last executing test programs: 5.39412267s ago: executing program 3 (id=1384): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000001c80)=ANY=[], 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x3a1, 0x0, &(0x7f0000000140)="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"}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8}]}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000240), 0x0, 0xd7, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000480), 0x8, 0x3b, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYRES16=r7], &(0x7f0000000540)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x17) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000f00000005002a000000000008000300", @ANYRES32=r10, @ANYBLOB="0800320000000000050038000100000005002e000000000008003100f6df000008003a0008100000"], 0x4c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109027f0002010000000904000001020d007c18a11c8ee60006240600013b"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r13, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r14, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4.508820722s ago: executing program 1 (id=1387): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r7, r5, 0x4, r4}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r8 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x0, r8}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000040)={&(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r9}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r10], 0x3c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.047470905s ago: executing program 1 (id=1388): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x80089203, 0x200000000000000) 4.009032411s ago: executing program 3 (id=1389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000080a0300000000000000000002001500080009400000000009000200737954259a9700000900010073797a30"], 0x5c}}, 0x0) 4.008726606s ago: executing program 1 (id=1390): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/206, 0xce}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000018000000", @ANYRES32, @ANYBLOB="24003080200001800800010000000000060001"], 0x40}}, 0x0) 3.924997453s ago: executing program 3 (id=1392): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, r1, 0x100000000000004b, 0x0, &(0x7f0000000500)=[{0xffffffffffffffc1, 0xfffffffffffffffe}, {0xa6, 0xdbd}, {0x0, 0x2}, {0x7fffffffffffffff, 0xfffffffffffffc00}]}) 3.868153085s ago: executing program 3 (id=1400): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffff3, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x1}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.684398478s ago: executing program 1 (id=1393): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700000000000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) r2 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000001e40)=[{&(0x7f0000001a00)=""/108, 0x6c}, {&(0x7f0000001a80)=""/202, 0xca}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x7000004, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000006006600c78800001c0033"], 0x4c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt(r0, 0x7, 0x4, &(0x7f00000007c0)=""/55, &(0x7f0000000d40)=0x37) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6tnl0\x00', 0x0, 0x3a19e280bf045f0c, 0x0, 0x8, 0x7, 0x9, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x1, 0x2, 0x80}}) 2.684074885s ago: executing program 3 (id=1395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chdir(&(0x7f00000001c0)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rmdir(&(0x7f0000000380)='./file0/../file0\x00') socket$igmp6(0xa, 0x3, 0x2) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1000000001, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x2, 0x200000000000006, 0x0) sendmsg$kcm(r3, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="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", 0x154}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4c006) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000ac0)={'#! ', '', [{0x20, '#! \x0f\xaa\xf9\xb5V\x13\x8a#\x1797-\xbc\x17\'\x8c\xef\x18\x80:nY\xf6\xa8JnnvF\xb8\x06\xe9\x02\x90\x0eHo\xb5$\xce\xa2e\xdd\x92\xe1>R\x14\x9c\xa7n\xcd=\xcfFU#\xf4\x019\xa5Gei\x85\f\x0f\xa7\xc8\xaby\x1d\x8b\x86\xe4gJ&\xd3\x83\x93c\x85\xbd#e\xf8I\xff\r\xe5S\x9eu\xe8m\xcc\x82\xc9K\x8d\x01}\xd1\xf4\xed\xa1,\xb3\xae\x17\xd2\bI\xc4'}, {0x20, '/dev/vhost-vsock\x00'}, {0x20, '\x00'}, {0x20, '\x95\x7f\xf5\x06\x89z\x06-\x16>\xb1\x9b\x1d;\x88\x1e\xc8\xbaL8\x84\xec4v\xd5\xfa\x95`h\xc3=\x9f\x19X\xb0Y{\x85\xa2\xe1\x82\xa5\xf6J\xce\x1e\xd4\x84\v<*\xd0:\x91(\xe7b\f;\x0f\x80\xb6E>\xd1\x98\b\xfbS\xdd\x15\xd3n\x9eb\xf9\xa4\xfbY}\xd6^H\xbb#=\x8e\x13te\xd5\x17C\xed\x04sW'}, {0x20, '%}+#/v-#\')'}, {0x20, '@.!\xbcy\xe6\x8d\x19\x80-ZW]\x98\x05q\x011\xa4\x9b\xac\xb8\xd5\xcaC\x04\xad\xac\x7f,X\x16\xed\xbe\x02\x18\xdf\xef\xb2m\xccdi\xdbc\x8e\xedm\x86>\xa6\x19\xa7\x1a\x88\xbf\xa2\r \x8c\x96^\xa5\x1f\xbd\x93\'V\xb8\x83\xfc\v\x1e\xf7\xbd\x96h\x95\xc1\xa1\x1e\xcd\xcc\xcf\x9eS\x85\x97\xf7\x00J\x15\xba]\xa7\xfd\xa8\xc8\x91F\xdf=R\xe0Ws\xf7\x95\xef'}, {0x20, '\x04\x89\xe0\xc5\x16\x85\xd9O\x80\xcf\x87\xc9-\x1c\xb9\xa6\xd5\x9c\x86\x80\xc74\xa1\x15b\xf6\xc5,\x14\'$8\x84\xe3\x81^Z\x1c\x92\x93\xf8\xc6\x02\xf1f\xdb\xeaRRs\xe5+`$\xbd@\x02\xaf81z\x8d\a\x8a\xf62\x0e\xbb\xde@\xcf\x8a\xd0M\xe17(\xcc8YVUY\x9eN9*\x95\x90\x03\xfd\x12\xe2\xddo\x93}!V\x13\x1eG0\x93l\x17-@\xc6\xd0\x04\x9d\x92\xb0\x14\x02\xfdws\xbe\xb1\xb3\xa8\xf2)\x95\xdf?l\x9e<\x9f\xd6:\xe7p\'\xde\xdeL\x8b\x1b\x8b\xc1\x8e\xc7u}j\xaa\x14\xd3\xa0s|2\x01g\xc9\xb0SAP\xdfp\xa8\xeaT\xb2\xa1\xd7ZRL\x1cb\xa4\xfb'}, {}, {0x20, '\x95\x7f\xf5\x06\x89z\x06-\x16>\xb1\x9b\x1d;\x88\x1e\xc8\xbaL8\x84\xec4v\xd5\xfa\x95`h\xc3=\x9f\x19X\xb0Y{\x85\xa2\xe1\x82\xa5\xf6J\xce\x1e\xd4\x84\v<*\xd0:\x91(\xe7b\f;\x0f\x80\xb6E>\xd1\x98\b\xfbS\xdd\x15\xd3n\x9eb\xf9\xa4\xfbY}\xd6^H\xbb#=\x8e\x13te\xd5\x17C\xed\x04sW'}, {0x20, '#]Q{&'}, {0x20, '\x00'}, {0x20, '-}\\--'}]}, 0x28e) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) eventfd(0x2) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) 1.931056853s ago: executing program 0 (id=1397): r0 = socket(0x25, 0x80005, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000000)="2e0200000000000000c08de18cc1121f17", 0x0, 0x0, 0x0}, 0x38) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454ca, 0x20000000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'\x00', 0x400}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x36) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x2, 0x2100) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f00000000c0)=0xf98) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000000)={0x0, 0xe72, 0x0, 0x0, 0x41}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.00901727s ago: executing program 0 (id=1403): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000000)=""/180, 0xfffffffffffffdc4) 1.007461328s ago: executing program 0 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x0) 929.47584ms ago: executing program 0 (id=1405): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x20) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, &(0x7f0000000240)='./file1\x00', 0x8, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x4) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x18}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) 877.180538ms ago: executing program 2 (id=1406): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000180)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x90) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000008c0)=""/102381, 0x18fed}], 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7d, 0x0, &(0x7f00000000c0)) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 493.396759ms ago: executing program 2 (id=1407): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xc0586300}, 0x10, &(0x7f0000000580)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x0) 453.385224ms ago: executing program 3 (id=1408): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000340)=""/69, 0x623c41ea}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 450.708964ms ago: executing program 2 (id=1409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)={0x18, 0x30, 0x93b0c46b16d49b1b, 0x0, 0x0, "", [@nested={0x6, 0x0, 0x0, 0x1, [@generic="3004"]}]}, 0x18}], 0x1}, 0x0) 352.879932ms ago: executing program 2 (id=1410): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xffff, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp}) 286.168758ms ago: executing program 2 (id=1411): r0 = syz_open_procfs(0x0, &(0x7f0000000e80)='net/ptype\x00') r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) fchmod(r0, 0x0) 277.030139ms ago: executing program 2 (id=1412): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r0, &(0x7f0000000240)='attr/fscreate\x00') r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$CDROMPLAYMSF(r1, 0x5303, 0x0) getpgrp(r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r3, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket(0x28, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfecf}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 80.541006ms ago: executing program 1 (id=1413): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x2b0, 0x268, 0x300, 0x2b0, 0x268, 0x3e8, 0x460, 0x460, 0x3e8, 0x460, 0x9, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [], [], 'veth0_to_hsr\x00', 'bond_slave_0\x00'}, 0x0, 0x270, 0x2b0, 0x0, {0x9401}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0xc28da5586c675118, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @rand_addr=' \x01\x00', @dev, @mcast2, @private0, @mcast2, @private1, @remote, @private0, @remote, @private1]}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast1, @private2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1852aa405753905554ed000600ebaf5ffbbbcc15d0abddcb5ae29b3b8f45"}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 57.645741ms ago: executing program 0 (id=1414): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 44.473246ms ago: executing program 1 (id=1415): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @dev}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40305829, &(0x7f0000000240)) 0s ago: executing program 0 (id=1416): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="580000001400192340834b", 0xb}, {&(0x7f00000002c0)="db6dfa07d8098bd2ced64ad5edc54382ee45da9203efd5732acfcc727b53d3079ed06ecae1342e4ec9c8283311dceddf89948d3ef84ff58ffb015760e03187c365999492cb07f544c5f8e72917b4af1e3e47b4655360c078947e62afae62d2ec31a3e0043a888d2096a4fe21b43cef30a6299fda9e752ea4ac9bd768a5a01356f8f5d1dae5c092d7f0fba15747b05104819751a787c6202cca9911ddff6f00ddc9997b", 0xa3}], 0x100000e0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x3}]}}}]}, 0x3c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0x4011, &(0x7f0000000180)={0x0, 0x6e42, 0x2000, 0x3, 0x3d7}) r5 = syz_io_uring_setup(0x8a5, &(0x7f0000000080)={0x0, 0xc524, 0x4, 0x0, 0x0, 0x0, r4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x400000, 0x0) dup(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "85406704bbcd6043", "898e9d750bfd000000000400", "a22300", "8ce3a39e3181899b"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "3a997aae6644173f", "b9c0a8cd2707555d2fd4cc373ac51cf2", "1784fe44", "d3e69d47722a0439"}, 0x28) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000240)=0x10000) r10 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x20}}], 0x1, 0x0) setsockopt$RXRPC_SECURITY_KEY(r10, 0x110, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 128.322212][ T6749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.408'. [ 128.487488][ T6752] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 128.725629][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 128.725643][ T39] audit: type=1400 audit(1722987607.607:605): avc: denied { read } for pid=6757 comm="syz.1.412" laddr=::ac14:14aa lport=56745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.842195][ T39] audit: type=1400 audit(1722987607.733:606): avc: denied { execute } for pid=6767 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 128.855348][ T39] audit: type=1400 audit(1722987607.743:607): avc: denied { execute_no_trans } for pid=6767 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 129.104314][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.111581][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.115334][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.119711][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.125623][ T66] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.129593][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.148244][ T39] audit: type=1400 audit(1722987608.037:608): avc: denied { mounton } for pid=6768 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 129.316350][ T6768] chnl_net:caif_netlink_parms(): no params data found [ 129.508904][ T204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.510697][ T6791] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 129.518812][ T39] audit: type=1400 audit(1722987608.447:609): avc: denied { create } for pid=6787 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.534879][ T39] audit: type=1400 audit(1722987608.457:610): avc: denied { ioctl } for pid=6781 comm="syz.0.420" path="socket:[12093]" dev="sockfs" ino=12093 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.616206][ T6796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2556 sclass=netlink_route_socket pid=6796 comm=syz.3.421 [ 129.624797][ T6788] dlm: no local IP address has been set [ 129.627511][ T6788] dlm: cannot start dlm midcomms -107 [ 129.648653][ T39] audit: type=1400 audit(1722987608.573:611): avc: denied { mounton } for pid=6790 comm="syz.1.430" path="mnt:[4026532889]" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 129.674839][ T39] audit: type=1400 audit(1722987608.594:612): avc: denied { connect } for pid=6781 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.694973][ T39] audit: type=1400 audit(1722987608.625:613): avc: denied { accept } for pid=6790 comm="syz.1.430" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 129.709778][ T39] audit: type=1400 audit(1722987608.646:614): avc: denied { write } for pid=6790 comm="syz.1.430" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=43390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 129.770623][ T204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.780283][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.785120][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.788416][ T6768] bridge_slave_0: entered allmulticast mode [ 129.793285][ T6768] bridge_slave_0: entered promiscuous mode [ 129.800232][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.803803][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.807477][ T6768] bridge_slave_1: entered allmulticast mode [ 129.812595][ T6768] bridge_slave_1: entered promiscuous mode [ 129.850866][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.854139][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.951808][ T204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.966999][ T6768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.975008][ T6768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.108096][ T204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.162537][ T6768] team0: Port device team_slave_0 added [ 130.170955][ T6790] dccp_close: ABORT with 32 bytes unread [ 130.176595][ T6768] team0: Port device team_slave_1 added [ 130.339386][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.342314][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.356334][ T6768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.362980][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.367266][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.377911][ T6768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.474190][ T6768] hsr_slave_0: entered promiscuous mode [ 130.478855][ T6768] hsr_slave_1: entered promiscuous mode [ 130.482151][ T6768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.487488][ T6768] Cannot create hsr debugfs directory [ 130.622609][ T204] team0: left allmulticast mode [ 130.625832][ T204] team_slave_0: left allmulticast mode [ 130.629833][ T204] team_slave_1: left allmulticast mode [ 130.633796][ T204] team0: left promiscuous mode [ 130.635923][ T204] team_slave_0: left promiscuous mode [ 130.638694][ T204] team_slave_1: left promiscuous mode [ 130.643418][ T204] bridge0: port 3(team0) entered disabled state [ 130.653523][ T204] bridge_slave_1: left allmulticast mode [ 130.653534][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 130.655799][ T204] bridge_slave_1: left promiscuous mode [ 130.661480][ T204] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.667409][ T204] bridge_slave_0: left allmulticast mode [ 130.670197][ T204] bridge_slave_0: left promiscuous mode [ 130.672564][ T204] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.058695][ T5338] Bluetooth: hci1: command tx timeout [ 131.073171][ T204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.087757][ T204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.109407][ T204] bond0 (unregistering): Released all slaves [ 131.519796][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 131.695751][ T204] hsr_slave_0: left promiscuous mode [ 131.701429][ T204] hsr_slave_1: left promiscuous mode [ 131.719315][ T204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.722810][ T204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.728071][ T204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.731275][ T204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.803358][ T204] veth1_macvtap: left promiscuous mode [ 131.806372][ T204] veth0_macvtap: left promiscuous mode [ 131.808972][ T204] veth1_vlan: left promiscuous mode [ 131.811876][ T204] veth0_vlan: left allmulticast mode [ 131.814263][ T204] veth0_vlan: left promiscuous mode [ 131.985361][ T6878] Process accounting resumed [ 132.308115][ T6883] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 132.695367][ T6893] netlink: 'syz.1.453': attribute type 16 has an invalid length. [ 132.703339][ T6893] netlink: 'syz.1.453': attribute type 3 has an invalid length. [ 132.710816][ T6893] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.453'. [ 132.846832][ T204] team0 (unregistering): Port device team_slave_1 removed [ 132.898742][ T6886] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 132.947435][ T204] team0 (unregistering): Port device team_slave_0 removed [ 132.993513][ T6899] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.042899][ T5338] Bluetooth: hci1: command tx timeout [ 133.992228][ T6768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.014407][ T6768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.021544][ T6768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.038300][ T6768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.185826][ T6768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.212961][ T6768] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.237446][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.240738][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.246678][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.250119][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.372019][ T6931] input: syz0 as /devices/virtual/input/input11 [ 134.541407][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.616827][ T6768] veth0_vlan: entered promiscuous mode [ 134.637880][ T6948] program syz.1.465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.643927][ T6768] veth1_vlan: entered promiscuous mode [ 134.676028][ T6768] veth0_macvtap: entered promiscuous mode [ 134.681691][ T6768] veth1_macvtap: entered promiscuous mode [ 134.696673][ T6950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.473'. [ 134.706704][ T6768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.711853][ T6768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.717826][ T6768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.722245][ T6768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.726649][ T6768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.731008][ T6768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.738629][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.745508][ T6768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.749579][ T6768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.753713][ T6768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.759036][ T6768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.763309][ T6768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.767113][ T6768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.773898][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.782902][ T6768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.789211][ T6768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.793884][ T6768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.799212][ T6768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.819032][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 134.819068][ T39] audit: type=1400 audit(1722987614.000:624): avc: denied { watch_mount } for pid=6954 comm="syz.1.468" path="/117" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 134.843146][ T6950] batadv0: entered promiscuous mode [ 134.843165][ T39] audit: type=1400 audit(1722987614.021:625): avc: denied { watch_reads } for pid=6954 comm="syz.1.468" path="/117" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 134.858204][ T39] audit: type=1400 audit(1722987614.032:626): avc: denied { watch watch_reads } for pid=6956 comm="syz.3.467" path="/proc/timer_list" dev="proc" ino=4026532114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 134.900643][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.904043][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.934965][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.954641][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.032199][ T39] audit: type=1400 audit(1722987614.221:627): avc: denied { setopt } for pid=6969 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.038843][ T5338] Bluetooth: hci1: command tx timeout [ 135.078985][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 135.137756][ T39] audit: type=1400 audit(1722987614.347:628): avc: denied { write } for pid=6979 comm="syz.0.477" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.203593][ T39] audit: type=1400 audit(1722987614.410:629): avc: denied { write } for pid=6985 comm="syz.1.480" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.224658][ T39] audit: type=1400 audit(1722987614.431:630): avc: denied { write } for pid=6979 comm="syz.0.477" name="fib_trie" dev="proc" ino=4026533185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 135.346020][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 135.409537][ T6991] /dev/nullb0: Can't open blockdev [ 135.544866][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 135.547664][ T6992] SELinux: syz.2.479 (6992) set checkreqprot to 1. This is no longer supported. [ 135.555243][ T56] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 135.558942][ T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.559483][ T39] audit: type=1400 audit(1722987614.777:631): avc: denied { setcheckreqprot } for pid=6983 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 135.563142][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.574425][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.579042][ T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.584975][ T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.589567][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.855149][ T56] usb 8-1: GET_CAPABILITIES returned 0 [ 135.862073][ T56] usbtmc 8-1:16.0: can't read capabilities [ 136.065428][ T58] usb 8-1: USB disconnect, device number 7 [ 136.203881][ T39] audit: type=1400 audit(1722987615.460:632): avc: denied { setopt } for pid=6993 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.639338][ T6999] input: syz0 as /devices/virtual/input/input12 [ 137.004840][ T5338] Bluetooth: hci1: command tx timeout [ 137.315388][ T39] audit: type=1326 audit(1722987616.625:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.1.496" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x0 [ 138.159281][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 138.425147][ T7053] netlink: 'syz.3.502': attribute type 27 has an invalid length. [ 138.587339][ T7055] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.594774][ T7055] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 138.666492][ T7057] netlink: 'syz.3.505': attribute type 1 has an invalid length. [ 138.670162][ T7057] netlink: 224 bytes leftover after parsing attributes in process `syz.3.505'. [ 139.212569][ T5338] Bluetooth: hci2: command tx timeout [ 139.994762][ T7089] loop7: detected capacity change from 0 to 16384 [ 140.044099][ T7089] loop7: detected capacity change from 16384 to 16383 [ 140.319872][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 140.319886][ T39] audit: type=1400 audit(1722987619.785:636): avc: denied { read write } for pid=7109 comm="syz.0.525" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 140.338974][ T7098] block nbd3: shutting down sockets [ 140.348867][ T39] audit: type=1400 audit(1722987619.785:637): avc: denied { open } for pid=7109 comm="syz.0.525" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 140.459365][ T7115] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 141.060570][ T832] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.231983][ T832] usb 5-1: Using ep0 maxpacket: 8 [ 141.237114][ T832] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.244593][ T832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.249290][ T832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 141.257173][ T832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 141.264229][ T832] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 141.268195][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.280591][ T832] hub 5-1:1.0: bad descriptor, ignoring hub [ 141.282729][ T832] hub 5-1:1.0: probe with driver hub failed with error -5 [ 141.286376][ T832] cdc_wdm 5-1:1.0: skipping garbage [ 141.288692][ T832] cdc_wdm 5-1:1.0: skipping garbage [ 141.303846][ T832] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 141.306504][ T832] cdc_wdm 5-1:1.0: Unknown control protocol [ 141.374413][ T39] audit: type=1400 audit(1722987620.876:638): avc: denied { connect } for pid=7131 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.383176][ T39] audit: type=1400 audit(1722987620.887:639): avc: denied { setopt } for pid=7131 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.397677][ T39] audit: type=1400 audit(1722987620.887:640): avc: denied { bind } for pid=7131 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.406654][ T39] audit: type=1400 audit(1722987620.887:641): avc: denied { write } for pid=7131 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.974423][ T7123] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 142.566319][ T58] usb 5-1: USB disconnect, device number 5 [ 143.260394][ T39] audit: type=1400 audit(1722987622.861:642): avc: denied { read } for pid=7156 comm="syz.2.539" path="socket:[16069]" dev="sockfs" ino=16069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.719222][ T5380] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 143.923109][ T5380] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.938455][ T5380] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.945155][ T5380] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.961750][ T5380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.985522][ T5380] usb 8-1: config 0 descriptor?? [ 144.073928][ T7174] vivid-004: disconnect [ 144.229068][ T39] audit: type=1400 audit(1722987623.879:643): avc: denied { mount } for pid=7175 comm="syz.1.544" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 144.340192][ T56] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.387655][ T39] audit: type=1400 audit(1722987624.047:644): avc: denied { map } for pid=7161 comm="syz.3.541" path="socket:[14201]" dev="sockfs" ino=14201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 144.503631][ T5380] plantronics 0003:047F:FFFF.0002: item fetching failed at offset 5/15 [ 144.516302][ T5380] plantronics 0003:047F:FFFF.0002: parse failed [ 144.528342][ T5380] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 144.536878][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 144.545512][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.546410][ T39] audit: type=1400 audit(1722987624.215:645): avc: denied { unmount } for pid=5341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 144.562354][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.574042][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 144.584761][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 144.589512][ T56] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 144.593486][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.601957][ T56] hub 5-1:1.0: bad descriptor, ignoring hub [ 144.607484][ T56] hub 5-1:1.0: probe with driver hub failed with error -5 [ 144.610973][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 144.613588][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 144.617052][ T56] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 144.619960][ T56] cdc_wdm 5-1:1.0: Unknown control protocol [ 144.649423][ T5401] usb 8-1: USB disconnect, device number 8 [ 144.791942][ T7169] vivid-004: reconnect [ 145.251018][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 145.251034][ T39] audit: type=1400 audit(1722987624.950:647): avc: denied { read } for pid=7200 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 145.253108][ T7172] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 145.304027][ T39] audit: type=1400 audit(1722987625.013:648): avc: denied { setopt } for pid=7200 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 145.842893][ T5401] usb 5-1: USB disconnect, device number 6 [ 146.043613][ T7213] vivid-000: ================= START STATUS ================= [ 146.047430][ T7213] vivid-000: Test Pattern: 75% Colorbar [ 146.050821][ T7213] vivid-000: Fill Percentage of Frame: 100 [ 146.054011][ T7213] vivid-000: Horizontal Movement: No Movement [ 146.056810][ T7213] vivid-000: Vertical Movement: No Movement [ 146.059459][ T7213] vivid-000: OSD Text Mode: All [ 146.063172][ T7213] vivid-000: Show Border: false [ 146.065146][ T7213] vivid-000: Show Square: false [ 146.067033][ T7213] vivid-000: Sensor Flipped Horizontally: false [ 146.069593][ T7213] vivid-000: Sensor Flipped Vertically: false [ 146.072495][ T7213] vivid-000: Insert SAV Code in Image: false [ 146.075417][ T7213] vivid-000: Insert EAV Code in Image: false [ 146.078217][ T7213] vivid-000: Insert Video Guard Band: false [ 146.080822][ T7213] vivid-000: Reduced Framerate: false [ 146.083099][ T7213] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 146.086546][ T7213] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 146.090089][ T7213] vivid-000: Enable Capture Cropping: true [ 146.092657][ T7213] vivid-000: Enable Capture Composing: true [ 146.095087][ T7213] vivid-000: Enable Capture Scaler: true [ 146.097458][ T7213] vivid-000: Timestamp Source: End of Frame [ 146.099848][ T7213] vivid-000: Colorspace: Rec. 709 [ 146.101704][ T7213] vivid-000: Transfer Function: Default [ 146.104259][ T7213] vivid-000: Y'CbCr Encoding: Default [ 146.106706][ T7213] vivid-000: HSV Encoding: Hue 0-179 [ 146.109327][ T7213] vivid-000: Quantization: Default [ 146.112283][ T7213] vivid-000: Apply Alpha To Red Only: false [ 146.114687][ T7213] vivid-000: Standard Aspect Ratio: 4x3 [ 146.116866][ T7213] vivid-000: DV Timings Signal Mode: Current DV Timings [ 146.120030][ T7213] vivid-000: DV Timings: 640x480p59 inactive [ 146.122161][ T7213] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 146.125550][ T7213] vivid-000: Maximum EDID Blocks: 2 [ 146.127695][ T7213] vivid-000: Limited RGB Range (16-235): true [ 146.130012][ T7213] vivid-000: Rx RGB Quantization Range: Automatic [ 146.132615][ T7213] vivid-000: Power Present: 0x00000001 [ 146.134991][ T7213] tpg source WxH: 1280x720 (R'G'B) [ 146.137127][ T7213] tpg field: 1 [ 146.138853][ T7213] tpg crop: 64x64@0x0 [ 146.140571][ T7213] tpg compose: 16x16@0x0 [ 146.142400][ T7213] tpg colorspace: 3 [ 146.144066][ T7213] tpg transfer function: 0/0 [ 146.146060][ T7213] tpg quantization: 0/0 [ 146.148027][ T7213] tpg RGB range: 0/1 [ 146.149725][ T7213] vivid-000: ================== END STATUS ================== [ 146.773293][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 147.768914][ T7243] netlink: 44 bytes leftover after parsing attributes in process `syz.0.566'. [ 148.070970][ T5382] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.252278][ T5382] usb 5-1: Using ep0 maxpacket: 16 [ 148.258671][ T5382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 148.264494][ T5382] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 148.268252][ T5382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.278805][ T5382] usb 5-1: config 0 descriptor?? [ 