last executing test programs: 3m6.10425104s ago: executing program 3 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m6.016645168s ago: executing program 3 (id=102): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) 3m5.733846234s ago: executing program 3 (id=111): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000540)={r1}) 3m5.605178392s ago: executing program 3 (id=116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c000180080001"], 0x3c}}, 0x8800) 3m5.553747427s ago: executing program 3 (id=120): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 3m5.508886292s ago: executing program 3 (id=124): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) io_setup(0x226, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000a00)="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", 0x200, 0x200, 0x0, 0x0, r0}]) 2m50.514460849s ago: executing program 32 (id=124): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) io_setup(0x226, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000a00)="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", 0x200, 0x200, 0x0, 0x0, r0}]) 1m55.784902029s ago: executing program 4 (id=2686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 1m55.747431296s ago: executing program 4 (id=2689): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 1m55.715235744s ago: executing program 4 (id=2692): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000640)={r0, 0x5, 0x5}) 1m55.643183912s ago: executing program 4 (id=2694): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 1m55.634940654s ago: executing program 4 (id=2697): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './bus\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mincore(&(0x7f0000059000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/181) 1m55.308641758s ago: executing program 4 (id=2700): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 1m55.205158612s ago: executing program 33 (id=2700): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 1m42.617000017s ago: executing program 1 (id=3013): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="558d7acda0b2", 0x0, 0x0, 0x0, 0x4, 0x0}) 1m42.568372272s ago: executing program 1 (id=3014): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1}) 1m42.564194992s ago: executing program 1 (id=3022): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/206, 0xce}], 0x1, 0x5ff, 0x4) 1m40.216469756s ago: executing program 1 (id=3077): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 1m40.195402304s ago: executing program 1 (id=3086): sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 1m39.839442032s ago: executing program 1 (id=3092): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 1m39.728909068s ago: executing program 34 (id=3092): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 1m20.524591615s ago: executing program 6 (id=3699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) 1m20.44870038s ago: executing program 6 (id=3702): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xffff4625, "5660359c3245d1c42317afad7d48ed51000000000000a5bda7c540fd15c900", 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) 1m20.448338269s ago: executing program 6 (id=3705): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 1m20.367457795s ago: executing program 6 (id=3707): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 1m20.366980893s ago: executing program 6 (id=3709): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 1m20.298178758s ago: executing program 6 (id=3711): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000440)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 1m5.7395918s ago: executing program 2 (id=4112): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x25, 0x0, "394281e595fd9eb506cd1a5555af72cd375de18882e299a83da979fa66c8f49889716b8dc73f6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b75008e2576da2b0f564a63d98fb21dc8ab90d76"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 1m5.162888626s ago: executing program 35 (id=3711): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000440)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 1m4.863436987s ago: executing program 2 (id=4124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) 1m3.691841128s ago: executing program 2 (id=4121): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="a5", 0x1}], 0x1}}], 0x2, 0xc8040) sendmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='~', 0x1}], 0x1}}], 0x1, 0x0) 1m3.595119805s ago: executing program 2 (id=4122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 1m3.594545447s ago: executing program 2 (id=4123): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 1m3.487009191s ago: executing program 2 (id=4126): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) open$dir(&(0x7f0000000400)='./file0\x00', 0xa6002, 0x288) 48.393621226s ago: executing program 36 (id=4126): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) open$dir(&(0x7f0000000400)='./file0\x00', 0xa6002, 0x288) 2.252618667s ago: executing program 0 (id=5839): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 1.867447343s ago: executing program 7 (id=5853): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x490102, 0x12c) 1.358628231s ago: executing program 0 (id=5855): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 1.278484566s ago: executing program 0 (id=5856): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2060, 0x0) 1.278198318s ago: executing program 0 (id=5857): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='fusectl\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3093020, 0x0) 1.218506362s ago: executing program 0 (id=5858): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b07, 0x0) 975.528391ms ago: executing program 7 (id=5859): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000001c0)={r1, r1, 0x1, 0x5, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000000)=[r1], &(0x7f0000000280), 0x1}) 719.529225ms ago: executing program 0 (id=5868): r0 = fanotify_init(0xf00, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) fanotify_mark(r0, 0x105, 0x4800002c, r1, 0x0) read$FUSE(r0, 0x0, 0x0) 650.018996ms ago: executing program 5 (id=5870): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x80001a, 0x1, 0x1, "3a8e07ca5de21f00713c8fa98601acc620004b0000002100", 0x3231564e}) 645.392535ms ago: executing program 5 (id=5872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x2c7}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) 615.957864ms ago: executing program 5 (id=5874): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 545.338611ms ago: executing program 5 (id=5876): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlockall(0x1) close_range(r0, 0xffffffffffffffff, 0x0) 194.560428ms ago: executing program 8 (id=5886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a0006"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 116.680076ms ago: executing program 8 (id=5887): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000200)={0x1d, r2}, 0x10) 114.695539ms ago: executing program 7 (id=5888): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r1, &(0x7f0000000400), &(0x7f0000000440)=""/180}, 0x20) 114.398766ms ago: executing program 8 (id=5889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 72.000717ms ago: executing program 7 (id=5890): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r0 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 64.185858ms ago: executing program 5 (id=5891): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) sendmsg$kcm(r0, 0x0, 0x40000) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 58.382018ms ago: executing program 8 (id=5892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) 54.36257ms ago: executing program 7 (id=5893): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 4.577397ms ago: executing program 8 (id=5894): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 4.302114ms ago: executing program 5 (id=5895): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 3.735688ms ago: executing program 7 (id=5896): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 8 (id=5897): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000d9ff00000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) kernel console output (not intermixed with test programs): " ino=4026532868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.878990][ T29] usb 6-1: USB disconnect, device number 6 [ 135.951458][ T41] audit: type=1400 audit(135.783:504): avc: denied { write } for pid=11662 comm="syz.0.2568" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 136.518247][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 136.522286][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'. [ 136.687250][ T41] audit: type=1400 audit(136.513:505): avc: denied { read } for pid=11738 comm="syz.1.2606" name="file0" dev="tmpfs" ino=3701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.763615][ T41] audit: type=1400 audit(136.593:506): avc: denied { bind } for pid=11746 comm="syz.1.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.806210][ T41] audit: type=1400 audit(136.643:507): avc: denied { connect } for pid=11751 comm="syz.1.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.857906][ T41] audit: type=1400 audit(136.693:508): avc: denied { shutdown } for pid=11751 comm="syz.1.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.889657][ T41] audit: type=1400 audit(136.723:509): avc: denied { execheap } for pid=11760 comm="syz.4.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 136.977869][T11772] PKCS8: Unsupported PKCS#8 version [ 137.024967][T11778] binder: 11776:11778 ioctl 40046205 0 returned -22 [ 137.030134][T11778] binder: 11776:11778 ioctl c0306201 2000000013c0 returned -11 [ 137.531917][T11824] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 137.629439][T11836] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2650'. [ 137.632858][T11836] netlink: zone id is out of range [ 137.634626][T11836] netlink: get zone limit has 8 unknown bytes [ 137.657463][ T41] audit: type=1400 audit(137.493:510): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 137.691490][T11841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.822653][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'. [ 138.076146][T11888] syz_tun: entered promiscuous mode [ 138.085167][T11888] macvtap1: entered promiscuous mode [ 138.091824][T11888] syz_tun: left promiscuous mode [ 138.268792][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.271017][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.294251][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2682'. [ 138.299166][T11899] ALSA: seq fatal error: cannot create timer (-19) [ 138.302973][T11904] nbd: illegal input index 1879048192 [ 138.342478][ T41] audit: type=1400 audit(138.173:511): avc: denied { checkpoint_restore } for pid=11907 comm="syz.2.2684" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.349432][T11911] SELinux: Context is not valid (left unmapped). [ 138.354440][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2686'. [ 138.549615][ T41] audit: type=1400 audit(138.383:512): avc: denied { name_bind } for pid=11933 comm="syz.2.2698" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 138.775321][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 138.804713][T11507] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.873608][T11507] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.925337][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 138.931281][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.936917][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 138.942411][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 138.948004][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 138.952764][ T34] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 138.957647][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.972911][ T34] hub 6-1:1.0: bad descriptor, ignoring hub [ 138.974893][T11507] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.975760][ T34] hub 6-1:1.0: probe with driver hub failed with error -5 [ 138.976979][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 138.986182][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 138.990964][ T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 138.993735][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 139.031068][T11507] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.129094][ T5980] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.133073][ T5980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.136972][ T5980] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.141025][ T5980] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.146786][ T5980] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.276210][T11507] bridge_slave_1: left allmulticast mode [ 139.278081][T11507] bridge_slave_1: left promiscuous mode [ 139.280165][T11507] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.289038][T11507] bridge_slave_0: left allmulticast mode [ 139.290812][T11507] bridge_slave_0: left promiscuous mode [ 139.292913][T11507] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.398171][ T6065] usb 6-1: USB disconnect, device number 7 [ 139.600736][T11507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.606065][T11507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.611538][T11507] bond0 (unregistering): Released all slaves [ 139.702337][T11507] tipc: Disabling bearer [ 139.711103][T11507] tipc: Left network mode [ 139.738083][T11939] chnl_net:caif_netlink_parms(): no params data found [ 139.911481][T11939] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.914127][T11939] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.919073][T11939] bridge_slave_0: entered allmulticast mode [ 139.930724][T11939] bridge_slave_0: entered promiscuous mode [ 139.935087][T11973] program syz.0.2711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.969700][T11939] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.973044][T11939] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.976664][T11939] bridge_slave_1: entered allmulticast mode [ 139.980466][T11939] bridge_slave_1: entered promiscuous mode [ 140.044424][T11939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.047903][T11939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.085964][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2717'. [ 140.113802][T11507] hsr_slave_0: left promiscuous mode [ 140.117784][T11507] hsr_slave_1: left promiscuous mode [ 140.121395][T11507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.124477][T11507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.132584][T11507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.138761][T11507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.151240][T11991] tmpfs: Bad value for 'mpol' [ 140.166731][T11507] veth1_macvtap: left promiscuous mode [ 140.169830][T11507] veth0_macvtap: left promiscuous mode [ 140.172664][T11507] veth1_vlan: left promiscuous mode [ 140.174781][T11507] veth0_vlan: left promiscuous mode [ 140.408113][T12002] devtmpfs: Cannot change global quota limit on remount [ 140.507504][T12006] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 140.993881][ T41] kauditd_printk_skb: 8 callbacks suppressed [ 140.993905][ T41] audit: type=1400 audit(140.823:521): avc: denied { create } for pid=12016 comm="syz.1.