last executing test programs: 3.907940185s ago: executing program 1 (id=4897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @opaque="6f841fcaf955c253e28c7ab3"}}}}}}, 0x3a) 3.681500209s ago: executing program 2 (id=4911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x50, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x20}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.348062218s ago: executing program 2 (id=4913): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0x6, "420600753708259249154c944122ad063ff47d3bd7baef5d6bb4c78a0400", 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x8001) 1.335061272s ago: executing program 1 (id=4914): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000440)='>w', 0x2}], 0x1) 1.288033635s ago: executing program 1 (id=4915): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) 1.285693091s ago: executing program 1 (id=4916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 1.252742178s ago: executing program 0 (id=4917): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 1.194817827s ago: executing program 3 (id=4921): socket$caif_seqpacket(0x25, 0x5, 0x0) r0 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 1.193642412s ago: executing program 2 (id=4929): syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000080)=ANY=[]) 1.137275812s ago: executing program 1 (id=4922): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000440)={r1, 0x1, 0x6, @remote}, 0x10) 1.137106779s ago: executing program 0 (id=4923): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="bf16000000000000b7070000ff030000487000000000000050000000000000009500000000000000e83d24a394a293b3bd23212fb56fa54f0b71d0e6adfefc41d86b60717142fa9ea4318123741c0a0f168c1886bf0fccf8d56ccb659427cf8593dbe3a2a3ad358061011fbc5ba1f07318988e6e01a41cc0990d0dc840a23f72eca0b2d89fc474c2a10000000077beee1cebf45fab73962fa8f6296b32a8343881dcc7b1b85f3c3da4cd36414e90a61965c3de4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d0054ce21fa41181a9580cfca031e5388ee5c9a7ddd04201f5200001fcadf95e5a4725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f588cb211624f40401691721715f46e0500000000000000a663739a190a4e825c908c0abc85d457ec5a57cb706eef32a3ed12d63c9c4c508530e173650a8a8f2a9c81bcffe437bccbe158024d8d4939e6fd9adc43f0f4b049218db92bf466e934330ed79bc9f626d68b0000600057d14854eef851bc8c30f5d0df6b94ea0b852d495085ff4eabaac9606f0497958c2c357a7124a69f6770ea6702bc53896a15fad5e55c64efd217450a975221b20d78e445e3da74a3c1e59bae44546bde4ac6de55a480f3ad5dc0f2d1818b696492285f60d914283f8d687b0bdb46261277671bba2c550bfef679bddf38ab35eaaf0268c4efa45b56a188a9195044a222ec06bb49784d5608d87c4832e4305bf8889e5db2a70f6a83d4b3cdc12546d2e9f6720dec489b6276856de6d895704ba3e8ee12c8121ffc4f5d2ae03f0227dcc4f38699d3db16f69ed45e918b07ce58bf576e253364fe0000000084f897400d4f5503a6e9ea4a480e3221f3c247ee8c55e487eaa25a7689689c9c305da4b0181f0f653fec399fcc0cc800e82bde039cc29c19b538c76e65642875bddbef61e5985751d9ebd37d2f32375357b5d2b4dc24baa6a7010038380f7029a292f1ad05000000e4e801a819aef69d081e2cacaa8ad1b4ca6df5dc37962ebc5337379e00645b6d2bec249c0612510000000000a7060d8d9b9ad109b62d1dab0eec6beabc76d765b9caf70900000399772ddfe89be4338e70d0ecfed537780a31fcaf4acaf9bd3711a4359d68ec71b0693ede07e7d18e797697901fbae4a9d9966b68eadae75ef1b8931b0818a57e5136fb8c61d73b17d8fd55c2b8d321a6cba8743114fcff01e5c10200c512000800009a021d377e477ea807cc00919ee8bfbd090034f67609cfde8877b5bb072572b421d6b1fdae83e5e250190628d02d01f978323fe36685e652ceb218a9cc9e125a4880faccaf5ac2345f20b1ee403885790500d0bc75c7e95d23904dc446e0201aafea0d3f4cc0cf285ccd000000000100005aee4199a34686905441c1fa62ed20328a10690432f59a4d3e05bd00997ea2b6f5213cb883d05b620f31869f6cce80f1ae09009ed7e3c5f3aa61bfd240cb9726bc512ba0eb1f68579c76144feb0100809f12bcf79c4d57f66703c2aee08e52de3eff160623e1af555dc7481128ed0bab22dcb6e5b6ac5e4010eaf2510fa440aabfdc80c77108c769ed2d666c555c6c38b30899a688d96a6c6dc0dd4309f6548765d3f53261b4890aa004e7f667a230b22bc6e248bf56b219d9a547b6e1c5077c9ba463329323b53910e7358b4d0c6882c590cf25e4d044a6afb10a070f285e3c94ed405aa8dc41718dd3f4bf474868538aad9a23f85a707e325c10a9f22e37c4213d0ca2910726de8e62d2e3ae7f64e40c7af3dc00bab70cf607869c5a11a03bce8aa43fa010348bc2fb420ba5e344fcdcb302548e571157d323f5fd535800284d32ffff000088ccd685f07309101a3196b705479897f4c9d97c4c7b77db7b15bfb4305d5e954a34385418e665af882a7d505323070929b228bc94b70300000066dab8c4e63debff174621a0ac7dd85b14cb7616ca23f044bd0ccd1c79292c3aa8f6e4a1c27315ef8d55781edbe368f72aeb2f48256131aaab707451c14747dfa3bb5f8725a98f6d3c797573f18810bf378e38107ece5cb7cf3b98975e9254248af60de2f04e2429d9b6eba525fd1b1b665f77710fa494e2b619c975acd535fc78696fc980573c35e9916f0000000000002c8ee5ec55faffffffffffffffcd59cc0600000053d0a1f4ea4477022c9f376b3191efeb46be3c174fb24009379bbc949fd2923715540556450f12d1645177ce3eca0d65d17deff51a024f0180000000006100499e829bda469048c70e5968375feb39e6918e591a384851ba3079ad9c376bdaf0650e212eb4185cbbb6c0dc0e699afc34ca3b9a307cd2519cd9b192d678492ea2228ff0817d68f97b18402d271036067c141b911c4e0207e2c9d37ac203f440e1a065a2d227c6ec860c0104000000000000fe7144ec680c0dac7b5906a6197c8173080c9ab3ecb72820f04a42e4a43ee3f325f93edb3a204b9c9dc8953375e37c83876f248d91f166676b54781c6855c5e067ab2c2c6d22b20a703d68d77312333deff80883cb5a25c738f4e7cbb075e10f5c36396156abb221adebb9303342bfa2b745a5e045d5db847e4810270ed1c5bbb1548ec3184ff9b8ed1687333d0e0412d452ba6b390199bd684ff458d6c8114833efde87215e5f9569d92d24579f3ef473bce24e61eb21336ad441eea93cbcb69d2156b9b6e3000000000000000000fc411d2eadcadc7c0a2c12410e4b9d634807f2a6f1c3a13508e274ecef5cfccb707a1640973973fd2d1d60138d9b7a778827fd07fbd093a0ba779dcd32556613e1fac161825da91acde7fa964c689b1f0ea96047a98260270c3a3ccb2142b074db79aa88614663ff33f9966502a2361e49aabe58eb086c5827dd9d92fa4ff0c0e8b949d585f2cbc111de478905cb37f3cbfb019c6daace508b926718506a577234468f9279a52360d1a80b88b4eb1cda949ca77b6ec43bdf5f5a400989705746b86b400947891b33d591ec5ea9ae45983273f62027998d72f83625021a72e27e0449fa154ade55071546d4000000000000000000000000000000002f907c5db9c967a1f86c57bb5062fed7c37ec16a7e62b6e370c3c5a32adee9032367814394a7a7fd12c44b81fb5ac2ad92220a72aa3355e894cbefe344a6b5eb4c25128d5427a640faae401eccf3aca4294410461e946010c50f9ee556b38eae0b252ef288397672bbbd17e5306589f93dc130b6be5b19dfb2462348355ef24762509cf29becacf8515abe299b8a7dfd585f5dbf7578bfdbfa37deeb872c3291b59349238add315cd18e6f4196b404e48955657d680511c7ba7f5e0f9d97d649583190c78015aaf4db05aa2a6cc9d00084ce958406e09fe508a0ee5feb2d34f48d87000000000000001108780004ec696f618c20771a7ae436d733f603f20c9189567b63d47fae002e616969d888a418d139a25b11c0da7aecb8c14f1a879f7b985ab634b0f5cdb2090ad2c336e9a28289247ef4f3cfcafa393927d27711ed0543a5e8ec6c1c62082549791f75fccd54582f990234496954e6e54bcbb90f2756912ab7e511a55a9e0512e5c1c10bcd76ee4799af611179a39bd0c0323cae1aaaaaa8dafb55bca104ada3252c5d9de5b9cdb6217c35ca3d28b1d8b9d2fa79376c13167a9ef1b1f4b7509debbeacc153ca8bea4a0a65ee1d1d20a9106499f0bf7f416b051e835d790ac978b90143d9125224f74b6167f7a967c7e33eb5f43570b9f3c91371968a30e528968b233d0396db424e5fd73d380318e9676d074dd5ce552a222e250f9f6d0bdd9e46e7f22d9abfd4573b57e3b52d407b464b0146ea15560a2ce034b1623fecc84842928223d17ce4ab31ef4c2a9f9caebf65341fa3da1bbae7972097e24603b9db8edc25a152bd39af179eab23ed555040c2bbb89ea22c08b97264b3616a41abfad0ab12a79574c60cf1841ea45f10e9438e55e1e0eb645200993b08833bb14517b0d0e5ba72bdacd92d57b6029129c95ab0a93857c7205e8450b27aee5e684ece77f53112873f40247a998cc896ab4d55573c7a7ef2936a29425cab46cd4fdd1452ea8429c63c74d5673f5e4d47d1b001d0d3a9e1d5c840ab37a69cb30d17ff7591f01549e552dc43b672e0feff94408171d682565dc2d84476297c6901040000cb9f7f2eb690d7a032c09f0a3d48663fe5ece30f592d71755dd6cbfac96016a2ecd4e499ce9adce6e59db0494fa25117a2bc13275c9a94a3532c1b8417e9ed5e6cd5f51f8ccc878ba73305ad19b0cf05625439cdf688d33c8fd6cf52c5c5685444b65eb918884727d3a780bdac17d447745e4accd85d3aca4d63127bb3a58095cffa08a6cecae329dd5f47552c40b560b05e962363e99300d61931ddd97444c2bae02edb26383cb96ee7d2742d24dc7e9b6dac831674ae09b7d180ebb30b9221480ad78706dadf7ca3540eb6c6c43dc7e31b2c8d188f28d6ab10d3c0c97b9f6b5feb9abeb6a801975c0bbab0b1fed7485f2fca1730906a6dc1914386118646dab2618582c4ce0a8ce7a1a3ca7d56f6ca8c7d43cad0116c70751a0db051d9adc4ab34dafbca31fecd9191d38fa011a4c1fc19df0b9aac3a0de17dc01b413c4d4eccf9eb1cd90569508fc6479111544807f11dad193a170ac290f28d3e7f702c5bced7ed90c3251897446fdbb1195136d9092168e2deedb3e0afdf0f543363fbf8759df07270981c0bd7260998963e45a2c84e8b82ddfa98dab68a23cfb2ffa4fcc4ebcd38f273e9bdb240f77eb51e259bb88dc383b19107af39ffcc708a1278b3e53c2130a9c7150593794f8f22ae9b2ff0d46c8d175bf9ff227870f1dcecd5b564d20230ac32a10982cf1bbe5ca15ed6d85b2c447f3fb0872ea6170352fd4c76c75941d1c3684a466c81a5892e9f56c0b512be586381c2390aaf93347d318aa5de4322b11088435730c69bc1cfd96d869803a3113b2a33dbf7973434ba9e4ec15c0423bb384975498ff56bf8b51237dadf6264532fdca7c44e485e4c9b695cd000"/3569], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 1.136495716s ago: executing program 3 (id=4925): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) 1.093362362s ago: executing program 3 (id=4926): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x4, 0x0) 1.090340479s ago: executing program 0 (id=4927): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9000c0008"], 0x11) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 1.089844962s ago: executing program 1 (id=4928): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x8}) 1.01259234s ago: executing program 0 (id=4930): socket$inet6(0xa, 0x3, 0x3c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.01235474s ago: executing program 2 (id=4931): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) 80.586536ms ago: executing program 3 (id=4932): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 78.709457ms ago: executing program 0 (id=4940): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f00000001c0), &(0x7f0000000200)) r0 = io_uring_setup(0x48ae, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f0000000540)={0x1000, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x5e}, 0x20) 73.342617ms ago: executing program 2 (id=4933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 1.664196ms ago: executing program 0 (id=4934): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x1, 0x5000, 0x1000, &(0x7f0000799000/0x1000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fef000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000000)={0x1}) 922.571µs ago: executing program 2 (id=4935): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 311.608µs ago: executing program 3 (id=4936): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000140)={r3, r1}) 0s ago: executing program 3 (id=4937): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) kernel console output (not intermixed with test programs): 120.882500][ T5410] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.885369][ T5410] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.888131][ T5410] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.890489][ T5410] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.893309][ T5410] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.895670][ T5410] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.898871][ T5410] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.901770][ T5410] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.904162][ T5410] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.906549][ T5410] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.909309][ T5410] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.911697][ T5410] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.914046][ T5410] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.917166][ T5410] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.919564][ T5410] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.921839][ T5410] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.924704][ T5410] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.927161][ T5410] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.929423][ T5410] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.932161][ T5410] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.934542][ T5410] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.936927][ T5410] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.939681][ T5410] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.942759][ T5410] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 120.945085][ T5410] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 120.947670][ T5410] usb 6-1: Product: syz [ 120.948760][ T5410] usb 6-1: Manufacturer: syz [ 120.949965][ T5410] usb 6-1: SerialNumber: syz [ 120.952619][ T5410] usb 6-1: config 0 descriptor?? [ 120.955548][ T5410] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 121.162049][ T5410] usb 6-1: USB disconnect, device number 12 [ 121.165246][ T5410] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 121.226414][ T39] audit: type=1400 audit(1729558227.662:2678): avc: denied { connect } for pid=11875 comm="syz.2.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.233122][ T39] audit: type=1400 audit(1729558227.672:2679): avc: denied { getopt } for pid=11875 comm="syz.2.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.400138][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 121.458952][ T39] audit: type=1401 audit(1729558227.902:2680): op=setxattr invalid_context="" [ 121.715266][T11914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2918'. [ 121.717785][T11914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2918'. [ 121.917887][T11940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2930'. [ 121.920367][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2930'. [ 122.080314][T11960] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 122.083429][T11960] macsec1: entered promiscuous mode [ 122.088305][T11960] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 122.130739][T11964] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2943'. [ 122.133909][T11964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2943'. [ 122.164364][ T39] audit: type=1400 audit(1729558228.602:2681): avc: denied { connect } for pid=11965 comm="syz.3.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.173485][ T39] audit: type=1400 audit(1729558228.612:2682): avc: denied { read } for pid=11965 comm="syz.3.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.246390][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 122.406823][ T9] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 122.416890][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.419229][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.422014][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.424525][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.426920][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.429703][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.432142][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.434500][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.437310][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.439692][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.441998][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.444812][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.447942][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.450426][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.453293][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.455829][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.458577][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.461480][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.463971][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.466457][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.469299][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.471762][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.474161][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.477402][ T5548] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 122.477846][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.483005][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 122.485497][ T9] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 122.487796][ T9] usb 7-1: Product: syz [ 122.488967][ T9] usb 7-1: Manufacturer: syz [ 122.490282][ T9] usb 7-1: SerialNumber: syz [ 122.494322][ T9] usb 7-1: config 0 descriptor?? [ 122.497524][ T9] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 122.657869][ T5548] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 122.666863][ T5548] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.669663][ T5548] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.672603][ T5548] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.676412][ T5548] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.678818][ T5548] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.681617][ T5548] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.685246][ T5548] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.687861][ T5548] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.690682][ T5548] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.694901][ T5548] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.703823][ T9] usb 7-1: USB disconnect, device number 12 [ 122.705724][ T5548] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.706809][ T9] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 122.708658][ T5548] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.715565][ T5548] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.718175][ T5548] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.720973][ T5548] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.723576][ T5548] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.725855][ T5548] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.729390][ T5548] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.732974][ T5548] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.735476][ T5548] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.738582][ T5548] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.742428][ T5548] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.744812][ T5548] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.748323][ T5548] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.751536][ T5548] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 122.753925][ T5548] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 122.756587][ T5548] usb 6-1: Product: syz [ 122.757759][ T5548] usb 6-1: Manufacturer: syz [ 122.759035][ T5548] usb 6-1: SerialNumber: syz [ 122.769009][ T5548] usb 6-1: config 0 descriptor?? [ 122.772068][ T5548] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 122.795527][ T39] audit: type=1400 audit(1729558229.232:2683): avc: denied { connect } for pid=11999 comm="syz.3.