148.726401][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.732038][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.744182][ T5382] hid (null): report_id 0 is invalid [ 148.746660][ T5382] hid (null): invalid report_size 6778482 [ 148.750825][ T5382] hid (null): unknown global tag 0xc [ 148.760572][ T5382] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 148.763783][ T5382] hid-generic 0003:0158:0100.0003: unexpected long global item [ 148.767824][ T5382] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 148.776331][ T831] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 148.935378][ T1294] usb 5-1: USB disconnect, device number 7 [ 148.970536][ T831] usb 7-1: Using ep0 maxpacket: 8 [ 148.975215][ T831] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.979585][ T831] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.983725][ T831] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 148.989267][ T831] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 148.993940][ T831] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 148.998174][ T831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.007017][ T831] hub 7-1:1.0: bad descriptor, ignoring hub [ 149.009625][ T831] hub 7-1:1.0: probe with driver hub failed with error -5 [ 149.013180][ T831] cdc_wdm 7-1:1.0: skipping garbage [ 149.015741][ T831] cdc_wdm 7-1:1.0: skipping garbage [ 149.020005][ T831] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 149.022598][ T831] cdc_wdm 7-1:1.0: Unknown control protocol [ 149.116425][ T7257] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.560'. [ 149.120177][ T7257] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 149.246049][ T39] audit: type=1800 audit(1722987629.149:649): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.560" name="/" dev="fuse" ino=1 res=0 errno=0 [ 149.624331][ T7250] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 150.129382][ T832] usb 7-1: USB disconnect, device number 3 [ 150.139809][ T5478] kernel write not supported for file /vbi9 (pid: 5478 comm: kworker/1:5) [ 152.322185][ T7269] vivid-000: ================= START STATUS ================= [ 152.325596][ T7269] vivid-000: Test Pattern: 75% Colorbar [ 152.328086][ T7269] vivid-000: Fill Percentage of Frame: 100 [ 152.331110][ T7269] vivid-000: Horizontal Movement: No Movement [ 152.333861][ T7269] vivid-000: Vertical Movement: No Movement [ 152.340869][ T7269] vivid-000: OSD Text Mode: All [ 152.344033][ T7269] vivid-000: Show Border: false [ 152.346222][ T7269] vivid-000: Show Square: false [ 152.348755][ T7269] vivid-000: Sensor Flipped Horizontally: false [ 152.351618][ T7269] vivid-000: Sensor Flipped Vertically: false [ 152.354614][ T7269] vivid-000: Insert SAV Code in Image: false [ 152.358185][ T7269] vivid-000: Insert EAV Code in Image: false [ 152.360902][ T7269] vivid-000: Insert Video Guard Band: false [ 152.363416][ T7269] vivid-000: Reduced Framerate: false [ 152.366108][ T7269] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 152.376485][ T7269] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 152.379414][ T7269] vivid-000: Enable Capture Cropping: true [ 152.388322][ T7269] vivid-000: Enable Capture Composing: true [ 152.390778][ T7269] vivid-000: Enable Capture Scaler: true [ 152.393256][ T7269] vivid-000: Timestamp Source: End of Frame [ 152.405242][ T7269] vivid-000: Colorspace: Rec. 709 [ 152.411115][ T7269] vivid-000: Transfer Function: Default [ 152.417970][ T7269] vivid-000: Y'CbCr Encoding: Default [ 152.422028][ T7269] vivid-000: HSV Encoding: Hue 0-179 [ 152.428041][ T7269] vivid-000: Quantization: Default [ 152.430346][ T7269] vivid-000: Apply Alpha To Red Only: false [ 152.433225][ T7269] vivid-000: Standard Aspect Ratio: 4x3 [ 152.435755][ T7269] vivid-000: DV Timings Signal Mode: Current DV Timings [ 152.438838][ T7269] vivid-000: DV Timings: 640x480p59 inactive [ 152.441684][ T7269] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 152.446362][ T7269] vivid-000: Maximum EDID Blocks: 2 [ 152.448810][ T7269] vivid-000: Limited RGB Range (16-235): true [ 152.453085][ T7269] vivid-000: Rx RGB Quantization Range: Automatic [ 152.455766][ T7269] vivid-000: Power Present: 0x00000001 [ 152.458006][ T7269] tpg source WxH: 1280x720 (R'G'B) [ 152.460626][ T7269] tpg field: 1 [ 152.463618][ T7269] tpg crop: 64x64@0x0 [ 152.465559][ T7269] tpg compose: 16x16@0x0 [ 152.467377][ T7269] tpg colorspace: 3 [ 152.468840][ T7269] tpg transfer function: 0/0 [ 152.470841][ T7269] tpg quantization: 0/0 [ 152.476443][ T7269] tpg RGB range: 0/1 [ 152.478189][ T7269] vivid-000: ================== END STATUS ================== [ 152.884806][ T7286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.564'. [ 152.972687][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 153.392017][ C3] vkms_vblank_simulate: vblank timer overrun [ 153.528583][ T7304] block nbd0: shutting down sockets [ 153.980630][ T39] audit: type=1400 audit(1722987634.125:650): avc: denied { read } for pid=7312 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.171233][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.242306][ T7318] netlink: 664 bytes leftover after parsing attributes in process `syz.2.575'. [ 155.468589][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.576'. [ 156.404686][ T7331] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7331 comm=syz.1.578 [ 156.425887][ T7331] netlink: 'syz.1.578': attribute type 1 has an invalid length. [ 157.295503][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 157.345508][ T7345] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 157.352148][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 157.453754][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 158.516792][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 158.548064][ T7366] block device autoloading is deprecated and will be removed. [ 158.588273][ T7364] netlink: 56 bytes leftover after parsing attributes in process `syz.3.587'. [ 159.123671][ T7368] netlink: 664 bytes leftover after parsing attributes in process `syz.0.591'. [ 160.245938][ T5338] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 160.249884][ T5338] Bluetooth: hci2: Injecting HCI hardware error event [ 160.254260][ T66] Bluetooth: hci2: hardware error 0x00 [ 160.551020][ T7375] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7375 comm=syz.0.592 [ 160.570649][ T5338] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 160.572717][ T7375] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 161.706465][ T7393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.226656][ T66] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 163.071365][ T7404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 163.213118][ T7406] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 163.924517][ T7417] netlink: 664 bytes leftover after parsing attributes in process `syz.3.603'. [ 163.989474][ T7418] block device autoloading is deprecated and will be removed. [ 164.044140][ T7414] netlink: 56 bytes leftover after parsing attributes in process `syz.1.601'. [ 164.447126][ T66] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 164.455067][ T66] Bluetooth: hci3: Injecting HCI hardware error event [ 164.460921][ T66] Bluetooth: hci3: hardware error 0x00 [ 165.230501][ T7431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.427128][ T66] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 166.986662][ T7442] netlink: 664 bytes leftover after parsing attributes in process `syz.1.620'. [ 167.127842][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.612'. [ 167.607210][ T39] audit: type=1400 audit(1722987648.423:651): avc: denied { setopt } for pid=7449 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.622184][ T7450] overlayfs: conflicting options: nfs_export=on,index=off [ 168.158766][ T7463] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 169.126112][ T7477] block device autoloading is deprecated and will be removed. [ 169.155829][ T7474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.618'. [ 169.251271][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.500112][ T7481] netlink: 'syz.0.622': attribute type 4 has an invalid length. [ 169.517057][ T7481] netlink: 'syz.0.622': attribute type 4 has an invalid length. [ 169.843273][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.623'. [ 170.125178][ T39] audit: type=1326 audit(1722987651.069:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 170.147874][ T39] audit: type=1326 audit(1722987651.079:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 170.163235][ T7487] No such timeout policy "syz0" [ 170.170963][ T39] audit: type=1326 audit(1722987651.090:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.624" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 170.179923][ T39] audit: type=1326 audit(1722987651.090:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 170.189683][ T39] audit: type=1326 audit(1722987651.090:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 170.198842][ T39] audit: type=1326 audit(1722987651.100:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.624" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 170.207437][ T39] audit: type=1326 audit(1722987651.100:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 170.216685][ T39] audit: type=1326 audit(1722987651.100:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 170.228629][ T39] audit: type=1326 audit(1722987651.100:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.624" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 171.632003][ T7525] Invalid option length (1048373) for dns_resolver key [ 171.934720][ T35] IPVS: starting estimator thread 0... [ 171.960012][ T7535] netlink: 52 bytes leftover after parsing attributes in process `syz.0.647'. [ 172.029675][ T7537] IPVS: using max 15 ests per chain, 36000 per kthread [ 172.429975][ T7549] tipc: Started in network mode [ 172.432162][ T7549] tipc: Node identity ceedb1f96ec7, cluster identity 4711 [ 172.436181][ T7549] tipc: Enabled bearer , priority 0 [ 172.512228][ T7549] syzkaller0: entered promiscuous mode [ 172.517480][ T7549] syzkaller0: entered allmulticast mode [ 172.527903][ T7549] tipc: Resetting bearer [ 172.562652][ T7548] tipc: Resetting bearer [ 173.392336][ T56] tipc: Node number set to 2687152633 [ 174.427512][ T7548] tipc: Disabling bearer [ 174.496381][ T831] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.558353][ T7574] sctp: [Deprecated]: syz.1.652 (pid 7574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.558353][ T7574] Use struct sctp_sack_info instead [ 174.572900][ T39] kauditd_printk_skb: 71 callbacks suppressed [ 174.572914][ T39] audit: type=1400 audit(1722987655.740:732): avc: denied { setopt } for pid=7573 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 174.595948][ T7572] vcan0: entered allmulticast mode [ 174.600423][ T39] audit: type=1400 audit(1722987655.761:733): avc: denied { watch } for pid=7573 comm="syz.1.652" path="/161/file0" dev="9p" ino=36701623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.623878][ T39] audit: type=1400 audit(1722987655.772:734): avc: denied { watch_reads } for pid=7573 comm="syz.1.652" path="/161/file0" dev="9p" ino=36701623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.637011][ T39] audit: type=1400 audit(1722987655.772:735): avc: denied { associate } for pid=7573 comm="syz.1.652" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 174.661860][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 174.858970][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 175.455661][ T39] audit: type=1400 audit(1722987656.664:736): avc: denied { listen } for pid=7600 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.475639][ T39] audit: type=1400 audit(1722987656.685:737): avc: denied { write } for pid=7600 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.894391][ T39] audit: type=1400 audit(1722987657.126:738): avc: denied { unmount } for pid=7612 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 175.909780][ T7613] xt_socket: unknown flags 0x50 [ 176.303397][ T7628] x_tables: duplicate underflow at hook 2 [ 176.484954][ T7635] xt_l2tp: invalid flags combination: 0 [ 176.620855][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 176.831584][ T39] audit: type=1400 audit(1722987658.113:739): avc: denied { read } for pid=7636 comm="syz.2.676" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 176.872137][ T39] audit: type=1400 audit(1722987658.113:740): avc: denied { open } for pid=7636 comm="syz.2.676" path="/45/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 177.347797][ T39] audit: type=1400 audit(1722987658.638:741): avc: denied { write } for pid=7647 comm="syz.1.679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 179.217482][ T7664] netlink: 664 bytes leftover after parsing attributes in process `syz.3.683'. [ 179.447028][ T7676] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 179.513699][ T7678] block device autoloading is deprecated and will be removed. [ 179.570058][ T7672] netlink: 56 bytes leftover after parsing attributes in process `syz.1.686'. [ 180.335395][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.687'. [ 180.476039][ T7688] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.740562][ T7700] netlink: 'syz.2.689': attribute type 4 has an invalid length. [ 180.814071][ T7700] netlink: 'syz.2.689': attribute type 4 has an invalid length. [ 180.863418][ T66] Bluetooth: hci1: link tx timeout [ 180.866260][ T66] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.635021][ T7710] xt_l2tp: invalid flags combination: 0 [ 181.713469][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 181.792135][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 181.792151][ T39] audit: type=1400 audit(1722987663.309:743): avc: denied { bind } for pid=7712 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.805012][ T39] audit: type=1400 audit(1722987663.320:744): avc: denied { listen } for pid=7712 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.884991][ T7719] netlink: 664 bytes leftover after parsing attributes in process `syz.2.701'. [ 181.933600][ T39] audit: type=1400 audit(1722987663.467:745): avc: denied { mounton } for pid=7715 comm="syz.0.692" path="/187/file0" dev="9p" ino=36701623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.944398][ T39] audit: type=1400 audit(1722987663.467:746): avc: denied { getattr } for pid=7715 comm="syz.0.692" name="/" dev="9p" ino=36701623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 182.023054][ T66] Bluetooth: Unexpected start frame (len 18) [ 182.801521][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 183.082549][ T7733] block device autoloading is deprecated and will be removed. [ 183.111822][ T7732] netlink: 56 bytes leftover after parsing attributes in process `syz.1.697'. [ 183.753023][ T39] audit: type=1326 audit(1722987665.378:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.1.698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7ffc0000 [ 183.763727][ T39] audit: type=1326 audit(1722987665.378:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.1.698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7ffc0000 [ 183.766329][ T7737] No such timeout policy "syz0" [ 183.777934][ T39] audit: type=1326 audit(1722987665.388:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.1.698" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f25fc3779f9 code=0x7ffc0000 [ 183.788689][ T39] audit: type=1326 audit(1722987665.388:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.1.698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7ffc0000 [ 183.798475][ T39] audit: type=1326 audit(1722987665.388:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.1.698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7ffc0000 [ 183.808673][ T39] audit: type=1326 audit(1722987665.388:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.1.698" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f25fc3779f9 code=0x7ffc0000 [ 183.823810][ T7738] xt_l2tp: invalid flags combination: 0 [ 183.897309][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 184.573543][ T7758] netlink: 'syz.0.702': attribute type 4 has an invalid length. [ 184.652515][ T7758] netlink: 'syz.0.702': attribute type 4 has an invalid length. [ 185.053271][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 185.541340][ T7767] loop7: detected capacity change from 0 to 16384 [ 185.574484][ T7767] loop7: detected capacity change from 16384 to 16383 [ 185.782908][ T5338] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 186.675366][ T39] kauditd_printk_skb: 83 callbacks suppressed [ 186.675381][ T39] audit: type=1326 audit(1722987668.443:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.0.720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4127779f9 code=0x7ffc0000 [ 186.698039][ T39] audit: type=1326 audit(1722987668.443:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.0.720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4127779f9 code=0x7ffc0000 [ 186.703281][ T7784] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 186.707956][ T39] audit: type=1326 audit(1722987668.474:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.0.720" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fb4127779f9 code=0x7ffc0000 [ 186.722017][ T39] audit: type=1326 audit(1722987668.474:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.0.720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4127779f9 code=0x7ffc0000 [ 186.741073][ T39] audit: type=1326 audit(1722987668.474:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.0.720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4127779f9 code=0x7ffc0000 [ 186.751832][ T39] audit: type=1326 audit(1722987668.474:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.0.720" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb4127779f9 code=0x7ffc0000 [ 186.764378][ T39] audit: type=1326 audit(1722987668.474:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.0.720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4127779f9 code=0x7ffc0000 [ 186.774868][ T39] audit: type=1326 audit(1722987668.474:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.0.720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4127779f9 code=0x7ffc0000 [ 186.783786][ T39] audit: type=1326 audit(1722987668.474:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.0.720" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4127779f9 code=0x7ffc0000 [ 186.791745][ T39] audit: type=1326 audit(1722987668.474:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.0.720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4127779f9 code=0x7ffc0000 [ 187.266788][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.712'. [ 187.579247][ T7803] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 188.371329][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.544739][ T7814] xt_l2tp: invalid flags combination: 0 [ 188.735301][ T7817] netlink: 'syz.0.719': attribute type 4 has an invalid length. [ 188.839213][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'. [ 188.954933][ T7817] netlink: 'syz.0.719': attribute type 4 has an invalid length. [ 189.372934][ T7822] netlink: 664 bytes leftover after parsing attributes in process `syz.3.723'. [ 189.397895][ T7823] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 189.402379][ T7823] netlink: 224 bytes leftover after parsing attributes in process `syz.0.721'. [ 189.795881][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.494001][ T7850] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 192.043430][ T7847] gfs2: not a GFS2 filesystem [ 192.180708][ T7858] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 192.268120][ T7858] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 192.616378][ T39] kauditd_printk_skb: 75 callbacks suppressed [ 192.616388][ T39] audit: type=1326 audit(1722987674.679:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.3.731" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x0 [ 192.668600][ T7863] input: syz0 as /devices/virtual/input/input13 [ 192.809389][ T7870] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 193.182853][ T7875] gfs2: not a GFS2 filesystem [ 194.504265][ T39] audit: type=1400 audit(1722987676.663:922): avc: denied { ioctl } for pid=7881 comm="syz.3.735" path="/dev/nullb0" dev="devtmpfs" ino=693 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.535611][ T7884] loop7: detected capacity change from 0 to 16384 [ 194.588164][ T7884] loop7: detected capacity change from 16384 to 16383 [ 194.594076][ T7884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.604127][ T7884] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.607409][ T7884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.611314][ T7884] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.616663][ T7884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.620250][ T7884] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.624155][ T7884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.627369][ T7884] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.630769][ T7884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.636240][ T7884] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.639692][ T7884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.645076][ T7884] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.649209][ T7884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.654747][ T7884] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.658450][ T7884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.662422][ T7884] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.665363][ T7884] ldm_validate_partition_table(): Disk read failed. [ 194.668283][ T7884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.672874][ T7884] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.676520][ T7884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.681708][ T7884] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.686490][ T7884] Dev loop7: unable to read RDB block 0 [ 194.689946][ T7884] loop7: unable to read partition table [ 194.692594][ T7884] loop_reread_partitions: partition scan of loop7 (K‹>¤i)ßí /480• #Ð …$qÝZ”©þ•I‘ŠçýÎ[†u±@3bÏàôüÏûj!5MMñ]z) failed (rc=-5) [ 194.893569][ T7891] netlink: 76 bytes leftover after parsing attributes in process `syz.1.736'. [ 195.156225][ T5380] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 195.351969][ T5380] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 195.358070][ T5380] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 195.361862][ T5380] usb 7-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 195.365129][ T5380] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.388517][ T5380] usb 7-1: config 0 descriptor?? [ 195.865694][ T5380] pantherlord 0003:0F30:0111.0004: item fetching failed at offset 6/7 [ 195.872143][ T5380] pantherlord 0003:0F30:0111.0004: parse failed [ 195.874914][ T5380] pantherlord 0003:0F30:0111.0004: probe with driver pantherlord failed with error -22 [ 196.060843][ T10] usb 7-1: USB disconnect, device number 4 [ 196.352612][ T7909] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 196.657798][ T7913] netlink: 'syz.2.742': attribute type 4 has an invalid length. [ 196.717390][ T7913] netlink: 'syz.2.742': attribute type 4 has an invalid length. [ 197.470615][ T39] audit: type=1326 audit(1722987679.770:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.746" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 197.480900][ T39] audit: type=1326 audit(1722987679.770:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.746" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 197.483491][ T7921] No such timeout policy "syz0" [ 197.491647][ T39] audit: type=1326 audit(1722987679.781:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.746" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 197.491694][ T39] audit: type=1326 audit(1722987679.781:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.746" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 197.491732][ T39] audit: type=1326 audit(1722987679.781:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.746" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 197.491770][ T39] audit: type=1326 audit(1722987679.781:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.746" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 197.491808][ T39] audit: type=1326 audit(1722987679.781:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.746" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 197.539980][ T39] audit: type=1326 audit(1722987679.781:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.746" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 197.549818][ T39] audit: type=1326 audit(1722987679.791:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.746" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 197.563016][ T39] audit: type=1326 audit(1722987679.791:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.746" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x7ffc0000 [ 208.264282][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.273434][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.277301][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.281219][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.285823][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.288850][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.493931][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.558138][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.574822][ T7946] chnl_net:caif_netlink_parms(): no params data found [ 208.652498][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.804212][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.814085][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.817523][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.820719][ T7946] bridge_slave_0: entered allmulticast mode [ 208.824583][ T7946] bridge_slave_0: entered promiscuous mode [ 208.829318][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.832183][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.835511][ T7946] bridge_slave_1: entered allmulticast mode [ 208.839362][ T7946] bridge_slave_1: entered promiscuous mode [ 208.891041][ T7946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.896805][ T7946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.946585][ T7946] team0: Port device team_slave_0 added [ 208.952271][ T7946] team0: Port device team_slave_1 added [ 209.010708][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.013268][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.025516][ T7946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.040059][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.042680][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.054289][ T7946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.096409][ T57] team0: left allmulticast mode [ 209.098319][ T57] team_slave_0: left allmulticast mode [ 209.100491][ T57] team_slave_1: left allmulticast mode [ 209.102907][ T57] team0: left promiscuous mode [ 209.104653][ T57] team_slave_0: left promiscuous mode [ 209.106426][ T57] team_slave_1: left promiscuous mode [ 209.109709][ T57] bridge0: port 3(team0) entered disabled state [ 209.114584][ T57] bridge_slave_1: left allmulticast mode [ 209.116680][ T57] bridge_slave_1: left promiscuous mode [ 209.118841][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.124759][ T57] bridge_slave_0: left allmulticast mode [ 209.127022][ T57] bridge_slave_0: left promiscuous mode [ 209.129389][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.320121][ T7958] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 209.485615][ T7961] input: syz0 as /devices/virtual/input/input14 [ 209.548703][ T7964] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 209.650858][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.658472][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.670528][ T57] bond0 (unregistering): Released all slaves [ 209.754788][ T57] tipc: Left network mode [ 209.767763][ T7946] hsr_slave_0: entered promiscuous mode [ 209.771943][ T7946] hsr_slave_1: entered promiscuous mode [ 209.784752][ T7946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.787369][ T7946] Cannot create hsr debugfs directory [ 210.082019][ T57] hsr_slave_0: left promiscuous mode [ 210.085063][ T57] hsr_slave_1: left promiscuous mode [ 210.087533][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.090764][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.095042][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.098035][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.130012][ T57] veth1_macvtap: left promiscuous mode [ 210.133491][ T57] veth0_macvtap: left promiscuous mode [ 210.136143][ T57] veth1_vlan: left promiscuous mode [ 210.138455][ T57] veth0_vlan: left promiscuous mode [ 210.235609][ T5338] Bluetooth: hci3: command tx timeout [ 210.334572][ T7980] blktrace: Concurrent blktraces are not allowed on loop9 [ 210.495964][ T7983] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 211.164872][ T57] team0 (unregistering): Port device team_slave_1 removed [ 211.258329][ T57] team0 (unregistering): Port device team_slave_0 removed [ 211.877958][ T7980] netlink: 76 bytes leftover after parsing attributes in process `syz.3.755'. [ 212.217099][ T5338] Bluetooth: hci3: command tx timeout [ 212.292689][ T7946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.305544][ T7946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.313416][ T7946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.319790][ T7946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.386449][ T57] IPVS: stop unused estimator thread 0... [ 212.401051][ T7946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.421985][ T7946] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.430198][ T5478] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.433052][ T5478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.445212][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.448044][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.603427][ T7946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.642441][ T7946] veth0_vlan: entered promiscuous mode [ 212.654315][ T7946] veth1_vlan: entered promiscuous mode [ 212.676909][ T7946] veth0_macvtap: entered promiscuous mode [ 212.681174][ T7946] veth1_macvtap: entered promiscuous mode [ 212.690987][ T7946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.695620][ T7946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.699726][ T7946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.703724][ T7946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.707778][ T7946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.711633][ T7946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.716764][ T7946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.723715][ T7946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.727635][ T7946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.731710][ T7946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.736176][ T7946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.740318][ T7946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.745022][ T7946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.752315][ T7946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.759130][ T7946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.762422][ T7946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.766221][ T7946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.769660][ T7946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.815171][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.822297][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.848210][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.851641][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.898332][ T8021] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 212.934748][ T39] kauditd_printk_skb: 75 callbacks suppressed [ 212.934764][ T39] audit: type=1326 audit(1722987696.011:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.0.749" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535db779f9 code=0x0 [ 213.358829][ T8018] dccp_close: ABORT with 32 bytes unread [ 214.123197][ T8050] netlink: 'syz.1.757': attribute type 4 has an invalid length. [ 214.188718][ T8050] netlink: 'syz.1.757': attribute type 4 has an invalid length. [ 214.198093][ T5338] Bluetooth: hci3: command tx timeout [ 215.156015][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 215.200199][ T8073] gfs2: not a GFS2 filesystem [ 215.316173][ T8076] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 216.023003][ T8074] dccp_close: ABORT with 32 bytes unread [ 216.179581][ T5338] Bluetooth: hci3: command tx timeout [ 216.482748][ T39] audit: type=1326 audit(1722987699.727:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.0.773" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535db779f9 code=0x0 [ 217.229263][ T8111] netlink: 'syz.1.775': attribute type 4 has an invalid length. [ 217.296022][ T8113] netlink: 'syz.1.775': attribute type 4 has an invalid length. [ 218.161400][ T5338] Bluetooth: hci3: command