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 141.006470][ T41] audit: type=1400 audit(140.833:522): avc: denied { bind } for pid=12016 comm="syz.1.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 141.050745][T12019] program syz.1.2730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.120351][T11507] team0 (unregistering): Port device team_slave_1 removed [ 141.141247][T12023] devtmpfs: Cannot change global quota limit on remount [ 141.228800][ T5981] Bluetooth: hci1: command tx timeout [ 141.233479][T11507] team0 (unregistering): Port device team_slave_0 removed [ 141.934201][T11939] team0: Port device team_slave_0 added [ 141.940430][ T41] audit: type=1800 audit(141.773:523): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.0.2719" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 141.941570][T11990] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 141.947911][T11939] team0: Port device team_slave_1 added [ 141.952339][T11990] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 141.953910][ T41] audit: type=1400 audit(141.773:524): avc: denied { firmware_load } for pid=11988 comm="syz.0.2719" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 141.955938][T11990] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 141.967462][ T41] audit: type=1400 audit(141.793:525): avc: denied { firmware_load } for pid=11988 comm="syz.0.2719" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 142.042653][T11939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.049699][T11939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.060515][T11939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.072327][T11939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.076714][T11939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.088583][T12042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2740'. [ 142.097892][T11939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.183207][T12052] netlink: 'syz.1.2744': attribute type 3 has an invalid length. [ 142.188432][T12052] netlink: 'syz.1.2744': attribute type 1 has an invalid length. [ 142.191081][T12052] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2744'. [ 142.208890][T11939] hsr_slave_0: entered promiscuous mode [ 142.211655][T11939] hsr_slave_1: entered promiscuous mode [ 142.214299][T11939] debugfs: 'hsr0' already exists in 'hsr' [ 142.219638][T11939] Cannot create hsr debugfs directory [ 142.287836][T12066] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 142.291713][T12066] SELinux: failed to load policy [ 142.370401][ T41] audit: type=1400 audit(142.203:526): avc: denied { mount } for pid=12075 comm="syz.1.2755" name="/" dev="autofs" ino=35845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 142.381596][ T41] audit: type=1400 audit(142.203:527): avc: denied { read } for pid=12077 comm="syz.0.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.396422][ T41] audit: type=1400 audit(142.223:528): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 142.511556][T11939] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.928250][T11939] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.954718][T11939] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.964624][T11939] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.062993][ T41] audit: type=1400 audit(142.893:529): avc: denied { create } for pid=12121 comm="syz.2.2769" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.081458][T11939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.091131][ T41] audit: type=1400 audit(142.923:530): avc: denied { unlink } for pid=5982 comm="syz-executor" name="file7" dev="tmpfs" ino=3551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.118523][T11939] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.128262][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.131419][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.143339][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.146917][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.192662][T11939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.196668][T11939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.219467][T12136] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 143.259681][T12140] sp0: Synchronizing with TNC [ 143.316291][ T5981] Bluetooth: hci1: command tx timeout [ 143.361938][T11939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.373050][ T29] IPVS: starting estimator thread 0... [ 143.477391][T12152] IPVS: using max 42 ests per chain, 100800 per kthread [ 143.610918][T11939] veth0_vlan: entered promiscuous mode [ 143.619894][T11939] veth1_vlan: entered promiscuous mode [ 143.654153][T11939] veth0_macvtap: entered promiscuous mode [ 143.662646][T11939] veth1_macvtap: entered promiscuous mode [ 143.697123][T11939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.713557][T11939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.727514][ T1147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.735715][ T1147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.752204][ T1147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.758283][ T1147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.832707][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.837582][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.881482][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.884143][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.084779][T12296] autofs: Bad value for 'fd' [ 145.396287][ T5981] Bluetooth: hci1: command tx timeout [ 145.585933][T11944] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 146.584928][T12339] vivid-001: disconnect [ 146.588506][T12336] vivid-001: reconnect [ 146.625617][T11944] IPVS: starting estimator thread 0... [ 146.726365][T12344] IPVS: using max 22 ests per chain, 52800 per kthread [ 147.013244][T12379] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2869'. [ 147.238421][T12398] vivid-000: disconnect [ 147.239033][T12397] vivid-000: reconnect [ 147.465508][ T5981] Bluetooth: hci1: command tx timeout [ 147.702358][T12440] autofs: Bad value for 'fd' [ 148.059311][ T41] kauditd_printk_skb: 4 callbacks suppressed [ 148.059328][ T41] audit: type=1400 audit(147.893:535): avc: denied { write } for pid=12469 comm="syz.2.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.100669][T12473] nbd: must specify a size in bytes for the device [ 148.330110][ T41] audit: type=1326 audit(148.163:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12476 comm="syz.2.2922" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ee1b8ebe9 code=0x0 [ 148.647682][T12494] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 149.708474][ T41] audit: type=1400 audit(149.543:537): avc: denied { remount } for pid=12542 comm="syz.0.2945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 149.723295][ T41] audit: type=1400 audit(149.553:538): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 149.940446][T12566] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 150.120293][ T41] audit: type=1400 audit(149.953:539): avc: denied { mount } for pid=12577 comm="syz.0.2961" name="/" dev="ramfs" ino=37349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 150.136957][ T41] audit: type=1400 audit(149.973:540): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 150.562765][T12618] ucma_write: process 1728 (syz.1.2979) changed security contexts after opening file descriptor, this is not allowed. [ 150.708826][T12625] ptrace attach of "/syz-executor exec"[12628] was attempted by "/syz-executor exec"[12625] [ 150.992955][T12646] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 151.064041][T12652] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 151.201610][T12665] xt_socket: unknown flags 0x20 [ 151.475140][T12688] xt_socket: unknown flags 0x20 [ 151.835375][ T6038] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 151.988301][ T6038] usb 6-1: Using ep0 maxpacket: 32 [ 151.991267][T12707] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 151.994798][ T6038] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 152.000183][ T6038] usb 6-1: config 0 has no interface number 0 [ 152.005063][ T6038] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 152.010512][ T6038] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 152.014635][ T6038] usb 6-1: Product: syz [ 152.018261][ T6038] usb 6-1: Manufacturer: syz [ 152.022415][ T6038] usb 6-1: config 0 descriptor?? [ 152.343871][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 152.347956][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3030'. [ 152.579052][T12749] PKCS8: Unsupported PKCS#8 version [ 153.289356][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3067'. [ 153.292941][T12794] nbd: illegal input index 1879048192 [ 153.316867][ T29] usb 6-1: USB disconnect, device number 8 [ 153.490898][T12811] devtmpfs: Cannot change global quota limit on remount [ 153.538324][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'. [ 153.857620][T12828] syz_tun: entered promiscuous mode [ 153.859364][T12828] macvtap1: entered promiscuous mode [ 153.864541][T12828] syz_tun: left promiscuous mode [ 153.891902][T12832] devtmpfs: Cannot change global quota limit on remount [ 154.225731][ T29] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 154.292516][T11508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.373167][T11508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.388643][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.393000][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 154.398179][ T29] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 154.401347][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.405895][ T29] usb 7-1: config 0 descriptor?? [ 154.415007][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 154.419718][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 154.435702][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 154.439049][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 154.443576][ T29] usb 7-1: media controller created [ 154.460303][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.489109][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 154.491845][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 154.497503][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input8 [ 154.497657][T11508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.509475][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 154.511997][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 154.525431][ T6053] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 154.546204][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3097'. [ 154.549816][T12878] netem: invalid attributes len -22 [ 154.552154][T12878] netem: change failed [ 154.573170][T11508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.612433][ T5980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.615019][T12841] dvb-usb: bulk message failed: -22 (4/0) [ 154.624913][ T5980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.628947][ T24] usb 7-1: USB disconnect, device number 8 [ 154.631548][ T5980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.639201][ T5980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.649991][ T5980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.682490][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 154.697218][ T6053] usb 10-1: Using ep0 maxpacket: 8 [ 154.700942][ T6053] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.705191][ T6053] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 154.709526][ T6053] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 154.714357][ T6053] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 154.719501][ T6053] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 154.722420][ T6053] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.730241][ T6053] hub 10-1:1.0: bad descriptor, ignoring hub [ 154.732223][ T6053] hub 10-1:1.0: probe with driver hub failed with error -5 [ 154.735421][ T6053] cdc_wdm 10-1:1.0: skipping garbage [ 154.737590][ T6053] cdc_wdm 10-1:1.0: skipping garbage [ 154.741379][ T6053] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 154.744163][ T6053] cdc_wdm 10-1:1.0: Unknown control protocol [ 154.808673][T12883] chnl_net:caif_netlink_parms(): no params data found [ 154.908492][T12883] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.910981][T12883] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.914279][T12883] bridge_slave_0: entered allmulticast mode [ 154.917644][T12883] bridge_slave_0: entered promiscuous mode [ 154.921754][T12883] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.924470][T12883] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.929894][T12883] bridge_slave_1: entered allmulticast mode [ 154.936700][T12883] bridge_slave_1: entered promiscuous mode [ 154.983713][T12883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.991350][T12883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.047278][T12883] team0: Port device team_slave_0 added [ 155.053140][T12883] team0: Port device team_slave_1 added [ 155.103068][T12883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.106292][T12883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.107989][ T10] usb 10-1: USB disconnect, device number 2 [ 155.118389][T12883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.126866][T12883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.130933][T12883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.155745][T12883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.264028][T12883] hsr_slave_0: entered promiscuous mode [ 155.269415][T12883] hsr_slave_1: entered promiscuous mode [ 155.272549][T12883] debugfs: 'hsr0' already exists in 'hsr' [ 155.274958][T12883] Cannot create hsr debugfs directory [ 155.293345][ T41] audit: type=1400 audit(155.123:541): avc: denied { ioctl } for pid=12923 comm="syz.0.3113" path="socket:[37655]" dev="sockfs" ino=37655 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.533622][T12883] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.541644][T12883] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.548858][T12883] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.555466][T12883] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.632447][T12883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.669159][T12883] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.683377][T11507] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.687103][T11507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.698221][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.700942][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.709702][T12946] tmpfs: Bad value for 'mpol' [ 155.745134][T12883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.749084][T12883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.906866][T12883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.992382][T11508] bridge_slave_1: left allmulticast mode [ 155.994231][T11508] bridge_slave_1: left promiscuous mode [ 155.998679][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.004673][T11508] bridge_slave_0: left allmulticast mode [ 156.008114][T11508] bridge_slave_0: left promiscuous mode [ 156.010395][T11508] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.314092][T11508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.320108][T11508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.325689][T11508] bond0 (unregistering): Released all slaves [ 156.389983][T11508] tipc: Disabling bearer [ 156.392663][T11508] tipc: Left network mode [ 156.416600][T12883] veth0_vlan: entered promiscuous mode [ 156.426634][T12883] veth1_vlan: entered promiscuous mode [ 156.467678][T12883] veth0_macvtap: entered promiscuous mode [ 156.473676][T12883] veth1_macvtap: entered promiscuous mode [ 156.492451][T12883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.501889][T12883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.510509][ T1144] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.514318][ T1144] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.518363][ T1144] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.531772][ T1144] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.624878][T11508] hsr_slave_0: left promiscuous mode [ 156.628249][T11508] hsr_slave_1: left promiscuous mode [ 156.630197][T11508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.632483][T11508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.635734][T11508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.638150][T11508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.668961][T11508] veth1_macvtap: left promiscuous mode [ 156.670909][T11508] veth0_macvtap: left promiscuous mode [ 156.673244][T11508] veth1_vlan: left promiscuous mode [ 156.675057][T11508] veth0_vlan: left promiscuous mode [ 156.745629][ T5981] Bluetooth: hci2: command tx timeout [ 157.479727][T11508] team0 (unregistering): Port device team_slave_1 removed [ 157.566307][T11508] team0 (unregistering): Port device team_slave_0 removed [ 158.266132][T11507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.269295][T11507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.305559][T11481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.308311][T11481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.676830][T11508] IPVS: stop unused estimator thread 0... [ 158.845155][ T5981] Bluetooth: hci2: command tx timeout [ 159.038868][T13062] netlink: 'syz.5.3150': attribute type 83 has an invalid length. [ 159.353788][ T41] audit: type=1400 audit(159.183:542): avc: denied { execmem } for pid=13092 comm="syz.5.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 159.410557][T13103] [U] v3f"S/4:XTzWtlW= [ 159.794954][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3183'. [ 159.800314][T13137] openvswitch: netlink: Unknown nsh attribute 0 [ 159.802796][T13137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.961466][T13154] vlan2: entered promiscuous mode [ 159.963163][T13154] bridge0: entered promiscuous mode [ 160.015177][T13157] usb usb9: usbfs: process 13157 (syz.2.3192) did not claim interface 26 before use [ 160.177284][T13178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3202'. [ 160.180391][T13178] tipc: Invalid UDP bearer configuration [ 160.180423][T13178] tipc: Enabling of bearer rejected, failed to enable media [ 160.381687][ T1347] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 160.544508][ T1347] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 160.549380][ T1347] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 160.552907][ T1347] usb 11-1: Product: syz [ 160.554671][ T1347] usb 11-1: Manufacturer: syz [ 160.556886][ T1347] usb 11-1: SerialNumber: syz [ 160.560491][ T1347] usb 11-1: config 0 descriptor?? [ 160.567514][ T1347] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 160.570819][ T1347] dvb-usb: bulk message failed: -22 (2/0) [ 160.577483][ T1347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.582469][ T1347] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 160.586705][ T1347] usb 11-1: media controller created [ 160.604777][ T1347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.774757][T13172] cxusb: i2c rd: len=86 is too big! [ 160.774757][T13172] [ 160.782933][ T1347] cxusb: set interface failed [ 160.785498][ T1347] dvb-usb: bulk message failed: -22 (1/0) [ 160.826747][ T1347] DVB: Unable to find symbol mt352_attach() [ 160.830787][ T1347] dvb-usb: bulk message failed: -22 (5/0) [ 160.833661][ T1347] zl10353_read_register: readreg error (reg=127, ret==-121) [ 160.837596][ T1347] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 160.906763][ T5980] Bluetooth: hci2: command tx timeout [ 160.907568][ T1347] rc_core: IR keymap rc-dvico-mce not found [ 160.912276][ T1347] Registered IR keymap rc-empty [ 160.917804][ T1347] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 160.922620][ T1347] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input9 [ 160.928971][ T1347] dvb-usb: schedule remote query interval to 100 msecs. [ 160.931597][ T1347] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 160.937460][ T1347] usb 11-1: USB disconnect, device number 2 [ 160.959444][T13226] mkiss: ax0: crc mode is auto. [ 160.983331][ T1347] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 160.998388][ T6113] udevd[6113]: setting mode of /dev/bus/usb/011/002 to 020664 failed: No such file or directory [ 161.003122][ T6113] udevd[6113]: setting owner of /dev/bus/usb/011/002 to uid=0, gid=0 failed: No such file or directory [ 161.073185][ T41] audit: type=1400 audit(160.903:543): avc: denied { mounton } for pid=13229 comm="syz.0.3224" path="/764/file0" dev="hugetlbfs" ino=41178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 161.073486][T13230] overlayfs: maximum fs stacking depth exceeded [ 161.349415][ T41] audit: type=1400 audit(161.183:544): avc: denied { name_bind } for pid=13255 comm="syz.2.3237" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 161.429412][ T41] audit: type=1400 audit(161.263:545): avc: denied { read } for pid=13266 comm="syz.6.3244" path="socket:[39581]" dev="sockfs" ino=39581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.443399][ T41] audit: type=1400 audit(161.263:546): avc: denied { create } for pid=13271 comm="syz.2.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.463150][ T41] audit: type=1400 audit(161.283:547): avc: denied { write } for pid=13271 comm="syz.2.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.476373][ T41] audit: type=1400 audit(161.283:548): avc: denied { nlmsg_write } for pid=13271 comm="syz.2.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.564290][T13286] sp0: Synchronizing with TNC [ 161.585096][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3254'. [ 161.880852][ T41] audit: type=1400 audit(161.713:549): avc: denied { read write } for pid=13321 comm="syz.2.3270" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 161.911822][ T41] audit: type=1400 audit(161.713:550): avc: denied { open } for pid=13321 comm="syz.2.3270" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 162.060019][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3280'. [ 162.127186][ T41] audit: type=1400 audit(161.963:551): avc: denied { write } for pid=13351 comm="syz.6.3284" path="socket:[38567]" dev="sockfs" ino=38567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.581258][T13413] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.634861][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3317'. [ 162.751916][ T41] audit: type=1400 audit(162.583:552): avc: denied { remove_name } for pid=13431 comm="syz.0.3322" name="file0" dev="9p" ino=35913878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.790057][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3324'. [ 162.985883][ T5980] Bluetooth: hci2: command 0x0419 tx timeout [ 163.326567][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'. [ 163.361843][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3365'. [ 164.107960][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3403'. [ 164.165598][ T53] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 164.272864][T13619] vlan2: entered promiscuous mode [ 164.274792][T13619] bridge0: entered promiscuous mode [ 164.342730][ T53] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 164.346580][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 164.349353][ T53] usb 7-1: Product: syz [ 164.350713][ T53] usb 7-1: Manufacturer: syz [ 164.352430][ T53] usb 7-1: SerialNumber: syz [ 164.359929][ T53] usb 7-1: config 0 descriptor?? [ 164.364366][ T53] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 164.367251][ T53] dvb-usb: bulk message failed: -22 (2/0) [ 164.371303][ T53] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.379885][ T53] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 164.382784][ T53] usb 7-1: media controller created [ 164.399051][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.571223][T13584] cxusb: i2c rd: len=86 is too big! [ 164.571223][T13584] [ 164.581565][ T53] cxusb: set interface failed [ 164.584049][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 164.619602][ T53] DVB: Unable to find symbol mt352_attach() [ 164.622933][ T53] dvb-usb: bulk message failed: -22 (5/0) [ 164.627463][ T53] zl10353_read_register: readreg error (reg=127, ret==-121) [ 164.630566][ T53] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 164.717034][ T53] rc_core: IR keymap rc-dvico-mce not found [ 164.720434][ T53] Registered IR keymap rc-empty [ 164.723688][ T53] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 164.736063][ T53] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input10 [ 164.746749][ T53] dvb-usb: schedule remote query interval to 100 msecs. [ 164.749534][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 164.767595][ T53] usb 7-1: USB disconnect, device number 9 [ 164.812566][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 165.065406][ T5981] Bluetooth: hci2: command 0x0419 tx timeout [ 165.285525][ T1347] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 165.439077][ T1347] usb 10-1: config 0 has no interfaces? [ 165.457688][ T1347] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 165.462373][ T1347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.465820][T13706] overlayfs: missing 'workdir' [ 165.471975][ T1347] usb 10-1: Product: syz [ 165.474714][ T1347] usb 10-1: Manufacturer: syz [ 165.477750][ T1347] usb 10-1: SerialNumber: syz [ 165.494885][ T1347] usb 10-1: config 0 descriptor?? [ 165.626310][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3457'. [ 165.631235][T13724] ipvlan2: entered promiscuous mode [ 165.636443][T13724] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 165.701318][ T6053] usb 10-1: USB disconnect, device number 3 [ 165.863850][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3468'. [ 165.901427][ T5981] Bluetooth: hci2: Malformed LE Event: 0x1b [ 165.958768][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3477'. [ 166.246739][T13755] ipvlan2: entered promiscuous mode [ 166.249243][T13755] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 166.316332][ T41] kauditd_printk_skb: 7 callbacks suppressed [ 166.316349][ T41] audit: type=1400 audit(166.153:560): avc: denied { bind } for pid=13758 comm="syz.5.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 166.471558][ T41] audit: type=1400 audit(166.303:561): avc: denied { shutdown } for pid=13768 comm="syz.2.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.471868][T13767] tap0: tun_chr_ioctl cmd 1074025676 [ 166.483529][T13767] tap0: owner set to 0 [ 166.910191][T13800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3494'. [ 166.918100][T13800] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.257542][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3507'. [ 167.264851][T13830] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.382287][ T41] audit: type=1400 audit(167.213:562): avc: denied { accept } for pid=13844 comm="syz.6.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 168.337245][ T41] audit: type=1400 audit(168.173:563): avc: denied { read } for pid=13868 comm="syz.5.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.388439][ T41] audit: type=1400 audit(168.223:564): avc: denied { write } for pid=13868 comm="syz.5.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.448255][T13876] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 168.604928][ T41] audit: type=1400 audit(168.433:565): avc: denied { map } for pid=13893 comm="syz.6.3533" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.644029][T13897] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.745459][ T5980] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 168.748497][ T5980] Bluetooth: hci2: command 0x0419 tx timeout [ 169.095854][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.621637][ T6038] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 169.789689][ T6038] usb 7-1: config 0 has no interfaces? [ 169.798297][ T6038] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 169.803118][ T6038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.806595][ T6038] usb 7-1: Product: syz [ 169.807905][ T6038] usb 7-1: Manufacturer: syz [ 169.809398][ T6038] usb 7-1: SerialNumber: syz [ 169.814137][ T6038] usb 7-1: config 0 descriptor?? [ 170.048695][ T6053] usb 7-1: USB disconnect, device number 10 [ 170.125531][ T34] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 170.295603][ T24] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 170.298607][ T34] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.302510][ T34] usb 11-1: config 0 has no interface number 0 [ 170.304627][ T34] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 170.308489][ T34] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 170.312851][ T34] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 170.316920][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.321128][ T34] usb 11-1: config 0 descriptor?? [ 170.323449][T13999] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 170.329632][ T34] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 170.451342][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 170.456221][ T24] usb 10-1: no configurations [ 170.458197][ T24] usb 10-1: can't read configurations, error -22 [ 170.533856][ T5983] usb 11-1: USB disconnect, device number 3 [ 170.650730][T14006] netlink: 'syz.0.3583': attribute type 2 has an invalid length. [ 170.654202][T14006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3583'. [ 171.182842][T14048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3597'. [ 171.399970][ T41] audit: type=1400 audit(171.233:566): avc: denied { bind } for pid=14077 comm="syz.2.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.407037][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3612'. [ 171.412767][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3612'. [ 171.462085][ T41] audit: type=1400 audit(171.293:567): avc: denied { bind } for pid=14088 comm="syz.0.3615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.971380][T14158] batadv_slave_0: entered promiscuous mode [ 171.974134][T14158] erspan0: entered promiscuous mode [ 172.019242][T14164] could not open pipe file descriptor [ 172.037085][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3651'. [ 172.151099][T14174] binder: BC_ACQUIRE_RESULT not supported [ 172.153205][T14174] binder: 14173:14174 ioctl c0306201 2000000003c0 returned -22 [ 172.173388][T14176] raw_sendmsg: syz.5.3657 forgot to set AF_INET. Fix it! [ 172.322810][T14186] tap0: tun_chr_ioctl cmd 1074025675 [ 172.324554][T14186] tap0: persist disabled [ 172.414137][ T41] audit: type=1400 audit(172.243:568): avc: denied { setopt } for pid=14187 comm="syz.5.