last executing test programs: 7.525866594s ago: executing program 3 (id=1542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000080), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200), 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 6.365968674s ago: executing program 1 (id=1549): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x0) 6.274023081s ago: executing program 1 (id=1550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000d004"]) 6.047064625s ago: executing program 1 (id=1551): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000ab0439bf788a2be79420fc707007090a6edeb03880750d2f84971dfba144d9e2e16235c63ee85e1c32cf39cb71d08b45f0be9b47baa444701df0baa206ab30353b52667ac9358c4309d5914638e290a3a2285ba1f64ae6da17db3df92403d8fde9f7da18423ad22817c016e33b2fd1470d80a5ff25d6ca0f413e3792df602fad8f742b56567aad3a2dd7aded5b45acf31e6fc49d44e2fe51dd8bd2567819bf2461f37364ce864ccbcfb394432a8ee3c54c15e36d50f4ccb0d798c4887da1db36633c08529da62a775661863041de9c0ba621704579911120960d9aa20bad811c5300"/255], 0x14}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c800397058abce57033f29eb6dc1f8b128a7537a3409329d374c891ea6f898ba2a0784b3781c59e6bd91a231a605e31d00"/61], 0x3d) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd494037a79928ea546a9db2c7c67f6a8c456d8"], 0xf) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0xf231, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000009000000000000000100001307"], 0x0, 0x39}, 0x20) r5 = io_uring_setup(0x497c, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x11, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 5.284423991s ago: executing program 3 (id=1553): socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000200)='k', 0x1}], 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000003380)=ANY=[], 0x18c6) 4.382347613s ago: executing program 3 (id=1555): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "b1fd38dcc6282c214d97fe92e15b5daefd1619b3f76d0f7430b7b76fa6e8d722b524bf0c03060336e01c6d79f7295a9c663b751794ba8895c5848429e864223a6192e512e13c5263cd7df1263e5a27667920f4c5889636ca901a6afee68351ea21439ca5a430b848710c63454a3e51ec6c2d78227f1a0088411cc173719ae1826e7d74dfb6621c2113935dca3e503d69b6c4bf1b91a65c987e8773d2cb5cc227b5ccba3594a97b28efb4e7e0300c14cd"}}, 0x0, 0x0, 0x0}, 0x0) 3.696195124s ago: executing program 1 (id=1560): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r3, &(0x7f0000000100)=""/246, 0xf6, 0x0) 2.587047085s ago: executing program 2 (id=1566): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x16) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/186, 0xba) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x150, 0x0, 0x0, [{{}, {0x0, 0x0, 0x2, 0x0, 'fd'}}, {{}, {0x0, 0x0, 0x6, 0x0, '^&.*(#'}}]}, 0x0, 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0x15, &(0x7f0000000040), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x7d, 0x6, 0x668, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0xfffffd4a) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000000)={r6, &(0x7f0000000040)="45ee5f6c2aad69a24f5b6f96545d", 0x0}, 0x20) 2.35206558s ago: executing program 2 (id=1569): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x30, 0x120, 0x0, 0x960}) 2.351806079s ago: executing program 2 (id=1570): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RLCREATE(r0, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x8}, 0x1}}, 0x18) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x88001, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80, 0x82) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$cgroup_int(r4, &(0x7f0000000040)='io.bfq.weight\x00', 0x2, 0x0) renameat2(r3, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) r5 = signalfd4(r2, &(0x7f0000000000), 0x8, 0x0) write$P9_ROPEN(r5, 0x0, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x8, 0x3}, 0x3}}, 0x18) r6 = mq_open(&(0x7f0000000280)='io.bfq.weight\x00', 0xc2, 0x4, &(0x7f00000002c0)={0x400, 0xa5, 0x800, 0x8}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000300)) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1e5002, 0x0) write(r7, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) write$FUSE_POLL(r1, 0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x3f}, 0xf) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0xffff61ff}, 0x4) 2.256256858s ago: executing program 2 (id=1571): process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x9, 0x2) 2.255867381s ago: executing program 0 (id=1572): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x800000000001}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.255762799s ago: executing program 2 (id=1573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000440)="0f20c06635000000800f22c0b84b008ee0bad00466b80000000066ef660f309a040029010f01d8440f20c0663508000000440f22c03ef03048072ef0809e00303c66b9890400000f32", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.145637546s ago: executing program 0 (id=1574): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x5451, 0x0) syz_clone(0x0, 0x0, 0xffffffffffffff66, 0x0, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x5452, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) sigaltstack(0xfffffffffffffffe, 0x0) timerfd_create(0x0, 0xabee12afbe0525c5) 1.947929947s ago: executing program 1 (id=1575): mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000004800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004940)='iso9660\x00', 0x0, 0x0) r0 = open$dir(0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x28) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0xffffffe1, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x4227e, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="000000400e000000070000000000000006000000fdffffff0000000000000000"]) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000002c80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a8435004006fffe8000000000000000000000000000aafc00000000000000000000000000000167000000000000000700000000020075040007000000000000000500000000000000ffffffffffffffff05000000000000000000010000000000ffffffff0000000008000000000000000004000000000000c2040000134c0001000401810000c1d416f61df339e915c1810e31f739e367071a3eb1e97fd8468bf7ced83f0303f8c854e11f7d8b52b2cc610539c3e0d90d4028196ce633857ee1a4ef5f84e0cd9b1d47f94a404a54336bbc0467c27f8cd0ff0f326fdb9405e081996ad38a9c6404de3e61edbdcd85b3fb9a2229a67d91c26cb371aa62437b26af23d9d8c3ce08cbec9837a558f76e3d482808a95c7eec98035e2850be3b3604849b6c1de16b63db092cb6135c33b00f29a7986d2aed84fdb6c2b3d778f0a25a677bf36c685da4df11b8195ddfd5bfbbdf05000000000088000148660000003a00000000000000040108e200d754fe241401cceb84f0827de9854953edea0473da6919996cff5fb0a769ca55ec7c7ea710828e18f9817a0a462b1baebc22e3b09a4d7ce0ed0859f885c1f39320137e9bba012532b2cf6ab2111a2955ea7b93f805b640b083e7c768e363aeeac8d91d5abfe2659d7e7ff99e24ea2671d2612080ac3eb9bba1271675c6cc15f63f344165d12d53c513d8208b665f93b213127f1da4de0d4c8b8000b86f2285512fe7fe79c4c091096ebc880e418c7a05fd2abee16ced2ea69a38e5f32e8303dfc519f06b8be7a00bd172916c2c3ef6b7c5fc9c134fef79794109767f80befd076bca4ce2effcc74ac2fca2f6d4010000f8006066a23a20c115ed951e64c289fa003ecfa68a55a1f15ded91cb8b93f78f91b65d2ab1e62c644db130adbbd045c267451db6f40127250dc4103550a6257d939a20f9d1343ff147d82e7d4dd6432b7c1e1a69cd9b2237533e85008a94f4c9cfbde474e584ae207af97525175fe988040195c2040000dbe000005e0004086600000001000000000000000300a6fa46c0ab475d9e6c0b4ef237f4df1b3becd8578dd6d534242c27ec13af73ce79d3f201e403c1698fdbf74d90998ec2bfaa4e1b6467bd99eec9a62d8642aab2d73f584b6e15eeb81b5018cf7a94c204000000040401ff80004e241709fd32a67b706629be4c7f7a9d9a3113c6c6b226e6cbf7abf9930e5257b410c409bc2eed5f0b8422c68856c53e1d670f0f837a8c24c8c6353dfe8954bf3ce4d9b63d4d83b6bc70739c58b8130ec549a7a7e3dd3a22ede386acda45c3d62f6c3ccbe39a225ed1bc9539720a98afec667e66a794486fd29b130d98a621bee6b4195d026e7946f3ba5f5b60aacd07eff2199802089e6b45ca74229486fe66c4e20ee29225ff8935bcf26138bcc750cb2df98f15f96fb99661396ecbede4d17c9c5c3f543fb998d216efc5300933b0df717081dea1e653b64dcaaeb0193b017866f0437a060007a9650000003c00040013000100ff020000000000000000000000000001fe80000000000000000000000000001f3c0004000438faff00000000000000000000ffffe0000002fc0200000000000000000000000000006c00000900000000fe880000000000000000000000000101fc000000000000000000000000000001fc02000000000000000000000000000100000000000000000000000000000001fc010000000000000000000000000001fc020000000000000000000000000001fe8000000000000000000000000000bbfe80000000000000000000000000000cff0200000000000000000000000000018700000000000000000100c900fe8000000000000000000000000000bb00000000004a26", @ANYRES8=r4, @ANYRES32=0x41424344, @ANYRES16=r4], 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.129936311s ago: executing program 2 (id=1576): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x18, 0x6a, 0xe976912f002a1383}, 0x18}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x88381, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000128000/0x1000)=nil}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000d40)={0x10, 0x30, 0x3, {0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x38) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b11, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045503, &(0x7f0000002a40)) 1.057721143s ago: executing program 3 (id=1577): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='sysv\x00', 0x0, 0x0) 1.005429405s ago: executing program 1 (id=1578): inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000340)={0xeb21, 0x0, '\x00', {0x0, @bt={0x0, 0x3, 0x1, 0x1, 0x0, 0xaee4, 0x101, 0x40, 0xa, 0x6, 0x4, 0x1, 0x6, 0xde9, 0x1e, 0x4, {0xec87, 0x7f}, 0x4, 0x7}}}) socket(0x10, 0x803, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readahead(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)) 1.002064132s ago: executing program 3 (id=1579): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x24, '\x00', 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x20}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x80fe) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="000100001a00010000fe5e7dffeb871576e888eb9ac34bfdab538eaf0b5f9302e7000000000000000000000001ffffffff00000000000000000000000000000000000000002b2b949e57fae84c149f8bf4d12dec19acf087b681aa1717fd49cbd538769d8a9a60617789ea56d261e3f868ed1a2b98776083edebb3f53abbfe7e1b4139c80a303e2bb79d1405785ba04c4c9d9897c37835a52b9c72abf5fdcca365209c3688b993181e210beafdb88c64f7cf872bc26940033adc880d89f989b4bc1868747b5f64c8967e863cf6a42d9db97d92aaca9c65b990c645fb91cf448ce57580b0556690", @ANYRES32=0x0, @ANYRES32=0x0], 0x100}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0xbf) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 612.711329ms ago: executing program 0 (id=1580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c001a8038000280070001800800000000000000080000000000000008000000000000d6000000000000000008000000000000000800000000000000140035007665746831"], 0x70}}, 0x0) 455.797188ms ago: executing program 0 (id=1581): keyctl$setperm(0x5, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3e, 0x2}, @cond}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x2}, 0x40) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 293.60541ms ago: executing program 0 (id=1582): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 141.281897ms ago: executing program 0 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x420}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x0, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000002c0)=""/179, 0xb3, 0x0, &(0x7f0000000380)=""/138, 0x8a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000180)=@raw=[@alu={0x4, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}], &(0x7f0000000080)='GPL\x00', 0x6f, 0x0, 0x0, 0x41100, 0x8, '\x00', r6, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x700, 0x40}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0x1, r2, r2], 0x0, 0x10, 0x3f}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x40, 0x80, 0xffff, 0xa5c2, {{0x33, 0x4, 0x1, 0xf, 0xcc, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp={0x44, 0x10, 0x22, 0x0, 0x8, [0x3, 0xc, 0x7fffffff]}, @timestamp_prespec={0x44, 0x2c, 0x2d, 0x3, 0x4, [{@empty, 0x9}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@loopback, 0xe72}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xfd5}]}, @timestamp_addr={0x44, 0x24, 0xde, 0x1, 0x6, [{@broadcast, 0x9}, {@broadcast, 0x9}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3d}}]}, @rr={0x7, 0x23, 0x25, [@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, @dev, @broadcast, @remote, @remote, @broadcast, @local]}, @rr={0x7, 0xf, 0x89, [@rand_addr=0x64010100, @remote, @empty]}, @noop, @rr={0x7, 0xf, 0xc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0x6, [{@private=0xa010101, 0x8}, {@multicast2, 0xfff}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x80, 0x1, 0x0, 0x0, {{0x18, 0x4, 0x3, 0x1, 0x60, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3c}, {[@timestamp={0x44, 0xc, 0x68, 0x0, 0x2, [0x0, 0x5]}, @rr={0x7, 0x13, 0x9f, [@dev={0xac, 0x14, 0x14, 0xf}, @local, @multicast1, @private=0xa010102]}, @timestamp_addr={0x44, 0x2c, 0x1, 0x1, 0x5, [{@remote, 0x401}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x10001}, {@multicast2, 0x7}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000800)={@ipv4, 0x0}, &(0x7f0000000840)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b40)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_TXQLEN={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000), 0xc, &(0x7f00000008c0)={&(0x7f0000000c00)={0x260, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x1}, 0x40801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6}}]}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=1584): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) kernel console output (not intermixed with test programs): hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.328226][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.333953][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.338037][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.348569][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.353334][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.357091][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.373222][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.376992][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.380489][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.384052][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.388237][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.399114][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.406740][ T5382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.458822][ T5382] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 173.308678][ T5353] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 173.319290][ T5353] Bluetooth: hci1: Injecting HCI hardware error event [ 173.331883][ T4766] Bluetooth: hci1: hardware error 0x00 [ 175.398730][ T4766] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 175.946676][ T1112] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9b [ 176.410463][ T5404] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 176.423165][ T7559] nvme_fabrics: missing parameter 'transport=%s' [ 176.431512][ T7559] nvme_fabrics: missing parameter 'nqn=%s' [ 176.608658][ T5404] usb 6-1: Using ep0 maxpacket: 8 [ 176.679329][ T5404] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.687796][ T5404] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.692393][ T5404] usb 6-1: config 1 has no interface number 1 [ 176.695979][ T5404] usb 6-1: too many endpoints for config 1 interface 2 altsetting 7: 236, using maximum allowed: 30 [ 176.703525][ T5404] usb 6-1: config 1 interface 2 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 236 [ 176.711627][ T5404] usb 6-1: config 1 interface 2 has no altsetting 0 [ 176.752854][ T5404] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.756966][ T5404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.781787][ T5404] usb 6-1: Product: syz [ 176.783740][ T5404] usb 6-1: Manufacturer: syz [ 176.785796][ T5404] usb 6-1: SerialNumber: syz [ 178.584722][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.671'. [ 178.776700][ T7543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.928212][ T5404] usb 6-1: USB disconnect, device number 4 [ 179.054838][ T39] audit: type=1400 audit(1991284593.795:463): avc: denied { ioctl } for pid=7594 