tx timeout [ 218.958577][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 218.964740][ T8141] gfs2: not a GFS2 filesystem [ 220.151432][ T5338] Bluetooth: hci3: command tx timeout [ 220.465018][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 223.842149][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 224.148118][ T8244] gfs2: not a GFS2 filesystem [ 225.167875][ T39] audit: type=1326 audit(1722987708.850:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8270 comm="syz.1.799" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x0 [ 225.400403][ T5401] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 225.576416][ T5401] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.583886][ T5401] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.589592][ T5401] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.594088][ T5401] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.601497][ T5401] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.607096][ T5401] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.611626][ T5401] usb 7-1: Product: syz [ 225.614087][ T5401] usb 7-1: Manufacturer: syz [ 225.624444][ T5401] cdc_wdm 7-1:1.0: skipping garbage [ 225.627071][ T5401] cdc_wdm 7-1:1.0: skipping garbage [ 225.631652][ T5401] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 225.635076][ T5401] cdc_wdm 7-1:1.0: Unknown control protocol [ 225.852555][ T39] audit: type=1400 audit(1722987709.574:1011): avc: denied { watch watch_reads } for pid=8270 comm="syz.1.799" path="/proc/626" dev="proc" ino=21858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 225.895184][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 225.895334][ T1294] usb 7-1: USB disconnect, device number 5 [ 225.898242][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 225.903456][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 226.076261][ T8281] pim6reg1: entered promiscuous mode [ 226.086776][ T8281] pim6reg1: entered allmulticast mode [ 229.038148][ T8325] ubi0: attaching mtd0 [ 229.044990][ T8325] ubi0: scanning is finished [ 229.047054][ T8325] ubi0: empty MTD device detected [ 229.080604][ T8325] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 229.084768][ T8325] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 229.088502][ T8325] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 229.092636][ T8325] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 229.096589][ T8325] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 229.099639][ T8325] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 229.105193][ T8325] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1144017144 [ 229.112525][ T8325] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 229.119735][ T8326] ubi0: background thread "ubi_bgt0d" started, PID 8326 [ 230.179167][ T39] audit: type=1800 audit(1722987714.109:1012): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.818" name="/" dev="sockfs" ino=19955 res=0 errno=0 [ 230.395354][ T56] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 230.565453][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.570125][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.574105][ T56] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 230.578121][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.585051][ T56] usb 8-1: config 0 descriptor?? [ 231.000059][ T56] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 231.016702][ T56] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0005/input/input15 [ 231.050408][ T56] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 231.243102][ T1294] usb 8-1: USB disconnect, device number 9 [ 231.822093][ T39] audit: type=1326 audit(1722987715.841:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.2.823" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f2b3779f9 code=0x0 [ 233.049057][ T1294] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 233.234327][ T1294] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.249664][ T1294] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.254205][ T1294] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.258899][ T1294] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.267720][ T1294] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.271906][ T1294] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.276604][ T1294] usb 6-1: Product: syz [ 233.279586][ T1294] usb 6-1: Manufacturer: syz [ 233.290580][ T1294] cdc_wdm 6-1:1.0: skipping garbage [ 233.293082][ T1294] cdc_wdm 6-1:1.0: skipping garbage [ 233.298794][ T1294] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 233.302129][ T1294] cdc_wdm 6-1:1.0: Unknown control protocol [ 233.984255][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 233.986849][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 233.989385][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 233.991727][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 233.994663][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 233.997673][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 234.000582][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 234.003067][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 234.005752][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 234.008517][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 234.011270][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 234.016374][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 234.019102][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 234.022172][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 234.025327][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 234.028059][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 234.030959][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 234.033717][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 234.036301][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 234.038655][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 234.042600][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 234.045889][ T1294] usb 6-1: USB disconnect, device number 8 [ 234.320891][ T39] audit: type=1400 audit(1722987718.466:1014): avc: denied { watch } for pid=8403 comm="syz.0.830" path="/17/file0" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.379645][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 235.224822][ T39] audit: type=1326 audit(1722987719.411:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.836" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46aff779f9 code=0x0 [ 235.389549][ T8423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.997291][ T8433] netlink: 'syz.1.838': attribute type 4 has an invalid length. [ 236.047499][ T8433] netlink: 'syz.1.838': attribute type 4 has an invalid length. [ 237.660238][ T5382] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 237.711714][ T39] audit: type=1400 audit(1722987722.004:1016): avc: denied { unmount } for pid=7946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 237.832792][ T5382] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.837584][ T5382] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.843321][ T5382] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.847985][ T5382] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.855363][ T5382] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.859216][ T5382] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.863749][ T5382] usb 8-1: Product: syz [ 237.865975][ T5382] usb 8-1: Manufacturer: syz [ 237.876079][ T5382] cdc_wdm 8-1:1.0: skipping garbage [ 237.879156][ T5382] cdc_wdm 8-1:1.0: skipping garbage [ 237.886823][ T5382] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 237.889503][ T5382] cdc_wdm 8-1:1.0: Unknown control protocol [ 238.303510][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 238.306743][ T5382] usb 8-1: USB disconnect, device number 10 [ 238.817081][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 239.136688][ T8465] block nbd1: shutting down sockets [ 239.608941][ T39] audit: type=1326 audit(1722987724.009:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8483 comm="syz.0.849" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535db779f9 code=0x0 [ 239.820767][ T8489] netlink: 'syz.1.851': attribute type 4 has an invalid length. [ 239.860189][ T5401] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 239.866865][ T8489] netlink: 'syz.1.851': attribute type 4 has an invalid length. [ 240.044417][ T5401] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.048750][ T5401] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.053174][ T5401] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.057417][ T5401] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.065374][ T5401] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.071259][ T5401] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.075150][ T5401] usb 7-1: Product: syz [ 240.077059][ T5401] usb 7-1: Manufacturer: syz [ 240.085526][ T5401] cdc_wdm 7-1:1.0: skipping garbage [ 240.088155][ T5401] cdc_wdm 7-1:1.0: skipping garbage [ 240.092441][ T5401] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 240.095335][ T5401] cdc_wdm 7-1:1.0: Unknown control protocol [ 240.422341][ C3] wdm_int_callback: 55 callbacks suppressed [ 240.422354][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 240.427846][ C3] wdm_int_callback: 55 callbacks suppressed [ 240.427859][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 240.433936][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 240.436480][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 240.439137][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 240.442279][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 240.445175][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 240.448259][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 240.451000][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 240.454594][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 240.457642][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 240.460341][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 240.463095][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 240.465703][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 240.468355][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 240.471916][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 240.474988][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 240.477961][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 240.480892][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 240.483754][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 240.492890][ T5382] usb 7-1: USB disconnect, device number 6 [ 240.495816][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 242.647293][ T8527] block nbd2: shutting down sockets [ 243.455986][ T66] Bluetooth: hci1: ACL packet for unknown connection handle 1993 [ 243.478013][ T39] audit: type=1400 audit(1722987728.072:1018): avc: denied { setattr } for pid=8546 comm="syz.2.864" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.486186][ T8547] bond0: (slave rose0): refused to change device type [ 243.488105][ T39] audit: type=1400 audit(1722987728.082:1019): avc: denied { wake_alarm } for pid=8546 comm="syz.2.864" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.689465][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 243.727692][ T5401] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 243.752912][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 243.757380][ T8557] bridge_slave_1: left allmulticast mode [ 243.759702][ T8557] bridge_slave_1: left promiscuous mode [ 243.763667][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.775406][ T8557] bridge_slave_0: left allmulticast mode [ 243.781981][ T8557] bridge_slave_0: left promiscuous mode [ 243.785091][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.929969][ T5401] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.933464][ T5401] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.938687][ T5401] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.943528][ T5401] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.951413][ T5401] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.955798][ T5401] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.960125][ T5401] usb 6-1: Product: syz [ 243.962499][ T5401] usb 6-1: Manufacturer: syz [ 243.970758][ T5401] cdc_wdm 6-1:1.0: skipping garbage [ 243.973325][ T5401] cdc_wdm 6-1:1.0: skipping garbage [ 243.978531][ T5401] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 243.981160][ T5401] cdc_wdm 6-1:1.0: Unknown control protocol [ 244.374019][ T1294] usb 6-1: USB disconnect, device number 9 [ 244.374058][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 244.677288][ T39] audit: type=1400 audit(1722987729.331:1020): avc: denied { nlmsg_read } for pid=8561 comm="syz.3.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 246.151926][ T8570] block nbd3: shutting down sockets [ 246.539718][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 246.932073][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.341635][ T8589] block nbd0: shutting down sockets [ 247.825445][ T39] audit: type=1400 audit(1722987732.638:1021): avc: denied { setopt } for pid=8611 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 249.340369][ T8631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'. [ 249.344838][ T39] audit: type=1400 audit(1722987734.223:1022): avc: denied { write } for pid=8626 comm="syz.0.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 249.380477][ T39] audit: type=1400 audit(1722987734.276:1023): avc: denied { bind } for pid=8626 comm="syz.0.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 250.695113][ C3] vkms_vblank_simulate: vblank timer overrun [ 251.496743][ T39] audit: type=1326 audit(1722987736.491:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.2.890" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f2b3779f9 code=0x0 [ 252.255571][ T8656] block nbd3: shutting down sockets [ 252.281627][ T5339] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 252.481400][ T5339] usb 6-1: Using ep0 maxpacket: 32 [ 252.487244][ T5339] usb 6-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=2e.fd [ 252.492729][ T5339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.498030][ T5339] usb 6-1: config 0 descriptor?? [ 252.515307][ T5339] vmk80xx 6-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 253.455908][ T5338] Bluetooth: hci1: command 0x0406 tx timeout [ 254.762073][ T35] usb 6-1: USB disconnect, device number 10 [ 254.929486][ T39] audit: type=1400 audit(1722987740.081:1025): avc: denied { getopt } for pid=8673 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.224698][ T39] audit: type=1400 audit(1722987740.407:1026): avc: denied { create } for pid=8671 comm="syz.3.903" name="file6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 255.239735][ T39] audit: type=1400 audit(1722987740.428:1027): avc: denied { unlink } for pid=8671 comm="syz.3.903" name="file7" dev="9p" ino=36701639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 256.679653][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 258.348706][ T8718] (syz.1.905,8718,2):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 258.354173][ T8718] (syz.1.905,8718,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 259.821579][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.989722][ T8729] block nbd2: shutting down sockets [ 260.084629][ T8746] sctp: [Deprecated]: syz.0.911 (pid 8746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.084629][ T8746] Use struct sctp_sack_info instead [ 260.122680][ T8747] input: syz1 as /devices/virtual/input/input16 [ 260.238729][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 260.622492][ T39] audit: type=1326 audit(1722987746.076:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.1.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7fc00000 [ 260.632603][ T39] audit: type=1326 audit(1722987746.086:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.1.910" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25fc3779f9 code=0x7fc00000 [ 260.642829][ T39] audit: type=1326 audit(1722987746.086:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.1.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7fc00000 [ 260.652860][ T39] audit: type=1326 audit(1722987746.086:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.1.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7fc00000 [ 260.662742][ T39] audit: type=1326 audit(1722987746.086:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.1.