last executing test programs: 4.410089381s ago: executing program 3 (id=1938): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.08122391s ago: executing program 3 (id=1946): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001840)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) read(0xffffffffffffffff, &(0x7f0000000380)=""/167, 0xa7) 3.060225776s ago: executing program 3 (id=1953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) ioctl(r0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0xfffffffffffffe20) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r6, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x0) 3.054942499s ago: executing program 1 (id=1954): recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 2.994519105s ago: executing program 1 (id=1957): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000001a000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, r2, 0x25, 0x6, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002c000000"], 0x14}}, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000021b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000140)={0x100, r9}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x10, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f00000002c0)={0x20, r11}, 0x0) landlock_restrict_self(r10, 0x0) 2.934648205s ago: executing program 2 (id=1959): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1c0401, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, 0x0, 0x0) write(r0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000009b00)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000840)="7d9364ef6f2c48e376ad99d422c8029fc3f94f58f413a4364936bc6b81fc4d10f818694d23ff82ca3d3599ef6a5981a383eff9cadad1a885a771d877d84daf3e7118412a21e833645c92c8413bda62aaf72e2cc0134fb78c7a8571769be4e34f1038fc10", 0x64}, {&(0x7f0000002a80)="ae4a71d4e93fdff788725a933a5cea833b7ec3d9eec71db69febbb3b9b8a06619616b2eadb71f801a1be08bcc8bb62b629278d7e84022f77e78fe23c7667a6e21e0954a00fa86f829c3d757879a3479847687a5eb0ac4fbc2b3e34db1f76113ae4ef7feacc306e1f21ded8b065e08ab7b64b96b90f399e19ed4970f057d3e039e8e1cee575a63b53e7b5b787fdbf6108959d013251b320ed196736", 0x9b}, {&(0x7f0000002b40)="1d96834938d029c781799e2320590967caa1b72d4c118ec5b4ebfd53b9eca61a5c3607bcdfc5cd29efa9aed5293990473aaaeb5a96152f14d1ed4c7676fd77", 0x3f}, {&(0x7f0000002bc0)="c3e2690f7180654822f8a079fcc081cad2acb388ae2ad7cb67a48a1ef2782fb9fb9c388eeb65f96e24c19ed10b00bc7331323c50a6bcba952aa63052fb8e000d9ebbbd43eb2f6ec3c2", 0x49}, {&(0x7f00000035c0)="750d3669a01156d6f46aa19c83c076efcbcf3c4b936c71c4bc8d36b0cd37320e9049047d48f4da59d97e856ada6ce3dd9ea87ac62098665425bb08871e2221932142ad191ca749164b8f01fd9273855f6e1ce65440d74a6c9634669b00cb99ea45cb43581316427201545d0750d4fef6f8b5fe647049b24dd9b6c5a4d42164d4ed4251ea95831855641d9e561d8976039ea1b328d8d159a7b6df6fc60e5d9ec205131f55139483c98bca9add56fb5118582f7a112bc92685d85d087d61e274fd80990bcaaeb352955754f712e2f61a687c9c837b1a2ba0c62ce5730e87d226876c0270472248bf3810b6a32f07142bf753ae84ac6dfc0c0ef92b632c6da27f7d023900194fc8dda5774f8b018c04cd9656200565966024a68d80e4260dfa5b5bd21be07547a34b9a5f6bd7a884b776120618bb5e108250c5dc15fc4943c93300933e933501bc226cb5bbd1bb71f9931994c201b6d6e462accd74b68e7c1675b5d656abc990b63ff04fb53dba3c0f73096de109b8d18cba890a48bcd76600814eb224f4323f90c0c487bda5458fa152d2f30f212a9bfa64a20c1b6934102dc3151d8cea24192fa53ae09ec13dac8304d916ecc9d7dd1053e4d221689c0fa8ae72067296b04ef312431b5ba6404d8baaf6771ebd2c23b81b1d370f82442470bccf5479ef3d67c145fcfc34a152d355fc15301ad89a80b390f9e2fb1039443728fde49f25faaae5d100e6ccf9cf253bf5b50b3983c4fbb9d84e26dc97adf92c7dca56d7ebd71149e8d3d0654c4ccb98194dd301d4db11803137ff59d9fc6922898212c38ced904dd2f68197ab27f0741b2e8f934b32f1bf000d9b247f944c2ded0927cb2ca1c72dbb56166e113a4ef306418513a23f36027afb7d86650bf16e1e0452715e51adabe6930790b2974449de20f62ceb15cba5e4e67f9044c367b0357315a0293dd1e410af310e18fba8968c323104e02bfb639c3b6e463ac109466e49a45945dced1f8354392f28b8700e9ea72704d607fa0140ecf9e1007b62b15f9738c90952af3c0d7f3bd6659fce9b745a7007a1c80fc068fbdc6cfbb0b0711701295070ec2e047c1cc47dd96734964f812c5fb150c3d06ba95dee4a5ab29a39754f170432774e4e2fa31def7aa41395fa66da520502b21015b84473d31ef12085504448f724d0b842eda388e0119519dc309670faea9d5ccc22e4c319c970f11d688fac9bfbce65775c27250b9819c443292c30c201ebd348d7fb951f34aa4ed85c6588eae2819cda67552eeac26880251d0ed06fd3fe71c3a804daf660784a715e8962ecd1ed1299a1514bb6bdfbcaca351656ff213490dd23e89c95121d4b6288ddcd71e13b53ecf1ac0176d17d4fdb2bae121668a8a98d9df6068fb9f15c50cb1b371697bac5c8a99f268f1cb58453a759f3a44d13df1a9aa40b76cc91b092e65a2bbaf8b4fb499a9daaa734b54b2eeef2274efc82e84f3d2c19e90fe30855f3c310ff43d6148605032f97e55c90b0940c4328ea926c863e256214ea60e2e9735518b9c748af0d4a5a9747281b0751a029dec9aab5ca9b3efedccd173a92fe7c55911be0bb9d42981bb3e954bf26fc57ec53a854d31d8b53f4d41e3816e31b1b1404420beabea3ae234860b74df821da30419a6b14b99c344051970d4bea93e9a9fc61bda6f5f25a532bca6a7ca7d905a9bc53acd1faadbd21e598e4aa05f19562b71e2ddc8aa74c3523eb88185ed1762a1d03735c36d17257b7f2e5f081a24d89ffc0c24f3bb01d4f8d4bd99712527db63002bc7ba14459ee628e40522899f4d096c5895dc31128b3a0b30c59c3e296c785271d95f06a8fd45fb4eda2fef08833ce156e7fd6227e66e48af7ae8b305ac9ca0b0084c20e68057e924944f4c97a9e5ef264f811a75da4c530af5fba53f1141e277a30438b79450a47b8401c30a110150dcd27d18f191765116467bbbf5e2ea554eb4b65fb31e27665838d3475135b1fcbf7a302c1a9426e7931cd1049f56d1a06f41bff77e822f76652d7d349652327656b2457a63fbc21622c27281a2959a4e6ff197217d71d6cf53b5c9a0f69b245b722124857d4e22d7eb1a8ee2e1ec624b909002562a3e1545796d7f1ba36ff15008510379e26a0427a5a66159fb01ef9d3be3312e4b5f846eec3230870dcdfa301efce154295a4a4208a0a1c5eaf4bcfb8f91a3be7fac548b2d058bc4cc0633867627181e216914b30313c7e299e9b4a37bd170d731885f59e7c54fe564c92e061c5c64d6cad8f959b47ce989b226d42ab064413ac4b681a92c15ff1a1ae1dcf16dc757ade2924ec3efd036f0b23c95e128fb6760fbb320075f56dbdae826f2ee92b00d26aff607a5bc2143ec98156840a5d642940e60c5759d914b7849f0e27e24fa3294ad27f6920815929737344edd21a36bf95a41c8a399cbf26a570ba7584a29c5b0b338b07c1b46158f1fcbd5b998a3f9e9b4ca901669595c30943220830a3c8a4d485eb420ba58ef8cceb779980143eac6bdf77384fc644f9ff48ad7fb679b3266c38e0c2b16a6afd0e1a983250d3ea7cd3647b3d89ca8ffcb2c06769fc9584c1871c1db0d1cb2f293277dd67acc49942f439ce833021b3decbb39e5b0d87f9c82bc3a6d0cf358ea77c0d7c949ddc670aa65a101ed5ee6f688c6bb933cc09ca553c5fec1b27eb854287683444edabccdf0ab288d9d9e1fbf3f73ef1decc9265d9f476a0bdf823809d18784c7a2f6eee0e3a6f7ef3c3a0b6ddb867e049e9026f0b86e5ac3c06b99468a998be35a113922fa38fddc721619e8aca848851bbf9ecc5d8ad0a2deea1577f85d3150f60cf07988deda9f18a4ee9d66c4d1b88533c8c0047deba233334a5dfb9765e29fd4ca3408cf67c5294e379d85eef13dd05a46be5ec2801da6577ef5f2259ed937ecfebcafe8aa5d6fd0d047a67c05f4f54621b4151b692faef31b9bd1b78e42073fdbbe66569707546a8bde960318cddecbcfc3868957b48de9636528fe9ac71194199de7d230a9493f33efe835bb17e846bf2aaa04bff30a8e00acd18d83b722ce645b14f01a79fec7fa7d202eba19ba75e2caff69bfeb90a165f25929389299ce4a0d9f17a6c3e394c22d7e9aa58ae40f5bb5abbca041a3a9238510026aa8c502d161b57efff3efe66aa3516c668d412178d7158c77b1cc425d0a9ad94e29be0726ffc810bae80225b5f0601f402ff3a60a17197ee6804b39f8db358c3d126e6b766cde7533514fc48eb297fc79d4178a075ed130b5f9cd4ee0dec4ba2dde5f83b64018a08b23a77259d94cfddce71351b2bf6fe8991678b5f66f676241bf8da9400b78dfbb7f88f84f5c2013d8115c43ca18f6c50ac7c1bd5a189d5d8cb0cf22a696717e0cdcb0f238f369b3d6962eacc6706175ee6bbfffdf04c191c8e01516ee8c50e1c8888fb37ddbd8e7f413808b1a8cdcd6db2796a1ba9da49e0524d6041a121e8c51e2edabef52bd930ee96b096accb9d974a3b73c8f39fe4663ef58ba7ff62b5cce8da08aafac5bcba5a77961a83527a430b272a83a8329e4a0b557fdff79723e1a155fdc019c8e89f73af2e464b647221c8a6a3a2f9777e4e6e316d296edce016e12ca5697c461a380dbb2956c2ecb293903ccd91b095c23dfd3f540bd0187df0d281fd7278d770d4f498dfe5013dae9435a1dccfa42268e5ec2e413db4b8e4a87b1cb57436d24392ad6e3567954895481eea2c3564ae395f667e61687d2e85e9a3406094aeff78e8b5d0b05e10558f18bb3342fe82b28f88d0e832d6976690bc34e4c90477570c786ce3646db0397ba01677bab4f5f83673a0b535c3970d373de2f9212805090bd5bd3e0a5c790ab6640dfdc51110841485a108d74a7429eea72cde2eb1c777fa96e4c3617d51a0aeb4fd90ba1277129df82c865ddbcbd25422e2f7a7d155ab1d3fe6b3b3ac8eed32219aac6b5de6ab5b71c90f93ce203ddfde6002f3c679e222d7fcaf2629832aa6e5301bbedebb7c6cc5c45de83f7119dcb2d28ea278c7c65c2a110f56e17c28e0f80c97a6ce1c266c536fd50a4fe182485c1458fd3bd5a5176ae4278fe3ae4ca64dad2ebb43278e9615b893259b347c9ccb5d1b32185fe376d7a0de1fd7569039e585772f6d80f9a256cdae0b155f9a5d42533258e092528f5dfa06035ecd96ef2223bf432ffaee7c2771467764243d343299a6fcaf77f635b78864f1d752045de3b9fdcfc3b1dae1d6e2b06973c490ea84301d205547acc17ee88cd53f508b87d5632bdb1efde093899836314a425fbc373df8c797d00691df30343805a9993f079c4d1350ab9e8b6f8d46f454cd77b25150756a6088bfdb4a0879a64099bdd42919d3cbe7655e4860cd8756268c39f68fbf38c5b8a37836c63c5a786b92ec5de7dafc124aaa6510678091ee4d78a009814d0a57c09704c5df039d1b56b353a31103b8fbf6b354f4869b5250febf8f6288795298388942c6a3d1e1eae888e7102c072bace2ad22217316f5eaefefd3800c6683eaa845f1cd97eead930c520e2e93e32f01fc02fa387c8c3c43b816b23e6a3ed93479023e802996a6ad0dadba85531dc5dc615eb0569c36eacd6e05d8ed012419927dc32ac297a6930e79c953a8a6b7721ba308d73592661b636da5e048bcb92c2f53760a58006cfca3e183be00d2aef7adbc8f0679329466f8cf12e0d62201bd75195ab77449ad97a36d5e84dbc04e16877be59d447d52dfc41a6a886501074785925e60f52d242f05a8c63aedf31f7a4b3dcb4170634d9936443ee70f40df81ce67f5c7a5f61a333d", 0xd44}], 0x5, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x1b8}}, {{0x0, 0x0, &(0x7f0000007d80)=[{&(0x7f0000006940)="e7d036affdbefb9dfaee6eaf03ae649dcafffc600bda7f3d4294807bae9cc653ea3b26c60292ea59dc97ea408fa35491b40d5ddca1c1270a860e7f72d9a2968fe231ed4ec6b4b7fac090b550e96671b24dc37410f48e30b27e7284aeb3c88502148cb8b091f1515e75b334fd6a5121ba0b14db800f808e629381b3c51415f78b5a393cb775e30752779108", 0x8b}, {&(0x7f0000006a00)="8bcf3f585946b54b7dfae5d9ed767493a23a65a25308f7b13c2c60dc0613eec57a0728b693b5f6ded7e854c685eb241237d4d31c7e790ff7e435ae757eb49985704704dac16771013a0ace93d30011571977df9da993584ef3d92f4fd02786070c82aba7567d", 0x66}, {&(0x7f0000006a80)="fbf956fd7914853ab413818fc91822f42454a2471ad50f2134d7d6779d8692241a51616f5a2657459c657b1017b8", 0x2e}, {&(0x7f0000006ac0)="cd5957a63ca65946dd22b98984c6e9c49c9b50510da686f9d831e1c93a89393c743eb5c73052463b79a933fa55a10cee5a78c0b305d481639b46664f4698c6cc7f9f6d57457d4679e61af7bf63afe3409aa179125d3669145f2e70ce009970408aba529d4fc4b6995785075f16dbf10abd9f0e250a39a89ca51d1ed11854189e1736a50b5509797edbcecbea7c00e02546367daaf49f9861cc53f813171692b0e312287599e029", 0xa7}, {&(0x7f0000006b80)="ea74a1824070e3f1c0bf897425b47e4391eed5904ebe8411e3539579b0559e46339526ab41d8a6a108de6b34f67b90929e963d9e714221be822ac4e02d28230df08ca56c2289985b558bcbb7d086d2ce6e8b6cba90dd268c3f213d92ce4747a37dae706a3653", 0x66}, {&(0x7f0000006c80)="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", 0xc96}, {0x0}], 0x7, &(0x7f0000007f00)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffe01}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @private}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4}]}}}], 0x80}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x3, 0xc141) shutdown(r3, 0x1) 2.647110082s ago: executing program 2 (id=1964): socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_CAPBSET_DROP(0x1c, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040)=0x10010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) unshare(0x8040080) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[@ANYBLOB="bbbbbbbbbbbbfff7ffffffff88a800008100000086dd52e561b50010218779880000000000000000000000000001fe800000dfff0000000000000000000000000000040190780070068f000ca8a7"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000180), 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x80) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f00000d7000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2200000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7822806f657861ea79405610ded863bb88195ef763244a578dc7638173733d73"]) 2.17865572s ago: executing program 3 (id=1966): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioperm(0x0, 0x6, 0x4000004) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) 1.990981875s ago: executing program 1 (id=1967): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) close_range(r2, 0xffffffffffffffff, 0x0) 1.464720825s ago: executing program 2 (id=1969): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fc7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000200)="660f01b1220037660fc7b70500baa100b8cb00fec866b9ba02000066b8eda78c0466ba000000000f300f0f259066b9410101c00f322ef30f090fc79b950066b95e0200000f32", 0xa4}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={&(0x7f0000000280), &(0x7f0000000600)=""/231, 0x0, 0x0}, 0x38) socket$key(0xf, 0x3, 0x2) 1.132603397s ago: executing program 2 (id=1972): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@multicast2, 0xb}, {@private=0xa010100}, {}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.132246609s ago: executing program 3 (id=1973): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f00000000c0)='./control\x00', 0x0) r1 = inotify_init() r2 = epoll_create(0x200008) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r5, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64=r5], 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={r0, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="9bb3aaaab87e2ac8a9583a6a12593422c1890b3e1ce1b83af66c34b7618602a2b8358c3dc3119b299335d6bf3cd84bebe78ffbea070fdc3fbde22c0ba11a38e165d5ddd3c73d7b880a3d5cd475e44ec453e70b135ba7fc65d28ff9689e876f519b7c734325c7d70ac7c1017f81c9eb2aff7ada", 0x73}, {&(0x7f0000000e80)="01970e575d93856af423768198ef860981dfea4d056a6a2940cae13365591de8a94b4b34fb6d881e2dad53d86d2c90f7692f9648d47c4b1137957a674c09a74bf12504ee09e38221bee265b8f6c2a0fe", 0x50}], 0x2, &(0x7f0000000f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010100, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe96}}], 0x38}}, {{&(0x7f0000000f40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000f80)="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", 0xfe}, {&(0x7f0000001080)="5ee06f6c8cbddeadadc4e440d837ae21909af4aabe5fdfdebd9dfe93d42deb319b029d108b2dc15bb641501611ebc1b5b4dbe43a9d85ddcf777a41fc14eb1424f2e7bd34b93e1578", 0x48}, {&(0x7f0000001100)="923a8fa28ef4bd59638c326373da9c84a7515dee88d19ddfee6589fd15f20ea9e344786500", 0x25}, {&(0x7f0000001140)="645ba8ab1b35e189b9ce35843a5c14410568e4c83cc61a431f7f8b60297b7854f32de445a3b9935a877725a7636e3d552cb26bd56416532b2699d63f55c249c9507f9433d2b3505e3f4763e3fb3e084a11c91637b076601c20278591e77289611a1f94cdb93835617b0d32a1d490610829a98921c9a3f2d69d0a8b864a8ab1ae7c4fc57764b7eb6b22ee1356c95ad6944645366f0bf26d", 0x97}, {&(0x7f0000001200)="6039399df9267d7c8f024d5f6f20728d07f207cc7d2ec19851330bb1cca47bf77fddef52f68a8236e7b58e3cf29b1ca5e2a4a89ffaf95183bafdf2b771caa0ca3f8aac2fffb0f24159fa106a7e06df91b8a7a994bc83780e9308402cdcb1c1feb2b4ba4cb8d59c089a89befd3ca4fc6bd35d71", 0x73}, {&(0x7f0000001280)="1a1eed5bc5b4dd271d18d0967acbe363e8330f3d1bcb3fb2d0b70f068d208a17a82f54f26728e57ba5e56af56a08b564fdcbea61ca8f1c0b7dab527ce99edcb91b52ca5b9fe3f170af1b47da7fd43b49403e531847952dce740306eb7befe04c97e594cceea9b0d53d97039b032d39ba56d19130d4a1a8564466ad7a04fbbb34d868ac653520256854e2945127f50f09c6c7058e5179d656f49424af27ecfe0270631a78eaf8798ad0a06348a3e4c3d1929a27b2e77bdb42f7304ed7928e8ea652456cf6e7099e3139efb6259678bbc5c26d1650a8faf8be901a1888e98d9f6c3daf1f", 0xe3}, {&(0x7f0000001380)="4fbedf1740d93743896742d7ed71c6dd2b7085efe9e350bdeac861c9caf53f004d53b6e72d88124cf187819ffbbdd33ff5da3c092df5896188181d2648876a8ef1d1ed5f59bdfb4b7aeea3e862b76642c46922f642587d3ca695526254e877bc9dc6eec124b8af67354115c3fde591806dab3ee5a08137941541b1250690df61d84d4eff632f67f344d4797b2a38858104384d633f67094082656cc1a7f54727cccef01aa6033d4dc40bb36d9b7f19857f64afb8c68f8f303f20d2ddfeb504b296f77e79260b21b14e19220531d4b1", 0xcf}], 0x7, &(0x7f0000001500)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x70}}, {{&(0x7f0000001580)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000015c0), 0x0, &(0x7f0000001800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb26d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}], 0x88}}], 0x6, 0x240080e4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x30000000}) r7 = inotify_add_watch(r1, &(0x7f00000001c0)='./control\x00', 0xa2000396) inotify_rm_watch(r1, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x4050) r9 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r9, 0x0, 0x0, 0x9000f4) 1.062666788s ago: executing program 1 (id=1974): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 949.827638ms ago: executing program 1 (id=1975): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000280)) syz_open_procfs(0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x203}, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 899.981929ms ago: executing program 3 (id=1976): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[]) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f00000008c0)=""/206, 0xce) 489.419989ms ago: executing program 2 (id=1977): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setregid(0x0, 0x0) 469.676842ms ago: executing program 0 (id=1978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 359.346068ms ago: executing program 0 (id=1979): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40305829, 0x0) creat(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r0, &(0x7f0000000140)=""/38, 0x26, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="668546927ae520a8f3049a2f50ca1553a5e62dc469b5b2348ffe35a76a94a3ad96f8e87e3bd8a5c3c8ce4da39c468ccfb81bc03e88c8a813e9ce7cb1410024b82b58364f6dc5fbf35e04c17ccb4c793d5578c99cf2e1fe30481bb07c86c6806ad25840494578c1516bc6d6e1942cc9f6d3b5491d949c4b93d7a403ca75cb7bc8fea7d325645cbe4c87da88e362c3ae3206fe2d3d88d62500c4f5ccbc1af04079cc5d49c05f487f40ed97703cf5f46cc9d074e5a8811d3e43b5b4f6456c508e0695433ea9f6", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x2, 0x0) 250.460363ms ago: executing program 0 (id=1980): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)) 224.091871ms ago: executing program 0 (id=1981): syz_emit_ethernet(0xa0e, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "008000", 0x9d8, 0x3a, 0xff, @dev, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x16, "004af660fdcd2a9d3fea8639c367475824e5ff1fec61d05cd2481e5f16a2e0c0c7a77da8e54574913307583a126de92dd2f27575716d36ceade2ad37f45e18289a13311b1525e24fd1078f16a632b7d9e170e1e59580de090000000000000026862b4351000964ab32e55e4339bb2937602534c310d016fa7537403ddcdd12341a16f2bdef862e5ba4d76e965de44b86e123844d8361242c7809117c5eacdc237022f54dc68760d4711978c0575160dd2dfe2e85"}, {0x0, 0x7, "3abc2ac2bfb0f9366574005770a981d0425b685b7f39f2bf671c534e4af4347759f70e051bc102a9d7655956b8bc8486cde8bc388d38"}, {0x0, 0x11b, "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"}]}}}}}}, 0x0) 127.352316ms ago: executing program 0 (id=1982): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x401, {0x14c, 0x1, 0x3, 0x79, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0e1cff001704000000341300"}}) 126.605429ms ago: executing program 2 (id=1983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = eventfd(0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r4, 0x0, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r4, 0x0, 0x2, r2}) 19.241811ms ago: executing program 1 (id=1984): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) open(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 0s ago: executing program 0 (id=1992): socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) kernel console output (not intermixed with test programs): _trans } for pid=8262 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 231.406385][ T1118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.518021][ T1118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.652056][ T1118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.755098][ T1118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.897360][ T1118] bridge_slave_1: left allmulticast mode [ 231.899691][ T1118] bridge_slave_1: left promiscuous mode [ 231.904849][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.916763][ T1118] bridge_slave_0: left allmulticast mode [ 231.931179][ T1118] bridge_slave_0: left promiscuous mode [ 231.934265][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.487532][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.495960][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.519404][ T1118] bond0 (unregistering): Released all slaves [ 232.538335][ T1118] bond1 (unregistering): Released all slaves [ 232.561839][ T1118] bond2 (unregistering): (slave lo): Releasing backup interface [ 232.566959][ T1118] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 232.585971][ T1118] bond2 (unregistering): Released all slaves [ 232.964616][ T1118] hsr_slave_0: left promiscuous mode [ 232.968446][ T1118] hsr_slave_1: left promiscuous mode [ 232.972153][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.975261][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.979439][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.985116][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.028294][ T1118] veth1_macvtap: left promiscuous mode [ 233.031856][ T1118] veth0_macvtap: left promiscuous mode [ 233.034419][ T1118] veth1_vlan: left promiscuous mode [ 233.037293][ T1118] veth0_vlan: left promiscuous mode [ 233.809171][ T39] audit: type=1400 audit(1722629695.979:734): avc: denied { mounton } for pid=8286 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 233.887712][ T5346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.901910][ T5346] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.908714][ T5346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.922488][ T5346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.930084][ T5346] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.937383][ T5346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.958322][ T5338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.962029][ T5338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.965431][ T5338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.969600][ T5338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.975070][ T5338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.978632][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.978980][ T5338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.003594][ T39] audit: type=1400 audit(1722629696.179:735): avc: denied { mounton } for pid=8286 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 234.835349][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 234.981012][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 236.055942][ T5346] Bluetooth: hci2: command tx timeout [ 236.551510][ T8286] chnl_net:caif_netlink_parms(): no params data found [ 236.579308][ T8311] x_tables: duplicate underflow at hook 2 [ 236.769179][ T8286] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.777105][ T8286] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.780138][ T8286] bridge_slave_0: entered allmulticast mode [ 236.787451][ T8286] bridge_slave_0: entered promiscuous mode [ 236.821172][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.824313][ T8286] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.827618][ T8286] bridge_slave_1: entered allmulticast mode [ 236.831281][ T8286] bridge_slave_1: entered promiscuous mode [ 236.931481][ T8286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.943094][ T8286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.967565][ T1118] IPVS: stop unused estimator thread 0... [ 237.035269][ T8286] team0: Port device team_slave_0 added [ 237.046152][ T8286] team0: Port device team_slave_1 added [ 237.105442][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.108587][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.119783][ T8286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.127489][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.130922][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.145475][ T8286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.227824][ T8286] hsr_slave_0: entered promiscuous mode [ 237.233425][ T8286] hsr_slave_1: entered promiscuous mode [ 237.236835][ T8286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.242363][ T8286] Cannot create hsr debugfs directory [ 238.130328][ T5346] Bluetooth: hci2: command tx timeout [ 238.662967][ T8286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.678629][ T8286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.703531][ T8286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.744553][ T8286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.937438][ T8286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.961551][ T8286] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.973828][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.976855][ T5395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.018608][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.021856][ T5395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.276471][ T8286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.431564][ T8286] veth0_vlan: entered promiscuous mode [ 239.476445][ T8286] veth1_vlan: entered promiscuous mode [ 239.621917][ T8286] veth0_macvtap: entered promiscuous mode [ 239.640321][ T5395] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 239.644647][ T8286] veth1_macvtap: entered promiscuous mode [ 239.698210][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.709069][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.721046][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.726822][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.732410][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.736745][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.751755][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.777596][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.783282][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.790114][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.811684][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.825643][ T5395] usb 5-1: Using ep0 maxpacket: 32 [ 239.840990][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.844553][ T5395] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.846221][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.852808][ T5395] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.860437][ T5395] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.865173][ T5395] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 239.866935][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.869220][ T5395] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.869242][ T5395] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 239.873178][ T5395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.885263][ T5395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.892060][ T5395] usb 5-1: Product: syz [ 239.892365][ T8286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.893950][ T5395] usb 5-1: Manufacturer: syz [ 239.897601][ T8286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.904935][ T5395] usb 5-1: SerialNumber: syz [ 239.921130][ T8286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.930332][ T8286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.126004][ T8396] futex_wake_op: syz.3.806 tries to shift op by 32; fix this program [ 240.165139][ T1222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.168845][ T1222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.174287][ T39] audit: type=1400 audit(1722629702.349:736): avc: denied { accept } for pid=8380 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.220431][ T5346] Bluetooth: hci2: command tx timeout [ 240.235538][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.238825][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.266723][ T39] audit: type=1400 audit(1722629702.439:737): avc: denied { mounton } for pid=8286 comm="syz-executor" path="/syzkaller.6yr4Ju/syz-tmp" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 240.343548][ T39] audit: type=1400 audit(1722629702.519:738): avc: denied { mounton } for pid=8286 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 241.251436][ T8418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.256753][ T8418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.408206][ T5395] cdc_ncm 5-1:1.0: bind() failure [ 241.422057][ T5395] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 241.425493][ T5395] cdc_ncm 5-1:1.1: bind() failure [ 241.438097][ T5395] usb 5-1: USB disconnect, device number 14 [ 241.637098][ T8422] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 241.644796][ T1222] Bluetooth: hci4: Frame reassembly failed (-84) [ 242.290774][ T5338] Bluetooth: hci2: command tx timeout [ 242.710354][ T35] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 242.904266][ T35] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.907534][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.912133][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.915583][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.923223][ T35] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.926651][ T35] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.929781][ T35] usb 5-1: Product: syz [ 242.932179][ T35] usb 5-1: Manufacturer: syz [ 242.938249][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 242.940312][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 242.944767][ T35] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 242.947043][ T35] cdc_wdm 5-1:1.0: Unknown control protocol [ 243.204642][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 243.204764][ T35] usb 5-1: USB disconnect, device number 15 [ 243.207784][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 243.212683][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 243.650492][ T5338] Bluetooth: hci4: command 0x1003 tx timeout [ 243.654783][ T5346] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 243.865014][ T8446] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 243.868391][ T8446] ecryptfs_parse_options: eCryptfs: unrecognized option [ention_end] [ 243.873062][ T8446] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 243.880534][ T8446] Error parsing options; rc = [-22] [ 244.371069][ T8449] kvm: Disabled LAPIC found during irq injection [ 244.920503][ T5376] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 245.112587][ T39] audit: type=1400 audit(1722629707.289:739): avc: denied { setattr } for pid=8463 comm="syz.0.825" name="fd" dev="proc" ino=23681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 245.123014][ T5376] usb 7-1: Using ep0 maxpacket: 8 [ 245.127531][ T5376] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.131449][ T5376] usb 7-1: config 0 has no interface number 0 [ 245.135001][ T5376] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.139673][ T5376] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.144100][ T5376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.158618][ T5376] usb 7-1: config 0 descriptor?? [ 245.167505][ T5376] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 245.522585][ T30] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 245.700331][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 245.703799][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 245.708289][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.712589][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.716569][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.721652][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.724953][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.939089][ T5375] usb 7-1: USB disconnect, device number 9 [ 245.951028][ T5375] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 245.956217][ T30] usb 5-1: GET_CAPABILITIES returned 0 [ 245.959268][ T30] usbtmc 5-1:16.0: can't read capabilities [ 246.164057][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 246.168129][ T8466] usbtmc 5-1:16.0: Unable to send data, error -71 [ 246.173005][ T30] usb 5-1: USB disconnect, device number 16 [ 246.871594][ T5346] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2 [ 249.732870][ T5375] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 249.910414][ T5375] usb 7-1: Using ep0 maxpacket: 32 [ 249.916055][ T5375] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 249.919158][ T5375] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 249.924209][ T5375] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 249.928248][ T5375] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 249.934587][ T5375] usb 7-1: config 0 interface 0 has no altsetting 0 [ 249.939325][ T5375] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 249.942998][ T5375] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 249.946142][ T5375] usb 7-1: Product: syz [ 249.947980][ T5375] usb 7-1: Manufacturer: syz [ 249.950054][ T5375] usb 7-1: SerialNumber: syz [ 249.954559][ T5375] usb 7-1: config 0 descriptor?? [ 249.958665][ T5375] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 249.963487][ T5375] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 250.188369][ T5376] usb 7-1: USB disconnect, device number 10 [ 250.191075][ C3] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 250.196489][ T5376] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 250.295240][ T39] audit: type=1400 audit(1722629712.469:740): avc: denied { ioctl } for pid=8530 comm="syz.1.843" path="socket:[22916]" dev="sockfs" ino=22916 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.358310][ T8532] netlink: 'syz.1.843': attribute type 10 has an invalid length. [ 250.364760][ T8532] macvlan0: entered promiscuous mode [ 250.375176][ T8532] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 250.405379][ T8532] fuse: Bad value for 'fd' [ 250.930610][ T5346] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 250.935609][ T5346] Bluetooth: hci2: Injecting HCI hardware error event [ 250.939284][ T5346] Bluetooth: hci2: hardware error 0x00 [ 250.960378][ T30] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 251.162275][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 251.170636][ T30] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 251.174467][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.180302][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.184884][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.190898][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.199564][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.203972][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.442756][ T30] usb 5-1: usb_control_msg returned -32 [ 251.445050][ T30] usbtmc 5-1:16.0: can't read capabilities [ 251.916989][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.860'. [ 252.002236][ T5375] usb 5-1: USB disconnect, device number 17 [ 252.159630][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 253.011280][ T5346] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 253.239899][ T8581] kvm: pic: level sensitive irq not supported [ 253.647846][ T39] audit: type=1400 audit(1722629715.809:741): avc: denied { create } for pid=8602 comm="syz.2.869" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 254.966503][ T8640] unknown channel width for channel at 909000KHz? [ 254.969410][ T8640] unknown channel width for channel at 909000KHz? [ 254.972173][ T8640] unknown channel width for channel at 909000KHz? [ 255.733946][ T8658] input: syz0 as /devices/virtual/input/input18 [ 257.332563][ T8695] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.491378][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 257.495972][ T8699] team_slave_1: Device is already in use. [ 258.324475][ T39] audit: type=1400 audit(1722629720.499:742): avc: denied { mounton } for pid=8725 comm="syz.0.911" path="/proc/666/cgroup" dev="proc" ino=23103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 258.335440][ T39] audit: type=1400 audit(1722629720.499:743): avc: denied { remount } for pid=8725 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 258.368659][ T8733] cgroup: fork rejected by pids controller in /syz2 [ 258.806361][ T1222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.918263][ T39] audit: type=1400 audit(1722629721.089:744): avc: denied { write } for pid=8760 comm="syz.1.924" name="ppp" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 258.954718][ T1222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.054807][ T1222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.090511][ T5338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.096767][ T5338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.102680][ T5338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.108473][ T5338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.115819][ T5338] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.120094][ T5338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.164324][ T1222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.116132][ T1222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.161919][ T1222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.188916][ T1222] bond0 (unregistering): Released all slaves [ 260.203411][ T1222] bond1 (unregistering): Released all slaves [ 260.282271][ T8772] chnl_net:caif_netlink_parms(): no params data found [ 260.338803][ T1222] tipc: Disabling bearer [ 260.348874][ T1222] tipc: Disabling bearer [ 260.357435][ T1222] tipc: Left network mode [ 260.550516][ T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 260.729940][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.747097][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.753151][ T8772] bridge_slave_0: entered allmulticast mode [ 260.758370][ T8772] bridge_slave_0: entered promiscuous mode [ 260.781305][ T10] usb 6-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.782997][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.796640][ T10] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 260.797309][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.820743][ T8772] bridge_slave_1: entered allmulticast mode [ 260.824858][ T8772] bridge_slave_1: entered promiscuous mode [ 260.887835][ T10] usb 6-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 260.894355][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.910714][ T10] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 260.914617][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.918038][ T10] usb 6-1: Product: syz [ 260.919938][ T10] usb 6-1: Manufacturer: syz [ 260.922138][ T10] usb 6-1: SerialNumber: syz [ 260.946273][ T10] usb 6-1: config 0 descriptor?? [ 260.950648][ T1222] hsr_slave_0: left promiscuous mode [ 260.950968][ T8811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.961367][ T1222] hsr_slave_1: left promiscuous mode [ 260.976246][ T1222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.979347][ T1222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.984683][ T1222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.985682][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input19 [ 260.987850][ T1222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.030695][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 261.121698][ T1222] veth1_macvtap: left promiscuous mode [ 261.123933][ T1222] veth0_macvtap: left promiscuous mode [ 261.126231][ T1222] veth1_vlan: left promiscuous mode [ 261.128264][ T1222] veth0_vlan: left promiscuous mode [ 261.180494][ T5338] Bluetooth: hci1: command tx timeout [ 261.339628][ T1383] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.343062][ T1383] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.383472][ C2] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 261.552382][ T10] usb 6-1: USB disconnect, device number 14 [ 262.257405][ T1222] team_slave_1 (unregistering): left promiscuous mode [ 262.265406][ T1222] team0 (unregistering): Port device team_slave_1 removed [ 262.353881][ T1222] team_slave_0 (unregistering): left promiscuous mode [ 262.359087][ T1222] team0 (unregistering): Port device team_slave_0 removed [ 263.120582][ T39] audit: type=1400 audit(1722629725.289:745): avc: denied { read } for pid=8835 comm="syz.3.943" laddr=::1 lport=51456 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 263.139509][ T8772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.158581][ T8772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.254382][ T5338] Bluetooth: hci1: command tx timeout [ 263.290106][ T8772] team0: Port device team_slave_0 added [ 263.306484][ T8772] team0: Port device team_slave_1 added [ 263.401193][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.404401][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.416415][ T8772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.422561][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.425397][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.437519][ T8772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.556098][ T8772] hsr_slave_0: entered promiscuous mode [ 263.560638][ T8772] hsr_slave_1: entered promiscuous mode [ 263.564664][ T8772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.569130][ T8772] Cannot create hsr debugfs directory [ 264.320314][ T5373] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 264.367688][ T39] audit: type=1400 audit(1722629726.539:746): avc: denied { write } for pid=8884 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 264.424760][ T39] audit: type=1400 audit(1722629726.599:747): avc: denied { create } for pid=8889 comm="syz.3.956" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 264.465090][ T39] audit: type=1400 audit(1722629726.639:748): avc: denied { unlink } for pid=5331 comm="syz-executor" name="file0" dev="tmpfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 264.520669][ T5373] usb 5-1: Using ep0 maxpacket: 8 [ 264.525216][ T8772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.527976][ T5373] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.538210][ T5373] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.543210][ T5373] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.545951][ T8772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.547273][ T5373] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.558256][ T8772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.561150][ T5373] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.561173][ T5373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.575621][ T8772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.631896][ T8901] syzkaller1: entered promiscuous mode [ 264.633978][ T8901] syzkaller1: entered allmulticast mode [ 264.674368][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.958'. [ 264.782501][ T8772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.812816][ T8772] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.812935][ T5373] usb 5-1: GET_CAPABILITIES returned 0 [ 264.824040][ T5373] usbtmc 5-1:16.0: can't read capabilities [ 264.840073][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.843598][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.860194][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.863124][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.020740][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 265.029948][ T5373] usb 5-1: USB disconnect, device number 18 [ 265.129525][ T8772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.178929][ T8772] veth0_vlan: entered promiscuous mode [ 265.187783][ T8772] veth1_vlan: entered promiscuous mode [ 265.215321][ T8772] veth0_macvtap: entered promiscuous mode [ 265.223236][ T8772] veth1_macvtap: entered promiscuous mode [ 265.237614][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.242191][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.246425][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.251897][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.256060][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.261767][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.267922][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.278151][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.282764][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.286786][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.291470][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.295574][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.299720][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.306607][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.319079][ T8772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.324795][ T8772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.328614][ T8772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.331573][ T5338] Bluetooth: hci1: command tx timeout [ 265.333241][ T8772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.412391][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.420809][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.462941][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.466183][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.226788][ T8969] netlink: 'syz.2.967': attribute type 2 has an invalid length. [ 267.410769][ T5338] Bluetooth: hci1: command tx timeout [ 267.430442][ T39] audit: type=1400 audit(1722629729.599:749): avc: denied { write } for pid=8975 comm="syz.0.970" name="hpet" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 267.485959][ T8980] netlink: 'syz.1.972': attribute type 9 has an invalid length. [ 267.489812][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 267.494656][ T8980] macvlan0: left promiscuous mode [ 267.521823][ T8982] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=8982 comm=syz.3.973 [ 268.106728][ T9007] netlink: 'syz.3.982': attribute type 2 has an invalid length. [ 268.110742][ T9007] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 268.113633][ T9007] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.982'. [ 268.480367][ T5394] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 268.965726][ T5394] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.970929][ T5394] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.975606][ T5394] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.010875][ T5394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.019389][ T9000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.034774][ T5394] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.300386][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 269.480685][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 269.499831][ T5373] usb 6-1: USB disconnect, device number 15 [ 269.512186][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 269.520360][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.524237][ T10] usb 7-1: Product: syz [ 269.526388][ T10] usb 7-1: Manufacturer: syz [ 269.528277][ T10] usb 7-1: SerialNumber: syz [ 269.767381][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 271.060525][ T5395] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 271.215248][ T39] audit: type=1400 audit(1722629733.389:750): avc: denied { remount } for pid=9020 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 271.243933][ T5395] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 271.247398][ T5395] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 271.251085][ T5395] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 271.255107][ T5395] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 271.274558][ T5395] usb 6-1: string descriptor 0 read error: -22 [ 271.278391][ T5395] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 271.283024][ T5395] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.289791][ T5395] usb 6-1: config 0 descriptor?? [ 271.293677][ T9019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.297500][ T5395] hub 6-1:0.0: bad descriptor, ignoring hub [ 271.300753][ T5395] hub 6-1:0.0: probe with driver hub failed with error -5 [ 271.309805][ T5395] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input20 [ 271.328390][ C3] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 271.513454][ T5395] usb 6-1: USB disconnect, device number 16 [ 272.360379][ T5376] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 272.540336][ T5376] usb 5-1: Using ep0 maxpacket: 8 [ 272.545805][ T5376] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 272.550583][ T5376] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 272.554803][ T5376] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.558369][ T5376] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.563988][ T5376] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.567978][ T5376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.132062][ T5376] usb 5-1: GET_CAPABILITIES returned 0 [ 273.134703][ T5376] usbtmc 5-1:16.0: can't read capabilities [ 273.336559][ T5395] usb 5-1: USB disconnect, device number 19 [ 273.471925][ T9048] program syz.1.999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.880344][ T5376] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 275.080312][ T5376] usb 6-1: Using ep0 maxpacket: 8 [ 275.084293][ T5376] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.088707][ T5376] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.092897][ T5376] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.097024][ T5376] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.102618][ T5376] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.106111][ T5376] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.327261][ T5376] usb 6-1: GET_CAPABILITIES returned 0 [ 275.328056][ T39] audit: type=1400 audit(1722629737.499:751): avc: denied { read } for pid=9079 comm="syz.0.1010" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.329470][ T5376] usbtmc 6-1:16.0: can't read capabilities [ 275.531868][ T5376] usb 6-1: USB disconnect, device number 17 [ 276.546938][ T25] usb 7-1: USB disconnect, device number 11 [ 276.554890][ T25] usblp0: removed [ 276.702132][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 276.790109][ T39] audit: type=1400 audit(1722629738.959:752): avc: denied { bind } for pid=9103 comm="syz.2.