comm="syz.0.677" path="socket:[17864]" dev="sockfs" ino=17864 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.141784][ T7604] netlink: 'syz.0.677': attribute type 10 has an invalid length. [ 179.178759][ T7600] nvme_fabrics: missing parameter 'transport=%s' [ 179.185213][ T7600] nvme_fabrics: missing parameter 'nqn=%s' [ 179.185451][ T7604] macvlan0: entered promiscuous mode [ 179.191304][ T7217] udevd[7217]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.245588][ T7608] fuse: Bad value for 'fd' [ 179.270254][ T7604] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 180.989854][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.007083][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.017223][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.027381][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.033628][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.036173][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.059318][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.065079][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.068353][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.088988][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.101016][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.109969][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.114400][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.135151][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.139624][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.155728][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.160338][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.163504][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.167455][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.171329][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.174511][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.177630][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.181738][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.185421][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.189146][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.192587][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.195586][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.199296][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.202953][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.206477][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.210383][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.213457][ T5382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.233497][ T5382] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 181.406151][ T39] audit: type=1400 audit(1991284596.145:464): avc: denied { setopt } for pid=7641 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.527812][ T39] audit: type=1326 audit(1991284596.265:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.3.687" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937b5779f9 code=0x7fc00000 [ 181.622228][ T39] audit: type=1326 audit(1991284596.365:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.3.687" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f937b5779f9 code=0x7fc00000 [ 182.094330][ T7659] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 182.098928][ T7659] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 182.103938][ T7659] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.689'. [ 182.111548][ T7659] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 182.181427][ T39] audit: type=1326 audit(1991284596.925:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.3.687" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937b5779f9 code=0x7fc00000 [ 182.211148][ T39] audit: type=1804 audit(1991284596.945:468): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.690" name="/newroot/124/bus/bus" dev="overlay" ino=676 res=1 errno=0 [ 182.221925][ T39] audit: type=1400 audit(1991284596.965:469): avc: denied { module_load } for pid=7660 comm="syz.2.690" path="/124/bus/bus" dev="overlay" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 182.222842][ T7661] Invalid ELF header magic: != ELF [ 182.259284][ T39] audit: type=1400 audit(1991284597.005:470): avc: denied { create } for pid=7662 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 182.330066][ T39] audit: type=1400 audit(1991284597.065:471): avc: denied { ioctl } for pid=7665 comm="syz.2.692" path="socket:[19670]" dev="sockfs" ino=19670 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 182.883164][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 182.889232][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.699'. [ 182.957165][ T7682] QAT: Invalid ioctl 21531 [ 183.643383][ T7689] Invalid ELF header magic: != ELF [ 183.653352][ T39] audit: type=1804 audit(1991284598.365:472): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.701" name="/newroot/171/bus/bus" dev="overlay" ino=927 res=1 errno=0 [ 184.228847][ T5382] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 184.408498][ T5382] usb 8-1: Using ep0 maxpacket: 16 [ 184.413620][ T5382] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.428510][ T5382] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.437024][ T5382] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.442369][ T5382] usb 8-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 184.446231][ T5382] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.452511][ T5382] usb 8-1: config 0 descriptor?? [ 184.711197][ T7695] input: syz1 as /devices/virtual/input/input20 [ 184.880935][ T5382] usbhid 8-1:0.0: can't add hid device: -71 [ 184.889365][ T5382] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 184.897425][ T5382] usb 8-1: USB disconnect, device number 6 [ 184.985222][ T7711] zonefs (nullb0) ERROR: Not a zoned block device [ 185.240791][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.371456][ T7723] nvme_fabrics: missing parameter 'transport=%s' [ 185.374858][ T7723] nvme_fabrics: missing parameter 'nqn=%s' [ 185.998679][ T5353] Bluetooth: hci3: command 0x0405 tx timeout [ 186.986633][ T7762] unsupported nlmsg_type 40 [ 187.000133][ T7763] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 187.000133][ T7763] The task syz.0.714 (7763) triggered the difference, watch for misbehavior. [ 187.007183][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.044764][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.059549][ T7760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.713'. [ 187.146726][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 187.146742][ T39] audit: type=1400 audit(1991284601.885:474): avc: denied { getopt } for pid=7761 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 187.154938][ T7762] xt_hashlimit: overflow, try lower: 0/0 [ 187.574000][ T7778] netlink: 'syz.3.718': attribute type 7 has an invalid length. [ 187.577028][ T7778] netlink: 'syz.3.718': attribute type 6 has an invalid length. [ 188.118720][ T4766] Bluetooth: hci3: command 0x0405 tx timeout [ 188.121191][ T5393] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 188.124173][ T5393] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 188.160781][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.591634][ T25] wlan0 speed is unknown, defaulting to 1000 [ 189.021528][ T39] audit: type=1400 audit(1991284603.765:475): avc: denied { unmount } for pid=5340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 189.288735][ T835] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 189.393578][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.734'. [ 189.408559][ T7820] netlink: 'syz.3.734': attribute type 7 has an invalid length. [ 189.412565][ T7820] netlink: 'syz.3.734': attribute type 8 has an invalid length. [ 189.416620][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 189.440429][ T7820] gretap0: entered promiscuous mode [ 189.444854][ T7821] block nbd0: shutting down sockets [ 189.464561][ T7820] batadv_slave_1: entered promiscuous mode [ 189.478640][ T835] usb 7-1: Using ep0 maxpacket: 8 [ 189.487777][ T835] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.495881][ T835] usb 7-1: config 0 has no interface number 0 [ 189.499732][ T835] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.504193][ T835] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.508477][ T835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.515297][ T835] usb 7-1: config 0 descriptor?? [ 189.540521][ T835] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 189.807631][ T835] usb 7-1: USB disconnect, device number 4 [ 189.814436][ T835] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 190.056666][ T7833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.738'. [ 190.170166][ T7836] netlink: 304 bytes leftover after parsing attributes in process `syz.3.739'. [ 190.194746][ T7836] netlink: 'syz.3.739': attribute type 11 has an invalid length. [ 190.225228][ T7836] netlink: 'syz.3.739': attribute type 11 has an invalid length. [ 190.229081][ T7836] debugfs: Directory 'netdev:' with parent 'phy4' already present! [ 190.549958][ T7850] wlan0 speed is unknown, defaulting to 1000 [ 190.745321][ T39] audit: type=1400 audit(1991284605.485:476): avc: denied { getopt } for pid=7843 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.822683][ T7859] input: syz0 as /devices/virtual/input/input21 [ 191.318731][ T5385] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 191.520350][ T5385] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.525549][ T5385] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.539250][ T5385] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.543094][ T5385] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.573165][ T7857] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.577363][ T39] audit: type=1400 audit(1991284606.315:477): avc: denied { write } for pid=7865 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 191.579179][ T5385] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.628060][ T39] audit: type=1400 audit(1991284606.365:478): avc: denied { read } for pid=7865 comm="syz.1.749" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 191.655338][ T39] audit: type=1400 audit(1991284606.365:479): avc: denied { open } for pid=7865 comm="syz.1.749" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 191.676499][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.749'. [ 191.975728][ T5404] usb 7-1: USB disconnect, device number 5 [ 193.421583][ T39] audit: type=1326 audit(1991284608.165:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7909 comm="syz.1.762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2ad779f9 code=0x7fc00000 [ 193.504728][ T39] audit: type=1326 audit(1991284608.245:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7909 comm="syz.1.762" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3a2ad779f9 code=0x7fc00000 [ 193.658853][ T5404] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 193.858643][ T5404] usb 8-1: Using ep0 maxpacket: 8 [ 193.863659][ T5404] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.868108][ T5404] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.900019][ T5404] usb 8-1: config 1 has no interface number 1 [ 193.903281][ T5404] usb 8-1: too many endpoints for config 1 interface 2 altsetting 7: 236, using maximum allowed: 30 [ 193.912620][ T5404] usb 8-1: config 1 interface 2 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 236 [ 193.918903][ T5404] usb 8-1: config 1 interface 2 has no altsetting 0 [ 193.925780][ T5404] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.929957][ T5404] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.933525][ T5404] usb 8-1: Product: syz [ 193.935260][ T5404] usb 8-1: Manufacturer: syz [ 193.937060][ T5404] usb 8-1: SerialNumber: syz [ 194.078836][ T39] audit: type=1326 audit(1991284608.825:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7909 comm="syz.1.762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2ad779f9 code=0x7fc00000 [ 194.226268][ T39] audit: type=1400 audit(1991284608.965:483): avc: denied { mount } for pid=7927 comm="syz.0.774" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 194.277204][ T7930] wlan0 speed is unknown, defaulting to 1000 [ 194.496750][ T5404] usb 8-1: USB disconnect, device number 7 [ 194.724054][ T7217] udevd[7217]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.712828][ T835] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 195.946708][ T835] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.958574][ T835] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.966914][ T835] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 195.966938][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 195.966954][ T835] usb 6-1: SerialNumber: syz [ 196.014659][ T7962] netlink: 'syz.2.776': attribute type 4 has an invalid length. [ 196.073507][ T7962] netlink: 'syz.2.776': attribute type 4 has an invalid length. [ 196.198723][ T7951] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 196.213037][ T835] usb 6-1: 0:2 : does not exist [ 196.240955][ T835] usb 6-1: USB disconnect, device number 5 [ 196.539066][ T7217] udevd[7217]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.853049][ T7987] tipc: Started in network mode [ 196.855599][ T7987] tipc: Node identity f7, cluster identity 4711 [ 196.858303][ T7987] tipc: Node number set to 247 [ 197.499304][ T5384] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 197.748630][ T5384] usb 5-1: Using ep0 maxpacket: 32 [ 197.762556][ T64] Bluetooth: hci4: Frame reassembly failed (-84) [ 197.766153][ T5384] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.771496][ T5384] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.784522][ T5384] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 197.790546][ T5384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.795187][ T5384] usb 5-1: Product: syz [ 197.797520][ T5384] usb 5-1: Manufacturer: syz [ 197.810883][ T5384] usb 5-1: SerialNumber: syz [ 198.191033][ T5384] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 198.391513][ T39] audit: type=1400 audit(1991284613.135:484): avc: denied { read write } for pid=8000 comm="syz.0.789" name="lp0" dev="devtmpfs" ino=2543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 198.404073][ T39] audit: type=1400 audit(1991284613.135:485): avc: denied { open } for pid=8000 comm="syz.0.789" path="/dev/usb/lp0" dev="devtmpfs" ino=2543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 198.405344][ T835] usb 5-1: USB disconnect, device number 4 [ 198.438743][ T835] usblp0: removed [ 198.526860][ T8016] __vm_enough_memory: pid: 8016, comm: syz.2.793, bytes: 549788921856 not enough memory for the allocation [ 198.970583][ T39] audit: type=1400 audit(1991284613.705:486): avc: denied { setopt } for pid=8026 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.363641][ T8040] netlink: 44 bytes leftover after parsing attributes in process `syz.0.800'. [ 199.422899][ T8037] block nbd1: shutting down sockets [ 199.772152][ T8046] wlan0 speed is unknown, defaulting to 1000 [ 199.799337][ T5353] Bluetooth: hci4: command 0x1003 tx timeout [ 199.808761][ T8047] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 199.811689][ T8047] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.812729][ T4766] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 199.821354][ T8047] vhci_hcd vhci_hcd.0: Device attached [ 200.018199][ T8048] vhci_hcd: connection closed [ 200.019645][ T11] vhci_hcd: stop threads [ 200.048484][ T11] vhci_hcd: release socket [ 200.054695][ T11] vhci_hcd: disconnect device [ 200.133335][ T5384] usb 13-1: new high-speed USB device number 3 using vhci_hcd [ 200.136880][ T5384] usb 13-1: enqueue for inactive port 0 [ 200.218635][ T5384] vhci_hcd: vhci_device speed not set [ 200.284213][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.287263][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.317495][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.393483][ T39] audit: type=1400 audit(1991284615.135:487): avc: denied { read write } for pid=8076 comm="syz.2.811" name="mice" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 200.408543][ T39] audit: type=1400 audit(1991284615.135:488): avc: denied { open } for pid=8076 comm="syz.2.811" path="/dev/input/mice" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 201.267663][ T39] audit: type=1400 audit(1991284616.005:489): avc: denied { ioctl } for pid=8095 