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7fc00000 [ 260.672639][ T39] audit: type=1326 audit(1722987746.086:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.1.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7fc00000 [ 260.682147][ T39] audit: type=1326 audit(1722987746.086:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.1.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7fc00000 [ 260.691262][ T39] audit: type=1326 audit(1722987746.086:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.1.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7fc00000 [ 260.701897][ T39] audit: type=1326 audit(1722987746.086:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.1.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7fc00000 [ 260.713565][ T39] audit: type=1326 audit(1722987746.086:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.1.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x7fc00000 [ 261.160464][ T8765] 9pnet_fd: Insufficient options for proto=fd [ 261.306258][ T8767] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 263.866833][ T8804] input: syz1 as /devices/virtual/input/input17 [ 264.139789][ T8803] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.700611][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 266.882534][ T8849] 9pnet_fd: Insufficient options for proto=fd [ 268.834628][ T8874] syzkaller1: entered promiscuous mode [ 268.837375][ T8874] syzkaller1: entered allmulticast mode [ 268.862050][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.938'. [ 269.444472][ T8883] sctp: [Deprecated]: syz.2.939 (pid 8883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.444472][ T8883] Use struct sctp_sack_info instead [ 269.702516][ T8888] 9pnet_virtio: no channels available for device syz [ 269.915754][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 269.915764][ T39] audit: type=1400 audit(1722987755.828:1100): avc: denied { setopt } for pid=8889 comm="syz.2.942" lport=39593 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 271.833432][ T8913] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.525049][ T8927] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.948'. [ 272.531856][ T8927] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 272.670592][ T39] audit: type=1400 audit(1722987758.715:1101): avc: denied { write } for pid=8932 comm="syz.3.950" lport=54005 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 272.682420][ T39] audit: type=1800 audit(1722987758.736:1102): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.948" name="/" dev="fuse" ino=1 res=0 errno=0 [ 272.817606][ T8935] syzkaller1: entered promiscuous mode [ 272.820461][ T8935] syzkaller1: entered allmulticast mode [ 272.831296][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'. [ 274.735667][ T8956] vivid-002: disconnect [ 274.740057][ T8955] vivid-002: reconnect [ 277.156516][ T39] audit: type=1326 audit(1722987763.418:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.0.964" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535db779f9 code=0x0 [ 278.062458][ T39] audit: type=1804 audit(1722987764.384:1104): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.968" name="/newroot/260/file0" dev="fuse" ino=1 res=1 errno=0 [ 278.260891][ T9009] netlink: 830 bytes leftover after parsing attributes in process `syz.1.975'. [ 278.995455][ T9011] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.969'. [ 278.999495][ T9011] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 279.130692][ T39] audit: type=1800 audit(1722987765.497:1105): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.969" name="/" dev="fuse" ino=1 res=0 errno=0 [ 279.785999][ T9026] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 279.790194][ T9026] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 280.788634][ T9030] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.628498][ T9060] syzkaller0: entered allmulticast mode [ 283.039996][ T9075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.105855][ T39] audit: type=1400 audit(1722987769.675:1106): avc: denied { setopt } for pid=9070 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 284.211401][ T9087] x_tables: duplicate underflow at hook 2 [ 284.410021][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.994'. [ 284.431815][ T39] audit: type=1326 audit(1722987771.071:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.0.994" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535db779f9 code=0x0 [ 284.761734][ T9094] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 285.962377][ T9130] syzkaller1: entered promiscuous mode [ 285.965512][ T9130] syzkaller1: entered allmulticast mode [ 286.000397][ T9130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1003'. [ 286.521638][ T39] audit: type=1800 audit(1722987773.265:1108): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1005" name="/" dev="fuse" ino=1 res=0 errno=0 [ 286.613171][ T9140] overlay: ./file0 is not a directory [ 286.726705][ T9145] sit0: entered allmulticast mode [ 286.770132][ T9146] x_tables: duplicate underflow at hook 2 [ 286.776010][ T5338] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 286.966216][ T9147] sit0: entered promiscuous mode [ 287.443206][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 287.512915][ T39] audit: type=1326 audit(1722987774.305:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.2.1008" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f2b3779f9 code=0x0 [ 287.877310][ T9162] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.912823][ T9163] 9pnet_fd: Insufficient options for proto=fd [ 288.007922][ T9168] openvswitch: netlink: IP tunnel dst address not specified [ 288.746654][ T39] audit: type=1400 audit(1722987775.607:1110): avc: denied { connect } for pid=9180 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 288.755108][ T39] audit: type=1400 audit(1722987775.607:1111): avc: denied { ioctl } for pid=9180 comm="syz.0.1019" path="socket:[25684]" dev="sockfs" ino=25684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 289.099082][ T9182] netlink: 'syz.0.1019': attribute type 13 has an invalid length. [ 289.394193][ T9190] x_tables: duplicate underflow at hook 2 [ 289.857821][ T9193] block nbd2: Unsupported socket: shutdown callout must be supported. [ 289.945961][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1025'. [ 290.009286][ T39] audit: type=1326 audit(1722987776.919:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9192 comm="syz.1.1025" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25fc3779f9 code=0x0 [ 290.020596][ T9203] x_tables: duplicate underflow at hook 2 [ 290.914287][ T9218] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 292.101739][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 292.405594][ T9251] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 295.437691][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1058'. [ 295.465625][ T39] audit: type=1400 audit(1722987782.651:1113): avc: denied { open } for pid=9311 comm="syz.1.1058" path="/dev/ptyq7" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 295.467251][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 296.640862][ T9340] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 297.989404][ T9365] 9pnet_fd: Insufficient options for proto=fd [ 298.244417][ T9366] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 299.167979][ T9372] "syz.0.1082" (9372) uses obsolete ecb(arc4) skcipher [ 299.784161][ T9402] x_tables: duplicate underflow at hook 2 [ 300.411809][ T9410] "syz.3.1085" (9410) uses obsolete ecb(arc4) skcipher [ 300.477847][ T39] audit: type=1400 audit(1722987787.910:1114): avc: denied { bind } for pid=9414 comm="syz.3.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.590660][ T9419] 9pnet_fd: Insufficient options for proto=fd [ 300.711681][ T9429] openvswitch: netlink: IP tunnel dst address not specified [ 301.814265][ T9460] syzkaller1: entered promiscuous mode [ 301.816801][ T9460] syzkaller1: entered allmulticast mode [ 301.830406][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1095'. [ 302.314667][ T9465] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 302.322222][ T9465] VFS: Can't find a romfs filesystem on dev nullb0. [ 302.322222][ T9465] [ 302.484772][ T9475] x_tables: duplicate underflow at hook 2 [ 302.494603][ T5338] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 303.290252][ T39] audit: type=1400 audit(1722987790.860:1115): avc: denied { getopt } for pid=9484 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 303.577453][ T39] audit: type=1400 audit(1722987791.165:1116): avc: denied { ioctl } for pid=9491 comm="syz.3.1104" path="socket:[25997]" dev="sockfs" ino=25997 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.860556][ T9504] syzkaller1: entered promiscuous mode [ 303.863608][ T9504] syzkaller1: entered allmulticast mode [ 303.882235][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1107'. [ 304.333641][ T9510] sit0: entered allmulticast mode [ 304.565551][ T9518] sit0: entered promiscuous mode [ 304.670426][ T9529] x_tables: duplicate underflow at hook 2 [ 305.422339][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 305.765035][ T39] audit: type=1400 audit(1722987793.464:1117): avc: denied { setopt } for pid=9544 comm="syz.1.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 305.794567][ T39] audit: type=1400 audit(1722987793.495:1118): avc: denied { load_policy } for pid=9533 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 305.795020][ T9550] SELinux: policydb string does not match my string SE Linux [ 305.814240][ T9550] SELinux: failed to load policy [ 305.856253][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1122'. [ 305.867652][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 305.878208][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 305.979235][ T39] audit: type=1400 audit(1722987793.695:1119): avc: denied { ioctl } for pid=9564 comm="syz.0.1128" path="socket:[28823]" dev="sockfs" ino=28823 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 306.333264][ T9579] netlink: 'syz.2.1133': attribute type 10 has an invalid length. [ 306.348830][ T9580] x_tables: duplicate underflow at hook 2 [ 306.353263][ T5338] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 306.354431][ T9579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.364963][ T9579] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 306.422379][ T9582] netlink: zone id is out of range [ 306.424573][ T9582] netlink: zone id is out of range [ 306.430161][ T9582] netlink: zone id is out of range [ 306.432482][ T9582] netlink: zone id is out of range [ 306.434917][ T9582] netlink: zone id is out of range [ 306.437209][ T9582] netlink: zone id is out of range [ 306.439392][ T9582] netlink: zone id is out of range [ 306.441650][ T9582] netlink: zone id is out of range [ 306.444011][ T9582] netlink: zone id is out of range [ 306.449461][ T9582] netlink: zone id is out of range [ 306.517357][ T9584] bridge_slave_1: left allmulticast mode [ 306.524560][ T9584] bridge_slave_1: left promiscuous mode [ 306.529882][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.315445][ T39] audit: type=1400 audit(1722987795.091:1120): avc: denied { relabelfrom } for pid=9603 comm="syz.1.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 307.327141][ T39] audit: type=1400 audit(1722987795.091:1121): avc: denied { relabelto } for pid=9603 comm="syz.1.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 307.487109][ T39] audit: type=1400 audit(1722987795.269:1122): avc: denied { write } for pid=9603 comm="syz.1.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.760742][ T9620] x_tables: duplicate underflow at hook 2 [ 308.368643][ T5382] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 308.556093][ T5382] usb 6-1: Using ep0 maxpacket: 8 [ 308.563239][ T5382] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 308.567771][ T5382] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.572345][ T5382] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.576463][ T5382] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.581464][ T5382] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.587253][ T5382] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.591664][ T5382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.674401][ T9639] x_tables: duplicate underflow at hook 2 [ 308.682188][ T5338] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 308.794719][ T5382] usb 6-1: usb_control_msg returned -32 [ 308.801257][ T5382] usbtmc 6-1:16.0: can't read capabilities [ 311.798507][ T56] usb 6-1: USB disconnect, device number 11 [ 312.032111][ T9653] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 313.183934][ T39] audit: type=1400 audit(1722987801.253:1123): avc: denied { create } for pid=9663 comm="syz.3.1158" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 313.202287][ T39] audit: type=1400 audit(1722987801.264:1124): avc: denied { write } for pid=9663 comm="syz.3.1158" name="file0" dev="tmpfs" ino=1738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 313.218102][ T39] audit: type=1400 audit(1722987801.264:1125): avc: denied { open } for pid=9663 comm="syz.3.1158" path="/315/file0" dev="tmpfs" ino=1738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 313.228563][ T39] audit: type=1400 audit(1722987801.274:1126): avc: denied { ioctl } for pid=9663 comm="syz.3.1158" path="/315/file0" dev="tmpfs" ino=1738 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 313.265903][ T39] audit: type=1400 audit(1722987801.337:1127): avc: denied { unlink } for pid=5335 comm="syz-executor" name="file0" dev="tmpfs" ino=1738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 313.298490][ T9674] bridge_slave_1: left allmulticast mode [ 313.301633][ T9674] bridge_slave_1: left promiscuous mode [ 313.306903][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.432143][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 313.440796][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 313.449823][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 313.601987][ T9692] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 313.785137][ T9702] cdrom: dropping to single frame dma [ 313.956530][ T9705] blktrace: Concurrent blktraces are not allowed on loop3 [ 315.285219][ T5338] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 315.389701][ T39] audit: type=1400 audit(1722987803.563:1128): avc: denied { listen } for pid=9731 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.631422][ T39] audit: type=1400 audit(1722987803.825:1129): avc: denied { ioctl } for pid=9740 comm="syz.0.1188" path="socket:[26423]" dev="sockfs" ino=26423 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 316.086925][ T9751] VFS: could not find a valid V7 on nullb0. [ 316.234963][ T9753] fuseblk: Bad value for 'fd' [ 316.398021][ T9759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 317.150866][ T5338] Bluetooth: hci1: command 0x0406 tx timeout [ 318.160599][ T5382] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 318.356939][ T5382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.361352][ T5382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.365685][ T5382] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 318.369578][ T5382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.383989][ T5382] usb 5-1: config 0 descriptor?? [ 318.793359][ T39] audit: type=1400 audit(1722987807.143:1130): avc: denied { mount } for pid=9784 comm="syz.0.1197" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 318.805445][ T39] audit: type=1400 audit(1722987807.153:1131): avc: denied { remount } for pid=9784 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 319.436982][ T5382] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 319.495099][ T5382] usb 5-1: USB disconnect, device number 8 [ 319.987316][ T39] audit: type=1400 audit(1722987808.392:1132): avc: denied { unmount } for pid=7946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 320.054643][ T9825] fuseblk: Bad value for 'fd' [ 320.681316][ T39] audit: type=1400 audit(1722987809.127:1133): avc: denied { bind } for pid=9838 comm="syz.2.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.692537][ T39] audit: type=1400 audit(1722987809.127:1134): avc: denied { listen } for pid=9838 comm="syz.2.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.703587][ T39] audit: type=1400 audit(1722987809.137:1135): avc: denied { accept } for pid=9838 comm="syz.2.