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.978254][ T35] usb 6-1: USB disconnect, device number 13 [ 122.980611][ T35] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 123.086557][ T5548] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 123.236426][ T5548] usb 8-1: Using ep0 maxpacket: 8 [ 123.239061][ T5548] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.241638][ T5548] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.244240][ T5548] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.247210][ T5548] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.250634][ T5548] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.253045][ T5548] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.460439][ T5548] usb 8-1: GET_CAPABILITIES returned 0 [ 123.461941][ T5548] usbtmc 8-1:16.0: can't read capabilities [ 123.662138][ T5410] usb 8-1: USB disconnect, device number 11 [ 123.664979][ T39] audit: type=1326 audit(1729558230.102:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2969" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b0057dff9 code=0x0 [ 123.702746][ T39] audit: type=1400 audit(1729558230.142:2685): avc: denied { mounton } for pid=12029 comm="syz.1.2970" path="/666/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 123.871888][ T39] audit: type=1400 audit(1729558230.312:2686): avc: denied { getopt } for pid=12040 comm="syz.1.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.429662][T12086] __nla_validate_parse: 2 callbacks suppressed [ 124.429674][T12086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2996'. [ 124.433884][T12086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2996'. [ 124.490849][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 125.530337][T12152] vivid-002: disconnect [ 125.532341][T12149] vivid-002: reconnect [ 125.533347][T12154] pimreg: entered allmulticast mode [ 125.543118][T12154] pimreg: left allmulticast mode [ 125.599181][T12164] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.761452][T12187] hsr0: VLAN not yet supported [ 125.869164][T12198] validate_nla: 8 callbacks suppressed [ 125.869175][T12198] netlink: 'syz.2.3047': attribute type 1 has an invalid length. [ 125.925738][T12214] binder: 12212:12214 ioctl c0306201 200002c0 returned -14 [ 125.934533][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 125.934543][ T39] audit: type=1400 audit(1729558232.372:2688): avc: denied { setopt } for pid=12215 comm="syz.0.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.983651][ T39] audit: type=1400 audit(1729558232.422:2689): avc: denied { wake_alarm } for pid=12220 comm="syz.3.3059" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.099157][ T39] audit: type=1326 audit(1729558232.542:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.3.3065" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ebab7dff9 code=0x0 [ 126.161374][T12245] netlink: 'syz.0.3069': attribute type 2 has an invalid length. [ 126.230493][T12258] pimreg: entered allmulticast mode [ 126.238369][T12258] pimreg: left allmulticast mode [ 126.330615][T12268] netlink: 'syz.0.3080': attribute type 7 has an invalid length. [ 126.332862][T12268] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3080'. [ 126.543255][T12286] Attempt to restore checkpoint with obsolete wellknown handles [ 126.728194][ T39] audit: type=1400 audit(1729558233.172:2691): avc: denied { mount } for pid=12306 comm="syz.2.3099" name="/" dev="rpc_pipefs" ino=38242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 126.760361][T12313] netlink: 'syz.2.3101': attribute type 1 has an invalid length. [ 126.762448][T12313] netlink: 'syz.2.3101': attribute type 4 has an invalid length. [ 126.764574][T12313] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3101'. [ 127.006369][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.092521][T12344] netlink: 'syz.2.3112': attribute type 7 has an invalid length. [ 127.094605][T12344] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3112'. [ 127.166965][ T8] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 127.169790][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.172075][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.175149][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.178011][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.181404][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.181422][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.182251][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.182277][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.182290][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.183579][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.183607][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.183628][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.185011][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.215810][ T39] audit: type=1326 audit(1729558233.652:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12356 comm="syz.1.3117" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b41d7dff9 code=0x0 [ 127.217862][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.224424][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.227671][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.230334][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.233468][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.236080][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.240397][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.243521][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.245995][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.248689][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.252126][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.255419][ T8] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 127.258833][ T8] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 127.261234][ T8] usb 5-1: Product: syz [ 127.262436][ T8] usb 5-1: Manufacturer: syz [ 127.263731][ T8] usb 5-1: SerialNumber: syz [ 127.265909][ T8] usb 5-1: config 0 descriptor?? [ 127.269515][ T8] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 127.472433][ T8] usb 5-1: USB disconnect, device number 9 [ 127.474774][ T8] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 128.521769][T12425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3145'. [ 128.966257][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3147'. [ 129.078930][ T39] audit: type=1400 audit(1729558235.522:2693): avc: denied { remount } for pid=12447 comm="syz.2.3151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.254001][T12481] vlan1: entered promiscuous mode [ 129.257056][T12480] vlan1: left promiscuous mode [ 129.292792][T12490] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3181'. [ 129.390301][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3183'. [ 129.423528][T12512] vlan1: entered promiscuous mode [ 129.428173][T12511] vlan1: left promiscuous mode [ 129.829299][T12535] sctp: [Deprecated]: syz.3.3194 (pid 12535) Use of int in max_burst socket option deprecated. [ 129.829299][T12535] Use struct sctp_assoc_value instead [ 130.003030][T12560] syz.0.3207[12560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.003079][T12560] syz.0.3207[12560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.006056][T12560] syz.0.3207[12560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.068637][T12570] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3211'. [ 130.122651][T12583] syz.3.3219[12583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.122703][T12583] syz.3.3219[12583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.125790][T12583] syz.3.3219[12583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.178348][ T39] audit: type=1400 audit(1729558236.622:2694): avc: denied { map } for pid=12591 comm="syz.1.3224" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 130.190562][ T39] audit: type=1400 audit(1729558236.622:2695): avc: denied { execute } for pid=12591 comm="syz.1.3224" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 130.255150][T12607] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3229'. [ 130.513018][T12640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12640 comm=syz.3.3241 [ 131.003855][T12675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3260'. [ 131.005883][T12677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3259'. [ 131.091016][T12685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3263'. [ 131.131704][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 131.164077][ T39] audit: type=1326 audit(1729558237.602:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.2.3266" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73c097dff9 code=0x0 [ 131.234591][T12699] smc: net device bond0 applied user defined pnetid SYZ0 [ 131.237955][T12699] smc: net device bond0 erased user defined pnetid SYZ0 [ 131.278900][T12708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12708 comm=syz.0.3275 [ 131.422204][T12723] netlink: 'syz.3.3288': attribute type 16 has an invalid length. [ 131.424279][T12723] netlink: 'syz.3.3288': attribute type 3 has an invalid length. [ 131.426469][T12723] netlink: 'syz.3.3288': attribute type 1 has an invalid length. [ 131.428427][T12723] netlink: 'syz.3.3288': attribute type 1 has an invalid length. [ 131.430489][T12723] netlink: 'syz.3.3288': attribute type 2 has an invalid length. [ 131.432471][T12723] netlink: 64006 bytes leftover after parsing attributes in process `syz.3.3288'. [ 131.996427][ T5346] Bluetooth: hci3: command 0x0405 tx timeout [ 132.028697][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12735 comm=syz.1.3285 [ 132.065689][ T39] audit: type=1400 audit(1729558238.502:2697): avc: denied { execute } for pid=12738 comm="syz.3.3289" path="/dev/audio1" dev="devtmpfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 132.130915][ T39] audit: type=1400 audit(1729558238.572:2698): avc: denied { create } for pid=12747 comm="syz.2.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 132.142906][ T39] audit: type=1400 audit(1729558238.582:2699): avc: denied { sys_admin } for pid=12747 comm="syz.2.3293" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 132.185956][T12754] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3295'. [ 132.190174][T12754] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 132.479246][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.579199][T12824] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3328'. [ 132.581538][T12824] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 132.643052][T12838] MTD: Couldn't look up 'mountinfo': -2 [ 132.681712][T12844] netlink: 'syz.3.3336': attribute type 6 has an invalid length. [ 132.713282][T12849] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 132.829666][ T5346] Bluetooth: min 6 > max 0 [ 132.834203][ T39] audit: type=1400 audit(1729558239.272:2700): avc: denied { write } for pid=12860 comm="syz.1.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.014002][T12894] tap0: tun_chr_ioctl cmd 1074025677 [ 133.015533][T12894] tap0: linktype set to 1 [ 133.127581][ T39] audit: type=1326 audit(1729558239.572:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.2.3361" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73c097dff9 code=0x0 [ 133.342892][T12913] netlink: 'syz.1.3370': attribute type 6 has an invalid length. [ 133.424479][T12923] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 133.652025][T12942] MTD: Couldn't look up 'mountinfo': -2 [ 133.799220][T12959] mkiss: ax0: crc mode is auto. [ 133.932996][T12978] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3400'. [ 133.947351][T12980] xt_time: unknown flags 0xc [ 134.404269][ T39] audit: type=1326 audit(1729558240.842:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13029 comm="syz.1.3422" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b41d7dff9 code=0x0 [ 134.876440][ T5346] Bluetooth: hci1: command tx timeout [ 135.051657][ T39] audit: type=1326 audit(1729558241.492:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.2.3431" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73c097dff9 code=0x0 [ 135.256249][ T39] audit: type=1326 audit(1729558241.692:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13057 comm="syz.3.3441" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ebab7dff9 code=0x0 [ 135.308979][ T39] audit: type=1400 audit(1729558241.752:2705): avc: denied { setopt } for pid=13072 comm="syz.1.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.359498][T13083] binder: 13082:13083 ioctl c0306201 20000280 returned -14 [ 135.424293][T13099] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 135.470675][T13105] __nla_validate_parse: 1 callbacks suppressed [ 135.470686][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3457'. [ 135.698552][T13126] mkiss: ax0: crc mode is auto. [ 136.314822][T13162] mkiss: ax0: crc mode is auto. [ 136.371817][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 136.371829][ T39] audit: type=1326 audit(1729558242.812:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.1.3479" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b41d7dff9 code=0x0 [ 136.670362][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'. [ 136.672806][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3494'. [ 136.679662][T13195] ipvlan2: entered allmulticast mode [ 136.681230][T13195] veth0_vlan: entered allmulticast mode [ 137.417891][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3500'. [ 137.429013][ T39] audit: type=1400 audit(1729558243.872:2709): avc: denied { bind } for pid=13211 comm="syz.1.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.435831][ T39] audit: type=1400 audit(1729558243.872:2710): avc: denied { listen } for pid=13211 comm="syz.1.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.523099][T13220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3505'. [ 137.931117][ T39] audit: type=1400 audit(1729558244.372:2711): avc: denied { setopt } for pid=13255 comm="syz.0.