last executing test programs: 1m51.679982375s ago: executing program 3 (id=5501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008007300b704000000000000850000003100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m51.606573923s ago: executing program 3 (id=5503): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\'!]\\\x00', 0x5) 1m51.588240918s ago: executing program 3 (id=5507): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000500000062000000891476657468305f6d6163767461702aae0000006e6963766630000000000000000000006e65747063693000000000000000000067726530000000000000000000000000ffffffffffffffff00ff8000aaaaaaaaaabb00000000ff806e0000006e0000009e000000000000000000000000000000000000001f0000000000000000000000000000000800000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000"]}, 0x1a6) 1m51.548343102s ago: executing program 3 (id=5512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3, 0x0, 0x0, 0x18b}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1m51.483469703s ago: executing program 3 (id=5517): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 1m51.413771585s ago: executing program 3 (id=5521): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1m35.361192352s ago: executing program 32 (id=5521): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 393.413134ms ago: executing program 0 (id=10565): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x4, 0x1, 0x4, 0x0, 0x81}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x3, 0x7, 0x805, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x0, 0x139, 0x7, 0x5, 0x3, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0x2, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}}) 381.113387ms ago: executing program 0 (id=10569): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 331.081436ms ago: executing program 0 (id=10572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x18) socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) 259.47637ms ago: executing program 2 (id=10575): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') 258.981309ms ago: executing program 2 (id=10578): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc0) 258.878089ms ago: executing program 0 (id=10579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000001b40)}, 0x20) 223.525889ms ago: executing program 2 (id=10581): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000940)='\r', 0x1}], 0x1) 221.781003ms ago: executing program 0 (id=10584): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) 199.428765ms ago: executing program 2 (id=10586): timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) 141.639714ms ago: executing program 1 (id=10587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004004}, 0x20040090) 141.480583ms ago: executing program 4 (id=10588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010326bd7000fc1137352a"], 0x14}}, 0x40) 141.396351ms ago: executing program 2 (id=10589): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005400e5012fbd7000ffffffff07", @ANYRES32, @ANYBLOB="00030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 141.291094ms ago: executing program 4 (id=10590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="c6"}) 141.204284ms ago: executing program 1 (id=10591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70250c00000027000000180001801400020073797a5f74756e"], 0x2c}}, 0x20000040) 78.334922ms ago: executing program 2 (id=10592): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) 78.179102ms ago: executing program 1 (id=10593): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) 78.024034ms ago: executing program 4 (id=10594): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 77.937066ms ago: executing program 0 (id=10595): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d55000905020200020a0000090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x344, &(0x7f00000008c0)=ANY=[]) syz_usb_control_io$uac1(r0, 0x0, 0x0) 77.832651ms ago: executing program 1 (id=10596): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 77.712463ms ago: executing program 4 (id=10597): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, 0x0, 0x0, 0x4}, 0x20) 886.15µs ago: executing program 4 (id=10598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 542.618µs ago: executing program 1 (id=10599): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000240)=0x9, 0x4) 373.108µs ago: executing program 4 (id=10600): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x0, 0x401, 0x2f}) 0s ago: executing program 1 (id=10601): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 0s ago: executing program 4 (id=10602): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f27, 0x0, 0x10000, 0x1, 0x800001, 0x800cca, 0x401, 0x7, 0xa, 0x100, 0x2, 0x4, 0x1, 0x1, 0x64, 0x101, 0x0, 0x18449, 0x3, 0x76a, 0x89, 0xcaa7, 0xffffffff, 0xe, 0x2000000b, 0xe69, 0x29, 0x8, 0x6, 0x0, 0xfffffff8]}) kernel console output (not intermixed with test programs): device number 10 using dummy_hcd [ 176.716050][T24261] vcan1: entered allmulticast mode [ 176.751648][T24271] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 176.774537][ T6002] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 176.778915][ T6002] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 176.785424][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 176.790025][ T6002] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.792715][T24278] sctp: [Deprecated]: syz.1.7382 (pid 24278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.792715][T24278] Use struct sctp_sack_info instead [ 176.797016][ T6002] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 176.804344][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.806951][ T6002] usb 7-1: Product: syz [ 176.808274][ T6002] usb 7-1: Manufacturer: syz [ 176.809755][ T6002] usb 7-1: SerialNumber: syz [ 176.814080][ T6002] usb 7-1: config 0 descriptor?? [ 176.821665][ T6002] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input23 [ 176.833711][T24287] netlink: 'syz.1.7384': attribute type 10 has an invalid length. [ 176.839620][T24287] team0: Port device dummy0 added [ 176.856790][T24291] bridge12: entered promiscuous mode [ 176.858671][T24291] bridge12: entered allmulticast mode [ 176.924843][T24302] netlink: ct family unspecified [ 176.927212][T24302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.004562][T24310] syz.0.7390: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 177.012172][T24310] CPU: 2 UID: 0 PID: 24310 Comm: syz.0.7390 Not tainted syzkaller #0 PREEMPT(full) [ 177.012197][T24310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.012210][T24310] Call Trace: [ 177.012216][T24310] [ 177.012223][T24310] dump_stack_lvl+0x16c/0x1f0 [ 177.012262][T24310] warn_alloc+0x248/0x3a0 [ 177.012292][T24310] ? __pfx_warn_alloc+0x10/0x10 [ 177.012316][T24310] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.012353][T24310] ? kasan_save_stack+0x42/0x60 [ 177.012369][T24310] ? kasan_save_stack+0x33/0x60 [ 177.012385][T24310] ? kasan_save_track+0x14/0x30 [ 177.012401][T24310] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 177.012422][T24310] ? __vb2_queue_alloc+0x8c9/0x1280 [ 177.012440][T24310] ? vb2_core_create_bufs+0x559/0xab0 [ 177.012461][T24310] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 177.012482][T24310] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 177.012512][T24310] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 177.012537][T24310] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.012567][T24310] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 177.012588][T24310] vmalloc_user_noprof+0x9e/0xe0 [ 177.012611][T24310] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 177.012632][T24310] vb2_vmalloc_alloc+0x135/0x3f0 [ 177.012654][T24310] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 177.012675][T24310] __vb2_queue_alloc+0x8c9/0x1280 [ 177.012707][T24310] vb2_core_create_bufs+0x559/0xab0 [ 177.012731][T24310] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 177.012758][T24310] ? __mutex_trylock_common+0xe9/0x250 [ 177.012780][T24310] vb2_create_bufs+0x5e8/0x840 [ 177.012803][T24310] ? __pfx_vb2_create_bufs+0x10/0x10 [ 177.012818][T24310] ? __mutex_lock+0x1c5/0x1060 [ 177.012835][T24310] ? v4l_sanitize_colorspace+0x213/0x400 [ 177.012870][T24310] vb2_ioctl_create_bufs+0x244/0x3e0 [ 177.012888][T24310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.012914][T24310] vidioc_create_bufs+0x7d/0xf0 [ 177.012943][T24310] v4l_create_bufs+0x151/0x260 [ 177.012968][T24310] __video_do_ioctl+0xb77/0xf00 [ 177.012997][T24310] ? __might_fault+0xe3/0x190 [ 177.013023][T24310] ? __pfx___video_do_ioctl+0x10/0x10 [ 177.013058][T24310] video_usercopy+0x4d0/0x1720 [ 177.013086][T24310] ? __pfx___video_do_ioctl+0x10/0x10 [ 177.013111][T24310] ? selinux_kernel_read_file+0x80/0x130 [ 177.013132][T24310] ? __pfx_video_usercopy+0x10/0x10 [ 177.013176][T24310] v4l2_ioctl+0x1bd/0x250 [ 177.013200][T24310] ? __pfx_v4l2_ioctl+0x10/0x10 [ 177.013228][T24310] __x64_sys_ioctl+0x18e/0x210 [ 177.013265][T24310] do_syscall_64+0xcd/0xfa0 [ 177.013323][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.013343][T24310] RIP: 0033:0x7f765178efc9 [ 177.013359][T24310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.013378][T24310] RSP: 002b:00007f76525d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.013396][T24310] RAX: ffffffffffffffda RBX: 00007f76519e5fa0 RCX: 00007f765178efc9 [ 177.013408][T24310] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000003 [ 177.013419][T24310] RBP: 00007f7651811f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.013430][T24310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.013441][T24310] R13: 00007f76519e6038 R14: 00007f76519e5fa0 R15: 00007ffee6a9f5c8 [ 177.013469][T24310] [ 177.013476][T24310] Mem-Info: [ 177.158430][T24310] active_anon:10004 inactive_anon:1 isolated_anon:0 [ 177.158430][T24310] active_file:6166 inactive_file:46788 isolated_file:0 [ 177.158430][T24310] unevictable:1768 dirty:416 writeback:0 [ 177.158430][T24310] slab_reclaimable:9834 slab_unreclaimable:75804 [ 177.158430][T24310] mapped:24684 shmem:2411 pagetables:1651 [ 177.158430][T24310] sec_pagetables:320 bounce:0 [ 177.158430][T24310] kernel_misc_reclaimable:0 [ 177.158430][T24310] free:444957 free_pcp:26194 free_cma:0 [ 177.177679][T24310] Node 0 active_anon:40048kB inactive_anon:4kB active_file:23464kB inactive_file:186888kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98316kB dirty:1672kB writeback:0kB shmem:6116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13488kB pagetables:5860kB sec_pagetables:1280kB all_unreclaimable? no Balloon:0kB [ 177.189181][T24310] Node 1 active_anon:4kB inactive_anon:0kB active_file:1200kB inactive_file:264kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:432kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.199377][T24310] Node 0 DMA free:15028kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB [ 177.210696][T24310] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 177.212826][T24310] Node 0 DMA32 free:191040kB boost:20480kB min:48060kB low:54952kB high:61844kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40076kB inactive_anon:4kB active_file:23452kB inactive_file:186888kB unevictable:3536kB writepending:1672kB zspages:0kB present:2080628kB managed:1269500kB mlocked:0kB bounce:0kB free_pcp:64488kB local_pcp:20808kB free_cma:0kB [ 177.225095][T24310] lowmem_reserve[]: 0 0 0 0 0 [ 177.226994][T24310] Node 1 Normal free:1576908kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:1200kB inactive_file:264kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:37096kB local_pcp:8200kB free_cma:0kB [ 177.239081][T24310] lowmem_reserve[]: 0 0 0 0 0 [ 177.240832][T24310] Node 0 DMA: 11*4kB (U) 9*8kB (U) 10*16kB (U) 11*32kB (U) 9*64kB (U) 10*128kB (U) 7*256kB (U) 9*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 15028kB [ 177.247485][T24310] Node 0 DMA32: 1322*4kB (UME) 413*8kB (UME) 108*16kB (UME) 479*32kB (UM) 178*64kB (UME) 315*128kB (UE) 149*256kB (UME) 84*512kB (UME) 32*1024kB (U) 0*2048kB 0*4096kB = 191280kB [ 177.255058][T24310] Node 1 Normal: 228*4kB (UME) 234*8kB (UME) 223*16kB (UME) 366*32kB (UME) 253*64kB (UME) 172*128kB (UME) 144*256kB (U) 138*512kB (UME) 104*1024kB (UME) 4*2048kB (UM) 317*4096kB (UM) = 1576912kB [ 177.263166][T24310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.267487][T24310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 177.271363][T24310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.275622][T24310] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 177.279377][T24310] 55364 total pagecache pages [ 177.281020][T24310] 0 pages in swap cache [ 177.282511][T24310] Free swap = 124996kB [ 177.284056][T24310] Total swap = 124996kB [ 177.285811][T24310] 1048443 pages RAM [ 177.287147][T24310] 0 pages HighMem/MovableOnly [ 177.289159][T24310] 281755 pages reserved [ 177.290882][T24310] 0 pages cma reserved [ 177.314663][T24323] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7396'. [ 177.329641][ C3] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 177.368379][ T1464] usb 7-1: USB disconnect, device number 10 [ 177.405102][T24323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.434118][T24323] bond_slave_0: left allmulticast mode [ 177.437890][T24323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.477378][T24323] bond_slave_1: left allmulticast mode [ 177.482348][T24323] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 177.520950][T24323] batadv_slave_0: left allmulticast mode [ 177.527406][T24323] bond0 (unregistering): Released all slaves [ 177.607260][T24265] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 177.715637][T24331] syz.0.7398 (24331): drop_caches: 2 [ 177.962868][T24419] ipt_REJECT: TCP_RESET invalid for non-tcp [ 178.097865][T24442] syz.2.7434 (24442): /proc/24441/oom_adj is deprecated, please use /proc/24441/oom_score_adj instead. [ 178.119256][T24445] netlink: 'syz.4.7435': attribute type 2 has an invalid length. [ 178.272214][T24474] netlink: 'syz.2.7450': attribute type 30 has an invalid length. [ 178.352759][T24518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.364483][T24522] dlm: Unknown command passed to DLM device : 255 [ 178.364483][T24522] [ 178.395954][T24525] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7459'. [ 178.551244][T24553] Bluetooth: MGMT ver 1.23 [ 178.701651][T24574] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 178.862503][T24597] xt_socket: unknown flags 0x20 [ 178.874977][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 178.874995][ T40] audit: type=1400 audit(172.357:49047): avc: denied { checkpoint_restore } for pid=24598 comm="syz.1.7494" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.902753][T24601] can0: slcan on ttyprintk. [ 178.908139][ T40] audit: type=1400 audit(172.385:49048): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 178.910975][ T5963] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.984465][ T40] audit: type=1400 audit(172.451:49049): avc: denied { read } for pid=24611 comm="syz.2.7496" path="socket:[62524]" dev="sockfs" ino=62524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.987281][T24600] can0 (unregistered): slcan off ttyprintk. [ 178.999647][ T40] audit: type=1400 audit(172.470:49050): avc: denied { shutdown } for pid=24613 comm="syz.1.7497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 179.007719][ T40] audit: type=1400 audit(172.470:49051): avc: denied { read } for pid=24613 comm="syz.1.7497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 179.083557][T24625] No control pipe specified [ 179.193881][ T40] audit: type=1400 audit(172.657:49052): avc: denied { read } for pid=24638 comm="syz.2.7509" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 179.204196][ T40] audit: type=1400 audit(172.657:49053): avc: denied { ioctl } for pid=24638 comm="syz.2.7509" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 179.232990][ T40] audit: type=1400 audit(172.694:49054): avc: denied { append } for pid=24644 comm="syz.1.7512" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 179.272004][ T40] audit: type=1400 audit(172.722:49055): avc: denied { mounton } for pid=24647 comm="syz.2.7513" path="/1986/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 179.288194][ T40] audit: type=1400 audit(172.741:49056): avc: denied { unmount } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 179.316969][T24653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7515'. [ 179.454048][T24662] xt_time: unknown flags 0xf4 [ 179.797376][ T1464] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 179.979143][ T1464] usb 7-1: Using ep0 maxpacket: 8 [ 179.982770][ T1464] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 179.985866][ T1464] usb 7-1: config 0 has no interface number 0 [ 179.988164][ T1464] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.992069][ T1464] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 179.995881][ T1464] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.001113][ T1464] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 180.006608][ T1464] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 180.009588][ T1464] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.014074][ T1464] usb 7-1: config 0 descriptor?? [ 180.020602][ T1464] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 180.138773][T24727] xt_l2tp: wrong L2TP version: 0 [ 180.523274][T24754] SELinux: syz.1.7557 (24754) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 180.590869][T24691] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.594793][T24691] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 180.601092][T24691] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.603544][T24691] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 180.864749][T24691] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 180.867636][T24691] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 181.761091][T24880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7586'. [ 181.873876][T24896] netlink: 'syz.4.7592': attribute type 23 has an invalid length. [ 181.906784][T24901] bond4: (slave bond_slave_1): Device is not our slave [ 181.909768][T24901] bond4: option active_slave: invalid value (bond_slave_1) [ 181.913120][T24901] bond4 (unregistering): Released all slaves [ 182.361012][T25000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7605'. [ 182.425115][ T960] usb 7-1: USB disconnect, device number 11 [ 182.432066][ T960] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 182.545354][T25020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7611'. [ 182.548553][T25020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7611'. [ 182.618164][T25028] veth1_to_bond: entered allmulticast mode [ 182.620378][T25027] veth1_to_bond: left allmulticast mode [ 182.683208][T25032] program syz.0.7616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.828952][T25044] ptrace attach of "/syz-executor exec"[5959] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 182.844248][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7623'. [ 182.884500][T25046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7623'. [ 182.890521][T25046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7623'. [ 183.096563][ T960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.100096][ T960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.104629][ T960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.108070][ T960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.111312][ T960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.115302][ T960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.118443][ T960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.121563][ T960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.125010][ T960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.128176][ T960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.139794][ T960] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [] on 3z۲^|ބ 1JJgm!v';۝J=a)g_Bl%D [ 183.190533][T25075] fido_id[25075]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.216323][T25092] random: crng reseeded on system resumption [ 183.412289][T25110] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 183.416887][T25110] Zero length message leads to an empty skb [ 183.821610][T25143] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7659'. [ 183.824999][T25143] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7659'. [ 184.306289][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 184.306305][ T40] audit: type=1400 audit(177.434:49092): avc: denied { bind } for pid=25221 comm="syz.0.7689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 184.317930][ T40] audit: type=1400 audit(177.434:49093): avc: denied { write } for pid=25221 comm="syz.0.7689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 184.332568][ T40] audit: type=1400 audit(177.462:49094): avc: denied { read } for pid=25225 comm="syz.0.7690" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 184.343082][ T40] audit: type=1400 audit(177.462:49095): avc: denied { open } for pid=25225 comm="syz.0.7690" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 184.355434][ T40] audit: type=1400 audit(177.462:49096): avc: denied { ioctl } for pid=25225 comm="syz.0.7690" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 184.626517][T25255] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 184.717133][ T6002] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 184.806621][ T40] audit: type=1400 audit(177.902:49097): avc: denied { wake_alarm } for pid=25260 comm="syz.4.7698" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.878438][T25268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7701'. [ 184.894795][ T6002] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 184.898581][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 184.902373][ T6002] usb 7-1: Product: syz [ 184.904113][ T6002] usb 7-1: Manufacturer: syz [ 184.906037][ T6002] usb 7-1: SerialNumber: syz [ 184.916936][ T6002] usb 7-1: config 0 descriptor?? [ 184.922366][ T6002] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 184.925911][ T6002] dvb-usb: bulk message failed: -22 (2/0) [ 184.934158][ T6002] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.939182][ T6002] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 184.942656][ T6002] usb 7-1: media controller created [ 184.959087][ T6002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.146371][T25239] dvb-usb: bulk message failed: -22 (3/0) [ 185.150205][ T6002] cxusb: set interface failed [ 185.152279][ T6002] dvb-usb: bulk message failed: -22 (1/0) [ 185.181810][ T6002] DVB: Unable to find symbol mt352_attach() [ 185.184578][ T6002] dvb-usb: bulk message failed: -22 (5/0) [ 185.187419][ T6002] zl10353_read_register: readreg error (reg=127, ret==-121) [ 185.191002][ T6002] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 185.251891][ T6002] rc_core: IR keymap rc-dvico-mce not found [ 185.253916][ T6002] Registered IR keymap rc-empty [ 185.256836][ T6002] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 185.256912][ T40] audit: type=1400 audit(178.323:49098): avc: denied { setopt } for pid=25302 comm="syz.4.7713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 185.260941][ T6002] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input24 [ 185.270924][ T6002] dvb-usb: schedule remote query interval to 100 msecs. [ 185.275787][ T6002] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 185.279958][ T6002] usb 7-1: USB disconnect, device number 12 [ 185.385998][ T6002] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 185.490032][ T40] audit: type=1400 audit(178.547:49099): avc: denied { firmware_load } for pid=25341 comm="syz.4.7725" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 185.572042][ T40] audit: type=1400 audit(178.612:49100): avc: denied { execmod } for pid=25347 comm="syz.0.7728" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=63076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 185.635320][ T40] audit: type=1400 audit(178.669:49101): avc: denied { map } for pid=25352 comm="syz.0.7730" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.079463][T25401] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 186.082782][T25401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.115433][T25405] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 186.152079][ T6002] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 186.324016][ T6002] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 186.326912][ T6002] usb 7-1: config 0 interface 0 has no altsetting 0 [ 186.331500][ T6002] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.335201][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 186.338059][ T6002] usb 7-1: Product: syz [ 186.339585][ T6002] usb 7-1: Manufacturer: syz [ 186.341178][ T6002] usb 7-1: SerialNumber: syz [ 186.344542][ T6002] usb 7-1: config 0 descriptor?? [ 186.349956][ T6002] usb 7-1: selecting invalid altsetting 0 [ 186.481571][T25441] program syz.0.7766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.582330][ T6002] usb 7-1: USB disconnect, device number 13 [ 186.842283][T25480] tipc: Started in network mode [ 186.844854][T25480] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 186.848984][T25480] tipc: Enabling of bearer rejected, failed to enable media [ 187.373063][T25510] support for cryptoloop has been removed. Use dm-crypt instead. [ 187.711829][T25569] __nla_validate_parse: 7 callbacks suppressed [ 187.711844][T25569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7816'. [ 187.718160][T25569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7816'. [ 187.734565][T25569] gretap0: entered promiscuous mode [ 187.738312][T25569] gretap0: left promiscuous mode [ 187.820898][T25589] Bluetooth: MGMT ver 1.23 [ 187.822634][T25587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7820'. [ 187.842066][T25592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.924644][T25605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7827'. [ 187.931345][T25606] IPVS: sync thread started: state = MASTER, mcast_ifn = ipvlan1, syncid = 4, id = 0 [ 188.177596][T25640] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 188.177596][T25640] program syz.2.7842 not setting count and/or reply_len properly [ 188.235782][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 188.396306][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 188.409800][ T29] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.412712][ T29] usb 6-1: config 0 has no interface number 0 [ 188.421074][ T29] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 188.424870][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.428537][ T29] usb 6-1: Product: syz [ 188.430231][ T29] usb 6-1: Manufacturer: syz [ 188.432165][ T29] usb 6-1: SerialNumber: syz [ 188.436379][ T29] usb 6-1: config 0 descriptor?? [ 188.441767][T25667] delete_channel: no stack [ 188.442321][ T29] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 188.447261][ T29] usb 6-1: selecting invalid altsetting 1 [ 188.451515][ T29] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 188.457678][ T29] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 188.467144][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 188.470667][ T29] usb 6-1: media controller created [ 188.486185][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.778108][T25705] team0: Device gtp0 is of different type [ 188.994913][T25722] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 189.314955][T25739] max out of range [ 189.476693][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 189.605841][ T29] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 189.611351][ T29] zl10353_read_register: readreg error (reg=127, ret==-110) [ 189.627414][T25613] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 189.641583][ T29] usb 6-1: USB disconnect, device number 6 [ 189.648071][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 189.651704][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.654844][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 189.658023][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.661948][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 189.665271][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 189.669578][ T9] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 189.672405][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.676547][ T9] usb 9-1: config 0 descriptor?? [ 189.901628][ T9] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 190.329459][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 190.329470][ T40] audit: type=1400 audit(183.063:49146): avc: denied { connect } for pid=25806 comm="syz.0.7902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.341452][T25804] ALSA: seq fatal error: cannot create timer (-19) [ 190.395906][T25816] netlink: 'syz.2.7907': attribute type 2 has an invalid length. [ 190.401424][T25816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7907'. [ 190.483158][T25827] ubi31: attaching mtd0 [ 190.485953][T25827] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 183 [ 190.489366][T25827] ubi31 error: validate_ec_hdr: bad EC header [ 190.491931][T25827] Erase counter header dump: [ 190.495674][T25827] magic 0x55424923 [ 190.497773][T25827] version 1 [ 190.499551][T25827] ec 1 [ 190.501321][T25827] vid_hdr_offset 64 [ 190.504353][T25827] data_offset 128 [ 190.506436][T25827] image_seq -132659990 [ 190.508548][T25827] hdr_crc 0x7699656d [ 190.510671][T25827] erase counter header hexdump: [ 190.512937][T25827] CPU: 2 UID: 0 PID: 25827 Comm: syz.2.7912 Not tainted syzkaller #0 PREEMPT(full) [ 190.512958][T25827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.512968][T25827] Call Trace: [ 190.512975][T25827] [ 190.512983][T25827] dump_stack_lvl+0x16c/0x1f0 [ 190.513017][T25827] validate_ec_hdr+0x28c/0x330 [ 190.513038][T25827] ubi_io_read_ec_hdr+0x63b/0x6c0 [ 190.513061][T25827] ubi_attach+0x601/0x4be0 [ 190.513095][T25827] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.513119][T25827] ? __pfx_ubi_msg+0x10/0x10 [ 190.513142][T25827] ? __pfx_ubi_attach+0x10/0x10 [ 190.513192][T25827] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 190.513219][T25827] ? __vmalloc_node_noprof+0xad/0xf0 [ 190.513241][T25827] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 190.513267][T25827] ubi_attach_mtd_dev+0x15a7/0x35d0 [ 190.513302][T25827] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 190.513326][T25827] ? __pfx_get_mtd_device+0x10/0x10 [ 190.513352][T25827] ctrl_cdev_ioctl+0x337/0x3d0 [ 190.513376][T25827] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 190.513402][T25827] ? selinux_file_ioctl+0x180/0x270 [ 190.513428][T25827] ? selinux_file_ioctl+0xb4/0x270 [ 190.513450][T25827] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 190.513476][T25827] __x64_sys_ioctl+0x18e/0x210 [ 190.513508][T25827] do_syscall_64+0xcd/0xfa0 [ 190.513540][T25827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.513560][T25827] RIP: 0033:0x7f64e1d8efc9 [ 190.513575][T25827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.513594][T25827] RSP: 002b:00007f64e2b94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.513611][T25827] RAX: ffffffffffffffda RBX: 00007f64e1fe5fa0 RCX: 00007f64e1d8efc9 [ 190.513623][T25827] RDX: 0000200000000040 RSI: 0000000040186f40 RDI: 0000000000000003 [ 190.513634][T25827] RBP: 00007f64e1e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.513658][T25827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.513671][T25827] R13: 00007f64e1fe6038 R14: 00007f64e1fe5fa0 R15: 00007ffd11703c78 [ 190.513699][T25827] [ 190.530157][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7914'. [ 190.531133][T25827] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 190.532925][T25831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7914'. [ 190.532944][T25831] netlink: 'syz.1.7914': attribute type 15 has an invalid length. [ 190.628290][T25839] netlink: 'syz.0.7917': attribute type 1 has an invalid length. [ 190.660191][ T40] audit: type=1400 audit(183.372:49147): avc: denied { append } for pid=25840 comm="syz.0.7918" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 190.740704][T25827] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 190.910271][ T40] audit: type=1400 audit(183.605:49148): avc: denied { recv } for pid=5873 comm="syz-executor" saddr=127.0.0.1 src=32896 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 190.922454][ T40] audit: type=1400 audit(183.615:49149): avc: denied { recv } for pid=5873 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=32896 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.099750][ T40] audit: type=1400 audit(183.783:49150): avc: denied { write } for pid=25874 comm="syz.2.7933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 191.429964][T25896] mkiss: ax0: crc mode is auto. [ 191.541411][T22033] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 191.744866][T15957] hid_parser_main: 15 callbacks suppressed [ 191.744887][T15957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.750723][T15957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.753977][T15957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.757805][T15957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.761470][T15957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.765737][T15957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.769473][T15957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.772243][T15957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.775902][T15957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.779122][T15957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.779258][T22033] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 191.784773][T15957] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 191.820337][ T40] audit: type=1400 audit(184.466:49151): avc: denied { map } for pid=25941 comm="syz.2.7955" path="socket:[65181]" dev="sockfs" ino=65181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 191.832606][T25940] fido_id[25940]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 191.948963][T25955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7961'. [ 191.959915][ T40] audit: type=1400 audit(184.597:49152): avc: denied { mount } for pid=25956 comm="syz.2.7963" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 191.983868][ T40] audit: type=1400 audit(184.615:49153): avc: denied { unmount } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 192.277398][T25987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7975'. [ 192.447026][ T9] usb 9-1: USB disconnect, device number 4 [ 192.453245][ T9] usblp0: removed [ 192.717520][T26050] overlayfs: regular lower layers cannot follow data lower layers [ 192.830092][T26058] vivid-004: disconnect [ 192.832293][T26058] vivid-004: reconnect [ 192.923674][ T40] audit: type=1400 audit(185.494:49154): avc: denied { setopt } for pid=26071 comm="syz.1.8007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.003491][T26086] netlink: 'syz.4.8015': attribute type 1 has an invalid length. [ 193.155789][T26118] xt_limit: Overflow, try lower: 271964/0 [ 193.289023][T26130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8035'. [ 193.426716][ T40] audit: type=1400 audit(185.962:49155): avc: denied { sqpoll } for pid=26145 comm="syz.4.8043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.685115][T26208] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 194.689685][T26211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8070'. [ 194.692662][T26211] nbd: illegal input index 1879048192 [ 194.752537][T26221] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 195.000673][T26256] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8087'. [ 195.004259][T26258] 9pnet_fd: p9_fd_create_unix (26258): problem connecting socket: ./file0: -111 [ 195.280857][T26302] xt_l2tp: invalid flags combination: 8 [ 195.531416][T26337] sp0: Synchronizing with TNC [ 195.602296][T26355] binder: 26352:26355 ioctl c0306201 2000000003c0 returned -14 [ 195.633898][T26359] xt_hashlimit: size too large, truncated to 1048576 [ 195.706980][T26366] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.723284][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 195.723297][ T40] audit: type=1400 audit(188.113:49168): avc: denied { append } for pid=26370 comm="syz.1.8138" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.820132][T26366] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.890867][T26366] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.963627][ T40] audit: type=1400 audit(188.328:49169): avc: denied { setopt } for pid=26396 comm="syz.1.8147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.971623][ T40] audit: type=1400 audit(188.328:49170): avc: denied { bind } for pid=26396 comm="syz.1.8147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.980363][ T40] audit: type=1400 audit(188.328:49171): avc: denied { name_bind } for pid=26396 comm="syz.1.8147" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 195.991629][ T40] audit: type=1400 audit(188.328:49172): avc: denied { node_bind } for pid=26396 comm="syz.1.8147" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 196.008174][T26366] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.027380][ T40] audit: type=1400 audit(188.394:49173): avc: denied { create } for pid=26404 comm="syz.4.8150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 196.035287][ T40] audit: type=1400 audit(188.394:49174): avc: denied { ioctl } for pid=26404 comm="syz.4.8150" path="socket:[67692]" dev="sockfs" ino=67692 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 196.158231][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.172940][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.199263][ T1153] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.208705][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.461478][T26470] mkiss: ax0: crc mode is auto. [ 196.511450][ T40] audit: type=1400 audit(188.843:49175): avc: denied { write } for pid=26479 comm="syz.2.8164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.688971][T26502] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8172'. [ 196.702560][T26504] program syz.1.8173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.709013][ T40] audit: type=1800 audit(189.030:49176): pid=26506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.8174" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 196.752222][ T40] audit: type=1400 audit(189.076:49177): avc: denied { bind } for pid=26509 comm="syz.1.8176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.887423][ T960] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 196.985640][T26534] netlink: 'syz.0.8188': attribute type 1 has an invalid length. [ 196.989075][T26534] netlink: 212 bytes leftover after parsing attributes in process `syz.0.8188'. [ 196.992879][T26534] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8188'. [ 197.070382][ T960] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 197.074201][ T960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.080284][ T960] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 197.084410][ T960] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 197.088321][ T960] usb 7-1: Manufacturer: syz [ 197.094509][ T960] usb 7-1: config 0 descriptor?? [ 197.168545][ T960] rc_core: IR keymap rc-hauppauge not found [ 197.171196][ T960] Registered IR keymap rc-empty [ 197.175160][ T960] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 197.182516][ T960] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input25 [ 197.204625][T26573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8201'. [ 197.209288][T26575] netlink: 'syz.4.8202': attribute type 5 has an invalid length. [ 197.309147][T26588] vlan2: entered promiscuous mode [ 197.311352][T26588] bridge0: entered promiscuous mode [ 197.323743][ T960] usb 7-1: USB disconnect, device number 14 [ 197.527344][T26620] SELinux: failed to load policy [ 197.571149][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 197.640139][T26627] No buffer was provided with the request [ 197.742105][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 197.745663][ T29] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 197.748698][ T29] usb 6-1: config 0 has no interface number 0 [ 197.750978][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.755729][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 197.760469][ T29] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.764754][ T29] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.769082][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 197.771951][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.781742][ T29] usb 6-1: config 0 descriptor?? [ 197.789980][ T29] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 198.015701][ T960] usb 6-1: USB disconnect, device number 7 [ 198.021565][ T960] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 198.098133][T26681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8238'. [ 198.150220][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 198.332683][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.337761][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.341923][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.345502][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.363587][T26652] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.369467][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.401442][T26713] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 198.401442][T26713] The task syz.2.8246 (26713) triggered the difference, watch for misbehavior. [ 198.527613][T26725] Invalid logical block size (-3) [ 198.600488][ T9] usb 5-1: USB disconnect, device number 7 [ 199.071153][T26777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8263'. [ 199.203644][T26790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8271'. [ 199.669376][T26853] binder: 26852:26853 ioctl 40046205 0 returned -22 [ 199.779312][T26863] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 200.151751][T26893] macsec1: entered promiscuous mode [ 200.154186][T26893] macsec1: entered allmulticast mode [ 200.196305][T26903] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 200.212883][T26905] devtmpfs: Cannot change global quota limit on remount [ 200.452277][T26940] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 200.565426][ T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 200.588984][T26952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8340'. [ 200.717791][T26972] usb 1-1: USB disconnect, device number 2 [ 200.738948][ T34] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 200.741932][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.744560][ T34] usb 6-1: Product: syz [ 200.745903][ T34] usb 6-1: Manufacturer: syz [ 200.747686][ T34] usb 6-1: SerialNumber: syz [ 200.754886][ T34] usb 6-1: config 0 descriptor?? [ 200.822993][T26993] hugetlbfs: Bad value 'B%' for mount option 'size' [ 200.822993][T26993] [ 200.875208][ T54] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 200.980671][ T29] usb 6-1: USB disconnect, device number 8 [ 201.021423][T27027] vivid-000: disconnect [ 201.023811][T27027] vivid-000: reconnect [ 201.037289][ T54] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 201.040789][ T54] usb 9-1: config 0 has no interface number 0 [ 201.043463][ T54] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 201.048541][ T54] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 201.053041][ T54] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 201.058562][ T54] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 201.063006][ T54] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 201.067234][ T54] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 201.074463][ T54] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 201.079331][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.086449][ T54] usb 9-1: config 0 descriptor?? [ 201.091299][T26958] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.093814][T26958] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.106648][ T54] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 201.319893][ T34] usb 9-1: USB disconnect, device number 5 [ 201.328722][ T34] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 201.777045][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 201.777078][ T40] audit: type=1400 audit(193.771:49203): avc: denied { connect } for pid=27071 comm="syz.2.8373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 201.780814][T27074] netlink: 'syz.1.8372': attribute type 83 has an invalid length. [ 201.890998][T27084] [U] v3f"S/4:XTzWtlW= [ 201.994341][ T40] audit: type=1326 audit(193.977:49204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27037 comm="syz.0.8369" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765178efc9 code=0x7fc00000 [ 202.242194][ T40] audit: type=1400 audit(194.202:49205): avc: denied { getopt } for pid=27131 comm="syz.0.8407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 202.443351][T27163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8415'. [ 202.463163][T27166] sp0: Synchronizing with TNC [ 202.480526][T27165] [U] [ 202.596177][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8422'. [ 202.601536][T27192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8422'. [ 202.687302][T27208] use of bytesused == 0 is deprecated and will be removed in the future, [ 202.690830][T27208] use the actual size instead. [ 202.732770][T27214] 9pnet_fd: p9_fd_create_unix (27214): problem connecting socket: ./file0: -111 [ 202.776495][ T40] audit: type=1400 audit(194.707:49206): avc: denied { write } for pid=27219 comm="syz.1.8435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 202.863843][T27230] nbd: must specify a device to reconfigure [ 202.887612][T27232] hub 8-0:1.0: USB hub found [ 202.889869][T27232] hub 8-0:1.0: 1 port detected [ 202.895869][ T54] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.941816][ T40] audit: type=1400 audit(194.866:49207): avc: denied { create } for pid=27242 comm="syz.4.8451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.960215][ T40] audit: type=1400 audit(194.875:49208): avc: denied { unlink } for pid=20388 