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.967220][ T41] audit: type=1400 audit(172.803:569): avc: denied { write } for pid=14204 comm="syz.6.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 172.976823][ T41] audit: type=1400 audit(172.803:570): avc: denied { read } for pid=14204 comm="syz.6.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.527208][T14249] erspan0: entered promiscuous mode [ 173.698322][ T41] audit: type=1400 audit(173.533:571): avc: denied { connect } for pid=14270 comm="syz.6.3705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.740508][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3706'. [ 173.743140][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3706'. [ 173.896769][ T6038] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 174.045652][ T6038] usb 7-1: Using ep0 maxpacket: 8 [ 174.050257][ T6038] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 174.053684][ T6038] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 174.059064][ T6038] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 174.062876][ T6038] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 174.067994][ T6038] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 174.071879][ T6038] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.077693][ T6038] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.081416][ T6038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.299921][ T6038] usb 7-1: GET_CAPABILITIES returned 0 [ 174.302465][ T6038] usbtmc 7-1:16.0: can't read capabilities [ 174.435508][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 174.507344][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 174.512408][T14266] usbtmc 7-1:16.0: Unable to send data, error -71 [ 174.520326][ T6038] usb 7-1: USB disconnect, device number 11 [ 174.605347][ T24] usb 10-1: config 0 has no interfaces? [ 174.610943][ T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.615033][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.619270][ T24] usb 10-1: Product: syz [ 174.621238][ T24] usb 10-1: Manufacturer: syz [ 174.626256][ T24] usb 10-1: config 0 descriptor?? [ 174.832632][ T5980] Bluetooth: hci1: Malformed LE Event: 0x0d [ 174.834895][ T6038] usb 10-1: USB disconnect, device number 6 [ 175.555436][ T6038] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 175.715455][ T6038] usb 7-1: Using ep0 maxpacket: 8 [ 175.721275][ T6038] usb 7-1: config 0 has no interfaces? [ 175.728085][ T6038] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 175.731870][ T6038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.736238][ T6038] usb 7-1: Product: syz [ 175.738536][ T6038] usb 7-1: Manufacturer: syz [ 175.740724][ T6038] usb 7-1: SerialNumber: syz [ 175.745905][ T6038] usb 7-1: config 0 descriptor?? [ 175.960077][ T6053] usb 7-1: USB disconnect, device number 12 [ 176.026939][T14334] bond0: option mode: unable to set because the bond device has slaves [ 176.156815][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3738'. [ 176.708812][T14375] batadv_slave_1: entered promiscuous mode [ 176.712962][T14374] batadv_slave_1: left promiscuous mode [ 176.948039][ T41] audit: type=1400 audit(176.783:572): avc: denied { mount } for pid=14392 comm="syz.0.3764" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 177.019935][T14399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3767'. [ 177.097228][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3771'. [ 177.348786][ T41] audit: type=1400 audit(177.173:573): avc: denied { bind } for pid=14430 comm="syz.5.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.358802][ T41] audit: type=1400 audit(177.173:574): avc: denied { listen } for pid=14430 comm="syz.5.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.393275][ T41] audit: type=1400 audit(177.223:575): avc: denied { watch watch_reads } for pid=14438 comm="syz.5.3787" path="pipe:[31589]" dev="pipefs" ino=31589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 177.491527][T14441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3788'. [ 177.552775][T14449] bridge0: port 3(syz_tun) entered blocking state [ 177.556518][T14449] bridge0: port 3(syz_tun) entered disabled state [ 177.558792][T14449] syz_tun: entered allmulticast mode [ 177.568720][T14449] syz_tun: entered promiscuous mode [ 177.571804][T14449] bridge0: port 3(syz_tun) entered blocking state [ 177.574823][T14449] bridge0: port 3(syz_tun) entered forwarding state [ 178.447256][ T41] audit: type=1326 audit(178.283:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.0.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9df8ebe9 code=0x7fc00000 [ 178.796679][ T41] audit: type=1326 audit(178.633:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz.2.3820" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee1b8ebe9 code=0x7fc00000 [ 178.805099][ T41] audit: type=1326 audit(178.633:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz.2.3820" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ee1b8ebe9 code=0x7fc00000 [ 178.813668][ T41] audit: type=1326 audit(178.633:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz.2.3820" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee1b8ebe9 code=0x7fc00000 [ 178.824676][ T41] audit: type=1326 audit(178.633:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz.2.3820" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee1b8ebe9 code=0x7fc00000 [ 178.833623][ T41] audit: type=1326 audit(178.633:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz.2.3820" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee1b8ebe9 code=0x7fc00000 [ 178.900392][T14516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14516 comm=syz.2.3823 [ 179.091383][T14532] bridge0: port 3(syz_tun) entered disabled state [ 179.202389][T14540] bond0: entered promiscuous mode [ 179.204565][T14540] bond_slave_0: entered promiscuous mode [ 179.207751][T14540] bond_slave_1: entered promiscuous mode [ 179.210576][T14540] bond0: left promiscuous mode [ 179.212496][T14540] bond_slave_0: left promiscuous mode [ 179.215164][T14540] bond_slave_1: left promiscuous mode [ 179.340277][T14545] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 179.344807][T14545] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 179.399392][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 179.414601][T14551] batadv_slave_0: entered promiscuous mode [ 179.428147][T14551] batadv_slave_0: left promiscuous mode [ 179.734571][T14581] batadv_slave_1: entered promiscuous mode [ 179.739662][T14580] batadv_slave_1: left promiscuous mode [ 179.862543][T14592] tc_dump_action: action bad kind [ 179.897533][T14596] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.314844][T14632] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 180.324051][T14632] overlayfs: overlapping lowerdir path [ 180.913979][T14670] overlay: filesystem on ./bus not supported [ 181.510559][T14700] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 182.036046][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3929'. [ 182.127519][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'. [ 182.156416][ T5983] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 182.306644][T14758] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.318838][ T5983] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.323583][ T5983] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 182.327433][ T5983] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.330553][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.336320][T14727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.345159][ T5983] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.350801][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3939'. [ 182.403046][T14763] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 182.545590][ T5983] usb 7-1: USB disconnect, device number 13 [ 183.277392][ T41] kauditd_printk_skb: 6 callbacks suppressed [ 183.277410][ T41] audit: type=1400 audit(439.116:588): avc: denied { mount } for pid=14811 comm="syz.0.3964" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 183.479897][T14826] netlink: 'syz.5.3971': attribute type 14 has an invalid length. [ 183.544532][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3973'. [ 183.551043][T14831] netlink: 'syz.5.3973': attribute type 30 has an invalid length. [ 183.559199][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3973'. [ 183.578829][ T41] audit: type=1400 audit(439.416:589): avc: denied { connect } for pid=14832 comm="syz.2.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.596482][ T41] audit: type=1400 audit(439.416:590): avc: denied { read } for pid=14832 comm="syz.2.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.805106][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3985'. [ 183.831456][T14859] netlink: 'syz.5.3986': attribute type 1 has an invalid length. [ 183.868775][T14863] ipvlan3: entered promiscuous mode [ 183.871381][T14863] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 183.874420][T14863] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 184.119735][ T41] audit: type=1400 audit(439.956:591): avc: denied { accept } for pid=14876 comm="syz.2.3994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.415362][ T41] audit: type=1326 audit(440.246:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.0.4004" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c9df8ebe9 code=0x0 [ 185.328183][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'. [ 185.517084][T14940] team0 (unregistering): Port device team_slave_0 removed [ 185.527507][T14940] team0 (unregistering): Port device team_slave_1 removed [ 185.733921][T14967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4037'. [ 185.788125][T14972] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4040'. [ 185.970260][T14989] GUP no longer grows the stack in syz.0.4048 (14989): 200000007000-20000000a000 (200000004000) [ 185.975127][T14989] CPU: 1 UID: 0 PID: 14989 Comm: syz.0.4048 Not tainted syzkaller #0 PREEMPT(full) [ 185.975157][T14989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.975170][T14989] Call Trace: [ 185.975177][T14989] [ 185.975186][T14989] dump_stack_lvl+0x16c/0x1f0 [ 185.975235][T14989] gup_vma_lookup+0x1d2/0x220 [ 185.975263][T14989] __get_user_pages+0x243/0x34a0 [ 185.975298][T14989] ? xsk_setsockopt+0x6db/0x9a0 [ 185.975326][T14989] ? do_sock_setsockopt+0xf0/0x1d0 [ 185.975350][T14989] ? __sys_setsockopt+0x1a0/0x230 [ 185.975368][T14989] ? __x64_sys_setsockopt+0xbd/0x160 [ 185.975387][T14989] ? __pfx___get_user_pages+0x10/0x10 [ 185.975420][T14989] __gup_longterm_locked+0x2dd/0x17e0 [ 185.975447][T14989] ? __lock_acquire+0xab0/0x1ce0 [ 185.975482][T14989] ? __pfx___gup_longterm_locked+0x10/0x10 [ 185.975523][T14989] pin_user_pages+0x13c/0x160 [ 185.975550][T14989] ? __pfx_pin_user_pages+0x10/0x10 [ 185.975580][T14989] ? xdp_umem_create+0x652/0x1270 [ 185.975602][T14989] xdp_umem_create+0x73c/0x1270 [ 185.975653][T14989] xsk_setsockopt+0x6db/0x9a0 [ 185.975679][T14989] ? __pfx_xsk_setsockopt+0x10/0x10 [ 185.975701][T14989] ? find_held_lock+0x2b/0x80 [ 185.975723][T14989] ? selinux_socket_setsockopt+0x6a/0x80 [ 185.975747][T14989] ? __pfx_xsk_setsockopt+0x10/0x10 [ 185.975773][T14989] do_sock_setsockopt+0xf0/0x1d0 [ 185.975800][T14989] __sys_setsockopt+0x1a0/0x230 [ 185.975832][T14989] __x64_sys_setsockopt+0xbd/0x160 [ 185.975852][T14989] ? do_syscall_64+0x91/0x4c0 [ 185.975875][T14989] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.975895][T14989] do_syscall_64+0xcd/0x4c0 [ 185.975918][T14989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.975937][T14989] RIP: 0033:0x7f6c9df8ebe9 [ 185.975954][T14989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.975972][T14989] RSP: 002b:00007f6c9eed0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.975992][T14989] RAX: ffffffffffffffda RBX: 00007f6c9e1c5fa0 RCX: 00007f6c9df8ebe9 [ 185.976005][T14989] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 185.976017][T14989] RBP: 00007f6c9e011e19 R08: 0000000000000020 R09: 0000000000000000 [ 185.976028][T14989] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 185.976039][T14989] R13: 00007f6c9e1c6038 R14: 00007f6c9e1c5fa0 R15: 00007ffd7bd650f8 [ 185.976065][T14989] [ 186.009068][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4050'. [ 186.464339][ T41] audit: type=1400 audit(442.296:593): avc: denied { read } for pid=15014 comm="syz.5.4060" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=35913823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 186.471605][T15017] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 186.625457][ T41] audit: type=1400 audit(442.456:594): avc: denied { read } for pid=15030 comm="syz.5.