last executing test programs: 26.402291283s ago: executing program 3 (id=926): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 26.332999219s ago: executing program 3 (id=928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvfrom$packet(r3, &(0x7f00000002c0)=""/244, 0xf4, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r4, 0x2f, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="320200000200000005f1000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6400767b65746f6f7e05"], 0x232) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x1, 0x0, 0xffffffff, 0x161, {{0x18, 0x4, 0x1, 0x6, 0x60, 0x64, 0x0, 0xb3, 0x4, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x1c, 0xf4, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0xb68}, {@loopback, 0xb3}]}, @generic={0x7, 0x2}, @lsrr={0x83, 0xb, 0x9a, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x20}]}, @end, @rr={0x7, 0x1b, 0xa2, [@local, @loopback, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @remote]}, @rr={0x7, 0x7, 0x5f, [@multicast1]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}]}, 0x3c}}, 0x0) 26.083031554s ago: executing program 3 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000a"], 0x2c}, 0x1, 0xc00000000000000}, 0x0) syz_clone(0x80011, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r4}}]}}) close_range(r2, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x5bce40, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, &(0x7f0000000480)={0x20, 0x22, 0x46, {0x46, 0xf, "e5ce5e78fa6ff04ce0064833ba936ee579c2ad198e5f372756e9d31bca114e01c80a00000000000088a184861b727abe5fe1aa0eb2e4a0b52595fb91c9029e79772534b7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "4488ae68fcd685ffa1706749381b6f685ce53cd52eda5e37615836ab3a68f1ec76f9fc3bdf16860e0b"}}, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0xfd, 0x1, {0x22, 0x178}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x30, 0xa8, "0d036432acac1ae5717f6a39af03efcc3c68c6e906149073c3a105993657c1ef0b6b7bbade233acf0f9e736881c5247d6021b9c5c3a30fac36e8331f882309a2ae5a67d4aa4675027849aa14f8a5b283011ac10e68c231b4ad30a3cd080d8319b0584d0a845c2e237ffff44270a512fe9a9360cecc5b1e32934a39528e0def15d2e41c5a5b7df12d378e3b6243665ec1ca6ea1c861f176e22114b8d85142d760867d13b6d53c94b0"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x1, 0xc0, "196b15be6300eec08c0f97d04f2d6920739d7cdf385628b55e08f2735635ec6685efcd8d9fe1927eea62dd99414d9dc69d68e82e67c13084209bf87f2114398789fe72278a8760e5e78d9176baf5bd8ffaa5f587f24e30602de9769101036c4fc210c8f67c7debeb386e32d013466851d261560e1bc8b0ea622acc98b969711c7e50d1ee5385b0630a2bc04f42d4c8abb21d621a61a47f705c9c119aac15fccd8b40ef76d2a0e4437ade85d03b32dcc4bb66a029bbc65b3af2f3cfd04e23a45a"}, &(0x7f0000000400)={0x20, 0x3, 0x1}}) 22.672309008s ago: executing program 0 (id=954): mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='cramfs\x00', 0x204001, 0x0) chdir(&(0x7f00000000c0)='./cgroup\x00') 22.67068249s ago: executing program 0 (id=956): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002d00090027bd700000ee0000040000000e0018"], 0x24}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e24, 0x9, @remote, 0x6}}, 0x5, 0x0, 0x80000003, 0x108, 0xe2d8f2eb1d010935, 0x9, 0x6}, 0x9c) 22.669656462s ago: executing program 1 (id=959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080)="878bc2081b2473231813654654e834f29a4adacbaa451c413cc02867a28f08759c0cda1c73908c8b6842420aa4dbee7fc042a572860f87807dd858609cb09617f1e579657e65f59a1596aa0f0b9301b746223ba0129856fbb49bdbe028c462c82a13a1bd7342b31431cb07f34bdd7e56a3ad1720222f1d19f5dbe23aec8b7812a1c2a14bb9d4fb0afec5b4682a399e031c9378422981e6a4b306b7247fdaee2f4b020e602b6eb2959483b491dc22269c67a3f50becdfdde2f098392854c1e6617dc08f714a4be86e662a2b7d7da8bd", 0xcf, 0x8810, 0x0, 0x0) r1 = fanotify_init(0x16, 0x0) (async) r2 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000280)='D', 0x1}], 0x1) (async) ftruncate(r2, 0x3) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="01bbbb86dd"], 0x0) (async) r6 = dup(r2) fanotify_mark(r1, 0x1, 0x40000010, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x702, 0xe40, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 22.66647929s ago: executing program 1 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2, 0x0, 0x4, 0x0, 0x1, 0x20, 0x5bc}}}}}]}, 0x3c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 22.656425172s ago: executing program 2 (id=961): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 22.651469321s ago: executing program 3 (id=962): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) syz_emit_ethernet(0x260, &(0x7f00000004c0)={@broadcast, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0x1, 0x6, "694612", 0x222, 0x11, 0x0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, {[@srh={0x2c, 0x10, 0x4, 0x8, 0x7f, 0x10, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, @remote, @mcast2]}, @hopopts={0x87, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @ra={0x5, 0x2, 0xe8}, @enc_lim={0x4, 0x1, 0x7}]}, @srh={0x84, 0x12, 0x4, 0x9, 0xf, 0x0, 0x5, [@mcast2, @mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}, @dstopts={0x87, 0x9, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x81, 0x7, [0x4109, 0x4ebb5cfb, 0x5, 0x7f, 0x8001, 0x80000001]}}, @hao={0xc9, 0x10, @loopback}]}, @fragment={0x3a, 0x0, 0x2, 0x1, 0x0, 0x2, 0x68}, @fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x4, 0x64}], {0x4e20, 0x4e23, 0x82, 0x0, @opaque="5df68d728f7ebfe14ed7303cdf2e152f0692ffe58ce4036e0dd8902051d735a5d67a2a7af6427f1646dd6d2aefd1439e0df56f7d0879f2d18b98a1eb144b9a1a4fae9a79aa3aed90afbaa71ef214b1b5066dca0040b94e1668242c06b32a5025750cf907b7f90dd28c9187d62543149d66fdcae91af68d777dae"}}}}}}, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000010140)={0x2020}, 0x2036) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 22.582280238s ago: executing program 1 (id=963): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) setresuid(0x0, 0xee00, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r0 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) (async, rerun: 64) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) (rerun: 64) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000603000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000240)="26f30faef4ea2400000000600f3a0f1f0066ba4100ecc4c2fd3110c4c10610e2260f0158460f0098fc000000c4e2edbc9bbb8e00000f005000", 0x39}], 0x1, 0x4, &(0x7f0000000380)=[@flags={0x3, 0x4}, @dstype0={0x6, 0xd}], 0x2) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 64) r6 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r6) (async, rerun: 64) r7 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) (async) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x8, r9}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 22.581977788s ago: executing program 0 (id=964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0x100000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) 22.581605292s ago: executing program 3 (id=965): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd25, 0x25dfdbfe, {0xa, 0x78, 0x141, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) sendfile(r0, r0, 0x0, 0xff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd25, 0x25dfdbfe, {0xa, 0x78, 0x141, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) (async) sendfile(r0, r0, 0x0, 0xff) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc}) (async) 22.500925301s ago: executing program 2 (id=966): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'vxcan1\x00', 0x100}) 22.323537492s ago: executing program 3 (id=967): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000180)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt(r4, 0xf1178ca7, 0x7, 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x6, 0x4e8d0, 0x107b9c}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="470f009756a60000c4837904869431808ddd66470f3882744e85640f01c266b8db008ed866440fd32c25f0000000b8010000000f01d9b8010000000f01c1c74424008000c0fec744240298fb0000c7442406000000000f01142466baf80cb888e07389ef66bafc0cb80a3923c9ef", 0x6e}], 0x1, 0x4d, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) open(0x0, 0x20800, 0x20) 22.216477798s ago: executing program 32 (id=967): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000180)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt(r4, 0xf1178ca7, 0x7, 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x6, 0x4e8d0, 0x107b9c}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="470f009756a60000c4837904869431808ddd66470f3882744e85640f01c266b8db008ed866440fd32c25f0000000b8010000000f01d9b8010000000f01c1c74424008000c0fec744240298fb0000c7442406000000000f01142466baf80cb888e07389ef66bafc0cb80a3923c9ef", 0x6e}], 0x1, 0x4d, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) open(0x0, 0x20800, 0x20) 22.202197783s ago: executing program 0 (id=969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'wlan1\x00', 0xffffeb60}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000900)={0x100000, 0x399000, 0x8}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000), 0x4) 22.20197554s ago: executing program 1 (id=970): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x0) 22.189838987s ago: executing program 2 (id=971): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'lo\x00'}) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) 22.138716568s ago: executing program 2 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000000000001000093ac762cb0f3e1a50000147ac514b6961b41", @ANYRES32=r2, @ANYBLOB="0500530001000000"], 0x24}}, 0xc0c4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe, 0x2d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008800}, 0x20044001) 22.059644579s ago: executing program 1 (id=973): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x4b) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, {0xa, 0x4e20, 0x1, @loopback, 0x81}, 0x3, {[0x80000001, 0xffff, 0x4, 0x3, 0x8, 0xd9, 0x1000005]}}, 0x5c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 22.017422464s ago: executing program 0 (id=974): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f0000000100)={0x0, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 5.630119256s ago: executing program 4 (id=968): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 98.288056ms ago: executing program 0 (id=975): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x183342, 0x32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x24044880) (async) ftruncate(r0, 0x6000000) (async) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x98, 0x9, 0x0) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) read$FUSE(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002c00701004000000050000000600010005"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0xe1) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) mkdir(0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010026bd70a939d3ecdc8404d925"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x420000, 0x188) mkdirat(r5, 0x0, 0x1a) (async) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)) (async) mknodat$loop(0xffffffffffffffff, 0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) rename(0x0, &(0x7f0000000280)='./file0\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r6, &(0x7f00000001c0)=""/200, 0xc8, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 95.382668ms ago: executing program 1 (id=976): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2081, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fdf000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000240)="3e0fc7ab671df0fe457a360fc7ab03000f20c06635020000000f22c03d00000f20e06635100000000f22e0660f7f00f2f30f454106baf80c66b888f2e88966efbafc0c66b80080000066ef66b8b60000000f23d80f21f86635400000300f23f8", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110200000000000000800600"], 0x44}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 92.381943ms ago: executing program 2 (id=977): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x403, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x20, 0x0, 0x0, 0x0, 0x1, 0x8}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x9, 0x4, 0x4}]}, 0xfffffffffffffcd6}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 81.83681ms ago: executing program 4 (id=978): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 0s ago: executing program 2 (id=979): clock_gettime(0xfffffff2, &(0x7f0000000000)) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200)="fa6a727cbc993b8d82772edd8ab851c9b5f208bf16857022b99bf855830c38595328752bf02ca49b73a520721a166e78bb8a2e4a14b395d20e34eb9f4fee12200a58eefb3c8aeb84beb273f72b015497b5e482473f6db5e5ed426fd4501ada3b31fae996ad756c49b4fdf939b054a6da4fe08e1a4ce13d768e4a0be02b925c713f135aca4d74453aae22fcaed6163893aa89884ed5ed3e547cfd7f150dc3b05d610d9dc87a105b2ecf456fb3a0ded7098b06b82c7699ff7356cd998a11b21bac4f4aeb4d2ab9d4fd3953f3233f83c8592c550c8c44dec2a3056c44778349d2f09b2390009956dbcbc4d5", 0xea, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000140)={[{@inode64}]}) kernel console output (not intermixed with test programs): 577413.845:378): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.270" name="/newroot/63/bus/file0" dev="overlay" ino=35913919 res=1 errno=0 [ 66.612017][ T40] audit: type=1400 audit(1753577414.115:379): avc: denied { unlink } for pid=5949 comm="syz-executor" name="file0" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.763500][ T6942] openvswitch: netlink: IP tunnel TTL not specified. [ 66.766720][ T6942] xfrm0 speed is unknown, defaulting to 1000 [ 66.769146][ T6942] xfrm0 speed is unknown, defaulting to 1000 [ 66.773049][ T6942] xfrm0 speed is unknown, defaulting to 1000 [ 66.778242][ T6942] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.784708][ T6942] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 66.804630][ T6942] xfrm0 speed is unknown, defaulting to 1000 [ 66.808153][ T6942] xfrm0 speed is unknown, defaulting to 1000 [ 66.810815][ T6942] xfrm0 speed is unknown, defaulting to 1000 [ 66.814587][ T6942] xfrm0 speed is unknown, defaulting to 1000 [ 66.852044][ T53] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 67.023287][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 67.026638][ T53] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 67.029728][ T53] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 67.035383][ T53] usb 7-1: string descriptor 0 read error: -22 [ 67.037350][ T53] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.040185][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.049395][ T6939] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.255928][ T53] cdc_ncm 7-1:1.0: bind() failure [ 67.263066][ T53] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 67.265237][ T53] cdc_ncm 7-1:1.1: bind() failure [ 67.269108][ T53] usb 7-1: USB disconnect, device number 3 [ 67.738116][ T6953] kvm: kvm [6952]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000007) [ 67.744381][ T6953] rtc_cmos 00:05: Alarms can be up to one day in the future [ 67.850301][ T6965] tmpfs: Unknown parameter 'nzv ' [ 67.854005][ T6965] JJ": renamed from bridge_slave_0 (while UP) [ 67.866846][ T1469] IPVS: starting estimator thread 0... [ 67.905094][ T6973] openvswitch: netlink: IPv6 tunnel dst address is zero [ 67.970081][ T6982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.972444][ T6967] IPVS: using max 45 ests per chain, 108000 per kthread [ 67.974122][ T6982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.993673][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.997201][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.062067][ T60] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.118730][ T7004] mmap: syz.2.290 (7004) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.213717][ T60] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.217520][ T60] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 68.221748][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.225831][ T60] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 68.229801][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 68.234674][ T60] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.237513][ T60] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.240044][ T60] usb 5-1: Product: syz [ 68.241378][ T60] usb 5-1: Manufacturer: syz [ 68.245274][ T60] cdc_wdm 5-1:1.0: skipping garbage [ 68.246942][ T60] cdc_wdm 5-1:1.0: skipping garbage [ 68.248609][ T60] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 68.351153][ T60] usb 6-1: USB disconnect, device number 4 [ 68.353837][ T60] ftdi_sio 6-1:0.0: device disconnected [ 68.447262][ T1469] usb 5-1: USB disconnect, device number 4 [ 68.777837][ T7021] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 68.781418][ T7021] overlayfs: overlapping lowerdir path [ 68.835031][ T7024] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.839039][ T7024] netlink: 'syz.3.298': attribute type 5 has an invalid length. [ 68.950205][ T7028] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 69.004845][ T7031] __nla_validate_parse: 8 callbacks suppressed [ 69.004856][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 69.141209][ T7034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 69.145217][ T7034] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 69.152611][ T7034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.156059][ T7034] team0: Port device bond0 added [ 69.297162][ T7045] netlink: 256 bytes leftover after parsing attributes in process `syz.2.304'. [ 69.572758][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 69.576378][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 69.640269][ T7084] 9pnet: p9_errstr2errno: server reported unknown error @ [ 69.642048][ T60] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 69.793771][ T60] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.796636][ T60] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 69.799868][ T60] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.803091][ T60] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 69.806837][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 69.811450][ T60] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.814634][ T60] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.817270][ T60] usb 6-1: Product: syz [ 69.818649][ T60] usb 6-1: Manufacturer: syz [ 69.824138][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 69.825928][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 69.827992][ T60] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 70.028285][ T1469] usb 6-1: USB disconnect, device number 5 [ 70.554298][ T7105] tipc: Started in network mode [ 70.555943][ T7105] tipc: Node identity d2a35eefd534, cluster identity 4711 [ 70.558284][ T7105] tipc: Enabled bearer , priority 0 [ 70.564348][ T7105] tipc: Resetting bearer [ 70.590008][ T7103] tipc: Disabling bearer [ 70.715466][ T7122] pim6reg1: entered promiscuous mode [ 70.717253][ T7122] pim6reg1: entered allmulticast mode [ 70.838704][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 70.982132][ T66] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 71.065467][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.068348][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.132008][ T66] usb 8-1: Using ep0 maxpacket: 32 [ 71.144412][ T66] usb 8-1: config 1 has too many interfaces: 251, using maximum allowed: 32 [ 71.147167][ T66] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 251 [ 71.155614][ T66] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 71.158456][ T66] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 71.168745][ T66] usb 8-1: Product: syz [ 71.170101][ T66] usb 8-1: Manufacturer: syz [ 71.171601][ T66] usb 8-1: SerialNumber: syz [ 71.390685][ T66] usb 8-1: USB disconnect, device number 7 [ 71.411153][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 71.411163][ T40] audit: type=1400 audit(1753577418.915:492): avc: denied { ioctl } for pid=7138 comm="syz.2.332" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.475531][ T40] audit: type=1400 audit(1753577418.985:493): avc: denied { read write } for pid=5949 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.484389][ T40] audit: type=1400 audit(1753577418.995:494): avc: denied { read write open } for pid=5949 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.492822][ T40] audit: type=1400 audit(1753577418.995:495): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.500558][ T40] audit: type=1400 audit(1753577418.995:496): avc: denied { ioctl } for pid=7138 comm="syz.2.332" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.524030][ T40] audit: type=1400 audit(1753577419.035:497): avc: denied { mounton } for pid=7140 comm="syz.0.333" path="/81/file0" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.524209][ T7141] cgroup2: Unknown parameter 'euid' [ 71.536527][ T40] audit: type=1400 audit(1753577419.045:498): avc: denied { create } for pid=7140 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.541849][ T7141] team0: No ports can be present during mode change [ 71.545171][ T40] audit: type=1400 audit(1753577419.045:499): avc: denied { create } for pid=7140 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.545680][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.552672][ T40] audit: type=1400 audit(1753577419.045:500): avc: denied { write } for pid=7140 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.561632][ T40] audit: type=1400 audit(1753577419.045:501): avc: denied { read } for pid=7140 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.712168][ T5952] Bluetooth: hci2: command 0x0405 tx timeout [ 71.742889][ T29] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.748429][ T29] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 71.757665][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.760904][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 71.767011][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 71.773648][ T7116] Set syz1 is full, maxelem 65536 reached [ 71.784046][ T29] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.786945][ T29] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.789486][ T29] usb 7-1: Product: syz [ 71.790884][ T29] usb 7-1: Manufacturer: syz [ 71.803803][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 71.805553][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 71.811607][ T29] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 71.814941][ T29] cdc_wdm 7-1:1.0: Unknown control protocol [ 71.850083][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'. [ 71.919925][ T7154] syz.1.337: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 72.403654][ T7168] Unsupported ieee802154 address type: 0 [ 72.540012][ T7178] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.542695][ T7179] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.677428][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 73.352168][ T1469] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 73.505667][ T1469] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 73.507997][ T1469] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.511269][ T1469] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.515083][ T1469] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 73.519164][ T1469] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 73.533192][ T1469] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 73.535508][ T1469] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.538739][ T1469] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.542327][ T1469] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 73.545724][ T1469] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 73.552698][ T1469] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 73.555038][ T1469] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.558277][ T1469] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.561836][ T1469] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 73.566639][ T1469] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 73.584537][ T1469] usb 6-1: string descriptor 0 read error: -22 [ 73.586523][ T1469] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 73.589616][ T1469] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.604403][ T1469] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 73.614874][ T7199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.635276][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 73.759617][ T7208] xt_cluster: node mask cannot exceed total number of nodes [ 73.800193][ T7210] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 74.064607][ T7223] /dev/sg0: Can't lookup blockdev [ 74.069665][ T7221] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.359'. [ 74.722494][ T7255] netlink: 'syz.3.371': attribute type 21 has an invalid length. [ 74.725515][ T7255] netlink: 156 bytes leftover after parsing attributes in process `syz.3.371'. [ 74.853599][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 74.856488][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.373'. [ 75.207825][ T7280] netlink: 'syz.3.378': attribute type 15 has an invalid length. [ 75.208019][ T7279] netlink: 'syz.3.378': attribute type 15 has an invalid length. [ 75.348743][ T7287] warning: `syz.3.380' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.420982][ T7292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.381'. [ 75.425174][ T7292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.381'. [ 75.431328][ T7292] gretap0: entered promiscuous mode [ 75.433853][ T7292] batadv_slave_1: entered promiscuous mode [ 76.080691][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 76.082950][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 76.085118][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 76.087181][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 76.089253][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 76.091318][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 76.093412][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 76.095463][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 76.097533][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 76.099590][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 76.101654][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 76.103821][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 76.106015][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 76.108076][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 76.110538][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 76.114684][ T1469] usb 6-1: USB disconnect, device number 6 [ 76.118323][ T9] usb 7-1: USB disconnect, device number 4 [ 76.189964][ T7329] gfs2: Unknown parameter 'barrierfi0' [ 76.277823][ T7324] input: syz1 as /devices/virtual/input/input9 [ 76.330120][ T7341] x_tables: duplicate underflow at hook 3 [ 76.412969][ T40] kauditd_printk_skb: 985 callbacks suppressed [ 76.412979][ T40] audit: type=1400 audit(1753577423.925:1487): avc: denied { ioctl } for pid=7323 comm="syz.3.393" path="/dev/cec3" dev="devtmpfs" ino=988 ioctlcmd=0x6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.423086][ T40] audit: type=1400 audit(1753577423.925:1488): avc: denied { ioctl } for pid=7342 comm="syz.1.397" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.431276][ T40] audit: type=1400 audit(1753577423.925:1489): avc: denied { ioctl } for pid=7342 comm="syz.1.397" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.440250][ T40] audit: type=1400 audit(1753577423.925:1490): avc: denied { create } for pid=7342 comm="syz.1.397" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.447336][ T40] audit: type=1400 audit(1753577423.925:1491): avc: denied { ioctl } for pid=7342 comm="syz.1.397" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12215 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.456918][ T40] audit: type=1400 audit(1753577423.925:1492): avc: denied { ioctl } for pid=7342 comm="syz.1.397" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.464785][ T40] audit: type=1400 audit(1753577423.925:1493): avc: denied { ioctl } for pid=7342 comm="syz.1.397" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.473179][ T40] audit: type=1400 audit(1753577423.925:1494): avc: denied { ioctl } for pid=7342 comm="syz.1.397" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.481250][ T40] audit: type=1400 audit(1753577423.925:1495): avc: denied { ioctl } for pid=7342 comm="syz.1.397" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.489517][ T40] audit: type=1400 audit(1753577423.925:1496): avc: denied { execmem } for pid=7342 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.572632][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.398'. [ 77.185496][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.400'. [ 77.190735][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.400'. [ 77.438654][ T7376] netlink: 4212 bytes leftover after parsing attributes in process `syz.3.405'. [ 77.542046][ T1469] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.717154][ T7397] netlink: 'syz.3.414': attribute type 13 has an invalid length. [ 77.720270][ T1469] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.729828][ T1469] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.735827][ T1469] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.742029][ T1469] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 77.754701][ T1469] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 77.763859][ T1469] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.767350][ T1469] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.769839][ T1469] usb 6-1: Product: syz [ 77.771157][ T1469] usb 6-1: Manufacturer: syz [ 77.788957][ T1469] cdc_wdm 6-1:1.0: skipping garbage [ 77.790594][ T1469] cdc_wdm 6-1:1.0: skipping garbage [ 77.802607][ T1469] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 77.805966][ T1469] cdc_wdm 6-1:1.0: Unknown control protocol [ 77.927230][ T7417] netlink: 'syz.0.419': attribute type 83 has an invalid length. [ 78.124804][ T7436] team0: Port device team_slave_0 removed [ 78.125122][ T7440] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.136464][ T7440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7440 comm=syz.2.426 [ 78.331822][ T7446] overlayfs: missing 'lowerdir' [ 78.473392][ T7457] vlan2: entered promiscuous mode [ 78.475031][ T7457] bridge0: entered promiscuous mode [ 78.476735][ T7457] vlan2: entered allmulticast mode [ 78.478343][ T7457] bridge0: entered allmulticast mode [ 78.613773][ T7464] bond0: Error: Cannot enslave bond to itself. [ 78.638132][ T7465] bond0: Error: Cannot enslave bond to itself. [ 79.073375][ T7476] __nla_validate_parse: 5 callbacks suppressed [ 79.073385][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 79.078258][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.437'. [ 79.562021][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 79.574089][ T7492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7492 comm=syz.3.443 [ 79.582125][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 79.690960][ T7505] netlink: 'syz.3.446': attribute type 1 has an invalid length. [ 79.810573][ T7508] overlayfs: missing 'lowerdir' [ 80.292181][ T29] usb 6-1: USB disconnect, device number 7 [ 80.468028][ T7525] pimreg3: entered allmulticast mode [ 80.487163][ T7525] autofs: Unknown parameter ' [ 80.487163][ T7525] ' [ 80.491623][ T7525] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 80.503213][ T7525] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 80.776341][ T7545] xt_bpf: check failed: parse error [ 81.322529][ T10] cfg80211: failed to load regulatory.db [ 81.481638][ T7539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.485437][ T7539] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.493822][ T7539] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.499465][ T7539] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.502126][ T7539] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.505420][ T7539] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.511265][ T7539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.513964][ T7539] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.518983][ T7539] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.524734][ T7539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.527363][ T7539] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.530908][ T7539] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.545020][ T40] kauditd_printk_skb: 939 callbacks suppressed [ 81.545034][ T40] audit: type=1400 audit(1753577429.055:2436): avc: denied { ioctl } for pid=7538 comm="syz.1.460" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.563513][ T40] audit: type=1400 audit(1753577429.055:2437): avc: denied { ioctl } for pid=7538 comm="syz.1.460" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.576426][ T40] audit: type=1400 audit(1753577429.055:2438): avc: denied { ioctl } for pid=7538 comm="syz.1.460" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.589039][ T40] audit: type=1400 audit(1753577429.055:2439): avc: denied { ioctl } for pid=7538 comm="syz.1.460" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.601747][ T40] audit: type=1400 audit(1753577429.105:2440): avc: denied { read write } for pid=5947 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.613675][ T40] audit: type=1400 audit(1753577429.105:2441): avc: denied { read write open } for pid=5947 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.624019][ T40] audit: type=1400 audit(1753577429.105:2442): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.631871][ T40] audit: type=1400 audit(1753577429.135:2443): avc: denied { read write } for pid=5946 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.641597][ T40] audit: type=1400 audit(1753577429.135:2444): avc: denied { read write open } for pid=5946 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.651140][ T40] audit: type=1400 audit(1753577429.145:2445): avc: denied { ioctl } for pid=5946 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.794467][ T7562] fuseblk: Bad value for 'blksize' [ 81.803063][ T6929] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.810139][ T7561] netlink: 'syz.2.467': attribute type 4 has an invalid length. [ 81.969321][ T6929] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.972560][ T6929] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 81.976371][ T6929] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.979697][ T6929] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 81.984198][ T6929] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 81.994177][ T6929] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.997315][ T6929] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.000061][ T6929] usb 6-1: Product: syz [ 82.001533][ T6929] usb 6-1: Manufacturer: syz [ 82.017383][ T6929] cdc_wdm 6-1:1.0: skipping garbage [ 82.019056][ T6929] cdc_wdm 6-1:1.0: skipping garbage [ 82.025841][ T6929] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 82.028804][ T6929] cdc_wdm 6-1:1.0: Unknown control protocol [ 82.360026][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'. [ 82.533268][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 82.560725][ T7607] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 82.601277][ T7611] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 82.659560][ T7613] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 82.697834][ T7615] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7615 comm=syz.2.483 [ 82.742103][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.775846][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 82.778944][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 82.858593][ T7633] overlayfs: option "workdir=./file0/../file0" is useless in a non-upper mount, ignore [ 82.861844][ T7633] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 82.862832][ T7631] overlayfs: option "workdir=./file0/../file0" is useless in a non-upper mount, ignore [ 82.871912][ T7631] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 82.874861][ T7633] overlayfs: missing 'lowerdir' [ 82.876873][ T7631] overlayfs: missing 'lowerdir' [ 82.887188][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'. [ 83.309046][ T7657] binder_alloc: 7656: binder_alloc_buf size 5184 failed, no address space [ 83.312612][ T7657] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 83.542106][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.542168][ T5960] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.542189][ T5963] Bluetooth: hci2: command 0x0405 tx timeout [ 83.548458][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 83.664811][ T10] usb 6-1: USB disconnect, device number 8 [ 84.092252][ T60] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.232103][ T60] usb 7-1: device descriptor read/64, error -71 [ 84.341917][ T7707] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.472028][ T60] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 84.473182][ T7716] netlink: ct family unspecified [ 84.475976][ T7716] openvswitch: netlink: Actions may not be safe on all matching packets [ 84.542065][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 84.612060][ T60] usb 7-1: device descriptor read/64, error -71 [ 84.656912][ T7727] netlink: 'syz.1.517': attribute type 7 has an invalid length. [ 84.660111][ T7727] __nla_validate_parse: 6 callbacks suppressed [ 84.660122][ T7727] netlink: 224 bytes leftover after parsing attributes in process `syz.1.517'. [ 84.714897][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.717558][ T10] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 84.720667][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.733731][ T60] usb usb7-port1: attempt power cycle [ 84.741220][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 84.765579][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 84.786357][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.789834][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.802980][ T10] usb 8-1: Product: syz [ 84.804716][ T10] usb 8-1: Manufacturer: syz [ 84.819874][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 84.821568][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 84.823335][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.829154][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 84.831028][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 84.840108][ T7737] nfs: Unknown parameter 'nofscYAΆG:' [ 84.924459][ T7739] netlink: 'syz.1.522': attribute type 11 has an invalid length. [ 85.043991][ T7742] tmpfs: Unknown parameter 'modu' [ 85.083242][ T60] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 85.114394][ T60] usb 7-1: device descriptor read/8, error -71 [ 85.352075][ T60] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 85.355455][ T7753] syz.1.526: attempt to access beyond end of device [ 85.355455][ T7753] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 85.359504][ T7753] (syz.1.526,7753,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 85.361890][ T7753] (syz.1.526,7753,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 85.364768][ T7753] (syz.1.526,7753,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 85.367734][ T7753] (syz.1.526,7753,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 85.374879][ T60] usb 7-1: device descriptor read/8, error -71 [ 85.493024][ T60] usb usb7-port1: unable to enumerate USB device [ 85.513403][ T7760] SELinux: truncated policydb string identifier [ 85.516355][ T7760] SELinux: failed to load policy [ 85.622293][ T5960] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.622457][ T5963] Bluetooth: hci2: command 0x0405 tx timeout [ 85.626539][ T5952] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.652974][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 85.744288][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 85.750859][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.753666][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.117006][ T7791] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 86.128192][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 86.131193][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 86.265729][ T7797] tipc: Started in network mode [ 86.267329][ T7797] tipc: Node identity b6b5e2472c1f, cluster identity 4711 [ 86.269583][ T7797] tipc: Enabled bearer , priority 0 [ 86.273305][ T7797] syzkaller0: entered promiscuous mode [ 86.275153][ T7797] syzkaller0: entered allmulticast mode [ 86.278421][ T12] syzkaller0: tun_net_xmit 70 [ 86.295659][ T7796] tipc: Resetting bearer [ 86.305224][ T7796] tipc: Disabling bearer [ 86.567449][ T40] kauditd_printk_skb: 2007 callbacks suppressed [ 86.567461][ T40] audit: type=1400 audit(1753577434.075:4453): avc: denied { read write } for pid=5949 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.580257][ T40] audit: type=1400 audit(1753577434.075:4454): avc: denied { read write open } for pid=5949 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.589679][ T40] audit: type=1400 audit(1753577434.075:4455): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.599756][ T40] audit: type=1400 audit(1753577434.115:4456): avc: denied { read write } for pid=7799 comm="syz.1.542" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.607972][ T40] audit: type=1400 audit(1753577434.115:4457): avc: denied { read write open } for pid=7799 comm="syz.1.542" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.615318][ T40] audit: type=1400 audit(1753577434.115:4458): avc: denied { ioctl } for pid=7799 comm="syz.1.542" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.623631][ T40] audit: type=1400 audit(1753577434.125:4459): avc: denied { read } for pid=7807 comm="syz.0.545" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.630958][ T40] audit: type=1400 audit(1753577434.125:4460): avc: denied { read open } for pid=7807 comm="syz.0.545" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.638170][ T40] audit: type=1400 audit(1753577434.125:4461): avc: denied { ioctl } for pid=7807 comm="syz.0.545" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.645741][ T40] audit: type=1400 audit(1753577434.125:4462): avc: denied { set_context_mgr } for pid=7807 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.903178][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.314906][ T71] usb 8-1: USB disconnect, device number 8 [ 87.705348][ T5952] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.707580][ T5952] Bluetooth: hci2: command 0x0405 tx timeout [ 87.712056][ T5963] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.740203][ T7883] xt_hashlimit: size too large, truncated to 1048576 [ 88.013027][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.559'. [ 88.015730][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.559'. [ 88.018031][ T5963] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 88.172044][ T1469] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 88.255839][ T7919] netlink: 'syz.0.564': attribute type 10 has an invalid length. [ 88.264745][ T7919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.270766][ T7919] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 88.312083][ T1469] usb 6-1: device descriptor read/64, error -71 [ 88.323569][ T7925] netlink: 'syz.2.566': attribute type 4 has an invalid length. [ 88.488216][ T7934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.569'. [ 88.562367][ T1469] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 88.702076][ T1469] usb 6-1: device descriptor read/64, error -71 [ 88.813582][ T1469] usb usb6-port1: attempt power cycle [ 88.917733][ T7962] binder_alloc: 7961: binder_alloc_buf size 1052672 failed, no address space [ 88.920377][ T7962] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 88.938099][ T7964] openvswitch: netlink: EtherType 0 is less than min 600 [ 88.977189][ T7966] ntfs3(nullb0): Primary boot signature is not NTFS. [ 88.979645][ T7966] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 89.014450][ T7967] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 89.030788][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 89.144584][ T7976] tipc: Started in network mode [ 89.146358][ T7976] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.148967][ T7976] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.151178][ T7976] tipc: Enabled bearer , priority 10 [ 89.158907][ T1469] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 89.184776][ T1469] usb 6-1: device descriptor read/8, error -71 [ 89.282686][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.432011][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.434109][ T1469] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 89.462504][ T1469] usb 6-1: device descriptor read/8, error -71 [ 89.572050][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.576368][ T1469] usb usb6-port1: unable to enumerate USB device [ 89.601642][ T8007] 9pnet_virtio: no channels available for device syz [ 89.711660][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.589'. [ 89.714570][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.751345][ T8010] team0 (unregistering): Port device team_slave_0 removed [ 89.760715][ T8010] team0 (unregistering): Port device team_slave_1 removed [ 89.852030][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.921283][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 89.926638][ T8014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8014 comm=syz.2.590 [ 89.983520][ T8018] pim6reg: entered allmulticast mode [ 90.002164][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 90.143228][ T1469] tipc: Node number set to 2886997162 [ 90.282026][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 90.416071][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 90.539332][ T8043] netlink: 100 bytes leftover after parsing attributes in process `syz.3.597'. [ 90.562828][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 91.114657][ T8062] netlink: 'syz.1.602': attribute type 11 has an invalid length. [ 91.292123][ T6929] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.444147][ T6929] usb 5-1: Using ep0 maxpacket: 16 [ 91.461744][ T6929] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 91.466399][ T6929] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 91.469156][ T6929] usb 5-1: Product: syz [ 91.470755][ T6929] usb 5-1: Manufacturer: syz [ 91.474651][ T6929] usb 5-1: SerialNumber: syz [ 91.480358][ T6929] usb 5-1: config 0 descriptor?? [ 91.543866][ T8066] program syz.2.