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.797385][ T39] audit: type=1400 audit(1722629738.959:753): avc: denied { node_bind } for pid=9103 comm="syz.2.1020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 276.851093][ T39] audit: type=1400 audit(1722629739.019:754): avc: denied { name_bind } for pid=9111 comm="syz.1.1023" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 276.860506][ T39] audit: type=1400 audit(1722629739.039:755): avc: denied { name_connect } for pid=9111 comm="syz.1.1023" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 276.913958][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.918183][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 276.925941][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.934100][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.949774][ T9097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 276.965215][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.276894][ T5395] usb 5-1: USB disconnect, device number 20 [ 277.460535][ T25] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 277.642858][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 277.647763][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 277.655457][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 277.661606][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.666099][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.675656][ T9125] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 277.678149][ T9125] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 277.683550][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.900504][ T5396] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 277.915405][ T39] audit: type=1400 audit(1722629740.089:756): avc: denied { create } for pid=9124 comm="syz.1.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 277.921608][ T7070] usb 6-1: USB disconnect, device number 18 [ 278.080441][ T5396] usb 7-1: Using ep0 maxpacket: 16 [ 278.083998][ T5396] usb 7-1: config 0 has an invalid interface descriptor of length 6, skipping [ 278.087029][ T5396] usb 7-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 278.091516][ T5396] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 278.096596][ T5396] usb 7-1: New USB device found, idVendor=0403, idProduct=6014, bcdDevice= 6.b2 [ 278.099845][ T5396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.103057][ T5396] usb 7-1: Product: syz [ 278.104944][ T5396] usb 7-1: Manufacturer: syz [ 278.107088][ T5396] usb 7-1: SerialNumber: syz [ 278.111413][ T5396] usb 7-1: config 0 descriptor?? [ 278.511087][ T5396] usb 7-1: USB disconnect, device number 12 [ 278.577561][ T9143] create_pit_timer: 6 callbacks suppressed [ 278.577571][ T9143] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 278.598013][ T9143] kvm: pic: level sensitive irq not supported [ 278.598991][ T9143] kvm: pic: non byte read [ 278.605608][ T9143] kvm: pic: level sensitive irq not supported [ 278.606142][ T9143] kvm: pic: non byte read [ 278.650329][ T5373] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 278.843566][ T5373] usb 5-1: Using ep0 maxpacket: 8 [ 278.847973][ T5373] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 278.851431][ T5373] usb 5-1: config 179 has no interface number 0 [ 278.854097][ T5373] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 278.858671][ T5373] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 278.863562][ T5373] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 278.868389][ T5373] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 278.874085][ T5373] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 278.877749][ T5373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.884641][ T9138] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 279.123459][ T5373] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input21 [ 279.351280][ T5396] usb 5-1: USB disconnect, device number 21 [ 279.351380][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 279.358089][ T5396] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 279.813658][ T9169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1043'. [ 280.560346][ T5373] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 280.767165][ T5373] usb 5-1: Using ep0 maxpacket: 8 [ 280.771971][ T5373] usb 5-1: config 0 has no interfaces? [ 280.777407][ T5373] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.781666][ T5373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.785201][ T5373] usb 5-1: Product: syz [ 280.787103][ T5373] usb 5-1: Manufacturer: syz [ 280.789210][ T5373] usb 5-1: SerialNumber: syz [ 280.793820][ T5373] usb 5-1: config 0 descriptor?? [ 280.880479][ T9199] input: syz1 as /devices/virtual/input/input22 [ 281.010711][ T5373] usb 5-1: USB disconnect, device number 22 [ 282.041062][ T5373] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 282.225787][ T5373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 282.231810][ T5373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 282.237416][ T5373] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.244796][ T5373] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.249558][ T5373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.255903][ T5373] usb 5-1: config 0 descriptor?? [ 282.260169][ T9216] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 283.035719][ T9233] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 283.274041][ T39] audit: type=1400 audit(1722629745.449:757): avc: denied { bind } for pid=9215 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 283.326227][ T39] audit: type=1400 audit(1722629745.499:758): avc: denied { accept } for pid=9215 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 283.503515][ T39] audit: type=1400 audit(1722629745.679:759): avc: denied { getopt } for pid=9242 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 283.554385][ T9245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1068'. [ 284.111804][ T9264] ip6tnl1: entered promiscuous mode [ 284.114175][ T9264] ip6tnl1: entered allmulticast mode [ 284.117281][ T1222] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.143558][ T9264] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.215661][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1078'. [ 284.303632][ T9257] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 284.306660][ T9257] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 284.310897][ T9257] vhci_hcd vhci_hcd.0: Device attached [ 284.520383][ T9257] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 284.523281][ T9257] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.526642][ T9257] vhci_hcd vhci_hcd.0: Device attached [ 284.587574][ T39] audit: type=1400 audit(1722629746.759:760): avc: denied { write } for pid=9286 comm="syz.1.1084" name="net" dev="proc" ino=27174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 284.603814][ T39] audit: type=1400 audit(1722629746.759:761): avc: denied { add_name } for pid=9286 comm="syz.1.1084" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 284.639041][ T39] audit: type=1400 audit(1722629746.759:762): avc: denied { create } for pid=9286 comm="syz.1.1084" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 284.648712][ T39] audit: type=1400 audit(1722629746.759:763): avc: denied { associate } for pid=9286 comm="syz.1.1084" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 284.657313][ T39] audit: type=1400 audit(1722629746.769:764): avc: denied { ioctl } for pid=9287 comm="syz.2.1083" path="/dev/nullb0" dev="devtmpfs" ino=693 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.660387][ T7070] usb 20-1: SetAddress Request (6) to port 0 [ 284.677870][ T7070] usb 20-1: new SuperSpeed USB device number 6 using vhci_hcd [ 284.678075][ T9282] usbip_core: unknown command [ 284.683703][ T9282] vhci_hcd: unknown pdu 0 [ 284.685502][ T9282] usbip_core: unknown command [ 284.687859][ T1222] vhci_hcd: stop threads [ 284.689822][ T1222] vhci_hcd: release socket [ 284.697312][ T1222] vhci_hcd: disconnect device [ 284.709193][ T9295] syz.1.1087: attempt to access beyond end of device [ 284.709193][ T9295] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 284.716767][ T9295] XFS (nbd1): SB validate failed with error -5. [ 284.875371][ T5373] usbhid 5-1:0.0: can't add hid device: -71 [ 284.877740][ T5373] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 284.890485][ T5373] usb 5-1: USB disconnect, device number 23 [ 284.947222][ T9307] trusted_key: syz.0.1090 sent an empty control message without MSG_MORE. [ 285.093291][ T39] audit: type=1400 audit(1722629747.259:765): avc: denied { create } for pid=9312 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 285.303863][ T9257] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1073'. [ 285.495946][ T9257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.521352][ T9276] vhci_hcd: connection reset by peer [ 285.532386][ T1106] vhci_hcd: stop threads [ 285.536787][ T1106] vhci_hcd: release socket [ 285.543468][ T1106] vhci_hcd: disconnect device [ 286.730398][ T5375] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 286.846653][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1105'. [ 286.924348][ T5375] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 286.930407][ T5375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.939739][ T5375] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 286.940481][ T39] audit: type=1400 audit(1722629749.109:766): avc: denied { ioctl } for pid=9346 comm="syz.0.1107" path="socket:[29335]" dev="sockfs" ino=29335 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 286.944654][ T5375] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 286.957278][ T5375] usb 7-1: Manufacturer: syz [ 286.966755][ T5375] usb 7-1: config 0 descriptor?? [ 287.040380][ T5375] rc_core: IR keymap rc-hauppauge not found [ 287.044838][ T5375] Registered IR keymap rc-empty [ 287.054983][ T5375] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 287.066917][ T5375] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input23 [ 287.214882][ T5375] usb 7-1: USB disconnect, device number 13 [ 287.328685][ T9364] sg_write: data in/out 73495649/196 bytes for SCSI command 0x9d-- guessing data in; [ 287.328685][ T9364] program syz.0.1112 not setting count and/or reply_len properly [ 288.180266][ T9385] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1121'. [ 288.194589][ T5375] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 288.380336][ T5375] usb 7-1: Using ep0 maxpacket: 8 [ 288.380564][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1123'. [ 288.386220][ T5375] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.392073][ T5375] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.396021][ T5375] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.400135][ T5375] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.405781][ T5375] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.410654][ T5375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.460504][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 288.641423][ T5375] usb 7-1: GET_CAPABILITIES returned 0 [ 288.643859][ T5375] usbtmc 7-1:16.0: can't read capabilities [ 288.833684][ T30] usb 7-1: USB disconnect, device number 14 [ 289.434809][ T9408] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1128'. [ 289.730494][ T7070] usb 20-1: device descriptor read/8, error -110 [ 290.171674][ T7070] usb usb20-port1: attempt power cycle [ 290.250362][ T5376] vhci_hcd: vhci_device speed not set [ 290.310349][ T5394] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 290.332937][ T35] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 290.490325][ T5394] usb 5-1: Using ep0 maxpacket: 8 [ 290.494887][ T5394] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 290.498690][ T5394] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.503103][ T5394] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.507315][ T5394] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.511395][ T5394] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.516429][ T5394] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.519930][ T5394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.523545][ T35] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 290.544377][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.547980][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.552849][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.556516][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.560372][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.565602][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.569945][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.573936][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.579041][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.583631][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.587478][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.596026][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.600593][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.606200][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.611081][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.615614][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.619549][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.624399][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.628296][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.632323][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.636850][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.640827][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.645082][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.649625][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.655171][ T35] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 290.659018][ T35] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 290.662717][ T35] usb 7-1: Product: syz [ 290.664652][ T35] usb 7-1: Manufacturer: syz [ 290.666673][ T35] usb 7-1: SerialNumber: syz [ 290.671118][ T35] usb 7-1: config 0 descriptor?? [ 290.678238][ T35] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 290.698331][ T4827] udevd[4827]: worker [5693] terminated by signal 33 (Unknown signal 33) [ 290.703333][ T4827] udevd[4827]: worker [5693] failed while handling '/devices/platform/dummy_hcd.2/usb7/7-1' [ 290.746186][ T5394] usb 5-1: usb_control_msg returned -32 [ 290.749525][ T5394] usbtmc 5-1:16.0: can't read capabilities [ 290.945702][ T10] usb 7-1: USB disconnect, device number 15 [ 290.951344][ T10] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 291.370659][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 291.370673][ T39] audit: type=1400 audit(1722629753.539:768): avc: denied { read } for pid=9439 comm="syz.1.