0x7f, 0xffff, 0x9, 0x2, 0x5}, {0x7fffffff, 0x7, 0x6, 0x6, 0x8, 0x8}, {0x5, 0xfffffff9, 0x7, 0xffffffff, 0x7, 0xfff}, {0x1ff, 0x9, 0x9, 0x4, 0x0, 0x4}, {0x9, 0x2, 0x7, 0x400, 0x12, 0x6}, {0x4, 0x8d, 0x4, 0x0, 0x9, 0x9}, {0x5, 0x0, 0x4, 0xfffffff7, 0x7, 0x27}, {0x0, 0x10001, 0x1, 0x8, 0x3, 0xe1}, {0x661266f2, 0x6, 0x2, 0x2, 0x3, 0x9}, {0x9, 0x3, 0x40, 0x6, 0x38c8, 0x5}, {0xe5db, 0x7, 0xffffff01, 0x100, 0x1, 0x1000}, {0xf88, 0x5, 0x40, 0x94c, 0x4, 0x200}, {0x10000, 0x0, 0x6, 0x10001, 0x4}, {0x401, 0x4, 0x1, 0x3, 0x9, 0xffffffff}, {0xb702, 0x6, 0x3ff, 0x7, 0x16620000, 0x2}, {0x49, 0x9, 0xfff, 0x9, 0xffffffff, 0x5a}, {0xb, 0x7, 0x1, 0x5, 0xa6c, 0x8}, {0x8, 0x7, 0x6, 0x61e, 0x6ba, 0x4}, {0xd86, 0x800, 0x4, 0x6, 0x2, 0x1}, {0x4, 0x5, 0x9, 0x7, 0x1, 0x7}, {0x6, 0x7f, 0x2000000, 0x4, 0x4, 0x4}, {0x5, 0x7, 0x9e, 0x0, 0x3, 0xfffffffe}, {0x7, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x100, 0x2, 0x1bc, 0x5, 0x4}, {0x4, 0x8, 0x800, 0x8, 0x10000, 0xb6fa}, {0x8000000, 0xff, 0x6, 0x6, 0x5, 0x9}, {0x89f, 0x0, 0x100, 0x5, 0x3, 0xaa30}, {0x2, 0x1, 0x7fffffff, 0x6, 0x10000, 0x2}, {0x0, 0xb, 0x8001, 0x4, 0x8, 0xe0}, {0x4, 0x36, 0x7, 0xb456, 0x4, 0xc0}, {0x7, 0xd, 0xb3, 0x9, 0x3ff, 0xffff}], [{0x3, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x167297199c82e075, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x6}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x22d443be4ca0236f}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x4}, {0x7}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x7}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x6c, 0x5, 0x8, 0x4c}, 0x5, 0xfb}, [{0x5, 0x6, 0xc, 0x47bf, 0x8, 0x4}, {0x6d, 0x80000000, 0x3, 0x2000, 0x8, 0x7}, {0xa7, 0x200, 0x3, 0xffffffc0, 0x5, 0x7}, {0xfffffffb, 0x7, 0x4, 0x6e, 0x200, 0x1}, {0xe9, 0x9, 0x80000001, 0x1, 0x40, 0x6}, {0x5, 0x9, 0x3, 0x3b1b, 0x9d, 0xbac}, {0xffff, 0xfffffff9, 0x800, 0x1, 0x8000, 0x9}, {0x605d, 0x10, 0x1000, 0x5, 0x3, 0xc}, {0x7, 0x3, 0x9, 0x180000, 0x3, 0x4}, {0xd, 0x2, 0x2, 0x3, 0x3ff, 0x4}, {0x0, 0x74c, 0x5c, 0x8, 0x3ff, 0x7fffffff}, {0x10, 0x3, 0x1, 0x6, 0x6, 0x40}, {0x3, 0x5, 0x4, 0xf, 0x3, 0x100}, {0x3, 0x6f6, 0xdd0d, 0x7, 0x2, 0x9}, {0xffffffff, 0x5, 0x4, 0x4, 0x9, 0xc}, {0x8, 0x3, 0x4, 0x5, 0x2, 0x67}, {0x3, 0x0, 0x800, 0x9, 0xbb, 0x7}, {0xfffffffa, 0x401, 0x80000001, 0x1, 0x8, 0xc}, {0x7, 0x4, 0xffff8000, 0x0, 0x0, 0x2}, {0x2, 0x1, 0x10001, 0x7, 0xe, 0xe}, {0x8, 0xd4, 0xffffff81, 0x1ff, 0x4, 0xafa}, {0x9, 0x8, 0x85, 0x10001, 0x1, 0xe}, {0x9, 0x80000000, 0xfff, 0xfffffffb, 0x1, 0x2}, {0xdb, 0x10, 0x3, 0x6, 0x9, 0x1}, {0x3, 0x6, 0x5, 0x6, 0x5, 0x6}, {0x79, 0x2, 0xa362, 0x10000, 0x6, 0x400}, {0x8, 0x5, 0xf, 0x4, 0x2, 0x2}, {0x401, 0x0, 0xf, 0xb022, 0x9, 0xfffff800}, {0x8, 0x7, 0x7, 0x9, 0xc, 0x9}, {0xffff, 0x9e6, 0xd99, 0x7, 0x3, 0x7}, {0x9a, 0x4, 0x1, 0xc, 0x31e0, 0x5ad}, {0x3, 0x0, 0x5, 0x95, 0xb}, {0xfffffffd, 0x9, 0xbf, 0x5, 0x823, 0x401}, {0x7f, 0x6, 0x40, 0xffffd6e2, 0x8, 0x80000001}, {0x80, 0x3, 0x14, 0x4, 0x9, 0x8}, {0x20c, 0x401, 0x7, 0xfffffff8, 0xd51, 0x9}, {0x9, 0x1, 0x7938, 0xb, 0x6, 0x6da4}, {0x6, 0x0, 0x1, 0xff, 0x9788, 0xfffffff9}, {0x2, 0x2, 0x5, 0x81, 0x64, 0xb8c}, {0x800, 0xfffffff9, 0x4, 0x10000, 0x7, 0x1}, {0x7, 0x4, 0x6, 0x9, 0xfffffffc, 0x7fffffff}, {0x5, 0x1, 0x4c7, 0x4, 0xc62, 0x6}, {0x9, 0xb7, 0x1, 0xffffffff, 0x8, 0x8}, {0x396d, 0xffff, 0x10, 0x6, 0xbc3, 0x32}, {0x3, 0x540, 0x0, 0x9, 0x2, 0x9f}, {0x6, 0x0, 0xb, 0x80000000, 0x4b, 0x7}, {0x4, 0x82, 0x7, 0x195d8d70, 0x81, 0x40000}, {0x3, 0x5, 0x3, 0x1ff, 0x0, 0x1ff}, {0x8001, 0x400, 0xfffffbff, 0xfffffffc, 0x3, 0xfffffff7}, {0xc0, 0x6, 0x1, 0xfffffeff, 0x121, 0x1}, {0xf, 0x0, 0x5, 0x1, 0x9, 0x10}, {0x4, 0x9, 0xffffffff, 0x9, 0x7, 0x4}, {0x1, 0x735, 0x3, 0xb, 0x84, 0xfffffff5}, {0x8001, 0x6, 0x8, 0xf31, 0x7f, 0x6}, {0x9, 0x0, 0x80000000, 0x10000, 0x2}, {0x1, 0x7, 0x1, 0xd6, 0x3, 0x7}, {0x8, 0xfffffffa, 0x0, 0x4, 0x7ff, 0x32e3}, {0x7, 0x7, 0x2, 0x7ff, 0x5, 0x80000001}, {0x2, 0x7, 0x3, 0xddf, 0x5, 0x4}, {0xfffffffb, 0x3, 0x7, 0xb, 0xfffffff8, 0x79c}, {0x2, 0x5, 0x6, 0x7f, 0x4, 0x7}, {0x200, 0x6, 0x2, 0x3, 0x6, 0x8}, {0x3, 0x1, 0xffff, 0x100, 0x2}, {0x800, 0xc7b, 0x7, 0x7, 0x7, 0x5}, {0x3, 0x8, 0x8000, 0xffffffff, 0x6, 0x7}, {0xf95, 0x6, 0xfffeffff, 0x4, 0x2}, {0xa56, 0x9, 0xf5, 0x7, 0xac0, 0x6}, {0x800, 0x2, 0x159, 0x80000000, 0x5, 0x8ad}, {0x8, 0xbb, 0x8000, 0x0, 0x4, 0x2}, {0x81, 0xfffffffb, 0xe, 0x4, 0x4, 0x8}, {0x4c, 0x4, 0x2, 0x1ff, 0x2b8a0150, 0x3}, {0x3, 0x0, 0x9, 0x4, 0xfffffff7, 0x3}, {0x100, 0x3, 0x0, 0x779278c8, 0x2, 0x6}, {0x0, 0x1, 0x3, 0x2, 0x42b, 0x1}, {0x9, 0xe75, 0x5, 0x5, 0x401, 0x3ff}, {0x8, 0x400, 0x0, 0x0, 0xf743c78a, 0x1}, {0x1, 0x8, 0x200, 0x9, 0x5, 0x3}, {0x1, 0x7, 0x74eebe, 0x1000, 0xe3, 0x8}, {0x1, 0x7, 0x10001, 0x5, 0x1000, 0x7}, {0x7, 0x0, 0x2, 0x7, 0xd2c, 0x1}, {0x0, 0xb, 0x5, 0x4, 0x3, 0x8}, {0x8, 0xe21, 0x7, 0x7, 0x101, 0xb}, {0x1ff, 0xffff8001, 0x10, 0x7, 0x401, 0x40}, {0x5, 0x1000, 0x0, 0x5, 0x6, 0x6d0}, {0x4, 0x9, 0xb, 0x1, 0x100, 0x3ff}, {0x9, 0x80000001, 0x0, 0x2, 0x7, 0xfffffff1}, {0x3, 0x8, 0x9, 0x0, 0x80000000, 0xff}, {0x0, 0x4, 0x1, 0x1c, 0x4, 0x3}, {0x7, 0x5, 0xb18, 0xa, 0x8f, 0x400000}, {0x5, 0x4, 0x7, 0x2, 0x6, 0x8115}, {0x4, 0x761b, 0x3, 0x4a8, 0x5, 0x7f}, {0xffffffff, 0x4, 0x8, 0x7, 0x4, 0x9}, {0xf, 0x3, 0x800, 0x9, 0xfffff738, 0x6}, {0x9, 0x0, 0x9, 0x3, 0x0, 0x9}, {0x4, 0xffff, 0xfffffffd, 0x9, 0x5, 0x9}, {0x9, 0x400, 0x6, 0x4, 0x5d0, 0xf5}, {0x4, 0x7, 0x3, 0xfffffff9, 0xf5, 0x6}, {0x5, 0x6, 0x4, 0x8, 0x9, 0xfffffffe}, {0x6, 0x6, 0x694f4cf9, 0x8, 0x80000000, 0x1}, {0xc2, 0x5, 0x0, 0x8, 0x1, 0xeba1}, {0x5, 0xfffffff2, 0x113, 0x6, 0x4, 0x54}, {0x2, 0x23a, 0x7, 0x6, 0x2, 0xfffffffe}, {0x6, 0x80, 0x1, 0x2e5c00, 0xc7f5, 0xed7}, {0x10001, 0x7, 0x16, 0xe57, 0x2592, 0x1ff}, {0x0, 0x1d5a8e2f, 0x1000, 0xb1, 0x3, 0x28000}, {0x6, 0xa, 0x1, 0x789, 0xd, 0x81d}, {0x7fffffff, 0x4, 0x2, 0x1, 0x6, 0x2}, {0xc, 0x800, 0x2, 0xf7d, 0xc1f, 0x3}, {0x1, 0x81, 0x3, 0x5, 0x3, 0x5}, {0x1, 0x7, 0xeb5a, 0x9, 0x8, 0xfffffff7}, {0x40, 0x8, 0xa, 0x61, 0x1, 0x8}, {0xf30, 0x0, 0x0, 0x4, 0x2, 0x2}, {0x7, 0x7503887d, 0x3, 0x200, 0x10000, 0x40}, {0x6, 0xf, 0x30, 0x3, 0x1a, 0x3}, {0x8, 0x7, 0x401, 0x0, 0x200, 0x8}, {0xb, 0x3, 0xdc4, 0x9, 0x5, 0x1}, {0x0, 0x8, 0x2000, 0x2, 0x2, 0xffffffff}, {0xfffff3ad, 0x5, 0x401, 0x9, 0x2000000, 0x400}, {0x6, 0x6, 0x8, 0x1, 0xed, 0x1}, {0x7ff, 0x9, 0x0, 0x6, 0x8, 0x7fff}, {0x8, 0xb, 0x0, 0x8, 0x1, 0x4}, {0x1, 0x2, 0xfffffffd, 0x6, 0xb83, 0x3}, {0x1, 0x2, 0xd24, 0x31, 0x6, 0x400}, {0x7, 0x100, 0x4d9, 0x80e, 0x1, 0xff}, {0xe6, 0x401, 0x5, 0x4, 0xba3, 0x4}, {0xfff, 0x1, 0x8, 0x6, 0x101, 0x1}, {0x9, 0x8, 0xfffffffd, 0x0, 0x8}, {0xd, 0x100, 0x7ff, 0x366c, 0xffffffff, 0x100}], [{0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x5}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {}, {}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x7, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xf5f93952d36ccc42}, {0x3}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {}, {0x2}, {0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0xb7ead1eeecda9167}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x3}, {}, {0x2}, {0x2}, {0x7, 0x1}, {0x7, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2070}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) 272.409032ms ago: executing program 6 (id=13873): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 229.212789ms ago: executing program 6 (id=13874): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="dd71fc1566") syz_open_procfs(r0, &(0x7f0000000240)='net/ip_tables_names\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 113.904681ms ago: executing program 6 (id=13875): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000280)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 113.685047ms ago: executing program 6 (id=13876): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-256)\x00'}, 0x58) r1 = socket$nl_crypto(0x10, 0x3, 0x15) write(r1, &(0x7f00000000c0)="e0000000120005000000000000000000736861332d3235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000736861332d3235362d6c696200"/192, 0xe0) 0s ago: executing program 6 (id=13877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x200080d4}, 0x0) 0s ago: executing program 6 (id=13878): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/1000, 0x3e8) kernel console output (not intermixed with test programs): "syz.5.11105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 334.197697][T29498] gfs2: path_lookup on c::: returned error -2 [ 334.203335][T29497] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 334.976566][T29589] lo: entered promiscuous mode [ 334.985135][T29589] lo: left allmulticast mode [ 334.993535][T29589] bond0: entered promiscuous mode [ 334.995720][T29589] bond0: left allmulticast mode [ 334.998948][T29589] dummy0: entered promiscuous mode [ 335.001207][T29589] dummy0: left allmulticast mode [ 335.003971][T29589] eql: entered promiscuous mode [ 335.006035][T29589] eql: left allmulticast mode [ 335.008856][T29589] ifb0: entered promiscuous mode [ 335.011027][T29589] ifb0: left allmulticast mode [ 335.013800][T29589] ifb1: entered promiscuous mode [ 335.015813][T29589] ifb1: left allmulticast mode [ 335.026535][T29589] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 335.034072][T29589] e1000 0000:00:06.0 eth0: left allmulticast mode [ 335.149739][T29602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11155'. [ 335.155847][T29602] netlink: 212 bytes leftover after parsing attributes in process `syz.5.11155'. [ 335.159846][T29602] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11155'. [ 335.186899][T29589] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 335.225422][T29589] e1000e 0000:00:02.0 eth1: left allmulticast mode [ 335.229464][T29589] 8021q: adding VLAN 0 to HW filter on device eth1 [ 335.233666][T29589] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 335.236295][T29589] mac80211_hwsim hwsim0 wlan0: left allmulticast mode [ 335.239066][T29589] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 335.241614][T29589] mac80211_hwsim hwsim1 wlan1: left allmulticast mode [ 335.244677][T29589] hwsim0: entered promiscuous mode [ 335.246673][T29589] hwsim0: left allmulticast mode [ 335.248837][T29589] ieee802154 phy1 wpan1: entered promiscuous mode [ 335.251555][T29589] ieee802154 phy1 wpan1: left allmulticast mode [ 335.254689][T29589] teql0: entered promiscuous mode [ 335.257204][T29589] teql0: left allmulticast mode [ 335.259700][T29589] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 335.341779][T29610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11159'. [ 335.459842][ T5992] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 335.621044][ T5992] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.624991][ T5992] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.628463][ T5992] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 335.632048][ T5992] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.635031][ T5992] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 335.638604][ T5992] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 335.644286][ T5992] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.647582][ T5992] usb 10-1: Product: syz [ 335.649183][ T5992] usb 10-1: Manufacturer: syz [ 335.657922][ T5992] cdc_wdm 10-1:1.0: skipping garbage [ 335.662898][ T5992] cdc_wdm 10-1:1.0: skipping garbage [ 335.669704][ T5992] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 335.672337][ T5992] cdc_wdm 10-1:1.0: Unknown control protocol [ 335.688920][ T5992] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 335.882981][ T1036] usb 10-1: USB disconnect, device number 7 [ 336.089473][T29616] netlink: 'syz.7.11161': attribute type 4 has an invalid length. [ 336.096275][T29616] netlink: 224 bytes leftover after parsing attributes in process `syz.7.11161'. [ 336.281495][T29633] program syz.3.11169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.564028][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11183'. [ 336.567625][T29662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11183'. [ 336.570958][T29662] netlink: 'syz.6.11183': attribute type 6 has an invalid length. [ 336.592578][T27399] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.595503][T27399] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.598467][T27399] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.602560][T27399] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.615065][ T5953] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 336.798415][ T5953] usb 12-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 336.812577][ T5953] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.818694][ T5953] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 336.828578][ T5953] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 336.836520][ T5953] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.842752][ T5953] usb 12-1: Product: syz [ 336.844740][ T5953] usb 12-1: Manufacturer: syz [ 336.846858][ T5953] usb 12-1: SerialNumber: syz [ 336.857001][ T5953] usb 12-1: config 0 descriptor?? [ 336.860248][T29639] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 336.871379][T29687] bridge0: entered promiscuous mode [ 336.886934][T29687] bridge0: entered allmulticast mode [ 336.948177][ T5953] rc_core: IR keymap rc-streamzap not found [ 336.950951][ T5953] Registered IR keymap rc-empty [ 336.958710][ T5953] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 336.977804][ T5953] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input31 [ 337.119484][T27920] usb 12-1: USB disconnect, device number 4 [ 337.150423][T29710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11203'. [ 337.304293][T29720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11207'. [ 337.401192][T29732] openvswitch: netlink: Actions may not be safe on all matching packets [ 337.835905][T29772] can0: slcan on ttynull. [ 337.931153][T29771] can0 (unregistered): slcan off ttynull. [ 337.960530][T29782] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 337.994767][T27920] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 338.030614][T29791] ip6gretap0: entered promiscuous mode [ 338.142191][T29798] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 338.145546][T29798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.155756][T27920] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 338.164580][T27920] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.170722][T27920] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 338.176429][T27920] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.184138][T27920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.187750][T27920] usb 8-1: Product: syz [ 338.189632][T27920] usb 8-1: Manufacturer: syz [ 338.191707][T27920] usb 8-1: SerialNumber: syz [ 338.205781][T27920] hub 8-1:1.0: bad descriptor, ignoring hub [ 338.208536][T27920] hub 8-1:1.0: probe with driver hub failed with error -5 [ 338.450673][T27920] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 338.727184][T29851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11261'. [ 338.739028][T29851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11261'. [ 338.739139][T29853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11262'. [ 338.747504][T29853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11262'. [ 338.754146][T29853] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 338.759172][T29853] iwpm_hello_cb: Unable to parse nlmsg [ 338.805002][T27920] usb 8-1: USB disconnect, device number 14 [ 338.827207][T27920] usblp0: removed [ 339.002095][T29874] CUSE: unknown