comm="syz.0.825" path="socket:[21160]" dev="sockfs" ino=21160 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.285846][ T8097] netlink: 'syz.0.825': attribute type 21 has an invalid length. [ 201.292320][ T8097] netlink: 152 bytes leftover after parsing attributes in process `syz.0.825'. [ 201.366936][ T8102] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.528251][ T8104] block nbd3: shutting down sockets [ 202.431626][ T39] audit: type=1400 audit(1991284617.175:490): avc: denied { setopt } for pid=8126 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 202.443284][ T8131] netlink: 'syz.3.824': attribute type 10 has an invalid length. [ 202.469130][ T8131] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 202.492713][ T5385] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 202.728583][ T5385] usb 5-1: Using ep0 maxpacket: 8 [ 202.732308][ T5385] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.736188][ T5385] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 202.740016][ T5385] usb 5-1: config 1 has no interface number 1 [ 202.743062][ T5385] usb 5-1: too many endpoints for config 1 interface 2 altsetting 7: 236, using maximum allowed: 30 [ 202.747993][ T5385] usb 5-1: config 1 interface 2 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 236 [ 202.756532][ T5385] usb 5-1: config 1 interface 2 has no altsetting 0 [ 202.763259][ T5385] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.766554][ T5385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.770383][ T5385] usb 5-1: Product: syz [ 202.772279][ T5385] usb 5-1: Manufacturer: syz [ 202.774243][ T5385] usb 5-1: SerialNumber: syz [ 203.201216][ T39] audit: type=1326 audit(1991284617.945:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.835" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a2ad779f9 code=0x0 [ 203.282916][ T5385] usb 5-1: USB disconnect, device number 5 [ 204.838665][ T5404] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 205.018536][ T5404] usb 7-1: Using ep0 maxpacket: 32 [ 205.030140][ T5404] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 205.033756][ T5404] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.037243][ T5404] usb 7-1: Product: syz [ 205.044853][ T5404] usb 7-1: Manufacturer: syz [ 205.052393][ T5404] usb 7-1: SerialNumber: syz [ 205.059520][ T5404] usb 7-1: config 0 descriptor?? [ 205.321921][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'. [ 205.445482][ C0] hrtimer: interrupt took 1026895 ns [ 205.862135][ T5404] (unnamed net_device) (uninitialized): Assigned a random MAC address: 96:c6:f8:80:d4:74 [ 205.883474][ T5404] rtl8150 7-1:0.0: eth2: rtl8150 is detected [ 206.070006][ T57] usb 7-1: USB disconnect, device number 6 [ 206.086443][ T39] audit: type=1800 audit(1991284620.825:492): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.844" name="/file0" dev="overlay" ino=1172 res=0 errno=0 [ 206.100735][ T39] audit: type=1804 audit(1991284620.825:493): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.844" name="/newroot/214/bus/file0" dev="overlay" ino=1172 res=1 errno=0 [ 206.677646][ T39] audit: type=1400 audit(1991284621.415:494): avc: denied { ioctl } for pid=8221 comm="syz.0.852" path="/dev/rtc0" dev="devtmpfs" ino=867 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 206.998160][ T8241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.863'. [ 207.194945][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 207.316580][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.326322][ T8262] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 208.661101][ T39] audit: type=1400 audit(1991284623.405:495): avc: denied { setattr } for pid=8267 comm="syz.2.870" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 209.324430][ T8285] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64873 sclass=netlink_xfrm_socket pid=8285 comm=syz.3.873 [ 209.508586][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 209.626644][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 209.761057][ T39] audit: type=1400 audit(1991284624.495:496): avc: denied { mounton } for pid=8290 comm="syz.2.876" path="/172/file1/file0" dev="autofs" ino=22032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 209.791730][ T39] audit: type=1400 audit(1991284624.505:497): avc: denied { mount } for pid=8290 comm="syz.2.876" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 209.804624][ T39] audit: type=1400 audit(1991284624.535:498): avc: denied { mounton } for pid=8290 comm="syz.2.876" path="/172/file1/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 209.843180][ T39] audit: type=1400 audit(1991284624.585:499): avc: denied { bind } for pid=8298 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 209.852871][ T39] audit: type=1400 audit(1991284624.595:500): avc: denied { module_request } for pid=8296 comm="syz.0.878" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 209.885549][ T39] audit: type=1400 audit(1991284624.615:501): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 210.042737][ T8303] netlink: 'syz.0.878': attribute type 10 has an invalid length. [ 210.104754][ T8303] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 210.261780][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802fb7c000: rx timeout, send abort [ 210.766723][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802fb7c000: abort rx timeout. Force session deactivation [ 211.298207][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.934041][ T39] audit: type=1400 audit(1991284634.675:502): avc: denied { execute } for pid=8317 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 219.944831][ T39] audit: type=1400 audit(1991284634.675:503): avc: denied { execute_no_trans } for pid=8317 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 220.033915][ T39] audit: type=1400 audit(1991284634.775:504): avc: denied { connect } for pid=8322 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.051204][ T39] audit: type=1400 audit(1991284634.785:505): avc: denied { ioctl } for pid=8322 comm="syz.1.894" path="socket:[22057]" dev="sockfs" ino=22057 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.186307][ T5353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.192739][ T5353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.196235][ T8323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.894'. [ 220.202076][ T5353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.206349][ T5353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.217283][ T5353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.226792][ T5353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.247036][ T4766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.261361][ T4766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.265071][ T4766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.272411][ T4766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.276748][ T4766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.280862][ T4766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.355417][ T8328] wlan0 speed is unknown, defaulting to 1000 [ 220.502322][ T8340] Bluetooth: MGMT ver 1.23 [ 220.535833][ T8328] chnl_net:caif_netlink_parms(): no params data found [ 220.631478][ T8350] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 220.634633][ T8350] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.665193][ T8350] vhci_hcd vhci_hcd.0: Device attached [ 220.707630][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.713964][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.717297][ T8328] bridge_slave_0: entered allmulticast mode [ 220.721249][ T8328] bridge_slave_0: entered promiscuous mode [ 220.725392][ T8345] wlan0 speed is unknown, defaulting to 1000 [ 220.726270][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.731343][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.734546][ T8328] bridge_slave_1: entered allmulticast mode [ 220.738719][ T8328] bridge_slave_1: entered promiscuous mode [ 220.870237][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.877899][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.955316][ T8328] team0: Port device team_slave_0 added [ 220.962386][ T835] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 220.963645][ T8328] team0: Port device team_slave_1 added [ 220.985107][ T8353] vhci_hcd: connection closed [ 220.986123][ T73] vhci_hcd: stop threads [ 220.991321][ T73] vhci_hcd: release socket [ 220.993436][ T73] vhci_hcd: disconnect device [ 221.033937][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.037566][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.053486][ T8328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.060346][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.063574][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.089052][ T8328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.175627][ T8328] hsr_slave_0: entered promiscuous mode [ 221.182049][ T8328] hsr_slave_1: entered promiscuous mode [ 221.185642][ T8328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.189118][ T8328] Cannot create hsr debugfs directory [ 221.331749][ T8372] wlan0 speed is unknown, defaulting to 1000 [ 221.476369][ T8328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.669048][ T8328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.843387][ T39] audit: type=1400 audit(1991284636.585:506): avc: denied { create } for pid=8385 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.857537][ T39] audit: type=1400 audit(1991284636.585:507): avc: denied { connect } for pid=8386 comm="syz.0.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.861251][ T8328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.871085][ T39] audit: type=1400 audit(1991284636.585:508): avc: denied { bind } for pid=8386 comm="syz.0.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.889236][ T39] audit: type=1400 audit(1991284636.605:509): avc: denied { connect } for pid=8385 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.900885][ T39] audit: type=1400 audit(1991284636.605:510): avc: denied { write } for pid=8385 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.959567][ T8328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.186917][ T8328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.194492][ T8328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.198525][ T1417] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 222.202152][ T8328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.208790][ T8328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.305945][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.330103][ T8328] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.349572][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.353172][ T5403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.358554][ T5404] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 222.360303][ T5353] Bluetooth: hci0: command tx timeout [ 222.370660][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.374484][ T5403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.410689][ T1417] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 222.414711][ T1417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.430168][ T1417] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 222.434530][ T1417] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 222.437972][ T1417] usb 6-1: Manufacturer: syz [ 222.442598][ T1417] usb 6-1: config 0 descriptor?? [ 222.538629][ T1417] rc_core: IR keymap rc-hauppauge not found [ 222.540922][ T1417] Registered IR keymap rc-empty [ 222.545025][ T1417] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 222.551339][ T5404] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.551861][ T1417] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 222.573479][ T5404] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 222.577605][ T5404] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.582216][ T5404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.595136][ T8391] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 222.601804][ T5404] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.625989][ T8328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.672468][ T8328] veth0_vlan: entered promiscuous mode [ 222.674471][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 222.683576][ T8328] veth1_vlan: entered promiscuous mode [ 222.717674][ T1417] usb 6-1: USB disconnect, device number 6 [ 222.720075][ T8328] veth0_macvtap: entered promiscuous mode [ 222.727534][ T8328] veth1_macvtap: entered promiscuous mode [ 222.752918][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.758221][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.766549][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.771595][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.776832][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.783480][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.787466][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.793077][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.800548][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.807393][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.814912][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.815049][ T5404] usb 5-1: USB disconnect, device number 6 [ 222.819593][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.827618][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.838083][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.843712][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.848903][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.855054][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.871833][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.895419][ T8328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.899830][ T8328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.904461][ T8328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.909157][ T8328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.995602][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.003865][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.030242][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.033949][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.294665][ T8403] block nbd2: shutting down sockets [ 223.381659][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 223.390349][ T8406] netlink: 'syz.1.909': attribute type 14 has an invalid length. [ 223.558307][ T8408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.910'. [ 223.713099][ T8410] Bluetooth: MGMT ver 1.23 [ 223.748528][ T39] audit: type=1400 audit(1991284638.485:511): avc: denied { connect } for pid=8409 comm="syz.1.