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.979487][ T5548] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 138.015629][ T39] audit: type=1400 audit(1729558244.452:2712): avc: denied { nlmsg_read } for pid=13265 comm="syz.1.3525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.045989][T13273] netlink: 'syz.0.3528': attribute type 1 has an invalid length. [ 138.071141][T13277] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.146402][ T5548] usb 7-1: Using ep0 maxpacket: 8 [ 138.149057][ T5548] usb 7-1: config 0 has no interfaces? [ 138.153572][ T5548] usb 7-1: New USB device found, idVendor=046d, idProduct=08ad, bcdDevice=45.03 [ 138.156921][ T5548] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.159108][ T5548] usb 7-1: Product: syz [ 138.160269][ T5548] usb 7-1: Manufacturer: syz [ 138.161610][ T5548] usb 7-1: SerialNumber: syz [ 138.164127][ T5548] usb 7-1: config 0 descriptor?? [ 138.292913][T13299] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.370626][ T5548] usb 7-1: USB disconnect, device number 13 [ 138.666761][ T5410] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 138.816471][ T5410] usb 8-1: Using ep0 maxpacket: 16 [ 138.819561][ T5410] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 138.822570][ T5410] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 104 [ 138.827019][ T5410] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 138.829392][ T5410] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.831476][ T5410] usb 8-1: Product: syz [ 138.832579][ T5410] usb 8-1: Manufacturer: syz [ 138.834289][ T5410] usb 8-1: SerialNumber: syz [ 138.838181][ T5410] usb 8-1: config 0 descriptor?? [ 138.840585][T13312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.845585][ T5410] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input23 [ 139.053981][ T828] usb 8-1: USB disconnect, device number 12 [ 139.625148][T13431] delete_channel: no stack [ 139.628178][T13430] delete_channel: no stack [ 139.650980][ T39] audit: type=1400 audit(1729558246.092:2713): avc: denied { accept } for pid=13434 comm="syz.3.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.657012][T13437] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 139.682560][T13442] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3608'. [ 139.691828][ T39] audit: type=1326 audit(1729558246.132:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.3.3609" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebab7dff9 code=0x7ffc0000 [ 139.698065][ T39] audit: type=1326 audit(1729558246.132:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.3.3609" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebab7dff9 code=0x7ffc0000 [ 139.703952][ T39] audit: type=1326 audit(1729558246.132:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.3.3609" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6ebab7dff9 code=0x7ffc0000 [ 139.710416][ T39] audit: type=1326 audit(1729558246.132:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.3.3609" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebab7dff9 code=0x7ffc0000 [ 139.740097][T13452] random: crng reseeded on system resumption [ 139.886577][T13452] Restarting kernel threads ... done. [ 140.636434][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 140.778651][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3633'. [ 140.898620][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3645'. [ 140.938014][T13528] mkiss: ax0: crc mode is auto. [ 140.998607][T13535] mkiss: ax0: crc mode is auto. [ 141.197371][ T5548] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 141.357406][ T5548] usb 6-1: Using ep0 maxpacket: 16 [ 141.359942][ T5548] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 141.362923][ T5548] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 104 [ 141.375546][ T5548] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 141.378003][ T5548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.380431][ T5548] usb 6-1: Product: syz [ 141.381720][ T5548] usb 6-1: Manufacturer: syz [ 141.383009][ T5548] usb 6-1: SerialNumber: syz [ 141.385493][ T5548] usb 6-1: config 0 descriptor?? [ 141.387350][T13532] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.390687][ T5548] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input24 [ 141.598922][ T25] usb 6-1: USB disconnect, device number 14 [ 142.196653][T13608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3682'. [ 142.276092][T13619] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3685'. [ 142.305610][T13623] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3689'. [ 142.307607][T13625] random: crng reseeded on system resumption [ 142.466968][T13625] Restarting kernel threads ... done. [ 142.704225][T13657] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3698'. [ 143.034325][T13680] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3712'. [ 143.305080][T13695] random: crng reseeded on system resumption [ 143.481340][T13695] Restarting kernel threads ... done. [ 144.159371][T13705] vxcan1: entered promiscuous mode [ 144.160794][T13705] vxcan1: entered allmulticast mode [ 147.696553][ T982] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 147.726451][ T5410] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 147.856426][ T982] usb 7-1: Using ep0 maxpacket: 32 [ 147.859119][ T982] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 147.863228][ T982] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 147.865589][ T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.868115][ T982] usb 7-1: Product: syz [ 147.869229][ T982] usb 7-1: Manufacturer: syz [ 147.870449][ T982] usb 7-1: SerialNumber: syz [ 147.872500][ T982] usb 7-1: config 0 descriptor?? [ 147.874550][T13814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.877471][ T982] hub 7-1:0.0: bad descriptor, ignoring hub [ 147.878908][ T5410] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.879125][ T982] hub 7-1:0.0: probe with driver hub failed with error -5 [ 147.881723][ T5410] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 147.884566][ T982] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input25 [ 147.885829][ T5410] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 147.890607][ T5410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.893508][ T5410] usb 5-1: config 0 descriptor?? [ 147.897975][ T5410] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 147.899766][ T5410] dvb-usb: bulk message failed: -22 (3/0) [ 147.903574][ T5410] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 147.906069][ T5410] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 147.908201][ T5410] usb 5-1: media controller created [ 147.910118][ T5410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.914990][ T5410] dvb-usb: bulk message failed: -22 (6/0) [ 147.918576][ T5410] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 147.921196][ T5410] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input26 [ 147.924420][ T5410] dvb-usb: schedule remote query interval to 150 msecs. [ 147.926330][ T5410] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 148.085039][ T982] usb 7-1: USB disconnect, device number 14 [ 148.086644][ T5410] dvb-usb: bulk message failed: -22 (1/0) [ 148.086739][ C2] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 148.088208][ T5410] dvb-usb: error while querying for an remote control event. [ 148.105359][T13817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.107999][T13817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.110643][ T5410] usb 5-1: USB disconnect, device number 10 [ 148.115676][ T5410] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 149.002945][T13838] netlink: 'syz.0.3778': attribute type 16 has an invalid length. [ 152.776799][ T39] kauditd_printk_skb: 64 callbacks suppressed [ 152.776811][ T39] audit: type=1400 audit(1729558259.222:2782): avc: denied { execute } for pid=13865 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 152.784214][ T39] audit: type=1400 audit(1729558259.222:2783): avc: denied { execute_no_trans } for pid=13865 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 152.857706][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.871960][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.874475][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.879500][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.882146][ T66] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.884504][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.906768][ T39] audit: type=1400 audit(1729558259.342:2784): avc: denied { mounton } for pid=13866 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 152.963312][T13866] chnl_net:caif_netlink_parms(): no params data found [ 152.998606][T13866] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.000475][T13866] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.002395][T13866] bridge_slave_0: entered allmulticast mode [ 153.004393][T13866] bridge_slave_0: entered promiscuous mode [ 153.006992][T13866] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.008892][T13866] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.010800][T13866] bridge_slave_1: entered allmulticast mode [ 153.012776][T13866] bridge_slave_1: entered promiscuous mode [ 153.055972][ T5642] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.065789][T13866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.070825][T13866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.096006][T13866] team0: Port device team_slave_0 added [ 153.099851][T13866] team0: Port device team_slave_1 added [ 153.119200][T13866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.121526][T13866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.130077][T13866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.143748][ T5642] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.150441][T13866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.152672][T13866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.161031][T13866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.191056][T13866] hsr_slave_0: entered promiscuous mode [ 153.193396][T13866] hsr_slave_1: entered promiscuous mode [ 153.195620][T13866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.198539][T13866] Cannot create hsr debugfs directory [ 153.219557][ T5642] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.294369][ T5642] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.337780][T13882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3796'. [ 153.364900][ T5346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.368830][ T5346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.372942][ T5346] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.375686][ T5346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.377726][ T5346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.380320][ T5346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.536435][ T828] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 153.716442][ T828] usb 7-1: Using ep0 maxpacket: 8 [ 153.718962][ T828] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 153.721887][ T828] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 153.724279][ T828] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.728768][ T828] usb 7-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 153.731092][ T828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.731375][ T5642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.733139][ T828] usb 7-1: SerialNumber: syz [ 153.734467][T13878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.739954][ T828] hub 7-1:1.0: bad descriptor, ignoring hub [ 153.741517][ T828] hub 7-1:1.0: probe with driver hub failed with error -5 [ 153.743647][ T5642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.749537][ T5642] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 153.760588][ T5642] bond0 (unregistering): Released all slaves [ 153.765819][ T5642] bond1 (unregistering): Released all slaves [ 153.847472][T13883] chnl_net:caif_netlink_parms(): no params data found [ 153.898655][ T5642] IPVS: stopping master sync thread 10942 ... [ 153.933271][T13883] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.935220][T13883] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.937350][T13883] bridge_slave_0: entered allmulticast mode [ 153.939487][T13883] bridge_slave_0: entered promiscuous mode [ 153.942332][T13883] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.944195][T13883] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.946125][T13883] bridge_slave_1: entered allmulticast mode [ 153.948599][T13883] bridge_slave_1: entered promiscuous mode [ 153.948723][T13878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.975206][T13883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.986071][T13883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.010936][T13883] team0: Port device team_slave_0 added [ 154.013976][T13883] team0: Port device team_slave_1 added [ 154.055928][T13883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.058606][T13883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.065339][T13883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.069757][T13883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.071620][T13883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.078346][T13883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.107624][T13883] hsr_slave_0: entered promiscuous mode [ 154.109572][T13883] hsr_slave_1: entered promiscuous mode [ 154.111368][T13883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.113334][T13883] Cannot create hsr debugfs directory [ 154.171761][ T5642] hsr_slave_0: left promiscuous mode [ 154.173554][ T5642] hsr_slave_1: left promiscuous mode [ 154.199594][ T5642] veth0_macvtap: left promiscuous mode [ 154.201286][ T5642] veth1_vlan: left promiscuous mode [ 154.202961][ T5642] veth0_vlan: left promiscuous mode [ 154.260528][ T5642] pim6reg9 (unregistering): left allmulticast mode [ 154.958597][ T5346] Bluetooth: hci4: command tx timeout [ 155.309055][ T828] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 155.324245][T13913] netlink: 'syz.2.3816': attribute type 1 has an invalid length. [ 155.326518][T13913] netlink: 'syz.2.3816': attribute type 2 has an invalid length. [ 155.328834][T13913] netlink: 16074 bytes leftover after parsing attributes in process `syz.2.3816'. [ 155.328836][ T828] usb 7-1: USB disconnect, device number 15 [ 155.333635][ T828] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 155.390769][T13866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.398660][T13866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.411949][T13866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.426338][ T39] audit: type=1400 audit(1729558261.862:2785): avc: denied { unmount } for pid=5334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 155.436429][ T5346] Bluetooth: hci3: command tx timeout [ 155.463136][T13883] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.471065][T13866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.474525][T13926] netlink: 'syz.0.3817': attribute type 11 has an invalid length. [ 155.481918][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 155.484865][T13928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3818'. [ 155.487504][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 155.536154][T13866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.543776][T13866] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.548662][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.550572][ T5626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.555109][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.557047][ T5653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.582619][T13883] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.590547][T13938] netlink: 'syz.0.3827': attribute type 6 has an invalid length. [ 155.598876][T13866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.601560][T13866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.669829][T13866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.687299][T13883] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.709077][T13866] veth0_vlan: entered promiscuous mode [ 155.713001][T13866] veth1_vlan: entered promiscuous mode [ 155.728745][T13866] veth0_macvtap: entered promiscuous mode [ 155.732221][T13866] veth1_macvtap: entered promiscuous mode [ 