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 291.602913][ T7070] usb usb20-port1: unable to enumerate USB device [ 292.579936][ T39] audit: type=1400 audit(1722629754.749:769): avc: denied { checkpoint_restore } for pid=9466 comm="syz.1.1151" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 293.051049][ T5376] usb 5-1: USB disconnect, device number 24 [ 294.340413][ T9515] kvm: apic: phys broadcast and lowest prio [ 294.526374][ T39] audit: type=1400 audit(1722629756.699:770): avc: denied { setopt } for pid=9512 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 294.776515][ T9533] input: syz0 as /devices/virtual/input/input24 [ 295.392668][ T7070] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 295.580689][ T7070] usb 5-1: Using ep0 maxpacket: 32 [ 295.587045][ T7070] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 295.590974][ T7070] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 295.596147][ T7070] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 295.600899][ T7070] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 295.606298][ T7070] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.613645][ T7070] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 295.617464][ T7070] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 295.620720][ T7070] usb 5-1: Product: syz [ 295.622199][ T7070] usb 5-1: Manufacturer: syz [ 295.623805][ T7070] usb 5-1: SerialNumber: syz [ 295.626853][ T7070] usb 5-1: config 0 descriptor?? [ 295.631683][ T7070] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 295.637028][ T7070] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 295.862596][ T5395] usb 5-1: USB disconnect, device number 25 [ 295.862686][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 295.871285][ T5395] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 296.491150][ T9586] unknown channel width for channel at 909000KHz? [ 296.494034][ T9586] unknown channel width for channel at 909000KHz? [ 296.496771][ T9586] unknown channel width for channel at 909000KHz? [ 296.771121][ T9602] block nbd2: shutting down sockets [ 297.171698][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.997612][ T9622] input: syz0 as /devices/virtual/input/input25 [ 298.375218][ T1106] Bluetooth: (null): Too short H5 packet [ 298.378176][ T93] Bluetooth: (null): Invalid header checksum [ 298.384635][ T93] Bluetooth: (null): Invalid header checksum [ 298.492346][ T93] Bluetooth: (null): Invalid header checksum [ 298.607546][ T1106] Bluetooth: (null): Invalid header checksum [ 298.713492][ T1106] Bluetooth: (null): Invalid header checksum [ 298.822382][ T1106] Bluetooth: (null): Invalid header checksum [ 298.934208][ T1222] Bluetooth: (null): Invalid header checksum [ 299.116423][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 299.125864][ T9657] syz.0.1219: attempt to access beyond end of device [ 299.125864][ T9657] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 299.200317][ T832] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 299.391776][ T832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 299.396215][ T832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 299.400571][ T832] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.405403][ T832] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.409345][ T832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.414645][ T832] usb 7-1: config 0 descriptor?? [ 299.416876][ T9648] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 299.762258][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 299.797822][ T9680] team1: Mode changed to "loadbalance" [ 300.184560][ T9690] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 300.242816][ T5338] block nbd0: Receive control failed (result -107) [ 300.350347][ T9692] nbd0: detected capacity change from 0 to 15960 [ 300.362654][ T9691] block nbd0: shutting down sockets [ 301.446519][ T39] audit: type=1400 audit(1722629763.619:771): avc: denied { connect } for pid=9705 comm="syz.3.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 301.455943][ T39] audit: type=1400 audit(1722629763.619:772): avc: denied { write } for pid=9705 comm="syz.3.1237" path="socket:[32857]" dev="sockfs" ino=32857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 302.014358][ T832] usbhid 7-1:0.0: can't add hid device: -71 [ 302.017145][ T832] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 302.066503][ T832] usb 7-1: USB disconnect, device number 16 [ 302.281529][ T9734] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 302.283930][ T9734] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.290986][ T9734] vhci_hcd vhci_hcd.0: Device attached [ 302.311658][ T9738] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 302.314575][ T9738] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.317892][ T9738] vhci_hcd vhci_hcd.0: Device attached [ 302.327011][ T9734] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 302.329798][ T9734] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.333902][ T9734] vhci_hcd vhci_hcd.0: Device attached [ 302.337165][ T9741] vhci_hcd: connection closed [ 302.337347][ T9735] vhci_hcd: connection closed [ 302.337356][ T9739] vhci_hcd: connection closed [ 302.341959][ T93] vhci_hcd: stop threads [ 302.346105][ T93] vhci_hcd: release socket [ 302.348698][ T93] vhci_hcd: disconnect device [ 302.356268][ T93] vhci_hcd: stop threads [ 302.361710][ T9744] syz.3.1248[9744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.361731][ T93] vhci_hcd: release socket [ 302.361885][ T9744] syz.3.1248[9744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.366022][ T93] vhci_hcd: disconnect device [ 302.379657][ T93] vhci_hcd: stop threads [ 302.382427][ T93] vhci_hcd: release socket [ 302.384975][ T93] vhci_hcd: disconnect device [ 303.068450][ T9759] syz.0.1253[9759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.068589][ T9759] syz.0.1253[9759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.122002][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 303.326653][ T9757] kvm: pic: non byte write [ 303.331607][ T9757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 303.512853][ T39] audit: type=1400 audit(1722629765.689:773): avc: denied { append } for pid=9763 comm="syz.1.1256" name="event0" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 303.524237][ T39] audit: type=1400 audit(1722629765.689:774): avc: denied { connect } for pid=9763 comm="syz.1.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.126025][ T9780] delete_channel: no stack [ 304.159027][ T39] audit: type=1400 audit(1722629766.309:775): avc: denied { setopt } for pid=9778 comm="syz.1.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 304.181935][ T39] audit: type=1400 audit(1722629766.339:776): avc: denied { bind } for pid=9778 comm="syz.1.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 304.489907][ T9793] netlink: 'syz.2.1264': attribute type 10 has an invalid length. [ 304.493527][ T9793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1264'. [ 304.498633][ T9793] batman_adv: batadv0: Adding interface: vlan1 [ 304.503676][ T9793] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.514839][ T9793] batman_adv: batadv0: Interface activated: vlan1 [ 305.278316][ T39] audit: type=1326 audit(1722629767.449:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9802 comm="syz.2.1268" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd1df779f9 code=0x0 [ 306.247905][ T39] audit: type=1326 audit(1722629768.419:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1275" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89609779f9 code=0x0 [ 306.672979][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 306.686526][ T9856] bond_slave_0: entered promiscuous mode [ 306.689745][ T9856] bond_slave_1: entered promiscuous mode [ 306.696165][ T9856] macvtap1: entered promiscuous mode [ 306.698820][ T9856] bond0: entered promiscuous mode [ 306.701951][ T9856] macvtap1: entered allmulticast mode [ 306.704451][ T9856] bond0: entered allmulticast mode [ 306.706884][ T9856] bond_slave_0: entered allmulticast mode [ 306.709474][ T9856] bond_slave_1: entered allmulticast mode [ 306.716845][ T9856] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 306.725581][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 306.742255][ T9856] bond0: left allmulticast mode [ 306.746070][ T9856] bond_slave_0: left allmulticast mode [ 306.748332][ T9856] bond_slave_1: left allmulticast mode [ 306.751302][ T9856] bond0: left promiscuous mode [ 306.753605][ T9856] bond_slave_0: left promiscuous mode [ 306.755912][ T9856] bond_slave_1: left promiscuous mode [ 306.772092][ T9856] macvtap1: left promiscuous mode [ 306.774155][ T9856] macvtap1: left allmulticast mode [ 306.781267][ T9857] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 306.890920][ T9860] netlink: 'syz.0.1285': attribute type 12 has an invalid length. [ 306.894735][ T9860] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1285'. [ 307.227584][ T9871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1289'. [ 307.231752][ T9871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1289'. [ 307.235566][ T9871] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 308.007982][ T9889] syzkaller1: entered promiscuous mode [ 308.010770][ T9889] syzkaller1: entered allmulticast mode [ 308.233458][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 308.613797][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 309.490335][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 310.475436][ T9943] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9943 comm=syz.2.1309 [ 310.481772][ T39] audit: type=1400 audit(1722629772.659:779): avc: denied { read } for pid=9941 comm="syz.2.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 311.093251][ T9960] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 311.096028][ T9960] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 311.099570][ T9960] vhci_hcd vhci_hcd.0: Device attached [ 311.106454][ T9960] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 311.113316][ T9966] vhci_hcd: connection closed [ 311.113527][ T1106] vhci_hcd: stop threads [ 311.117604][ T1106] vhci_hcd: release socket [ 311.119621][ T1106] vhci_hcd: disconnect device [ 311.202714][ T39] audit: type=1400 audit(1722629773.379:780): avc: denied { setopt } for pid=9965 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 312.004085][ T39] audit: type=1326 audit(1722629774.179:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.1.1326" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89609779f9 code=0x0 [ 312.269470][ T9982] Process accounting resumed [ 312.642657][T10003] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 312.645818][T10003] netlink: 9364 bytes leftover after parsing attributes in process `syz.3.1331'. [ 312.648756][T10003] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 313.135047][ T5348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.141710][ T5348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.145469][ T5348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.149212][ T5348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.154060][ T5348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 313.157193][ T5348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.170927][ T5346] Bluetooth: hci1: command 0x206a tx timeout [ 313.174567][ T5338] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 313.314529][T10015] chnl_net:caif_netlink_parms(): no params data found [ 313.360357][ T5395] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 313.409559][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.414248][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.417398][T10015] bridge_slave_0: entered allmulticast mode [ 313.421567][T10015] bridge_slave_0: entered promiscuous mode [ 313.427166][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.430614][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.433677][T10015] bridge_slave_1: entered allmulticast mode [ 313.437631][T10015] bridge_slave_1: entered promiscuous mode [ 313.498689][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.507144][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.550296][ T5395] usb 7-1: Using ep0 maxpacket: 8 [ 313.553453][ T5395] usb 7-1: config 0 has no interfaces? [ 313.555378][ T5395] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 313.558453][ T5395] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.563537][ T5395] usb 7-1: config 0 descriptor?? [ 313.576632][T10015] team0: Port device team_slave_0 added [ 313.582554][T10015] team0: Port device team_slave_1 added [ 313.644075][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.647009][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.655721][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.661855][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.665137][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.673935][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.734043][T10015] hsr_slave_0: entered promiscuous mode [ 313.736774][T10015] hsr_slave_1: entered promiscuous mode [ 313.739160][T10015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.741774][T10015] Cannot create hsr debugfs directory [ 313.867835][ T35] usb 7-1: USB disconnect, device number 17 [ 313.872853][T10015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.953909][T10015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.025681][T10015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.112658][T10015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.296160][T10015] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.310118][T10015] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.318838][T10015] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.325962][T10015] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.408416][T10015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.425519][T10015] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.439315][ T832] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.442400][ T832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.449132][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.452508][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.596589][T10034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.638017][ T5375] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 314.642677][T10015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.646628][ T5375] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 314.659030][T10034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.684682][T10015] veth0_vlan: entered promiscuous mode [ 314.694406][T10015] veth1_vlan: entered promiscuous mode [ 314.716744][T10034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.724796][T10015] veth0_macvtap: entered promiscuous mode [ 314.731613][T10015] veth1_macvtap: entered promiscuous mode [ 314.746406][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.751613][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.756235][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.761922][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.766117][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.770430][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.771382][ T13] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 314.774440][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.781460][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.787303][T10015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.799758][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.804629][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.809044][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.815154][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.819514][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.824366][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.828611][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.834099][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.839445][T10015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.848480][T10015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.852727][T10015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.856672][T10015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.861062][T10015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.886593][ T13] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 314.923762][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.927237][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.966415][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.969783][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.000408][ T1106] wlan1: authentication with 08:02:11:00:00:00 timed out [ 315.090490][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.177180][T10041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1343'. [ 315.250467][ T5348] Bluetooth: hci3: command tx timeout [ 315.280775][ T5348] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 315.590395][ T35] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 315.776571][ T35] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 