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.023471][T15070] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 188.142318][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4096'. [ 188.389901][ T41] audit: type=1400 audit(444.216:595): avc: denied { mounton } for pid=15104 comm="syz.5.4102" path="/357/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 188.416568][ T41] audit: type=1400 audit(444.256:596): avc: denied { unmount } for pid=11939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 188.489981][T15113] netlink: 'syz.0.4107': attribute type 14 has an invalid length. [ 189.156581][ T5981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.161613][ T5981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.169456][ T5981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.178630][ T5981] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.183226][ T5981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.230425][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4116'. [ 189.234658][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4116'. [ 189.376837][ T1144] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.419214][T15125] chnl_net:caif_netlink_parms(): no params data found [ 189.487393][ T1144] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.517125][ T839] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 189.559667][T15125] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.562136][T15125] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.564663][T15125] bridge_slave_0: entered allmulticast mode [ 189.567690][T15125] bridge_slave_0: entered promiscuous mode [ 189.571037][T15125] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.573347][T15125] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.576223][T15125] bridge_slave_1: entered allmulticast mode [ 189.579513][T15125] bridge_slave_1: entered promiscuous mode [ 189.617490][ T1144] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.655373][T15125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.663763][T15125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.667436][ T839] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.670574][ T839] usb 10-1: config 0 has no interface number 0 [ 189.672584][ T839] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 189.676436][ T839] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 189.680927][ T839] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.684082][ T839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.689472][ T839] usb 10-1: config 0 descriptor?? [ 189.694178][T15136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 189.705056][ T839] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 189.733025][ T1144] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.743088][T15125] team0: Port device team_slave_0 added [ 189.750600][T15125] team0: Port device team_slave_1 added [ 189.799824][T15125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.803823][T15125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.816328][T15125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.822179][T15125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.824934][T15125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.838653][T15125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.906266][ T839] usb 10-1: USB disconnect, device number 7 [ 189.919396][T15125] hsr_slave_0: entered promiscuous mode [ 189.922463][T15125] hsr_slave_1: entered promiscuous mode [ 189.925559][T15125] debugfs: 'hsr0' already exists in 'hsr' [ 189.928145][T15125] Cannot create hsr debugfs directory [ 190.055678][ T1144] bridge_slave_1: left allmulticast mode [ 190.058414][ T1144] bridge_slave_1: left promiscuous mode [ 190.061165][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.067698][ T1144] bridge_slave_0: left allmulticast mode [ 190.070092][ T1144] bridge_slave_0: left promiscuous mode [ 190.074606][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.454710][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4128'. [ 190.469270][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.474230][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.479215][ T1144] bond0 (unregistering): Released all slaves [ 190.841758][T15125] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 190.852816][T15125] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 190.860707][T15125] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 190.868016][T15125] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 190.912424][ T1144] hsr_slave_0: left promiscuous mode [ 190.915106][ T1144] hsr_slave_1: left promiscuous mode [ 190.920146][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.922911][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.926523][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.930675][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.973486][ T1144] veth1_macvtap: left promiscuous mode [ 190.976316][ T1144] veth0_macvtap: left promiscuous mode [ 190.978869][ T1144] veth1_vlan: left promiscuous mode [ 190.981254][ T1144] veth0_vlan: left promiscuous mode [ 191.226910][ T5980] Bluetooth: hci2: command tx timeout [ 192.072603][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 192.212982][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 193.029812][T15186] bond0: option mode: unable to set because the bond device has slaves [ 193.105433][T15125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.132437][T15125] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.149532][T11494] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.152719][T11494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.167477][T11494] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.170720][T11494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.234434][T15125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.242334][T15125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.308614][ T5980] Bluetooth: hci2: command tx timeout [ 193.451008][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4140'. [ 193.512751][T15125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.569459][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4151'. [ 193.682511][T15125] veth0_vlan: entered promiscuous mode [ 193.690360][T15125] veth1_vlan: entered promiscuous mode [ 193.709575][T15125] veth0_macvtap: entered promiscuous mode [ 193.718187][T15125] veth1_macvtap: entered promiscuous mode [ 193.730080][T15125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.737362][T15125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.744644][T11508] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.750179][T11508] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.758913][T11508] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.762523][T11508] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.810106][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.817339][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.833338][T11494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.837800][T11494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.853348][ T41] audit: type=1400 audit(449.686:597): avc: denied { mounton } for pid=15125 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 193.972223][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4142'. [ 194.984449][T15262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4162'. [ 195.017085][T15262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4162'. [ 195.339707][T15285] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4171'. [ 195.395347][ T5980] Bluetooth: hci2: command tx timeout [ 195.494212][T15297] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4168'. [ 195.593804][T15304] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4172'. [ 195.646271][T15308] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 195.705492][T15312] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4175'. [ 197.465558][ T5980] Bluetooth: hci2: command tx timeout [ 199.709316][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.712107][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.717788][ T838] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 203.746664][T15355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4193'. [ 203.899446][ T838] usb 12-1: config 0 has no interfaces? [ 203.903722][ T838] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.913519][ T838] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.919956][ T838] usb 12-1: Product: syz [ 203.922022][ T838] usb 12-1: Manufacturer: syz [ 203.926950][ T838] usb 12-1: config 0 descriptor?? [ 203.983319][T15374] __vm_enough_memory: pid: 15374, comm: syz.0.4202, bytes: 21199714799616 not enough memory for the allocation [ 204.136024][ T5980] Bluetooth: hci2: Malformed LE Event: 0x0d [ 204.139678][ T838] usb 12-1: USB disconnect, device number 2 [ 204.149870][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4206'. [ 204.157249][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4206'. [ 204.161122][T15385] netlink: 'syz.5.4206': attribute type 19 has an invalid length. [ 204.213989][T15391] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4208'. [ 204.348598][ T41] audit: type=1400 audit(460.186:598): avc: denied { read } for pid=15398 comm="syz.5.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.541878][ T41] audit: type=1400 audit(460.376:599): avc: denied { ioctl } for pid=15409 comm="syz.0.4216" path="socket:[51221]" dev="sockfs" ino=51221 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.686761][T15415] 9pnet_rdma: rdma_create_trans (15415): problem binding to privport: 13 [ 204.694805][ T41] audit: type=1400 audit(460.526:600): avc: denied { mounton } for pid=15414 comm="syz.0.4218" path="/1051/bus" dev="tmpfs" ino=5338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 204.729515][T15419] netlink: 'syz.5.4220': attribute type 32 has an invalid length. [ 204.732538][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4220'. [ 204.747716][T15419] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 204.857966][T15434] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4227'. [ 205.025509][T15444] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 205.093414][T15449] bond0: option ad_select: unable to set because the bond device is up [ 205.334501][ T41] audit: type=1400 audit(461.166:601): avc: denied { connect } for pid=15469 comm="syz.5.4240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.342099][ T41] audit: type=1400 audit(461.176:602): avc: denied { bind } for pid=15469 comm="syz.5.4240" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.352250][ T41] audit: type=1400 audit(461.176:603): avc: denied { name_bind } for pid=15469 comm="syz.5.4240" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 205.364550][ T41] audit: type=1400 audit(461.176:604): avc: denied { node_bind } for pid=15469 comm="syz.5.4240" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 205.577811][T15489] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4247'. [ 205.854243][ T5981] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.860478][ T5981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.866423][ T5981] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.874068][ T5981] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.879696][ T5981] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.149450][T11507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.167014][ T41] audit: type=1400 audit(461.996:605): avc: denied { read } for pid=15536 comm="syz.0.4269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.177972][ T41] audit: type=1400 audit(462.016:606): avc: denied { ioctl } for pid=15538 comm="syz.7.4268" path="socket:[50728]" dev="sockfs" ino=50728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.246142][T11507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.270632][T15502] chnl_net:caif_netlink_parms(): no params data found [ 206.285166][T15549] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4273'. [ 206.439896][T11507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.576295][T15502] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.579142][T15502] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.581810][T15502] bridge_slave_0: entered allmulticast mode [ 206.584868][T15502] bridge_slave_0: entered promiscuous mode [ 206.629820][T11507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.649073][T15502] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.651388][T15502] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.653763][T15502] bridge_slave_1: entered allmulticast mode [ 206.659075][T15502] bridge_slave_1: entered promiscuous mode [ 206.774585][T15502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.792532][T15502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.814255][ T41] audit: type=1400 audit(463.649:607): avc: denied { read } for pid=15595 comm="syz.0.4292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.893218][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4293'. [ 206.902422][T15502] team0: Port device team_slave_0 added [ 206.907986][T15502] team0: Port device team_slave_1 added [ 206.993045][T15502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.997519][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.016638][T15502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.023779][T15502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.027696][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.046144][T15502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.127358][T15502] hsr_slave_0: entered promiscuous mode [ 207.129956][T15502] hsr_slave_1: entered promiscuous mode [ 207.132112][T15502] debugfs: 'hsr0' already exists in 'hsr' [ 207.134103][T15502] Cannot create hsr debugfs directory [ 207.300347][T11507] bridge_slave_1: left allmulticast mode [ 207.302212][T11507] bridge_slave_1: left promiscuous mode [ 207.304665][T11507] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.326063][T11507] bridge_slave_0: left allmulticast mode [ 207.328594][T11507] bridge_slave_0: left promiscuous mode [ 207.333183][T11507] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.955989][ T5981] Bluetooth: hci4: command tx timeout [ 208.163391][T11507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.168015][T11507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.173171][T11507] bond0 (unregistering): Released all slaves [ 208.185091][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4324'. [ 208.309444][T15677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.312661][T15677] IPv6: NLM_F_CREATE should be set when creating new route [ 208.315659][T15677] IPv6: NLM_F_CREATE should be set when creating new route [ 208.329403][T11507] tipc: Disabling bearer [ 208.332580][T11507] tipc: Left network mode [ 208.337152][T15677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.480416][T15502] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 208.491399][T15502] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 208.676085][T15502] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 208.712676][T15502] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 208.913008][T15502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.931917][T15502] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.007346][T11507] hsr_slave_0: left promiscuous mode [ 209.010190][T11507] hsr_slave_1: left promiscuous mode [ 209.012664][T11507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.015796][T11507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.027782][T11507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.030814][T11507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.069521][T11507] veth1_macvtap: left promiscuous mode [ 209.072065][T11507] veth0_macvtap: left promiscuous mode [ 209.074504][T11507] veth1_vlan: left promiscuous mode [ 209.078414][T11507] veth0_vlan: left promiscuous mode [ 209.181895][T11507] pimreg3 (unregistering): left allmulticast mode [ 210.035483][ T5981] Bluetooth: hci4: command tx timeout [ 211.015691][T15734] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 211.039201][T11505] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.042328][T11505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.089808][T11505] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.092425][T11505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.097962][T15740] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 211.140222][T15744] netlink: 'syz.5.4352': attribute type 63 has an invalid length. [ 211.180906][T15502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.375112][T15770] fuse: Bad value for 'fd' [ 211.389923][T15502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.477711][T15777] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.770557][T15502] veth0_vlan: entered promiscuous mode [ 211.804147][T15502] veth1_vlan: entered promiscuous mode [ 211.870267][T15502] veth0_macvtap: entered promiscuous mode [ 211.878123][T15502] veth1_macvtap: entered promiscuous mode [ 211.918011][T15502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.934107][T15502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.945817][T11481] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.004662][ T91] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.015905][ T91] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.023956][ T91] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.099034][T15838] sch_fq: defrate 0 ignored. [ 212.099975][ T41] audit: type=1400 audit(468.939:608): avc: denied { name_bind } for pid=15835 comm="syz.7.4382" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 212.106212][ T5981] Bluetooth: hci4: command tx timeout [ 212.126127][T11507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.129866][T11507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.173538][ T5981] Bluetooth: hci2: ISO packet too small [ 212.187620][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.191327][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.396937][T15865] __nla_validate_parse: 1 callbacks suppressed [ 212.397851][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4394'. [ 212.545022][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4400'. [ 212.950162][T15906] netlink: 'syz.7.4413': attribute type 10 has an invalid length. [ 212.952704][T15906] netlink: 'syz.7.4413': attribute type 28 has an invalid length. [ 212.955181][T15906] netlink: 'syz.7.4413': attribute type 5 has an invalid length. [ 212.958709][T15906] netlink: 'syz.7.4413': attribute type 8 has an invalid length. [ 212.962200][T15906] netlink: 'syz.7.4413': attribute type 31 has an invalid length. [ 213.555759][ T54] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 213.717774][ T54] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 213.722560][ T54] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 213.726924][ T54] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.738572][ T54] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 213.742450][ T54] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 213.747038][ T54] usb 13-1: Product: syz [ 213.748867][ T54] usb 13-1: Manufacturer: syz [ 213.750974][ T54] usb 13-1: SerialNumber: syz [ 213.967969][ T54] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 214.167254][ T41] audit: type=1400 audit(471.009:609): avc: denied { read write } for pid=15925 comm="syz.8.4422" name="lp0" dev="devtmpfs" ino=3145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 214.169364][ T10] usb 13-1: USB disconnect, device number 2 [ 214.179591][ T41] audit: type=1400 audit(471.009:610): avc: denied { open } for pid=15925 comm="syz.8.4422" path="/dev/usb/lp0" dev="devtmpfs" ino=3145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 214.182656][ T10] usblp0: removed [ 214.195420][ T5981] Bluetooth: hci4: command tx timeout [ 214.310782][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4430'. [ 214.404558][T15957] batadv_slave_1: entered promiscuous mode [ 214.408386][T15957] batadv_slave_1: left promiscuous mode [ 214.454071][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4438'. [ 214.458983][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4438'. [ 214.461831][T15962] netlink: 'syz.5.4438': attribute type 7 has an invalid length. [ 215.011458][T15996] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4453'. [ 215.016742][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4453'. [ 215.227798][T16017] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 215.685684][T15302] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 215.835531][T15302] usb 13-1: Using ep0 maxpacket: 32 [ 215.839794][T15302] usb 13-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 215.844309][T15302] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.851098][T15302] usb 13-1: config 0 descriptor?? [ 215.860508][T15302] as10x_usb: device has been detected [ 215.863774][T15302] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 215.874322][T15302] usb 13-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 215.896087][ T41] audit: type=1400 audit(472.729:611): avc: denied { firmware_load } for pid=15302 comm="kworker/3:5" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 215.897674][T15302] as10x_usb: error during firmware upload part1 [ 215.907755][T15302] Registered device nBox DVB-T Dongle [ 215.968138][T16037] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4472'. [ 216.011659][T16043] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 216.076172][T16051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4479'. [ 216.076294][ T6037] usb 13-1: USB disconnect, device number 3 [ 216.085024][T16051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4479'. [ 216.119001][T16055] netlink: 'syz.7.4481': attribute type 1 has an invalid length. [ 216.140439][ T6037] Unregistered device nBox DVB-T Dongle [ 216.141441][ T6037] as10x_usb: device has been disconnected [ 216.179560][T16064] netlink: 'syz.5.4485': attribute type 1 has an invalid length. [ 216.182708][T16064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.228482][T16068] bpf: Bad value for 'uid' [ 216.300957][T16076] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 216.350999][ T41] audit: type=1400 audit(473.189:612): avc: denied { create } for pid=16080 comm="syz.0.4493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 216.366656][ T41] audit: type=1400 audit(473.199:613): avc: denied { sys_admin } for pid=16080 comm="syz.0.4493" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 216.574063][T16102] dvmrp1: entered allmulticast mode [ 216.727733][ T41] audit: type=1400 audit(473.569:614): avc: denied { create } for pid=16117 comm="syz.5.4509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 216.738313][ T41] audit: type=1400 audit(473.569:615): avc: denied { getopt } for pid=16117 comm="syz.5.4509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 217.055398][ T6061] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 217.208293][ T6061] usb 13-1: config 0 has no interfaces? [ 217.210755][ T6061] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.216750][ T6061] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.231046][ T6061] usb 13-1: config 0 descriptor?? [ 217.441157][ T6061] usb 13-1: USB disconnect, device number 4 [ 218.209213][T16184] __nla_validate_parse: 3 callbacks suppressed [ 218.209230][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4539'. [ 218.623177][T16229] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.627034][T16229] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.957306][ T41] audit: type=1400 audit(475.789:616): avc: denied { map } for pid=16269 comm="syz.5.4579" path="socket:[55479]" dev="sockfs" ino=55479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 219.173184][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4589'. [ 219.181198][T16292] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4589'. [ 219.198757][T16297] 9p: Unknown uid 00000000004294967295 [ 219.312167][T16310] lo: Master is either lo or non-ether device [ 219.347120][T16314] netlink: 'syz.0.4600': attribute type 1 has an invalid length. [ 219.513336][T16331] loop7: detected capacity change from 0 to 524255232 [ 219.531381][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4609'. [ 219.714908][ T41] audit: type=1400 audit(476.549:617): avc: denied { bind } for pid=16356 comm="syz.7.4621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 220.020809][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4638'. [ 220.053064][T16395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4639'. [ 220.058895][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'. [ 220.234832][T16413] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 220.508523][T16442] : entered promiscuous mode [ 220.530058][T16442] : left promiscuous mode [ 220.564928][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4663'. [ 221.114930][ T41] audit: type=1400 audit(477.949:618): avc: denied { create } for pid=16501 comm="syz.8.4687" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 221.140267][ T41] audit: type=1400 audit(477.979:619): avc: denied { read write open } for pid=16501 comm="syz.8.4687" path="/60/file0/bus" dev="9p" ino=35913867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.184651][T16511] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.4691'. [ 221.426172][T16534] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4702'. [ 221.486490][T16542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.974285][ T41] audit: type=1400 audit(478.809:620): avc: denied { setopt } for pid=16599 comm="syz.8.4735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.990767][T16605] netlink: 'syz.7.4736': attribute type 11 has an invalid length. [ 222.327062][T16636] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 222.502417][T16649] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.649637][ T41] audit: type=1400 audit(479.489:621): avc: denied { read } for pid=16665 comm="syz.8.4762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.703991][ T41] audit: type=1400 audit(479.539:622): avc: denied { setopt } for pid=16665 comm="syz.8.4762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.894947][T16689] openvswitch: netlink: IPv4 tunnel dst address is zero [ 223.095980][T16715] Driver unsupported XDP return value 0 on prog (id 187) dev N/A, expect packet loss! [ 223.294061][T16738] batman_adv: batadv0: Adding interface: ipvlan2 [ 223.299452][T16738] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.311652][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.320274][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.324621][T16738] batman_adv: batadv0: Interface activated: ipvlan2 [ 223.561600][T16765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=16765 comm=syz.5.4801 [ 223.758683][ T41] audit: type=1400 audit(480.599:623): avc: denied { create } for pid=16786 comm="syz.5.4809" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 224.179973][ T41] audit: type=1400 audit(481.019:624): avc: denied { create } for pid=16816 comm="syz.8.4824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 224.188063][ T41] audit: type=1400 audit(481.019:625): avc: denied { listen } for pid=16816 comm="syz.8.4824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 224.194584][ T41] audit: type=1400 audit(481.019:626): avc: denied { accept } for pid=16816 comm="syz.8.4824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 224.241245][ T41] audit: type=1400 audit(481.079:627): avc: denied { ioctl } for pid=16825 comm="syz.5.4828" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 224.356919][ T41] audit: type=1400 audit(481.199:628): avc: denied { ioctl } for pid=16837 comm="syz.5.4833" path="socket:[56140]" dev="sockfs" ino=56140 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.623788][T16858] geneve2: entered promiscuous mode [ 224.627518][T16858] geneve2: entered allmulticast mode [ 224.788024][T16872] openvswitch: netlink: IP tunnel TTL not specified. [ 224.861335][T16882] __nla_validate_parse: 9 callbacks suppressed [ 224.861357][T16882] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4853'. [ 224.864131][T16880] vxcan1: tx address claim with dlc 0 [ 224.868124][T16882] ip6gretap0: entered promiscuous mode [ 224.879329][T16882] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4853'. [ 225.346392][T16925] netlink: 'syz.5.4873': attribute type 29 has an invalid length. [ 225.388257][T16930] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4875'. [ 225.391134][T16930] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4875'. [ 225.943394][ T41] audit: type=1400 audit(482.779:629): avc: denied { ioctl } for pid=16977 comm="syz.5.4898" path="socket:[56217]" dev="sockfs" ino=56217 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 225.958704][T16980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4899'. [ 226.019050][T16992] MPI: mpi too large (16392 bits) [ 226.182721][T17020] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4918'. [ 226.252489][T17026] misc userio: Begin command sent, but we're already running [ 226.384806][T17036] sctp: Trying to GSO but underlying device doesn't support it. [ 226.431948][T17039] openvswitch: netlink: IP tunnel TTL not specified. [ 226.634490][T17060] veth1_to_batadv: entered promiscuous mode [ 226.902396][T17094] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4952'. [ 226.977040][ T41] audit: type=1400 audit(483.819:630): avc: denied { getopt } for pid=17103 comm="syz.0.4958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.047633][T17116] Attempt to restore checkpoint with obsolete wellknown handles [ 227.098995][T17126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4967'. [ 227.134423][T17129] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4970'. [ 227.161705][T17132] netlink: 'syz.7.4972': attribute type 4 has an invalid length. [ 227.212798][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4975'. [ 227.342659][ T41] audit: type=1326 audit(484.179:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.7.4988" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27a0d8ebe9 code=0x0 [ 228.287558][T17247] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 228.291497][T17247] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 228.377623][T17255] tmpfs: Invalid uid '0x00000000ffffffff' [ 228.590315][T17278] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 228.660652][ T41] audit: type=1400 audit(485.499:632): avc: denied { lock } for pid=17283 comm="syz.7.5041" path="socket:[60506]" dev="sockfs" ino=60506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.839216][ T41] audit: type=1400 audit(485.679:633): avc: denied { nlmsg_read } for pid=17305 comm="syz.8.5051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.868751][T17308] tmpfs: Invalid gid '0x00000000ffffffff' [ 229.586206][T17381] fuse: Bad value for 'fd' [ 229.661445][T17394] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 229.808404][T17412] netlink: 'syz.7.5099': attribute type 2 has an invalid length. [ 229.879134][ T41] kauditd_printk_skb: 1 callbacks suppressed [ 229.879152][ T41] audit: type=1400 audit(486.719:635): avc: denied { override_creds } for pid=17419 comm="syz.7.5103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 229.915374][T15268] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 230.078290][T15268] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 230.083271][T15268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.087762][T17437] __nla_validate_parse: 9 callbacks suppressed [ 230.087775][T17437] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5111'. [ 230.087783][T15268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.089948][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5111'. [ 230.094268][T15268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 230.095975][T15268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.108963][T15268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.112837][T15268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 230.117083][T15268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.120121][T15268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.124028][T15268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 230.128213][T15268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.131742][T15268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.136570][T15268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 230.140024][T15268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.142523][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5113'. [ 