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.584441][ T40] kauditd_printk_skb: 1029 callbacks suppressed [ 91.584452][ T40] audit: type=1400 audit(1753577439.095:5492): avc: denied { read write } for pid=5946 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.594236][ T40] audit: type=1400 audit(1753577439.095:5493): avc: denied { read write open } for pid=5946 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.601624][ T40] audit: type=1400 audit(1753577439.095:5494): avc: denied { ioctl } for pid=5946 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.610503][ T40] audit: type=1400 audit(1753577439.105:5495): avc: denied { read write } for pid=5947 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.623440][ T40] audit: type=1400 audit(1753577439.105:5496): avc: denied { read write open } for pid=5947 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.631222][ T40] audit: type=1400 audit(1753577439.105:5497): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.670816][ T40] audit: type=1400 audit(1753577439.175:5498): avc: denied { mounton } for pid=8068 comm="syz.2.604" path="/204/file0" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.679959][ T40] audit: type=1400 audit(1753577439.185:5499): avc: denied { mount } for pid=8068 comm="syz.2.604" name="/" dev="autofs" ino=19397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 91.690003][ T40] audit: type=1400 audit(1753577439.195:5500): avc: denied { read write } for pid=8067 comm="syz.3.605" name="swradio6" dev="devtmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.698371][ T8069] syzkaller1: entered promiscuous mode [ 91.700069][ T8069] syzkaller1: entered allmulticast mode [ 91.701995][ T40] audit: type=1400 audit(1753577439.195:5501): avc: denied { read write open } for pid=8067 comm="syz.3.605" path="/dev/swradio6" dev="devtmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.710404][ T5963] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 91.742161][ T8069] sp0: Synchronizing with TNC [ 91.746036][ T8069] sp0: Found TNC [ 91.863994][ T8075] SELinux: ebitmap: empty map [ 91.865689][ T8075] SELinux: failed to load policy [ 91.922834][ T9] usb 5-1: USB disconnect, device number 5 [ 92.010654][ T8087] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 92.172994][ T8100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=254 sclass=netlink_route_socket pid=8100 comm=syz.3.613 [ 92.263089][ T8107] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 92.275025][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8772 sclass=netlink_route_socket pid=8107 comm=syz.3.616 [ 92.304647][ T8104] loop6: detected capacity change from 0 to 63 [ 92.327817][ T6855] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.331305][ T6855] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.336574][ T6855] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.339767][ T6855] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.352886][ T6855] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.479592][ T8113] overlayfs: invalid origin (0000) [ 92.577966][ T8129] loop2: detected capacity change from 0 to 7 [ 92.584014][ T8129] loop2: [ 92.585504][ T8129] loop2: partition table partially beyond EOD, truncated [ 92.662046][ T1469] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.890379][ T1469] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 92.893167][ T1469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.895526][ T1469] usb 5-1: Product: syz [ 92.896787][ T1469] usb 5-1: Manufacturer: syz [ 92.898174][ T1469] usb 5-1: SerialNumber: syz [ 92.922873][ T1469] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 93.001372][ T60] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 93.216343][ T8166] sp0: Synchronizing with TNC [ 93.419534][ T8114] syz.0.618: attempt to access beyond end of device [ 93.419534][ T8114] sr0: rw=0, sector=8, nr_sectors = 8 limit=0 [ 93.424068][ T8114] qnx4: unable to read the superblock [ 93.428512][ T6929] usb 5-1: USB disconnect, device number 6 [ 94.011821][ T8192] tmpfs: Unknown parameter '00000000000000000000' [ 94.023841][ T60] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 94.026454][ T60] ath9k_htc: Failed to initialize the device [ 94.033976][ T6929] usb 5-1: ath9k_htc: USB layer deinitialized [ 94.107879][ T8198] syz.0.642: attempt to access beyond end of device [ 94.107879][ T8198] sr0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 94.163478][ T8198] syz.0.642: attempt to access beyond end of device [ 94.163478][ T8198] sr0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 94.170211][ T8198] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 94.177400][ T8198] syz.0.642: attempt to access beyond end of device [ 94.177400][ T8198] sr0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 94.177645][ T8202] /dev/sr0: Can't open blockdev [ 94.181385][ T8198] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 94.182968][ C2] net_ratelimit: 4 callbacks suppressed [ 94.182977][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 94.189768][ T8198] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 94.192330][ T8198] UDF-fs: Scanning with blocksize 2048 failed [ 94.194824][ T8198] syz.0.642: attempt to access beyond end of device [ 94.194824][ T8198] sr0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 94.244138][ T8198] syz.0.642: attempt to access beyond end of device [ 94.244138][ T8198] sr0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 94.248173][ T8198] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 94.251839][ T8198] syz.0.642: attempt to access beyond end of device [ 94.251839][ T8198] sr0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 94.256429][ T8198] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 94.259741][ T8198] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 94.263125][ T8198] UDF-fs: Scanning with blocksize 4096 failed [ 94.265085][ T8198] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 94.357118][ T8204] netlink: 666 bytes leftover after parsing attributes in process `syz.0.644'. [ 94.406138][ T8209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.645'. [ 94.526732][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'. [ 94.530517][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 94.615608][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 94.634703][ T8221] usb usb8: usbfs: process 8221 (syz.0.649) did not claim interface 0 before use [ 94.639941][ T8219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=198 sclass=netlink_route_socket pid=8219 comm=syz.3.647 [ 94.776434][ T8228] 9pnet: Found fid 0 not clunked [ 94.834153][ T8235] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 94.837065][ T8235] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 94.841180][ T8235] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 95.051843][ T8241] rtc_cmos 00:05: Alarms can be up to one day in the future [ 95.058942][ T8241] loop4: detected capacity change from 0 to 7 [ 95.063215][ T8241] Dev loop4: unable to read RDB block 7 [ 95.065042][ T8241] loop4: AHDI p2 p3 [ 95.066347][ T8241] loop4: partition table partially beyond EOD, truncated [ 95.070353][ T8241] loop4: p2 size 4227858431 extends beyond EOD, truncated [ 95.151517][ T6855] udevd[6855]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 95.222038][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 95.697812][ T8254] syz_tun: entered allmulticast mode [ 95.790253][ T8257] netlink: 92 bytes leftover after parsing attributes in process `syz.2.658'. [ 95.994050][ T8253] syz_tun: left allmulticast mode [ 96.116818][ T6929] hid (null): unknown global tag 0xe [ 96.118730][ T6929] hid (null): unknown global tag 0xd [ 96.120413][ T6929] hid (null): unknown global tag 0xe [ 96.126877][ T6929] hid-generic 0007:0EC3:0400.0004: unknown global tag 0xe [ 96.129059][ T6929] hid-generic 0007:0EC3:0400.0004: item 0 0 1 14 parsing failed [ 96.131670][ T6929] hid-generic 0007:0EC3:0400.0004: probe with driver hid-generic failed with error -22 [ 96.218239][ T8287] No control pipe specified [ 96.262023][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 96.408578][ T8295] x_tables: duplicate underflow at hook 1 [ 96.413994][ T8295] random: crng reseeded on system resumption [ 96.609335][ T40] kauditd_printk_skb: 1137 callbacks suppressed [ 96.609353][ T40] audit: type=1400 audit(1753577444.115:6639): avc: denied { read write } for pid=5947 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.618460][ T40] audit: type=1400 audit(1753577444.115:6640): avc: denied { read write open } for pid=5947 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.625917][ T40] audit: type=1400 audit(1753577444.115:6641): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.657285][ T40] audit: type=1400 audit(1753577444.165:6642): avc: denied { mounton } for pid=8299 comm="syz.3.670" path="/169/file0" dev="tmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.666724][ T40] audit: type=1400 audit(1753577444.175:6643): avc: denied { mount } for pid=8299 comm="syz.3.670" name="/" dev="9p" ino=35913917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.674077][ T40] audit: type=1400 audit(1753577444.185:6644): avc: denied { allowed } for pid=8299 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.680050][ T40] audit: type=1400 audit(1753577444.185:6645): avc: denied { create } for pid=8299 comm="syz.3.670" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.686450][ T40] audit: type=1400 audit(1753577444.185:6646): avc: denied { map } for pid=8299 comm="syz.3.670" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.694933][ T40] audit: type=1400 audit(1753577444.185:6647): avc: denied { read write } for pid=8299 comm="syz.3.670" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.703111][ T40] audit: type=1400 audit(1753577444.185:6648): avc: denied { map } for pid=8299 comm="syz.3.670" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.862918][ T8303] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 97.012764][ T8310] tipc: Started in network mode [ 97.014428][ T8310] tipc: Node identity c2165f8ab8ab, cluster identity 4711 [ 97.016688][ T8310] tipc: Enabled bearer , priority 0 [ 97.021781][ T8310] syzkaller0: entered promiscuous mode [ 97.023661][ T8310] syzkaller0: entered allmulticast mode [ 97.031478][ T8310] netlink: 32 bytes leftover after parsing attributes in process `syz.3.673'. [ 97.064453][ T8308] tipc: Resetting bearer [ 97.075006][ T8308] tipc: Disabling bearer [ 97.302013][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 97.437449][ T8333] binder: BINDER_SET_CONTEXT_MGR already set [ 97.439535][ T8333] binder: 8331:8333 ioctl 4018620d 2000000000c0 returned -16 [ 97.457966][ T8333] binder: BINDER_SET_CONTEXT_MGR already set [ 97.459877][ T8333] binder: 8331:8333 ioctl 4018620d 2000000000c0 returned -16 [ 97.470073][ T8333] binder: BINDER_SET_CONTEXT_MGR already set [ 97.483676][ T8333] binder: 8331:8333 ioctl 4018620d 2000000000c0 returned -16 [ 97.489085][ T8333] binder: BINDER_SET_CONTEXT_MGR already set [ 97.490984][ T8333] binder: 8331:8333 ioctl 4018620d 2000000000c0 returned -16 [ 97.536654][ T8334] blkio.reset_stats is deprecated [ 97.797175][ T8360] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 97.800285][ T8360] overlayfs: missing 'lowerdir' [ 97.809794][ T8360] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 97.816515][ T8353] 9pnet_fd: p9_fd_create_tcp (8353): problem connecting socket to 127.0.0.1 [ 97.819432][ T8360] overlayfs: missing 'lowerdir' [ 97.878206][ T8364] pim6reg1: entered promiscuous mode [ 97.879931][ T8364] pim6reg1: entered allmulticast mode [ 98.026587][ T8374] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 98.088471][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.696'. [ 98.122890][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 98.247602][ T8393] input: syz1 as /devices/virtual/input/input10 [ 98.249870][ T8391] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 98.260726][ T8391] CIFS mount error: No usable UNC path provided in device string! [ 98.260726][ T8391] [ 98.264751][ T8391] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 98.279368][ T8391] tmpfs: Invalid uid '0x00000000ffffffff' [ 98.352023][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 98.512392][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 98.694126][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.696865][ T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 98.699939][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.702967][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 98.706354][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 98.713441][ T8416] Bluetooth: MGMT ver 1.23 [ 98.716771][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.719606][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.724047][ T10] usb 7-1: Product: syz [ 98.725384][ T10] usb 7-1: Manufacturer: syz [ 98.737358][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 98.739094][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 98.744147][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 98.750408][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 98.895026][ T8428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.712'. [ 98.897810][ T8428] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 98.911713][ T8418] sp0: Synchronizing with TNC [ 99.392034][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 99.804605][ T8461] netlink: 'syz.3.720': attribute type 30 has an invalid length. [ 100.064078][ T8468] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 100.422013][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 100.694273][ T8501] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.700043][ T8501] netlink: 'syz.3.732': attribute type 12 has an invalid length. [ 100.703765][ T8501] netlink: 'syz.3.732': attribute type 29 has an invalid length. [ 100.706335][ T8501] netlink: 148 bytes leftover after parsing attributes in process `syz.3.732'. [ 100.709093][ T8501] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 100.711443][ T8501] netlink: 47 bytes leftover after parsing attributes in process `syz.3.732'. [ 100.715235][ T8500] netlink: 'syz.3.732': attribute type 12 has an invalid length. [ 100.718476][ T8500] netlink: 'syz.3.732': attribute type 29 has an invalid length. [ 100.721748][ T8500] netlink: 148 bytes leftover after parsing attributes in process `syz.3.732'. [ 100.725579][ T8500] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 100.729165][ T8500] netlink: 47 bytes leftover after parsing attributes in process `syz.3.732'. [ 100.831870][ T8510] netlink: 'syz.1.734': attribute type 10 has an invalid length. [ 100.845472][ T8510] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 100.848810][ T8510] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 100.855568][ T8510] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 100.861741][ T8513] syz.3.736: attempt to access beyond end of device [ 100.861741][ T8513] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 100.867381][ T8513] hfs: can't find a HFS filesystem on dev sr0 [ 100.960057][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 101.051774][ T8521] xfrm0 speed is unknown, defaulting to 1000 [ 101.212119][ T60] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 101.252198][ T10] usb 7-1: USB disconnect, device number 9 [ 101.361086][ T8533] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 101.372125][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 101.384507][ T60] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.388621][ T60] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 101.406631][ T60] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 101.411100][ T60] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 101.418713][ T60] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 101.424158][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.443474][ T60] hub 8-1:1.0: bad descriptor, ignoring hub [ 101.445486][ T60] hub 8-1:1.0: probe with driver hub failed with error -5 [ 101.448398][ T60] cdc_wdm 8-1:1.0: skipping garbage [ 101.450315][ T60] cdc_wdm 8-1:1.0: skipping garbage [ 101.460109][ T60] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 101.462660][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 101.465838][ T60] cdc_wdm 8-1:1.0: Unknown control protocol [ 101.562528][ T71] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 101.636662][ T40] kauditd_printk_skb: 3587 callbacks suppressed [ 101.636677][ T40] audit: type=1400 audit(1753577449.145:10215): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 101.645359][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.738'. [ 101.653339][ T40] audit: type=1400 audit(1753577449.165:10216): avc: denied { read write } for pid=8516 comm="syz.3.738" name="cdc-wdm0" dev="devtmpfs" ino=2951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 101.661469][ T40] audit: type=1400 audit(1753577449.165:10217): avc: denied { read write open } for pid=8516 comm="syz.3.738" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 101.672701][ T40] audit: type=1400 audit(1753577449.175:10218): avc: denied { read write } for pid=5948 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.683663][ T40] audit: type=1400 audit(1753577449.175:10219): avc: denied { read write open } for pid=5948 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.691842][ T40] audit: type=1400 audit(1753577449.175:10220): avc: denied { ioctl } for pid=5948 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.724619][ T40] audit: type=1400 audit(1753577449.225:10221): avc: denied { read write } for pid=8542 comm="syz.1.744" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 101.728518][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 101.733695][ T40] audit: type=1400 audit(1753577449.235:10222): avc: denied { read write open } for pid=8542 comm="syz.1.744" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 101.740018][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 101.745579][ T40] audit: type=1400 audit(1753577449.245:10223): avc: denied { read write } for pid=8542 comm="syz.1.744" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 101.755481][ T40] audit: type=1400 audit(1753577449.245:10224): avc: denied { read write open } for pid=8542 comm="syz.1.744" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.054901][ T8518] usb 8-1: reset high-speed USB device number 9 using dummy_hcd [ 102.207706][ T8518] usb 8-1: device firmware changed [ 102.211287][ T8518] cdc_wdm 8-1:1.0: Error autopm - -16 [ 102.211394][ T10] usb 8-1: USB disconnect, device number 9 [ 102.342122][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 102.412073][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 102.492104][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 102.497719][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.500873][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 102.503828][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.507789][ T10] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 102.510512][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.512027][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 102.521457][ T10] hub 8-1:1.0: bad descriptor, ignoring hub [ 102.523484][ T10] hub 8-1:1.0: probe with driver hub failed with error -5 [ 102.525886][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 102.527544][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 102.529200][ T10] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 102.580663][ T60] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.583602][ T60] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 102.586889][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.589737][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 102.594988][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 102.604394][ T60] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.607179][ T60] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.609624][ T60] usb 5-1: Product: syz [ 102.611080][ T60] usb 5-1: Manufacturer: syz [ 102.620696][ T60] cdc_wdm 5-1:1.0: skipping garbage [ 102.625485][ T60] cdc_wdm 5-1:1.0: skipping garbage [ 102.634578][ T60] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 102.636546][ T60] cdc_wdm 5-1:1.0: Unknown control protocol [ 102.833104][ T71] usb 8-1: USB disconnect, device number 10 [ 103.521034][ T8585] ubi31: attaching mtd0 [ 103.521422][ T8584] tipc: Failed to remove unknown binding: 66,1,1/0:908457659/908457661 [ 103.525981][ T8585] ubi31: scanning is finished [ 103.527678][ T8585] ubi31: empty MTD device detected [ 103.530443][ T8584] tipc: Failed to remove unknown binding: 66,1,1/0:908457659/908457661 [ 103.537511][ T8584] xt_cgroup: xt_cgroup: no path or classid specified [ 103.542006][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 103.570025][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.753'. [ 103.638362][ T8585] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 103.641607][ T8585] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 103.644810][ T8585] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 103.647802][ T8585] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 103.650981][ T8585] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 103.654858][ T8585] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 103.658239][ T8585] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3731774501 [ 103.662457][ T8585] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 103.667829][ T8589] ubi31: background thread "ubi_bgt31d" started, PID 8589 [ 104.211421][ T8607] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 104.582036][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 104.707850][ T8613] Process accounting resumed [ 104.813257][ T8616] overlayfs: workdir and upperdir must reside under the same mount [ 105.210537][ T60] usb 5-1: USB disconnect, device number 7 [ 105.430992][ T8644] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 105.477854][ T8644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.536211][ T8644] bond3: (slave veth5): Enslaving as an active interface with a down link [ 105.547876][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 105.547892][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 105.561703][ T8645] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.569803][ T8645] bond3: (slave batadv1): making interface the new active one [ 105.574860][ T8645] batadv1: entered promiscuous mode [ 105.582283][ T8645] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 105.598813][ T8650] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 105.612573][ T8650] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 105.622172][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 105.719971][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 105.956955][ T8667] netlink: 'syz.2.780': attribute type 4 has an invalid length. [ 105.972154][ T6929] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.141285][ T6929] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.146636][ T6929] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 106.152452][ T6929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.156791][ T6929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 106.160191][ T6929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 106.176836][ T6929] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.181082][ T6929] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.182631][ T8671] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 106.183847][ T6929] usb 5-1: Product: syz [ 106.187826][ T6929] usb 5-1: Manufacturer: syz [ 106.200575][ T6929] cdc_wdm 5-1:1.0: skipping garbage [ 106.202637][ T6929] cdc_wdm 5-1:1.0: skipping garbage [ 106.207319][ T6929] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 106.209844][ T6929] cdc_wdm 5-1:1.0: Unknown control protocol [ 106.468306][ T8660] FAULT_INJECTION: forcing a failure. [ 106.468306][ T8660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.475843][ T8660] CPU: 3 UID: 0 PID: 8660 Comm: syz.0.778 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 106.475859][ T8660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.475866][ T8660] Call Trace: [ 106.475869][ T8660] [ 106.475873][ T8660] dump_stack_lvl+0x16c/0x1f0 [ 106.475921][ T8660] should_fail_ex+0x512/0x640 [ 106.475945][ T8660] copy_fpstate_to_sigframe+0x854/0xaf0 [ 106.475962][ T8660] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 106.475975][ T8660] ? posixtimer_deliver_signal+0xed/0x6a0 [ 106.475989][ T8660] ? posixtimer_deliver_signal+0x1af/0x6a0 [ 106.475999][ T8660] ? x86_task_fpu+0x5f/0x90 [ 106.476011][ T8660] get_sigframe+0x4a8/0x9c0 [ 106.476026][ T8660] ? __pfx_get_sigframe+0x10/0x10 [ 106.476038][ T8660] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.476053][ T8660] ? siginfo_layout+0x177/0x290 [ 106.476067][ T8660] x64_setup_rt_frame+0x12e/0xcf0 [ 106.476081][ T8660] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.476096][ T8660] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 106.476110][ T8660] ? wdm_wait_for_response.isra.0+0x381/0x5b0 [ 106.476126][ T8660] arch_do_signal_or_restart+0x5e4/0x7d0 [ 106.476139][ T8660] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 106.476155][ T8660] ? __pfx_wdm_fsync+0x10/0x10 [ 106.476167][ T8660] ? vfs_fsync_range+0x140/0x220 [ 106.476181][ T8660] exit_to_user_mode_loop+0x84/0x110 [ 106.476193][ T8660] do_syscall_64+0x3f6/0x4c0 [ 106.476204][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.476215][ T8660] RIP: 0033:0x7f7b55f8e9a9 [ 106.476223][ T8660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.476234][ T8660] RSP: 002b:00007f7b53df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004b [ 106.476243][ T8660] RAX: fffffffffffffffc RBX: 00007f7b561b5fa0 RCX: 00007f7b55f8e9a9 [ 106.476250][ T8660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 106.476256][ T8660] RBP: 00007f7b53df6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.476262][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.476267][ T8660] R13: 0000000000000000 R14: 00007f7b561b5fa0 R15: 00007ffe3c0e89e8 [ 106.476281][ T8660] [ 106.662204][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 106.668574][ T40] kauditd_printk_skb: 1317 callbacks suppressed [ 106.668584][ T40] audit: type=1400 audit(1753577454.175:11221): avc: denied { read write } for pid=5948 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.683666][ T40] audit: type=1400 audit(1753577454.185:11222): avc: denied { read write open } for pid=5948 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.694719][ T40] audit: type=1400 audit(1753577454.185:11223): avc: denied { ioctl } for pid=5948 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.703246][ T40] audit: type=1400 audit(1753577454.195:11224): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 106.735038][ T40] audit: type=1400 audit(1753577454.245:11225): avc: denied { read write } for pid=5946 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.758369][ T40] audit: type=1400 audit(1753577454.245:11226): avc: denied { read write open } for pid=5946 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.777471][ T40] audit: type=1400 audit(1753577454.245:11227): avc: denied { ioctl } for pid=5946 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.790261][ T40] audit: type=1400 audit(1753577454.245:11228): avc: denied { read append } for pid=8686 comm="syz.1.785" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.793130][ T5963] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 106.797742][ T40] audit: type=1400 audit(1753577454.245:11229): avc: denied { read append open } for pid=8686 comm="syz.1.785" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.804772][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 106.816714][ T40] audit: type=1400 audit(1753577454.255:11230): avc: denied { ioctl } for pid=8686 comm="syz.1.785" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.346330][ T8663] syz.3.779 (8663) used greatest stack depth: 19960 bytes left [ 107.626329][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 107.702014][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 107.902036][ T6929] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 108.039990][ T8742] tmpfs: Cannot disable swap on remount [ 108.078779][ T6929] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.081521][ T6929] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.087447][ T6929] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.090879][ T6929] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 108.095482][ T6929] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 108.107185][ T6929] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.110141][ T6929] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.114796][ T6929] usb 8-1: Product: syz [ 108.116177][ T6929] usb 8-1: Manufacturer: syz [ 108.129393][ T6929] cdc_wdm 8-1:1.0: skipping garbage [ 108.131096][ T6929] cdc_wdm 8-1:1.0: skipping garbage [ 108.136392][ T6929] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 108.138369][ T6929] cdc_wdm 8-1:1.0: Unknown control protocol [ 108.250203][ T8748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.254057][ T8748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.258677][ T8748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.262113][ T60] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 108.263849][ T8748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.268534][ T8748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.274458][ T8748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.278838][ T8748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.282880][ T8748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.286462][ T8748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.290001][ T8748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.392373][ T8753] binder: BINDER_SET_CONTEXT_MGR already set [ 108.394515][ T8753] binder: 8750:8753 ioctl 4018620d 2000000000c0 returned -16 [ 108.400472][ T8751] binder: 8750:8751 ioctl 4068aea3 2000000002c0 returned -22 [ 108.404830][ T8751] binder: 8750:8751 ioctl 8933 200000000a40 returned -22 [ 108.405205][ T8753] binder: 8750:8753 ioctl 8933 200000000a40 returned -22 [ 108.412581][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 108.418813][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.420899][ T60] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 108.423880][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.429856][ T29] libceph: connect (1)[c::]:6789 error -101 [ 108.429928][ T60] usb 6-1: config 0 descriptor?? [ 108.432366][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 108.479494][ T8753] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 108.479571][ T8751] ceph: No mds server is up or the cluster is laggy [ 108.742112][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 108.854270][ T60] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 108.907885][ T8774] dlm: plock device version mismatch: kernel (1.2.0), user (808464432.808464432.808464432) [ 108.914702][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'. [ 108.928359][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.813'. [ 108.940209][ T8774] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 108.943496][ T8774] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 109.047793][ T8776] netlink: 168 bytes leftover after parsing attributes in process `syz.2.814'. [ 109.782131][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.282069][ T8793] pim6reg1: entered promiscuous mode [ 110.283975][ T8793] pim6reg1: entered allmulticast mode [ 110.344643][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 110.347461][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 110.350257][ T8794] netlink: 'syz.2.820': attribute type 19 has an invalid length. [ 110.645853][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 110.646038][ T60] usb 5-1: USB disconnect, device number 8 [ 110.647979][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 110.647990][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 110.654169][ T10] usb 8-1: USB disconnect, device number 11 [ 110.822114][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.822774][ T8801] No control pipe specified [ 110.829415][ T8803] No control pipe specified [ 110.837826][ T8804] input: syz0 as /devices/virtual/input/input11 [ 110.898018][ T8808] ipvlan2: entered promiscuous mode [ 110.904445][ T8808] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.906881][ T8808] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 111.032538][ T10] usb 6-1: USB disconnect, device number 13 [ 111.190708][ T8828] netlink: 'syz.0.832': attribute type 58 has an invalid length. [ 111.298281][ T8836] SET target dimension over the limit! [ 111.442071][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 111.513797][ T8859] netlink: 37 bytes leftover after parsing attributes in process `syz.2.840'. [ 111.526111][ T8859] netlink: 37 bytes leftover after parsing attributes in process `syz.2.840'. [ 111.597967][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.600679][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 111.604588][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.607457][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 111.610951][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 111.618613][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.621398][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.624851][ T10] usb 6-1: Product: syz [ 111.627333][ T10] usb 6-1: Manufacturer: syz [ 111.637454][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 111.641931][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 111.648406][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 111.650276][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 111.664692][ T8868] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 111.677606][ T8868] bond4: entered promiscuous mode [ 111.679238][ T40] kauditd_printk_skb: 844 callbacks suppressed [ 111.679247][ T40] audit: type=1400 audit(1753577459.185:12075): avc: denied { ioctl } for pid=8865 comm="syz.2.842" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21371 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.679487][ T8868] 8021q: adding VLAN 0 to HW filter on device bond4 [ 111.684782][ T40] audit: type=1400 audit(1753577459.195:12076): avc: denied { ioctl } for pid=8865 comm="syz.2.842" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21371 ioctlcmd=0xaa06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.712403][ T8868] 8021q: adding VLAN 0 to HW filter on device bond4 [ 111.715634][ T8868] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 111.720363][ T8868] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 111.727454][ T8868] bond4: (slave ip6gre2): making interface the new active one [ 111.729828][ T8868] ip6gre2: entered promiscuous mode [ 111.735557][ T8868] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 111.735813][ T40] audit: type=1400 audit(1753577459.245:12077): avc: denied { read write } for pid=5946 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.747717][ T40] audit: type=1400 audit(1753577459.245:12078): avc: denied { read write open } for pid=5946 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.755391][ T40] audit: type=1400 audit(1753577459.245:12079): avc: denied { ioctl } for pid=5946 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.764257][ T40] audit: type=1400 audit(1753577459.265:12080): avc: denied { bpf } for pid=8867 comm="syz.0.843" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.770252][ T40] audit: type=1400 audit(1753577459.265:12081): avc: denied { map_create } for pid=8867 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.781097][ T40] audit: type=1400 audit(1753577459.285:12082): avc: denied { read write } for pid=5949 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.791400][ T40] audit: type=1400 audit(1753577459.285:12083): avc: denied { read write open } for pid=5949 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.799845][ T40] audit: type=1400 audit(1753577459.295:12084): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.862079][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 111.883876][ T8876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.974549][ T8876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.033840][ T8876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.036572][ T8886] tmpfs: Unknown parameter 'ocks' [ 112.114063][ T8876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.195315][ T8876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.202199][ T8876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.208633][ T8876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.215805][ T8876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.532065][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 112.683384][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 112.690004][ T10] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.693531][ T10] usb 8-1: config 0 has no interface number 0 [ 112.696900][ T10] usb 8-1: config 0 interface 184 has no altsetting 0 [ 112.714513][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 112.718284][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.721444][ T10] usb 8-1: Product: syz [ 112.725527][ T10] usb 8-1: Manufacturer: syz [ 112.727509][ T10] usb 8-1: SerialNumber: syz [ 112.733161][ T10] usb 8-1: config 0 descriptor?? [ 112.741400][ T10] smsc75xx v1.0.0 [ 112.743299][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 112.747770][ T10] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -22 [ 112.902023][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 112.951913][ T29] usb 8-1: USB disconnect, device number 12 [ 113.351423][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'. [ 113.355091][ T1469] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 113.509760][ T1469] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.514117][ T1469] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.517410][ T1469] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.520314][ T1469] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 113.523829][ T1469] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 113.534125][ T1469] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.537007][ T1469] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.539609][ T1469] usb 8-1: Product: syz [ 113.541697][ T1469] usb 8-1: Manufacturer: syz [ 113.556709][ T1469] cdc_wdm 8-1:1.0: skipping garbage [ 113.558451][ T1469] cdc_wdm 8-1:1.0: skipping garbage [ 113.566267][ T1469] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 113.568196][ T1469] cdc_wdm 8-1:1.0: Unknown control protocol [ 113.778879][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 113.811499][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 113.942381][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 114.069496][ T8963] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 114.071591][ T8963] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.074936][ T8963] vhci_hcd vhci_hcd.0: Device attached [ 114.078647][ T8963] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 114.080702][ T8963] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.083528][ T8963] vhci_hcd vhci_hcd.0: Device attached [ 114.087990][ T8964] vhci_hcd: connection closed [ 114.089500][ T7875] vhci_hcd: stop threads [ 114.092062][ T8966] vhci_hcd: connection closed [ 114.092529][ T7875] vhci_hcd: release socket [ 114.095436][ T7875] vhci_hcd: disconnect device [ 114.098997][ T7875] vhci_hcd: stop threads [ 114.100421][ T7875] vhci_hcd: release socket [ 114.101814][ T7875] vhci_hcd: disconnect device [ 114.689001][ T8976] input: syz0 as /devices/virtual/input/input12 [ 114.818416][ T8979] syz.0.876 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.992002][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 115.098755][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 115.472075][ T10] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 115.636430][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 115.639721][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 115.646495][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 115.661538][ T10] usb 5-1: string descriptor 0 read error: -22 [ 115.664224][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.667032][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.670309][ T9008] tipc: Enabled bearer , priority 0 [ 115.678111][ T8997] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 115.882496][ T10] cdc_ncm 5-1:1.0: bind() failure [ 115.886020][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 115.891826][ T10] cdc_ncm 5-1:1.1: bind() failure [ 115.895607][ T10] usb 5-1: USB disconnect, device number 9 [ 116.032026][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 116.116647][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 116.118778][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 116.120871][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 116.122433][ T10] usb 6-1: USB disconnect, device number 14 [ 116.122959][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 116.126680][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 116.150174][ T66] usb 8-1: USB disconnect, device number 13 [ 116.237187][ T9016] netlink: 'syz.3.889': attribute type 10 has an invalid length. [ 116.243885][ T9016] hsr_slave_0: left promiscuous mode [ 116.246042][ T9016] hsr_slave_1: left promiscuous mode [ 116.266865][ T9014] fuse: Unknown parameter '01777777777777777777777' [ 116.286134][ T9014] netlink: 9 bytes leftover after parsing attributes in process `syz.1.888'. [ 116.289687][ T9014] gretap0: entered promiscuous mode [ 116.299014][ T9014] netlink: 5 bytes leftover after parsing attributes in process `syz.1.888'. [ 116.301909][ T9014] 0{X: renamed from gretap0 [ 116.306707][ T9014] 0{X: left promiscuous mode [ 116.310561][ T9014] 0{X: entered allmulticast mode [ 116.314114][ T9014] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 116.324905][ T9014] fuse: Unknown parameter 'roytmode' [ 116.513334][ T9023] evm: overlay not supported [ 116.639483][ T9033] gfs2: Unknown parameter 'nordcovery' [ 116.652337][ T1148] batadv1: left promiscuous mode [ 116.686127][ T40] kauditd_printk_skb: 1021 callbacks suppressed [ 116.686138][ T40] audit: type=1400 audit(1753577464.195:13106): avc: denied { prog_load } for pid=9026 comm="syz.3.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.703200][ T40] audit: type=1400 audit(1753577464.195:13107): avc: denied { bpf } for pid=9026 comm="syz.3.893" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.709540][ T40] audit: type=1400 audit(1753577464.195:13108): avc: denied { perfmon } for pid=9026 comm="syz.3.893" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.718354][ T40] audit: type=1400 audit(1753577464.195:13109): avc: denied { perfmon } for pid=9026 comm="syz.3.893" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.727495][ T40] audit: type=1400 audit(1753577464.195:13110): avc: denied { perfmon } for pid=9026 comm="syz.3.893" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.735156][ T40] audit: type=1400 audit(1753577464.195:13111): avc: denied { perfmon } for pid=9026 comm="syz.3.893" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.741527][ T40] audit: type=1400 audit(1753577464.195:13112): avc: denied { perfmon } for pid=9026 comm="syz.3.893" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.751002][ T40] audit: type=1400 audit(1753577464.195:13113): avc: denied { bpf } for pid=9026 comm="syz.3.893" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.758406][ T40] audit: type=1400 audit(1753577464.195:13114): avc: denied { bpf } for pid=9026 comm="syz.3.893" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.765980][ T40] audit: type=1400 audit(1753577464.195:13115): avc: denied { prog_run } for pid=9026 comm="syz.3.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.995691][ T9036] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 116.995691][ T9036] program syz.1.897 not setting count and/or reply_len properly [ 117.062065][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 117.152977][ T1338] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 117.308754][ T1338] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.311455][ T1338] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 117.319596][ T1338] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.324283][ T1338] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 117.331249][ T1338] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 117.345027][ T1338] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.347946][ T1338] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.350395][ T1338] usb 8-1: Product: syz [ 117.351713][ T1338] usb 8-1: Manufacturer: syz [ 117.366677][ T1338] cdc_wdm 8-1:1.0: skipping garbage [ 117.368326][ T1338] cdc_wdm 8-1:1.0: skipping garbage [ 117.373024][ T1338] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 117.374886][ T1338] cdc_wdm 8-1:1.0: Unknown control protocol [ 117.406520][ T9050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.900'. [ 117.409503][ T9050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.900'. [ 117.428301][ T9050] xfrm0 speed is unknown, defaulting to 1000 [ 117.593916][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 117.880106][ T9064] syzkaller0: entered promiscuous mode [ 117.881864][ T9064] syzkaller0: entered allmulticast mode [ 118.042237][ T66] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 118.102121][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.202016][ T66] usb 6-1: Using ep0 maxpacket: 8 [ 118.208927][ T66] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 118.213533][ T66] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.216655][ T66] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.219675][ T66] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.225091][ T66] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.227878][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.287985][ T9079] overlayfs: failed to resolve './bus': -2 [ 118.442998][ T66] usb 6-1: GET_CAPABILITIES returned 0 [ 118.444818][ T66] usbtmc 6-1:16.0: can't read capabilities [ 118.545362][ T9089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.909'. [ 118.548544][ T9089] netlink: 43 bytes leftover after parsing attributes in process `syz.0.909'. [ 118.551372][ T9089] netlink: 'syz.0.909': attribute type 5 has an invalid length. [ 118.556439][ T9089] netlink: 43 bytes leftover after parsing attributes in process `syz.0.909'. [ 118.575281][ T9089] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 118.590855][ T9089] 8021q: adding VLAN 0 to HW filter on device bond5 [ 118.610611][ T9089] bond5: (slave geneve2): making interface the new active one [ 118.615862][ T9089] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 