comm="syz-executor" name="file7" dev="tmpfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.088298][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 203.092362][ T54] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.095690][ T54] usb 5-1: config 0 has no interface number 0 [ 203.111948][ T54] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 203.115767][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.129801][ T54] usb 5-1: Product: syz [ 203.131971][ T54] usb 5-1: Manufacturer: syz [ 203.133930][ T54] usb 5-1: SerialNumber: syz [ 203.142927][ T54] usb 5-1: config 0 descriptor?? [ 203.148565][ T54] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 203.152103][ T54] usb 5-1: selecting invalid altsetting 1 [ 203.155443][ T54] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 203.162409][ T54] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.168237][ T54] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 203.171762][ T54] usb 5-1: media controller created [ 203.189758][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.312010][ T40] audit: type=1400 audit(195.202:49209): avc: denied { read } for pid=27288 comm="syz.2.8461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 203.360252][ T40] audit: type=1400 audit(195.249:49210): avc: denied { watch watch_reads } for pid=27292 comm="syz.4.8464" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 203.424584][ T29] hid_parser_main: 73 callbacks suppressed [ 203.424596][ T29] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 203.432780][ T29] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 203.435921][ T29] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 203.439509][ T29] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 203.445187][ T29] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 203.448459][ T29] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 203.451344][ T29] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 203.454603][ T29] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 203.457629][ T29] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 203.460671][ T29] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 203.485412][ T29] hid-generic 000C:0007:000C.0004: hidraw0: HID v14.24 Device [syz1] on syz0 [ 203.536663][T27312] fido_id[27312]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.705922][T27342] xt_hashlimit: size too large, truncated to 1048576 [ 203.911611][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 204.043539][ T40] audit: type=1400 audit(195.894:49211): avc: denied { remount } for pid=27355 comm="syz.1.8487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 204.082776][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 204.086557][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.089975][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 204.093385][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.097169][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 204.101086][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.108697][ T34] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 204.112643][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.118780][ T34] usb 7-1: config 0 descriptor?? [ 204.282525][T27368] : entered promiscuous mode [ 204.318303][ T54] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 204.321315][ T54] zl10353_read_register: readreg error (reg=127, ret==-110) [ 204.348949][ T34] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 204.350413][T27201] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 204.374276][ T54] usb 5-1: USB disconnect, device number 8 [ 204.709763][ T40] audit: type=1400 audit(196.512:49212): avc: denied { create } for pid=27409 comm="syz.1.8500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 204.714038][T27410] tmpfs: Invalid uid '0x00000000ffffffff' [ 204.946315][T27422] CIFS: Unable to determine destination address [ 205.089669][T27434] EXT4-fs: Conflicting test_dummy_encryption options [ 205.272729][T27447] netlink: 328 bytes leftover after parsing attributes in process `syz.0.8517'. [ 205.495800][T27467] IPVS: persistence engine module ip_vs_pe_s not found [ 205.773276][T27497] binder: 27496:27497 ioctl 4018620d 0 returned -22 [ 205.821620][T27503] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8543'. [ 205.845775][T27507] [U]  [ 205.879830][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8546'. [ 205.883560][T27511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8546'. [ 205.886831][T27511] netlink: 'syz.1.8546': attribute type 12 has an invalid length. [ 206.003180][T27531] netlink: 'syz.0.8556': attribute type 11 has an invalid length. [ 206.005188][T27533] ALSA: mixer_oss: invalid OSS volume '' [ 206.860984][ T6002] usb 7-1: USB disconnect, device number 15 [ 206.866419][ T6002] usblp0: removed [ 206.891473][T27632] ubi31: attaching mtd0 [ 206.894520][T27632] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 198 [ 206.897902][T27632] ubi31 error: validate_ec_hdr: bad EC header [ 206.900219][T27632] Erase counter header dump: [ 206.902087][T27632] magic 0x55424923 [ 206.904008][T27632] version 1 [ 206.905759][T27632] ec 1 [ 206.907345][T27632] vid_hdr_offset 64 [ 206.909121][T27632] data_offset 128 [ 206.910798][T27632] image_seq -132659990 [ 206.912697][T27632] hdr_crc 0x7699656d [ 206.914627][T27632] erase counter header hexdump: [ 206.918189][T27632] CPU: 2 UID: 0 PID: 27632 Comm: syz.0.8595 Not tainted syzkaller #0 PREEMPT(full) [ 206.918216][T27632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 206.918227][T27632] Call Trace: [ 206.918233][T27632] [ 206.918240][T27632] dump_stack_lvl+0x16c/0x1f0 [ 206.918269][T27632] validate_ec_hdr+0x28c/0x330 [ 206.918290][T27632] ubi_io_read_ec_hdr+0x63b/0x6c0 [ 206.918311][T27632] ubi_attach+0x601/0x4be0 [ 206.918345][T27632] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.918368][T27632] ? __pfx_ubi_msg+0x10/0x10 [ 206.918389][T27632] ? __pfx_ubi_attach+0x10/0x10 [ 206.918413][T27632] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 206.918435][T27632] ? __vmalloc_node_noprof+0xad/0xf0 [ 206.918456][T27632] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 206.918483][T27632] ubi_attach_mtd_dev+0x15a7/0x35d0 [ 206.918518][T27632] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 206.918538][T27632] ? __pfx_get_mtd_device+0x10/0x10 [ 206.918562][T27632] ctrl_cdev_ioctl+0x337/0x3d0 [ 206.918584][T27632] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 206.918606][T27632] ? selinux_file_ioctl+0x180/0x270 [ 206.918624][T27632] ? selinux_file_ioctl+0xb4/0x270 [ 206.918649][T27632] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 206.918672][T27632] __x64_sys_ioctl+0x18e/0x210 [ 206.918702][T27632] do_syscall_64+0xcd/0xfa0 [ 206.918728][T27632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.918744][T27632] RIP: 0033:0x7f765178efc9 [ 206.918759][T27632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.918775][T27632] RSP: 002b:00007f76525d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.918792][T27632] RAX: ffffffffffffffda RBX: 00007f76519e5fa0 RCX: 00007f765178efc9 [ 206.918803][T27632] RDX: 0000200000000040 RSI: 0000000040186f40 RDI: 0000000000000003 [ 206.918814][T27632] RBP: 00007f7651811f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.918823][T27632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.918833][T27632] R13: 00007f76519e6038 R14: 00007f76519e5fa0 R15: 00007ffee6a9f5c8 [ 206.918857][T27632] [ 206.918863][T27632] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 207.018055][T27644] binder_alloc: binder_alloc_mmap_handler: 27643 200000ffe000-200000fff000 already mapped failed -16 [ 207.141858][T27632] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 207.184179][T27660] can0: slcan on ttyS3. [ 207.248178][T27658] can0 (unregistered): slcan off ttyS3. [ 207.274734][T27681] netlink: 'syz.1.8617': attribute type 178 has an invalid length. [ 207.467761][T27713] Invalid logical block size (-3) [ 207.504107][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 207.504123][ T40] audit: type=1400 audit(199.121:49223): avc: denied { setopt } for pid=27719 comm="syz.2.8634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.519558][ T40] audit: type=1400 audit(199.130:49224): avc: denied { getopt } for pid=27719 comm="syz.2.8634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.573518][ T40] audit: type=1400 audit(199.196:49225): avc: denied { listen } for pid=27728 comm="syz.1.8638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.609530][T27736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8641'. [ 207.668316][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.900055][ T6002] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 208.070949][ T6002] usb 9-1: Using ep0 maxpacket: 32 [ 208.074320][ T6002] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.076848][ T6002] usb 9-1: config 0 has no interface number 0 [ 208.080540][ T6002] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 208.084042][ T6002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.087236][ T6002] usb 9-1: Product: syz [ 208.088809][ T6002] usb 9-1: Manufacturer: syz [ 208.090314][ T6002] usb 9-1: SerialNumber: syz [ 208.093313][ T6002] usb 9-1: config 0 descriptor?? [ 208.097169][ T6002] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 208.100256][ T6002] usb 9-1: selecting invalid altsetting 1 [ 208.102144][ T6002] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 208.106161][ T6002] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.109913][ T6002] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 208.112703][ T6002] usb 9-1: media controller created [ 208.121385][ T6002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.436897][T27797] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 208.436897][T27797] program syz.0.8666 not setting count and/or reply_len properly [ 208.462864][T27801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8668'. [ 208.550365][T27809] binder: 27807:27809 ioctl 40046205 0 returned -22 [ 208.709938][T27824] xt_socket: unknown flags 0xe4 [ 208.920618][ T40] audit: type=1800 audit(200.449:49226): pid=27840 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.8684" name="file0" dev="tmpfs" ino=11313 res=0 errno=0 [ 208.927980][ T40] audit: type=1804 audit(200.449:49227): pid=27840 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.8684" name="/newroot/2245/file0" dev="tmpfs" ino=11313 res=1 errno=0 [ 208.958272][T27842] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 512 [ 209.092327][T27850] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 209.280016][ T6002] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 209.283308][ T6002] zl10353_read_register: readreg error (reg=127, ret==-110) [ 209.289649][ T6002] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 209.324050][ T40] audit: type=1400 audit(200.823:49228): avc: denied { remount } for pid=27876 comm="syz.2.8700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 209.324671][ T6002] usb 9-1: USB disconnect, device number 6 [ 209.334396][ T40] audit: type=1400 audit(200.842:49229): avc: denied { unmount } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 209.755044][T27926] xt_socket: unknown flags 0xe4 [ 210.009776][T27958] netlink: 'syz.4.8733': attribute type 83 has an invalid length. [ 210.150670][T27977] sp0: Synchronizing with TNC [ 210.164156][T27976] [U] [ 210.268827][ T40] audit: type=1326 audit(201.712:49230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.0.8752" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f7651785e67 code=0x0 [ 210.363791][ T40] audit: type=1400 audit(201.805:49231): avc: denied { connect } for pid=28001 comm="syz.2.8748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.370093][ T40] audit: type=1400 audit(201.805:49232): avc: denied { write } for pid=28001 comm="syz.2.8748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.522134][T28010] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8751'. [ 210.577246][T28012] sp0: Synchronizing with TNC [ 210.584887][T28011] [U] [ 211.163872][T28073] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8777'. [ 211.203170][T28075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8779'. [ 211.252281][T28077] tipc: MTU too low for tipc bearer [ 211.316423][T22033] udevd[22033]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 211.460514][ T6002] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 211.556671][ T55] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 211.622254][ T6002] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 211.624855][ T6002] usb 6-1: config 0 has no interface number 0 [ 211.626799][ T6002] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.630137][ T6002] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 211.633840][ T6002] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 211.637590][ T6002] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 211.641108][ T6002] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 211.644630][ T6002] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.648795][ T6002] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 211.651667][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.656218][ T6002] usb 6-1: config 0 descriptor?? [ 211.658681][T28080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.661926][T28080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.667985][ T6002] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 211.718998][ T55] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.722974][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 211.726227][ T55] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 211.730058][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.735096][ T55] usb 7-1: config 0 descriptor?? [ 211.739165][ T55] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 211.741949][ T55] dvb-usb: bulk message failed: -22 (3/0) [ 211.748559][ T55] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 211.754438][ T55] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 211.757337][ T55] usb 7-1: media controller created [ 211.761408][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.775071][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 211.777493][ T55] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 211.787479][ T55] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input26 [ 211.800544][ T55] dvb-usb: schedule remote query interval to 150 msecs. [ 211.803517][ T55] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 211.885406][ T54] usb 6-1: USB disconnect, device number 9 [ 211.889088][ T54] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 211.959101][ T29] usb 7-1: USB disconnect, device number 16 [ 212.053102][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 212.406662][T28157] tipc: MTU too low for tipc bearer [ 212.533021][T28178] [U] v3f"S/4:XTzWtlW= [ 212.592041][T28193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8808'. [ 212.600001][T28193] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 212.603056][T28193] team0: Device ipvlan2 is already an upper device of the team interface [ 212.840090][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 212.858956][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 212.858971][ T40] audit: type=1400 audit(204.134:49236): avc: denied { write } for pid=28221 comm="syz.0.8821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.872584][T28224] openvswitch: netlink: Unknown nsh attribute 0 [ 212.875282][T28224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.012524][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 213.018670][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.023097][ T9] usb 7-1: config 0 has no interface number 0 [ 213.027877][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 213.031036][ T40] audit: type=1400 audit(204.293:49237): avc: denied { bind } for pid=28246 comm="syz.1.8831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.031661][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.031680][ T9] usb 7-1: Product: syz [ 213.031693][ T9] usb 7-1: Manufacturer: syz [ 213.046585][ T9] usb 7-1: SerialNumber: syz [ 213.051077][ T9] usb 7-1: config 0 descriptor?? [ 213.060883][ T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 213.065891][ T9] usb 7-1: selecting invalid altsetting 1 [ 213.068729][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 213.075141][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 213.079671][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 213.083074][ T9] usb 7-1: media controller created [ 213.099178][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.275725][ T40] audit: type=1400 audit(204.527:49238): avc: denied { write } for pid=28280 comm="syz.1.8844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 213.371831][T28296] geneve0: entered allmulticast mode [ 213.469495][T28308] : entered promiscuous mode [ 213.789430][ T6002] Process accounting resumed [ 213.816590][T28353] Process accounting resumed [ 213.962785][ T40] audit: type=1400 audit(205.163:49239): avc: denied { mount } for pid=28373 comm="syz.4.8883" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 213.978775][ T40] audit: type=1400 audit(205.181:49240): avc: denied { unmount } for pid=20388 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 214.241839][ T9] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 214.245591][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 214.252125][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 214.259549][T28386] IPVS: persistence engine module ip_vs_pe_s not found [ 214.293014][ T9] usb 7-1: USB disconnect, device number 17 [ 214.484881][ T40] audit: type=1400 audit(205.649:49241): avc: denied { bind } for pid=28425 comm="syz.0.8904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.495728][T28429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8902'. [ 214.495749][T28430] macsec1: entered promiscuous mode [ 214.503420][T28430] bridge0: entered promiscuous mode [ 214.769393][T28464] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 214.813269][T28473] ALSA: mixer_oss: invalid OSS volume '' [ 214.858006][T28481] netlink: 'syz.2.8923': attribute type 11 has an invalid length. [ 214.913481][T28495] vlan0: entered allmulticast mode [ 214.915818][T28495] bond0: entered allmulticast mode [ 214.917569][T28495] : entered allmulticast mode [ 214.919172][T28495] batadv0: entered allmulticast mode [ 214.954998][T28506] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8935'. [ 215.183718][T28548] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 215.273946][ T40] audit: type=1400 audit(206.397:49242): avc: denied { remount } for pid=28563 comm="syz.1.8960" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 215.321611][T28571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8964'. [ 215.359167][T28578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8967'. [ 215.451269][T28593] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 215.511744][T28608] CUSE: unknown device info "" [ 215.514440][T28608] CUSE: zero length info key specified [ 215.558563][T28616] netlink: 'syz.1.8981': attribute type 1 has an invalid length. [ 215.561173][T28616] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8981'. [ 215.806570][T28653] binder_alloc: binder_alloc_mmap_handler: 28651 200000ffe000-200000fff000 already mapped failed -16 [ 215.859517][T28661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9001'. [ 215.868844][ T40] audit: type=1400 audit(206.949:49243): avc: denied { write } for pid=28662 comm="syz.2.9002" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 216.398669][T28719] can0: slcan on ttyprintk. [ 216.430839][T28729] bad cache= option: none [ 216.430839][T28729] [ 216.434457][T28729] CIFS: VFS: bad cache= option: none [ 216.498171][T28718] can0 (unregistered): slcan off ttyprintk. [ 216.530040][ T841] hid_parser_main: 221 callbacks suppressed [ 216.530056][ T841] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.534932][ T841] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.537822][ T841] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.541906][ T841] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.544565][ T841] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.547059][ T841] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.549651][ T841] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.556000][ T841] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.558511][ T841] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.567580][ T841] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 216.580405][ T841] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 216.650213][T28756] fido_id[28756]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 216.856038][T28789] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 216.856038][T28789] program syz.4.9045 not setting count and/or reply_len properly [ 216.982373][ T40] audit: type=1400 audit(207.996:49244): avc: denied { read } for pid=28810 comm="syz.4.9057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.038151][ T40] audit: type=1400 audit(208.043:49245): avc: denied { write } for pid=28810 comm="syz.4.9057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.199158][T28836] can0: slcan on ttyprintk. [ 217.225326][T28846] bad cache= option: none [ 217.225326][T28846] [ 217.228624][T28846] CIFS: VFS: bad cache= option: none [ 217.258162][T28835] can0 (unregistered): slcan off ttyprintk. [ 217.549084][ T54] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 217.595587][T28902] fido_id[28902]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.637429][T28910] comedi comedi3: rti800: I/O port conflict (0x4f27,16) [ 217.701342][T28914] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9091'. [ 217.942014][T28938] sp0: Synchronizing with TNC [ 218.205205][T28976] hub 2-0:1.0: USB hub found [ 218.208685][T28976] hub 2-0:1.0: 2 ports detected [ 218.246870][T28989] netlink: zone id is out of range [ 218.246886][T28989] netlink: zone id is out of range [ 218.247416][T28989] netlink: set zone limit has 8 unknown bytes [ 218.289402][T28997] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9125'. [ 218.618626][T29040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9143'. [ 218.743721][T29062] [U] v3f"S/4:XTzWtlW= [ 218.745845][T29062] [U] J"e:" [ 218.809846][T29069] usb usb9: usbfs: process 29069 (syz.4.9153) did not claim interface 0 before use [ 218.815956][T29070] vlan2: entered promiscuous mode [ 218.817832][T29070] syz_tun: entered promiscuous mode [ 218.868994][T29082] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 219.119174][T29119] xt_HMARK: spi-set and port-set can't be combined [ 219.248728][T29140] tmpfs: Bad value for 'mpol' [ 219.276054][T29142] bridge0: port 3(syz_tun) entered blocking state [ 219.279138][T29142] bridge0: port 3(syz_tun) entered disabled state [ 219.281782][T29142] syz_tun: entered allmulticast mode [ 219.284414][T29142] syz_tun: entered promiscuous mode [ 219.287096][T29142] bridge0: port 3(syz_tun) entered blocking state [ 219.290111][T29142] bridge0: port 3(syz_tun) entered forwarding state [ 219.337231][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 219.337241][ T40] audit: type=1400 audit(210.194:49247): avc: denied { write } for pid=29147 comm="syz.4.9188" name="/" dev="9p" ino=79429679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.447837][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 219.543498][ T40] audit: type=1400 audit(210.381:49248): avc: denied { append } for pid=29162 comm="syz.1.9193" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 219.610518][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.614946][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.623885][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.627071][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.635467][T29129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.641394][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.734299][ T40] audit: type=1400 audit(210.559:49249): avc: denied { append } for pid=29191 comm="syz.1.9199" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 219.734723][T29192] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 219.859554][ T9] usb 5-1: USB disconnect, device number 9 [ 219.953020][T29232] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9209'. [ 220.021842][T29240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9211'. [ 220.025793][T29240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9211'. [ 220.029365][T29240] netlink: 'syz.2.9211': attribute type 12 has an invalid length. [ 220.552389][T29316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29316 comm=syz.1.9244 [ 220.655149][T29336] sg_write: process 4831 (syz.1.9252) changed security contexts after opening file descriptor, this is not allowed. [ 220.784839][T29356] devpts: Bad value for 'max' [ 220.828849][ T40] audit: type=1400 audit(211.597:49250): avc: denied { connect } for pid=29361 comm="syz.1.9263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 220.851635][ T40] audit: type=1400 audit(211.616:49251): avc: denied { setattr } for pid=29365 comm="syz.2.9265" name="SCO" dev="sockfs" ino=77871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 221.468778][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 221.631255][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.637453][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.640915][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.643807][ T29] usb 5-1: Product: syz [ 221.645128][ T29] usb 5-1: Manufacturer: syz [ 221.646741][ T29] usb 5-1: SerialNumber: syz [ 221.649566][ T29] usb 5-1: config 0 descriptor?? [ 221.762727][T29403] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 221.765457][T29403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 221.769600][T29403] vhci_hcd vhci_hcd.0: Device attached [ 221.936076][ T40] audit: type=1400 audit(212.626:49252): avc: denied { name_bind } for pid=29429 comm="syz.2.9284" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 222.002274][T29440] syz_tun: refused to change device tx_queue_len [ 222.024652][ T1339] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 222.035575][ T841] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 222.092691][ T55] usb 5-1: USB disconnect, device number 10 [ 222.197566][ T841] usb 9-1: config 0 has no interfaces? [ 222.205455][ T841] usb 9-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 222.209769][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.215874][ T841] usb 9-1: config 0 descriptor?? [ 222.232574][T29474] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1 [ 222.350167][ T40] audit: type=1400 audit(213.009:49253): avc: denied { lock } for pid=29483 comm="syz.2.9302" path="socket:[78894]" dev="sockfs" ino=78894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.392217][T29488] program syz.2.9304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.460821][T29404] vhci_hcd: cannot find a urb of seqnum 665751872 max seqnum 1 [ 222.461501][ T841] usb 9-1: USB disconnect, device number 7 [ 222.465970][ T12] vhci_hcd: stop threads [ 222.468683][ T12] vhci_hcd: release socket [ 222.469951][T29499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.473027][ T12] vhci_hcd: disconnect device [ 222.692039][T29525] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9318'. [ 222.796531][T29535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9323'. [ 222.870712][T29549] loop6: detected capacity change from 0 to 2640 [ 222.876599][T29549] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.879241][T29549] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.882235][T29549] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.884923][T29549] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.887531][T29549] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.890158][T29549] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.893224][T29549] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.896603][T29549] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.899249][T29549] ldm_validate_partition_table(): Disk read failed. [ 222.901478][T29549] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.904123][T29549] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.906727][T29549] Dev loop6: unable to read RDB block 0 [ 222.908723][T29549] loop6: unable to read partition table [ 222.910677][T29549] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 223.031154][T29568] program syz.4.9336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.157431][ T40] audit: type=1400 audit(213.767:49254): avc: denied { write } for pid=29585 comm="syz.2.9343" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 223.182779][ T40] audit: type=1400 audit(213.795:49255): avc: denied { watch watch_reads } for pid=29590 comm="syz.0.9345" path="pipe:[76752]" dev="pipefs" ino=76752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 223.210840][T29593] tmpfs: Cannot change global quota limit on remount [ 223.235751][T29601] netlink: 'syz.2.9349': attribute type 1 has an invalid length. [ 223.268754][ T40] audit: type=1400 audit(213.870:49256): avc: denied { append } for pid=29606 comm="syz.0.9352" name="pfkey" dev="proc" ino=4026533602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 223.438402][ C1] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 223.442502][ C1] sr 2:0:0:0: [sr0] tag#1 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 223.533062][T29614] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 223.842846][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9382'. [ 223.846582][T29680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9382'. [ 223.850233][T29680] netlink: 'syz.4.9382': attribute type 11 has an invalid length. [ 223.856472][T29680] netlink: 'syz.4.9382': attribute type 13 has an invalid length. [ 223.971197][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 224.011001][T29699] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 224.015378][T29699] overlayfs: missing 'lowerdir' [ 224.130937][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 224.134879][ T9] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 224.137524][ T9] usb 7-1: config 0 has no interface number 0 [ 224.141105][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 224.144506][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.147208][ T9] usb 7-1: Product: syz [ 224.148762][ T9] usb 7-1: Manufacturer: syz [ 224.150449][ T9] usb 7-1: SerialNumber: syz [ 224.153381][ T9] usb 7-1: config 0 descriptor?? [ 224.156937][ T9] smsc95xx v2.0.0 [ 224.195217][ T841] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 224.360643][ T841] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 224.364514][ T841] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 224.368303][ T841] usb 