device info "" [ 339.004283][T29874] CUSE: unknown device info "" [ 339.007555][T29874] CUSE: unknown device info "" [ 339.009183][T29874] CUSE: unknown device info "" [ 339.010786][T29874] CUSE: zero length info key specified [ 339.249533][T29899] netlink: 'syz.7.11283': attribute type 1 has an invalid length. [ 339.252058][T29899] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11283'. [ 339.335768][T29905] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11286'. [ 339.414111][ T44] kauditd_printk_skb: 229 callbacks suppressed [ 339.414129][ T44] audit: type=1400 audit(2000000052.320:36659): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=43174 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 339.475076][ T44] audit: type=1400 audit(2000000052.376:36660): avc: denied { append } for pid=29918 comm="syz.7.11293" name="comedi3" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.502250][T29921] netlink: 'syz.3.11294': attribute type 2 has an invalid length. [ 339.549643][T29925] tipc: Enabling of bearer rejected, media not registered [ 339.555878][ T44] audit: type=1400 audit(2000000052.451:36661): avc: denied { read write } for pid=29926 comm="syz.3.11297" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 339.577303][ T44] audit: type=1400 audit(2000000052.451:36662): avc: denied { open } for pid=29926 comm="syz.3.11297" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 339.593069][ T44] audit: type=1400 audit(2000000052.451:36663): avc: denied { ioctl } for pid=29926 comm="syz.3.11297" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 339.759688][T29949] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11308'. [ 339.831582][ T44] audit: type=1400 audit(2000000052.704:36664): avc: denied { read write } for pid=29958 comm="syz.3.11313" name="video3" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 339.843531][ T44] audit: type=1400 audit(2000000052.722:36665): avc: denied { open } for pid=29958 comm="syz.3.11313" path="/dev/video3" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 339.866417][ T44] audit: type=1400 audit(2000000052.722:36666): avc: denied { create } for pid=29960 comm="syz.7.11314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 339.889468][ T44] audit: type=1400 audit(2000000052.732:36667): avc: denied { ioctl } for pid=29958 comm="syz.3.11313" path="/dev/video3" dev="devtmpfs" ino=958 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 339.911505][ T44] audit: type=1400 audit(2000000052.779:36668): avc: denied { append } for pid=29964 comm="syz.7.11316" name="pmem0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 340.102551][T29980] 9pnet_fd: p9_fd_create_unix (29980): problem connecting socket: ./file0: -111 [ 340.162998][T29988] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.166654][T29988] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 340.169806][T29988] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.169845][T29987] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11324'. [ 340.174212][T29988] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 340.567794][ T1036] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 340.730762][ T1036] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 340.737446][ T1036] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 340.742662][ T1036] usb 10-1: config 0 has no interface number 0 [ 340.744961][ T1036] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 340.755689][ T1036] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 340.762407][ T1036] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.767402][ T1036] usb 10-1: config 0 descriptor?? [ 340.772351][T30007] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 340.785810][ T1036] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 340.812568][T30045] sch_tbf: peakrate 216 is lower than or equals to rate 25783 ! [ 340.849981][T30047] support for cryptoloop has been removed. Use dm-crypt instead. [ 340.963481][T30055] macvlan0: entered promiscuous mode [ 341.008153][ C1] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 341.018417][ T5953] usb 10-1: USB disconnect, device number 8 [ 341.562915][T30112] PKCS8: Unsupported PKCS#8 version [ 341.595307][ T5953] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 341.692483][T30127] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11392'. [ 341.764779][ T5953] usb 11-1: Using ep0 maxpacket: 32 [ 341.771749][ T5953] usb 11-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 341.779881][ T5953] usb 11-1: config index 0 descriptor too short (expected 35577, got 27) [ 341.783671][ T5953] usb 11-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 341.788626][ T5953] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 341.792596][ T5953] usb 11-1: config 1 has no interface number 0 [ 341.795328][ T5953] usb 11-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.802056][ T5953] usb 11-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 341.809605][ T5953] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.813330][T30141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11399'. [ 341.845290][ T5953] snd_usb_pod 11-1:1.1: Line 6 Pocket POD found [ 341.913996][T30151] syz.3.11404 (30151): /proc/30150/oom_adj is deprecated, please use /proc/30150/oom_score_adj instead. [ 342.371162][T30197] netlink: 'syz.3.11426': attribute type 322 has an invalid length. [ 342.660377][ T1036] IPVS: starting estimator thread 0... [ 342.748598][T30231] overlay: filesystem on ./file0 is read-only [ 342.758464][T30225] IPVS: using max 34 ests per chain, 81600 per kthread [ 342.782556][T30235] netlink: Setting conntrack mark requires 'commit' flag. [ 342.786262][T30235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.303801][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.309602][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.318933][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.322486][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.481330][T30306] program syz.5.11473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.635261][T30326] trusted_key: encrypted_key: key trusted:syz not found [ 343.661942][T30329] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 343.904360][T30356] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 343.954204][T30360] netlink: 'syz.7.11499': attribute type 1 has an invalid length. [ 343.960382][T30360] netlink: 'syz.7.11499': attribute type 1 has an invalid length. [ 344.143221][T30381] Invalid ELF header len 18 [ 344.389144][T30406] __nla_validate_parse: 10 callbacks suppressed [ 344.389164][T30406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11521'. [ 344.435212][T30410] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 344.558922][ T5953] snd_usb_pod 11-1:1.1: set_interface failed [ 344.563019][ T5953] snd_usb_pod 11-1:1.1: Line 6 Pocket POD now disconnected [ 344.566667][ T5953] snd_usb_pod 11-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 344.576073][ T5953] usb 11-1: USB disconnect, device number 3 [ 344.767744][ T44] kauditd_printk_skb: 183 callbacks suppressed [ 344.767761][ T44] audit: type=1400 audit(2000000057.336:36852): avc: denied { create } for pid=30438 comm="syz.5.11535" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 344.786960][ T44] audit: type=1400 audit(2000000057.336:36853): avc: denied { map } for pid=30438 comm="syz.5.11535" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 344.796615][ T44] audit: type=1400 audit(2000000057.336:36854): avc: denied { read write } for pid=30438 comm="syz.5.11535" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 344.837689][ T44] audit: type=1400 audit(2000000057.392:36855): avc: denied { create } for pid=30443 comm="syz.5.11538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.848663][ T44] audit: type=1400 audit(2000000057.392:36856): avc: denied { bind } for pid=30443 comm="syz.5.11538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.866645][ T44] audit: type=1400 audit(2000000057.392:36857): avc: denied { setopt } for pid=30443 comm="syz.5.11538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.877767][ T44] audit: type=1400 audit(2000000057.392:36858): avc: denied { read } for pid=30446 comm="syz.3.11537" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 344.886922][ T44] audit: type=1400 audit(2000000057.392:36859): avc: denied { open } for pid=30446 comm="syz.3.11537" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 344.899585][ T44] audit: type=1400 audit(2000000057.401:36860): avc: denied { read write } for pid=27337 comm="syz-executor" name="loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.909847][ T44] audit: type=1400 audit(2000000057.401:36861): avc: denied { open } for pid=27337 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.001201][T30460] tmpfs: Group quota block hardlimit too large. [ 345.121658][T30471] hub 8-0:1.0: USB hub found [ 345.124091][T30471] hub 8-0:1.0: 1 port detected [ 345.130509][T30476] hugetlbfs: Bad value 'x' for mount option 'size' [ 345.130509][T30476] [ 345.149553][T30473] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 345.158014][T30473] bond2 (unregistering): Released all slaves [ 345.171763][T30477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11551'. [ 345.176017][T30477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11551'. [ 345.305127][T30489] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11558'. [ 345.462209][ T1036] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 345.522867][T30517] netlink: 'syz.5.11573': attribute type 3 has an invalid length. [ 345.572555][T30524] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 345.602443][T30528] gfs2: path_lookup on c::: returned error -2 [ 345.622942][ T1036] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 345.633066][ T1036] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 345.639848][ T1036] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.646352][ T1036] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.653813][ T1036] usb 12-1: config 0 interface 0 has no altsetting 0 [ 345.665075][ T1036] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.668883][ T1036] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.673452][ T1036] usb 12-1: config 0 interface 0 has no altsetting 0 [ 345.678902][ T1036] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.683167][ T1036] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.688205][ T1036] usb 12-1: config 0 interface 0 has no altsetting 0 [ 345.694866][ T1036] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.699609][ T1036] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.704281][ T1036] usb 12-1: config 0 interface 0 has no altsetting 0 [ 345.708735][ T1036] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.712704][ T1036] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.717097][ T1036] usb 12-1: config 0 interface 0 has no altsetting 0 [ 345.721720][ T1036] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.725646][ T1036] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.730697][ T1036] usb 12-1: config 0 interface 0 has no altsetting 0 [ 345.734837][ T1036] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.738728][ T1036] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.743686][ T1036] usb 12-1: config 0 interface 0 has no altsetting 0 [ 345.747747][ T1036] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.752527][ T1036] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.757161][ T1036] usb 12-1: config 0 interface 0 has no altsetting 0 [ 345.762470][ T1036] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 345.766174][ T1036] usb 12-1: Product: syz [ 345.767908][ T1036] usb 12-1: Manufacturer: syz [ 345.770063][ T1036] usb 12-1: SerialNumber: syz [ 345.775161][ T1036] usb 12-1: config 0 descriptor?? [ 345.786193][ T1036] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 345.916620][T30562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11593'. [ 345.958562][T30565] program syz.3.11594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.004570][ T5953] usb 12-1: USB disconnect, device number 5 [ 346.017011][ T5953] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 346.147800][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.167850][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.172407][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.398128][T30625] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11618'. [ 347.418622][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.422368][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.425838][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.432747][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.515044][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2901 instead [ 347.518781][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 347.522334][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xc522 instead [ 347.528556][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x49aa instead [ 347.532548][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 347.537262][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 347.541612][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 347.546399][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 347.550825][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 347.554885][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 347.558724][T30632] jffs2: Further such events for this erase block will not be printed [ 347.561907][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 347.565289][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 347.568597][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xc522 instead [ 347.571767][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x49aa instead [ 347.575327][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 347.579103][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 347.583146][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 347.591388][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 347.595087][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 347.598494][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 347.602322][T30632] jffs2: Further such events for this erase block will not be printed [ 347.606879][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 347.608969][T30634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11623'. [ 347.611187][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 347.611212][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xc522 instead [ 347.630639][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x49aa instead [ 347.634932][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 347.638867][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 347.642547][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xc522 instead [ 347.645745][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x49aa instead [ 347.649048][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 347.652328][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 347.656229][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xc522 instead [ 347.659564][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x49aa instead [ 347.662986][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 347.666835][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 347.670857][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xc522 instead [ 347.676068][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x49aa