155.738170][T13866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.740876][T13866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.743380][T13866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.745991][T13866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.749701][T13866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.754426][T13866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.758095][T13866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.761227][T13866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.763858][T13866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.768122][T13866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.772493][T13866] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.774794][T13866] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.777310][T13866] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.779581][T13866] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.821916][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.823966][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.833645][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.835650][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.842807][ T39] audit: type=1400 audit(1729558262.282:2786): avc: denied { mounton } for pid=13866 comm="syz-executor" path="/syzkaller.iOk941/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 155.994893][T13955] netlink: 548 bytes leftover after parsing attributes in process `syz.2.3834'. [ 156.000237][ T5642] geneve0 (unregistering): left promiscuous mode [ 156.071320][T13963] netlink: 'syz.2.3836': attribute type 1 has an invalid length. [ 156.111635][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3829'. [ 156.114922][T13970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3829'. [ 156.117677][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3829'. [ 156.246537][ T5642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.252520][ T5642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.257060][ T5642] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 156.265075][ T5642] bond0 (unregistering): Released all slaves [ 156.287083][T13966] netlink: 'syz.0.3826': attribute type 1 has an invalid length. [ 156.289221][T13966] netlink: 'syz.0.3826': attribute type 2 has an invalid length. [ 156.291510][T13966] netlink: 16074 bytes leftover after parsing attributes in process `syz.0.3826'. [ 156.352932][T13883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.414396][ T5642] : left promiscuous mode [ 156.632936][T13883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.698510][T13883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.778732][T13883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.820760][T13883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.832677][T13883] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.838383][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.840279][ T5653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.845674][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.848046][ T5600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.867337][T13883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.936370][T13883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.048761][ T5346] Bluetooth: hci4: command tx timeout [ 157.129631][T13883] veth0_vlan: entered promiscuous mode [ 157.135855][T13883] veth1_vlan: entered promiscuous mode [ 157.149635][T13883] veth0_macvtap: entered promiscuous mode [ 157.152703][T13883] veth1_macvtap: entered promiscuous mode [ 157.160238][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.162974][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.165488][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.169931][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.172416][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.175106][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.179971][T13883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.189288][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.191970][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.194504][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.203120][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.205687][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.208725][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.211921][T13883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.257445][T13883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.260080][T13883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.262411][T13883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.264672][T13883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.366460][ T828] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 157.379589][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.381638][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.395096][ T5600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.397269][ T5600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.454942][ T5642] hsr_slave_0: left promiscuous mode [ 157.471660][ T5642] hsr_slave_1: left promiscuous mode [ 157.488616][ T5642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.490991][ T5642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.503933][ T5642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.506174][ T5642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.516600][ T5346] Bluetooth: hci3: command tx timeout [ 157.539343][ T828] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.542959][ T828] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 157.543320][ T5642] veth1_macvtap: left promiscuous mode [ 157.546139][ T828] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 157.547852][ T5642] veth0_macvtap: left promiscuous mode [ 157.550472][ T828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.551580][ T5642] veth1_vlan: left promiscuous mode [ 157.554451][ T828] usb 8-1: config 0 descriptor?? [ 157.555073][ T5642] veth0_vlan: left promiscuous mode [ 157.558175][ T828] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 157.559901][ T828] dvb-usb: bulk message failed: -22 (3/0) [ 157.562984][ T828] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 157.565822][ T828] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 157.568658][ T828] usb 8-1: media controller created [ 157.570409][ T828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.574565][ T828] dvb-usb: bulk message failed: -22 (6/0) [ 157.576103][ T828] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 157.581976][ T828] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input27 [ 157.596600][ T828] dvb-usb: schedule remote query interval to 150 msecs. [ 157.598386][ T828] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 157.762703][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.768340][ T828] dvb-usb: bulk message failed: -22 (1/0) [ 157.769965][ T828] dvb-usb: error while querying for an remote control event. [ 157.772893][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.779840][ T5410] usb 8-1: USB disconnect, device number 13 [ 157.801556][ T5410] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 158.672075][T14078] [U]  [ 158.715233][T14081] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 158.855815][ T5642] team0 (unregistering): Port device team_slave_1 removed [ 158.982710][ T5642] team0 (unregistering): Port device team_slave_0 removed [ 159.126402][ T66] Bluetooth: hci4: command tx timeout [ 159.596402][ T66] Bluetooth: hci3: command tx timeout [ 159.904287][T14074] : renamed from hsr0 (while UP) [ 159.925925][ T39] audit: type=1400 audit(1729558266.362:2787): avc: denied { execstack } for pid=14084 comm="syz.2.3883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 160.012722][ T39] audit: type=1400 audit(1729558266.452:2788): avc: denied { setopt } for pid=14094 comm="syz.3.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 160.098645][ T39] audit: type=1400 audit(1729558266.542:2789): avc: denied { listen } for pid=14102 comm="syz.2.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 160.104103][ T39] audit: type=1400 audit(1729558266.542:2790): avc: denied { accept } for pid=14102 comm="syz.2.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 160.176527][ T5548] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 160.317083][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 160.333400][ T5548] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 160.335824][ T5548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.341097][ T5548] usb 6-1: Product: syz [ 160.342587][ T5548] usb 6-1: Manufacturer: syz [ 160.343916][ T5548] usb 6-1: SerialNumber: syz [ 160.346356][ T5548] usb 6-1: config 0 descriptor?? [ 160.476788][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 160.481333][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.483873][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.489404][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 160.492573][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.494697][ T9] usb 8-1: Product: syz [ 160.495797][ T9] usb 8-1: Manufacturer: syz [ 160.497131][ T9] usb 8-1: SerialNumber: syz [ 160.553531][ T8] usb 6-1: USB disconnect, device number 15 [ 160.706211][ T9] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 160.716617][ T5346] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 160.782534][T14134] __nla_validate_parse: 1 callbacks suppressed [ 160.782550][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3906'. [ 160.856882][T14150] netlink: 'syz.0.3913': attribute type 4 has an invalid length. [ 160.858936][T14150] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3913'. [ 160.887159][ T39] audit: type=1400 audit(1729558267.332:2791): avc: denied { listen } for pid=14154 comm="syz.2.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.897614][ T39] audit: type=1400 audit(1729558267.332:2792): avc: denied { shutdown } for pid=14154 comm="syz.2.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.903535][ T39] audit: type=1400 audit(1729558267.332:2793): avc: denied { accept } for pid=14154 comm="syz.2.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.907799][ T35] usb 8-1: USB disconnect, device number 14 [ 160.910886][ T35] usblp0: removed [ 161.206583][ T5346] Bluetooth: hci4: command tx timeout [ 161.469252][T14228] netlink: 'syz.0.3947': attribute type 1 has an invalid length. [ 161.471537][T14228] netlink: 9292 bytes leftover after parsing attributes in process `syz.0.3947'. [ 161.473935][T14228] netlink: 'syz.0.3947': attribute type 1 has an invalid length. [ 161.483281][ T39] audit: type=1400 audit(1729558267.922:2794): avc: denied { setattr } for pid=14220 comm="syz.3.3944" name="ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 161.591448][ T39] audit: type=1400 audit(1729558268.032:2795): avc: denied { unmount } for pid=5335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 161.687097][ T5346] Bluetooth: hci3: command tx timeout [ 161.688971][ T30] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 161.786406][ T35] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 161.847556][ T30] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.850423][ T30] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.853095][ T30] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.855581][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.859386][T14224] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.862824][ T30] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.936486][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 161.939038][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.941504][ T35] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.945800][ T35] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.948548][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.950772][ T35] usb 6-1: Product: syz [ 161.951915][ T35] usb 6-1: Manufacturer: syz [ 161.953144][ T35] usb 6-1: SerialNumber: syz [ 162.072014][ T30] usb 7-1: USB disconnect, device number 16 [ 162.162562][ T35] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.364087][ T25] usb 6-1: USB disconnect, device number 16 [ 162.367762][ T25] usblp0: removed [ 163.122061][T14323] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3992'. [ 163.143689][ T39] audit: type=1400 audit(1729558269.582:2796): avc: denied { bind } for pid=14324 comm="syz.0.3993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.246354][ T35] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 163.400199][ T35] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 163.402568][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.404697][ T35] usb 7-1: Product: syz [ 163.405798][ T35] usb 7-1: Manufacturer: syz [ 163.407475][ T35] usb 7-1: SerialNumber: syz [ 163.409567][ T35] usb 7-1: config 0 descriptor?? [ 163.606582][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.621463][ T35] usb 7-1: USB disconnect, device number 17 [ 163.786635][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 163.789430][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.791953][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.795926][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 163.798294][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.800332][ T8] usb 5-1: Product: syz [ 163.801410][ T8] usb 5-1: Manufacturer: syz [ 163.802621][ T8] usb 5-1: SerialNumber: syz [ 163.804395][ T5548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.807291][ T5548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.811886][ T5548] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 163.951622][T14346] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 163.954262][T14346] SELinux: failed to load policy [ 164.001557][T14351] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4004'. [ 164.011167][ T8] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 164.212072][ T982] usb 5-1: USB disconnect, device number 11 [ 164.218217][ T982] usblp0: removed [ 164.230139][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 164.236086][T14374] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.259845][T14378] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 164.726419][ T35] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 164.896352][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 164.899452][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.902474][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.905271][ T35] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.913318][ T35] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 164.916243][ T35] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 164.918540][ T35] usb 8-1: Product: syz [ 164.919826][ T35] usb 8-1: Manufacturer: syz [ 164.921046][ T35] usb 8-1: SerialNumber: syz [ 164.926457][ T35] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input30 [ 164.952750][T14424] binder: 14423:14424 ioctl 541b 0 returned -22 [ 165.190927][ T9] usb 8-1: USB disconnect, device number 15 [ 165.194442][ T9] appletouch 8-1:1.0: input: appletouch disconnected [ 165.248692][ T8] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 165.276402][ T5346] Bluetooth: hci1: command 0x0406 tx timeout [ 165.383276][T14452] netlink: 'syz.0.4050': attribute type 2 has an invalid length. [ 165.385322][T14452] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 165.406530][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 165.410136][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.412697][ T8] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 165.418040][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 165.420584][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.422793][ T8] usb 7-1: Product: syz [ 165.423840][ T8] usb 7-1: Manufacturer: syz [ 165.425084][ T8] usb 7-1: SerialNumber: syz [ 165.541015][ T5379] kernel write not supported for file /sg0 (pid: 5379 comm: kworker/0:3) [ 165.578671][T14477] netlink: 'syz.1.4062': attribute type 12 has an invalid length. [ 165.580997][T14477] netlink: 'syz.1.4062': attribute type 11 has an invalid length. [ 165.583148][T14477] netlink: 'syz.1.4062': attribute type 11 has an invalid length. [ 165.585145][T14477] netlink: 'syz.1.4062': attribute type 11 has an invalid length. [ 165.587258][T14477] netlink: 'syz.1.4062': attribute type 11 has an invalid length. [ 165.589265][T14477] netlink: 'syz.1.4062': attribute type 11 has an invalid length. [ 165.591329][T14477] netlink: 'syz.1.4062': attribute type 4 has an invalid length. [ 165.593339][T14477] netlink: 'syz.1.4062': attribute type 5 has an invalid length. [ 165.595462][T14477] netlink: 196072 bytes leftover after parsing attributes in process `syz.1.4062'. [ 165.633797][ T8] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 165.834753][ T25] usb 7-1: USB disconnect, device number 18 [ 165.837230][ T25] usblp0: removed [ 165.956417][ T5381] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 165.966817][ T982] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 