230.143104][T15268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.151725][T15268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 230.154861][T15268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.160207][T15268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.163937][T15268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 230.167507][T15268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.170909][T15268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.175722][T15268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 230.178735][T15268] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.181948][T15268] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.185999][T15268] usb 10-1: config 0 interface 0 has no altsetting 0 [ 230.191131][T15268] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 230.194143][T15268] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 230.197016][T15268] usb 10-1: Product: syz [ 230.198660][T15268] usb 10-1: Manufacturer: syz [ 230.200508][T15268] usb 10-1: SerialNumber: syz [ 230.208130][T15268] usb 10-1: config 0 descriptor?? [ 230.214361][T15268] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 230.325962][ T5981] Bluetooth: hci1: link tx timeout [ 230.328913][ T5981] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 230.334854][ T5981] Bluetooth: hci1: link tx timeout [ 230.337926][ T5981] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 230.388924][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5123'. [ 230.394690][T17461] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5123'. [ 230.444976][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5125'. [ 230.448772][T17465] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5125'. [ 230.482761][ C1] usb 10-1: yurex_control_callback - control failed: -71 [ 230.482956][ T5983] usb 10-1: USB disconnect, device number 8 [ 230.491123][ T5983] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 230.799955][T17496] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5139'. [ 230.947947][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5144'. [ 231.128386][T17520] netlink: 'syz.7.5150': attribute type 9 has an invalid length. [ 231.131678][T17520] netlink: 211988 bytes leftover after parsing attributes in process `syz.7.5150'. [ 232.345801][ T5981] Bluetooth: hci1: command 0x0406 tx timeout [ 232.758634][T17634] veth0_vlan: left promiscuous mode [ 233.095346][ T838] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 233.245451][ T838] usb 12-1: Using ep0 maxpacket: 8 [ 233.249983][ T838] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.255109][ T838] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.260420][ T838] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.264880][ T838] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.270541][ T838] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.276127][ T838] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.482277][ T41] audit: type=1400 audit(490.319:636): avc: denied { ioctl } for pid=17674 comm="syz.8.5223" path="socket:[59280]" dev="sockfs" ino=59280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.513258][ T838] usb 12-1: GET_CAPABILITIES returned 0 [ 233.518216][ T838] usbtmc 12-1:16.0: can't read capabilities [ 233.714726][ T53] usb 12-1: USB disconnect, device number 3 [ 234.073318][T17737] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.076949][T17737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.427304][ T5981] Bluetooth: hci1: command 0x0406 tx timeout [ 235.255723][ T24] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 235.406339][T17824] netlink: 'syz.7.5299': attribute type 10 has an invalid length. [ 235.419880][T17824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.426965][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 235.427401][T17824] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 235.434059][ T24] usb 13-1: config 0 has no interfaces? [ 235.439741][ T24] usb 13-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 235.443539][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.443706][T17824] netlink: 'syz.7.5299': attribute type 10 has an invalid length. [ 235.449007][ T24] usb 13-1: Product: syz [ 235.452247][T17824] __nla_validate_parse: 5 callbacks suppressed [ 235.452263][T17824] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5299'. [ 235.454011][ T24] usb 13-1: Manufacturer: syz [ 235.454032][ T24] usb 13-1: SerialNumber: syz [ 235.456611][ T24] usb 13-1: config 0 descriptor?? [ 235.457977][T17824] batadv0: entered promiscuous mode [ 235.469561][T17824] batadv0: entered allmulticast mode [ 235.474424][T17824] bond0: (slave batadv0): Releasing backup interface [ 235.479735][T17824] bridge0: port 3(batadv0) entered blocking state [ 235.482112][T17824] bridge0: port 3(batadv0) entered disabled state [ 235.537426][T11507] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 235.542537][T11507] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 235.663924][ T24] usb 13-1: USB disconnect, device number 5 [ 236.414340][ T41] audit: type=1400 audit(493.249:637): avc: denied { append } for pid=17851 comm="syz.8.5305" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 236.436900][ T5980] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 236.493484][ T41] audit: type=1326 audit(493.329:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17860 comm="syz.5.5309" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb550d8ebe9 code=0x0 [ 236.618396][T17870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5313'. [ 236.743962][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5320'. [ 236.878265][T17894] tap0: tun_chr_ioctl cmd 1074025672 [ 236.880199][T17894] tap0: ignored: set checksum enabled [ 237.492069][T17937] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.5345'. [ 237.515580][T15268] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 237.651619][ T41] audit: type=1400 audit(494.489:639): avc: denied { ioctl } for pid=17943 comm="syz.5.5349" path="socket:[60999]" dev="sockfs" ino=60999 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 237.687776][T15268] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.692834][T15268] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.696783][T15268] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.700809][T15268] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.703645][T15268] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.709959][T15268] usb 12-1: config 0 descriptor?? [ 238.030769][T15453] IPVS: starting estimator thread 0... [ 238.031309][T17968] IPVS: sed: FWM 3 0x00000003 - no destination available [ 238.136207][T17969] IPVS: using max 41 ests per chain, 98400 per kthread [ 238.141018][T15268] hid_parser_main: 224 callbacks suppressed [ 238.141041][T15268] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.148628][T15268] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.156122][T15268] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.159447][T15268] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.162556][T15268] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.165986][T15268] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.169156][T15268] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.172253][T15268] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.175519][T15268] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.182889][T15268] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.201986][T15268] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 238.238980][ T41] audit: type=1400 audit(495.079:640): avc: denied { mounton } for pid=17979 comm="syz.8.5366" path="/262/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 238.390626][ T1347] usb 12-1: USB disconnect, device number 4 [ 238.566976][T17997] netlink: 27 bytes leftover after parsing attributes in process `syz.8.5374'. [ 238.784072][ T41] audit: type=1400 audit(751.618:641): avc: denied { read } for pid=18012 comm="syz.8.5382" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.934350][T18023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5388'. [ 238.982886][T18033] netlink: 'syz.5.5392': attribute type 8 has an invalid length. [ 239.013727][T18037] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5394'. [ 239.018599][T18037] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5394'. [ 239.021575][T18037] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5394'. [ 239.024736][T18037] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5394'. [ 239.057357][T18041] Dead loop on virtual device ip6_vti0, fix it urgently! [ 239.065571][T18043] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.627816][T18094] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 239.629921][T18093] netlink: 'syz.5.5419': attribute type 6 has an invalid length. [ 239.636643][T18093] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.759205][T18100] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.858534][T18100] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.957536][T18100] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.052916][T18100] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.207706][T11508] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.228265][ T91] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.252006][ T91] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.271398][T11508] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.642061][T18173] __nla_validate_parse: 4 callbacks suppressed [ 240.642081][T18173] netlink: 360 bytes leftover after parsing attributes in process `syz.0.5456'. [ 241.134784][T18218] netlink: 75 bytes leftover after parsing attributes in process `syz.5.5477'. [ 241.331804][T18234] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5482'. [ 241.417051][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5486'. [ 241.425685][T18241] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5487'. [ 241.468135][T18245] vxcan1: tx address claim with dest, not broadcast [ 242.133979][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5509'. [ 242.371588][T18311] 9p: Unknown access argument 18446744073709551615: -34 [ 242.426812][T18317] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 242.602657][T18331] netlink: 'syz.7.5528': attribute type 10 has an invalid length. [ 242.610081][T18331] hsr_slave_0: left promiscuous mode [ 242.612728][T18331] hsr_slave_1: left promiscuous mode [ 243.368743][T18369] loop7: detected capacity change from 0 to 7 [ 243.373207][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.376875][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.379718][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.383580][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.389426][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.393537][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.398907][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.402933][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.406978][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.411392][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.417122][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.421022][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.487732][T18372] Invalid logical block size (6) [ 243.493035][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.496923][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.500536][T18369] ldm_validate_partition_table(): Disk read failed. [ 243.503803][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.508081][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.511452][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.515441][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.520531][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.525646][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.529945][T18369] Dev loop7: unable to read RDB block 0 [ 243.533547][T18369] loop7: unable to read partition table [ 243.536351][T18369] loop7: partition table beyond EOD, truncated [ 243.538868][T18369] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 243.643225][T18393] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.5557'. [ 243.776567][T18403] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 243.867348][T18409] netlink: 'syz.5.5564': attribute type 2 has an invalid length. [ 243.943885][T18413] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.5567'. [ 244.096972][T18430] dvmrp17: entered allmulticast mode [ 244.105047][T18430] dvmrp17: left allmulticast mode [ 244.948779][T18517] netlink: 'syz.7.5611': attribute type 2 has an invalid length. [ 244.951274][T18517] netlink: 'syz.7.5611': attribute type 8 has an invalid length. [ 244.953943][T18517] netlink: 1148 bytes leftover after parsing attributes in process `syz.7.5611'. [ 244.975627][ T41] audit: type=1400 audit(757.818:642): avc: denied { listen } for pid=18518 comm="syz.8.5613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 245.020846][ T41] audit: type=1400 audit(757.858:643): avc: denied { execmod } for pid=18521 comm="syz.7.5614" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=64215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 245.182764][T18542] netlink: 75 bytes leftover after parsing attributes in process `syz.5.5623'. [ 245.522591][ T41] audit: type=1400 audit(758.358:644): avc: denied { write } for pid=18569 comm="syz.7.