118.620378][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 118.623150][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 118.626404][ T9093] netlink: 'syz.2.911': attribute type 20 has an invalid length. [ 118.630505][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 118.633457][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 118.636423][ T9093] netlink: 'syz.2.911': attribute type 20 has an invalid length. [ 118.862602][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 118.865359][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'. [ 118.988336][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.918'. [ 119.142068][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.338199][ T9124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9124 comm=syz.0.921 [ 119.901804][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 119.902113][ T1469] usb 8-1: USB disconnect, device number 14 [ 119.903920][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 119.907813][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 119.975980][ T9137] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 120.050014][ T9141] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 120.068990][ T9141] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.192060][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 120.379408][ T9159] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 120.409837][ T9159] 9p: Unknown uid 00000000004294967295 [ 120.554588][ T5954] usb 6-1: USB disconnect, device number 15 [ 120.712669][ T71] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 120.882118][ T71] usb 8-1: Using ep0 maxpacket: 8 [ 120.900548][ T71] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 120.904436][ T71] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.907476][ T71] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.910483][ T71] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.920869][ T71] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.925765][ T71] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.932829][ T71] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.149125][ T71] usb 8-1: usb_control_msg returned -32 [ 121.151348][ T71] usbtmc 8-1:16.0: can't read capabilities [ 121.173690][ T9184] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 121.188322][ T9184] 8021q: adding VLAN 0 to HW filter on device bond6 [ 121.222169][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 121.357888][ T9172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.360557][ T9172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.363880][ T9172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.366107][ T9172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.704100][ T40] kauditd_printk_skb: 852 callbacks suppressed [ 121.704110][ T40] audit: type=1400 audit(1753577469.205:13968): avc: denied { read write } for pid=5949 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.704348][ T9210] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 121.706092][ T40] audit: type=1400 audit(1753577469.205:13969): avc: denied { read open } for pid=9212 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.724670][ T40] audit: type=1400 audit(1753577469.205:13970): avc: denied { getattr } for pid=9212 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.726831][ T9210] overlayfs: missing 'lowerdir' [ 121.732406][ T40] audit: type=1400 audit(1753577469.215:13971): avc: denied { search } for pid=9212 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.732431][ T40] audit: type=1400 audit(1753577469.215:13972): avc: denied { search } for pid=9212 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.732451][ T40] audit: type=1400 audit(1753577469.215:13973): avc: denied { search } for pid=9212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.732471][ T40] audit: type=1400 audit(1753577469.215:13974): avc: denied { search } for pid=9212 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.763822][ T40] audit: type=1400 audit(1753577469.215:13975): avc: denied { mounton } for pid=9205 comm="syz.1.939" path="/159/bus" dev="tmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 121.774739][ T9212] audit: audit_backlog=65 > audit_backlog_limit=64 [ 121.776781][ T9212] audit: audit_lost=115 audit_rate_limit=0 audit_backlog_limit=64 [ 121.787096][ T9217] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.792513][ T9217] SELinux: ebitmap: empty map [ 121.793925][ T9217] SELinux: failed to load policy [ 122.026451][ T9225] tmpfs: Bad value for 'mpol' [ 122.262238][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 122.472058][ T1338] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 122.629037][ T1338] usb 6-1: config 0 has no interfaces? [ 122.634391][ T1338] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 122.638268][ T1338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.646731][ T1338] usb 6-1: config 0 descriptor?? [ 122.714311][ T9242] xt_hashlimit: size too large, truncated to 1048576 [ 122.722467][ T5954] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 122.777263][ T9244] syz.2.951: attempt to access beyond end of device [ 122.777263][ T9244] sr0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 122.781205][ T9244] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 122.832501][ T5963] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.876927][ T9255] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 122.879380][ T9255] cramfs: wrong magic [ 122.965471][ T66] usb 6-1: USB disconnect, device number 16 [ 123.215010][ T9273] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 123.217980][ T9274] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 123.223261][ T9273] syz_tun: entered promiscuous mode [ 123.234389][ T9273] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 123.248417][ T9274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.251365][ T9274] team0: Port device bond0 added [ 123.302042][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.366911][ T1338] usb 8-1: USB disconnect, device number 15 [ 123.392176][ T5963] Bluetooth: hci2: command 0x0405 tx timeout [ 123.392314][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.394142][ T5963] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.815067][ T9288] netlink: 'syz.1.960': attribute type 1 has an invalid length. [ 124.144875][ T7874] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 124.148697][ T7874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.253820][ T7874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.298305][ T9317] netlink: 'syz.2.971': attribute type 7 has an invalid length. [ 124.310899][ T9315] mac80211_hwsim hwsim9 `: renamed from wlan1 (while UP) [ 124.345486][ T7874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.352059][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.442456][ T5963] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.447322][ T5963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.450203][ T5963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.455970][ T5963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.463239][ T5963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.476798][ T7874] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.536433][ T9320] xfrm0 speed is unknown, defaulting to 1000 [ 124.657487][ T7874] bridge_slave_1: left allmulticast mode [ 124.659553][ T7874] bridge_slave_1: left promiscuous mode [ 124.665300][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.669972][ T7874] bridge_slave_0: left allmulticast mode [ 124.671836][ T7874] bridge_slave_0: left promiscuous mode [ 124.675992][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.756681][ T7874] gretap0 (unregistering): left promiscuous mode [ 124.992817][ T7874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.998712][ T7874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.002667][ T7874] bond0 (unregistering): Released all slaves [ 125.010468][ T7874] bond1 (unregistering): Released all slaves [ 125.016669][ T7874] bond2 (unregistering): Released all slaves [ 125.135327][ T7874] tipc: Left network mode [ 125.146973][ T9320] chnl_net:caif_netlink_parms(): no params data found [ 125.268010][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.272298][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.275467][ T9320] bridge_slave_0: entered allmulticast mode [ 125.279239][ T9320] bridge_slave_0: entered promiscuous mode [ 125.290076][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.293185][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.296132][ T9320] bridge_slave_1: entered allmulticast mode [ 125.299850][ T9320] bridge_slave_1: entered promiscuous mode [ 125.364975][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.371069][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.382041][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 125.410304][ T9320] team0: Port device team_slave_0 added [ 125.426839][ T9320] team0: Port device team_slave_1 added [ 125.450221][ T7874] batadv_slave_1: left promiscuous mode [ 125.454814][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.457687][ T7874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.460629][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.463987][ T7874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.486950][ T7874] veth1_macvtap: left promiscuous mode [ 125.488951][ T7874] veth0_macvtap: left promiscuous mode [ 125.490745][ T7874] veth1_vlan: left promiscuous mode [ 125.492594][ T7874] veth0_vlan: left promiscuous mode [ 125.548907][ T7874] pim6reg (unregistering): left allmulticast mode [ 125.558602][ T7874] pimreg3 (unregistering): left allmulticast mode [ 126.425069][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 126.502136][ T5960] Bluetooth: hci1: command tx timeout [ 126.520021][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.522464][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.530406][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.545894][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.548098][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.557829][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.601862][ T9320] hsr_slave_0: entered promiscuous mode [ 126.604521][ T9320] hsr_slave_1: entered promiscuous mode [ 126.733090][ T40] kauditd_printk_skb: 2266 callbacks suppressed [ 126.733100][ T40] audit: type=1400 audit(1753577474.245:16241): avc: denied { search } for pid=9342 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.744995][ T40] audit: type=1400 audit(1753577474.245:16242): avc: denied { search } for pid=9342 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.752250][ T40] audit: type=1400 audit(1753577474.245:16243): avc: denied { search } for pid=9342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.758027][ T9320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.759183][ T40] audit: type=1400 audit(1753577474.245:16244): avc: denied { search } for pid=9342 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.769044][ T40] audit: type=1400 audit(1753577474.265:16245): avc: denied { create } for pid=9320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.775449][ T40] audit: type=1400 audit(1753577474.265:16246): avc: denied { write } for pid=9320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.779100][ T9320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.784381][ T40] audit: type=1400 audit(1753577474.265:16247): avc: denied { read } for pid=9320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.787275][ T9343] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.797104][ T9343] audit: audit_lost=116 audit_rate_limit=0 audit_backlog_limit=64 [ 126.797167][ T40] audit: type=1400 audit(1753577474.265:16248): avc: denied { read } for pid=9320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.812403][ T9320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.818314][ T9320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.934127][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.941526][ T7874] IPVS: stop unused estimator thread 0... [ 126.960456][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.969180][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.971405][ T7867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.980790][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.983162][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.274714][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.472052][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.767407][ T9320] veth0_vlan: entered promiscuous mode [ 127.788747][ T9320] veth1_vlan: entered promiscuous mode [ 127.845327][ T9320] veth0_macvtap: entered promiscuous mode [ 127.855010][ T9320] veth1_macvtap: entered promiscuous mode [ 127.876534][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.885103][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.892373][ T9320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.895025][ T9320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.897775][ T9320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.900466][ T9320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.969661][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.973262][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.003199][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.006180][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.502043][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.583575][ T5960] Bluetooth: hci1: command tx timeout [ 129.542076][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 130.582057][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 130.672110][ T5960] Bluetooth: hci1: command tx timeout [ 131.622030][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.504290][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.507091][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.662052][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.742504][ T5960] Bluetooth: hci1: command tx timeout [ 132.886171][ T40] kauditd_printk_skb: 2490 callbacks suppressed [ 132.886183][ T40] audit: type=1400 audit(1753577480.395:18618): avc: denied { search } for pid=9426 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.895420][ T40] audit: type=1400 audit(1753577480.395:18619): avc: denied { search } for pid=9426 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.902519][ T40] audit: type=1400 audit(1753577480.395:18620): avc: denied { search } for pid=9426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.909289][ T40] audit: type=1400 audit(1753577480.395:18621): avc: denied { search } for pid=9426 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.918214][ T40] audit: type=1400 audit(1753577480.415:18622): avc: denied { search } for pid=9427 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.925281][ T40] audit: type=1400 audit(1753577480.415:18623): avc: denied { search } for pid=9427 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.934147][ T40] audit: type=1400 audit(1753577480.415:18624): avc: denied { search } for pid=9427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.939783][ T9427] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.941013][ T40] audit: type=1400 audit(1753577480.415:18625): avc: denied { read open } for pid=9427 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.944093][ T9427] audit: audit_lost=157 audit_rate_limit=0 audit_backlog_limit=64 [ 133.702018][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 134.742372][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 135.782019][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.822021][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.862103][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.902136][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.942548][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 140.411642][ T40] kauditd_printk_skb: 628 callbacks suppressed [ 140.411652][ T40] audit: type=1400 audit(1753577487.915:19253): avc: denied { search } for pid=9449 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.420868][ T40] audit: type=1400 audit(1753577487.925:19254): avc: denied { search } for pid=9449 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.428446][ T40] audit: type=1400 audit(1753577487.925:19255): avc: denied { search } for pid=9449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.435669][ T40] audit: type=1400 audit(1753577487.925:19256): avc: denied { search } for pid=9449 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.442844][ T40] audit: type=1400 audit(1753577487.935:19257): avc: denied { search } for pid=9450 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.448881][ T9450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.449560][ T40] audit: type=1400 audit(1753577487.935:19258): avc: denied { search } for pid=9450 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.451590][ T9450] audit: audit_lost=158 audit_rate_limit=0 audit_backlog_limit=64 [ 140.458882][ T40] audit: type=1400 audit(1753577487.935:19259): avc: denied { search } for pid=9450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.458927][ T40] audit: type=1400 audit(1753577487.935:19260): avc: denied { read open } for pid=9450 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.982131][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.022049][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.062085][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 144.102381][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.142044][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.182127][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.386612][ T40] kauditd_printk_skb: 2456 callbacks suppressed [ 146.386629][ T40] audit: type=1400 audit(1753577493.895:21716): avc: denied { create } for pid=9501 comm="syz.1.