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 223.766997][ T8409] delete_channel: no stack [ 223.854552][ T8412] netlink: 'syz.1.912': attribute type 11 has an invalid length. [ 224.113730][ T8422] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 224.127328][ T8422] syz.2.916: attempt to access beyond end of device [ 224.127328][ T8422] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 224.439170][ T5353] Bluetooth: hci0: command tx timeout [ 224.539519][ T8433] delete_channel: no stack [ 224.625165][ T8441] wlan0 speed is unknown, defaulting to 1000 [ 224.653678][ T8444] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 224.657269][ T8444] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 224.661137][ T8444] vhci_hcd vhci_hcd.0: Device attached [ 224.694837][ T8448] Bluetooth: hci3: too big key_count value 34945 [ 224.825264][ T8445] vhci_hcd: connection closed [ 224.836392][ T73] vhci_hcd: stop threads [ 224.840567][ T73] vhci_hcd: release socket [ 224.842738][ T73] vhci_hcd: disconnect device [ 224.868580][ T5403] vhci_hcd: vhci_device speed not set [ 225.408609][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 225.408623][ T39] audit: type=1400 audit(1991284640.145:513): avc: denied { create } for pid=8469 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 225.434158][ T39] audit: type=1400 audit(1991284640.175:514): avc: denied { write } for pid=8469 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.118787][ T835] vhci_hcd: vhci_device speed not set [ 226.244961][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.935'. [ 226.541334][ T5353] Bluetooth: hci0: command tx timeout [ 227.098356][ T8500] wlan0 speed is unknown, defaulting to 1000 [ 227.137054][ T8501] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 227.140133][ T8501] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 227.146854][ T8501] vhci_hcd vhci_hcd.0: Device attached [ 227.207369][ T39] audit: type=1400 audit(1991284641.955:515): avc: denied { setattr } for pid=8493 comm="syz.2.938" name="tty25" dev="devtmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 227.461265][ T9] usb 19-1: new high-speed USB device number 2 using vhci_hcd [ 227.788607][ T834] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 227.888284][ T8502] vhci_hcd: connection closed [ 227.889651][ T1112] vhci_hcd: stop threads [ 227.893200][ T1112] vhci_hcd: release socket [ 227.895053][ T1112] vhci_hcd: disconnect device [ 227.980790][ T834] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 227.983844][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.988536][ T834] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 227.992487][ T834] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 227.995889][ T834] usb 7-1: Manufacturer: syz [ 228.000102][ T834] usb 7-1: config 0 descriptor?? [ 228.078581][ T834] rc_core: IR keymap rc-hauppauge not found [ 228.080891][ T834] Registered IR keymap rc-empty [ 228.083483][ T834] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 228.095899][ T834] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input23 [ 228.218388][ C3] igorplugusb 7-1:0.0: Error: urb status = -32 [ 228.269380][ T835] usb 7-1: USB disconnect, device number 7 [ 228.608013][ T4766] Bluetooth: hci0: command tx timeout [ 228.707812][ T8530] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 228.710866][ T8530] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.716846][ T8530] vhci_hcd vhci_hcd.0: Device attached [ 228.725455][ T8531] vhci_hcd: cannot find the pending unlink 5 [ 229.004337][ T834] usb 15-1: new high-speed USB device number 3 using vhci_hcd [ 229.008709][ T5385] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 229.107048][ T39] audit: type=1400 audit(1991284643.845:516): avc: denied { append } for pid=8534 comm="syz.2.950" name="001" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 229.138743][ T39] audit: type=1400 audit(1991284643.855:517): avc: denied { read } for pid=8534 comm="syz.2.950" name="file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 229.173353][ T8538] hub 9-0:1.0: USB hub found [ 229.178525][ T8538] hub 9-0:1.0: 1 port detected [ 229.234568][ T5385] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.239719][ T5385] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 229.242441][ T8540] netlink: 'syz.0.951': attribute type 2 has an invalid length. [ 229.243752][ T5385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.252599][ T5385] usb 6-1: config 0 descriptor?? [ 229.358771][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.952'. [ 229.586097][ T8530] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 229.588918][ T8530] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 229.600056][ T8549] overlayfs: invalid redirect (./file1) [ 229.601099][ T8530] vhci_hcd vhci_hcd.0: Device attached [ 229.735730][ T8555] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 229.735730][ T8555] cct.usage_percpu_sys' [ 229.802232][ T39] audit: type=1400 audit(1991284644.545:518): avc: denied { bind } for pid=8558 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.826285][ T39] audit: type=1400 audit(1991284644.545:519): avc: denied { setopt } for pid=8558 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 229.927315][ T39] audit: type=1326 audit(1991284644.665:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.3.958" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f937b5779f9 code=0x0 [ 230.016528][ T8566] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 230.016953][ T5385] usbhid 6-1:0.0: can't add hid device: -71 [ 230.018124][ T8550] vhci_hcd: connection closed [ 230.019364][ T64] vhci_hcd: stop threads [ 230.019380][ T64] vhci_hcd: release socket [ 230.019421][ T64] vhci_hcd: disconnect device [ 230.033593][ T8531] vhci_hcd: connection reset by peer [ 230.039135][ T64] vhci_hcd: stop threads [ 230.040952][ T64] vhci_hcd: release socket [ 230.044951][ T5385] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 230.045401][ T64] vhci_hcd: disconnect device [ 230.061080][ T5385] usb 6-1: USB disconnect, device number 7 [ 230.380877][ T8583] overlayfs: invalid redirect (./file1) [ 230.568689][ T39] audit: type=1400 audit(1991284645.305:521): avc: denied { mount } for pid=8586 comm="syz.2.967" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 230.679014][ T4766] Bluetooth: hci0: command 0x0405 tx timeout [ 230.718658][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 231.567553][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 231.823572][ T8617] netlink: 'syz.1.977': attribute type 29 has an invalid length. [ 231.827980][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 231.838077][ T8617] netlink: 'syz.1.977': attribute type 29 has an invalid length. [ 231.843243][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 231.961761][ T8618] syzkaller0: entered promiscuous mode [ 231.964537][ T8618] syzkaller0: entered allmulticast mode [ 232.068197][ T8630] program syz.3.983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.107295][ T8632] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 232.320721][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888048112c00: rx timeout, send abort [ 232.608554][ T9] vhci_hcd: vhci_device speed not set [ 232.739888][ T39] audit: type=1400 audit(1991284647.485:522): avc: denied { setopt } for pid=8639 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.827221][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888048112c00: abort rx timeout. Force session deactivation [ 233.124638][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 234.140427][ T834] vhci_hcd: vhci_device speed not set [ 234.417569][ T8669] block nbd1: shutting down sockets [ 235.184411][ T8655] netlink: 'syz.2.986': attribute type 14 has an invalid length. [ 235.302556][ T8675] sp0: Synchronizing with TNC [ 235.388663][ T39] audit: type=1400 audit(1991284650.125:523): avc: denied { remount } for pid=8681 comm="syz.3.996" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 235.624879][ T8694] pim6reg1: entered promiscuous mode [ 235.628616][ T8694] pim6reg1: entered allmulticast mode [ 235.743183][ T39] audit: type=1400 audit(1991284650.475:524): avc: denied { watch watch_reads } for pid=8700 comm="syz.1.1004" path="/251/file0" dev="tmpfs" ino=1372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 236.187018][ T39] audit: type=1400 audit(1991284650.925:525): avc: denied { mount } for pid=8714 comm="syz.1.1010" name="/" dev="hugetlbfs" ino=24269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 236.197973][ T8721] overlayfs: failed to resolve './file0': -2 [ 236.249727][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 236.271726][ T8713] netlink: 'syz.0.1006': attribute type 14 has an invalid length. [ 236.336765][ T8723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.435113][ T39] audit: type=1400 audit(1991284651.175:526): avc: denied { unmount } for pid=5340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 236.447717][ T8730] netlink: 'syz.0.1013': attribute type 29 has an invalid length. [ 236.458662][ T8730] netlink: 'syz.0.1013': attribute type 29 has an invalid length. [ 236.523211][ T8734] netlink: 'syz.0.1015': attribute type 4 has an invalid length. [ 236.529140][ T8734] netlink: 'syz.0.1015': attribute type 1 has an invalid length. [ 236.532724][ T8734] netlink: 88156 bytes leftover after parsing attributes in process `syz.0.1015'. [ 236.597699][ T8735] hub 9-0:1.0: USB hub found [ 236.600367][ T8735] hub 9-0:1.0: 1 port detected [ 236.725973][ T39] audit: type=1400 audit(1991284651.465:527): avc: denied { write } for pid=8738 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.744696][ T39] audit: type=1400 audit(1991284651.475:528): avc: denied { getopt } for pid=8738 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.929350][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.003352][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.077137][ T8747] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 237.080686][ T8747] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 237.105500][ T8747] vhci_hcd vhci_hcd.0: Device attached [ 237.428571][ T1417] usb 18-1: SetAddress Request (2) to port 0 [ 237.440202][ T1417] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 237.627004][ T8748] vhci_hcd: connection reset by peer [ 237.629575][ T73] vhci_hcd: stop threads [ 237.631328][ T73] vhci_hcd: release socket [ 237.633729][ T73] vhci_hcd: disconnect device [ 238.920041][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 238.928364][ T8764] netlink: 'syz.3.1022': attribute type 14 has an invalid length. [ 239.218679][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'. [ 239.534079][ T8769] team0: Port device bridge1 added [ 239.775158][ C3] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 239.894623][ T8779] binder: 8778:8779 ioctl c018620b 0 returned -14 [ 239.912374][ T39] audit: type=1400 audit(1991284654.655:529): avc: denied { getopt } for pid=8778 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 240.012197][ T8779] wlan0 speed is unknown, defaulting to 1000 [ 240.528142][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88804e879c00: rx timeout, send abort [ 241.032034][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88804e879c00: abort rx timeout. Force session deactivation [ 241.160979][ T8804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1040'. [ 241.269230][ T39] audit: type=1326 audit(1991284656.015:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.0.1048" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa171d779f9 code=0x0 [ 241.343747][ T39] audit: type=1326 audit(1991284656.085:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.0.1048" exe="/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fa171d779f9 code=0x0 [ 242.519049][ T1417] usb 18-1: device descriptor read/8, error -110 [ 242.960648][ T1417] usb usb18-port1: attempt power cycle [ 243.357314][ T39] audit: type=1400 audit(1991284658.095:532): avc: denied { associate } for pid=8842 comm="syz.0.1052" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 243.507630][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1055'. [ 243.560037][ T8853] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 243.570000][ T8853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1056'. [ 243.575115][ T39] audit: type=1400 audit(1991284658.315:533): avc: denied { nlmsg_read } for pid=8852 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.580588][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1060'. [ 243.610703][ T1417] usb usb18-port1: unable to enumerate USB device [ 243.666589][ T8860] wlan0 speed is unknown, defaulting to 1000 [ 244.049412][ T8844] ALSA: mixer_oss: invalid OSS volume '' [ 244.442762][ T8875] binder: 8874:8875 ioctl c018620b 0 returned -14 [ 244.594373][ T8875] wlan0 speed is unknown, defaulting to 1000 [ 244.639575][ T8884] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1067'. [ 244.800671][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 244.817364][ T8888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1070'. [ 244.843445][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1070'. [ 245.573458][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 245.625115][ T8906] batman_adv: batadv1: Adding interface: netdevsim0 [ 245.631123][ T8906] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.657685][ T8906] batman_adv: batadv1: Interface activated: netdevsim0 [ 246.268671][ T834] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 246.362598][ T39] audit: type=1400 audit(1991284661.105:534): avc: denied { listen } for pid=8914 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.448557][ T834] usb 7-1: Using ep0 maxpacket: 16 [ 246.452782][ T834] usb 7-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 246.456715][ T834] usb 7-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 246.462039][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.469205][ T834] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 246.482899][ T834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.486471][ T834] usb 7-1: Product: syz [ 246.488283][ T834] usb 7-1: Manufacturer: syz [ 246.490455][ T834] usb 7-1: SerialNumber: syz [ 246.495473][ T834] usb 7-1: config 0 descriptor?? [ 246.505087][ T834] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input25 [ 247.040059][ T834] usb 7-1: USB disconnect, device number 8 [ 247.119644][ T8916] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 247.700371][ T8927] binder: 8926:8927 ioctl c018620b 0 returned -14 [ 247.722824][ T8927] wlan0 speed is unknown, defaulting to 1000 [ 247.787595][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 247.799298][ T8937] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.803397][ T8937] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.807357][ T8937] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.818625][ T8937] vxlan0: entered promiscuous mode [ 247.868844][ T39] audit: type=1400 audit(1991284662.605:535): avc: denied { connect } for pid=8939 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 247.989064][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 247.992882][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1084'. [ 248.113634][ T8950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.163498][ T8952] trusted_key: syz.3.1088 sent an empty control message without MSG_MORE. [ 248.167047][ T39] audit: type=1400 audit(1991284662.905:536): avc: denied { name_bind } for pid=8951 comm="syz.3.1088" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 248.197641][ T8953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.221372][ T8953] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 248.224354][ T8953] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 248.226300][ T8955] x_tables: duplicate underflow at hook 1 [ 248.228172][ T8953] vhci_hcd vhci_hcd.0: Device attached [ 248.234432][ T8955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.458234][ T39] audit: type=1400 audit(1991284663.195:537): avc: denied { bind } for pid=8958 comm="syz.2.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 248.468614][ T39] audit: type=1400 audit(1991284663.195:538): avc: denied { node_bind } for pid=8958 comm="syz.2.1091" saddr=fc01:: src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 248.480793][ T39] audit: type=1400 audit(1991284663.205:539): avc: denied { listen } for pid=8958 comm="syz.2.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 248.499302][ T39] audit: type=1400 audit(1991284663.215:540): avc: denied { connect } for pid=8958 comm="syz.2.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 248.509225][ T39] audit: type=1400 audit(1991284663.225:541): avc: denied { name_connect } for pid=8958 comm="syz.2.1091" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 248.519956][ T39] audit: type=1400 audit(1991284663.225:542): avc: denied { getopt } for pid=8958 comm="syz.2.1091" lport=47604 faddr=127.