315.780054][ T35] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 315.783485][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 315.787226][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 315.798921][ T35] usb 7-1: string descriptor 0 read error: -22 [ 315.801951][ T35] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 315.806042][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.816876][ T35] usb 7-1: config 0 descriptor?? [ 315.819876][T10046] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 315.824450][ T35] hub 7-1:0.0: bad descriptor, ignoring hub [ 315.827297][ T35] hub 7-1:0.0: probe with driver hub failed with error -5 [ 315.833225][ T35] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input26 [ 316.052097][ T35] usb 7-1: USB disconnect, device number 18 [ 316.635372][T10068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 316.670734][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.674071][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.677300][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.680726][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.683883][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.687129][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.691191][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.695380][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.698625][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.702702][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 316.702791][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.709770][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.713672][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.716855][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.719982][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.724740][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.727899][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.731741][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.734733][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.737903][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.740997][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.744200][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.747386][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.750362][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.753407][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.756568][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.759834][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.763179][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.766574][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.769731][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.777989][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.782115][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.785076][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.787843][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.791109][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.794125][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.797155][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.799838][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.803482][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.806497][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.808905][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.811748][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.814784][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.817735][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.820634][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.823850][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.826576][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.829708][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.832989][ T5394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.842658][ T5394] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz1 [ 316.941438][ T832] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 317.138836][ T832] usb 5-1: config 0 has no interfaces? [ 317.141387][ T832] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 317.145492][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.152621][ T832] usb 5-1: config 0 descriptor?? [ 317.330404][ T5348] Bluetooth: hci3: command tx timeout [ 317.434264][ T832] usb 5-1: USB disconnect, device number 26 [ 319.410491][ T5348] Bluetooth: hci3: command tx timeout [ 320.476815][T10162] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.711480][ T39] audit: type=1400 audit(1722629782.889:782): avc: denied { read append } for pid=10166 comm="syz.0.1387" name="fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 320.722190][ T39] audit: type=1400 audit(1722629782.889:783): avc: denied { open } for pid=10166 comm="syz.0.1387" path="/dev/fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 320.733458][ T39] audit: type=1400 audit(1722629782.889:784): avc: denied { map } for pid=10166 comm="syz.0.1387" path="/dev/fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 321.413671][T10180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1392'. [ 321.490760][ T35] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 321.491212][ T5348] Bluetooth: hci3: command tx timeout [ 321.710340][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 321.726088][ T35] usb 7-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 321.729943][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.733801][ T35] usb 7-1: Product: syz [ 321.735619][ T35] usb 7-1: Manufacturer: syz [ 321.737679][ T35] usb 7-1: SerialNumber: syz [ 321.742233][ T35] usb 7-1: config 0 descriptor?? [ 321.927297][T10183] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1393'. [ 321.971098][ T35] usb 7-1: Found UVC 0.00 device syz (046d:0821) [ 321.974000][ T35] usb 7-1: No valid video chain found. [ 321.998545][ T35] usb 7-1: USB disconnect, device number 19 [ 322.166184][T10198] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 322.166184][T10198] The task syz.3.1399 (10198) triggered the difference, watch for misbehavior. [ 322.256155][T10203] 9pnet_fd: Insufficient options for proto=fd [ 322.787204][ T1383] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.790408][ T1383] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.890319][ T5394] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 323.080309][ T5394] usb 5-1: Using ep0 maxpacket: 16 [ 323.086679][ T5394] usb 5-1: config 0 has an invalid interface descriptor of length 6, skipping [ 323.091100][ T5394] usb 5-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 323.095334][ T5394] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.105805][ T5394] usb 5-1: New USB device found, idVendor=0403, idProduct=6014, bcdDevice= 6.b2 [ 323.109779][ T5394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.113402][ T5394] usb 5-1: Product: syz [ 323.115627][ T5394] usb 5-1: Manufacturer: syz [ 323.117661][ T5394] usb 5-1: SerialNumber: syz [ 323.123647][ T5394] usb 5-1: config 0 descriptor?? [ 323.232065][T10230] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.1407'. [ 323.236102][T10230] netlink: 'syz.3.1407': attribute type 1 has an invalid length. [ 323.239629][T10230] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1407'. [ 323.514023][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 323.521581][ T35] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 323.600876][ T7070] usb 5-1: USB disconnect, device number 27 [ 323.710456][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 323.722797][ T35] usb 7-1: config 0 has no interfaces? [ 323.728270][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.732594][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.736091][ T35] usb 7-1: Product: syz [ 323.738049][ T35] usb 7-1: Manufacturer: syz [ 323.739897][ T35] usb 7-1: SerialNumber: syz [ 323.752626][ T35] usb 7-1: config 0 descriptor?? [ 323.982894][ T7070] usb 7-1: USB disconnect, device number 20 [ 324.624424][T10255] input: syz1 as /devices/virtual/input/input27 [ 325.032928][T10264] netlink: 'syz.2.1421': attribute type 10 has an invalid length. [ 325.052317][T10264] batman_adv: batadv0: Adding interface: team0 [ 325.055276][T10264] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.067118][T10264] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 325.542934][ T39] audit: type=1400 audit(1722629787.719:785): avc: denied { read } for pid=10271 comm="syz.3.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 325.932922][T10287] raw_sendmsg: syz.1.1428 forgot to set AF_INET. Fix it! [ 327.420367][ T5395] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 327.680293][ T5395] usb 5-1: Using ep0 maxpacket: 16 [ 327.688991][ T5395] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 327.694472][ T5395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.699184][ T5395] usb 5-1: Product: syz [ 327.705761][ T5395] usb 5-1: Manufacturer: syz [ 327.708267][ T5395] usb 5-1: SerialNumber: syz [ 327.714762][ T5395] usb 5-1: config 0 descriptor?? [ 327.719698][ T5395] appledisplay 5-1:0.0: Could not find int-in endpoint [ 327.724904][ T5395] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 328.097032][ T5395] usb 5-1: USB disconnect, device number 28 [ 328.910335][ T832] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 328.920455][ T5373] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 329.092432][ T832] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 329.101051][ T832] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 329.104975][ T832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.108536][ T832] usb 7-1: Product: syz [ 329.110458][ T832] usb 7-1: Manufacturer: syz [ 329.112429][ T832] usb 7-1: SerialNumber: syz [ 329.120341][ T5373] usb 5-1: Using ep0 maxpacket: 32 [ 329.126462][ T5373] usb 5-1: New USB device found, idVendor=0421, idProduct=003a, bcdDevice=e6.7e [ 329.130287][ T5373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.133382][ T5373] usb 5-1: Product: syz [ 329.135103][ T5373] usb 5-1: Manufacturer: syz [ 329.137126][ T5373] usb 5-1: SerialNumber: syz [ 329.141329][ T5373] usb 5-1: config 0 descriptor?? [ 329.145570][ T5373] usb 5-1: bad CDC descriptors [ 329.147712][ T5373] cdc_acm 5-1:0.0: Zero length descriptor references [ 329.150651][ T5373] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 329.355723][ T832] usb 5-1: USB disconnect, device number 29 [ 329.772396][T10355] dccp_close: ABORT with 374 bytes unread [ 329.813054][ T39] audit: type=1400 audit(1722629791.989:786): avc: denied { getopt } for pid=10358 comm="syz.1.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 329.919356][T10365] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 330.100595][ T39] audit: type=1400 audit(1722629792.269:787): avc: denied { bind } for pid=10378 comm="syz.0.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.390922][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.417888][T10395] bridge_slave_1: left allmulticast mode [ 330.420537][T10395] bridge_slave_1: left promiscuous mode [ 330.424700][T10395] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.439020][T10395] bridge_slave_0: left allmulticast mode [ 330.442051][T10395] bridge_slave_0: left promiscuous mode [ 330.444537][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.689934][T10402] bridge_slave_1: entered promiscuous mode [ 330.697609][T10401] bridge_slave_1: left promiscuous mode [ 330.849960][T10411] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1482'. [ 330.854071][T10411] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1482'. [ 331.556118][T10435] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 331.631270][ T5395] usb 7-1: USB disconnect, device number 21 [ 333.110937][ T5395] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 333.293822][ T5395] usb 5-1: Using ep0 maxpacket: 32 [ 333.298160][ T5395] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.302953][ T5395] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 333.310985][ T5395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.315062][ T5395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.318698][ T5395] usb 5-1: Product: syz [ 333.320606][ T5395] usb 5-1: Manufacturer: syz [ 333.322842][ T5395] usb 5-1: SerialNumber: syz [ 333.539796][ T5395] usb 5-1: USB disconnect, device number 30 [ 334.200505][ T39] audit: type=1400 audit(1722629796.349:788): avc: denied { map } for pid=10477 comm="syz.0.1505" path="socket:[35776]" dev="sockfs" ino=35776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 334.627392][ T39] audit: type=1400 audit(1722629796.799:789): avc: denied { map } for pid=10489 comm="syz.3.1507" path="/338/file0/blkio.bfq.io_serviced" dev="9p" ino=36185991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 334.730474][T10492] netlink: 'syz.3.1508': attribute type 2 has an invalid length. [ 334.733701][T10492] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1508'. [ 334.972169][T10502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1511'. [ 335.126910][ T5375] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 335.317246][ T5375] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.322538][ T5375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 335.327525][ T5375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 335.331866][ T5375] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.337654][ T5375] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.343352][ T5375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.350683][ T5375] usb 7-1: config 0 descriptor?? [ 335.630394][ T5395] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 335.766079][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.769225][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.773422][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.776384][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.779310][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.782534][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.785477][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.788586][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.791583][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.794307][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.797122][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.800132][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.803374][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.806483][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.809696][ T5375] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 335.814203][ T5395] usb 5-1: Using ep0 maxpacket: 8 [ 335.818212][ T5375] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 335.823623][ T5395] usb 5-1: config 0 has no interfaces? [ 335.832672][ T5395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.835978][ T5395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.838831][ T5395] usb 5-1: Product: syz [ 335.843546][ T5395] usb 5-1: Manufacturer: syz [ 335.846667][ T5375] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 335.851366][ T5395] usb 5-1: SerialNumber: syz [ 335.857219][ T5395] usb 5-1: config 0 descriptor?? [ 336.040163][ T832] usb 7-1: USB disconnect, device number 22 [ 336.074076][ T5395] usb 5-1: USB disconnect, device number 31 [ 336.684949][T10540] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64873 sclass=netlink_xfrm_socket pid=10540 comm=syz.3.1522 [ 336.981517][ T39] audit: type=1400 audit(1722629799.149:790): avc: denied { getopt } for pid=10549 comm="syz.0.