166.076465][ T5410] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 166.107614][ T5381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 166.110558][ T5381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 166.114101][ T5381] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.117581][ T5381] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.119971][ T5381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.123509][ T5381] usb 5-1: config 0 descriptor?? [ 166.125896][T14497] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.128253][ T982] usb 6-1: config 1 interface 0 has no altsetting 0 [ 166.131895][ T982] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 166.134268][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.136721][ T982] usb 6-1: Product: syz [ 166.137941][ T982] usb 6-1: Manufacturer: syz [ 166.139524][ T982] usb 6-1: SerialNumber: syz [ 166.230059][ T5410] usb 8-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 166.232418][ T5410] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.234566][ T5410] usb 8-1: Product: syz [ 166.235658][ T5410] usb 8-1: Manufacturer: syz [ 166.237122][ T5410] usb 8-1: SerialNumber: syz [ 166.239344][ T5410] usb 8-1: config 0 descriptor?? [ 166.465292][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 166.465340][ T39] audit: type=1400 audit(1729558272.902:2806): avc: denied { associate } for pid=14511 comm="syz.2.4078" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 166.476622][ T39] audit: type=1400 audit(1729558272.922:2807): avc: denied { lock } for pid=14511 comm="syz.2.4078" path="/1036/file0/bus" dev="9p" ino=36449060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.528340][ T25] usb 8-1: USB disconnect, device number 16 [ 166.532955][ T5381] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 166.537317][ T5381] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 166.544767][ T5381] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 166.789948][ T35] usb 5-1: USB disconnect, device number 12 [ 166.898217][T14516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.900956][T14516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.127917][ T25] kernel write not supported for file /sg0 (pid: 25 comm: kworker/2:0) [ 168.330215][ T39] audit: type=1400 audit(1729558274.772:2808): avc: denied { read } for pid=14572 comm="syz.2.4099" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 168.334857][T14576] syzkaller1: entered promiscuous mode [ 168.339305][T14576] syzkaller1: entered allmulticast mode [ 168.732140][ T982] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 168.737518][ T982] usb 6-1: USB disconnect, device number 17 [ 168.739879][ T982] usblp0: removed [ 169.360646][T14599] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4112'. [ 169.363211][T14599] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 169.610263][T14610] netlink: 'syz.0.4117': attribute type 12 has an invalid length. [ 169.612344][T14610] netlink: 'syz.0.4117': attribute type 11 has an invalid length. [ 169.614457][T14610] netlink: 'syz.0.4117': attribute type 11 has an invalid length. [ 169.616629][T14610] netlink: 'syz.0.4117': attribute type 11 has an invalid length. [ 169.618670][T14610] netlink: 'syz.0.4117': attribute type 11 has an invalid length. [ 169.620690][T14610] netlink: 'syz.0.4117': attribute type 11 has an invalid length. [ 169.622716][T14610] netlink: 'syz.0.4117': attribute type 4 has an invalid length. [ 169.624754][T14610] netlink: 'syz.0.4117': attribute type 5 has an invalid length. [ 169.626860][T14610] netlink: 196072 bytes leftover after parsing attributes in process `syz.0.4117'. [ 170.406416][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 170.406445][T14573] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 171.304521][T14573] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.311330][T14573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.312979][T14573] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 171.317267][T14573] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 171.319419][T14573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.321136][T14573] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 171.323952][T14573] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 171.332562][ T5346] Bluetooth: hci2: sending frame failed (-49) [ 171.335268][ T66] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 171.468629][T14656] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.4137'. [ 171.707912][T14670] netlink: 'syz.1.4143': attribute type 9 has an invalid length. [ 171.710516][T14670] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.4143'. [ 171.747817][ T5548] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 171.906352][ T5548] usb 7-1: Using ep0 maxpacket: 32 [ 171.909000][ T5548] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.911949][ T5548] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.914721][ T5548] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.919889][ T5548] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 171.922321][ T5548] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 171.924651][ T5548] usb 7-1: Product: syz [ 171.925785][ T5548] usb 7-1: Manufacturer: syz [ 171.927234][ T5548] usb 7-1: SerialNumber: syz [ 171.930984][ T5548] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input32 [ 172.202799][ T25] usb 7-1: USB disconnect, device number 19 [ 172.206145][ T25] appletouch 7-1:1.0: input: appletouch disconnected [ 172.478915][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 172.591621][T14687] random: crng reseeded on system resumption [ 172.931976][T14705] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 173.356491][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.356522][ T5346] Bluetooth: hci4: command 0x0c1a tx timeout [ 173.640892][T14719] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.668096][ T39] audit: type=1400 audit(1729558280.112:2809): avc: denied { ioctl } for pid=14723 comm="syz.3.4168" path="socket:[50958]" dev="sockfs" ino=50958 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 173.899388][ T39] audit: type=1400 audit(1729558280.342:2810): avc: denied { bind } for pid=14735 comm="syz.0.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.583415][ T39] audit: type=1400 audit(1729558281.022:2811): avc: denied { map } for pid=14747 comm="syz.2.4179" path="/dev/video3" dev="devtmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 174.597874][T14742] netlink: 'syz.1.4176': attribute type 4 has an invalid length. [ 174.614566][ T39] audit: type=1400 audit(1729558281.052:2812): avc: denied { append } for pid=14752 comm="syz.2.4181" name="rtc0" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 175.026484][ T35] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 175.189841][ T35] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 175.193268][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.196366][ T35] usb 5-1: Product: syz [ 175.197900][ T35] usb 5-1: Manufacturer: syz [ 175.199455][ T35] usb 5-1: SerialNumber: syz [ 175.202512][ T35] usb 5-1: config 0 descriptor?? [ 175.226126][T14790] syzkaller1: entered promiscuous mode [ 175.227909][T14790] syzkaller1: entered allmulticast mode [ 175.417169][T14804] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4204'. [ 175.419615][T14804] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 175.436922][ T5346] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.446866][ T5346] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.497677][ T35] usb 5-1: USB disconnect, device number 13 [ 175.647486][T14835] netlink: 'syz.1.4218': attribute type 2 has an invalid length. [ 175.649839][T14835] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 176.056490][ T39] audit: type=1326 audit(1729558282.492:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14847 comm="syz.1.4231" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5eb7dff9 code=0x0 [ 176.175112][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.180325][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.182354][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.184319][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.186441][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.189521][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.191596][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.193563][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.195598][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.197862][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.199858][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.203756][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.205770][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.209971][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.211985][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.214058][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.216021][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.218311][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.220293][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.222288][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.224337][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.226471][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.228503][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.230490][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.232452][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.235752][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.237901][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.239867][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.241810][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.243777][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.245983][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.248211][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.251925][ T35] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 176.456492][ T5381] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 176.638148][ T5381] usb 7-1: config 0 has no interfaces? [ 176.640282][ T5381] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 176.643632][ T5381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.648571][ T5381] usb 7-1: config 0 descriptor?? [ 176.862535][ T982] usb 7-1: USB disconnect, device number 20 [ 177.393234][T14880] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 177.448618][T14887] netlink: 'syz.3.4248': attribute type 9 has an invalid length. [ 177.450599][T14887] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.4248'. [ 177.516375][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.516456][ T5344] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.626431][ T5379] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 177.800024][ T5379] usb 6-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 177.802985][ T5379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.805228][ T5379] usb 6-1: Product: syz [ 177.806485][ T5379] usb 6-1: Manufacturer: syz [ 177.807748][ T5379] usb 6-1: SerialNumber: syz [ 177.810213][ T5379] usb 6-1: config 0 descriptor?? [ 178.068061][ T5381] usb 6-1: USB disconnect, device number 18 [ 179.436723][ T5344] Bluetooth: hci2: command 0x1003 tx timeout [ 179.436989][ T5346] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 179.706431][ T5410] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 179.717891][ T5379] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 179.758719][T14913] netlink: 4548 bytes leftover after parsing attributes in process `syz.0.4246'. [ 179.818866][ T35] kernel write not supported for file /input/mouse0 (pid: 35 comm: kworker/3:0) [ 179.849461][T14921] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 179.868798][ T5379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 179.871711][ T5379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 179.874625][ T5379] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.878423][ T5379] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.880972][ T5379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.884139][ T5379] usb 8-1: config 0 descriptor?? [ 179.885921][T14895] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.892588][ T5410] usb 7-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 179.895818][ T5410] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.898706][ T5410] usb 7-1: Product: syz [ 179.899829][ T5410] usb 7-1: Manufacturer: syz [ 179.901052][ T5410] usb 7-1: SerialNumber: syz [ 179.904126][ T5410] usb 7-1: config 0 descriptor?? [ 180.140490][ T39] audit: type=1400 audit(1729558286.582:2814): avc: denied { setopt } for pid=14935 comm="syz.0.4262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.180113][ T8] usb 7-1: USB disconnect, device number 21 [ 180.299236][ T5379] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 180.303215][ T5379] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 180.309606][ T5379] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 180.559576][ T5410] usb 8-1: USB disconnect, device number 17 [ 180.709544][T14939] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 180.792578][T14946] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.4266'. [ 181.194561][T14972] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.4278'. [ 181.916377][ T5346] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 181.916618][ T5344] Bluetooth: hci2: command 0x1003 tx timeout [ 182.010757][T15015] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 182.220307][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4302'. [ 182.719682][T15066] random: crng reseeded on system resumption [ 183.392185][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.394277][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.399462][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.403051][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.405079][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.407246][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.409221][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.411150][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.413065][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.415029][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.417681][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.419615][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.421529][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.423454][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.426049][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.428639][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.430472][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.432416][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.434356][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.436531][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.438856][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.439109][T15078] dlm: non-version read from control device 4 [ 183.440869][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.440898][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.440911][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.448465][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.450476][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.452394][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.454465][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.456541][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.458806][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.460864][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.462786][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.466524][ T25] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 183.636953][ T30] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 183.736598][T15088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.738625][T15088] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.741882][T15088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.787630][ T30] usb 6-1: config 0 has no interfaces? [ 183.789358][ T30] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 183.791902][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.794951][ T30] usb 6-1: config 0 descriptor?? [ 183.853282][T15100] random: crng reseeded on system resumption [ 184.003115][ T30] usb 6-1: USB disconnect, device number 19 [ 184.076470][ T66] Bluetooth: hci2: command 0x1003 tx timeout [ 