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 248.529081][ T57] usb 16-1: SetAddress Request (2) to port 0 [ 248.533357][ T57] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 248.838243][ T8971] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1096'. [ 248.935110][ T8956] vhci_hcd: connection reset by peer [ 248.956656][ T73] vhci_hcd: stop threads [ 248.958948][ T73] vhci_hcd: release socket [ 248.961003][ T73] vhci_hcd: disconnect device [ 249.078696][ T39] audit: type=1400 audit(1991284663.815:543): avc: denied { write } for pid=8976 comm="syz.3.1099" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 249.133176][ T8979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1099'. [ 249.149444][ T8979] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 249.438564][ T5393] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 249.628701][ T5393] usb 8-1: Using ep0 maxpacket: 32 [ 249.633026][ T5393] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.637338][ T5393] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.650233][ T5393] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 249.657438][ T5393] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.667646][ T5393] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.671802][ T5393] usb 8-1: Product: syz [ 249.674034][ T5393] usb 8-1: Manufacturer: syz [ 249.676233][ T5393] usb 8-1: SerialNumber: syz [ 249.938642][ T5382] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 250.118627][ T5382] usb 7-1: Using ep0 maxpacket: 8 [ 250.123356][ T5382] usb 7-1: config 0 has no interfaces? [ 250.125642][ T5382] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 250.135613][ T5382] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.141839][ T5382] usb 7-1: config 0 descriptor?? [ 250.481241][ T8998] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1106'. [ 250.493844][ T5382] usb 7-1: USB disconnect, device number 9 [ 250.901089][ T9011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9011 comm=syz.1.1111 [ 250.908401][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 251.549373][ T5393] cdc_ncm 8-1:1.0: bind() failure [ 251.549645][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 251.549660][ T39] audit: type=1400 audit(1991284666.295:547): avc: denied { watch watch_reads } for pid=9030 comm="syz.1.1119" path="/279" dev="tmpfs" ino=1513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 251.555392][ T5393] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 251.574930][ T5393] cdc_ncm 8-1:1.1: bind() failure [ 251.583207][ T5393] usb 8-1: USB disconnect, device number 8 [ 252.232183][ C2] vkms_vblank_simulate: vblank timer overrun [ 252.888761][ T834] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 252.908150][ T9038] syz.1.1120 (9038): drop_caches: 2 [ 252.926537][ T9056] bridge_slave_1: left allmulticast mode [ 252.929830][ T9056] bridge_slave_1: left promiscuous mode [ 252.933663][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.958611][ T9056] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 253.130811][ T834] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 253.136437][ T834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.148342][ T39] audit: type=1400 audit(1991284667.885:548): avc: denied { setattr } for pid=9063 comm="syz.1.1132" name="NETLINK" dev="sockfs" ino=26513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.155617][ T9064] netlink: 'syz.1.1132': attribute type 4 has an invalid length. [ 253.165111][ T834] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.173234][ T834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 253.184143][ T834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.184313][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1133'. [ 253.188307][ T834] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.206462][ T834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 253.207829][ T9066] bond0: (slave netdevsim0): Releasing backup interface [ 253.219812][ T834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.223268][ T834] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.226902][ T9066] batman_adv: batadv1: Adding interface: netdevsim0 [ 253.240367][ T834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 253.264820][ T834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.277328][ T9066] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.280156][ T834] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.290513][ T9066] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 253.298486][ T834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 253.360038][ T834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.388489][ T39] audit: type=1400 audit(1991284668.125:549): avc: denied { ioctl } for pid=9071 comm="syz.0.1136" path="socket:[25179]" dev="sockfs" ino=25179 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 253.428595][ T834] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.456683][ T834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 253.461085][ T834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.465479][ T834] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.470180][ T834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 253.475405][ T834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.483302][ T834] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.493888][ T834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 253.498850][ T834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.503689][ T834] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.512252][ T834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 253.520927][ T834] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 253.525010][ T834] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 253.543905][ T834] usb 8-1: Product: syz [ 253.545685][ T834] usb 8-1: Manufacturer: syz [ 253.547662][ T834] usb 8-1: SerialNumber: syz [ 253.563411][ T834] usb 8-1: config 0 descriptor?? [ 253.581607][ T834] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 253.624044][ C2] vkms_vblank_simulate: vblank timer overrun [ 253.648669][ T57] usb 16-1: device descriptor read/8, error -110 [ 253.813441][ T1417] usb 8-1: USB disconnect, device number 9 [ 253.833194][ T1417] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 254.177326][ T9088] bridge_slave_1: left allmulticast mode [ 254.180832][ T57] usb usb16-port1: attempt power cycle [ 254.184624][ T9088] bridge_slave_1: left promiscuous mode [ 254.187596][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.202609][ T9088] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 254.243348][ T39] audit: type=1400 audit(1991284668.985:550): avc: denied { unmount } for pid=5346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 254.394479][ T9094] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 254.865208][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1145'. [ 254.882022][ T57] usb usb16-port1: unable to enumerate USB device [ 255.691031][ T9103] ALSA: mixer_oss: invalid OSS volume '' [ 256.306965][ T39] audit: type=1400 audit(1991284671.045:551): avc: denied { setopt } for pid=9134 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.337415][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.375714][ T9136] bridge_slave_0: left allmulticast mode [ 256.378586][ T9136] bridge_slave_0: left promiscuous mode [ 256.380993][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.433297][ T57] IPVS: starting estimator thread 0... [ 256.532248][ T9145] IPVS: using max 21 ests per chain, 50400 per kthread [ 256.632490][ T7790] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 256.699436][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1161'. [ 256.752593][ T39] audit: type=1400 audit(1991284671.495:552): avc: denied { read } for pid=9158 comm="syz.1.1164" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 256.769436][ T39] audit: type=1400 audit(1991284671.495:553): avc: denied { open } for pid=9158 comm="syz.1.1164" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 256.803545][ T39] audit: type=1400 audit(1991284671.525:554): avc: denied { ioctl } for pid=9158 comm="syz.1.1164" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 256.851114][ T7790] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.860655][ T7790] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.878375][ T7790] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.885150][ T7790] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.900661][ T7790] usb 8-1: config 0 descriptor?? [ 257.227762][ T9150] ALSA: mixer_oss: invalid OSS volume '' [ 257.408875][ T7790] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 257.418759][ T7790] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 257.429274][ T39] audit: type=1804 audit(1991284672.175:555): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1168" name="/newroot/298/bus/file0" dev="overlay" ino=1624 res=1 errno=0 [ 257.439586][ T7790] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 257.480240][ T5404] IPVS: starting estimator thread 0... [ 257.590188][ T9178] Invalid ELF header magic: != ELF [ 257.590961][ T39] audit: type=1400 audit(1991284672.335:556): avc: denied { module_load } for pid=9174 comm="syz.1.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 257.600263][ T9173] IPVS: using max 18 ests per chain, 43200 per kthread [ 257.638199][ T39] audit: type=1400 audit(1991284672.375:557): avc: denied { read } for pid=9179 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.681320][ T9139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.685566][ T9139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.798313][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 258.148937][ T5382] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 258.225818][ T9139] macvlan0 (unregistering): left promiscuous mode [ 258.332044][ T5382] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.337744][ T5382] usb 5-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 258.346170][ T5382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.351940][ T5382] usb 5-1: config 0 descriptor?? [ 258.363244][ T5382] usb 5-1: selecting invalid altsetting 0 [ 258.373675][ T7790] usb 8-1: USB disconnect, device number 10 [ 258.671119][ T5382] usb 5-1: USB disconnect, device number 7 [ 258.736757][ T39] audit: type=1400 audit(1991284673.475:558): avc: denied { read } for pid=9199 comm="syz.2.1177" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 258.748572][ T39] audit: type=1400 audit(1991284673.475:559): avc: denied { open } for pid=9199 comm="syz.2.1177" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 258.758264][ T39] audit: type=1400 audit(1991284673.495:560): avc: denied { ioctl } for pid=9199 comm="syz.2.1177" path="/dev/nullb0" dev="devtmpfs" ino=693 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 258.973022][ T9209] qnx4: no qnx4 filesystem (no root dir). [ 259.330125][ T9219] wlan0 speed is unknown, defaulting to 1000 [ 259.377957][ T39] audit: type=1400 audit(1991284674.072:561): avc: denied { create } for pid=9218 comm="syz.0.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.495935][ C2] vkms_vblank_simulate: vblank timer overrun [ 261.431987][ C2] vkms_vblank_simulate: vblank timer overrun [ 261.511002][ T9253] netlink: 'syz.1.1192': attribute type 10 has an invalid length. [ 261.528212][ T9253] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 261.961258][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.967384][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.611264][ T9278] overlayfs: failed to resolve './file1': -2 [ 262.614954][ T9279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1197'. [ 262.700150][ T9280] bridge_slave_1: left allmulticast mode [ 263.248442][ T9280] bridge_slave_1: left promiscuous mode [ 263.253788][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.315335][ T9267] ALSA: mixer_oss: invalid OSS volume '' [ 263.322631][ T9280] bridge_slave_0: left allmulticast mode [ 263.325133][ T9280] bridge_slave_0: left promiscuous mode [ 263.328211][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.011093][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 264.011196][ T39] audit: type=1400 audit(1991284678.364:565): avc: denied { ioctl } for pid=9297 comm="syz.1.1207" path="socket:[27008]" dev="sockfs" ino=27008 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 264.032689][ T39] audit: type=1400 audit(1991284678.382:566): avc: denied { create } for pid=9289 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 264.438797][ T9316] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 264.441456][ T9316] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.447276][ T9316] vhci_hcd vhci_hcd.0: Device attached [ 264.457096][ T9318] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 2 [ 264.460624][ T11] vhci_hcd: stop threads [ 264.462871][ T11] vhci_hcd: release socket [ 264.464907][ T11] vhci_hcd: disconnect device [ 264.773005][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1213'. [ 264.781875][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 266.482262][ T9359] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 266.870504][ T5382] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 267.091823][ T5382] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.096521][ T5382] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.101011][ T5382] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.104666][ T5382] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.138467][ T9366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 267.149317][ T5382] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.503010][ T9386] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 267.547690][ T1417] usb 7-1: USB disconnect, device number 10 [ 268.321597][ T9396] overlayfs: failed to resolve './file1': -2 [ 268.410875][ T9388] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 268.961370][ T9407] Bluetooth: hci3: invalid len left 7, exp >= 27 [ 269.559112][ T9427] tmpfs: Bad value for 'mpol' [ 269.618997][ T39] audit: type=1400 audit(1991284683.532:567): avc: denied { setopt } for pid=9426 comm="syz.2.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 269.679042][ T9427] netlink: 'syz.2.1245': attribute type 10 has an invalid length. [ 269.682630][ T9427] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 269.697803][ T9427] batman_adv: batadv1: Removing interface: netdevsim0 [ 269.706153][ T9427] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 269.796273][ T9426] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 269.954971][ T5393] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz1 [ 270.410874][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'. [ 270.723948][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 270.824919][ T1417] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 271.033234][ T1417] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 271.039725][ T1417] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.044123][ T1417] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.049468][ T1417] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.057386][ T1417] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.062165][ T1417] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.067192][ T1417] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.073237][ T1417] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.077643][ T1417] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.082646][ T1417] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.089192][ T1417] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.093470][ T1417] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.098885][ T1417] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.105108][ T1417] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.109174][ T1417] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.115457][ T1417] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.122241][ T1417] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.127151][ T1417] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.132032][ T1417] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.138129][ T1417] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.142676][ T1417] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.147857][ T1417] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.155433][ T1417] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.160115][ T1417] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.165515][ T1417] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.180722][ T1417] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 271.200969][ T1417] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 271.205090][ T1417] usb 6-1: Product: syz [ 271.207779][ T1417] usb 6-1: Manufacturer: syz [ 271.214056][ T1417] usb 6-1: SerialNumber: syz [ 271.236100][ T1417] usb 6-1: config 0 descriptor?? [ 271.296993][ T1417] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 271.336627][ T9445] ALSA: mixer_oss: invalid OSS volume '' [ 271.492635][ T833] usb 6-1: USB disconnect, device number 8 [ 271.498933][ T833] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 271.995062][ T5403] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 272.193074][ T5403] usb 8-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 272.196326][ T5403] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.201142][ T5403] usb 8-1: config 0 descriptor?? [ 272.205827][ T5403] usb 8-1: NDI device with a latency value of 1 [ 272.434121][ T5403] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 272.442518][ T5403] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 272.449186][ T5403] usb 8-1: USB disconnect, device number 11 [ 272.455278][ T5403] ftdi_sio 8-1:0.0: device disconnected [ 273.039187][ T9465] netlink: 'syz.1.1266': attribute type 11 has an invalid length. [ 274.790595][ T7790] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 275.009204][ T7790] usb 6-1: Using ep0 maxpacket: 8 [ 275.019844][ T7790] usb 6-1: config 0 has no interfaces? [ 275.022212][ T7790] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 275.025920][ T7790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.031497][ T7790] usb 6-1: config 0 descriptor?? [ 275.054359][ T9491] kAFS: No cell specified [ 275.069337][ T39] audit: type=1400 audit(1991284688.563:568): avc: denied { read } for pid=9490 comm="syz.3.1264" path="socket:[28870]" dev="sockfs" ino=28870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 275.070805][ T9490] delete_channel: no stack [ 275.277823][ T39] audit: type=1326 audit(1991284688.757:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.1272" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f025779f9 code=0x0 [ 275.331467][ T57] libceph: connect (1)[c::]:6789 error -101 [ 275.334918][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 275.398895][ T7790] usb 6-1: USB disconnect, device number 9 [ 275.440957][ T9507] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1271'. [ 275.627637][ T57] libceph: connect (1)[c::]:6789 error -101 [ 275.630611][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 276.192750][ T57] libceph: connect (1)[c::]:6789 error -101 [ 276.195314][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 276.210205][ T9504] ceph: No mds server is up or the cluster is laggy [ 276.338403][ T39] audit: type=1400 audit(1991284689.735:570): avc: denied { create } for pid=9517 comm="syz.1.