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.412146][ T40] audit: type=1400 audit(1753577493.895:21717): avc: denied { create } for pid=9501 comm="syz.1.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.420846][ T40] audit: type=1400 audit(1753577493.895:21718): avc: denied { write } for pid=9501 comm="syz.1.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.438989][ T40] audit: type=1400 audit(1753577493.895:21719): avc: denied { read write } for pid=9504 comm="syz.4.978" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.449151][ T40] audit: type=1400 audit(1753577493.895:21720): avc: denied { module_request } for pid=9501 comm="syz.1.976" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792D06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 146.461931][ T40] audit: type=1400 audit(1753577493.895:21721): avc: denied { read write open } for pid=9504 comm="syz.4.978" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.472329][ T40] audit: type=1400 audit(1753577493.895:21722): avc: denied { ioctl } for pid=9504 comm="syz.4.978" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.488127][ T9514] ------------[ cut here ]------------ [ 146.489911][ T9514] WARNING: CPU: 3 PID: 9514 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 146.494338][ T9514] Modules linked in: [ 146.495857][ T9514] CPU: 3 UID: 0 PID: 9514 Comm: syz.1.976 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 146.501833][ T40] audit: type=1400 audit(1753577493.895:21723): avc: denied { ioctl } for pid=9504 comm="syz.4.978" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.502968][ T9514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc [ 146.517846][ T9514] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.520836][ T9514] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 146.521915][ T40] audit: type=1400 audit(1753577493.905:21724): avc: denied { ioctl } for pid=9504 comm="syz.4.978" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.529318][ T9514] RSP: 0018:ffffc9000564f4f8 EFLAGS: 00010246 [ 146.539268][ T9514] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 146.542157][ T40] audit: type=1400 audit(1753577493.905:21725): avc: denied { ioctl } for pid=9504 comm="syz.4.978" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.543031][ T9514] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 146.553926][ T9514] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 146.557268][ T9514] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 146.560566][ T9514] R13: 1ffff92000ac9eb4 R14: 0000000400000000 R15: 0000000000000016 [ 146.564039][ T9514] FS: 00007fe6066446c0(0000) GS:ffff8880d6a20000(0000) knlGS:0000000000000000 [ 146.567803][ T9514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.570658][ T9514] CR2: 0000200000001000 CR3: 0000000056190000 CR4: 0000000000352ef0 [ 146.574091][ T9514] DR0: 0000000000000b4a DR1: 0000000000000001 DR2: ffffffffffffffff [ 146.577438][ T9514] DR3: 00000000fffffffe DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 146.580701][ T9514] Call Trace: [ 146.582340][ T9514] [ 146.583657][ T9514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 146.586409][ T9514] ? rcu_is_watching+0x12/0xc0 [ 146.588437][ T9514] ? trace_kmem_cache_alloc+0x28/0xc0 [ 146.590761][ T9514] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 146.593363][ T9514] ? hashtab_init+0x1b1/0x290 [ 146.595415][ T9514] __alloc_pages_noprof+0xb/0x1b0 [ 146.597559][ T9514] ___kmalloc_large_node+0x84/0x1e0 [ 146.599803][ T9514] ? hashtab_init+0x1b1/0x290 [ 146.601731][ T9514] __kmalloc_large_node_noprof+0x1c/0x70 [ 146.604207][ T9514] ? __pfx_ebitmap_read+0x10/0x10 [ 146.606264][ T9514] __kmalloc_noprof.cold+0xc/0x61 [ 146.608657][ T9514] hashtab_init+0x1b1/0x290 [ 146.610625][ T9514] ? __asan_memcpy+0x3c/0x60 [ 146.612692][ T9514] policydb_read+0x7b4/0x3220 [ 146.614727][ T9514] ? __pfx_policydb_read+0x10/0x10 [ 146.616927][ T9514] security_load_policy+0x15c/0x12c0 [ 146.619191][ T9514] ? irqentry_exit+0x3b/0x90 [ 146.621199][ T9514] ? __pfx_security_load_policy+0x10/0x10 [ 146.623736][ T9514] ? _copy_from_user+0x93/0xd0 [ 146.625791][ T9514] sel_write_load+0x332/0x1bd0 [ 146.627833][ T9514] ? __lock_acquire+0xb8a/0x1c90 [ 146.629924][ T9514] ? __pfx_sel_write_load+0x10/0x10 [ 146.632223][ T9514] ? __pfx_sel_write_load+0x10/0x10 [ 146.634443][ T9514] vfs_write+0x2a0/0x1150 [ 146.636312][ T9514] ? __pfx___mutex_lock+0x10/0x10 [ 146.638443][ T9514] ? __pfx_vfs_write+0x10/0x10 [ 146.640472][ T9514] ? __fget_files+0x20e/0x3c0 [ 146.642565][ T9514] ksys_write+0x12a/0x250 [ 146.644479][ T9514] ? __pfx_ksys_write+0x10/0x10 [ 146.646581][ T9514] do_syscall_64+0xcd/0x4c0 [ 146.648527][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.651151][ T9514] RIP: 0033:0x7fe60578e9a9 [ 146.653239][ T9514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.661122][ T9514] RSP: 002b:00007fe606644038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.664930][ T9514] RAX: ffffffffffffffda RBX: 00007fe6059b6080 RCX: 00007fe60578e9a9 [ 146.668366][ T9514] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 146.671746][ T9514] RBP: 00007fe605810d69 R08: 0000000000000000 R09: 0000000000000000 [ 146.675233][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.678671][ T9514] R13: 0000000000000000 R14: 00007fe6059b6080 R15: 00007ffd6c0fbb18 [ 146.682249][ T9514] [ 146.683605][ T9514] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.686705][ T9514] CPU: 3 UID: 0 PID: 9514 Comm: syz.1.976 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 146.691657][ T9514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.696213][ T9514] Call Trace: [ 146.697649][ T9514] [ 146.698929][ T9514] dump_stack_lvl+0x3d/0x1f0 [ 146.700974][ T9514] panic+0x71c/0x800 [ 146.702698][ T9514] ? __pfx_panic+0x10/0x10 [ 146.704662][ T9514] ? show_trace_log_lvl+0x29b/0x3e0 [ 146.706909][ T9514] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 146.709492][ T9514] check_panic_on_warn+0xab/0xb0 [ 146.711621][ T9514] __warn+0xf6/0x3c0 [ 146.713345][ T9514] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 146.715914][ T9514] report_bug+0x3c3/0x580 [ 146.717847][ T9514] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 146.720448][ T9514] handle_bug+0x184/0x210 [ 146.722386][ T9514] exc_invalid_op+0x17/0x50 [ 146.724328][ T9514] asm_exc_invalid_op+0x1a/0x20 [ 146.726411][ T9514] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 146.729203][ T9514] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 146.736831][ T9514] RSP: 0018:ffffc9000564f4f8 EFLAGS: 00010246 [ 146.739450][ T9514] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 146.742801][ T9514] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 146.746095][ T9514] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 146.749424][ T9514] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 146.752792][ T9514] R13: 1ffff92000ac9eb4 R14: 0000000400000000 R15: 0000000000000016 [ 146.756147][ T9514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 146.758866][ T9514] ? rcu_is_watching+0x12/0xc0 [ 146.760901][ T9514] ? trace_kmem_cache_alloc+0x28/0xc0 [ 146.763185][ T9514] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 146.765535][ T9514] ? hashtab_init+0x1b1/0x290 [ 146.767496][ T9514] __alloc_pages_noprof+0xb/0x1b0 [ 146.769642][ T9514] ___kmalloc_large_node+0x84/0x1e0 [ 146.771863][ T9514] ? hashtab_init+0x1b1/0x290 [ 146.773907][ T9514] __kmalloc_large_node_noprof+0x1c/0x70 [ 146.776279][ T9514] ? __pfx_ebitmap_read+0x10/0x10 [ 146.778422][ T9514] __kmalloc_noprof.cold+0xc/0x61 [ 146.780558][ T9514] hashtab_init+0x1b1/0x290 [ 146.782563][ T9514] ? __asan_memcpy+0x3c/0x60 [ 146.784502][ T9514] policydb_read+0x7b4/0x3220 [ 146.786531][ T9514] ? __pfx_policydb_read+0x10/0x10 [ 146.788783][ T9514] security_load_policy+0x15c/0x12c0 [ 146.791040][ T9514] ? irqentry_exit+0x3b/0x90 [ 146.792977][ T9514] ? __pfx_security_load_policy+0x10/0x10 [ 146.795283][ T9514] ? _copy_from_user+0x93/0xd0 [ 146.797264][ T9514] sel_write_load+0x332/0x1bd0 [ 146.799341][ T9514] ? __lock_acquire+0xb8a/0x1c90 [ 146.801421][ T9514] ? __pfx_sel_write_load+0x10/0x10 [ 146.803773][ T9514] ? __pfx_sel_write_load+0x10/0x10 [ 146.805873][ T9514] vfs_write+0x2a0/0x1150 [ 146.807707][ T9514] ? __pfx___mutex_lock+0x10/0x10 [ 146.809775][ T9514] ? __pfx_vfs_write+0x10/0x10 [ 146.811865][ T9514] ? __fget_files+0x20e/0x3c0 [ 146.813924][ T9514] ksys_write+0x12a/0x250 [ 146.815745][ T9514] ? __pfx_ksys_write+0x10/0x10 [ 146.817814][ T9514] do_syscall_64+0xcd/0x4c0 [ 146.819773][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.822227][ T9514] RIP: 0033:0x7fe60578e9a9 [ 146.824187][ T9514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.832256][ T9514] RSP: 002b:00007fe606644038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.835813][ T9514] RAX: ffffffffffffffda RBX: 00007fe6059b6080 RCX: 00007fe60578e9a9 [ 146.839078][ T9514] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 146.842331][ T9514] RBP: 00007fe605810d69 R08: 0000000000000000 R09: 0000000000000000 [ 146.845489][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.848750][ T9514] R13: 0000000000000000 R14: 00007fe6059b6080 R15: 00007ffd6c0fbb18 [ 146.852101][ T9514] [ 146.854086][ T9514] Kernel Offset: disabled [ 146.855939][ T9514] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:51:34 Registers: info registers vcpu 0 CPU#0 RAX=1ffff1100ac8e984 RBX=ffff888056474c08 RCX=ffffffff8198d40c RDX=ffffffff8baebda0 RSI=0000000000000004 RDI=ffff888056474c20 RBP=ffffc90003d07bf0 RSP=ffffc90003d07b00 R8 =0000000000000001 R9 =fffff520007a0f4e R10=0000000000000202 R11=ffffffff9af80720 R12=0000000000000001 R13=ffff888053f5aaa8 R14=dffffc0000000000 R15=1ffff920007a0f64 RIP=ffffffff84e095f2 RFL=00010046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f49316b2880 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcfff03788 CR3=0000000023d1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000001000 Opmask02=000000007ffeffff Opmask03=0000000000400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564f843c7270 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564f843b7690 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4930ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373253cf7483453 73730c3a438c6859 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c7da3e4e68d1efb 7373253993b05271 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564f843bad60 00007f4930ff1b50 0000000000000041 0000000000000034 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a1 0000000000000070 32706f003200322d 6332692f7665642d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff8880248d2f30 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000007 RSI=0000000000000001 RDI=ffff8880248d2f58 RBP=ffff8880248d2440 RSP=ffffc90007faf238 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000028 R11=0000000000000001 R12=ffff8880248d2f30 R13=ffff8880248d2f58 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff8198672c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcfff0c240 CR3=0000000065496000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff47e68b20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe062011d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe062011d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe062011d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe062011d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe062011de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe062011ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000310 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000310 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8e5c4e00 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e5c4e00 RBP=0000000000000002 RSP=ffffc9000624f900 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=ffff88805003c800 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81988a3e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f039a8e56c0 CR3=0000000050e10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000e0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff54fab490 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0399c11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0399c11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0399c11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0399c11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0399c11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0399c11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a57c5 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc9000564ee60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000043 R14=ffffffff9b0b9e20 R15=ffffffff855a5760 RIP=ffffffff855a57ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fe6066446c0 ffffffff 00c01300 GS =0000 ffff8880d6a20000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=0000000056190000 CR4=00352ef0 DR0=0000000000000b4a DR1=0000000000000001 DR2=ffffffffffffffff DR3=00000000fffffffe DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe605986488 00007fe605986480 00007fe605986478 00007fe605986450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6064ed100 00007fe605986440 00007fe605986458 00007fe6059864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe605986498 00007fe605986490 00007fe605986488 00007fe605986480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000