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.753058][ T9842] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 320.917205][ T9848] kcapi: manufacturer command 0 unknown. [ 320.952866][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1217'. [ 321.121901][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 321.132352][ T39] audit: type=1400 audit(1722987809.599:1136): avc: denied { ioctl } for pid=9849 comm="syz.0.1219" path="socket:[26573]" dev="sockfs" ino=26573 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 321.704807][ T39] audit: type=1400 audit(1722987810.187:1137): avc: denied { getopt } for pid=9858 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.096627][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 322.247823][ T10] usb 7-1: device descriptor read/64, error -71 [ 322.514400][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 322.714009][ T10] usb 7-1: device descriptor read/64, error -71 [ 322.841789][ T10] usb usb7-port1: attempt power cycle [ 323.258431][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 323.282582][ T9869] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 323.300356][ T10] usb 7-1: device descriptor read/8, error -71 [ 323.716147][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 323.861427][ T10] usb 7-1: device descriptor read/8, error -71 [ 324.029950][ T10] usb usb7-port1: unable to enumerate USB device [ 324.711978][ T9891] 9pnet_fd: Insufficient options for proto=fd [ 325.172256][ T5339] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 325.205643][ T9902] Bluetooth: MGMT ver 1.23 [ 325.352071][ T9923] tmpfs: Bad value for 'mpol' [ 325.373535][ T5339] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 325.400065][ T5339] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 325.408238][ T5339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.413822][ T5339] usb 7-1: Product: syz [ 325.415757][ T5339] usb 7-1: Manufacturer: syz [ 325.418271][ T5339] usb 7-1: SerialNumber: syz [ 325.491196][ T39] audit: type=1400 audit(1722987814.176:1138): avc: denied { ioctl } for pid=9934 comm="syz.0.1244" path="socket:[28444]" dev="sockfs" ino=28444 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 325.548845][ T9941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 325.552028][ T9941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 325.558605][ T9941] vhci_hcd vhci_hcd.0: Device attached [ 325.584423][ T39] audit: type=1400 audit(1722987814.271:1139): avc: denied { connect } for pid=9937 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 325.587739][ T9944] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 325.610139][ T11] vhci_hcd: stop threads [ 325.612210][ T11] vhci_hcd: release socket [ 325.614158][ T11] vhci_hcd: disconnect device [ 325.919200][ T39] audit: type=1400 audit(1722987814.617:1140): avc: denied { connect } for pid=9960 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 326.811368][ T9985] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 326.814535][ T9985] netlink: 'syz.0.1261': attribute type 4 has an invalid length. [ 326.817670][ T9985] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1261'. [ 326.943403][ T9989] xt_cgroup: xt_cgroup: no path or classid specified [ 327.113784][ T39] audit: type=1400 audit(1722987815.866:1141): avc: denied { watch_reads } for pid=9992 comm="syz.0.1272" path="/144/control" dev="tmpfs" ino=793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 327.724332][ T1294] usb 7-1: USB disconnect, device number 11 [ 327.871927][ T39] audit: type=1400 audit(1722987816.675:1142): avc: denied { accept } for pid=10014 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 328.533955][ T1294] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 328.727244][ T1294] usb 5-1: Using ep0 maxpacket: 32 [ 328.747585][ T1294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.752345][ T1294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.757904][ T1294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.762174][ T1294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 328.768237][ T1294] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 328.772325][ T1294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.776674][T10031] evm: overlay not supported [ 328.782839][ T1294] usb 5-1: config 0 descriptor?? [ 329.185458][ T1294] hid-generic 0003:1B96:9F0A.0007: hidraw1: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.0-1/input0 [ 330.360259][T10056] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 330.364061][T10056] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 330.368986][T10056] vhci_hcd vhci_hcd.0: Device attached [ 330.390197][T10058] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 330.418946][ T111] vhci_hcd: stop threads [ 330.429785][ T111] vhci_hcd: release socket [ 330.432589][ T111] vhci_hcd: disconnect device [ 331.099552][ T56] usb 5-1: USB disconnect, device number 9 [ 332.226537][T10094] overlayfs: failed to resolve './file1': -2 [ 332.362069][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 332.545291][T10106] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 332.548258][T10106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 332.569692][T10106] vhci_hcd vhci_hcd.0: Device attached [ 332.575743][T10111] syzkaller1: entered promiscuous mode [ 332.578284][T10111] syzkaller1: entered allmulticast mode [ 332.590847][T10112] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 332.599933][ T11] vhci_hcd: stop threads [ 332.604664][ T11] vhci_hcd: release socket [ 332.611235][ T11] vhci_hcd: disconnect device [ 334.374448][ T39] audit: type=1400 audit(1722987823.498:1143): avc: denied { read } for pid=10158 comm="syz.3.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.425323][ T39] audit: type=1400 audit(1722987823.551:1144): avc: denied { write } for pid=10158 comm="syz.3.1315" path="socket:[27432]" dev="sockfs" ino=27432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 335.145217][ T5339] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 335.335114][ T5339] usb 7-1: Using ep0 maxpacket: 32 [ 335.340830][ T5339] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.346289][ T5339] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 335.353062][ T5339] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.362336][ T5339] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.366647][ T5339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.369698][ T5339] usb 7-1: Product: syz [ 335.371208][ T5339] usb 7-1: Manufacturer: syz [ 335.373228][ T5339] usb 7-1: SerialNumber: syz [ 335.707120][ T1294] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 335.851716][ T1294] usb 8-1: device descriptor read/64, error -71 [ 336.106726][ T1294] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 336.250155][ T1294] usb 8-1: device descriptor read/64, error -71 [ 336.281420][ T5339] cdc_ncm 7-1:1.0: skipping garbage [ 336.286173][ T5339] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 336.289379][ T5339] cdc_ncm 7-1:1.0: bind() failure [ 336.294924][ T5339] usb 7-1: USB disconnect, device number 12 [ 336.364747][ T1294] usb usb8-port1: attempt power cycle [ 336.808018][ T39] audit: type=1400 audit(1722987826.039:1145): avc: denied { map } for pid=10208 comm="syz.0.1330" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 336.809864][ T1294] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 336.891977][ T1294] usb 8-1: device descriptor read/8, error -71 [ 337.173591][ T1294] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 337.213758][ T1294] usb 8-1: device descriptor read/8, error -71 [ 337.244100][ T39] audit: type=1400 audit(1722987826.511:1146): avc: denied { getopt } for pid=10242 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 337.336555][ T1294] usb usb8-port1: unable to enumerate USB device [ 337.402687][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 337.603721][ T10] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 337.607523][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.611292][ T10] usb 7-1: Product: syz [ 337.613184][ T10] usb 7-1: Manufacturer: syz [ 337.615164][ T10] usb 7-1: SerialNumber: syz [ 337.623800][ T10] usb 7-1: config 0 descriptor?? [ 337.862931][ T10] usb 7-1: USB disconnect, device number 13 [ 337.935692][ T39] audit: type=1400 audit(1722987827.215:1147): avc: denied { read } for pid=10248 comm="syz.1.1342" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 338.041988][ T39] audit: type=1400 audit(1722987827.351:1148): avc: denied { ioctl } for pid=10248 comm="syz.1.1342" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 338.407247][T10268] overlayfs: failed to resolve './file1': -2 [ 338.420752][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 338.463243][T10278] netlink: 'syz.0.1348': attribute type 7 has an invalid length. [ 338.467069][T10278] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1348'. [ 338.983936][ T1294] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 339.126728][ T1294] usb 6-1: device descriptor read/64, error -71 [ 339.290538][T10297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10297 comm=syz.0.1358 [ 339.394173][ T1294] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 339.545197][T10309] overlayfs: failed to resolve './file1': -2 [ 339.545987][ T1294] usb 6-1: device descriptor read/64, error -71 [ 339.559425][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 339.660461][ T1294] usb usb6-port1: attempt power cycle [ 340.089007][ T1294] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 340.127756][ T1294] usb 6-1: device descriptor read/8, error -71 [ 340.234336][T10317] sctp: [Deprecated]: syz.3.1365 (pid 10317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.234336][T10317] Use struct sctp_sack_info instead [ 340.412660][ T1294] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 340.423236][T10312] syz.2.1363 (10312) used greatest stack depth: 20928 bytes left [ 340.451375][ T1294] usb 6-1: device descriptor read/8, error -71 [ 340.575661][ T1294] usb usb6-port1: unable to enumerate USB device [ 340.583850][ T5478] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 340.616930][T10332] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 340.625000][ T39] audit: type=1400 audit(1722987830.060:1149): avc: denied { setattr } for pid=10331 comm="syz.3.1371" name="ptype" dev="proc" ino=4026533342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 340.766087][ T5478] usb 5-1: Using ep0 maxpacket: 32 [ 340.772719][ T5478] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.778741][ T5478] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 340.782432][ T5478] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.793370][ T5478] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.797465][ T5478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.801474][ T5478] usb 5-1: Product: syz [ 340.804504][ T5478] usb 5-1: Manufacturer: syz [ 340.807466][ T5478] usb 5-1: SerialNumber: syz [ 341.028407][ T5478] cdc_ncm 5-1:1.0: skipping garbage [ 341.030787][ T5478] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 341.038137][ T5478] cdc_ncm 5-1:1.0: bind() failure [ 341.043704][ T5478] usb 5-1: USB disconnect, device number 10 [ 341.556559][ T39] audit: type=1400 audit(1722987831.046:1150): avc: denied { create } for pid=10333 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 341.579568][ T39] audit: type=1400 audit(1722987831.046:1151): avc: denied { setopt } for pid=10333 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 341.716136][T10350] Unknown options in mask 5 [ 342.518009][ T5339] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 342.680236][T10371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.708336][ T5339] usb 8-1: Using ep0 maxpacket: 32 [ 342.719069][ T5339] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.723531][ T5339] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 342.733450][ T5339] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.741995][ T5339] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.745637][ T5339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.749854][ T5339] usb 8-1: Product: syz [ 342.751671][ T5339] usb 8-1: Manufacturer: syz [ 342.753640][ T5339] usb 8-1: SerialNumber: syz [ 342.982897][ T5339] cdc_ncm 8-1:1.0: skipping garbage [ 342.992192][ T5339] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 342.994115][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 342.996317][ T5339] cdc_ncm 8-1:1.0: bind() failure [ 343.023324][ T5339] usb 8-1: USB disconnect, device number 15 [ 343.138660][ T10] usb 5-1: device descriptor read/64, error -71 [ 343.395004][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 343.503887][ T39] audit: type=1400 audit(1722987833.073:1152): avc: denied { ioctl } for pid=10415 comm="syz.1.1388" path="/dev/usbmon0" dev="devtmpfs" ino=723 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 343.547291][ T10] usb 5-1: device descriptor read/64, error -71 [ 343.663253][ T10] usb usb5-port1: attempt power cycle [ 343.664573][T10427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1400'. [ 343.669479][T10427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1400'. [ 344.051246][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 344.080315][ T10] usb 5-1: device descriptor read/8, error -71 [ 344.340673][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 344.366277][ T10] usb 5-1: device descriptor read/8, error -71 [ 344.481218][ T10] usb usb5-port1: unable to enumerate USB device [ 344.956960][T10435] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 345.619879][ T39] audit: type=1400 audit(1722987835.298:1153): avc: denied { write } for pid=10444 comm="syz.0.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 345.649507][T10445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.864385][ T39] audit: type=1400 audit(1722987835.561:1154): avc: denied { read } for pid=10448 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 347.220032][T10490] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 347.389508][T10497] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1412'. [ 347.587729][ T66] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:585 [ 347.595567][ T66] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 66, name: kworker/u33:0 [ 347.618465][ T66] preempt_count: 0, expected: 0 [ 347.620380][ T66] RCU nest depth: 1, expected: 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.622490][ T66] 4 locks held by kworker/u33:0/66: [ 347.624956][ T66] #0: ffff888043972148 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 347.629604][ T66] #1: ffffc90000d37d80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 347.634718][ T66] #2: ffff888047408078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xde/0xb30 [ 347.639527][ T66] #3: ffffffff8ddb5ca0 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0x100/0xb30 [ 347.646027][ T66] CPU: 2 UID: 0 PID: 66 Comm: kworker/u33:0 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 347.650913][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 347.655835][ T66] Workqueue: hci3 hci_rx_work [ 347.657925][ T66] Call Trace: [ 347.659263][ T66] [ 347.660562][ T66] dump_stack_lvl+0x16c/0x1f0 [ 347.662704][ T66] __might_resched+0x3c0/0x5e0 [ 347.664939][ T66] ? __pfx___might_resched+0x10/0x10 [ 347.667338][ T66] ? __pfx___lock_acquire+0x10/0x10 [ 347.669692][ T66] ? rcu_is_watching+0x12/0xc0 [ 347.672425][ T66] __mutex_lock+0xe2/0x9c0 [ 347.674444][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 347.677199][ T66] ? __pfx___mutex_lock+0x10/0x10 [ 347.680183][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 347.683728][ T66] ? find_held_lock+0x2d/0x110 [ 347.686123][ T66] ? hci_event_packet+0x438/0x1180 [ 347.688301][ T66] ? __pfx_lock_release+0x10/0x10 [ 347.690471][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 347.693041][ T66] hci_le_create_big_complete_evt+0x387/0xb30 [ 347.695635][ T66] ? __mutex_unlock_slowpath+0x164/0x650 [ 347.697962][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 347.700874][ T66] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 347.703605][ T66] ? skb_pull_data+0x166/0x210 [ 347.705567][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 347.707627][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 347.710228][ T66] hci_event_packet+0x666/0x1180 [ 347.712170][ T66] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 347.714229][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 347.716306][ T66] ? mark_held_locks+0x9f/0xe0 [ 347.718220][ T66] ? kcov_remote_start+0x3d1/0x6e0 [ 347.720404][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.722705][ T66] hci_rx_work+0x2c6/0x1610 [ 347.724480][ T66] process_one_work+0x9c5/0x1b40 [ 347.726426][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 