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 276.348315][ T39] audit: type=1400 audit(1991284689.735:571): avc: denied { write } for pid=9517 comm="syz.1.1274" path="socket:[28183]" dev="sockfs" ino=28183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 276.358922][ T39] audit: type=1400 audit(1991284689.735:572): avc: denied { nlmsg_write } for pid=9517 comm="syz.1.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 276.643088][ T9531] bond0: entered allmulticast mode [ 276.645447][ T9531] bond_slave_0: entered allmulticast mode [ 276.648023][ T9531] bond_slave_1: entered allmulticast mode [ 276.650623][ T9531] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 276.656441][ T9531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.779009][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 276.784860][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 276.801817][ T9535] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 277.281486][ T39] audit: type=1326 audit(1991284690.603:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9539 comm="syz.1.1282" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a2ad779f9 code=0x0 [ 277.950637][ T9552] wlan0 speed is unknown, defaulting to 1000 [ 278.419785][ T57] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 278.565272][ T9568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1291'. [ 278.626284][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 278.635994][ T57] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.644652][ T57] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 278.655330][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 278.660477][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 278.665412][ T57] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 278.669552][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.680914][ T57] hub 7-1:1.0: bad descriptor, ignoring hub [ 278.683658][ T57] hub 7-1:1.0: probe with driver hub failed with error -5 [ 278.687007][ T57] cdc_wdm 7-1:1.0: skipping garbage [ 278.689745][ T57] cdc_wdm 7-1:1.0: skipping garbage [ 278.694308][ T57] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 278.696926][ T57] cdc_wdm 7-1:1.0: Unknown control protocol [ 279.148711][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.153096][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.257759][ T9584] team_slave_0: left allmulticast mode [ 279.282418][ T9571] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 279.291540][ T9584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.329950][ T9] usb 7-1: USB disconnect, device number 11 [ 279.774489][ T9597] netpci0: tun_chr_ioctl cmd 1074025677 [ 279.777134][ T9597] netpci0: linktype set to 804 [ 280.012305][ T39] audit: type=1400 audit(1991284693.122:574): avc: denied { write } for pid=9606 comm="syz.2.1305" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 280.304874][ T7790] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 280.445713][ T9617] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 280.503799][ T7790] usb 6-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 280.508471][ T7790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.522682][ T7790] usb 6-1: config 0 descriptor?? [ 280.527178][ T7790] usb 6-1: NDI device with a latency value of 1 [ 280.649835][ T9622] UBIFS error (pid: 9622): cannot open "/dev/sg0", error -22 [ 280.756732][ T9625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.841592][ T7790] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 280.848996][ T7790] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 280.856098][ T7790] usb 6-1: USB disconnect, device number 10 [ 280.861267][ T7790] ftdi_sio 6-1:0.0: device disconnected [ 280.942581][ T9628] wlan0 speed is unknown, defaulting to 1000 [ 281.595187][ T9633] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 282.334195][ T9656] overlayfs: failed to resolve './file1': -2 [ 282.361112][ T9655] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 283.223005][ T39] audit: type=1326 audit(1991284696.085:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.0.1325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa171d779f9 code=0x7ffc0000 [ 283.233867][ T39] audit: type=1326 audit(1991284696.085:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.0.1325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa171d779f9 code=0x7ffc0000 [ 283.243380][ T39] audit: type=1326 audit(1991284696.085:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.0.1325" exe="/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fa171d779f9 code=0x7ffc0000 [ 283.254297][ T39] audit: type=1326 audit(1991284696.085:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.0.1325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa171d779f9 code=0x7ffc0000 [ 283.265172][ T39] audit: type=1326 audit(1991284696.085:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.0.1325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa171d779f9 code=0x7ffc0000 [ 283.275474][ T39] audit: type=1326 audit(1991284696.085:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.0.1325" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa171d779f9 code=0x7ffc0000 [ 283.284470][ T39] audit: type=1326 audit(1991284696.094:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.0.1325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa171d779f9 code=0x7ffc0000 [ 283.294352][ T39] audit: type=1326 audit(1991284696.094:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.0.1325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa171d779f9 code=0x7ffc0000 [ 283.303531][ T39] audit: type=1326 audit(1991284696.104:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.0.1325" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa171d779f9 code=0x7ffc0000 [ 283.313671][ T39] audit: type=1326 audit(1991284696.104:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.0.1325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa171d779f9 code=0x7ffc0000 [ 283.395213][ T9674] netlink: 'syz.0.1325': attribute type 10 has an invalid length. [ 283.467025][ T9674] bond0: (slave macvlan0): Releasing backup interface [ 283.750436][ T9688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1328'. [ 283.873352][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 285.392595][ T9702] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 285.423905][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1333'. [ 285.605150][ T9708] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1338' sets config #0 [ 286.346965][ T9745] overlayfs: failed to resolve './file1': -2 [ 287.012123][ T9757] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1349'. [ 287.057366][ T9761] tmpfs: Bad value for 'mpol' [ 287.219069][ T9761] netlink: 'syz.1.1348': attribute type 10 has an invalid length. [ 287.233746][ T9761] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 287.344728][ T9773] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1350' sets config #0 [ 287.425961][ T9758] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 287.829960][ T9785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1363'. [ 287.833540][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 288.283607][ T9793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9793 comm=syz.1.1358 [ 288.295235][ T9793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.744443][ T9811] netlink: 'syz.2.1367': attribute type 7 has an invalid length. [ 288.748373][ T9811] netlink: 'syz.2.1367': attribute type 39 has an invalid length. [ 288.765197][ T9811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9811 comm=syz.2.1367 [ 288.771695][ T9811] netlink: 'syz.2.1367': attribute type 7 has an invalid length. [ 288.774864][ T9811] netlink: 'syz.2.1367': attribute type 39 has an invalid length. [ 289.119516][ T9825] input: syz0 as /devices/virtual/input/input27 [ 289.151774][ T39] kauditd_printk_skb: 55 callbacks suppressed [ 289.151790][ T39] audit: type=1400 audit(1991284701.568:640): avc: denied { read } for pid=9812 comm="syz.3.1368" lport=56623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 289.382686][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1372'. [ 289.729068][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 289.733148][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 290.296610][ T1106] bond0: (slave bond_slave_0): interface is now down [ 290.299426][ T1106] bond0: (slave bond_slave_1): interface is now down [ 290.302149][ T1106] bond0: (slave netdevsim0): interface is now down [ 290.332334][ T1106] bond0: now running without any active interface! [ 290.378732][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1378'. [ 290.384845][ T39] audit: type=1400 audit(1991284702.703:641): avc: denied { write } for pid=9851 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 290.591346][ T9857] fuse: Bad value for 'fd' [ 290.813870][ T9843] block nbd0: shutting down sockets [ 290.986986][ T9865] tmpfs: Bad value for 'mpol' [ 291.053473][ T9862] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 291.102506][ T39] audit: type=1400 audit(1991284703.368:642): avc: denied { name_bind } for pid=9870 comm="syz.0.1391" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 291.116842][ T39] audit: type=1400 audit(1991284703.377:643): avc: denied { write } for pid=9870 comm="syz.0.1391" laddr=127.0.0.1 lport=39264 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 291.143059][ T9872] netlink: 'syz.3.1381': attribute type 10 has an invalid length. [ 291.229860][ T9864] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 291.737084][ T9873] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 291.861272][ T39] audit: type=1400 audit(1991284704.060:644): avc: denied { mount } for pid=9892 comm="syz.2.1392" name="/" dev="rpc_pipefs" ino=31828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 291.924426][ T9900] tmpfs: Bad value for 'mpol' [ 292.117449][ T9912] netlink: 'syz.0.1395': attribute type 10 has an invalid length. [ 292.121329][ T9912] batman_adv: batadv1: Removing interface: netdevsim0 [ 292.237014][ T9912] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 292.455229][ T9898] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 292.665348][ T39] audit: type=1400 audit(1991284704.807:645): avc: denied { unmount } for pid=8328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 292.722316][ T39] audit: type=1400 audit(1991284704.863:646): avc: denied { setopt } for pid=9931 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.723213][ T9932] netlink: 'syz.2.1401': attribute type 3 has an invalid length. [ 292.738640][ T9932] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1401'. [ 293.209568][ T9943] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1402' sets config #0 [ 293.339908][ T9934] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 293.660378][ T39] audit: type=1400 audit(1991284705.721:647): avc: denied { mounton } for pid=9948 comm="syz.0.1406" path="/371/file0" dev="9p" ino=36701606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.007395][ T9953] tmpfs: Bad value for 'mpol' [ 294.209748][ T9953] netlink: 'syz.1.1407': attribute type 10 has an invalid length. [ 294.282977][ T9952] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 295.061226][ T9967] 9pnet_fd: Insufficient options for proto=fd [ 296.177200][ T39] audit: type=1326 audit(1991284708.047:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.2.1417" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f025779f9 code=0x0 [ 296.299783][ T39] audit: type=1400 audit(1991284708.167:649): avc: denied { write } for pid=9988 comm="syz.2.1417" name="btrfs-control" dev="devtmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 296.312447][ T39] audit: type=1400 audit(1991284708.167:650): avc: denied { open } for pid=9988 comm="syz.2.1417" path="/dev/btrfs-control" dev="devtmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 296.935988][ T9999] Invalid ELF header magic: != ELF [ 298.727351][T10019] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1425' sets config #0 [ 299.272087][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1426'. [ 299.464504][T10024] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 299.751559][ T39] audit: type=1400 audit(1991284711.342:651): avc: denied { create } for pid=10035 comm="syz.2.