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 245.688925][T18583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.689096][T18586] __nla_validate_parse: 1 callbacks suppressed [ 245.689114][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5642'. [ 245.692641][T18583] bond0: (slave bond2): Enslaving as an active interface with an up link [ 246.504919][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5656'. [ 246.979101][T18657] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5672'. [ 247.227356][ T5980] Bluetooth: hci4: command tx timeout [ 248.061765][T18692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5687'. [ 248.153077][T18697] overlayfs: failed to clone lowerpath [ 248.454238][T18715] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5698'. [ 248.492132][T18720] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5700'. [ 248.621919][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5706'. [ 248.627465][T11494] bond0: (slave bond_slave_0): interface is now down [ 248.631359][T11494] bond0: (slave bond_slave_1): interface is now down [ 248.929392][T18768] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 249.178845][T18785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5731'. [ 249.756901][T18838] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5754'. [ 249.945409][ T24] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 249.978683][ T41] audit: type=1400 audit(762.818:645): avc: denied { mount } for pid=18855 comm="syz.0.5763" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 250.096136][ T24] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 250.100506][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.103159][T18866] 9pnet_fd: p9_fd_create_unix (18866): problem connecting socket: ./file0: -111 [ 250.104221][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.104255][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 250.107126][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.125809][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.131285][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 250.136187][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.139632][T18870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5770'. [ 250.140072][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.148229][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 250.151973][ T41] audit: type=1326 audit(762.988:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18867 comm="syz.5.5769" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb550d8ebe9 code=0x0 [ 250.152829][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.162902][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.169757][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 250.174542][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.178903][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.183630][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 250.188344][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.193319][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.198712][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 250.202650][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.206784][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.211490][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 250.215686][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.219357][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.222660][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 250.227087][ T24] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 250.230456][ T24] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 250.233077][ T24] usb 13-1: Product: syz [ 250.234431][ T24] usb 13-1: Manufacturer: syz [ 250.236086][ T24] usb 13-1: SerialNumber: syz [ 250.239249][ T24] usb 13-1: config 0 descriptor?? [ 250.248118][ T24] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 250.443395][T18896] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 250.452949][ T24] usb 13-1: USB disconnect, device number 7 [ 250.459737][ T24] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 250.508186][T11508] bond0: (slave bond2): interface is now down [ 250.512281][T11508] bond0: now running without any active interface! [ 251.231263][T18948] netlink: 'syz.7.5807': attribute type 12 has an invalid length. [ 251.236040][T18948] __nla_validate_parse: 5 callbacks suppressed [ 251.236056][T18948] netlink: 120 bytes leftover after parsing attributes in process `syz.7.5807'. [ 251.426754][ T41] audit: type=1326 audit(764.268:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.0.5789" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9df8ebe9 code=0x7fc00000 [ 251.514034][T18967] comedi comedi4: bad chanlist[1]=0x726d7664 chan=30308 range length=2 [ 251.527127][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5818'. [ 251.781703][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5830'. [ 251.785605][T18996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5830'. [ 251.974730][T19023] mkiss: ax0: crc mode is auto. [ 252.185892][ T838] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 252.345616][ T838] usb 13-1: Using ep0 maxpacket: 8 [ 252.350426][ T838] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 252.355146][ T838] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 252.360020][ T838] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.365145][ T838] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.371675][ T838] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.375723][ T838] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.587437][ T838] usb 13-1: GET_CAPABILITIES returned 0 [ 252.589661][ T838] usbtmc 13-1:16.0: can't read capabilities [ 252.789275][ T24] usb 13-1: USB disconnect, device number 8 [ 252.848717][T19053] overlayfs: failed to clone lowerpath [ 253.389586][T19070] Falling back ldisc for ttyS3. [ 253.423119][T19081] SELinux: security_context_str_to_sid () failed with errno=-22 [ 253.465927][T19089] openvswitch: netlink: Multiple metadata blocks provided [ 253.670500][T19112] veth0: entered promiscuous mode [ 253.673199][T19112] veth0: left promiscuous mode [ 253.902827][ T41] audit: type=1400 audit(766.738:648): avc: denied { ioctl } for pid=19125 comm="syz.8.5885" path="socket:[65928]" dev="sockfs" ino=65928 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 253.939612][T19128] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5886'. [ 254.144551][T19151] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5897'. [ 254.150723][ T1147] ------------[ cut here ]------------ [ 254.153488][ T1147] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 254.161523][ T1147] WARNING: CPU: 1 PID: 1147 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 254.166358][ T1147] Modules linked in: [ 254.168211][ T1147] CPU: 1 UID: 0 PID: 1147 Comm: kworker/u32:8 Not tainted syzkaller #0 PREEMPT(full) [ 254.173413][ T1147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.183298][ T1147] Workqueue: bond0 bond_mii_monitor [ 254.185354][ T1147] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 254.188004][ T1147] Code: 05 ff ff ff e8 94 e4 43 f8 c6 05 7c 0e 1c 07 01 90 ba 48 00 00 00 48 c7 c6 e0 f2 e5 8c 48 c7 c7 80 f2 e5 8c e8 34 8a 02 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 84 ab 90 e8 ce 3f aa f8 e9 [ 254.194598][ T1147] RSP: 0018:ffffc90005dc79f0 EFLAGS: 00010286 [ 254.197247][ T1147] RAX: 0000000000000000 RBX: ffff88802640c000 RCX: ffffffff817a3358 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.200831][ T1147] RDX: ffff8880298f4880 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 254.204955][ T1147] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 254.208173][ T1147] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000bb8f48 [ 254.211584][ T1147] R13: ffff88802640ccc1 R14: ffffffff8c59dcc0 R15: ffffffff89b0c9f0 [ 254.214920][ T1147] FS: 0000000000000000(0000) GS:ffff8880d67b8000(0000) knlGS:0000000000000000 [ 254.218515][ T1147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.221151][ T1147] CR2: 00007fffed87c040 CR3: 000000005098c000 CR4: 0000000000352ef0 [ 254.224504][ T1147] Call Trace: [ 254.225717][ T1147] [ 254.226739][ T1147] ethtool_op_get_link+0x1d/0x70 [ 254.228399][ T1147] bond_check_dev_link+0x3f9/0x710 [ 254.230224][ T1147] ? __pfx_bond_check_dev_link+0x10/0x10 [ 254.232386][ T1147] bond_mii_monitor+0x3c0/0x2dc0 [ 254.234493][ T1147] ? __pfx_bond_mii_monitor+0x10/0x10 [ 254.236554][ T1147] ? rcu_is_watching+0x12/0xc0 [ 254.238308][ T1147] process_one_work+0x9cf/0x1b70 [ 254.240183][ T1147] ? __pfx_process_one_work+0x10/0x10 [ 254.242292][ T1147] ? assign_work+0x1a0/0x250 [ 254.244103][ T1147] worker_thread+0x6c8/0xf10 [ 254.246096][ T1147] ? __pfx_worker_thread+0x10/0x10 [ 254.248076][ T1147] kthread+0x3c5/0x780 [ 254.249402][ T1147] ? __pfx_kthread+0x10/0x10 [ 254.251091][ T1147] ? rcu_is_watching+0x12/0xc0 [ 254.253704][ T1147] ? __pfx_kthread+0x10/0x10 [ 254.255510][ T1147] ret_from_fork+0x5d4/0x6f0 [ 254.257232][ T1147] ? __pfx_kthread+0x10/0x10 [ 254.259230][ T1147] ret_from_fork_asm+0x1a/0x30 [ 254.261389][ T1147] [ 254.262779][ T1147] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 254.266168][ T1147] CPU: 1 UID: 0 PID: 1147 Comm: kworker/u32:8 Not tainted syzkaller #0 PREEMPT(full) [ 254.270871][ T1147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.275721][ T1147] Workqueue: bond0 bond_mii_monitor [ 254.277483][ T1147] Call Trace: [ 254.278581][ T1147] [ 254.279612][ T1147] dump_stack_lvl+0x3d/0x1f0 [ 254.281217][ T1147] vpanic+0x6e8/0x7a0 [ 254.282599][ T1147] ? __pfx_vpanic+0x10/0x10 [ 254.284060][ T1147] ? __linkwatch_sync_dev+0x1ed/0x230 [ 254.286259][ T1147] panic+0xca/0xd0 [ 254.287989][ T1147] ? __pfx_panic+0x10/0x10 [ 254.289895][ T1147] ? check_panic_on_warn+0x1f/0xb0 [ 254.292109][ T1147] check_panic_on_warn+0xab/0xb0 [ 254.294001][ T1147] __warn+0xf6/0x3c0 [ 254.295600][ T1147] ? preempt_schedule_notrace+0x62/0xe0 [ 254.297952][ T1147] ? __linkwatch_sync_dev+0x1ed/0x230 [ 254.300319][ T1147] report_bug+0x3c3/0x580 [ 254.302433][ T1147] ? __linkwatch_sync_dev+0x1ed/0x230 [ 254.304899][ T1147] handle_bug+0x184/0x210 [ 254.306802][ T1147] exc_invalid_op+0x17/0x50 [ 254.308660][ T1147] asm_exc_invalid_op+0x1a/0x20 [ 254.310689][ T1147] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 254.313523][ T1147] Code: 05 ff ff ff e8 94 e4 43 f8 c6 05 7c 0e 1c 07 01 90 ba 48 00 00 00 48 c7 c6 e0 f2 e5 8c 48 c7 c7 80 f2 e5 8c e8 34 8a 02 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 84 ab 90 e8 ce 3f aa f8 e9 [ 254.320456][ T1147] RSP: 0018:ffffc90005dc79f0 EFLAGS: 00010286 [ 254.322401][ T1147] RAX: 0000000000000000 RBX: ffff88802640c000 RCX: ffffffff817a3358 [ 254.324950][ T1147] RDX: ffff8880298f4880 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 254.327865][ T1147] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 254.331743][ T1147] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000bb8f48 [ 254.334747][ T1147] R13: ffff88802640ccc1 R14: ffffffff8c59dcc0 R15: ffffffff89b0c9f0 [ 254.337236][ T1147] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 254.339156][ T1147] ? __warn_printk+0x198/0x350 [ 254.341058][ T1147] ? __warn_printk+0x1a5/0x350 [ 254.343100][ T1147] ethtool_op_get_link+0x1d/0x70 [ 254.345130][ T1147] bond_check_dev_link+0x3f9/0x710 [ 254.347318][ T1147] ? __pfx_bond_check_dev_link+0x10/0x10 [ 254.349990][ T1147] bond_mii_monitor+0x3c0/0x2dc0 [ 254.352707][ T1147] ? __pfx_bond_mii_monitor+0x10/0x10 [ 254.355222][ T1147] ? rcu_is_watching+0x12/0xc0 [ 254.357188][ T1147] process_one_work+0x9cf/0x1b70 [ 254.359409][ T1147] ? __pfx_process_one_work+0x10/0x10 [ 254.361663][ T1147] ? assign_work+0x1a0/0x250 [ 254.363499][ T1147] worker_thread+0x6c8/0xf10 [ 254.365489][ T1147] ? __pfx_worker_thread+0x10/0x10 [ 254.367803][ T1147] kthread+0x3c5/0x780 [ 254.369535][ T1147] ? __pfx_kthread+0x10/0x10 [ 254.371734][ T1147] ? rcu_is_watching+0x12/0xc0 [ 254.374100][ T1147] ? __pfx_kthread+0x10/0x10 [ 254.375884][ T1147] ret_from_fork+0x5d4/0x6f0 [ 254.377579][ T1147] ? __pfx_kthread+0x10/0x10 [ 254.379154][ T1147] ret_from_fork_asm+0x1a/0x30 [ 254.381324][ T1147] [ 254.383845][ T1147] Kernel Offset: disabled [ 254.386194][ T1147] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:06:46 Registers: info registers vcpu 0 CPU#0 RAX=f2c2963ea0153c00 RBX=ffffffff8e5c1160 RCX=ffffffff822d9cc2 RDX=ffff8880541ac880 RSI=ffffffff822d9b0a RDI=ffffffff8e5c1160 RBP=ffff88807ffd6520 RSP=ffffc9000efcf520 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff822d9b0a R13=0000000000000008 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8197c05f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555772df500 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb551af56c0 CR3=000000005b29c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f32ffffffff849a 3f27ffffffff849a 3de2ffffffff849a 3d77ffffffff849a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5872ffffffff849a 4d39ffffffff849a 4d10ffffffff849a 4cd4ffffffff849a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a9effffffff849a 9a50ffffffff849a 58e2ffffffff849a 5880ffffffff849a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4a8ffffffff849a b484ffffffff849a b3f2ffffffff849a b3e8ffffffff849a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b338ffffffff849a b322ffffffff849a 9c99ffffffff849a 9c8bffffffff849a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c68ffffffff849a 9bedffffffff849a 9b90ffffffff849a 9b7effffffff849a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b33ffffffff849a 9b1dffffffff849a 9ad8ffffffff849a 9ab8ffffffff849a ZMM24=d48ef132d48ef132 d48ef132d48ef132 d48ef132d48ef132 d48ef132d48ef132 d48ef132d48ef132 d48ef132d48ef132 d48ef132d48ef132 d48ef132d48ef132 ZMM25=fd88e1effd88e1ef fd88e1effd88e1ef fd88e1effd88e1ef fd88e1effd88e1ef fd88e1effd88e1ef fd88e1effd88e1ef fd88e1effd88e1ef fd88e1effd88e1ef ZMM26=b8924654b8924654 b8924654b8924654 b8924654b8924654 b8924654b8924654 b8924654b8924654 b8924654b8924654 b8924654b8924654 b8924654b8924654 ZMM27=98bf1fbf98bf1fbf 98bf1fbf98bf1fbf 98bf1fbf98bf1fbf 98bf1fbf98bf1fbf 98bf1fbf98bf1fbf 98bf1fbf98bf1fbf 98bf1fbf98bf1fbf 98bf1fbf98bf1fbf ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7c2500007c250000 7c2500007c250000 7c2500007c250000 7c2500007c250000 7c2500007c250000 7c2500007c250000 7c2500007c250000 7c2500007c250000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643ab5 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90005dc7360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b112060 R15=ffffffff85643a50 RIP=ffffffff85643adf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffed87c040 CR3=000000005098c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00005624b4fa02a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faabcdf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f790b9bd628df 2f2f790ef9b1eb05 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4fc03260ddcc74e 2f2f2f2a4d6460b4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00005624b4fa02a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005624b4f9a410 00005621d69ec432 00005624b4f91b30 00005621d69ec431 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73613a479b8add63 2f007952a3fceb41 797379249b947e44 73792543a3edeb42 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff7f7fdbdffdf7 6f7f7d77ffffefff 7f7f7f7ffffffef7 7f7f7f7fffffef6f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002c0922f30761 00000005624b4f30 0000000000000311 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002c0922f30410 00000005624b4f30 0000000000000311 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffff11008bf33f2 RBX=ffff888045f99f90 RCX=ffffffff822db111 RDX=ffff888024c40000 RSI=ffffffff822db142 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90005e875e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=dffffc0000000000 R15=1ffff92000bd0ebe RIP=ffffffff822db154 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557e99c500 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555589610808 CR3=0000000041b96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca17be950 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca17bead6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca17bead6 00007ffca17beadc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888027b30af0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88803bc417f8 RDI=ffffffff8c162980 RBP=ffff88803bc417f8 RSP=ffffc9000692f878 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888027b30000 R13=ffff888027b30af0 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b93f0a8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555589610500 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f27a0d2ab30 CR3=00000000559bf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca17be730 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca17bead6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca17bead6 00007ffca17beadc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27a0e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f687370616e5300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000