184.076498][ T5346] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 184.629334][ T39] audit: type=1400 audit(1729558291.072:2815): avc: denied { write } for pid=15122 comm="syz.3.4345" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 184.679115][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.682399][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.684475][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.687039][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.688970][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.690897][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.692806][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.694740][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.696885][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.698814][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.700722][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.702640][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.704544][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.706559][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.708608][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.710684][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.712586][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.714508][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.716554][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.718481][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.720400][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.722346][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.724268][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.726364][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.728302][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.730223][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.732133][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.734059][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.735974][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.738010][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.739937][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.741998][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.746124][ T25] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 184.894541][T15135] bond_slave_0: entered promiscuous mode [ 184.897109][T15135] bond_slave_1: entered promiscuous mode [ 184.900046][T15135] bond_slave_0: left promiscuous mode [ 184.902244][T15135] bond_slave_1: left promiscuous mode [ 184.955428][ T39] audit: type=1400 audit(1729558291.392:2816): avc: denied { create } for pid=15138 comm="syz.1.4351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 184.963480][ T39] audit: type=1400 audit(1729558291.392:2817): avc: denied { write } for pid=15138 comm="syz.1.4351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 184.966417][ T982] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 184.969108][ T39] audit: type=1400 audit(1729558291.392:2818): avc: denied { nlmsg_read } for pid=15138 comm="syz.1.4351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 184.979648][ T39] audit: type=1400 audit(1729558291.422:2819): avc: denied { bind } for pid=15140 comm="syz.2.4352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 185.137549][ T982] usb 5-1: config 0 has no interfaces? [ 185.139087][ T982] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 185.141476][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.144614][ T982] usb 5-1: config 0 descriptor?? [ 185.352663][ T982] usb 5-1: USB disconnect, device number 14 [ 185.483680][ T39] audit: type=1400 audit(1729558291.922:2820): avc: denied { read write } for pid=15159 comm="syz.1.4360" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.489974][ T39] audit: type=1400 audit(1729558291.922:2821): avc: denied { open } for pid=15159 comm="syz.1.4360" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.495852][ T39] audit: type=1400 audit(1729558291.922:2822): avc: denied { map } for pid=15159 comm="syz.1.4360" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.502563][ T39] audit: type=1400 audit(1729558291.922:2823): avc: denied { execute } for pid=15159 comm="syz.1.4360" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.502788][T15161] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 185.508813][ T39] audit: type=1400 audit(1729558291.932:2824): avc: denied { ioctl } for pid=15159 comm="syz.1.4360" path="/dev/nullb0" dev="devtmpfs" ino=691 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.511111][T15161] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 185.519509][T15161] nullb0: p2 size 1206004561 extends beyond EOD, truncated [ 185.524378][T15161] nullb0: p3 start 1191073469 is beyond EOD, truncated [ 185.526249][T15161] nullb0: p4 start 2287918823 is beyond EOD, truncated [ 185.528458][T15161] nullb0: p5 start 960600701 is beyond EOD, truncated [ 185.530290][T15161] nullb0: p6 start 2190857000 is beyond EOD, truncated [ 185.532058][T15161] nullb0: p7 start 536870912 is beyond EOD, truncated [ 185.534015][T15161] nullb0: p8 start 979124583 is beyond EOD, truncated [ 185.535781][T15161] nullb0: p9 start 1764832699 is beyond EOD, truncated [ 185.537630][T15161] nullb0: p10 start 1181281287 is beyond EOD, truncated [ 185.539671][T15161] nullb0: p11 start 709501399 is beyond EOD, truncated [ 185.541569][T15161] nullb0: p12 start 1769863430 is beyond EOD, truncated [ 185.588033][ T39] audit: type=1326 audit(1729558292.032:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.1.4362" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5eb7dff9 code=0x0 [ 185.756496][ T5346] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.756582][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 185.758603][ T5344] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.901263][T15171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.369732][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.371735][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.373669][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.375959][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.378156][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.380065][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.381982][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.383942][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.386787][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.387923][ T39] audit: type=1400 audit(1729558292.832:2826): avc: denied { bind } for pid=15194 comm="syz.0.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.389388][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.397213][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.399916][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.401967][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.403950][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.405878][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.407985][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.409906][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.411810][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.413745][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.415729][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.417781][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.419698][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.421616][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.423533][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.425464][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.427452][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.429357][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.431280][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.433472][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.436067][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.438642][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.440575][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.443182][ T35] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 186.606359][ T25] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 186.758306][ T25] usb 8-1: config 0 has no interfaces? [ 186.760009][ T25] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 186.762324][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.765334][ T25] usb 8-1: config 0 descriptor?? [ 186.978309][ T8] usb 8-1: USB disconnect, device number 18 [ 187.667961][T15254] sctp: [Deprecated]: syz.2.4401 (pid 15254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.667961][T15254] Use struct sctp_sack_info instead [ 187.710608][ T39] audit: type=1326 audit(1729558294.152:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15259 comm="syz.2.4404" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73c097dff9 code=0x0 [ 187.891765][T15272] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 188.116967][ T39] audit: type=1400 audit(1729558294.562:2828): avc: denied { accept } for pid=15282 comm="syz.3.4414" path="socket:[53168]" dev="sockfs" ino=53168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.136164][T15276] netlink: 'syz.0.4411': attribute type 4 has an invalid length. [ 188.366184][T15297] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 188.564828][T15315] input: syz0 as /devices/virtual/input/input36 [ 188.566772][T15315] input: failed to attach handler leds to device input36, error: -6 [ 188.581085][T15316] geneve0: entered allmulticast mode [ 188.713901][T15311] netlink: 'syz.2.4426': attribute type 4 has an invalid length. [ 188.752526][T15338] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 188.759357][ T5346] Bluetooth: hci2: sending frame failed (-49) [ 188.762027][ T5344] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 188.851709][T15350] tipc: Started in network mode [ 188.853066][T15350] tipc: Node identity 7f000001, cluster identity 4711 [ 188.855566][T15350] tipc: Enabled bearer , priority 10 [ 189.001333][ T39] audit: type=1326 audit(1729558295.442:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.3.4448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994077dff9 code=0x7ffc0000 [ 189.328423][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4465'. [ 189.358585][T15405] netlink: 'syz.3.4468': attribute type 4 has an invalid length. [ 189.360847][T15405] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4468'. [ 189.605853][T15434] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4481'. [ 189.663176][T15446] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4488'. [ 189.847948][ T5410] tipc: Node number set to 2130706433 [ 190.033908][T15499] tun0: tun_chr_ioctl cmd 1074025675 [ 190.035544][T15499] tun0: persist enabled [ 190.040150][T15499] tun0: tun_chr_ioctl cmd 1074025675 [ 190.041852][T15499] tun0: persist disabled [ 190.146471][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 190.150216][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 190.153140][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 190.155528][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 190.158305][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 190.160749][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 190.163231][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 190.165636][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 190.224850][T15532] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4526'. [ 190.585768][T15571] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 190.594202][T15571] CIFS mount error: No usable UNC path provided in device string! [ 190.594202][T15571] [ 190.597896][T15571] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 190.856404][ T982] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 191.019132][ T982] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.022015][ T982] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.024537][ T982] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.027109][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.030969][T15576] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.034109][ T982] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.244037][ T982] usb 6-1: USB disconnect, device number 20 [ 191.598119][T15616] netlink: 'syz.3.4564': attribute type 1 has an invalid length. [ 191.600257][T15616] netlink: 9292 bytes leftover after parsing attributes in process `syz.3.4564'. [ 191.602711][T15616] netlink: 'syz.3.4564': attribute type 1 has an invalid length. [ 191.662133][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 191.662146][ T39] audit: type=1326 audit(1729558298.102:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15623 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0057dff9 code=0x7ffc0000 [ 191.670022][ T39] audit: type=1326 audit(1729558298.102:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15623 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0057dff9 code=0x7ffc0000 [ 191.676062][ T39] audit: type=1326 audit(1729558298.102:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15623 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f8b0057dff9 code=0x7ffc0000 [ 191.687435][ T39] audit: type=1326 audit(1729558298.102:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15623 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0057dff9 code=0x7ffc0000 [ 191.695407][ T39] audit: type=1326 audit(1729558298.102:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15623 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0057dff9 code=0x7ffc0000 [ 191.843548][T15643] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4575'. [ 191.971517][T15652] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 191.973872][T15652] SELinux: failed to load policy [ 192.000840][ T30] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 192.002807][ T30] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 192.015444][ T30] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz1 [ 192.251027][T15687] geneve2: entered promiscuous mode [ 192.252581][T15687] geneve2: entered allmulticast mode [ 192.274039][T15691] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 192.394647][T15707] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4603'. [ 193.920356][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.998464][T15768] binder: 15765:15768 ioctl 541b 0 returned -22 [ 194.020346][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4631'. [ 194.045167][T15772] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.516940][ T5344] Bluetooth: hci1: command 0x0406 tx timeout [ 195.517748][T15741] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 196.395900][T15741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.399175][T15741] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.569493][ T39] audit: type=1400 audit(1729558303.012:2853): avc: denied { write } for pid=15799 comm="syz.1.4650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.596549][ T5344] Bluetooth: hci4: command 0x0c1a tx timeout [ 198.476472][ T5344] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.636386][T15792] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 198.636439][ T5344] Bluetooth: hci1: command 0x0406 tx timeout [ 199.515497][T15792] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 199.520505][T15792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.623563][T15826] kvm: user requested TSC rate below hardware speed [ 199.672100][T15831] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 199.674108][T15831] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 199.675883][T15831] nullb0: p2 size 1206004561 extends beyond EOD, truncated [ 199.678501][T15831] nullb0: p3 start 1191073469 is beyond EOD, truncated [ 199.680273][T15831] nullb0: p4 start 2287918823 is beyond EOD, truncated [ 199.682112][T15831] nullb0: p5 start 960600701 is beyond EOD, truncated [ 199.683861][T15831] nullb0: p6 start 2190857000 is beyond EOD, truncated [ 199.685628][T15831] nullb0: p7 start 536870912 is beyond EOD, truncated [ 199.688137][T15831] nullb0: p8 start 979124583 is beyond EOD, truncated [ 199.690047][T15831] nullb0: p9 start 1764832699 is beyond EOD, truncated [ 199.691835][T15831] nullb0: p10 start 1181281287 is beyond EOD, truncated [ 199.693747][T15831] nullb0: p11 start 709501399 is beyond EOD, truncated [ 199.695556][T15831] nullb0: p12 start 1769863430 is beyond EOD, truncated [ 199.738797][T15839] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.774128][T15843] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 