9-1: Product: syz [ 224.370122][ T841] usb 9-1: Manufacturer: syz [ 224.372060][ T841] usb 9-1: SerialNumber: syz [ 224.376373][ T841] usb 9-1: config 0 descriptor?? [ 224.381974][ T841] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 224.385156][ T841] dvb-usb: bulk message failed: -22 (2/0) [ 224.392477][ T841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.397872][ T841] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 224.401598][ T841] usb 9-1: media controller created [ 224.417410][ T841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.438332][T29722] fuse: Invalid rootmode [ 224.602099][T29692] cxusb: i2c wr: len=79 is too big! [ 224.602099][T29692] [ 224.606348][ T841] cxusb: set interface failed [ 224.608225][ T841] dvb-usb: bulk message failed: -22 (1/0) [ 224.623729][T29734] bridge0: entered promiscuous mode [ 224.626410][T29734] macsec1: entered promiscuous mode [ 224.631400][ T841] DVB: Unable to find symbol mt352_attach() [ 224.634538][ T841] dvb-usb: bulk message failed: -22 (5/0) [ 224.637230][ T841] zl10353_read_register: readreg error (reg=127, ret==-121) [ 224.640011][ T841] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 224.687662][ T841] rc_core: IR keymap rc-dvico-mce not found [ 224.690058][ T841] Registered IR keymap rc-empty [ 224.693307][ T841] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 224.700910][ T841] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input28 [ 224.706810][ T841] dvb-usb: schedule remote query interval to 100 msecs. [ 224.713020][ T841] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 224.718415][ T841] usb 9-1: USB disconnect, device number 8 [ 224.838078][T29760] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9407'. [ 224.858718][ T841] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 224.917915][T29772] nbd: must specify a size in bytes for the device [ 225.074473][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 225.074484][ T40] audit: type=1400 audit(215.563:49259): avc: denied { mount } for pid=29789 comm="syz.1.9418" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 225.093258][ T40] audit: type=1400 audit(215.572:49260): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 225.103304][T29793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9419'. [ 225.173379][T29799] netlink: 312 bytes leftover after parsing attributes in process `syz.4.9422'. [ 225.183336][T29801] vim2m vim2m.0: vidioc_s_fmt queue busy [ 225.212171][T29805] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9425'. [ 225.359748][T29814] program syz.1.9429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.464645][T29831] support for the xor transformation has been removed. [ 225.513729][ T54] hid-generic 0362:07FF:7FFFFFFF.0007: item fetching failed at offset 0/2 [ 225.517719][ T54] hid-generic 0362:07FF:7FFFFFFF.0007: probe with driver hid-generic failed with error -22 [ 225.686650][T29856] comedi comedi3: rti800: I/O port conflict (0x4f27,16) [ 225.969138][T29881] FAT-fs (nullb0): bogus number of reserved sectors [ 225.972116][T29881] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 226.059361][T29890] IPVS: Error during creation of socket; terminating [ 226.584474][T29937] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 226.797388][T29959] netlink: zone id is out of range [ 226.799598][T29959] netlink: zone id is out of range [ 226.802124][T29959] netlink: set zone limit has 8 unknown bytes [ 226.843160][ T40] audit: type=1400 audit(217.209:49261): avc: denied { getopt } for pid=29962 comm="syz.1.9494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.909602][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 226.913441][ T9] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 226.918702][ T9] usb 7-1: USB disconnect, device number 18 [ 226.961333][T29988] usb usb9: usbfs: process 29988 (syz.1.9502) did not claim interface 0 before use [ 227.011668][T29997] usb usb9: usbfs: process 29997 (syz.4.9508) did not claim interface 33 before use [ 227.140386][T30018] [U] v3f"S/4:XTzWtlW= [ 227.142546][T30018] [U] J"e:" [ 227.201088][T30026] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 227.475540][T30040] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 227.497193][ T1339] vhci_hcd: vhci_device speed not set [ 227.727798][T30074] nbd: socks must be embedded in a SOCK_ITEM attr [ 227.771799][T30082] xt_hashlimit: size too large, truncated to 1048576 [ 227.786564][T30084] ipvlan2: entered allmulticast mode [ 227.789983][T30084] team0: entered allmulticast mode [ 227.791684][T30084] team_slave_0: entered allmulticast mode [ 227.793494][T30084] team_slave_1: entered allmulticast mode [ 227.795325][T30084] dummy0: entered allmulticast mode [ 227.797511][T30084] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 227.827486][T30091] xt_HMARK: spi-set and port-set can't be combined [ 227.910576][T30100] autofs: Bad value for 'fd' [ 228.077127][T30128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 228.099166][ T40] audit: type=1400 audit(218.396:49262): avc: denied { read } for pid=30129 comm="syz.1.9567" path="socket:[80307]" dev="sockfs" ino=80307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.104984][T30135] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 228.107318][ T40] audit: type=1400 audit(218.396:49263): avc: denied { bind } for pid=30133 comm="syz.4.9568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.111517][T30135] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 228.122338][T30135] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 228.176928][T30149] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9576'. [ 228.243540][ T40] audit: type=1400 audit(218.527:49264): avc: denied { write } for pid=30163 comm="syz.1.9583" name="file0" dev="tmpfs" ino=12719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 228.254945][ T40] audit: type=1400 audit(218.527:49265): avc: denied { open } for pid=30163 comm="syz.1.9583" path="/2523/file0" dev="tmpfs" ino=12719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 228.358977][ T40] audit: type=1800 audit(218.630:49266): pid=30177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.9588" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 228.410280][T30185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9592'. [ 228.413919][T30185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9592'. [ 228.416929][T30185] netlink: 'syz.0.9592': attribute type 12 has an invalid length. [ 228.450814][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 228.586823][T30204] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 228.592563][ T40] audit: type=1400 audit(218.855:49267): avc: denied { egress } for pid=30203 comm="syz.2.9600" saddr=fc01:: daddr=ff02::1 dest=3618 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 228.604734][ T40] audit: type=1400 audit(218.855:49268): avc: denied { sendto } for pid=30203 comm="syz.2.9600" saddr=fc01:: daddr=ff02::1 dest=3618 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 228.619594][T30211] netlink: 182 bytes leftover after parsing attributes in process `syz.2.9602'. [ 228.634282][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.638045][ T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 228.642257][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.648036][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 228.654720][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 228.666178][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.670038][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.673392][ T9] usb 9-1: Product: syz [ 228.675933][ T9] usb 9-1: Manufacturer: syz [ 228.682440][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 228.684287][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 228.687676][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 228.690117][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 228.906225][ T1339] usb 9-1: USB disconnect, device number 9 [ 229.141580][T30289] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 229.144113][T30289] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 229.146810][T30289] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 229.335793][ T54] kernel read not supported for file /vbi2 (pid: 54 comm: kworker/2:1) [ 229.440148][T30320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9642'. [ 229.473769][T30327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9644'. [ 229.624164][T30339] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 229.887781][T30363] bridge0: port 3(syz_tun) entered disabled state [ 229.891340][T30363] syz_tun: refused to change device tx_queue_len [ 229.940566][T30371] IPVS: Error during creation of socket; terminating [ 230.028427][T30392] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 230.048021][T30394] syz_tun: refused to change device tx_queue_len [ 230.120861][T30403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.480915][T30431] netlink: 'syz.1.9689': attribute type 6 has an invalid length. [ 230.981573][T30456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9699'. [ 231.081573][T30458] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 231.190019][T30472] smc: net device bond0 applied user defined pnetid SYZ2 [ 231.451264][T30510] program syz.1.9728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.473920][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 231.473934][ T40] audit: type=1400 audit(221.539:49274): avc: denied { write } for pid=30514 comm="syz.2.9724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.630237][T30545] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9739'. [ 231.711855][T30561] netlink: 'syz.4.9744': attribute type 1 has an invalid length. [ 231.830157][T30569] mkiss: ax0: crc mode is auto. [ 233.020946][T30637] bridge0: entered promiscuous mode [ 233.023103][T30637] macsec1: entered promiscuous mode [ 233.084016][T30649] mkiss: ax0: crc mode is auto. [ 233.091626][ T40] audit: type=1400 audit(223.063:49275): avc: denied { listen } for pid=30655 comm="syz.4.9782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 233.370577][T30670] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 233.410859][T30697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.519460][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 233.567252][T30719] devpts: Bad value for 'max' [ 233.571640][T30721] nbd: must specify a size in bytes for the device [ 233.679422][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 233.683528][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 233.690427][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.693708][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.696367][ T9] usb 7-1: Product: syz [ 233.697937][ T9] usb 7-1: Manufacturer: syz [ 233.699474][ T9] usb 7-1: SerialNumber: syz [ 233.704898][ T9] usb 7-1: config 0 descriptor?? [ 233.708125][T30682] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.716364][T30740] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9818'. [ 233.722111][T30742] netlink: 'syz.1.9820': attribute type 1 has an invalid length. [ 233.724609][T30742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.897739][ T40] audit: type=1400 audit(223.811:49276): avc: denied { read } for pid=30768 comm="syz.0.9830" name="file0" dev="tmpfs" ino=12629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 233.907347][ T40] audit: type=1400 audit(223.811:49277): avc: denied { open } for pid=30768 comm="syz.0.9830" path="/2507/file0" dev="tmpfs" ino=12629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 233.917437][ T40] audit: type=1400 audit(223.811:49278): avc: denied { ioctl } for pid=30768 comm="syz.0.9830" path="/2507/file0" dev="tmpfs" ino=12629 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 233.931286][ T1339] usb 7-1: USB disconnect, device number 19 [ 233.957136][T30783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9832'. [ 233.990027][T30787] support for the xor transformation has been removed. [ 234.020208][ T9] hid-generic 0362:07FF:7FFFFFFF.0008: item fetching failed at offset 0/2 [ 234.023484][ T9] hid-generic 0362:07FF:7FFFFFFF.0008: probe with driver hid-generic failed with error -22 [ 234.541639][T30813] netlink: 312 bytes leftover after parsing attributes in process `syz.0.9841'. [ 234.596441][T30824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.770057][ T1339] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 234.771170][T30830] mkiss: ax0: crc mode is auto. [ 234.893096][T30841] devpts: Bad value for 'max' [ 234.937694][T30849] netlink: 312 bytes leftover after parsing attributes in process `syz.1.9857'. [ 234.941036][ T1339] usb 9-1: Using ep0 maxpacket: 32 [ 234.945476][ T1339] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 234.948071][ T1339] usb 9-1: config 0 has no interface number 0 [ 234.952194][ T1339] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 234.955746][ T1339] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.976980][ T1339] usb 9-1: Product: syz [ 234.978513][ T1339] usb 9-1: Manufacturer: syz [ 234.980181][ T1339] usb 9-1: SerialNumber: syz [ 234.983145][ T1339] usb 9-1: config 0 descriptor?? [ 234.993625][ T1339] smsc95xx v2.0.0 [ 235.285503][T30901] IPVS: Unknown mcast interface: bridge_slave_0 [ 235.331294][T30907] vlan2: entered promiscuous mode [ 235.333406][T30907] syz_tun: entered promiscuous mode [ 235.589569][ T40] audit: type=1400 audit(225.392:49279): avc: denied { mounton } for pid=30925 comm="syz.0.9889" path="/2529/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 235.599673][ T40] audit: type=1400 audit(225.392:49280): avc: denied { mount } for pid=30925 comm="syz.0.9889" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.609784][ T40] audit: type=1400 audit(225.411:49281): avc: denied { unmount } for pid=5959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.644296][T30933] IPVS: Error during creation of socket; terminating [ 235.757197][T30944] nvme_fabrics: missing parameter 'transport=%s' [ 235.759761][T30944] nvme_fabrics: missing parameter 'nqn=%s' [ 235.969135][ T34] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 236.131452][ T34] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.134762][ T34] usb 5-1: config 0 has no interface number 0 [ 236.137370][ T34] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 236.141457][ T34] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 236.144823][ T34] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 236.147608][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.152568][ T34] usb 5-1: config 0 descriptor?? [ 236.154735][T30937] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.160878][ T34] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 236.447540][ T841] usb 5-1: USB disconnect, device number 11 [ 237.018128][T30976] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 237.527634][ T40] audit: type=1400 audit(227.206:49282): avc: denied { getopt } for pid=31039 comm="syz.0.9933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 237.658012][ T40] audit: type=1400 audit(227.337:49283): avc: denied { write } for pid=31060 comm="syz.0.9940" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 237.696618][ T40] audit: type=1400 audit(227.365:49284): avc: denied { write } for pid=31066 comm="syz.1.9936" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 237.696630][T31067] random: crng reseeded on system resumption [ 237.741956][ T1339] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 237.761394][ T1339] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 237.775245][T31078] Restarting kernel threads ... [ 237.778123][T31078] Done restarting kernel threads. [ 237.780621][ T1339] usb 9-1: USB disconnect, device number 10 [ 237.800114][T31082] lo: MTU too low for tipc bearer [ 237.802545][T31082] tipc: Enabling of bearer rejected, failed to enable media [ 237.916222][ T40] audit: type=1400 audit(227.571:49285): avc: denied { name_connect } for pid=31104 comm="syz.0.9957" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 237.941924][ T40] audit: type=1400 audit(227.590:49286): avc: denied { connect } for pid=31108 comm="syz.1.9958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.970034][ T40] audit: type=1400 audit(227.627:49287): avc: denied { shutdown } for pid=31104 comm="syz.0.9957" lport=34736 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.012933][T31116] tipc: Enabling not permitted [ 238.015351][T31116] tipc: Enabling of bearer rejected, failed to enable media [ 238.091136][T31128] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9966'. [ 238.110716][ T40] audit: type=1400 audit(227.749:49288): avc: denied { listen } for pid=31131 comm="syz.0.9968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 238.119845][ T40] audit: type=1400 audit(227.749:49289): avc: denied { accept } for pid=31131 comm="syz.0.9968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 238.142109][T31136] gfs2: path_lookup on 6(+dQnB!eUV!