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 337.136644][ T39] audit: type=1400 audit(1722629799.309:791): avc: denied { execute } for pid=10553 comm="syz.0.1530" path="/63/file0/bus" dev="9p" ino=36185990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 337.145067][T10554] netfs: Couldn't get user pages (rc=-14) [ 337.169697][ T39] audit: type=1400 audit(1722629799.339:792): avc: denied { write } for pid=10553 comm="syz.0.1530" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 337.170528][T10554] random: crng reseeded on system resumption [ 337.179466][ T39] audit: type=1400 audit(1722629799.339:793): avc: denied { open } for pid=10553 comm="syz.0.1530" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 337.210508][ T7070] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 337.376062][T10566] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 337.619750][T10554] Restarting kernel threads ... done. [ 337.630529][ T7070] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.647518][ T7070] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.652629][ T7070] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 337.665620][ T7070] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.670341][ T39] audit: type=1400 audit(1722629799.789:794): avc: denied { ioctl } for pid=10553 comm="syz.0.1530" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 337.857709][ T7070] usb 7-1: config 0 descriptor?? [ 338.225259][ T39] audit: type=1400 audit(1722629800.389:795): avc: denied { watch } for pid=10579 comm="syz.3.1536" path="/350/net_prio.prioidx" dev="tmpfs" ino=1919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 338.235893][ T39] audit: type=1400 audit(1722629800.389:796): avc: denied { watch_sb watch_reads } for pid=10579 comm="syz.3.1536" path="/350/net_prio.prioidx" dev="tmpfs" ino=1919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 338.420668][ T39] audit: type=1400 audit(1722629800.599:797): avc: denied { ioctl } for pid=10587 comm="syz.0.1542" path="/dev/fb0" dev="devtmpfs" ino=639 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 338.816033][ T7070] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 338.821455][ T7070] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 338.824902][ T7070] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 338.833186][ T7070] usb 7-1: USB disconnect, device number 23 [ 340.114291][T10618] netlink: 'syz.0.1553': attribute type 4 has an invalid length. [ 340.176029][ T39] audit: type=1400 audit(1722629802.349:798): avc: denied { mount } for pid=10619 comm="syz.0.1554" name="/" dev="rpc_pipefs" ino=38943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 340.340017][ T39] audit: type=1400 audit(1722629802.509:799): avc: denied { setopt } for pid=10632 comm="syz.0.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.861443][ C2] vkms_vblank_simulate: vblank timer overrun [ 341.949096][T10663] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 342.171260][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 342.171274][ T39] audit: type=1326 audit(1722629804.349:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.1.1572" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89609779f9 code=0x0 [ 342.241438][ C2] vkms_vblank_simulate: vblank timer overrun [ 342.290546][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 342.485842][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.494608][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.504868][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.510526][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.514788][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.530786][ T10] usb 7-1: config 0 descriptor?? [ 342.749000][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 342.753722][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 342.759428][ T10] usb 7-1: USB disconnect, device number 24 [ 342.943236][ C2] vkms_vblank_simulate: vblank timer overrun [ 343.069418][ C2] vkms_vblank_simulate: vblank timer overrun [ 343.282173][T10678] futex_wake_op: syz.0.1574 tries to shift op by 32; fix this program [ 343.304654][T10682] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1576'. [ 343.422160][T10684] Bluetooth: MGMT ver 1.23 [ 343.671602][T10688] binder: 10677:10688 ioctl c0306201 200011c0 returned -14 [ 344.946893][T10663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.990326][ T5395] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 345.209782][ T5395] usb 5-1: Using ep0 maxpacket: 8 [ 345.220821][ T5395] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 345.226989][ T5395] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.232940][ T5395] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.249373][ T5395] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.261130][ T5395] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.268953][ T5395] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 345.274765][ T5395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.523002][ T5395] usb 5-1: usb_control_msg returned -32 [ 345.525867][ T5395] usbtmc 5-1:16.0: can't read capabilities [ 345.893914][T10724] usbtmc 5-1:16.0: control status returned 0 [ 346.101038][ T832] usb 5-1: USB disconnect, device number 32 [ 346.189430][T10728] kvm: pic: non byte write [ 346.437454][T10739] ipip0: entered promiscuous mode [ 347.039889][T10763] bond0: (slave bond_slave_0): Releasing backup interface [ 347.050798][T10763] bond0: (slave bond_slave_1): Releasing backup interface [ 347.094835][T10763] team0: Port device team_slave_0 removed [ 347.116611][T10763] team0: Port device team_slave_1 removed [ 347.121182][T10763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.124939][T10763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.130100][T10763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.133866][T10763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.296753][ T1106] Bluetooth: hci4: Frame reassembly failed (-84) [ 348.305374][ T93] Bluetooth: hci4: Frame reassembly failed (-84) [ 348.313063][T10814] netlink: 'syz.3.1618': attribute type 10 has an invalid length. [ 348.317843][T10814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1618'. [ 348.323479][T10814] batman_adv: batadv0: Adding interface: vlan1 [ 348.329055][T10814] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.341969][T10814] batman_adv: batadv0: Interface activated: vlan1 [ 349.009955][T10835] syzkaller1: entered promiscuous mode [ 349.014934][T10835] syzkaller1: entered allmulticast mode [ 349.107139][T10836] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1623'. [ 349.315701][ T39] audit: type=1400 audit(1722629811.489:802): avc: denied { relabelfrom } for pid=10845 comm="syz.1.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 349.324699][ T39] audit: type=1400 audit(1722629811.489:803): avc: denied { relabelto } for pid=10845 comm="syz.1.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 349.650626][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 350.292288][ T5348] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 350.458468][ T39] audit: type=1326 audit(1722629812.629:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.1.1636" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89609779f9 code=0x0 [ 350.835450][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'. [ 350.886977][ T39] audit: type=1326 audit(1722629813.059:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.0.1638" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f389ad779f9 code=0x0 [ 351.278376][T10886] bridge0: port 3(syz_tun) entered blocking state [ 351.281823][T10886] bridge0: port 3(syz_tun) entered disabled state [ 351.285156][T10886] syz_tun: entered allmulticast mode [ 351.289602][T10886] syz_tun: entered promiscuous mode [ 351.292790][T10886] bridge0: port 3(syz_tun) entered blocking state [ 351.295784][T10886] bridge0: port 3(syz_tun) entered forwarding state [ 351.398364][ T39] audit: type=1400 audit(1722629813.569:806): avc: denied { ioctl } for pid=10893 comm="syz.2.1644" path="socket:[39511]" dev="sockfs" ino=39511 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 351.635345][T10909] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 351.639134][T10909] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1650'. [ 351.953053][T10926] kernel read not supported for file / } (pid: 10926 comm: syz.0.1655) [ 351.985948][ T39] audit: type=1800 audit(1722629814.129:807): pid=10926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1655" name=20017DF201 dev="mqueue" ino=37744 res=0 errno=0 [ 352.419607][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1660'. [ 353.293347][ T39] audit: type=1400 audit(1722629815.469:808): avc: denied { map } for pid=10961 comm="syz.1.1669" path="/dev/hpet" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 355.638183][T11019] netfs: Couldn't get user pages (rc=-14) [ 355.650166][T11019] random: crng reseeded on system resumption [ 355.898663][T11019] Restarting kernel threads ... done. [ 357.320176][ T39] audit: type=1400 audit(1722629819.489:809): avc: denied { read } for pid=11045 comm="syz.0.1697" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 357.649435][ T39] audit: type=1400 audit(1722629819.819:810): avc: denied { connect } for pid=11049 comm="syz.2.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 359.130526][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 359.219264][T11079] ALSA: seq fatal error: cannot create timer (-22) [ 359.229270][T11079] xt_connbytes: Forcing CT accounting to be enabled [ 359.232814][T11079] --map-set only usable from mangle table [ 359.720317][ T5394] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 359.922628][ T35] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 359.922909][ T5394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.929553][ T5394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.934563][ T5394] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.942010][ T5394] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.946003][ T5394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.956595][ T5394] usb 7-1: config 0 descriptor?? [ 360.100298][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 360.104875][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 360.112953][ T35] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 360.116802][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.119583][ T35] usb 5-1: Product: syz [ 360.121458][ T35] usb 5-1: Manufacturer: syz [ 360.124013][ T35] usb 5-1: SerialNumber: syz [ 360.127818][ T35] usb 5-1: config 0 descriptor?? [ 360.130683][T11085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 360.134338][ T35] hub 5-1:0.0: bad descriptor, ignoring hub [ 360.136857][ T35] hub 5-1:0.0: probe with driver hub failed with error -5 [ 360.141629][ T35] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input28 [ 360.362774][ T35] usb 5-1: USB disconnect, device number 33 [ 360.365313][ C3] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 360.373919][ T5394] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 360.388736][ T5394] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 360.407316][ T5394] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 362.556411][ T10] usb 7-1: USB disconnect, device number 25 [ 362.820894][T11115] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1720'. [ 362.978676][T11121] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 363.000731][T11121] batman_adv: batadv0: Removing interface: team0 [ 363.011349][T11121] bridge0: port 4(team0) entered blocking state [ 363.015520][T11121] bridge0: port 4(team0) entered disabled state [ 363.019777][T11121] team0: entered allmulticast mode [ 363.022331][T11121] team_slave_0: entered allmulticast mode [ 363.025158][T11121] team_slave_1: entered allmulticast mode [ 363.034009][T11119] netfs: Couldn't get user pages (rc=-14) [ 363.036046][T11121] team0: entered promiscuous mode [ 363.038379][T11121] team_slave_0: entered promiscuous mode [ 363.041617][T11121] team_slave_1: entered promiscuous mode [ 363.086233][T11119] random: crng reseeded on system resumption [ 363.300730][T11129] fuse: Bad value for 'fd' [ 363.369219][T11119] Restarting kernel threads ... done. [ 363.401576][T11132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1726'. [ 363.401633][T11133] netlink: 'syz.0.1728': attribute type 9 has an invalid length. [ 363.408928][T11133] netlink: 'syz.0.1728': attribute type 7 has an invalid length. [ 363.413225][T11133] netlink: 'syz.0.1728': attribute type 8 has an invalid length. [ 363.478646][T11136] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1729'. [ 363.483399][T11136] netlink: 'syz.0.1729': attribute type 2 has an invalid length. [ 363.487302][T11136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1729'. [ 363.950385][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 364.034860][T11119] syz.1.1722 (11119) used greatest stack depth: 20144 bytes left [ 364.144851][ T10] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 364.149512][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 364.160454][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.164450][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.170189][ T10] usb 5-1: config 0 descriptor?? [ 364.178408][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 364.505086][ T39] audit: type=1400 audit(1722629826.679:811): avc: denied { read } for pid=11160 comm="syz.3.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 364.513174][ T39] audit: type=1400 audit(1722629826.679:812): avc: denied { remount } for pid=11160 comm="syz.3.1738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 364.784798][ T5348] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 365.577801][T11190] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11190 comm=syz.1.1746 [ 366.634666][ T39] audit: type=1400 audit(1722629828.809:813): avc: denied { getopt } for pid=11202 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 366.708831][ T10] usb 5-1: USB disconnect, device number 34 [ 367.050300][ T35] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 367.145922][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1758'. [ 367.199945][ T5348] Bluetooth: hci3: Malformed LE Event: 0x0d [ 367.232773][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 367.238988][ T35] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 367.242187][ T35] usb 7-1: config 0 has no interface number 0 [ 367.244625][ T35] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 367.249395][ T35] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 367.255389][ T35] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 367.258900][ T35] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 367.262188][ T35] usb 7-1: Product: syz [ 367.263757][ T35] usb 7-1: SerialNumber: syz [ 367.266942][ T35] usb 7-1: config 0 descriptor?? [ 367.271397][ T35] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 367.275429][ T35] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input29 [ 367.506862][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 367.507210][ T7070] usb 7-1: USB disconnect, device number 26 [ 367.509392][ C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 367.519556][ T7070] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 368.082951][ T58] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 368.235443][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 368.260426][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 368.271595][ T58] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 368.275705][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.279234][ T58] usb 5-1: Product: syz [ 368.281222][ T58] usb 5-1: Manufacturer: syz [ 368.283246][ T58] usb 5-1: SerialNumber: syz [ 368.287564][ T58] usb 5-1: config 0 descriptor?? [ 368.509902][ T58] usb 5-1: Found UVC 0.00 device syz (046d:0821) [ 368.512865][ T58] usb 5-1: No valid video chain found. [ 368.516742][ T58] usb 5-1: USB disconnect, device number 35 [ 368.773658][T11257] input: syz1 as /devices/virtual/input/input30 [ 368.862547][ T5348] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 368.868558][ T5348] Bluetooth: hci1: Injecting HCI hardware error event [ 368.874447][ T5346] Bluetooth: hci1: hardware error 0x00 [ 369.618234][T11272] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1777'. [ 369.627348][T11272] syz.1.1777[11272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.627479][T11272] syz.1.1777[11272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.457543][T11283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1781'. [ 370.566099][T11290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.713893][ T39] audit: type=1400 audit(1722629832.889:814): avc: denied { setopt } for pid=11288 comm="syz.0.