199.779009][T15843] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 199.781400][T15843] nullb0: p2 size 1206004561 extends beyond EOD, truncated [ 199.788800][T15843] nullb0: p3 start 1191073469 is beyond EOD, truncated [ 199.790646][T15843] nullb0: p4 start 2287918823 is beyond EOD, truncated [ 199.792496][T15843] nullb0: p5 start 960600701 is beyond EOD, truncated [ 199.794311][T15843] nullb0: p6 start 2190857000 is beyond EOD, truncated [ 199.796125][T15843] nullb0: p7 start 536870912 is beyond EOD, truncated [ 199.798516][T15843] nullb0: p8 start 979124583 is beyond EOD, truncated [ 199.800392][T15843] nullb0: p9 start 1764832699 is beyond EOD, truncated [ 199.802298][T15843] nullb0: p10 start 1181281287 is beyond EOD, truncated [ 199.804623][T15843] nullb0: p11 start 709501399 is beyond EOD, truncated [ 199.806867][T15843] nullb0: p12 start 1769863430 is beyond EOD, truncated [ 200.727944][ T5344] Bluetooth: hci4: command 0x0c1a tx timeout [ 201.596527][ T5344] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.996530][T15849] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 201.996552][ T5344] Bluetooth: hci1: command 0x0406 tx timeout [ 202.875342][T15849] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.878460][T15849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.926689][T15869] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 202.929376][T15869] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 202.931898][T15869] nullb0: p2 size 1206004561 extends beyond EOD, truncated [ 202.946847][T15869] nullb0: p3 start 1191073469 is beyond EOD, truncated [ 202.949304][T15869] nullb0: p4 start 2287918823 is beyond EOD, truncated [ 202.951736][T15869] nullb0: p5 start 960600701 is beyond EOD, truncated [ 202.954099][T15869] nullb0: p6 start 2190857000 is beyond EOD, truncated [ 202.956924][T15869] nullb0: p7 start 536870912 is beyond EOD, truncated [ 202.959322][T15869] nullb0: p8 start 979124583 is beyond EOD, truncated [ 202.961703][T15869] nullb0: p9 start 1764832699 is beyond EOD, truncated [ 202.964851][T15869] nullb0: p10 start 1181281287 is beyond EOD, truncated [ 202.967953][T15869] nullb0: p11 start 709501399 is beyond EOD, truncated [ 202.970472][T15869] nullb0: p12 start 1769863430 is beyond EOD, truncated [ 203.739870][T15901] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 203.742275][T15901] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 203.744030][T15901] nullb0: p2 size 1206004561 extends beyond EOD, truncated [ 203.747610][T15901] nullb0: p3 start 1191073469 is beyond EOD, truncated [ 203.749357][T15901] nullb0: p4 start 2287918823 is beyond EOD, truncated [ 203.751164][T15901] nullb0: p5 start 960600701 is beyond EOD, truncated [ 203.753174][T15901] nullb0: p6 start 2190857000 is beyond EOD, truncated [ 203.754960][T15901] nullb0: p7 start 536870912 is beyond EOD, truncated [ 203.758170][T15901] nullb0: p8 start 979124583 is beyond EOD, truncated [ 203.759971][T15901] nullb0: p9 start 1764832699 is beyond EOD, truncated [ 203.761860][T15901] nullb0: p10 start 1181281287 is beyond EOD, truncated [ 203.764022][T15901] nullb0: p11 start 709501399 is beyond EOD, truncated [ 203.765810][T15901] nullb0: p12 start 1769863430 is beyond EOD, truncated [ 204.015183][T15923] CIFS mount error: No usable UNC path provided in device string! [ 204.015183][T15923] [ 204.018089][T15923] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 204.077497][ T5346] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.165369][T15943] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4702'. [ 204.169475][T15943] netlink: 'syz.1.4702': attribute type 1 has an invalid length. [ 204.325232][ T39] audit: type=1400 audit(1729558310.762:2854): avc: denied { watch watch_reads } for pid=15956 comm="syz.0.4710" path="/proc/2684/net/unix" dev="proc" ino=4026533015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 204.360903][T15966] net_ratelimit: 252 callbacks suppressed [ 204.360919][T15966] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 204.411738][ T39] audit: type=1326 audit(1729558310.852:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.0.4716" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b0057dff9 code=0x0 [ 204.468314][T15975] input: syz1 as /devices/virtual/input/input37 [ 204.496382][ T5379] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 204.668966][ T5379] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 204.671963][ T5379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.674809][ T5379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.678024][ T5379] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 204.682247][ T5379] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 204.684605][ T5379] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 204.687072][ T5379] usb 6-1: Manufacturer: syz [ 204.689187][ T5379] usb 6-1: config 0 descriptor?? [ 204.958906][ T5346] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.106193][ T5379] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 205.108424][ T5379] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 205.114925][ T5379] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 205.367906][ T5379] usb 6-1: USB disconnect, device number 21 [ 205.983135][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4726'. [ 205.990867][T15996] 8021q: adding VLAN 0 to HW filter on device team1 [ 206.104778][T16012] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.4733'. [ 206.107375][T16012] netlink: 'syz.1.4733': attribute type 1 has an invalid length. [ 206.109421][T16012] netlink: 'syz.1.4733': attribute type 2 has an invalid length. [ 206.258802][ T39] audit: type=1400 audit(1729558312.702:2856): avc: denied { listen } for pid=16033 comm="syz.3.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 206.265733][ T39] audit: type=1400 audit(1729558312.702:2857): avc: denied { accept } for pid=16033 comm="syz.3.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 206.411728][T16048] input: syz1 as /devices/virtual/input/input38 [ 206.549284][T16070] ALSA: mixer_oss: invalid OSS volume 'Ls抙' [ 206.602505][T16078] input: syz1 as /devices/virtual/input/input39 [ 206.686653][T16088] netlink: 'syz.1.4770': attribute type 29 has an invalid length. [ 206.692639][T16088] netlink: 'syz.1.4770': attribute type 29 has an invalid length. [ 206.695246][T16088] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4770'. [ 206.698020][T16088] unsupported nla_type 40 [ 207.018678][T16145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4790'. [ 207.868183][ T39] audit: type=1400 audit(1729558314.302:2858): avc: denied { setattr } for pid=16174 comm="syz.0.4803" name="fib_trie" dev="proc" ino=4026532984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 214.564954][T16203] input: syz1 as /devices/virtual/input/input40 [ 214.727416][T16232] bridge0: port 3(hsr_slave_1) entered blocking state [ 214.729954][T16232] bridge0: port 3(hsr_slave_1) entered disabled state [ 214.731833][T16232] hsr_slave_1: entered allmulticast mode [ 214.734080][T16232] hsr_slave_1: left allmulticast mode [ 214.735603][ T39] audit: type=1400 audit(1729558321.172:2859): avc: denied { read } for pid=16233 comm="syz.0.4826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.781004][ T39] audit: type=1400 audit(1729558321.222:2860): avc: denied { append } for pid=16240 comm="syz.2.4830" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 214.788693][ T39] audit: type=1400 audit(1729558321.222:2861): avc: denied { map } for pid=16240 comm="syz.2.4830" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 214.794845][ T39] audit: type=1400 audit(1729558321.222:2862): avc: denied { write execute } for pid=16240 comm="syz.2.4830" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 214.952597][T16260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4836'. [ 214.955923][T16260] netlink: 'syz.2.4836': attribute type 7 has an invalid length. [ 214.959754][T16260] netlink: 'syz.2.4836': attribute type 8 has an invalid length. [ 214.962556][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4836'. [ 214.969867][T16260] gretap0: entered promiscuous mode [ 214.972396][T16260] batadv_slave_1: entered promiscuous mode [ 214.977351][T16260] gretap0: left promiscuous mode [ 214.983967][T16260] batadv_slave_1: left promiscuous mode [ 214.996435][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 215.262009][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 215.298233][ T25] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.301061][ T25] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.316557][ T25] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.320815][ T25] usb 6-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 215.340548][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 215.343008][ T25] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 215.350390][T16282] input: syz0 as /devices/virtual/input/input41 [ 215.350438][T16282] input: failed to attach handler leds to device input41, error: -6 [ 215.364506][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.392146][T16284] geneve0: entered allmulticast mode [ 215.392363][ T25] usb 6-1: config 0 descriptor?? [ 215.428571][ T39] audit: type=1400 audit(1729558321.872:2863): avc: denied { listen } for pid=16287 comm="syz.2.4848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.503512][ T39] audit: type=1400 audit(1729558321.942:2864): avc: denied { connect } for pid=16295 comm="syz.3.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 215.546753][T16298] netlink: 'syz.2.4853': attribute type 1 has an invalid length. [ 215.653732][T16308] vlan2: entered allmulticast mode [ 215.656147][T16308] bond0: entered allmulticast mode [ 215.660047][T16308] bond_slave_0: entered allmulticast mode [ 215.662528][T16308] bond_slave_1: entered allmulticast mode [ 215.664099][ T39] audit: type=1400 audit(1729558322.102:2865): avc: denied { write } for pid=16295 comm="syz.3.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 215.671319][T16308] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 215.684914][T16308] bond0: left allmulticast mode [ 215.686408][T16308] bond_slave_0: left allmulticast mode [ 215.687799][T16308] bond_slave_1: left allmulticast mode [ 215.689211][T16308] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 215.824606][ T25] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5010.000B/input/input42 [ 215.889837][ T25] kye 0003:0458:5010.000B: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 216.032702][T16328] input: syz0 as /devices/virtual/input/input43 [ 216.194913][T16333] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 216.507373][T16355] Bluetooth: MGMT ver 1.23 [ 216.555801][ T25] hid-generic 0000:0000:0000.000C: unknown main item tag 0x7 [ 216.558650][ T25] hid-generic 0000:0000:0000.000C: ignoring exceeding usage max [ 216.561284][ T25] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 216.565009][ T25] hid-generic 0000:0000:0000.000C: unknown main item tag 0x6 [ 216.567990][ T25] hid-generic 0000:0000:0000.000C: unknown main item tag 0xd [ 216.576159][ T25] hid-generic 0000:0000:0000.000C: hidraw2: HID v0.00 Device [syz0] on syz0 [ 216.778021][ T5382] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 216.931257][ C2] kye 0003:0458:5010.000B: usb_submit_urb(ctrl) failed: -1 [ 216.939690][ T5382] usb 8-1: Using ep0 maxpacket: 16 [ 216.946143][ T5382] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 216.948552][ T5382] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.950664][ T5382] usb 8-1: Product: syz [ 216.951751][ T5382] usb 8-1: Manufacturer: syz [ 216.952952][ T5382] usb 8-1: SerialNumber: syz [ 216.955924][ T5382] usb 8-1: config 0 descriptor?? [ 216.959001][ T5382] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 216.961166][ T5382] usb 8-1: Detected FT232H [ 217.373814][T16359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.376583][T16359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.381588][ T5382] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 217.383620][ T5382] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 217.385655][ T5382] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 217.388008][ T5382] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 217.390821][ T5382] usb 8-1: USB disconnect, device number 19 [ 217.393889][ T5382] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 217.396536][ T5382] ftdi_sio 8-1:0.0: device disconnected [ 217.645004][T16379] netlink: 'syz.2.4896': attribute type 29 has an invalid length. [ 217.649468][T16379] netlink: 'syz.2.4896': attribute type 29 has an invalid length. [ 217.653070][T16379] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4896'. [ 217.713132][ T25] usb 6-1: USB disconnect, device number 22 [ 217.919199][T16384] netlink: 'syz.0.4898': attribute type 29 has an invalid length. [ 217.923913][T16384] netlink: 'syz.0.4898': attribute type 29 has an invalid length. [ 217.929462][T16384] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4898'. [ 217.980011][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4895'. [ 217.990417][T16395] 8021q: adding VLAN 0 to HW filter on device team1 [ 218.230923][ T39] audit: type=1400 audit(1729558324.672:2866): avc: denied { read } for pid=16419 comm="syz.2.4909" path="socket:[60906]" dev="sockfs" ino=60906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 220.543221][T16423] team0: entered promiscuous mode [ 220.544695][T16423] team_slave_0: entered promiscuous mode [ 220.546546][T16423] team_slave_1: entered promiscuous mode [ 220.556011][T16423] team0: left promiscuous mode [ 220.557435][T16423] team_slave_0: left promiscuous mode [ 220.559241][T16423] team_slave_1: left promiscuous mode [ 220.804893][T16465] team0: entered promiscuous mode [ 220.813999][T16465] team_slave_0: entered promiscuous mode [ 220.816003][T16465] team_slave_1: entered promiscuous mode [ 220.819558][T16464] team0: left promiscuous mode [ 220.820862][T16464] team_slave_0: left promiscuous mode [ 220.825295][T16464] team_slave_1: left promiscuous mode [ 221.096438][ T5379] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 221.258627][ T5379] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 221.260910][ T5379] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 221.263539][ T5379] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 221.268925][ T5379] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 221.271784][ T5379] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 221.275743][ T5379] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.278496][ T5379] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.280562][ T5379] usb 6-1: Product: syz [ 221.281676][ T5379] usb 6-1: Manufacturer: syz [ 221.285226][ T5379] cdc_wdm 6-1:1.0: skipping garbage [ 221.288614][ T5379] cdc_wdm 6-1:1.0: skipping garbage [ 221.290400][ T5379] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 221.291987][ T5379] cdc_wdm 6-1:1.0: Unknown control protocol [ 221.498838][ T5410] usb 6-1: USB disconnect, device number 23 [ 221.958200][T16499] team0: entered promiscuous mode [ 221.959948][T16499] team_slave_0: entered promiscuous mode [ 221.962034][T16499] team_slave_1: entered promiscuous mode [ 221.964021][T16499] geneve1: entered promiscuous mode [ 221.971150][ C1] ------------[ cut here ]------------ [ 221.973167][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 221.977175][ C1] WARNING: CPU: 1 PID: 16496 at net/mac80211/rate.c:380 __rate_control_send_low+0x6d9/0x800 [ 221.980738][ C1] Modules linked in: [ 221.980755][T16498] team0: left promiscuous mode [ 221.982411][ C1] CPU: 1 UID: 0 PID: 16496 Comm: syz.3.4937 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 221.984323][T16498] team_slave_0: left promiscuous mode [ 221.988773][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.988791][ C1] RIP: 0010:__rate_control_send_low+0x6d9/0x800 [ 221.988822][ C1] Code: a4 a0 d4 00 00 00 e8 d6 c9 fb f6 44 8b 44 24 3c 45 89 e9 89 d9 48 8b 74 24 18 44 89 e2 48 c7 c7 40 36 bf 8c e8 c8 ba bc f6 90 <0f> 0b 90 90 e9 ff fc ff ff 48 8b 7c 24 30 e8 64 49 5d f7 e9 e1 fb [ 221.991161][T16498] team_slave_1: left promiscuous mode [ 221.994164][ C1] RSP: 0000:ffffc900008b0888 EFLAGS: 00010286 [ 221.999833][T16498] geneve1: left promiscuous mode [ 222.003194][ C1] [ 222.003204][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e71a9 [ 222.003221][ C1] RDX: ffff8880556e0000 RSI: ffffffff814e71b6 RDI: 0000000000000001 [ 222.003235][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 