`: 8DSE y|YT{-,mb/ returned error -2 [ 238.326653][ T40] audit: type=1400 audit(227.954:49290): avc: denied { read } for pid=31154 comm="syz.2.9979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 238.373090][T31160] vlan1: entered promiscuous mode [ 238.373612][T31161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9981'. [ 238.565556][T31181] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 238.569264][T31181] overlayfs: missing 'lowerdir' [ 238.706553][T31199] delete_channel: no stack [ 238.733269][T31202] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 238.847694][ T40] audit: type=1400 audit(228.441:49291): avc: denied { accept } for pid=31208 comm="syz.2.10003" lport=57972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.933145][T31219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10007'. [ 239.200419][T31259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10027'. [ 239.338341][T31279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10042'. [ 239.400037][ T54] hid_parser_main: 54 callbacks suppressed [ 239.400056][ T54] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 239.407227][ T54] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 239.413313][ T54] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 239.416417][ T54] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 239.419418][ T54] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 239.428000][ T54] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 239.431587][ T54] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 239.434871][ T54] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 239.437836][ T54] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 239.441057][ T54] hid-generic 0005:00B6:0009.0009: unknown main item tag 0x0 [ 239.495405][T31279] hsr_slave_1 (unregistering): left promiscuous mode [ 239.495988][ T54] hid-generic 0005:00B6:0009.0009: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 239.535787][T31297] fido_id[31297]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 239.705661][T31331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10056'. [ 239.814277][T31349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.115219][T31385] tipc: Started in network mode [ 240.118598][T31385] tipc: Node identity , cluster identity 4711 [ 240.121303][T31385] tipc: Failed to set node id, please configure manually [ 240.122287][ T54] hid-generic 0005:00B6:0009.000A: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 240.124434][T31385] tipc: Enabling of bearer rejected, failed to enable media [ 240.166719][T31395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10081'. [ 240.176764][T31391] fido_id[31391]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 240.298805][T31395] hsr_slave_1 (unregistering): left promiscuous mode [ 240.305705][T31403] Failed to initialize the IGMP autojoin socket (err -2) [ 240.440118][T31419] netlink: 'syz.0.10088': attribute type 21 has an invalid length. [ 240.443576][T31419] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10088'. [ 240.448258][T31419] netlink: 'syz.0.10088': attribute type 4 has an invalid length. [ 240.451948][T31419] netlink: 'syz.0.10088': attribute type 3 has an invalid length. [ 240.455816][T31419] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10088'. [ 240.570571][T31432] tipc: Started in network mode [ 240.572743][T31432] tipc: Node identity , cluster identity 6 [ 240.575345][T31432] tipc: Failed to set node id, please configure manually [ 240.578728][T31432] tipc: Enabling of bearer rejected, failed to enable media [ 240.920278][T31537] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.10116' resets device [ 241.373907][T31594] xt_l2tp: v2 tid > 0xffff: 16462212 [ 241.664964][T31635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10161'. [ 241.669321][T31635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10161'. [ 242.337571][T31732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10202'. [ 242.342442][T31732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10202'. [ 242.387373][T31737] program syz.2.10204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.426298][T31843] program syz.2.10246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.572659][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 243.572704][ T40] audit: type=1400 audit(232.865:49307): avc: denied { mount } for pid=31862 comm="syz.0.10254" name="/" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 243.585709][ T40] audit: type=1400 audit(232.865:49308): avc: denied { write } for pid=31862 comm="syz.0.10254" name="/" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.596329][ T40] audit: type=1400 audit(232.874:49309): avc: denied { unmount } for pid=5959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 243.616750][T31873] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 40 [ 243.963829][T31902] netlink: 'syz.0.10270': attribute type 1 has an invalid length. [ 243.968208][T31902] netlink: 'syz.0.10270': attribute type 3 has an invalid length. [ 243.971530][T31902] netlink: 212 bytes leftover after parsing attributes in process `syz.0.10270'. [ 244.126305][T31912] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 244.128605][T31912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 244.132805][T31912] vhci_hcd vhci_hcd.0: Device attached [ 244.197220][T31930] netlink: 'syz.2.10281': attribute type 1 has an invalid length. [ 244.199827][T31930] netlink: 'syz.2.10281': attribute type 3 has an invalid length. [ 244.203172][T31930] netlink: 212 bytes leftover after parsing attributes in process `syz.2.10281'. [ 244.242637][T31936] program syz.4.10284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.383062][ T55] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 244.393685][ T34] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 244.452453][T31950] program syz.4.10290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.567375][ T34] usb 5-1: config 0 has no interfaces? [ 244.569788][ T34] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.573585][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.581110][ T34] usb 5-1: config 0 descriptor?? [ 244.799399][T31913] usbip_core: unknown command [ 244.800526][ T34] usb 5-1: USB disconnect, device number 12 [ 244.800961][T31913] vhci_hcd: unknown pdu 0 [ 244.800969][T31913] usbip_core: unknown command [ 244.809199][ T12] vhci_hcd: stop threads [ 244.811212][ T12] vhci_hcd: release socket [ 244.813268][ T12] vhci_hcd: disconnect device [ 244.874893][ T55] vhci_hcd: vhci_device speed not set [ 245.297863][ T40] audit: type=1400 audit(234.473:49310): avc: denied { execheap } for pid=31979 comm="syz.4.10298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 245.355728][ T6050] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 245.538461][ T6050] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.542033][ T6050] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.545427][ T6050] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.554760][ T6050] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.561538][T31975] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.567839][ T6050] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.811731][ T9] usb 7-1: USB disconnect, device number 20 [ 245.874018][T32076] PKCS8: Unsupported PKCS#8 version [ 245.886745][ T40] audit: type=1400 audit(235.025:49311): avc: denied { listen } for pid=32077 comm="syz.0.10328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 245.960862][T32090] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 245.967194][ T40] audit: type=1400 audit(235.100:49312): avc: denied { relabelto } for pid=32089 comm="syz.0.10332" name="cpu.stat" dev="tmpfs" ino=13271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 245.978806][ T40] audit: type=1400 audit(235.100:49313): avc: denied { associate } for pid=32089 comm="syz.0.10332" name="cpu.stat" dev="tmpfs" ino=13271 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 245.989540][ T40] audit: type=1400 audit(235.100:49314): avc: denied { append } for pid=32089 comm="syz.0.10332" path="/2633/cpu.stat" dev="tmpfs" ino=13271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 246.007671][ T40] audit: type=1400 audit(235.128:49315): avc: denied { unlink } for pid=5959 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=13271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 246.022178][ T40] audit: type=1400 audit(235.156:49316): avc: denied { read } for pid=32091 comm="syz.1.10334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.425677][T32113] PKCS8: Unsupported PKCS#8 version [ 246.567008][T32125] blktrace: Concurrent blktraces are not allowed on sg0 [ 246.805313][T32135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10352'. [ 246.809286][T32135] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10352'. [ 247.163022][ T960] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 247.322983][ T960] usb 6-1: Using ep0 maxpacket: 32 [ 247.326348][ T960] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 247.329180][ T960] usb 6-1: config 0 has no interface number 0 [ 247.332741][ T960] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 247.336900][ T960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.339467][ T960] usb 6-1: Product: syz [ 247.340928][ T960] usb 6-1: Manufacturer: syz [ 247.342705][ T960] usb 6-1: SerialNumber: syz [ 247.346750][ T960] usb 6-1: config 0 descriptor?? [ 247.349998][ T960] smsc95xx v2.0.0 [ 247.426711][T32191] netlink: 'syz.0.10374': attribute type 11 has an invalid length. [ 247.709858][T32218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.388932][T32247] netlink: 'syz.2.10397': attribute type 6 has an invalid length. [ 249.393162][T32247] netlink: 'syz.2.10397': attribute type 6 has an invalid length. [ 249.522674][T32254] netlink: 'syz.2.10400': attribute type 11 has an invalid length. [ 249.983281][T32282] netlink: 'syz.2.10414': attribute type 1 has an invalid length. [ 249.987606][T32282] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10414'. [ 250.036522][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 250.036538][ T40] audit: type=1400 audit(238.906:49319): avc: denied { setopt } for pid=32283 comm="syz.2.10415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.151188][ T960] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 250.157049][ T960] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 250.162724][ T960] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 250.164228][T32291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10418'. [ 250.170214][ T960] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 250.182911][ T960] usb 6-1: USB disconnect, device number 10 [ 250.305221][T32317] sp0: Synchronizing with TNC [ 250.342988][T32327] netlink: 536 bytes leftover after parsing attributes in process `syz.2.10429'. [ 250.346883][T32327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10429'. [ 250.388794][T32329] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 250.429194][T32341] loop4: detected capacity change from 0 to 524255232 [ 250.608932][T32375] netlink: 'syz.0.10447': attribute type 6 has an invalid length. [ 250.613272][T32375] netlink: 'syz.0.10447': attribute type 6 has an invalid length. [ 250.660298][T32380] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 250.869991][T32415] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 250.989931][T32426] tmpfs: Too few inodes for current use [ 250.995127][ T40] audit: type=1326 audit(239.804:49320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32425 comm="syz.4.10466" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf2bb8efc9 code=0x0 [ 251.050075][ T40] audit: type=1400 audit(239.851:49321): avc: denied { connect } for pid=32435 comm="syz.0.10470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 251.058988][ T40] audit: type=1400 audit(239.851:49322): avc: denied { ioctl } for pid=32435 comm="syz.0.10470" path="socket:[86539]" dev="sockfs" ino=86539 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 251.116078][ T40] audit: type=1400 audit(239.916:49323): avc: denied { ioctl } for pid=32444 comm="syz.0.10472" path="socket:[85914]" dev="sockfs" ino=85914 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.148320][T32447] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 251.409876][ T40] audit: type=1400 audit(240.197:49324): avc: denied { map } for pid=32477 comm="syz.2.10488" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.418897][ T40] audit: type=1400 audit(240.197:49325): avc: denied { write execute } for pid=32477 comm="syz.2.10488" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.466708][T32482] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 251.528843][T32490] tmpfs: Too few inodes for current use [ 251.644559][T32500] Failed to initialize the IGMP autojoin socket (err -2) [ 252.095961][T32544] sp0: Synchronizing with TNC [ 252.101644][T32544] sp0: Found TNC [ 252.106429][T32543] [U] ` [ 252.220824][ T960] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 252.334543][T32567] program syz.0.10519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.382985][ T960] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.387372][ T960] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 252.394340][ T960] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 252.398696][ T960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.405530][ T960] usb 9-1: config 0 descriptor?? [ 252.410480][ T960] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 252.414019][ T960] dvb-usb: bulk message failed: -22 (3/0) [ 252.418868][ T960] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 252.422941][ T960] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 252.427216][ T960] usb 9-1: media controller created [ 252.430890][ T960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.441218][ T960] dvb-usb: bulk message failed: -22 (6/0) [ 252.443322][ T960] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 252.450976][ T960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input29 [ 252.458599][ T960] dvb-usb: schedule remote query interval to 150 msecs. [ 252.461128][ T960] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 252.630450][T32529] dvb-usb: bulk message failed: -22 (4/0) [ 252.634024][ T960] dvb-usb: bulk message failed: -22 (1/0) [ 252.636364][ T1339] usb 9-1: USB disconnect, device number 11 [ 252.636663][ T960] dvb-usb: error while querying for an remote control event. [ 252.749788][ T1339] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 252.754884][T32613] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 252.930975][ T40] audit: type=1400 audit(241.609:49326): avc: denied { create } for pid=32627 comm="syz.0.10534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 252.939343][ T40] audit: type=1400 audit(241.609:49327): avc: denied { ioctl } for pid=32627 comm="syz.0.10534" path="socket:[88067]" dev="sockfs" ino=88067 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 253.213015][T32655] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=32655 comm=syz.0.10544 [ 253.322265][T32677] sp0: Synchronizing with TNC [ 253.329353][T32677] sp0: Found TNC [ 253.331019][T32675] [U] ` [ 253.483110][T32704] program syz.2.10561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.709261][T32748] sp0: Synchronizing with TNC [ 253.726424][T32747] [U] ` [ 253.750366][T32764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10589'. [ 253.901522][ T322] program syz.4.10600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.943160][ T327] comedi comedi3: c6xdigio: I/O port conflict (0x4f27,3) [ 253.946136][ T327] ================================================================== [ 253.949454][ T327] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 253.952307][ T327] Read of size 8 at addr ffff888057a58230 by task syz.4.10602/327 [ 253.955446][ T327] [ 253.957042][ T327] CPU: 1 UID: 0 PID: 327 Comm: syz.4.10602 Not tainted syzkaller #0 PREEMPT(full) [ 253.957058][ T327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.957065][ T327] Call Trace: [ 253.957071][ T327] [ 253.957076][ T327] dump_stack_lvl+0x116/0x1f0 [ 253.957095][ T327] print_report+0xcd/0x630 [ 253.957108][ T327] ? __virt_addr_valid+0x81/0x610 [ 253.957123][ T327] ? __phys_addr+0xe8/0x180 [ 253.957138][ T327] ? sysfs_remove_file_ns+0x63/0x70 [ 253.957149][ T327] kasan_report+0xe0/0x110 [ 253.957161][ T327] ? sysfs_remove_file_ns+0x63/0x70 [ 253.957174][ T327] sysfs_remove_file_ns+0x63/0x70 [ 253.957185][ T327] driver_remove_file+0x4a/0x60 [ 253.957197][ T327] bus_remove_driver+0x224/0x2c0 [ 253.957213][ T327] driver_unregister+0x76/0xb0 [ 253.957223][ T327] comedi_device_detach_locked+0x12f/0xa50 [ 253.957238][ T327] comedi_device_detach+0x67/0xb0 [ 253.957249][ T327] comedi_device_attach+0x43d/0x900 [ 253.957262][ T327] do_devconfig_ioctl+0x1b1/0x710 [ 253.957278][ T327] ? __mutex_lock+0x1c5/0x1060 [ 253.957288][ T327] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 253.957306][ T327] ? find_held_lock+0x2b/0x80 [ 253.957320][ T327] comedi_unlocked_ioctl+0x165d/0x2f00 [ 253.957331][ T327] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 253.957342][ T327] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 253.957356][ T327] ? do_vfs_ioctl+0x128/0x14f0 [ 253.957370][ T327] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 253.957383][ T327] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 253.957398][ T327] ? hook_file_ioctl_common+0x145/0x410 [ 253.957413][ T327] ? selinux_file_ioctl+0x180/0x270 [ 253.957423][ T327] ? selinux_file_ioctl+0xb4/0x270 [ 253.957433][ T327] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 253.957443][ T327] __x64_sys_ioctl+0x18e/0x210 [ 253.957457][ T327] do_syscall_64+0xcd/0xfa0 [ 253.957472][ T327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.957483][ T327] RIP: 0033:0x7fbf2bb8efc9 [ 253.957498][ T327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.957510][ T327] RSP: 002b:00007fbf2c9ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.957521][ T327] RAX: ffffffffffffffda RBX: 00007fbf2bde5fa0 RCX: 00007fbf2bb8efc9 [ 253.957528][ T327] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 253.957535][ T327] RBP: 00007fbf2bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 253.957541][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.957547][ T327] R13: 00007fbf2bde6038 R14: 00007fbf2bde5fa0 R15: 00007fff64543938 [ 253.957558][ T327] [ 253.957562][ T327] [ 254.058060][ T327] Allocated by task 5959: [ 254.059907][ T327] kasan_save_stack+0x33/0x60 [ 254.061926][ T327] kasan_save_track+0x14/0x30 [ 254.063896][ T327] __kasan_kmalloc+0xaa/0xb0 [ 254.065804][ T327] __kmalloc_noprof+0x32f/0x880 [ 254.067775][ T327] security_inode_init_security+0x13f/0x390 [ 254.070244][ T327] shmem_mknod+0x22e/0x450 [ 254.072034][ T327] shmem_mkdir+0x31/0x80 [ 254.073754][ T327] vfs_mkdir+0x593/0x8c0 [ 254.075103][ T327] do_mkdirat+0x304/0x3e0 [ 254.076892][ T327] __x64_sys_mkdirat+0x83/0xb0 [ 254.078744][ T327] do_syscall_64+0xcd/0xfa0 [ 254.080708][ T327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.083132][ T327] [ 254.084153][ T327] Freed by task 5959: [ 254.085772][ T327] kasan_save_stack+0x33/0x60 [ 254.087696][ T327] kasan_save_track+0x14/0x30 [ 254.089714][ T327] __kasan_save_free_info+0x3b/0x60 [ 254.091915][ T327] __kasan_slab_free+0x5f/0x80 [ 254.093984][ T327] kfree+0x2b8/0x6d0 [ 254.095588][ T327] security_inode_init_security+0x2eb/0x390 [ 254.097977][ T327] shmem_mknod+0x22e/0x450 [ 254.099691][ T327] shmem_mkdir+0x31/0x80 [ 254.101464][ T327] vfs_mkdir+0x593/0x8c0 [ 254.103242][ T327] do_mkdirat+0x304/0x3e0 [ 254.105104][ T327] __x64_sys_mkdirat+0x83/0xb0 [ 254.107142][ T327] do_syscall_64+0xcd/0xfa0 [ 254.109081][ T327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.111648][ T327] [ 254.112707][ T327] The buggy address belongs to the object at ffff888057a58200 [ 254.112707][ T327] which belongs to the cache kmalloc-256 of size 256 [ 254.118496][ T327] The buggy address is located 48 bytes inside of [ 254.118496][ T327] freed 256-byte region [ffff888057a58200, ffff888057a58300) [ 254.123914][ T327] [ 254.124925][ T327] The buggy address belongs to the physical page: [ 254.127582][ T327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57a58 [ 254.131183][ T327] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 254.134202][ T327] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 254.137317][ T327] page_type: f5(slab) [ 254.138973][ T327] raw: 00fff00000000040 ffff88801b442b40 dead000000000100 dead000000000122 [ 254.141873][ T327] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 254.144721][ T327] head: 00fff00000000040 ffff88801b442b40 dead000000000100 dead000000000122 [ 254.147555][ T327] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 254.151167][ T327] head: 00fff00000000001 ffffea00015e9601 00000000ffffffff 00000000ffffffff [ 254.154540][ T327] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 254.157687][ T327] page dumped because: kasan: bad access detected [ 254.160489][ T327] page_owner tracks the page as allocated [ 254.162914][ T327] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 8885, tgid 8884 (syz.0.1409), ts 81750102894, free_ts 81134648254 [ 254.170569][ T327] post_alloc_hook+0x1c0/0x230 [ 254.172066][ T327] get_page_from_freelist+0x10a3/0x3a30 [ 254.173932][ T327] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 254.175923][ T327] new_slab+0xa5/0x360 [ 254.177324][ T327] ___slab_alloc+0xdae/0x1a60 [ 254.179168][ T327] __slab_alloc.constprop.0+0x63/0x110 [ 254.181058][ T327] __kmalloc_node_noprof+0x4dd/0x8a0 [ 254.182730][ T327] alloc_slab_obj_exts+0x43/0xf0 [ 254.184321][ T327] new_slab+0x283/0x360 [ 254.185923][ T327] ___slab_alloc+0xdae/0x1a60 [ 254.187935][ T327] __slab_alloc.constprop.0+0x63/0x110 [ 254.190261][ T327] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 254.193128][ T327] krealloc_node_align_noprof+0x1b6/0x470 [ 254.195710][ T327] push_jmp_history+0x305/0x7a0 [ 254.197429][ T327] do_check_common+0xd8d/0xb550 [ 254.198988][ T327] bpf_check+0x8375/0xb710 [ 254.200802][ T327] page last free pid 15 tgid 15 stack trace: [ 254.203257][ T327] __free_frozen_pages+0x7df/0x1160 [ 254.205531][ T327] rcu_core+0x79c/0x1530 [ 254.207102][ T327] handle_softirqs+0x219/0x8e0 [ 254.208630][ T327] run_ksoftirqd+0x3a/0x60 [ 254.210078][ T327] smpboot_thread_fn+0x3f7/0xae0 [ 254.212146][ T327] kthread+0x3c5/0x780 [ 254.213858][ T327] ret_from_fork+0x675/0x7d0 [ 254.215819][ T327] ret_from_fork_asm+0x1a/0x30 [ 254.217851][ T327] [ 254.218864][ T327] Memory state around the buggy address: [ 254.221113][ T327] ffff888057a58100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.224455][ T327] ffff888057a58180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.227792][ T327] >ffff888057a58200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.231147][ T327] ^ [ 254.233512][ T327] ffff888057a58280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.236881][ T327] ffff888057a58300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.240063][ T327] ================================================================== [ 254.247890][ T327] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 254.250600][ T327] CPU: 0 UID: 0 PID: 327 Comm: syz.4.10602 Not tainted syzkaller #0 PREEMPT(full) [ 254.254370][ T327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.258266][ T327] Call Trace: [ 254.259660][ T327] [ 254.260908][ T327] dump_stack_lvl+0x3d/0x1f0 [ 254.262682][ T327] vpanic+0x640/0x6f0 [ 254.264044][ T327] panic+0xca/0xd0 [ 254.265645][ T327] ? __pfx_panic+0x10/0x10 [ 254.267479][ T327] ? sysfs_remove_file_ns+0x63/0x70 [ 254.269520][ T327] ? preempt_schedule_common+0x44/0xc0 [ 254.271480][ T327] ? preempt_schedule_thunk+0x16/0x30 [ 254.273777][ T327] check_panic_on_warn+0xab/0xb0 [ 254.275601][ T327] end_report+0x107/0x170 [ 254.277147][ T327] kasan_report+0xee/0x110 [ 254.279066][ T327] ? sysfs_remove_file_ns+0x63/0x70 [ 254.281188][ T327] sysfs_remove_file_ns+0x63/0x70 [ 254.282899][ T327] driver_remove_file+0x4a/0x60 [ 254.284850][ T327] bus_remove_driver+0x224/0x2c0 [ 254.286887][ T327] driver_unregister+0x76/0xb0 [ 254.288820][ T327] comedi_device_detach_locked+0x12f/0xa50 [ 254.290848][ T327] comedi_device_detach+0x67/0xb0 [ 254.292921][ T327] comedi_device_attach+0x43d/0x900 [ 254.295022][ T327] do_devconfig_ioctl+0x1b1/0x710 [ 254.296732][ T327] ? __mutex_lock+0x1c5/0x1060 [ 254.298704][ T327] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 254.300989][ T327] ? find_held_lock+0x2b/0x80 [ 254.302569][ T327] comedi_unlocked_ioctl+0x165d/0x2f00 [ 254.304763][ T327] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 254.307204][ T327] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.309197][ T327] ? do_vfs_ioctl+0x128/0x14f0 [ 254.311136][ T327] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 254.313211][ T327] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 254.315558][ T327] ? hook_file_ioctl_common+0x145/0x410 [ 254.317856][ T327] ? selinux_file_ioctl+0x180/0x270 [ 254.319987][ T327] ? selinux_file_ioctl+0xb4/0x270 [ 254.321811][ T327] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 254.324034][ T327] __x64_sys_ioctl+0x18e/0x210 [ 254.326016][ T327] do_syscall_64+0xcd/0xfa0 [ 254.327892][ T327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.329897][ T327] RIP: 0033:0x7fbf2bb8efc9 [ 254.331733][ T327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.339065][ T327] RSP: 002b:00007fbf2c9ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.342439][ T327] RAX: ffffffffffffffda RBX: 00007fbf2bde5fa0 RCX: 00007fbf2bb8efc9 [ 254.345254][ T327] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 254.348456][ T327] RBP: 00007fbf2bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 254.351316][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.354410][ T327] R13: 00007fbf2bde6038 R14: 00007fbf2bde5fa0 R15: 00007fff64543938 [ 254.357462][ T327] [ 254.359298][ T327] Kernel Offset: disabled [ 254.361104][ T327] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:50:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a540320 RCX=ffffffff81b0fed1 RDX=ffff888029c9a480 RSI=ffffffff81b0feab RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004547668 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4a8065 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81b0fead RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555590b11500 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f64e2b156c0 CR3=000000004fd15000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee6a9f950 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7651812fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7651812fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7651812fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7651812ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765181307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f765181315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85295155 RDI=ffffffff9add6740 RBP=ffffffff9add6700 RSP=ffffc900220b73a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000037323354 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9add6700 R15=ffffffff852950f0 RIP=ffffffff8529517f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbf2c9ec6c0 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbf2c9ebf98 CR3=000000005c6bb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000fefcf800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bdb74a8 00007fbf2bdb74a0 00007fbf2bdb7498 00007fbf2bdb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2c91d100 00007fbf2bdb7460 00007fbf2bdb7478 00007fbf2bdb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bdb74b8 00007fbf2bdb74b0 00007fbf2bdb74a8 00007fbf2bdb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000124d61 RBX=0000000000000002 RCX=ffffffff8b6052a9 RDX=0000000000000000 RSI=ffffffff8da2a299 RDI=ffffffff8bf06e40 RBP=ffffed1003b51920 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801da8c900 R14=ffffffff9081f6d0 R15=0000000000000000 RIP=ffffffff8b603d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c2f64dd CR3=000000005503b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fefcf800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff64543cc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2bc1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff91267e98 RDX=0000000000000005 RSI=0000000000000000 RDI=ffffffff909df920 RBP=ffffc900034af768 RSP=ffffc900034af6b0 R8 =ffffffff91267e9e R9 =0000000000000000 R10=0000000000000000 R11=000000000001404d R12=ffffc900034af770 R13=ffffc900034af720 R14=ffffc900034af755 R15=ffffffff91267e9d RIP=ffffffff816c1a3e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555dcd9500 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffa7c82fc8 CR3=000000004e61a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa7c83780 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3ba612fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3ba612fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3ba612fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3ba612ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3ba61307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3ba61315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000