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 299.813016][ T39] audit: type=1400 audit(1991284711.407:652): avc: denied { ioctl } for pid=10035 comm="syz.2.1431" path="socket:[32081]" dev="sockfs" ino=32081 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 299.990874][ T7790] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 300.099057][ T5393] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 300.196510][ T835] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 300.200642][ T7790] usb 5-1: Using ep0 maxpacket: 32 [ 300.205807][ T7790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.211793][ T7790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.216095][ T7790] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 300.236532][ T7790] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.240992][ T7790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.244586][ T7790] usb 5-1: Product: syz [ 300.246394][ T7790] usb 5-1: Manufacturer: syz [ 300.248432][ T7790] usb 5-1: SerialNumber: syz [ 300.361631][ T5393] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.366615][ T5393] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 300.372267][ T5393] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.376224][ T5393] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.395964][T10037] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 300.405821][ T5393] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.426607][ T835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 300.433074][ T835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 300.443605][ T835] usb 7-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 300.447698][ T835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.454309][ T835] usb 7-1: config 0 descriptor?? [ 300.806571][ T5393] usb 8-1: USB disconnect, device number 12 [ 300.942349][ T835] pantherlord 0003:0F30:0111.0006: item fetching failed at offset 6/7 [ 300.946420][ T835] pantherlord 0003:0F30:0111.0006: parse failed [ 300.949111][ T835] pantherlord 0003:0F30:0111.0006: probe with driver pantherlord failed with error -22 [ 301.127987][ T7790] cdc_ncm 5-1:1.0: bind() failure [ 301.140200][ T7790] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 301.144422][ T7790] cdc_ncm 5-1:1.1: bind() failure [ 301.157904][ T1417] usb 7-1: USB disconnect, device number 12 [ 301.161883][ T7790] usb 5-1: USB disconnect, device number 8 [ 302.159066][T10086] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 302.161924][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.167286][T10086] vhci_hcd vhci_hcd.0: Device attached [ 302.358158][T10087] vhci_hcd: connection closed [ 302.358858][ T11] vhci_hcd: stop threads [ 302.362414][ T11] vhci_hcd: release socket [ 302.364675][ T11] vhci_hcd: disconnect device [ 302.374675][ T7790] vhci_hcd: vhci_device speed not set [ 302.554715][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.653908][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.734390][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.850949][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 302.855078][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 302.861000][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.865492][ T39] audit: type=1400 audit(1991284714.222:653): avc: denied { mounton } for pid=10092 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 302.883009][ T4766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.890527][ T4766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.894966][ T4766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.901368][ T4766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.907580][T10091] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 302.908677][ T4766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 302.916424][ T4766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.957310][T10092] wlan0 speed is unknown, defaulting to 1000 [ 303.198969][T10097] netlink: 'syz.1.1457': attribute type 10 has an invalid length. [ 303.329336][ T39] audit: type=1400 audit(1991284714.656:654): avc: denied { ioctl } for pid=10101 comm="syz.1.1459" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 303.342798][T10102] Bluetooth: MGMT ver 1.23 [ 303.622976][ T11] team0: Port device bridge1 removed [ 303.643452][T10110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1463'. [ 303.682763][T10110] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 303.687835][ T5393] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 303.915038][ T5393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.918005][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.919644][ T5393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.919669][ T5393] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.932558][ T5393] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.932868][ T11] bond_slave_0: left allmulticast mode [ 303.936538][ T5393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.939079][ T5393] usb 6-1: config 0 descriptor?? [ 303.948402][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.949908][T10121] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1468'. [ 303.962033][ T11] bond_slave_1: left allmulticast mode [ 303.965928][ T11] bond0 (unregistering): Released all slaves [ 303.987157][T10092] chnl_net:caif_netlink_parms(): no params data found [ 304.256871][T10092] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.264917][T10092] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.267684][T10092] bridge_slave_0: entered allmulticast mode [ 304.271711][T10092] bridge_slave_0: entered promiscuous mode [ 304.283653][T10092] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.286938][T10092] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.290202][T10092] bridge_slave_1: entered allmulticast mode [ 304.294540][T10092] bridge_slave_1: entered promiscuous mode [ 304.395548][T10092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.401024][ T5393] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.404283][ T5393] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.407528][ T5393] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.408739][T10092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.410757][ T5393] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.420136][ T5393] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.424738][ T5393] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.427922][ T5393] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.431047][ T5393] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.434369][ T5393] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.438169][ T5393] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.442269][ T5393] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 304.450204][ T5393] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 304.497013][T10092] team0: Port device team_slave_0 added [ 304.508528][ T11] hsr_slave_0: left promiscuous mode [ 304.512579][ T11] hsr_slave_1: left promiscuous mode [ 304.515491][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.518093][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.555305][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.559087][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.644953][ T11] veth1_macvtap: left promiscuous mode [ 304.647347][ T11] veth0_macvtap: left promiscuous mode [ 304.649643][ T11] veth1_vlan: left promiscuous mode [ 304.651480][ T11] veth0_vlan: left promiscuous mode [ 304.748128][ T834] usb 6-1: USB disconnect, device number 11 [ 305.109023][ T39] audit: type=1800 audit(1991284716.280:655): pid=10140 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1471" name="/newroot/383/file0" dev="tmpfs" ino=2110 res=0 errno=0 [ 305.115343][ T5353] Bluetooth: hci0: command tx timeout [ 305.216305][T10147] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1472'. [ 306.044073][ T11] team0 (unregistering): Port device team_slave_1 removed [ 306.197982][ T11] team0 (unregistering): Port device team_slave_0 removed [ 307.165762][T10092] team0: Port device team_slave_1 added [ 307.265308][T10092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.268439][T10092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.282181][T10092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.289468][T10092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.292781][T10092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.305322][T10092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.316303][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 307.369412][ T5353] Bluetooth: hci0: command tx timeout [ 307.417410][T10092] hsr_slave_0: entered promiscuous mode [ 307.430629][T10092] hsr_slave_1: entered promiscuous mode [ 307.437165][T10092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.440502][T10092] Cannot create hsr debugfs directory [ 307.557326][T10159] syzkaller0: entered promiscuous mode [ 307.559902][T10159] syzkaller0: entered allmulticast mode [ 308.371650][T10172] tmpfs: Bad value for 'mpol' [ 308.599627][T10178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1482'. [ 308.874780][T10184] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=10184 comm=syz.3.1482 [ 309.622949][ T5353] Bluetooth: hci0: command tx timeout [ 309.928935][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 309.942569][T10203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10203 comm=syz.3.1490 [ 309.971506][T10092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 309.977601][T10092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 309.989324][T10092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 310.000262][T10092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 310.079654][T10092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.098733][T10092] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.109069][ T834] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.112646][ T834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.133595][ T834] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.137001][ T834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.275213][T10207] 9pnet_fd: p9_fd_create_tcp (10207): problem connecting socket to 127.0.0.1 [ 310.471124][T10092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.539711][T10092] veth0_vlan: entered promiscuous mode [ 310.550101][T10092] veth1_vlan: entered promiscuous mode [ 310.576040][T10092] veth0_macvtap: entered promiscuous mode [ 310.582784][T10092] veth1_macvtap: entered promiscuous mode [ 310.600385][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.605175][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.609825][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.614336][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.618110][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.622774][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.626638][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.631123][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.636438][T10092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.644703][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.648327][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.653689][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.657223][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.661270][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.666866][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.670989][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.675470][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.681188][T10092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.691085][T10092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.695659][T10092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.699507][T10092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.704240][T10092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.788453][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.791974][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.824353][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.828734][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.184437][ T834] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 311.382463][ T834] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 311.387023][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.399057][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.409959][ T834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 311.416927][ T834] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 311.420874][ T834] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 311.424286][ T834] usb 7-1: Manufacturer: syz [ 311.431420][ T834] usb 7-1: config 0 descriptor?? [ 311.468371][T10207] 9pnet_fd: p9_fd_create_tcp (10207): problem connecting socket to 127.0.0.1 [ 311.529191][ T57] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 311.726241][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.730865][ T57] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 311.734721][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.740065][ T57] usb 6-1: config 0 descriptor?? [ 311.878847][ T5353] Bluetooth: hci0: command tx timeout [ 311.979938][ T57] usbhid 6-1:0.0: can't add hid device: -71 [ 311.982829][ T57] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 311.988346][ T57] usb 6-1: USB disconnect, device number 12 [ 312.489480][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 312.604702][T10253] wlan0 speed is unknown, defaulting to 1000 [ 313.793526][ T834] usbhid 7-1:0.0: can't add hid device: -71 [ 313.795799][ T834] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 313.799700][ T834] usb 7-1: USB disconnect, device number 13 [ 314.052927][T10275] netlink: 'syz.0.1512': attribute type 9 has an invalid length. [ 314.057873][T10275] netlink: 'syz.0.1512': attribute type 7 has an invalid length. [ 314.061269][T10275] netlink: 'syz.0.1512': attribute type 8 has an invalid length. [ 314.374881][T10284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1515'. [ 314.714662][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 314.930096][ T39] audit: type=1400 audit(1991284725.353:656): avc: denied { setopt } for pid=10289 comm="syz.0.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 314.966583][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.980205][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 314.984965][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 314.992415][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.998103][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.001922][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.009245][ T9] usb 7-1: config 0 descriptor?? [ 315.073620][T10292] 9pnet: Unknown protocol version 9p200 [ 315.152479][ T39] audit: type=1400 audit(1991284725.566:657): avc: denied { map } for pid=10293 comm="syz.1.1519" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.191166][ T39] audit: type=1400 audit(1991284725.566:658): avc: denied { execute } for pid=10293 comm="syz.1.1519" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.202188][ T39] audit: type=1400 audit(1991284725.593:659): avc: denied { accept } for pid=10289 comm="syz.0.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.508034][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 315.512516][ T9] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 315.530626][ T9] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 315.793891][ T39] audit: type=1400 audit(1991284726.156:660): avc: denied { mounton } for pid=10303 comm="syz.3.1522" path="/342/file0/file0" dev="9p" ino=36701607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 315.823882][ T5383] usb 7-1: USB disconnect, device number 14 [ 315.852287][ T39] audit: type=1400 audit(1991284726.203:661): avc: denied { create } for pid=10303 comm="syz.3.1522" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 315.952804][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1525'. [ 316.408455][T10319] ALSA: seq fatal error: cannot create timer (-22) [ 316.425515][T10325] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 318.899376][ T5404] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 319.167182][ T5404] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.176510][ T5404] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.181248][ T5404] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.184946][ T5404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.221450][T10386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 319.228966][ T5404] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.561923][ T5393] usb 6-1: USB disconnect, device number 13 [ 320.626294][T10410] wlan0 speed is unknown, defaulting to 1000 [ 320.922469][ T1417] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 321.117438][ T1417] usb 6-1: Using ep0 maxpacket: 8 [ 321.164996][ T1417] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.169047][ T1417] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.225751][ T1417] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.237428][ T1417] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.242754][ T1417] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.246577][ T1417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.490627][ T1417] usb 6-1: GET_CAPABILITIES returned 0 [ 321.493039][ T1417] usbtmc 6-1:16.0: can't read capabilities [ 321.656850][T10427] bMtadv_lave_0: renamed from lo (while UP) [ 321.666515][T10427] bMtadv_lave_0: entered allmulticast mode [ 321.711914][T10429] input: syz0 as /devices/virtual/input/input28 [ 321.732761][ T1417] usb 6-1: USB disconnect, device number 14 [ 322.062573][T10442] Driver unsupported XDP return value 0 on prog (id 351) dev N/A, expect packet loss! [ 323.207461][T10455] syz.3.1577: attempt to access beyond end of device [ 323.207461][T10455] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 323.213323][T10455] syz.3.1577: attempt to access beyond end of device [ 323.213323][T10455] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 323.218307][T10455] syz.3.1577: attempt to access beyond end of device [ 323.218307][T10455] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 323.226904][T10455] syz.3.1577: attempt to access beyond end of device [ 323.226904][T10455] loop3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 323.231722][T10455] syz.3.1577: attempt to access beyond end of device [ 323.231722][T10455] loop3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 323.237353][T10455] syz.3.1577: attempt to access beyond end of device [ 323.237353][T10455] loop3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 323.242966][T10455] VFS: unable to find oldfs superblock on device loop3 [ 323.479273][ T5383] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 323.603995][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1579'. [ 323.684308][ T5383] usb 7-1: Using ep0 maxpacket: 8 [ 323.692178][ T5383] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 323.696250][ T5383] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.701044][ T5383] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.705078][ T5383] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.713731][ T5383] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.721062][ T5383] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 323.725110][ T5383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.967878][ T5383] usb 7-1: usb_control_msg returned -32 [ 323.972397][ T5383] usbtmc 7-1:16.0: can't read capabilities [ 324.356019][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 324.361646][ C0] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 324.366129][ C0] CPU: 0 UID: 0 PID: 10478 Comm: syz.0.1583 Not tainted 6.11.0-rc2-syzkaller #0 [ 324.370938][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.375573][ C0] RIP: 0010:skb_segment+0x19da/0x42b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 324.377741][ C0] Code: 00 00 fe e9 bc ea ff ff e8 c3 0a a4 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 75 31 01 f9 48 8b 84 24 d0 [ 324.386735][ C0] RSP: 0018:ffffc900000065f8 EFLAGS: 00010202 [ 324.389468][ C0] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff88e661c2 [ 324.393915][ C0] RDX: 000000000000000e RSI: ffffffff88e6729d RDI: 0000000000000070 [ 324.397447][ C0] RBP: ffffc900000067a8 R08: 0000000000000005 R09: 000000000000ffff [ 324.400976][ C0] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88802521df40 [ 324.404942][ C0] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 324.408536][ C0] FS: 00007fa1717de6c0(0000) GS:ffff88806b000000(0000) knlGS:0000000000000000 [ 324.412609][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.415702][ C0] CR2: 000000002002f000 CR3: 0000000041754000 CR4: 0000000000352ef0 [ 324.419225][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.422709][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.426193][ C0] Call Trace: [ 324.428491][ C0] [ 324.429927][ C0] ? show_regs+0x8c/0xa0 [ 324.431852][ C0] ? die_addr+0x4f/0xd0 [ 324.433741][ C0] ? exc_general_protection+0x155/0x230 [ 324.436184][ C0] ? asm_exc_general_protection+0x26/0x30 [ 324.438690][ C0] ? skb_segment+0x8e2/0x42b0 [ 324.440548][ C0] ? skb_segment+0x19bd/0x42b0 [ 324.442596][ C0] ? skb_segment+0x19da/0x42b0 [ 324.444745][ C0] ? skb_segment+0x19bd/0x42b0 [ 324.446451][ C0] ? __pfx_skb_segment+0x10/0x10 [ 324.448178][ C0] ? clockevents_program_event+0x155/0x380 [ 324.450073][ C0] tcp_gso_segment+0x3ca/0x1940 [ 324.452172][ C0] ? __pfx_tcp_wfree+0x10/0x10 [ 324.454576][ C0] tcp6_gso_segment+0x1f9/0x12e0 [ 324.456840][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 324.459162][ C0] ? __pfx_mark_lock+0x10/0x10 [ 324.461331][ C0] ipv6_gso_segment+0x7b2/0x1c70 [ 324.463573][ C0] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 324.465955][ C0] ? hlock_class+0x4e/0x130 [ 324.468011][ C0] ? mark_lock+0xb5/0xc60 [ 324.469961][ C0] ? mark_lock+0xb5/0xc60 [ 324.471839][ C0] ? __pfx_nf_ct_l4proto_log_invalid+0x10/0x10 [ 324.474264][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.476615][ C0] skb_mac_gso_segment+0x2a6/0x650 [ 324.478868][ C0] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 324.481293][ C0] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 324.483719][ C0] ? __pfx_mark_lock+0x10/0x10 [ 324.485802][ C0] __skb_gso_segment+0x333/0x710 [ 324.487910][ C0] ? netif_skb_features+0x3ac/0xcc0 [ 324.489959][ C0] validate_xmit_skb+0x33b/0xef0 [ 324.491930][ C0] validate_xmit_skb_list+0xc1/0x130 [ 324.494015][ C0] sch_direct_xmit+0x38f/0xc20 [ 324.495909][ C0] ? nf_conntrack_tcp_packet+0xef1/0x6780 [ 324.498131][ C0] ? tcf_classify+0x3de/0x1380 [ 324.500110][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 324.502412][ C0] ? pfifo_enqueue+0xa0/0x2f0 [ 324.504524][ C0] ? qdisc_dequeue_head+0x223/0x2d0 [ 324.506827][ C0] ? prio_dequeue+0x48c/0x680 [ 324.508892][ C0] __qdisc_run+0x550/0x1a40 [ 324.510932][ C0] __dev_queue_xmit+0x29dc/0x4300 [ 324.513580][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 324.516263][ C0] ? hlock_class+0x4e/0x130 [ 324.518444][ C0] ? mark_lock+0xb5/0xc60 [ 324.520729][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 324.523422][ C0] ? lock_acquire+0x1b1/0x560 [ 324.525716][ C0] ? find_held_lock+0x2d/0x110 [ 324.528351][ C0] ? mark_held_locks+0x9f/0xe0 [ 324.530447][ C0] ip6_finish_output2+0x1104/0x18c0 [ 324.532850][ C0] ip6_finish_output+0x3f9/0x1300 [ 324.535134][ C0] ip6_output+0x1f8/0x540 [ 324.537100][ C0] ? __pfx_ip6_output+0x10/0x10 [ 324.539131][ C0] ip6_xmit+0x125f/0x2040 [ 324.541069][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 324.543458][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 324.545556][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 324.548266][ C0] ? __pfx_inet6_csk_route_socket+0x10/0x10 [ 324.550669][ C0] ? ip6_protocol_deliver_rcu+0x188/0x1530 [ 324.553038][ C0] ? ipv6_rcv+0x265/0x680 [ 324.554853][ C0] ? __netif_receive_skb_one_core+0x12e/0x1e0 [ 324.558255][ C0] ? __netif_receive_skb+0x1d/0x160 [ 324.560597][ C0] ? process_backlog+0x443/0x15f0 [ 324.562850][ C0] inet6_csk_xmit+0x3ce/0x740 [ 324.565006][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 324.567310][ C0] ? csum_ipv6_magic+0x296/0x310 [ 324.569597][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 324.571887][ C0] __tcp_transmit_skb+0x1adb/0x3dc0 [ 324.574133][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 324.576472][ C0] ? __build_skb_around+0x278/0x3b0 [ 324.578991][ C0] ? skb_zerocopy_clone+0x2c9/0x670 [ 324.581523][ C0] tcp_write_xmit+0x12a8/0x8490 [ 324.583761][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 324.586222][ C0] tcp_rcv_state_process+0xf3e/0x4f30 [ 324.588584][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 324.590788][ C0] ? reacquire_held_locks+0x450/0x4c0 [ 324.593092][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 324.595718][ C0] ? lock_acquire+0x1b1/0x560 [ 324.597388][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 324.599343][ C0] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 324.601348][ C0] ? tcp_v6_do_rcv+0x435/0x16e0 [ 324.603373][ C0] tcp_v6_do_rcv+0x435/0x16e0 [ 324.605317][ C0] tcp_v6_rcv+0x3143/0x4120 [ 324.606954][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 324.608912][ C0] ? __pfx_raw6_local_deliver+0x10/0x10 [ 324.611297][ C0] ? lock_acquire+0x1b1/0x560 [ 324.613385][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 324.615390][ C0] ip6_protocol_deliver_rcu+0x188/0x1530 [ 324.617509][ C0] ip6_input_finish+0x14f/0x2f0 [ 324.619775][ C0] ip6_input+0xa1/0xd0 [ 324.621629][ C0] ? __pfx_ip6_input+0x10/0x10 [ 324.623843][ C0] ipv6_rcv+0x265/0x680 [ 324.625312][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 324.627158][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 324.629760][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 324.632561][ C0] ? process_backlog+0x3f1/0x15f0 [ 324.634726][ C0] ? __pfx_lock_release+0x10/0x10 [ 324.636927][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 324.639095][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 324.641329][ C0] ? process_backlog+0x3f1/0x15f0 [ 324.643232][ C0] __netif_receive_skb+0x1d/0x160 [ 324.645128][ C0] process_backlog+0x443/0x15f0 [ 324.646979][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 324.649006][ C0] net_rx_action+0xa92/0x1010 [ 324.650876][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 324.653190][ C0] ? __print_lock_name+0x250/0x260 [ 324.655555][ C0] ? net_tx_action+0x7dd/0xd00 [ 324.657740][ C0] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 324.661501][ C0] ? net_tx_action+0x7ec/0xd00 [ 324.663562][ C0] handle_softirqs+0x216/0x8f0 [ 324.665526][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 324.667733][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 324.670088][ C0] ? sk_wait_data+0x1ab/0x510 [ 324.671961][ C0] do_softirq+0xb2/0xf0 [ 324.673572][ C0] [ 324.674707][ C0] [ 324.675911][ C0] __local_bh_enable_ip+0x100/0x120 [ 324.677967][ C0] sk_wait_data+0x1ab/0x510 [ 324.679699][ C0] ? __pfx_sk_wait_data+0x10/0x10 [ 324.681582][ C0] ? __pfx_woken_wake_function+0x10/0x10 [ 324.683654][ C0] ? tcp_send_ack+0x82/0xa0 [ 324.685457][ C0] tcp_recvmsg_locked+0x80e/0x2700 [ 324.687593][ C0] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 324.691731][ C0] ? tcp_recvmsg+0x113/0x680 [ 324.693642][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 324.696155][ C0] tcp_recvmsg+0x12e/0x680 [ 324.697801][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 324.699307][ C0] ? sock_has_perm+0x25a/0x2f0 [ 324.701279][ C0] ? __pfx_mark_lock+0x10/0x10 [ 324.703224][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 324.705135][ C0] inet6_recvmsg+0x12b/0x6a0 [ 324.706745][ C0] ? find_held_lock+0x2d/0x110 [ 324.708613][ C0] ? __pfx_inet6_recvmsg+0x10/0x10 [ 324.710838][ C0] ? security_socket_recvmsg+0x98/0xd0 [ 324.713298][ C0] ? __pfx_inet6_recvmsg+0x10/0x10 [ 324.715270][ C0] sock_recvmsg+0xfe/0x250 [ 324.717051][ C0] ____sys_recvmsg+0x21f/0x6b0 [ 324.718660][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 324.720450][ C0] ? find_held_lock+0x2d/0x110 [ 324.722304][ C0] ___sys_recvmsg+0x115/0x1a0 [ 324.724277][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 324.726467][ C0] ? __fget_light+0x173/0x210 [ 324.728499][ C0] __sys_recvmsg+0x114/0x1e0 [ 324.730484][ C0] ? __pfx___sys_recvmsg+0x10/0x10 [ 324.732766][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 324.735041][ C0] do_syscall_64+0xcd/0x250 [ 324.737016][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.739727][ C0] RIP: 0033:0x7fa171d779f9 [ 324.741713][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.750026][ C0] RSP: 002b:00007fa1717de048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 324.753161][ C0] RAX: ffffffffffffffda RBX: 00007fa171f06058 RCX: 00007fa171d779f9 [ 324.756293][ C0] RDX: 0000000040000110 RSI: 00000000200008c0 RDI: 0000000000000005 [ 324.759282][ C0] RBP: 00007fa171de58ee R08: 0000000000000000 R09: 0000000000000000 [ 324.762170][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.764972][ C0] R13: 000000000000006e R14: 00007fa171f06058 R15: 00007ffdb001b8e8 [ 324.767982][ C0] [ 324.769288][ C0] Modules linked in: [ 324.777064][ C0] ---[ end trace 0000000000000000 ]--- [ 324.779421][ C0] RIP: 0010:skb_segment+0x19da/0x42b0 [ 324.781641][ C0] Code: 00 00 fe e9 bc ea ff ff e8 c3 0a a4 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 75 31 01 f9 48 8b 84 24 d0 [ 324.790015][ C0] RSP: 0018:ffffc900000065f8 EFLAGS: 00010202 [ 324.792613][ C0] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff88e661c2 [ 324.795879][ C0] RDX: 000000000000000e RSI: ffffffff88e6729d RDI: 0000000000000070 [ 324.798669][ C0] RBP: ffffc900000067a8 R08: 0000000000000005 R09: 000000000000ffff [ 324.801928][ C0] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88802521df40 [ 324.804902][ C0] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 324.807835][ C0] FS: 00007fa1717de6c0(0000) GS:ffff88806b000000(0000) knlGS:0000000000000000 [ 324.811232][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.814148][ C0] CR2: 000000002002f000 CR3: 0000000041754000 CR4: 0000000000352ef0 [ 324.817277][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.820690][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.824605][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 324.827685][ C0] Kernel Offset: disabled [ 324.829538][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:14:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe4425 RDI=ffffffff9519f6a0 RBP=ffffffff9519f660 RSP=ffffc90000006050 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff84fe43c0 R15=0000000000000000 RIP=ffffffff84fe444f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fa1717de6c0 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002002f000 CR3=0000000041754000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff81307d7f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa171de66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa171de66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa171de66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa171de66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa171de6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa171de6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa171ed6488 00007fa171ed6480 00007fa171ed6478 00007fa171ed6450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa172a3d100 00007fa171ed6440 00007fa171ed6458 00007fa171ed64a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa171ed6498 00007fa171ed6490 00007fa171ed6488 00007fa171ed6480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 344f272fb67a0cda 726435df8f8f3303 45237ae91e0f10db 21e90ac34d86c6b3 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c150c2f52486ecd d25b54534cab22d3 6e5468f5d0f1bdf1 a1128169e2ed93e3 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 512070f14e5b8bfd 8a35baad10411f66 5c3a6182afe90b48 281952f6fc00f096 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8e514ac5d8a9202 ad20792cf1a3567d a877aa002b1abecc 7006191a74927783 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000019 RCX=ffffffff81cfc725 RDX=ffff888020f5a440 RSI=0000000000000000 RDI=0000000000000001 RBP=800000002a716067 RSP=ffffc9000356f690 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88801f6a5f00 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc9000356fab8 RIP=ffffffff818a771d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c25fe45 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937b5e66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937b5e66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937b5e66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937b5e66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937b5e6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937b5e6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937b6d6488 00007f937b6d6480 00007f937b6d6478 00007f937b6d6450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937c23d100 00007f937b6d6440 00007f937b6d0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f937b6d6498 00007f937b6d6490 00007f937b6d6488 00007f937b6d6480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000277 RDX=000000000000280c RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90003aef970 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b118d90 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f937c3b56c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88806b200000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000048196000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90000908108 RCX=ffffffff813ce0c1 RDX=ffff888028ad8000 RSI=ffffffff813ce0cf RDI=0000000000000007 RBP=0000000000000002 RSP=ffffc90000908088 R8 =0000000000000007 R9 =0000000000000000 R10=ffffffff81772a0a R11=0000000000000000 R12=ffffffff81772a0a R13=0000000000000000 R14=ffffc900009081c8 R15=ffffc9000090813d RIP=ffffffff813ce0cf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa1717ff6c0 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5633b33fa8 CR3=000000002f7da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008100001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5633b33c00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8132df25 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5632de66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5632de66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5632de66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5632de66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5632de6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5632de6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f72702f00303030 3030310064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a57550a00151515 151514004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000158 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000