222.003248][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 222.017581][ C1] R13: 0000000000000000 R14: 000000000000000c R15: dffffc0000000000 [ 222.019825][ C1] FS: 0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 222.022169][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.024006][ C1] CR2: 0000001b3161aff8 CR3: 000000003def0000 CR4: 0000000000352ef0 [ 222.026106][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 222.028224][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 222.030511][ C1] Call Trace: [ 222.031402][ C1] [ 222.032171][ C1] ? __warn+0xea/0x3d0 [ 222.033272][ C1] ? __rate_control_send_low+0x6d9/0x800 [ 222.034764][ C1] ? report_bug+0x3c0/0x580 [ 222.035982][ C1] ? handle_bug+0x54/0xa0 [ 222.037195][ C1] ? exc_invalid_op+0x17/0x50 [ 222.038564][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 222.040165][ C1] ? __warn_printk+0x199/0x350 [ 222.041515][ C1] ? __warn_printk+0x1a6/0x350 [ 222.042777][ C1] ? __rate_control_send_low+0x6d9/0x800 [ 222.044251][ C1] ? __rate_control_send_low+0x6d8/0x800 [ 222.045734][ C1] rate_control_send_low+0x29a/0x820 [ 222.047293][ C1] rate_control_get_rate+0x1be/0x590 [ 222.048717][ C1] ieee80211_beacon_get_finish+0x468/0x670 [ 222.050290][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 222.051936][ C1] ? mark_held_locks+0x9f/0xe0 [ 222.053199][ C1] ? ieee80211_beacon_get_ap+0xa56/0x1100 [ 222.054703][ C1] ieee80211_beacon_get_ap+0x7a0/0x1100 [ 222.056166][ C1] __ieee80211_beacon_get+0xf8a/0x16b0 [ 222.057779][ C1] ieee80211_beacon_get_tim+0xa7/0x280 [ 222.059241][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 222.060873][ C1] mac80211_hwsim_beacon_tx+0x4ea/0xa00 [ 222.062344][ C1] ? rcu_is_watching+0x12/0xc0 [ 222.063619][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 222.064990][ C1] __iterate_interfaces+0x2d0/0x5d0 [ 222.066423][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 222.068131][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 222.069891][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 222.071424][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 222.073267][ C1] mac80211_hwsim_beacon+0x105/0x200 [ 222.074671][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 222.076050][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 222.077613][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 222.079233][ C1] hrtimer_run_softirq+0x17d/0x350 [ 222.080771][ C1] handle_softirqs+0x213/0x8f0 [ 222.082058][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 222.083461][ C1] irq_exit_rcu+0xbb/0x120 [ 222.084654][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 222.086144][ C1] [ 222.086987][ C1] [ 222.087778][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.089420][ C1] RIP: 0010:write_comp_data+0x11/0x90 [ 222.090835][ C1] Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 2f 5c 76 7e <65> 8b 05 30 5c 76 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 222.096061][ C1] RSP: 0000:ffffc90007a6f680 EFLAGS: 00000246 [ 222.097742][ C1] RAX: 0000000000000011 RBX: 0000000000000011 RCX: ffffffff81d606a1 [ 222.099857][ C1] RDX: ffff8880556e0000 RSI: 0000000000000000 RDI: 0000000000000001 [ 222.101961][ C1] RBP: 80000000548ab007 R08: 0000000000000001 R09: 0000000000000000 [ 222.104053][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 222.106145][ C1] R13: 0000000000000000 R14: ffff88803201a600 R15: ffffea0001522ac0 [ 222.108419][ C1] ? unmap_page_range+0x1261/0x3cf0 [ 222.109830][ C1] unmap_page_range+0x1261/0x3cf0 [ 222.111170][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 222.112583][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 222.113917][ C1] ? uprobe_munmap+0x20/0x5c0 [ 222.115171][ C1] unmap_single_vma+0x194/0x2b0 [ 222.116527][ C1] unmap_vmas+0x22f/0x490 [ 222.117688][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 222.118980][ C1] ? __pfx_lock_release+0x10/0x10 [ 222.120708][ C1] ? lock_acquire+0x2f/0xb0 [ 222.122580][ C1] ? mlock_drain_local+0x6f/0x4f0 [ 222.124407][ C1] exit_mmap+0x1c6/0xb30 [ 222.125655][ C1] ? trace_contention_end+0xea/0x140 [ 222.127129][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 222.128412][ C1] ? __mutex_lock+0x1a6/0x9c0 [ 222.129934][ C1] __mmput+0x12a/0x480 [ 222.131402][ C1] mmput+0x62/0x70 [ 222.132696][ C1] do_exit+0x9bf/0x2d70 [ 222.134191][ C1] ? get_signal+0x8f2/0x2770 [ 222.135848][ C1] ? __pfx_do_exit+0x10/0x10 [ 222.137619][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 222.139574][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 222.141226][ C1] do_group_exit+0xd3/0x2a0 [ 222.142452][ C1] get_signal+0x25fb/0x2770 [ 222.143716][ C1] ? __pfx_get_signal+0x10/0x10 [ 222.145176][ C1] ? __pfx_do_futex+0x10/0x10 [ 222.146592][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 222.148134][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.149760][ C1] ? rcu_is_watching+0x12/0xc0 [ 222.151049][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 222.152521][ C1] do_syscall_64+0xda/0x250 [ 222.153761][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.155601][ C1] RIP: 0033:0x7f994077dff9 [ 222.156868][ C1] Code: Unable to access opcode bytes at 0x7f994077dfcf. [ 222.159026][ C1] RSP: 002b:00007f99401ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.161647][ C1] RAX: fffffffffffffe00 RBX: 00007f9940935f88 RCX: 00007f994077dff9 [ 222.163932][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9940935f88 [ 222.166162][ C1] RBP: 00007f9940935f80 R08: 0000000000000000 R09: 0000000000000000 [ 222.168357][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9940935f8c [ 222.170489][ C1] R13: 0000000000000000 R14: 00007fff2a11c570 R15: 00007fff2a11c658 [ 222.172567][ C1] [ 222.173982][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.176666][ C1] CPU: 1 UID: 0 PID: 16496 Comm: syz.3.4937 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 222.180500][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.184310][ C1] Call Trace: [ 222.185544][ C1] [ 222.186602][ C1] dump_stack_lvl+0x3d/0x1f0 [ 222.188320][ C1] panic+0x71d/0x800 [ 222.189761][ C1] ? __pfx_panic+0x10/0x10 [ 222.191035][ C1] ? show_trace_log_lvl+0x29d/0x3d0 [ 222.192394][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 222.193923][ C1] ? __rate_control_send_low+0x6d9/0x800 [ 222.195401][ C1] check_panic_on_warn+0xab/0xb0 [ 222.196714][ C1] __warn+0xf6/0x3d0 [ 222.197764][ C1] ? __rate_control_send_low+0x6d9/0x800 [ 222.199238][ C1] report_bug+0x3c0/0x580 [ 222.200476][ C1] handle_bug+0x54/0xa0 [ 222.202001][ C1] exc_invalid_op+0x17/0x50 [ 222.203667][ C1] asm_exc_invalid_op+0x1a/0x20 [ 222.205460][ C1] RIP: 0010:__rate_control_send_low+0x6d9/0x800 [ 222.207646][ C1] Code: a4 a0 d4 00 00 00 e8 d6 c9 fb f6 44 8b 44 24 3c 45 89 e9 89 d9 48 8b 74 24 18 44 89 e2 48 c7 c7 40 36 bf 8c e8 c8 ba bc f6 90 <0f> 0b 90 90 e9 ff fc ff ff 48 8b 7c 24 30 e8 64 49 5d f7 e9 e1 fb [ 222.213319][ C1] RSP: 0000:ffffc900008b0888 EFLAGS: 00010286 [ 222.215354][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e71a9 [ 222.217516][ C1] RDX: ffff8880556e0000 RSI: ffffffff814e71b6 RDI: 0000000000000001 [ 222.219642][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 222.222194][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 222.225055][ C1] R13: 0000000000000000 R14: 000000000000000c R15: dffffc0000000000 [ 222.227406][ C1] ? __warn_printk+0x199/0x350 [ 222.228771][ C1] ? __warn_printk+0x1a6/0x350 [ 222.230059][ C1] ? __rate_control_send_low+0x6d8/0x800 [ 222.231820][ C1] rate_control_send_low+0x29a/0x820 [ 222.233219][ C1] rate_control_get_rate+0x1be/0x590 [ 222.234811][ C1] ieee80211_beacon_get_finish+0x468/0x670 [ 222.236348][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 222.238087][ C1] ? mark_held_locks+0x9f/0xe0 [ 222.239353][ C1] ? ieee80211_beacon_get_ap+0xa56/0x1100 [ 222.241119][ C1] ieee80211_beacon_get_ap+0x7a0/0x1100 [ 222.243187][ C1] __ieee80211_beacon_get+0xf8a/0x16b0 [ 222.245176][ C1] ieee80211_beacon_get_tim+0xa7/0x280 [ 222.246615][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 222.248190][ C1] mac80211_hwsim_beacon_tx+0x4ea/0xa00 [ 222.249648][ C1] ? rcu_is_watching+0x12/0xc0 [ 222.251103][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 222.252562][ C1] __iterate_interfaces+0x2d0/0x5d0 [ 222.253994][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 222.255670][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 222.257527][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 222.259140][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 222.261342][ C1] mac80211_hwsim_beacon+0x105/0x200 [ 222.263278][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 222.265188][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 222.266810][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 222.268517][ C1] hrtimer_run_softirq+0x17d/0x350 [ 222.269982][ C1] handle_softirqs+0x213/0x8f0 [ 222.271504][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 222.272901][ C1] irq_exit_rcu+0xbb/0x120 [ 222.274184][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 222.275747][ C1] [ 222.276577][ C1] [ 222.277428][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.279271][ C1] RIP: 0010:write_comp_data+0x11/0x90 [ 222.280803][ C1] Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 2f 5c 76 7e <65> 8b 05 30 5c 76 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 222.285689][ C1] RSP: 0000:ffffc90007a6f680 EFLAGS: 00000246 [ 222.287274][ C1] RAX: 0000000000000011 RBX: 0000000000000011 RCX: ffffffff81d606a1 [ 222.289347][ C1] RDX: ffff8880556e0000 RSI: 0000000000000000 RDI: 0000000000000001 [ 222.291472][ C1] RBP: 80000000548ab007 R08: 0000000000000001 R09: 0000000000000000 [ 222.293551][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 222.295668][ C1] R13: 0000000000000000 R14: ffff88803201a600 R15: ffffea0001522ac0 [ 222.297730][ C1] ? unmap_page_range+0x1261/0x3cf0 [ 222.299090][ C1] unmap_page_range+0x1261/0x3cf0 [ 222.300493][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 222.301896][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 222.303557][ C1] ? uprobe_munmap+0x20/0x5c0 [ 222.304838][ C1] unmap_single_vma+0x194/0x2b0 [ 222.306136][ C1] unmap_vmas+0x22f/0x490 [ 222.307271][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 222.308551][ C1] ? __pfx_lock_release+0x10/0x10 [ 222.309935][ C1] ? lock_acquire+0x2f/0xb0 [ 222.311158][ C1] ? mlock_drain_local+0x6f/0x4f0 [ 222.312479][ C1] exit_mmap+0x1c6/0xb30 [ 222.313610][ C1] ? trace_contention_end+0xea/0x140 [ 222.314980][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 222.316259][ C1] ? __mutex_lock+0x1a6/0x9c0 [ 222.317528][ C1] __mmput+0x12a/0x480 [ 222.318605][ C1] mmput+0x62/0x70 [ 222.319613][ C1] do_exit+0x9bf/0x2d70 [ 222.320831][ C1] ? get_signal+0x8f2/0x2770 [ 222.322063][ C1] ? __pfx_do_exit+0x10/0x10 [ 222.323275][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 222.324600][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 222.326028][ C1] do_group_exit+0xd3/0x2a0 [ 222.327226][ C1] get_signal+0x25fb/0x2770 [ 222.328635][ C1] ? __pfx_get_signal+0x10/0x10 [ 222.329919][ C1] ? __pfx_do_futex+0x10/0x10 [ 222.331202][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 222.332652][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.334302][ C1] ? rcu_is_watching+0x12/0xc0 [ 222.335565][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 222.337038][ C1] do_syscall_64+0xda/0x250 [ 222.338246][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.339790][ C1] RIP: 0033:0x7f994077dff9 [ 222.341062][ C1] Code: Unable to access opcode bytes at 0x7f994077dfcf. [ 222.342870][ C1] RSP: 002b:00007f99401ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.345019][ C1] RAX: fffffffffffffe00 RBX: 00007f9940935f88 RCX: 00007f994077dff9 [ 222.347090][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9940935f88 [ 222.349150][ C1] RBP: 00007f9940935f80 R08: 0000000000000000 R09: 0000000000000000 [ 222.351272][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9940935f8c [ 222.353355][ C1] R13: 0000000000000000 R14: 00007fff2a11c570 R15: 00007fff2a11c658 [ 222.355624][ C1] [ 222.357023][ C1] Kernel Offset: disabled [ 222.358226][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:39:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b00a5 RDI=ffffffff9aae6bc0 RBP=ffffffff9aae6b80 RSP=ffffc90007b3f5e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000065 R14=ffffffff850b0040 R15=0000000000000000 RIP=ffffffff850b00cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560ec9500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b31616ff8 CR3=000000003def0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813348e5 ffffffff813348b3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81d4e789 ffffffff813348e5 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff813348e5 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813ee828 ffffffff813ee808 ffffffff813ee808 ffffffff813348e5 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813ee84a ffffffff813ee84a ffffffff00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813ee808 ffffffff813ee808 ffffffff813348e5 ffffffff813348b3 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000039b 0000000000000000 0000000000000000 000000000000d854 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000061 RCX=ffffffff816da75a RDX=ffff8880556e0000 RSI=ffffffff816da746 RDI=0000000000000001 RBP=1ffff920001160a2 RSP=ffffc900008b0500 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000200 R14=ffff88804c930000 R15=ffffc900008b05e8 RIP=ffffffff816da748 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3161aff8 CR3=000000003def0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2a3 ffffffff8100a2a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2a3 ffffffff8100a2a3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a2a3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c09f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c0b0b488 00007f73c0b0b480 00007f73c0b0b478 00007f73c0b0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c166d100 00007f73c0b0b440 00007f7300040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73c0b0b498 00007f73c0b0b490 00007f73c0b0b488 00007f73c0b0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000039b 0000000000000000 0000000000000000 000000000000d854 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=1ffff92000f05edf RCX=ffffffff816aa129 RDX=1ffffffff20befcb RSI=ffffffff8b6cd380 RDI=ffffffff8bd1aa80 RBP=0000000000000003 RSP=ffffc9000782f6e8 R8 =0000000000000000 R9 =fffffbfff20be969 R10=ffffffff905f4b4f R11=0000000000000000 R12=ffffffff8e1b8380 R13=0000000000000001 R14=ffff888049d50000 R15=dffffc0000000000 RIP=ffffffff816aa239 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c31d7a5 CR3=0000000054a4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe14334490 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5ebf1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5ebf1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5ebf113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5ebf114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5ebf11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5ebf12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000f0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc900008def28 RCX=0000000000000000 RDX=1ffff9200011bdee RSI=ffffc900008dff38 RDI=ffffffff8100528a RBP=ffffc900008def70 RSP=ffffc900008def08 R8 =ffffc900008def5c R9 =ffffffff90ef81ac R10=ffffc900008def28 R11=00000000000032e7 R12=ffffffff81794ad0 R13=ffffc900008defe8 R14=0000000000000000 R15=ffff88801e294880 RIP=ffffffff81587ca0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2eb1cff8 CR3=000000000df7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2e8 ffffffff8100a2bf ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a2bf ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99407f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99407f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99407f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99407f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99407f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99407f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f994090b488 00007f994090b480 00007f994090b478 00007f994090b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f994146d100 00007f994090b440 00007f9900040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f994090b498 00007f994090b490 00007f994090b488 00007f994090b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000