instead [ 347.681160][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 347.685511][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 347.689726][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xc522 instead [ 347.693532][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x49aa instead [ 347.698719][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 347.703789][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 347.708407][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xc522 instead [ 347.712548][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x49aa instead [ 347.717860][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 347.722164][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 347.726355][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xc522 instead [ 347.731162][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x49aa instead [ 347.735529][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 347.740510][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 347.744410][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xc522 instead [ 347.748497][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x49aa instead [ 347.753833][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 347.757649][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 347.761367][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xc522 instead [ 347.764711][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x49aa instead [ 347.767921][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 347.771193][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 347.775374][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xc522 instead [ 347.778876][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x49aa instead [ 347.782303][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 347.785653][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 347.789338][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xc522 instead [ 347.795122][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x49aa instead [ 347.798528][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 347.801942][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 347.806219][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xc522 instead [ 347.810214][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x49aa instead [ 347.814554][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 347.819023][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 347.822762][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xc522 instead [ 347.826623][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x49aa instead [ 347.830006][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 347.833696][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 347.841496][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xc522 instead [ 347.845724][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x49aa instead [ 347.849115][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 347.852716][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 347.860094][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xc522 instead [ 347.864333][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x49aa instead [ 347.868728][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 347.873143][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 347.877681][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xc522 instead [ 347.882100][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x49aa instead [ 347.886700][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 347.891487][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 347.895946][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xc522 instead [ 347.900480][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x49aa instead [ 347.904881][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 347.910163][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 347.914813][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xc522 instead [ 347.920158][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x49aa instead [ 347.924590][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 347.929110][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 347.935316][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xc522 instead [ 347.939634][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x49aa instead [ 347.944412][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 347.948827][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 347.953431][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xc522 instead [ 347.957961][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x49aa instead [ 347.962184][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 347.967076][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 347.971414][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xc522 instead [ 347.976109][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x49aa instead [ 347.980538][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 347.985232][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 347.989667][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xc522 instead [ 347.994023][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x49aa instead [ 347.998715][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 348.003385][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 348.008439][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xc522 instead [ 348.012779][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x49aa instead [ 348.017410][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 348.021619][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 348.025858][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xc522 instead [ 348.030593][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x49aa instead [ 348.034913][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 348.039292][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 348.044842][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xc522 instead [ 348.051429][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x49aa instead [ 348.055817][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 348.060950][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 348.065348][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xc522 instead [ 348.069976][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x49aa instead [ 348.074348][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 348.079276][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 348.083964][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xc522 instead [ 348.092830][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x49aa instead [ 348.096094][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 348.099330][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 348.103804][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xc522 instead [ 348.105051][T30661] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 348.107022][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x49aa instead [ 348.107065][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 348.122884][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 348.127571][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xc522 instead [ 348.131792][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x49aa instead [ 348.136258][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 348.136896][ T5890] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 348.140560][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 348.140582][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xc522 instead [ 348.140599][T30632] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x49aa instead [ 348.144579][ T5891] Bluetooth: hci2: command 0x1003 tx timeout [ 348.147639][T30632] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 348.147652][T30632] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 348.181214][T30669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11640'. [ 349.171978][T30692] bridge1: entered promiscuous mode [ 349.174104][T30692] bridge1: entered allmulticast mode [ 349.543122][T30731] openvswitch: netlink: Actions may not be safe on all matching packets [ 349.640591][ T34] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 349.811854][ T34] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 349.821998][ T34] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.831238][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 349.838165][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 349.847740][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.851404][ T34] usb 8-1: Product: syz [ 349.853207][ T34] usb 8-1: Manufacturer: syz [ 349.855480][ T34] usb 8-1: SerialNumber: syz [ 349.875330][ T34] usb 8-1: config 0 descriptor?? [ 349.878582][T30719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.914579][T30772] ip6gretap0: entered promiscuous mode [ 349.939716][ T34] rc_core: IR keymap rc-streamzap not found [ 349.942449][ T34] Registered IR keymap rc-empty [ 349.946214][ T34] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 349.960165][ T34] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input32 [ 350.123126][ T44] kauditd_printk_skb: 197 callbacks suppressed [ 350.123139][ T44] audit: type=1400 audit(2000000062.333:37059): avc: denied { read write } for pid=30718 comm="syz.3.11658" name="event4" dev="devtmpfs" ino=3253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 350.148886][ T44] audit: type=1400 audit(2000000062.342:37060): avc: denied { open } for pid=30718 comm="syz.3.11658" path="/dev/input/event4" dev="devtmpfs" ino=3253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 350.159617][ T44] audit: type=1400 audit(2000000062.352:37061): avc: denied { recv } for pid=5703 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=43174 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 350.170266][ T44] audit: type=1400 audit(2000000062.352:37062): avc: denied { ioctl } for pid=30718 comm="syz.3.11658" path="/dev/input/event4" dev="devtmpfs" ino=3253 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 350.179666][ T44] audit: type=1400 audit(2000000062.389:37063): avc: denied { allowed } for pid=30792 comm="syz.5.11689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 350.183686][ T34] usb 8-1: USB disconnect, device number 15 [ 350.193158][ T44] audit: type=1400 audit(2000000062.389:37064): avc: denied { create } for pid=30792 comm="syz.5.11689" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 350.193203][T30795] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 350.201057][ T44] audit: type=1400 audit(2000000062.389:37065): avc: denied { map } for pid=30792 comm="syz.5.11689" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 350.201106][ T44] audit: type=1400 audit(2000000062.389:37066): avc: denied { read write } for pid=30792 comm="syz.5.11689" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 350.206686][T30795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.214182][ T44] audit: type=1400 audit(2000000062.399:37067): avc: denied { create } for pid=30793 comm="syz.6.11688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.227950][ T847] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 350.235279][ T44] audit: type=1400 audit(2000000062.399:37068): avc: denied { write } for pid=30793 comm="syz.6.11688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.399529][ T847] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 350.404922][ T847] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.408719][ T847] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 350.413152][ T847] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.417234][ T847] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 350.421391][ T847] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 350.426240][ T847] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 350.429041][ T847] usb 12-1: Product: syz [ 350.430405][ T847] usb 12-1: Manufacturer: syz [ 350.436079][ T847] cdc_wdm 12-1:1.0: skipping garbage [ 350.438398][ T847] cdc_wdm 12-1:1.0: skipping garbage [ 350.447052][ T847] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 350.449120][ T847] cdc_wdm 12-1:1.0: Unknown control protocol [ 350.677816][ T847] usb 12-1: USB disconnect, device number 7 [ 350.759147][T30811] CUSE: unknown device info "" [ 350.761501][T30811] CUSE: unknown device info "" [ 350.763667][T30811] CUSE: unknown device info "" [ 350.765865][T30811] CUSE: unknown device info "" [ 350.768102][T30811] CUSE: zero length info key specified [ 351.042512][T30822] macvlan0: entered promiscuous mode [ 351.226402][T30838] No buffer was provided with the request [ 351.338934][T30844] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 351.427307][T30855] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.487515][T30861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11720'. [ 351.490751][T30861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11720'. [ 351.493729][T30861] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 351.496651][T30861] iwpm_hello_cb: Unable to parse nlmsg [ 351.528649][T30866] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11724'. [ 351.571305][T30872] netlink: 'syz.5.11725': attribute type 2 has an invalid length. [ 351.624073][T30872] : entered promiscuous mode [ 352.054038][T30921] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 352.058277][T30921] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 352.074780][T30921] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 352.083628][T30921] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 352.114315][T30928] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11750'. [ 352.263684][T30938] netlink: 'syz.3.11756': attribute type 1 has an invalid length. [ 352.271479][T30938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11756'. [ 352.399011][T30946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11759'. [ 352.437618][T30950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11761'. [ 352.458556][T30950] ip6erspan0: entered promiscuous mode [ 352.762454][T30971] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11772'. [ 352.766677][T30971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11772'. [ 352.922770][T30985] sch_tbf: peakrate 216 is lower than or equals to rate 25783 ! [ 353.012935][ T5890] Bluetooth: hci0: link tx timeout [ 353.018149][ T5890] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 353.784705][T31068] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 353.829155][T31072] netlink: 'syz.5.11819': attribute type 14 has an invalid length. [ 353.850889][T31076] program syz.3.11821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.911759][T31082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11825'. [ 354.165001][T31109] macvlan0: entered promiscuous mode [ 355.229003][ T5891] Bluetooth: hci0: command 0x0406 tx timeout [ 355.422755][T27920] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 355.480583][ T44] kauditd_printk_skb: 200 callbacks suppressed [ 355.480599][ T44] audit: type=1400 audit(2000000067.349:37269): avc: denied { mounton } for pid=31181 comm="syz.3.11865" path="/3010/config" dev="tmpfs" ino=15187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 355.504046][ T44] audit: type=1400 audit(2000000067.349:37270): avc: denied { mount } for pid=31181 