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 370.780400][ T7070] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 370.930664][ T5346] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 370.963290][ T7070] usb 7-1: not running at top speed; connect to a high speed hub [ 370.967437][ T7070] usb 7-1: config 1 interface 0 has no altsetting 0 [ 370.973014][ T7070] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.976522][ T7070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.979643][ T7070] usb 7-1: Product: ы [ 370.981444][ T7070] usb 7-1: Manufacturer: 㱉抅䪣풎遊醲䤀釤槍鮡㴒䏃䂣媧훿쬆﷭쁤ᰈ 쏲ꘑ଄븋穋廪ჲ [ 370.990682][ T7070] usb 7-1: SerialNumber: 褰뇯퀈곳䥤靲僕⒄꽞੪䆮馎왱쵊蕦ꩋ䑳㑲揮尉ោẎ䧚닻鷼 [ 371.236754][ T7070] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 371.251257][ T7070] usb 7-1: USB disconnect, device number 27 [ 372.052767][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 372.057139][T11315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1793'. [ 372.079397][T11315] erspan1: entered promiscuous mode [ 372.081991][T11315] erspan1: entered allmulticast mode [ 372.106879][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 372.479297][T11340] syzkaller0: entered promiscuous mode [ 372.484510][T11340] syzkaller0: entered allmulticast mode [ 374.721063][T11352] netlink: 'syz.1.1808': attribute type 2 has an invalid length. [ 374.726578][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1808'. [ 374.731869][T11352] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 374.827478][ T39] audit: type=1400 audit(1722629836.999:815): avc: denied { name_bind } for pid=11369 comm="syz.2.1814" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 375.027644][T11382] netlink: 'syz.3.1820': attribute type 1 has an invalid length. [ 375.030719][T11382] netlink: 'syz.3.1820': attribute type 2 has an invalid length. [ 376.362118][T11418] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 376.931279][ T39] audit: type=1326 audit(1722629839.109:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11444 comm="syz.3.1843" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e363779f9 code=0x0 [ 376.979883][ T39] audit: type=1800 audit(1722629839.149:817): pid=11440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1841" name="/file0" dev="overlay" ino=787 res=0 errno=0 [ 376.999275][ T39] audit: type=1804 audit(1722629839.169:818): pid=11440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1841" name="/newroot/148/bus/file0" dev="overlay" ino=787 res=1 errno=0 [ 377.097924][ T39] audit: type=1400 audit(1722629839.269:819): avc: denied { unmount } for pid=8286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 377.846016][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.372535][T11508] netlink: 'syz.0.1865': attribute type 1 has an invalid length. [ 378.375511][T11508] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.1865'. [ 378.379194][T11508] netlink: 'syz.0.1865': attribute type 1 has an invalid length. [ 378.383016][T11508] netlink: 'syz.0.1865': attribute type 2 has an invalid length. [ 378.598529][T11519] netlink: 'syz.2.1871': attribute type 2 has an invalid length. [ 378.606095][T11519] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1871'. [ 379.920764][T11570] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1886'. [ 380.143497][T11575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1887'. [ 381.530881][T11602] netlink: 'syz.0.1897': attribute type 1 has an invalid length. [ 381.534980][T11602] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1897'. [ 382.528117][ T5346] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 383.494869][T11641] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 384.048863][T11654] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 384.052294][T11654] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1924'. [ 384.228166][ T1383] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.231010][ T1383] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.812148][T11714] xt_NFQUEUE: number of total queues is 0 [ 386.282519][ T40] Bluetooth: (null): Too short H5 packet [ 386.285154][ T40] Bluetooth: (null): Invalid header checksum [ 386.295123][ T40] Bluetooth: (null): Invalid header checksum [ 386.333777][T11739] netlink: 'syz.1.1956': attribute type 4 has an invalid length. [ 386.382270][T11734] netlink: 'syz.1.1956': attribute type 4 has an invalid length. [ 386.402182][ T40] Bluetooth: (null): Invalid header checksum [ 386.411438][ T39] audit: type=1400 audit(1722629848.589:820): avc: denied { accept } for pid=11733 comm="syz.1.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 386.452277][ T5375] IPVS: starting estimator thread 0... [ 386.518998][ T93] Bluetooth: (null): Invalid header checksum [ 386.551750][ T5346] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 386.556016][ T5346] Bluetooth: hci3: Injecting HCI hardware error event [ 386.562495][ T5348] Bluetooth: hci3: hardware error 0x00 [ 386.568956][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.599491][ T39] audit: type=1400 audit(1722629848.769:821): avc: denied { getopt } for pid=11722 comm="syz.0.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 386.605768][T11742] IPVS: using max 22 ests per chain, 52800 per kthread [ 386.623482][ T40] Bluetooth: (null): Invalid header checksum [ 386.732925][ T13] Bluetooth: (null): Invalid header checksum [ 386.842899][ T93] Bluetooth: (null): Invalid header checksum [ 387.093581][T11752] ipip0: entered promiscuous mode [ 387.143870][T11759] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 387.149905][T11759] Cannot find add_set index 0 as target [ 387.217368][ T39] audit: type=1400 audit(1722629849.389:822): avc: denied { remount } for pid=11762 comm="syz.0.1960" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 387.322242][T11764] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.694239][ T5348] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 389.054581][ T39] audit: type=1400 audit(1722629851.229:823): avc: denied { watch } for pid=11799 comm="syz.3.1973" path="/419/control" dev="tmpfs" ino=2293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 389.865175][T11823] program syz.0.1980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.180898][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.205705][T11828] jump_label: Fatal kernel bug, unexpected op at preempt_notifier_register+0xd/0xf0 [ffffffff815967ed] (eb 12 90 48 c7 != 66 90 0f 1f 00)) size:2 type:1 [ 390.213659][T11828] ------------[ cut here ]------------ [ 390.220084][T11828] kernel BUG at arch/x86/kernel/jump_label.c:73! [ 390.244351][T11828] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 390.247885][T11828] CPU: 1 UID: 0 PID: 11828 Comm: syz.2.1983 Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 390.253689][T11828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 390.259277][T11828] RIP: 0010:__jump_label_patch+0x378/0x400 [ 390.261613][T11828] Code: 48 c7 c3 60 40 24 93 e8 56 84 59 00 45 89 e1 49 89 d8 4c 89 f1 41 55 4c 89 f2 4c 89 f6 48 c7 c7 60 38 46 8b e8 89 f7 39 00 90 <0f> 0b e8 31 84 59 00 90 0f 0b e8 29 84 59 00 90 0f 0b 48 c7 c7 70 [ 390.268880][T11828] RSP: 0018:ffffc90003d67c38 EFLAGS: 00010286 [ 390.271249][T11828] RAX: 0000000000000096 RBX: ffffffff8b466ee1 RCX: ffffffff816b0039 [ 390.274666][T11828] RDX: 0000000000000000 RSI: ffffffff816b9416 RDI: 0000000000000005 [ 390.278379][T11828] RBP: ffffc90003d67c80 R08: 0000000000000005 R09: 0000000000000000 [ 390.282636][T11828] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000002 [ 390.286764][T11828] R13: 0000000000000001 R14: ffffffff815967ed R15: 0000000000000085 [ 390.291694][T11828] FS: 00005555904bd500(0000) GS:ffff88806b100000(0000) knlGS:0000000000000000 [ 390.297007][T11828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.303518][T11828] CR2: 00005555765a2808 CR3: 000000003e4ee000 CR4: 0000000000352ef0 [ 390.307284][T11828] Call Trace: [ 390.308928][T11828] [ 390.310255][T11828] ? show_regs+0x8c/0xa0 [ 390.312140][T11828] ? die+0x36/0xa0 [ 390.314180][T11828] ? do_trap+0x232/0x430 [ 390.318855][T11828] ? __jump_label_patch+0x378/0x400 [ 390.321140][T11828] ? __jump_label_patch+0x378/0x400 [ 390.323779][T11828] ? do_error_trap+0xf4/0x230 [ 390.326071][T11828] ? __jump_label_patch+0x378/0x400 [ 390.329161][T11828] ? handle_invalid_op+0x34/0x40 [ 390.331384][T11828] ? __jump_label_patch+0x378/0x400 [ 390.333826][T11828] ? exc_invalid_op+0x2e/0x50 [ 390.336421][T11828] ? asm_exc_invalid_op+0x1a/0x20 [ 390.339017][T11828] ? preempt_notifier_register+0xd/0xf0 [ 390.341811][T11828] ? __wake_up_klogd.part.0+0x99/0xf0 [ 390.344675][T11828] ? vprintk+0x86/0xa0 [ 390.346744][T11828] ? __jump_label_patch+0x378/0x400 [ 390.349243][T11828] ? __jump_label_patch+0x377/0x400 [ 390.351420][T11828] arch_jump_label_transform_queue+0x7e/0x120 [ 390.354286][T11828] __jump_label_update+0x125/0x420 [ 390.357058][T11828] jump_label_update+0x1d7/0x400 [ 390.360065][T11828] __static_key_slow_dec_cpuslocked.part.0+0x4e/0x90 [ 390.363696][T11828] static_key_slow_dec+0x7c/0xc0 [ 390.367268][T11828] kvm_put_kvm+0x8f8/0xb80 [ 390.369632][T11828] ? __pfx_kvm_vm_release+0x10/0x10 [ 390.372086][T11828] kvm_vm_release+0x42/0x60 [ 390.374364][T11828] __fput+0x408/0xbb0 [ 390.376424][T11828] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.379144][T11828] task_work_run+0x14e/0x250 [ 390.381310][T11828] ? __pfx_task_work_run+0x10/0x10 [ 390.383607][T11828] ? __pkru_allows_pkey+0x52/0xb0 [ 390.386583][T11828] syscall_exit_to_user_mode+0x27b/0x2a0 [ 390.389111][T11828] do_syscall_64+0xda/0x250 [ 390.391341][T11828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.394318][T11828] RIP: 0033:0x7fbd1df779f9 [ 390.396252][T11828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.405132][T11828] RSP: 002b:00007fffa1c24188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 390.408763][T11828] RAX: 0000000000000000 RBX: 000000000005f2d0 RCX: 00007fbd1df779f9 [ 390.412089][T11828] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 390.415413][T11828] RBP: 00007fffa1c24260 R08: 0000000000000001 R09: 00007fffa1c2446f [ 390.418747][T11828] R10: 00007fbd1de00000 R11: 0000000000000246 R12: 0000000000000032 [ 390.421861][T11828] R13: 00007fffa1c24280 R14: 00007fffa1c242a0 R15: ffffffffffffffff [ 390.425195][T11828] [ 390.426579][T11828] Modules linked in: [ 390.428293][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.432214][T11828] ---[ end trace 0000000000000000 ]--- [ 390.434730][T11828] RIP: 0010:__jump_label_patch+0x378/0x400 [ 390.437479][T11828] Code: 48 c7 c3 60 40 24 93 e8 56 84 59 00 45 89 e1 49 89 d8 4c 89 f1 41 55 4c 89 f2 4c 89 f6 48 c7 c7 60 38 46 8b e8 89 f7 39 00 90 <0f> 0b e8 31 84 59 00 90 0f 0b e8 29 84 59 00 90 0f 0b 48 c7 c7 70 [ 390.445279][T11828] RSP: 0018:ffffc90003d67c38 EFLAGS: 00010286 [ 390.447871][T11828] RAX: 0000000000000096 RBX: ffffffff8b466ee1 RCX: ffffffff816b0039 [ 390.451456][T11828] RDX: 0000000000000000 RSI: ffffffff816b9416 RDI: 0000000000000005 [ 390.454896][T11828] RBP: ffffc90003d67c80 R08: 0000000000000005 R09: 0000000000000000 [ 390.458373][T11828] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000002 [ 390.461796][T11828] R13: 0000000000000001 R14: ffffffff815967ed R15: 0000000000000085 [ 390.465000][T11828] FS: 00005555904bd500(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 390.468564][T11828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.473308][T11828] CR2: 00007f389bb579c8 CR3: 000000003e4ee000 CR4: 0000000000352ef0 [ 390.476518][T11828] DR0: 00000000000017a8 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.479638][T11828] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 390.482944][T11828] Kernel panic - not syncing: Fatal exception [ 390.485966][T11828] Kernel Offset: disabled [ 390.487704][T11828] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:17:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=ffffc900038bef98 RCX=ffffffff813cdf46 RDX=ffff888040f2c880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900038bef18 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc900038bef98 R13=ffffffff81761170 R14=ffffc900038bf058 R15=ffff888040f2c880 RIP=ffffffff813cdf46 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f389bb576c0 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2da1fffc CR3=00000000490a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389aed6488 00007f389aed6480 00007f389aed6478 00007f389aed6450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ba3d100 00007f389aed6440 00007f389aed6458 00007f389aed64a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389aed6498 00007f389aed6490 00007f389aed6488 00007f389aed6480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff888044818000 RCX=0000000000000001 RDX=1ffff11003b05bb5 RSI=ffffffff8b4cc800 RDI=ffff88801d82dda8 RBP=ffff88806b13edc0 RSP=ffffc900008b0cd0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888040f2a440 R13=0000000000000000 R14=0000000000000001 R15=ffff88801d82dd20 RIP=ffffffff81668f28 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555904bd500 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555765a2808 CR3=000000003e4ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=518a6f53c0fc2845 2ab072310c833f6d 518a6f53c0fc2845 2ab072310c833f6d 518a6f53c0fc2845 2ab072310c833f6d 518a6f53c0fc2845 2ab072310c833f6d ZMM18=28f2b3a6fb5da234 a13cfa1f44bd57ef 28f2b3a6fb5da234 a13cfa1f44bd57ef 28f2b3a6fb5da234 a13cfa1f44bd57ef 28f2b3a6fb5da234 a13cfa1f44bd57ef ZMM19=de1e000000000000 0000000000000009 de1e000000000000 0000000000000008 de1e000000000000 0000000000000007 de1e000000000000 0000000000000006 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=a1239492a1239492 a1239492a1239492 a1239492a1239492 a1239492a1239492 a1239492a1239492 a1239492a1239492 a1239492a1239492 a1239492a1239492 ZMM22=d150e623d150e623 d150e623d150e623 d150e623d150e623 d150e623d150e623 d150e623d150e623 d150e623d150e623 d150e623d150e623 d150e623d150e623 ZMM23=47a3ea8e47a3ea8e 47a3ea8e47a3ea8e 47a3ea8e47a3ea8e 47a3ea8e47a3ea8e 47a3ea8e47a3ea8e 47a3ea8e47a3ea8e 47a3ea8e47a3ea8e 47a3ea8e47a3ea8e ZMM24=0fc1506c0fc1506c 0fc1506c0fc1506c 0fc1506c0fc1506c 0fc1506c0fc1506c 0fc1506c0fc1506c 0fc1506c0fc1506c 0fc1506c0fc1506c 0fc1506c0fc1506c ZMM25=9e0dfaae9e0dfaae 9e0dfaae9e0dfaae 9e0dfaae9e0dfaae 9e0dfaae9e0dfaae 9e0dfaae9e0dfaae 9e0dfaae9e0dfaae 9e0dfaae9e0dfaae 9e0dfaae9e0dfaae ZMM26=35d1a6e735d1a6e7 35d1a6e735d1a6e7 35d1a6e735d1a6e7 35d1a6e735d1a6e7 35d1a6e735d1a6e7 35d1a6e735d1a6e7 35d1a6e735d1a6e7 35d1a6e735d1a6e7 ZMM27=5b293a845b293a84 5b293a845b293a84 5b293a845b293a84 5b293a845b293a84 5b293a845b293a84 5b293a845b293a84 5b293a845b293a84 5b293a845b293a84 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2511000025110000 2511000025110000 2511000025110000 2511000025110000 2511000025110000 2511000025110000 2511000025110000 2511000025110000 info registers vcpu 2 CPU#2 RAX=0000000000020000 RBX=0000000000000000 RCX=1ffff110046865ed RDX=0000000000020000 RSI=0000000000000021 RDI=ffff888023432f94 RBP=0000000000000000 RSP=ffffc90005f57950 R8 =0000000000000000 R9 =0000000000000000 R10=000000000000000a R11=0000000000000002 R12=0000000000000000 R13=ffff888023432f70 R14=0000000000000021 R15=ffff888023432440 RIP=ffffffff816827f0 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f389af07a8c CR3=0000000026b94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000002000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9d61ee20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6120303d64697520 30343431313d6469 70203a293831383a 3936312e39333800 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6120303764637520 3034343131376463 7020302332313230 3336312433333200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 35363320322e3020 3320202d2d2d2d00 2d2d2d2d2d202032 3238313154202929 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2220202031203020 202020202d2d2000 21202d2d20202020 3025203130202323 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 222a576e6f3d3c33 3f3b326c6c6c6c6c 6c6c6c512a3a6c72 3a256e723a21786f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f3c393b38243a33 392a2a51343e3600 3b306f7a737e2a38 306f7063792a2323 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000588a73 RBX=0000000000000003 RCX=ffffffff8b11c529 RDX=0000000000000000 RSI=ffffffff8b4cc500 RDI=ffffffff8bb08400 RBP=ffffed10030db488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d666fd9 R10=ffff88806b337ecb R11=0000000000000000 R12=0000000000000003 R13=ffff8880186da440 R14=ffffffff9012b958 R15=0000000000000000 RIP=ffffffff8b11d91f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b30816ff8 CR3=000000004a1a4000 CR4=00352ef0 DR0=00000000000017a8 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff01a42540 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389ade6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000