comm="syz.3.11865" name="/" dev="configfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 355.513579][ T44] audit: type=1400 audit(2000000067.349:37271): avc: denied { sqpoll } for pid=31183 comm="syz.5.11866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 355.523608][T31189] program syz.3.11869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.531873][ T44] audit: type=1400 audit(2000000067.349:37272): avc: denied { search } for pid=31181 comm="syz.3.11865" name="/" dev="configfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 355.542134][ T44] audit: type=1400 audit(2000000067.349:37273): avc: denied { search } for pid=31181 comm="syz.3.11865" name="cluster" dev="configfs" ino=3189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 355.551650][ T44] audit: type=1400 audit(2000000067.349:37274): avc: denied { write } for pid=31183 comm="syz.5.11866" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 355.564506][ T44] audit: type=1400 audit(2000000067.349:37275): avc: denied { open } for pid=31183 comm="syz.5.11866" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 355.574686][ T44] audit: type=1400 audit(2000000067.349:37276): avc: denied { ioctl } for pid=31183 comm="syz.5.11866" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 355.585448][ T44] audit: type=1400 audit(2000000067.368:37277): avc: denied { unmount } for pid=5878 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 355.594793][ T44] audit: type=1400 audit(2000000067.368:37278): avc: denied { read } for pid=31186 comm="syz.7.11867" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 355.607713][T27920] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 355.613782][T27920] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 355.618089][T27920] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 355.628614][T27920] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.636679][T27920] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.645047][T27920] usb 11-1: Product: syz [ 355.647577][T27920] usb 11-1: Manufacturer: syz [ 355.649766][T27920] usb 11-1: SerialNumber: syz [ 355.665133][T27920] hub 11-1:1.0: bad descriptor, ignoring hub [ 355.668385][T27920] hub 11-1:1.0: probe with driver hub failed with error -5 [ 355.886720][T27920] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 356.203034][ T1036] usb 11-1: USB disconnect, device number 4 [ 356.221541][ T1036] usblp0: removed [ 356.453312][T31275] F2FS-fs: Conflicting test_dummy_encryption options [ 356.456459][T31276] usb usb9: usbfs: process 31276 (syz.7.11909) did not claim interface 0 before use [ 356.613657][T31290] openvswitch: netlink: Unknown key attributes 20 [ 356.679471][T31296] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 356.808404][T31308] netlink: 'syz.7.11925': attribute type 1 has an invalid length. [ 357.057704][ T5992] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 357.077148][T31325] __nla_validate_parse: 5 callbacks suppressed [ 357.077167][T31325] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11932'. [ 357.250535][ T5992] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 357.263618][ T5992] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.266854][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 357.270376][ T5992] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.276965][ T5992] usb 10-1: config 0 descriptor?? [ 357.283782][ T5992] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 357.286902][ T5992] dvb-usb: bulk message failed: -22 (3/0) [ 357.293832][ T5992] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 357.298222][ T5992] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 357.301474][ T5992] usb 10-1: media controller created [ 357.309294][ T5992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.323700][ T5992] dvb-usb: bulk message failed: -22 (6/0) [ 357.326236][ T5992] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 357.332475][ T5992] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input33 [ 357.342907][ T5992] dvb-usb: schedule remote query interval to 150 msecs. [ 357.349901][ T5992] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 357.452639][ T5891] Bluetooth: hci0: command 0x0406 tx timeout [ 357.459876][ T5890] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 357.502448][T31304] dvb-usb: bulk message failed: -22 (2/0) [ 357.508726][T17611] usb 10-1: USB disconnect, device number 9 [ 357.518445][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 357.518551][ T5992] dvb-usb: error while querying for an remote control event. [ 357.560435][T31354] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11946'. [ 357.649522][T17611] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 357.721924][T31367] comedi comedi2: dt2817: I/O base address or length out of range [ 357.901886][T31388] SELinux: security policydb version 18 (MLS) not backwards compatible [ 357.907805][T31388] SELinux: failed to load policy [ 358.093945][T31408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11970'. [ 358.323221][T31434] openvswitch: netlink: Missing key (keys=40, expected=100) [ 358.544794][T31451] IPVS: Scheduler module ip_vs_sip not found [ 358.604945][T31463] ptrace attach of "/syz-executor exec"[27337] was attempted by " [ 358.805022][T31481] netlink: 36 bytes leftover after parsing attributes in process `syz.7.12005'. [ 358.887547][T31487] netlink: 52 bytes leftover after parsing attributes in process `syz.7.12008'. [ 358.951153][T31491] hugetlbfs: Bad value 'x' for mount option 'size' [ 358.951153][T31491] [ 359.013559][T31501] rdma_op ffff88803fc179f0 conn xmit_rdma 0000000000000000 [ 359.175600][T31521] ip_tables: iptables: counters copy to user failed while replacing table [ 359.249551][T31529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12027'. [ 359.252512][T31529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12027'. [ 359.401805][T31548] netlink: 80 bytes leftover after parsing attributes in process `syz.6.12034'. [ 359.674671][ T5890] Bluetooth: hci0: command 0x0406 tx timeout [ 359.703168][T31582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12050'. [ 359.709036][T31582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12050'. [ 359.718814][T31582] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 359.947775][T31614] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 359.951841][T31620] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 359.959951][T31614] bond1 (unregistering): Released all slaves [ 360.117089][T29314] udevd[29314]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 360.127490][T31637] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 7 out of range (1000000..45000000) [ 360.200307][T31645] vivid-001: disconnect [ 360.211418][T31644] vivid-001: reconnect [ 360.294584][T31655] netlink: 'syz.5.12084': attribute type 83 has an invalid length. [ 360.414279][T31671] netlink: 'syz.6.12091': attribute type 5 has an invalid length. [ 360.630824][T31695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.803335][T31714] bridge2: entered promiscuous mode [ 360.805775][T31714] bridge2: entered allmulticast mode [ 360.923035][ T44] kauditd_printk_skb: 267 callbacks suppressed [ 360.923052][ T44] audit: type=1400 audit(2000000072.440:37546): avc: denied { read } for pid=31720 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.935347][ T44] audit: type=1400 audit(2000000072.449:37547): avc: denied { read open } for pid=31720 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.944567][ T44] audit: type=1400 audit(2000000072.449:37548): avc: denied { getattr } for pid=31720 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.954144][ T44] audit: type=1400 audit(2000000072.458:37549): avc: denied { write } for pid=31719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.963411][ T44] audit: type=1400 audit(2000000072.458:37550): avc: denied { add_name } for pid=31719 comm="dhcpcd-run-hook" name="resolv.conf.lapb8.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.972202][ T44] audit: type=1400 audit(2000000072.458:37551): avc: denied { create } for pid=31719 comm="dhcpcd-run-hook" name="resolv.conf.lapb8.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 360.981145][ T44] audit: type=1400 audit(2000000072.458:37552): avc: denied { write } for pid=31719 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb8.link" dev="tmpfs" ino=25334 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 360.990038][ T44] audit: type=1400 audit(2000000072.458:37553): avc: denied { append } for pid=31719 comm="dhcpcd-run-hook" name="resolv.conf.lapb8.link" dev="tmpfs" ino=25334 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 360.998347][ T44] audit: type=1400 audit(2000000072.505:37554): avc: denied { write } for pid=31722 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.005326][ T44] audit: type=1400 audit(2000000072.505:37555): avc: denied { remove_name } for pid=31722 comm="rm" name="resolv.conf.lapb8.link" dev="tmpfs" ino=25334 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.311741][T31737] program syz.5.12116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.555685][T27920] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 361.737223][T27920] usb 8-1: Using ep0 maxpacket: 32 [ 361.741325][T27920] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 361.746192][T27920] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 361.750105][T27920] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 361.752994][T27920] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 361.756199][T27920] usb 8-1: config 1 has no interface number 0 [ 361.758718][T27920] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.762523][T27920] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 361.766878][T27920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.782292][T27920] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 362.076872][T31794] fuse: blksize only supported for fuseblk [ 363.425398][T17611] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 363.554473][T31839] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 363.557569][T31839] overlayfs: missing 'lowerdir' [ 363.584943][T31841] veth1_macvtap: Device is already in use. [ 363.585617][T17611] usb 11-1: Using ep0 maxpacket: 32 [ 363.593630][T17611] usb 11-1: unable to get BOS descriptor or descriptor too short [ 363.597832][T17611] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 363.605267][T17611] usb 11-1: string descriptor 0 read error: -22 [ 363.607642][T17611] usb 11-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 363.616947][T17611] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 363.620623][T17611] dw2102: su3000_power_ctrl: 1, initialized 0 [ 363.623626][T17611] dvb-usb: bulk message failed: -22 (2/0) [ 363.650921][T17611] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 363.655201][T17611] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 363.659687][T17611] usb 11-1: media controller created [ 363.662388][T17611] dvb-usb: bulk message failed: -22 (6/0) [ 363.667909][T17611] dw2102: i2c transfer failed. [ 363.672410][T17611] dvb-usb: bulk message failed: -22 (6/0) [ 363.674193][T17611] dw2102: i2c transfer failed. [ 363.675651][T17611] dvb-usb: bulk message failed: -22 (6/0) [ 363.677534][T17611] dw2102: i2c transfer failed. [ 363.679041][T17611] dvb-usb: bulk message failed: -22 (6/0) [ 363.680973][T17611] dw2102: i2c transfer failed. [ 363.683297][T17611] dvb-usb: bulk message failed: -22 (6/0) [ 363.685412][T17611] dw2102: i2c transfer failed. [ 363.687319][T17611] dvb-usb: bulk message failed: -22 (6/0) [ 363.689348][T17611] dw2102: i2c transfer failed. [ 363.691888][T17611] dvb-usb: MAC address: 02:02:02:02:02:02 [ 363.702756][T17611] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.725852][T17611] dvb-usb: bulk message failed: -22 (3/0) [ 363.727803][T17611] dw2102: command 0x0e transfer failed. [ 363.730121][T17611] dvb-usb: bulk message failed: -22 (3/0) [ 363.732125][T17611] dw2102: command 0x0e transfer failed. [ 364.055716][T17611] dvb-usb: bulk message failed: -22 (3/0) [ 364.058146][T17611] dw2102: command 0x0e transfer failed. [ 364.063267][T17611] dvb-usb: bulk message failed: -22 (3/0) [ 364.070402][T17611] dw2102: command 0x0e transfer failed. [ 364.072493][T17611] dvb-usb: bulk message failed: -22 (1/0) [ 364.074843][T17611] dw2102: command 0x51 transfer failed. [ 364.079015][T31822] dvb-usb: bulk message failed: -22 (4/0) [ 364.081812][T31822] dw2102: i2c transfer failed. [ 364.107623][T17611] DVB: Unable to find symbol ds3000_attach() [ 364.110252][T17611] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 364.162561][T17611] rc_core: IR keymap rc-su3000 not found [ 364.164974][T17611] Registered IR keymap rc-empty [ 364.168145][T17611] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 364.174137][T17611] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input34 [ 364.182103][T17611] dvb-usb: schedule remote query interval to 150 msecs. [ 364.187269][T17611] dw2102: su3000_power_ctrl: 0, initialized 1 [ 364.189672][T17611] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 364.197156][T17611] usb 11-1: USB disconnect, device number 5 [ 364.327604][T17611] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 364.512006][T27920] snd_usb_pod 8-1:1.1: set_interface failed [ 364.518710][T27920] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 364.527596][T27920] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 364.537948][T27920] usb 8-1: USB disconnect, device number 16 [ 364.741964][T31872] support for cryptoloop has been removed. Use dm-crypt instead. [ 364.818153][ T5969] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 364.878889][T27920] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 364.895303][T31884] __nla_validate_parse: 5 callbacks suppressed [ 364.895322][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12182'. [ 364.905419][T31884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12182'. [ 364.949126][T31885] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 364.985408][ T5969] usb 10-1: Using ep0 maxpacket: 32 [ 364.988617][ T5969] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 364.993711][ T5969] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.998728][ T5969] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 365.004169][ T5969] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 365.011464][ T5969] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 365.016122][ T5969] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 365.021956][ T5969] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.027659][ T5969] usb 10-1: config 0 descriptor?? [ 365.051089][T27920] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 365.057896][T27920] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 365.062121][T27920] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 365.066292][T27920] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 365.069894][T27920] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 365.075188][T27920] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 365.081405][T27920] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 365.084803][T27920] usb 8-1: Product: syz [ 365.086556][T27920] usb 8-1: Manufacturer: syz [ 365.098655][T27920] cdc_wdm 8-1:1.0: skipping garbage [ 365.101092][T27920] cdc_wdm 8-1:1.0: skipping garbage [ 365.105829][T27920] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 365.108422][T27920] cdc_wdm 8-1:1.0: Unknown control protocol [ 365.255781][ T5969] usblp 10-1:0.0: usblp1: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 365.324482][ T5969] usb 8-1: USB disconnect, device number 17 [ 366.277414][ T44] kauditd_printk_skb: 155 callbacks suppressed [ 366.277432][ T44] audit: type=1400 audit(2000000077.456:37711): avc: denied { read write } for pid=31921 comm="syz.6.12201" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 366.292074][ T44] audit: type=1400 audit(2000000077.474:37712): avc: denied { open } for pid=31921 comm="syz.6.12201" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 366.305405][ T44] audit: type=1400 audit(2000000077.474:37713): avc: denied { ioctl } for pid=31923 comm="syz.7.12203" path="socket:[101535]" dev="sockfs" ino=101535 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 366.337450][ T44] audit: type=1400 audit(2000000077.512:37714): avc: denied { create } for pid=31925 comm="syz.7.12204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.348839][ T44] audit: type=1400 audit(2000000077.512:37715): avc: denied { connect } for pid=31925 comm="syz.7.12204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.358443][ T44] audit: type=1400 audit(2000000077.531:37716): avc: denied { read write } for pid=31906 comm="syz.3.12192" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.369933][ T44] audit: type=1400 audit(2000000077.531:37717): avc: denied { open } for pid=31906 comm="syz.3.12192" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.380885][ T44] audit: type=1400 audit(2000000077.531:37718): avc: denied { ioctl } for pid=31906 comm="syz.3.12192" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.400247][ T44] audit: type=1400 audit(2000000077.568:37719): avc: denied { write } for pid=31927 comm="syz.6.12205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 366.411874][ T44] audit: type=1400 audit(2000000077.577:37720): avc: denied { mmap_zero } for pid=31927 comm="syz.6.12205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 366.677684][T31945] netlink: 'syz.6.12213': attribute type 4 has an invalid length. [ 366.680601][T31945] netlink: 17 bytes leftover after parsing attributes in process `syz.6.12213'. [ 366.685147][T31945] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.12213'. [ 366.719399][T31948] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 367.497387][T31975] program syz.7.12224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.570255][T31980] netlink: 52 bytes leftover after parsing attributes in process `syz.7.12226'. [ 367.608819][T31984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12230'. [ 367.612356][T31984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12230'. [ 367.616571][T31984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12230'. [ 367.620039][T31984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12230'. [ 367.648701][T29314] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 367.677721][T31986] netlink: 56 bytes leftover after parsing attributes in process `syz.7.12231'. [ 367.773532][ T847] usb 10-1: USB disconnect, device number 10 [ 367.804578][ T847] usblp1: removed [ 367.936323][T32009] printk: legacy console [ttyS0] disabled [ 367.945210][T32015] comedi comedi2: board detection failed syzkaller syzkaller login: [ 381.827189][ T533] printk: legacy console [ttyS0] enabled [ 381.893499][ T539] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 381.923778][ T542] tipc: Started in network mode [ 381.927293][ T542] tipc: Node identity e0, cluster identity 4711 [ 381.931579][ T542] tipc: Node number set to 224 [ 382.049199][ T557] CUSE: unknown device info "" [ 382.056385][ T557] CUSE: unknown device info "" [ 382.059798][ T557] CUSE: unknown device info "" [ 382.064810][ T557] CUSE: unknown device info "" [ 382.069510][ T557] CUSE: DEVNAME unspecified [ 382.072435][ T5891] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.083458][ T5891] Bluetooth: hci0: command 0x0406 tx timeout [ 382.151594][ T567] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 382.306775][ T584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12722'. [ 382.313167][ T584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12722'. [ 382.325304][ T586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12723'. [ 382.450380][ T44] kauditd_printk_skb: 204 callbacks suppressed [ 382.450400][ T44] audit: type=1400 audit(2000000092.588:38477): avc: denied { name_bind } for pid=598 comm="syz.7.12729" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 382.472692][ T44] audit: type=1400 audit(2000000092.616:38478): avc: denied { read } for pid=602 comm="syz.3.12731" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 382.504176][ T44] audit: type=1400 audit(2000000092.616:38479): avc: denied { recv } for pid=598 comm="syz.7.12729" dest=20000 netif=hwsim0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 382.527683][ T44] audit: type=1400 audit(2000000092.662:38480): avc: denied { unmount } for pid=27337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 382.556032][ T44] audit: type=1400 audit(2000000092.690:38481): avc: denied { connect } for pid=607 comm="syz.7.12732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.600111][ T44] audit: type=1400 audit(2000000092.728:38482): avc: denied { map_create } for pid=611 comm="syz.5.12735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 382.614053][ T44] audit: type=1400 audit(2000000092.728:38483): avc: denied { map_read map_write } for pid=611 comm="syz.5.12735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 382.628421][ T44] audit: type=1400 audit(2000000092.728:38484): avc: denied { prog_load } for pid=611 comm="syz.5.12735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 382.642228][ T44] audit: type=1400 audit(2000000092.737:38485): avc: denied { ioctl } for pid=607 comm="syz.7.12732" path="socket:[106059]" dev="sockfs" ino=106059 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.660667][ T44] audit: type=1400 audit(2000000092.737:38486): avc: denied { create } for pid=613 comm="syz.3.12736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 382.854201][ T640] scsi_strcpy_devinfo: vendor string 'b~sb%`Qʮ~G|\D5X2aE' is too long [ 382.992763][ T650] WARNING! power/level is deprecated; use power/control instead [ 383.057969][ T656] ima: policy update failed [ 383.388131][ T688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12772'. [ 383.590814][ T706] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 383.742026][ T717] [ 384.140207][ T756] comedi comedi2: dt2817: I/O base address or length out of range [ 384.297695][ T5891] Bluetooth: hci0: command 0x0406 tx timeout [ 384.506080][ T789] usbcore.quirks: string doesn't fit in 127 chars. [ 384.541817][ T797] netlink: 'syz.5.12825': attribute type 29 has an invalid length. [ 384.555100][ T797] netlink: 'syz.5.12825': attribute type 29 has an invalid length. [ 384.560790][ T797] netlink: 'syz.5.12825': attribute type 29 has an invalid length. [ 385.078491][ T869] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 385.198592][ T883] netlink: 'syz.6.12865': attribute type 2 has an invalid length. [ 385.206474][ T883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12865'. [ 385.305614][ T892] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 385.309817][ T892] syzkaller1: linktype set to 776 [ 385.694945][ T1474] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 385.855274][ T1474] usb 11-1: Using ep0 maxpacket: 8 [ 385.860120][ T1474] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 385.869764][ T1474] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 385.880021][ T1474] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 385.887824][ T1474] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.888761][ T919] erspan0: entered promiscuous mode [ 385.894925][ T1474] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.894978][ T1474] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.118267][ T1474] usb 11-1: GET_CAPABILITIES returned 0 [ 386.124196][ T1474] usbtmc 11-1:16.0: can't read capabilities [ 386.350984][ C2] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 386.359591][ T902] usbtmc 11-1:16.0: Unable to send data, error -71 [ 386.365767][T27920] usb 11-1: USB disconnect, device number 6 [ 386.970355][ T952] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 387.184767][ T977] tap0: tun_chr_ioctl cmd 1074025675 [ 387.187735][ T977] tap0: persist disabled [ 387.238608][ T982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12907'. [ 387.289622][ T985] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 387.396302][ T997] net2280 0000:00:00.0: unbind [ 387.402414][ T997] net2280 0000:00:00.0: probe with driver net2280 failed with error -16 [ 387.804317][ T44] kauditd_printk_skb: 183 callbacks suppressed [ 387.804335][ T44] audit: type=1400 audit(2000000097.603:38670): avc: denied { create } for pid=1029 comm="syz.7.12927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 387.824835][ T1030] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 387.832481][ T44] audit: type=1400 audit(2000000097.603:38671): avc: denied { setopt } for pid=1031 comm="syz.5.12926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.847646][ T44] audit: type=1400 audit(2000000097.603:38672): avc: denied { ioctl } for pid=1031 comm="syz.5.12926" path="socket:[108856]" dev="sockfs" ino=108856 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.865925][ T44] audit: type=1400 audit(2000000097.613:38673): avc: denied { write } for pid=1031 comm="syz.5.12926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.880915][ T44] audit: type=1400 audit(2000000097.660:38674): avc: denied { map } for pid=1035 comm="syz.7.12929" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=108262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 387.899022][ T44] audit: type=1400 audit(2000000097.660:38675): avc: denied { read write } for pid=1035 comm="syz.7.12929" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=108262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 387.914308][ T44] audit: type=1400 audit(2000000097.669:38676): avc: denied { accept } for pid=1035 comm="syz.7.12929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 387.991451][ T44] audit: type=1400 audit(2000000097.772:38677): avc: denied { read } for pid=1047 comm="syz.7.12936" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 388.007518][ T44] audit: type=1400 audit(2000000097.772:38678): avc: denied { open } for pid=1047 comm="syz.7.12936" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 388.023602][ T44] audit: type=1400 audit(2000000097.772:38679): avc: denied { mounton } for pid=1046 comm="syz.5.12944" path="/953/sys_mnt" dev="tmpfs" ino=4867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 388.354120][ T1076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12957'. [ 388.365891][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.900761][ T1131] netlink: 'syz.5.12970': attribute type 2 has an invalid length. [ 388.906789][ T1131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12970'. [ 388.979878][ T1140] loop7: detected capacity change from 0 to 7 [ 389.047032][ T1140] Dev loop7: unable to read RDB block 7 [ 389.052979][ T1140] loop7: unable to read partition table [ 389.057087][ T1140] loop7: partition table beyond EOD, truncated [ 389.063982][ T1140] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 389.137675][ T1141] Dev loop7: unable to read RDB block 7 [ 389.141772][ T1141] loop7: unable to read partition table [ 389.145907][ T1141] loop7: partition table beyond EOD, truncated [ 389.385695][ T1155] SELinux: failed to load policy [ 389.456999][ T1174] loop7: detected capacity change from 0 to 7 [ 389.521430][ T1174] Dev loop7: unable to read RDB block 7 [ 389.525169][ T1174] loop7: unable to read partition table [ 389.528555][ T1174] loop7: partition table beyond EOD, truncated [ 389.540871][ T1174] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 389.560246][ T1186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12988'. [ 389.592855][ T1180] Dev loop7: unable to read RDB block 7 [ 389.597208][ T1180] loop7: unable to read partition table [ 389.601053][ T1180] loop7: partition table beyond EOD, truncated [ 389.605080][ T1189] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 389.608901][ T1189] syzkaller1: linktype set to 776 [ 389.773485][ T1199] program syz.7.12993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.826115][ T1207] netlink: 'syz.6.12997': attribute type 12 has an invalid length. [ 389.832347][ T1207] netlink: 'syz.6.12997': attribute type 29 has an invalid length. [ 389.839371][ T1207] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12997'. [ 389.849233][ T1207] netlink: 'syz.6.12997': attribute type 3 has an invalid length. [ 389.855501][ T1207] netlink: 'syz.6.12997': attribute type 2 has an invalid length. [ 389.861363][ T1207] netlink: 35 bytes leftover after parsing attributes in process `syz.6.12997'. [ 389.918204][ T1213] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 390.368546][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: unknown main item tag 0x0 [ 390.374058][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: unknown main item tag 0x0 [ 390.379718][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: unknown main item tag 0x0 [ 390.386275][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: unknown main item tag 0x0 [ 390.393093][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: unknown main item tag 0x0 [ 390.400177][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: unknown main item tag 0x0 [ 390.406094][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: unknown main item tag 0x0 [ 390.412436][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: unknown main item tag 0x0 [ 390.417715][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: unknown main item tag 0x0 [ 390.423583][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: unknown main item tag 0x0 [ 390.437859][ T1474] hid-generic 000A:FFFFFF1D:0002.0004: hidraw1: HID v0.04 Device [syz0] on syz1 [ 390.506658][ T1260] fido_id[1260]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 390.570684][ T1273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13037'. [ 390.712764][ T42] Bluetooth: hci2: Frame reassembly failed (-84) [ 390.733508][ T1281] Bluetooth: hci2: Frame reassembly failed (-84) [ 390.744733][ T42] Bluetooth: hci2: Frame reassembly failed (-84) [ 390.853147][ T1298] program syz.6.13049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.911681][ T1306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13041'. [ 392.935029][ T5891] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 392.935914][ T5890] Bluetooth: hci2: command 0xfc11 tx timeout [ 393.072379][ T1332] blkio.reset_stats is deprecated [ 393.210782][ T44] kauditd_printk_skb: 108 callbacks suppressed [ 393.210798][ T44] audit: type=1400 audit(2000000102.666:38788): avc: denied { prog_run } for pid=1347 comm="syz.6.13062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 393.234010][ T1350] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 393.246487][ T42] Bluetooth: hci2: Frame reassembly failed (-84) [ 393.251061][ T42] Bluetooth: hci2: Frame reassembly failed (-84) [ 393.300055][ T1352] Bluetooth: hci4: Frame reassembly failed (-84) [ 393.306165][ T44] audit: type=1400 audit(2000000102.750:38789): avc: denied { read write } for pid=1354 comm="syz.7.13065" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.322911][ T44] audit: type=1400 audit(2000000102.750:38790): avc: denied { open } for pid=1354 comm="syz.7.13065" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.340009][ T44] audit: type=1400 audit(2000000102.750:38791): avc: denied { ioctl } for pid=1354 comm="syz.7.13065" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.560190][ T1036] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 393.731436][ T1036] usb 12-1: Using ep0 maxpacket: 8 [ 393.736237][ T1036] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.744631][ T1036] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 393.753172][ T1036] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 393.760465][ T1036] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.768537][ T1036] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.778363][ T1036] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.006724][ T1036] usb 12-1: GET_CAPABILITIES returned 0 [ 394.010977][ T1036] usbtmc 12-1:16.0: can't read capabilities [ 394.052826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.222083][ T44] audit: type=1400 audit(2000000103.602:38792): avc: denied { write } for pid=1354 comm="syz.7.13065" name="usbtmc0" dev="devtmpfs" ino=3364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 394.225552][ C1] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 394.244532][ T1357] usbtmc 12-1:16.0: Unable to send data, error -71 [ 394.252146][ T29] usb 12-1: USB disconnect, device number 8 [ 394.838077][ T44] audit: type=1400 audit(2000000104.182:38793): avc: denied { read } for pid=1360 comm="syz.7.13066" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 394.855183][ T44] audit: type=1400 audit(2000000104.182:38794): avc: denied { open } for pid=1360 comm="syz.7.13066" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 394.873095][ T44] audit: type=1400 audit(2000000104.182:38795): avc: denied { ioctl } for pid=1360 comm="syz.7.13066" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 394.886763][ T1365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13070'. [ 394.897658][ T1365] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13070'. [ 394.906829][ T1365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13070'. [ 394.913163][ T1365] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13070'. [ 394.977513][ T44] audit: type=1400 audit(2000000104.313:38796): avc: denied { create } for pid=1368 comm="syz.7.13071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 394.991872][ T44] audit: type=1400 audit(2000000104.313:38797): avc: denied { write } for pid=1368 comm="syz.7.13071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 395.120126][ T5982] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 395.291776][ T5982] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 395.299405][ T5982] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 395.308571][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 395.316435][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 395.326337][ T5982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.331932][ T5982] usb 8-1: Product: syz [ 395.335664][ T5982] usb 8-1: Manufacturer: syz [ 395.338903][ T5982] usb 8-1: SerialNumber: syz [ 395.344758][ T5982] usb 8-1: config 0 descriptor?? [ 395.349206][ T1363] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 395.411281][ T64] Bluetooth: hci2: command 0x1003 tx timeout [ 395.411304][ T5891] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 395.424047][ T5982] rc_core: IR keymap rc-streamzap not found [ 395.427507][ T5982] Registered IR keymap rc-empty [ 395.431818][ T5982] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 395.440295][ T5982] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input37 [ 395.502176][ T5891] Bluetooth: hci4: command 0xfc11 tx timeout [ 395.511829][ T5890] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 395.579156][ T1363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.588610][ T1363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.618241][ T29] usb 8-1: USB disconnect, device number 19 [ 395.661423][ T1379] usb 1-1: USB disconnect, device number 2 [ 396.088255][ T1401] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13085'. [ 396.096121][ T1401] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13085'. [ 397.266309][ T1466] loop4: detected capacity change from 0 to 7 [ 397.324403][ T25] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.331122][ T25] Buffer I/O error on dev loop4, logical block 0, async page read [ 397.340441][ T1466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.346088][ T1466] Buffer I/O error on dev loop4, logical block 0, async page read [ 397.350340][ T1466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.356256][ T1466] Buffer I/O error on dev loop4, logical block 0, async page read [ 397.363506][ T1466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.369619][ T1466] Buffer I/O error on dev loop4, logical block 0, async page read [ 397.374615][ T1466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.380332][ T1466] Buffer I/O error on dev loop4, logical block 0, async page read [ 397.384746][ T1466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.390607][ T1466] Buffer I/O error on dev loop4, logical block 0, async page read [ 397.394901][ T1466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.400687][ T1466] Buffer I/O error on dev loop4, logical block 0, async page read [ 397.405015][ T1466] ldm_validate_partition_table(): Disk read failed. [ 397.409488][ T1466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.414418][ T1466] Buffer I/O error on dev loop4, logical block 0, async page read [ 397.419188][ T1466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.425345][ T1466] Buffer I/O error on dev loop4, logical block 0, async page read [ 397.431164][ T1466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 397.437663][ T1466] Buffer I/O error on dev loop4, logical block 0, async page read [ 397.443357][ T1466] Dev loop4: unable to read RDB block 0 [ 397.447265][ T1466] loop4: unable to read partition table [ 397.451668][ T1466] loop4: partition table beyond EOD, truncated [ 397.459808][ T1466] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 397.904327][ T1507] ima: policy update failed [ 398.093080][ T1529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13141'. [ 398.254956][ T1550] overlay: filesystem on ./file0 not supported as upperdir [ 398.344296][ T1557] kvm: kvm [1556]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 398.532960][ T1575] hugetlbfs: syz.6.13163 (1575): Using mlock ulimits for SHM_HUGETLB is obsolete [ 398.594461][ T1580] netlink: 'syz.6.13166': attribute type 11 has an invalid length. [ 398.712283][ T44] kauditd_printk_skb: 111 callbacks suppressed [ 398.712301][ T44] audit: type=1400 audit(2000000107.804:38909): avc: denied { recv } for pid=5704 comm="syz-executor" saddr=127.0.0.1 src=43174 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 398.736712][ T44] audit: type=1400 audit(2000000107.804:38910): avc: denied { read write } for pid=5878 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 398.749363][ T1585] overlay: filesystem on ./file0 not supported as upperdir [ 398.752392][ T44] audit: type=1400 audit(2000000107.804:38911): avc: denied { open } for pid=5878 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 398.772568][ T44] audit: type=1400 audit(2000000107.813:38912): avc: denied { ioctl } for pid=5878 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 398.792261][ T44] audit: type=1400 audit(2000000107.832:38913): avc: denied { mount } for pid=1584 comm="syz.7.13167" name="/" dev="overlay" ino=3549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 398.809214][ T44] audit: type=1400 audit(2000000107.832:38914): avc: denied { mount } for pid=1586 comm="syz.3.13170" name="/" dev="configfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 398.825537][ T44] audit: type=1400 audit(2000000107.832:38915): avc: denied { search } for pid=1586 comm="syz.3.13170" name="/" dev="configfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 398.825846][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13171'. [ 398.842034][ T44] audit: type=1400 audit(2000000107.832:38916): avc: denied { search } for pid=1586 comm="syz.3.13170" name="usb_gadget" dev="configfs" ino=5324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 398.867579][ T44] audit: type=1400 audit(2000000107.860:38917): avc: denied { unmount } for pid=5878 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 398.881555][ T44] audit: type=1400 audit(2000000107.888:38918): avc: denied { unmount } for pid=27527 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 398.951471][ T1603] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13177'. [ 398.958730][ T1603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13177'. [ 398.965531][ T1603] netlink: 'syz.7.13177': attribute type 15 has an invalid length. [ 398.971690][ T1603] netlink: 'syz.7.13177': attribute type 18 has an invalid length. [ 399.003802][ T1605] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 399.326172][ T1614] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 399.514660][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.840174][ T1648] loop3: detected capacity change from 0 to 7 [ 399.857429][ T1648] ldm_validate_partition_table(): Disk read failed. [ 399.871164][ T1648] Dev loop3: unable to read RDB block 0 [ 399.877018][ T1648] loop3: unable to read partition table [ 399.881342][ T1648] loop3: partition table beyond EOD, truncated [ 399.885848][ T1648] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 400.375098][ T1687] bond0: entered promiscuous mode [ 400.379730][ T1687] bond_slave_0: entered promiscuous mode [ 400.384496][ T1687] bond_slave_1: entered promiscuous mode [ 400.390911][ T1687] batadv0: entered promiscuous mode [ 400.405278][ T1687] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 400.417859][ T1687] bond0: left promiscuous mode [ 400.421767][ T1687] bond_slave_0: left promiscuous mode [ 400.426027][ T1687] bond_slave_1: left promiscuous mode [ 400.433786][ T1687] batadv0: left promiscuous mode [ 400.463116][ T29] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 400.482868][ T1693] __nla_validate_parse: 1 callbacks suppressed [ 400.482944][ T1693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13219'. [ 400.628697][ T29] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 400.636562][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 400.644529][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 400.652961][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 400.663807][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.669708][ T29] usb 10-1: Product: syz [ 400.672671][ T29] usb 10-1: Manufacturer: syz [ 400.676188][ T29] usb 10-1: SerialNumber: syz [ 401.714379][ T1739] loop3: detected capacity change from 0 to 7 [ 401.732386][ T1739] ldm_validate_partition_table(): Disk read failed. [ 401.738321][ T1739] Dev loop3: unable to read RDB block 0 [ 401.745653][ T1739] loop3: unable to read partition table [ 401.749888][ T1739] loop3: partition table beyond EOD, truncated [ 401.756157][ T1739] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 402.803944][ T1762] loop3: detected capacity change from 0 to 7 [ 402.809790][ C0] blk_print_req_error: 45 callbacks suppressed [ 402.809804][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.818135][ C0] buffer_io_error: 45 callbacks suppressed [ 402.818145][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 402.826755][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.833316][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 402.839520][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.846733][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 402.852332][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.859451][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 402.866391][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.873311][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 402.880194][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.886872][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 402.893086][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.899793][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 402.908410][ T1762] ldm_validate_partition_table(): Disk read failed. [ 402.916780][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.923506][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 402.929562][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.936115][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 402.941602][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.948407][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 402.954922][ T1762] Dev loop3: unable to read RDB block 0 [ 402.962964][ T1762] loop3: unable to read partition table [ 402.967935][ T1762] loop3: partition table beyond EOD, truncated [ 402.975014][ T1762] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 403.434529][ T847] usb 10-1: USB disconnect, device number 13 [ 403.560276][ T1808] ftl_cs: FTL header not found. [ 403.603545][ T1821] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 403.611036][ T1821] bond2 (unregistering): Released all slaves [ 403.632753][ T1824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13278'. [ 403.639895][ T1824] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13278'. [ 403.662506][ T1808] block2mtd: mtd3: [/dev/loop0] erase_size = 128KiB [131072] [ 403.991499][ T1853] block2mtd: error: cannot open device /dev/loop0 [ 404.005432][ T1856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13291'. [ 404.011643][ T1856] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13291'. [ 404.068521][ T44] kauditd_printk_skb: 177 callbacks suppressed [ 404.068540][ T44] audit: type=1400 audit(2000000112.820:39096): avc: denied { setopt } for pid=1863 comm="syz.7.13297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 404.075360][ T1864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13296'. [ 404.092269][ T1864] netlink: 80 bytes leftover after parsing attributes in process `syz.6.13296'. [ 404.104984][ T1867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13298'. [ 404.141008][ T44] audit: type=1400 audit(2000000112.885:39097): avc: denied { prog_load } for pid=1868 comm="syz.3.13301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 404.154456][ T44] audit: type=1400 audit(2000000112.885:39098): avc: denied { bpf } for pid=1868 comm="syz.3.13301" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 404.174539][ T44] audit: type=1400 audit(2000000112.894:39099): avc: denied { perfmon } for pid=1868 comm="syz.3.13301" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 404.202754][ T44] audit: type=1400 audit(2000000112.894:39100): avc: denied { prog_run } for pid=1868 comm="syz.3.13301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 404.211058][ T1877] block2mtd: error: cannot open device /dev/loop0 [ 404.216968][ T44] audit: type=1400 audit(2000000112.941:39101): avc: denied { create } for pid=1874 comm="syz.5.13307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.235802][ T44] audit: type=1400 audit(2000000112.941:39102): avc: denied { write } for pid=1874 comm="syz.5.13307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.287549][ T44] audit: type=1400 audit(2000000113.025:39103): avc: denied { create } for pid=1880 comm="syz.7.13304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 404.291930][ T1883] binder: binder_mmap: 1881 200000000000-200000200000 bad vm_flags failed -1 [ 404.310018][ T44] audit: type=1400 audit(2000000113.025:39104): avc: denied { append } for pid=1881 comm="syz.3.13305" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 404.310065][ T44] audit: type=1400 audit(2000000113.025:39105): avc: denied { read } for pid=1881 comm="syz.3.13305" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 404.936573][ T1946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13334'. [ 404.943785][ T1946] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13334'. [ 405.222909][ T1971] netlink: 'syz.3.13347': attribute type 4 has an invalid length. [ 405.459109][ T1998] netlink: 'syz.3.13360': attribute type 1 has an invalid length. [ 405.530989][ T2006] openvswitch: netlink: IP tunnel dst address not specified [ 405.536661][ T2006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.747052][ T2025] binder: binder_mmap: 2023 200000000000-200000200000 bad vm_flags failed -1 [ 405.955514][ T2049] __nla_validate_parse: 3 callbacks suppressed [ 405.955535][ T2049] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13383'. [ 406.026356][ T2058] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 406.265764][ T2088] Attempt to restore checkpoint with obsolete wellknown handles [ 406.643067][ T2114] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 406.946100][ T2136] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13424'. [ 407.240427][ T2166] netlink: 68 bytes leftover after parsing attributes in process `syz.6.13437'. [ 407.404341][ T5992] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 407.657240][ T2204] bond5: ARP target 9.0.0.0 is already present [ 407.661657][ T2204] bond5: option arp_ip_target: invalid value (9) [ 407.669222][ T2204] bond5 (unregistering): Released all slaves [ 407.698538][ T29] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 408.125567][ T2251] bond5: invalid ARP target 0.0.0.0 specified for addition [ 408.130386][ T2251] bond5: option arp_ip_target: invalid value (0) [ 408.135743][ T2251] bond5 (unregistering): Released all slaves [ 408.245579][ T2176] ceph: No mds server is up or the cluster is laggy [ 408.271349][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 409.260493][ T2335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13510'. [ 409.426151][ T44] kauditd_printk_skb: 285 callbacks suppressed [ 409.426169][ T44] audit: type=1400 audit(2000000117.835:39391): avc: denied { read } for pid=2350 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.452975][ T44] audit: type=1400 audit(2000000117.835:39392): avc: denied { checkpoint_restore } for pid=2348 comm="syz.7.13517" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 409.470049][ T44] audit: type=1400 audit(2000000117.835:39393): avc: denied { read open } for pid=2350 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.490967][ T44] audit: type=1400 audit(2000000117.835:39394): avc: denied { getattr } for pid=2350 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.509197][ T44] audit: type=1400 audit(2000000117.845:39395): avc: denied { write } for pid=2347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.529654][ T44] audit: type=1400 audit(2000000117.845:39396): avc: denied { add_name } for pid=2347 comm="dhcpcd-run-hook" name="resolv.conf.macvlan1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.547941][ T44] audit: type=1400 audit(2000000117.845:39397): avc: denied { create } for pid=2347 comm="dhcpcd-run-hook" name="resolv.conf.macvlan1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 409.566916][ T44] audit: type=1400 audit(2000000117.845:39398): avc: denied { write } for pid=2347 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.macvlan1.link" dev="tmpfs" ino=27952 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 409.601038][ T44] audit: type=1400 audit(2000000117.845:39399): avc: denied { append } for pid=2347 comm="dhcpcd-run-hook" name="resolv.conf.macvlan1.link" dev="tmpfs" ino=27952 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 409.601638][ T2358] bond2: ARP target 9.0.0.0 is already present [ 409.617663][ T44] audit: type=1400 audit(2000000117.864:39400): avc: denied { bpf } for pid=2351 comm="syz.5.13518" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 409.621155][ T2358] bond2: option arp_ip_target: invalid value (9) [ 409.644301][ T2358] bond2 (unregistering): Released all slaves [ 410.122539][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13535'. [ 410.128394][ T2404] netlink: 'syz.5.13535': attribute type 30 has an invalid length. [ 410.178100][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13535'. [ 410.183645][ T2408] netlink: 'syz.5.13535': attribute type 30 has an invalid length. [ 410.591407][ T2436] netlink: 'syz.7.13548': attribute type 10 has an invalid length. [ 410.627535][ T2436] team0: Port device veth0 added [ 410.783933][ T2455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13555'. [ 410.995777][ T2475] batman_adv: batadv0: Adding interface: macvtap1 [ 411.001006][ T2475] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.019330][ T2475] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 411.560800][ T2497] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13576'. [ 411.569596][ T2497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13576'. [ 411.622098][ T2504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13579'. [ 411.628907][ T2504] netlink: 'syz.7.13579': attribute type 30 has an invalid length. [ 411.659411][ T2507] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13581'. [ 411.677193][ T2513] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13579'. [ 411.683120][ T2513] netlink: 'syz.7.13579': attribute type 30 has an invalid length. [ 411.783606][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 412.095822][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 412.646404][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 412.665121][ T2524] ceph: No mds server is up or the cluster is laggy [ 412.794504][ T2554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13599'. [ 412.915103][ T29] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 412.931368][ T2578] scsi_dev_info_list_add_str: bad dev info string 'end' '' '' [ 413.207297][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 413.757623][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 413.789060][ T2567] ceph: No mds server is up or the cluster is laggy [ 414.100230][ T2647] xt_hashlimit: size too large, truncated to 1048576 [ 415.145646][ T44] kauditd_printk_skb: 146 callbacks suppressed [ 415.145666][ T44] audit: type=1400 audit(2000000123.179:39547): avc: denied { mounton } for pid=2654 comm="syz.5.13642" path="/1136/myproc" dev="tmpfs" ino=5830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 415.147850][ T2658] scsi_dev_info_list_add_str: bad dev info string 'end' '' '' [ 415.150379][ T2660] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13643'. [ 415.153775][ T44] audit: type=1400 audit(2000000123.188:39548): avc: denied { read } for pid=2659 comm="syz.7.13643" dev="nsfs" ino=4026533008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 415.164735][ T2662] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 415.204217][ T44] audit: type=1400 audit(2000000123.188:39549): avc: denied { open } for pid=2659 comm="syz.7.13643" path="net:[4026533008]" dev="nsfs" ino=4026533008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 415.222171][ T44] audit: type=1400 audit(2000000123.198:39550): avc: denied { create } for pid=2661 comm="syz.3.13644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.237324][ T44] audit: type=1400 audit(2000000123.198:39551): avc: denied { bind } for pid=2661 comm="syz.3.13644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.252197][ T44] audit: type=1400 audit(2000000123.198:39552): avc: denied { write } for pid=2661 comm="syz.3.13644" path="socket:[116415]" dev="sockfs" ino=116415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.431421][ T44] audit: type=1400 audit(2000000124.395:39553): avc: denied { map_create } for pid=2667 comm="syz.3.13640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 416.448096][ T44] audit: type=1400 audit(2000000124.395:39554): avc: denied { map_read map_write } for pid=2667 comm="syz.3.13640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 416.455866][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 416.466664][ T44] audit: type=1400 audit(2000000124.395:39555): avc: denied { write } for pid=2670 comm="syz.7.13639" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 416.484431][ T44] audit: type=1400 audit(2000000124.395:39556): avc: denied { open } for pid=2670 comm="syz.7.13639" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 416.518656][ T2681] option changes via remount are deprecated (pid=2680 comm=syz.3.13645) [ 416.528489][ T2681] cgroup: option or name mismatch, new: 0x0 "noprefix", old: 0x0 "" [ 416.643070][ T2692] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82 [ 416.739334][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 416.907616][ T2722] tipc: Enabled bearer , priority 0 [ 417.113044][ T2748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13669'. [ 417.255188][ T2765] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 417.263111][ T2765] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 417.270705][ T2765] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 417.307085][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 417.322528][ T2669] ceph: No mds server is up or the cluster is laggy [ 417.878960][ T2802] smpboot: CPU 1 is now offline [ 418.061683][ T2802] smpboot: CPU 3 is now offline [ 418.222698][ T2842] netlink: 'syz.6.13704': attribute type 29 has an invalid length. [ 418.237108][ T2842] netlink: 'syz.6.13704': attribute type 29 has an invalid length. [ 418.623766][ T2872] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.13716'. [ 418.658312][ T2872] openvswitch: netlink: Message has 512 unknown bytes. [ 419.157854][ T2916] : renamed from vlan0 (while UP) [ 419.230129][ T2918] sch_fq: defrate 0 ignored. [ 419.332884][ T2925] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 419.429654][ T2931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13737'. [ 419.439312][ T2931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13737'. [ 419.821945][ T2951] netlink: 'syz.5.13747': attribute type 10 has an invalid length. [ 419.878018][ T2956] netlink: 14 bytes leftover after parsing attributes in process `syz.5.13747'. [ 419.879689][ T2951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.907437][ T2951] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 420.021696][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.082360][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.109077][ T2956] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 420.161249][ T2956] bond0 (unregistering): Released all slaves [ 420.181837][ T2953] pimreg: tun_chr_ioctl cmd 1074025672 [ 420.184897][ T2953] pimreg: ignored: set checksum enabled [ 420.546506][ T44] kauditd_printk_skb: 161 callbacks suppressed [ 420.546518][ T44] audit: type=1400 audit(2000000128.242:39718): avc: denied { read } for pid=5434 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 420.586725][ T44] audit: type=1400 audit(2000000128.260:39719): avc: denied { read append } for pid=2986 comm="syz.5.13759" name="file1" dev="9p" ino=77093743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 420.601504][ T44] audit: type=1400 audit(2000000128.260:39720): avc: denied { open } for pid=2986 comm="syz.5.13759" path="/1174/file0/file1" dev="9p" ino=77093743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 420.654388][ T44] audit: type=1400 audit(2000000128.307:39721): avc: denied { unmount } for pid=24727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 420.669603][ T44] audit: type=1400 audit(2000000128.307:39722): avc: denied { recv } for pid=5704 comm="syz-executor" saddr=127.0.0.1 src=43174 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 420.717731][ T44] audit: type=1400 audit(2000000128.391:39723): avc: denied { read write } for pid=2997 comm="syz.7.13763" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 420.732440][ T44] audit: type=1400 audit(2000000128.391:39724): avc: denied { open } for pid=2997 comm="syz.7.13763" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 420.746872][ T44] audit: type=1400 audit(2000000128.391:39725): avc: denied { ioctl } for pid=2997 comm="syz.7.13763" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 420.776070][ T44] audit: type=1400 audit(2000000128.447:39726): avc: denied { create } for pid=2999 comm="syz.6.13764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 420.789448][ T44] audit: type=1400 audit(2000000128.466:39727): avc: denied { setopt } for pid=2999 comm="syz.6.13764" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 421.758143][ T3069] 9p: Invalid gid '0x00000000ffffffff' [ 421.768626][ T3073] vlan0: entered allmulticast mode [ 421.771565][ T3073] macsec0: entered allmulticast mode [ 421.774418][ T3073] veth1_macvtap: entered allmulticast mode [ 422.289018][ T3108] xt_hashlimit: size too large, truncated to 1048576 [ 423.146663][ T3164] overlayfs: upper fs does not support file handles, falling back to index=off. [ 423.161086][ T3164] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 423.237598][ T3169] iommufd_mock iommufd_mock0: Adding to iommu group 9 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 423.452536][ T3183] loop5: detected capacity change from 0 to 7 [ 423.703703][ T3183] Dev loop5: unable to read RDB block 7 [ 423.725379][ T3183] loop5: unable to read partition table [ 423.736268][ T3183] loop5: partition table beyond EOD, truncated [ 423.740377][ T3183] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 424.902389][ T5982] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 425.073013][ T5982] usb 12-1: Using ep0 maxpacket: 8 [ 425.080303][ T5982] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 425.091116][ T5982] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 425.105222][ T5982] usb 12-1: config 0 has no interface number 0 [ 425.111879][ T5982] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.130403][ T5982] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 425.150642][ T5982] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.175751][ T5982] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 425.191367][ T5982] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.350203][ T3268] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 425.414477][ T5891] Bluetooth: hci5: unknown advertising packet type: 0x6b [ 425.414575][ T5891] Bluetooth: hci5: Dropping invalid advertising data [ 425.423877][ T5891] Bluetooth: hci5: Malformed LE Event: 0x02 [ 425.770033][ T3292] 8021q: VLANs not supported on gre0 [ 425.806803][ T3294] ================================================================== [ 425.811268][ T3294] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 425.814863][ T3294] Read of size 1 at addr ffff888027b11aa0 by task syz.6.13878/3294 [ 425.821308][ T3294] [ 425.822533][ T3294] CPU: 2 UID: 0 PID: 3294 Comm: syz.6.13878 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.822555][ T3294] Tainted: [L]=SOFTLOCKUP [ 425.822560][ T3294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 425.822568][ T3294] Call Trace: [ 425.822574][ T3294] [ 425.822580][ T3294] dump_stack_lvl+0x100/0x190 [ 425.822601][ T3294] print_report+0x13d/0x4b0 [ 425.822621][ T3294] ? __virt_addr_valid+0x239/0x430 [ 425.822640][ T3294] ? string+0x471/0x4d0 [ 425.822653][ T3294] kasan_report+0xdf/0x1c0 [ 425.822672][ T3294] ? string+0x471/0x4d0 [ 425.822686][ T3294] string+0x471/0x4d0 [ 425.822699][ T3294] ? __pfx_string+0x10/0x10 [ 425.822714][ T3294] ? mtree_range_walk+0x72b/0xb70 [ 425.822731][ T3294] vsnprintf+0x422/0x1300 [ 425.822750][ T3294] ? __pfx_vsnprintf+0x10/0x10 [ 425.822764][ T3294] ? __lock_acquire+0x49f/0x1a40 [ 425.822779][ T3294] ? __pfx_num_to_str+0x10/0x10 [ 425.822794][ T3294] seq_printf+0x1a4/0x250 [ 425.822805][ T3294] ? __pfx_num_to_str+0x10/0x10 [ 425.822824][ T3294] ? __pfx_seq_printf+0x10/0x10 [ 425.822835][ T3294] ? do_raw_spin_lock+0x128/0x260 [ 425.822853][ T3294] ? seq_put_decimal_ull_width+0x1db/0x3a0 [ 425.822867][ T3294] irq_seq_show+0x390/0x8b0 [ 425.822885][ T3294] seq_read_iter+0xbce/0x1270 [ 425.822902][ T3294] proc_reg_read_iter+0x220/0x310 [ 425.822918][ T3294] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 425.822935][ T3294] vfs_read+0x82e/0xb40 [ 425.822955][ T3294] ? __pfx_vfs_read+0x10/0x10 [ 425.822976][ T3294] ksys_read+0x12a/0x250 [ 425.822986][ T3294] ? __pfx_ksys_read+0x10/0x10 [ 425.822998][ T3294] do_syscall_64+0x115/0x870 [ 425.823013][ T3294] ? clear_bhb_loop+0x70/0xc0 [ 425.823026][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.823038][ T3294] RIP: 0033:0x7f9c2139e0d9 [ 425.823050][ T3294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.823061][ T3294] RSP: 002b:00007f9c2222d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.823072][ T3294] RAX: ffffffffffffffda RBX: 00007f9c21625fa0 RCX: 00007f9c2139e0d9 [ 425.823080][ T3294] RDX: 00000000000003e8 RSI: 0000200000000400 RDI: 0000000000000003 [ 425.823086][ T3294] RBP: 00007f9c21435024 R08: 0000000000000000 R09: 0000000000000000 [ 425.823093][ T3294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.823100][ T3294] R13: 00007f9c21626038 R14: 00007f9c21625fa0 R15: 00007ffc9b4e2788 [ 425.823110][ T3294] [ 425.823115][ T3294] [ 425.952345][ T3294] Allocated by task 27337: [ 425.954622][ T3294] kasan_save_stack+0x30/0x50 [ 425.957094][ T3294] kasan_save_track+0x14/0x30 [ 425.959564][ T3294] __kasan_kmalloc+0xaa/0xb0 [ 425.961961][ T3294] __kmalloc_node_noprof+0x339/0x830 [ 425.964696][ T3294] __vmalloc_node_range_noprof+0x409/0x1630 [ 425.967764][ T3294] __vmalloc_node_noprof+0xad/0xf0 [ 425.970792][ T3294] do_ipt_get_ctl+0x7e0/0xbf0 [ 425.973263][ T3294] nf_getsockopt+0x7c/0xe0 [ 425.975553][ T3294] ip_getsockopt+0x192/0x1e0 [ 425.977960][ T3294] tcp_getsockopt+0xa1/0x110 [ 425.980698][ T3294] do_sock_getsockopt+0x50a/0x6e0 [ 425.984102][ T3294] __sys_getsockopt+0x148/0x260 [ 425.987372][ T3294] __x64_sys_getsockopt+0xbd/0x160 [ 425.990766][ T3294] do_syscall_64+0x115/0x870 [ 425.993920][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.997998][ T3294] [ 425.999602][ T3294] Freed by task 27337: [ 426.002409][ T3294] kasan_save_stack+0x30/0x50 [ 426.005620][ T3294] kasan_save_track+0x14/0x30 [ 426.008875][ T3294] kasan_save_free_info+0x3b/0x70 [ 426.012313][ T3294] __kasan_slab_free+0x5f/0x80 [ 426.015579][ T3294] kfree+0x22b/0x6c0 [ 426.018263][ T3294] vfree+0x12e/0x750 [ 426.020563][ T3294] do_ipt_get_ctl+0x9d7/0xbf0 [ 426.022998][ T3294] nf_getsockopt+0x7c/0xe0 [ 426.025824][ T3294] ip_getsockopt+0x192/0x1e0 [ 426.029005][ T3294] tcp_getsockopt+0xa1/0x110 [ 426.032163][ T3294] do_sock_getsockopt+0x50a/0x6e0 [ 426.035118][ T3294] __sys_getsockopt+0x148/0x260 [ 426.037652][ T3294] __x64_sys_getsockopt+0xbd/0x160 [ 426.040270][ T3294] do_syscall_64+0x115/0x870 [ 426.042616][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.045702][ T3294] [ 426.046932][ T3294] The buggy address belongs to the object at ffff888027b11aa0 [ 426.046932][ T3294] which belongs to the cache kmalloc-8 of size 8 [ 426.053853][ T3294] The buggy address is located 0 bytes inside of [ 426.053853][ T3294] freed 8-byte region [ffff888027b11aa0, ffff888027b11aa8) [ 426.062272][ T3294] [ 426.063863][ T3294] The buggy address belongs to the physical page: [ 426.068248][ T3294] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27b11 [ 426.074270][ T3294] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 426.079106][ T3294] page_type: f5(slab) [ 426.081776][ T3294] raw: 00fff00000000000 ffff88801bc42500 dead000000000100 dead000000000122 [ 426.087592][ T3294] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 426.093325][ T3294] page dumped because: kasan: bad access detected [ 426.097652][ T3294] page_owner tracks the page as allocated [ 426.101533][ T3294] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6835914559, free_ts 0 [ 426.114391][ T3294] post_alloc_hook+0xfd/0x120 [ 426.117605][ T3294] get_page_from_freelist+0xf48/0x3530 [ 426.121281][ T3294] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 426.125261][ T3294] new_slab+0xa2/0x640 [ 426.128095][ T3294] refill_objects+0xe3/0x410 [ 426.131205][ T3294] __pcs_replace_empty_main+0x376/0x680 [ 426.135035][ T3294] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 426.139688][ T3294] kstrdup+0x51/0xe0 [ 426.142428][ T3294] kstrdup_const+0x63/0x80 [ 426.145445][ T3294] kvasprintf_const+0x10f/0x1a0 [ 426.148748][ T3294] kobject_set_name_vargs+0x5a/0x140 [ 426.152343][ T3294] dev_set_name+0xc7/0x100 [ 426.155368][ T3294] tty_register_device_attr+0x2fb/0x7f0 [ 426.159133][ T3294] tty_register_driver+0x769/0xb50 [ 426.162680][ T3294] pty_init+0x65d/0xdc0 [ 426.165512][ T3294] do_one_initcall+0x11d/0x700 [ 426.168818][ T3294] page_owner free stack trace missing [ 426.172511][ T3294] [ 426.174110][ T3294] Memory state around the buggy address: [ 426.177968][ T3294] ffff888027b11980: 05 fc fc fc 06 fc fc fc 05 fc fc fc 05 fc fc fc [ 426.183489][ T3294] ffff888027b11a00: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 426.189087][ T3294] >ffff888027b11a80: 07 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 426.194609][ T3294] ^ [ 426.198141][ T3294] ffff888027b11b00: fa fc fc fc 06 fc fc fc 00 fc fc fc fa fc fc fc [ 426.203714][ T3294] ffff888027b11b80: fa fc fc fc 04 fc fc fc 00 fc fc fc 00 fc fc fc [ 426.209271][ T3294] ================================================================== [ 426.214792][ T3294] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 426.219707][ T3294] CPU: 2 UID: 0 PID: 3294 Comm: syz.6.13878 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.227256][ T3294] Tainted: [L]=SOFTLOCKUP [ 426.230253][ T3294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.237371][ T3294] Call Trace: [ 426.239632][ T3294] [ 426.241699][ T3294] dump_stack_lvl+0x100/0x190 [ 426.244963][ T3294] vpanic+0x552/0x970 [ 426.247762][ T3294] ? __pfx_vpanic+0x10/0x10 [ 426.250861][ T3294] ? __pfx_vprintk_emit+0x10/0x10 [ 426.254335][ T3294] ? string+0x471/0x4d0 [ 426.257193][ T3294] panic+0xd1/0xe0 [ 426.259715][ T3294] ? __pfx_panic+0x10/0x10 [ 426.262750][ T3294] ? end_report.part.0+0x23/0x90 [ 426.266130][ T3294] ? rcu_is_watching+0x12/0xc0 [ 426.269393][ T3294] ? end_report.part.0+0x23/0x90 [ 426.272828][ T3294] check_panic_on_warn.cold+0x19/0x34 [ 426.276579][ T3294] end_report.part.0+0x3a/0x90 [ 426.279860][ T3294] kasan_report.cold+0xe/0x18 [ 426.283133][ T3294] ? string+0x471/0x4d0 [ 426.286023][ T3294] string+0x471/0x4d0 [ 426.288823][ T3294] ? __pfx_string+0x10/0x10 [ 426.291932][ T3294] ? mtree_range_walk+0x72b/0xb70 [ 426.295425][ T3294] vsnprintf+0x422/0x1300 [ 426.298472][ T3294] ? __pfx_vsnprintf+0x10/0x10 [ 426.301779][ T3294] ? __lock_acquire+0x49f/0x1a40 [ 426.305212][ T3294] ? __pfx_num_to_str+0x10/0x10 [ 426.308618][ T3294] seq_printf+0x1a4/0x250 [ 426.311624][ T3294] ? __pfx_num_to_str+0x10/0x10 [ 426.314947][ T3294] ? __pfx_seq_printf+0x10/0x10 [ 426.318302][ T3294] ? do_raw_spin_lock+0x128/0x260 [ 426.321779][ T3294] ? seq_put_decimal_ull_width+0x1db/0x3a0 [ 426.325795][ T3294] irq_seq_show+0x390/0x8b0 [ 426.329037][ T3294] seq_read_iter+0xbce/0x1270 [ 426.331692][ T3294] proc_reg_read_iter+0x220/0x310 [ 426.334295][ T3294] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 426.337176][ T3294] vfs_read+0x82e/0xb40 [ 426.339358][ T3294] ? __pfx_vfs_read+0x10/0x10 [ 426.341789][ T3294] ksys_read+0x12a/0x250 [ 426.344009][ T3294] ? __pfx_ksys_read+0x10/0x10 [ 426.346483][ T3294] do_syscall_64+0x115/0x870 [ 426.348897][ T3294] ? clear_bhb_loop+0x70/0xc0 [ 426.351407][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.354493][ T3294] RIP: 0033:0x7f9c2139e0d9 [ 426.356809][ T3294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.366919][ T3294] RSP: 002b:00007f9c2222d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.371497][ T3294] RAX: ffffffffffffffda RBX: 00007f9c21625fa0 RCX: 00007f9c2139e0d9 [ 426.376538][ T3294] RDX: 00000000000003e8 RSI: 0000200000000400 RDI: 0000000000000003 [ 426.380648][ T3294] RBP: 00007f9c21435024 R08: 0000000000000000 R09: 0000000000000000 [ 426.385009][ T3294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.389114][ T3294] R13: 00007f9c21626038 R14: 00007f9c21625fa0 R15: 00007ffc9b4e2788 [ 426.393279][ T3294] [ 426.395402][ T3294] Kernel Offset: disabled [ 426.397654][ T3294] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:08:03 Registers: info registers vcpu 0 CPU#0 RAX=00000000001eff23 RBX=ffffffff8e891480 RCX=ffffffff8bbad335 RDX=0000000000000000 RSI=ffffffff8e1a9419 RDI=ffffffff8c400480 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bbab8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c250b52 CR3=0000000031942000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=a4ea19cc15c6a062 f50fe646de115b09 a4ea19cc15c6a062 f50fe646de115b09 a4ea19cc15c6a062 f50fe646de115b09 a4ea19cc15c6a062 f50fe646de115b09 ZMM18=e218194b022aef14 f5416cb35da8fc7e e218194b022aef14 f5416cb35da8fc7e e218194b022aef14 f5416cb35da8fc7e e218194b022aef14 f5416cb35da8fc7e ZMM19=4e48000000000000 0000000000000005 4e48000000000000 0000000000000004 4e48000000000000 0000000000000003 4e48000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04c40030656c6966 2f2e01ffffffffff ffffffef080c8003 0280040780040401 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03be0a080002a803 00080002a0031fff fffffa0800029803 0008000290030008 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002880300080002 8003000800078803 0399c08ce0080007 80030010000fffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe8080040dc0030f fe8080040db0030f fe8080040da0030f fec080040d90030f ZMM25=a55d4eada55d4ead a55d4eada55d4ead a55d4eada55d4ead a55d4eada55d4ead a55d4eada55d4ead a55d4eada55d4ead a55d4eada55d4ead a55d4eada55d4ead ZMM26=a8a022a7a8a022a7 a8a022a7a8a022a7 a8a022a7a8a022a7 a8a022a7a8a022a7 a8a022a7a8a022a7 a8a022a7a8a022a7 a8a022a7a8a022a7 a8a022a7a8a022a7 ZMM27=65cba7b165cba7b1 65cba7b165cba7b1 65cba7b165cba7b1 65cba7b165cba7b1 65cba7b165cba7b1 65cba7b165cba7b1 65cba7b165cba7b1 65cba7b165cba7b1 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a7430000a7430000 a7430000a7430000 a7430000a7430000 a7430000a7430000 a7430000a7430000 a7430000a7430000 a7430000a7430000 a7430000a7430000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b58eaa RDX=ffff88801eaea540 RSI=ffffffff81b58ece RDI=ffff88801eaea540 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b58ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0ec95c7ff8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=000000007fffffff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4837f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4837f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555589153aa8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 652e79726f6d656d 01ffffffffffffff ffe3080180030100 00000806020105b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffb0809800300 0400019db4080001 800401c708000801 4cc00073746e6576 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b003018080801000 04a0031010000490 030a100004800300 2e01ffffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0140100004800444 80100009800401c7 08000a0145de0108 0004b00301808080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100004a003101000 0490030a10000480 03002e01ffffffff fffffffffb080980 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03000400019db408 0001800401c70800 08014cc00073746e 6576652e79726f6d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d01ffffffffff ffffffe308018003 0100000008060201 05b844e482100004 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001800401 000000080606016c 8e04c08081800800 01e00300100001d0 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646f6d5f44495f45 5551494e555f5f20 7220653339653264 6239666666666666 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e555f5f20722061 3639653264623966 666666666666660a 3432385f6f666e69 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3264623966666666 666666660a333238 5f6f666e69646f6d 5f44495f45555149 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6632646239666666 66666666660a3033 375f6f666e69646f 6d5f44495f455551 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66660a3932375f6f 666e69646f6d5f44 495f455551494e55 5f5f207220663664 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646f6d5f44495f45 5551494e555f5f20 7220376164663264 6239666666666666 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e555f5f20722066 6464663264623966 666666666666660a 3832375f6f666e69 info registers vcpu 2 CPU#2 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a35005 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc900046d7328 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000066 R14=ffffffff85a37a40 R15=dffffc0000000000 RIP=ffffffff85a3502f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9c2222d6c0 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c327500 CR3=0000000022e91000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9b4e2c76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9b4e2c76 00007ffc9b4e2c7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c21435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c21435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c214357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c21435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c215f25f8 00007f9c215f25c8 00007f9c215f2600 00007f9c215f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b58eaa RDX=ffff88801eed2540 RSI=ffffffff81b58ece RDI=ffff88801eed2540 RBP=0000000000000003 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=0000000000000000 RIP=ffffffff81b58ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe47f000218 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000101 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055efe82c4dd0 000055efe82c4dd0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055efe806f4b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055efe82bb360 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7acff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373269c9b590483 73732699c58b0a59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2b417c25a97b03 737373762d8df1c1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6166303030306e 65762c3638783a65 7079743a75706300 5341494c41444f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 505c5b0d0d0d0d53 584b110b05450758 4d444907484d5e00 5341494c41444f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 423532302c413532 302c413432302c34 3432302c36313230 2c453032302c4330 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c384132302c34 4132302c31413230 2c323832302c4635 32302c443532302c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000