347.728399][ T66] ? __pfx_process_one_work+0x10/0x10 [ 347.730502][ T66] ? assign_work+0x1a0/0x250 [ 347.732328][ T66] worker_thread+0x6c8/0xf20 [ 347.734151][ T66] ? __pfx_worker_thread+0x10/0x10 [ 347.736241][ T66] kthread+0x2c1/0x3a0 [ 347.737937][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.739943][ T66] ? __pfx_kthread+0x10/0x10 [ 347.741672][ T66] ret_from_fork+0x45/0x80 [ 347.743238][ T66] ? __pfx_kthread+0x10/0x10 [ 347.744845][ T66] ret_from_fork_asm+0x1a/0x30 [ 347.746666][ T66] [ 347.748244][ T66] [ 347.749305][ T66] ============================= [ 347.751395][ T66] [ BUG: Invalid wait context ] [ 347.753472][ T66] 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 Tainted: G W [ 347.757111][ T66] ----------------------------- [ 347.759199][ T66] kworker/u33:0/66 is trying to lock: [ 347.761486][ T66] ffffffff8fc85668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0x387/0xb30 [ 347.766253][ T66] other info that might help us debug this: [ 347.768771][ T66] context-{4:4} [ 347.770365][ T66] 4 locks held by kworker/u33:0/66: [ 347.772608][ T66] #0: ffff888043972148 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 347.777037][ T66] #1: ffffc90000d37d80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 347.782074][ T66] #2: ffff888047408078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xde/0xb30 [ 347.786263][ T66] #3: ffffffff8ddb5ca0 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0x100/0xb30 [ 347.790367][ T66] stack backtrace: [ 347.792039][ T66] CPU: 2 UID: 0 PID: 66 Comm: kworker/u33:0 Tainted: G W 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 347.797289][ T66] Tainted: [W]=WARN [ 347.799263][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 347.803719][ T66] Workqueue: hci3 hci_rx_work [ 347.805913][ T66] Call Trace: [ 347.807361][ T66] [ 347.808654][ T66] dump_stack_lvl+0x116/0x1f0 [ 347.810799][ T66] __lock_acquire+0x13cc/0x3cb0 [ 347.812965][ T66] ? __pfx___lock_acquire+0x10/0x10 [ 347.815205][ T66] ? irqentry_exit+0x3b/0x90 [ 347.817246][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.819555][ T66] lock_acquire+0x1b1/0x560 [ 347.821596][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 347.824345][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 347.826542][ T66] ? dump_stack_lvl+0x1a3/0x1f0 [ 347.828914][ T66] ? add_taint+0x5f/0xd0 [ 347.830854][ T66] ? __might_resched+0x3cc/0x5e0 [ 347.833180][ T66] ? __pfx___might_resched+0x10/0x10 [ 347.835385][ T66] ? __pfx___lock_acquire+0x10/0x10 [ 347.837523][ T66] __mutex_lock+0x175/0x9c0 [ 347.839454][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 347.841920][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 347.844677][ T66] ? __pfx___mutex_lock+0x10/0x10 [ 347.846857][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 347.849190][ T66] ? find_held_lock+0x2d/0x110 [ 347.851328][ T66] ? hci_event_packet+0x438/0x1180 [ 347.853581][ T66] ? __pfx_lock_release+0x10/0x10 [ 347.855855][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 347.858518][ T66] hci_le_create_big_complete_evt+0x387/0xb30 [ 347.861368][ T66] ? __mutex_unlock_slowpath+0x164/0x650 [ 347.864139][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 347.866876][ T66] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 347.869360][ T66] ? skb_pull_data+0x166/0x210 [ 347.871382][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 347.873023][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 347.875318][ T66] hci_event_packet+0x666/0x1180 [ 347.876999][ T66] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 347.878616][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 347.880326][ T66] ? mark_held_locks+0x9f/0xe0 [ 347.881853][ T66] ? kcov_remote_start+0x3d1/0x6e0 [ 347.883661][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.885729][ T66] hci_rx_work+0x2c6/0x1610 [ 347.887802][ T66] process_one_work+0x9c5/0x1b40 [ 347.890078][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 347.892365][ T66] ? __pfx_process_one_work+0x10/0x10 [ 347.894469][ T66] ? assign_work+0x1a0/0x250 [ 347.896286][ T66] worker_thread+0x6c8/0xf20 [ 347.898488][ T66] ? __pfx_worker_thread+0x10/0x10 [ 347.900828][ T66] kthread+0x2c1/0x3a0 [ 347.902620][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.904817][ T66] ? __pfx_kthread+0x10/0x10 [ 347.906827][ T66] ret_from_fork+0x45/0x80 [ 347.908830][ T66] ? __pfx_kthread+0x10/0x10 [ 347.910886][ T66] ret_from_fork_asm+0x1a/0x30 [ 347.913135][ T66] [ 347.935758][ T66] ================================================================== [ 347.939305][ T66] BUG: KASAN: slab-use-after-free in hci_le_create_big_complete_evt+0xa62/0xb30 [ 347.943230][ T66] Read of size 8 at addr ffff888023e98000 by task kworker/u33:0/66 [ 347.946663][ T66] [ 347.947743][ T66] CPU: 3 UID: 0 PID: 66 Comm: kworker/u33:0 Tainted: G W 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 347.953020][ T66] Tainted: [W]=WARN [ 347.954783][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 347.959215][ T66] Workqueue: hci3 hci_rx_work [ 347.961068][ T66] Call Trace: [ 347.962451][ T66] [ 347.963838][ T66] dump_stack_lvl+0x116/0x1f0 [ 347.965895][ T66] print_report+0xc3/0x620 [ 347.967837][ T66] ? __virt_addr_valid+0x5e/0x590 [ 347.970056][ T66] ? __phys_addr+0xc6/0x150 [ 347.972122][ T66] kasan_report+0xd9/0x110 [ 347.974139][ T66] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 347.976903][ T66] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 347.979707][ T66] hci_le_create_big_complete_evt+0xa62/0xb30 [ 347.982346][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 347.985243][ T66] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 347.987925][ T66] ? skb_pull_data+0x166/0x210 [ 347.990017][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 347.991843][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 347.994621][ T66] hci_event_packet+0x666/0x1180 [ 347.996860][ T66] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 347.999144][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 348.001461][ T66] ? mark_held_locks+0x9f/0xe0 [ 348.003503][ T66] ? kcov_remote_start+0x3d1/0x6e0 [ 348.005725][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 348.007774][ T66] hci_rx_work+0x2c6/0x1610 [ 348.009581][ T66] process_one_work+0x9c5/0x1b40 [ 348.011706][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 348.013956][ T66] ? __pfx_process_one_work+0x10/0x10 [ 348.016275][ T66] ? assign_work+0x1a0/0x250 [ 348.018332][ T66] worker_thread+0x6c8/0xf20 [ 348.020263][ T66] ? __pfx_worker_thread+0x10/0x10 [ 348.022494][ T66] kthread+0x2c1/0x3a0 [ 348.024325][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.026664][ T66] ? __pfx_kthread+0x10/0x10 [ 348.028692][ T66] ret_from_fork+0x45/0x80 [ 348.030666][ T66] ? __pfx_kthread+0x10/0x10 [ 348.032740][ T66] ret_from_fork_asm+0x1a/0x30 [ 348.035027][ T66] [ 348.036386][ T66] [ 348.037443][ T66] Allocated by task 5338: [ 348.039282][ T66] kasan_save_stack+0x33/0x60 [ 348.041142][ T66] kasan_save_track+0x14/0x30 [ 348.043138][ T66] __kasan_kmalloc+0xaa/0xb0 [ 348.045426][ T66] __hci_conn_add+0x131/0x1a50 [ 348.047727][ T66] hci_conn_add+0x56/0x70 [ 348.051037][ T66] hci_le_big_sync_established_evt+0x73f/0xad0 [ 348.053656][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 348.055778][ T66] hci_event_packet+0x666/0x1180 [ 348.057932][ T66] hci_rx_work+0x2c6/0x1610 [ 348.060027][T10491] syz.3.1408 (10491): drop_caches: 2 [ 348.060034][ T66] process_one_work+0x9c5/0x1b40 [ 348.064578][ T66] worker_thread+0x6c8/0xf20 [ 348.066631][ T66] kthread+0x2c1/0x3a0 [ 348.068449][ T66] ret_from_fork+0x45/0x80 [ 348.070268][ T66] ret_from_fork_asm+0x1a/0x30 [ 348.072205][ T66] [ 348.073165][ T66] Freed by task 66: [ 348.074690][ T66] kasan_save_stack+0x33/0x60 [ 348.076552][ T66] kasan_save_track+0x14/0x30 [ 348.078413][ T66] kasan_save_free_info+0x3b/0x60 [ 348.080395][ T66] poison_slab_object+0xf7/0x160 [ 348.082413][ T66] __kasan_slab_free+0x32/0x50 [ 348.084581][ T66] kfree+0x12a/0x3b0 [ 348.086345][ T66] device_release+0xa1/0x240 [ 348.088473][ T66] kobject_put+0x1fa/0x5b0 [ 348.090467][ T66] put_device+0x1f/0x30 [ 348.092353][ T66] hci_conn_del_sysfs+0x151/0x180 [ 348.094615][ T66] hci_conn_del+0x54e/0xdb0 [ 348.096618][ T66] hci_le_create_big_complete_evt+0x4ba/0xb30 [ 348.099275][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 348.101388][ T66] hci_event_packet+0x666/0x1180 [ 348.103500][ T66] hci_rx_work+0x2c6/0x1610 [ 348.105509][ T66] process_one_work+0x9c5/0x1b40 [ 348.107647][ T66] worker_thread+0x6c8/0xf20 [ 348.109645][ T66] kthread+0x2c1/0x3a0 [ 348.111442][ T66] ret_from_fork+0x45/0x80 [ 348.113384][ T66] ret_from_fork_asm+0x1a/0x30 [ 348.115561][ T66] [ 348.116641][ T66] The buggy address belongs to the object at ffff888023e98000 [ 348.116641][ T66] which belongs to the cache kmalloc-8k of size 8192 [ 348.122704][ T66] The buggy address is located 0 bytes inside of [ 348.122704][ T66] freed 8192-byte region [ffff888023e98000, ffff888023e9a000) [ 348.128652][ T66] [ 348.129729][ T66] The buggy address belongs to the physical page: [ 348.132568][ T66] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23e98 [ 348.136394][ T66] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 348.140026][ T66] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 348.143331][ T66] page_type: 0xfdffffff(slab) [ 348.145423][ T66] raw: 00fff00000000040 ffff888015843180 dead000000000100 dead000000000122 [ 348.149196][ T66] raw: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 348.152828][ T66] head: 00fff00000000040 ffff888015843180 dead000000000100 dead000000000122 [ 348.156582][ T66] head: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 348.160347][ T66] head: 00fff00000000003 ffffea00008fa601 ffffffffffffffff 0000000000000000 [ 348.164146][ T66] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 348.167943][ T66] page dumped because: kasan: bad access detected [ 348.170674][ T66] page_owner tracks the page as allocated [ 348.172969][ T66] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10680167980, free_ts 0 [ 348.181243][ T66] post_alloc_hook+0x2d1/0x350 [ 348.183406][ T66] get_page_from_freelist+0x1351/0x2e50 [ 348.185863][ T66] __alloc_pages_noprof+0x22b/0x2460 [ 348.188163][ T66] alloc_slab_page+0x4e/0xf0 [ 348.190111][ T66] new_slab+0x84/0x260 [ 348.191954][ T66] ___slab_alloc+0xdac/0x1870 [ 348.194004][ T66] __slab_alloc.constprop.0+0x56/0xb0 [ 348.196097][ T66] __kmalloc_noprof+0x367/0x400 [ 348.198300][ T66] acpi_ut_initialize_buffer+0x133/0x210 [ 348.200748][ T66] acpi_rs_create_pci_routing_table+0x121/0xa00 [ 348.203421][ T66] acpi_rs_get_prt_method_data+0xa5/0xf0 [ 348.205822][ T66] acpi_get_irq_routing_table+0xc2/0x100 [ 348.208260][ T66] acpi_pci_irq_find_prt_entry+0x184/0xef0 [ 348.210782][ T66] acpi_pci_irq_lookup+0x83/0x740 [ 348.212784][ T66] acpi_pci_irq_enable+0x1e2/0x710 [ 348.215055][ T66] pcibios_enable_device+0xb3/0xe0 [ 348.217326][ T66] page_owner free stack trace missing [ 348.219604][ T66] [ 348.220674][ T66] Memory state around the buggy address: [ 348.223086][ T66] ffff888023e97f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.226520][ T66] ffff888023e97f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 348.229792][ T66] >ffff888023e98000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.232891][ T66] ^ [ 348.234431][ T66] ffff888023e98080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.237382][ T66] ffff888023e98100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.240364][ T66] ================================================================== [ 348.247043][ T66] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 348.250193][ T66] CPU: 2 UID: 0 PID: 66 Comm: kworker/u33:0 Tainted: G W 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 348.255127][ T66] Tainted: [W]=WARN [ 348.256856][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 348.261533][ T66] Workqueue: hci3 hci_rx_work [ 348.263663][ T66] Call Trace: [ 348.265161][ T66] [ 348.266514][ T66] dump_stack_lvl+0x3d/0x1f0 [ 348.268621][ T66] panic+0x6f5/0x7a0 [ 348.270364][ T66] ? __pfx_panic+0x10/0x10 [ 348.272535][ T66] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 348.275277][ T66] ? preempt_schedule_thunk+0x1a/0x30 [ 348.277596][ T66] ? preempt_schedule_common+0x44/0xc0 [ 348.279931][ T66] check_panic_on_warn+0xab/0xb0 [ 348.282153][ T66] end_report+0x117/0x180 [ 348.283818][ T66] kasan_report+0xe9/0x110 [ 348.285543][ T66] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 348.288000][ T66] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 348.290400][ T66] hci_le_create_big_complete_evt+0xa62/0xb30 [ 348.292721][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 348.295483][ T66] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 348.298038][ T66] ? skb_pull_data+0x166/0x210 [ 348.300241][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 348.302356][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 348.305326][ T66] hci_event_packet+0x666/0x1180 [ 348.307461][ T66] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 348.309832][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 348.312229][ T66] ? mark_held_locks+0x9f/0xe0 [ 348.314438][ T66] ? kcov_remote_start+0x3d1/0x6e0 [ 348.316681][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 348.319033][ T66] hci_rx_work+0x2c6/0x1610 [ 348.320907][ T66] process_one_work+0x9c5/0x1b40 [ 348.323088][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 348.325229][ T66] ? __pfx_process_one_work+0x10/0x10 [ 348.327572][ T66] ? assign_work+0x1a0/0x250 [ 348.329733][ T66] worker_thread+0x6c8/0xf20 [ 348.331772][ T66] ? __pfx_worker_thread+0x10/0x10 [ 348.333984][ T66] kthread+0x2c1/0x3a0 [ 348.335743][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.337854][ T66] ? __pfx_kthread+0x10/0x10 [ 348.339734][ T66] ret_from_fork+0x45/0x80 [ 348.341250][ T66] ? __pfx_kthread+0x10/0x10 [ 348.343069][ T66] ret_from_fork_asm+0x1a/0x30 [ 348.345124][ T66] [ 348.347068][ T66] Kernel Offset: disabled [ 348.348997][ T66] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:43:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000820edd RBX=0000000000000000 RCX=ffffffff8b11e719 RDX=0000000000000000 RSI=ffffffff8b4cc500 RDI=ffffffff8bb08500 RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed100d606fd9 R10=ffff88806b037ecb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff9012ce98 R15=0000000000000000 RIP=ffffffff8b11fb0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002049a000 CR3=0000000039d9a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7177e600 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001b8 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000001b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806b13ff40 RCX=ffffffff817e6138 RDX=ffff8880182c0000 RSI=ffffffff817e6113 RDI=0000000000000005 RBP=ffffc90000167d60 RSP=ffffc90000167c40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff8ddc0d70 R12=1ffff9200002cf8c R13=0000000000000001 R14=0000000000000003 R15=ffffed100d627fe9 RIP=ffffffff817e6115 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000208fc000 CR3=0000000039d9a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=bea25468909a7127 e550e86b25dbb927 bea25468909a7127 e550e86b25dbb927 bea25468909a7127 e550e86b25dbb927 bea25468909a7127 e550e86b25dbb927 ZMM18=a6a891c89777bea1 3faa4455e163c83b a6a891c89777bea1 3faa4455e163c83b a6a891c89777bea1 3faa4455e163c83b a6a891c89777bea1 3faa4455e163c83b ZMM19=d40f000000000000 0000000000000036 d40f000000000000 0000000000000035 d40f000000000000 0000000000000034 d40f000000000000 0000000000000033 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=e550e86be550e86b e550e86be550e86b e550e86be550e86b e550e86be550e86b e550e86be550e86b e550e86be550e86b e550e86be550e86b e550e86be550e86b ZMM22=909a7127909a7127 909a7127909a7127 909a7127909a7127 909a7127909a7127 909a7127909a7127 909a7127909a7127 909a7127909a7127 909a7127909a7127 ZMM23=bea25468bea25468 bea25468bea25468 bea25468bea25468 bea25468bea25468 bea25468bea25468 bea25468bea25468 bea25468bea25468 bea25468bea25468 ZMM24=e163c83be163c83b e163c83be163c83b e163c83be163c83b e163c83be163c83b e163c83be163c83b e163c83be163c83b e163c83be163c83b e163c83be163c83b ZMM25=3faa44553faa4455 3faa44553faa4455 3faa44553faa4455 3faa44553faa4455 3faa44553faa4455 3faa44553faa4455 3faa44553faa4455 3faa44553faa4455 ZMM26=9777bea19777bea1 9777bea19777bea1 9777bea19777bea1 9777bea19777bea1 9777bea19777bea1 9777bea19777bea1 9777bea19777bea1 9777bea19777bea1 ZMM27=a6a891c8a6a891c8 a6a891c8a6a891c8 a6a891c8a6a891c8 a6a891c8a6a891c8 a6a891c8a6a891c8 a6a891c8a6a891c8 a6a891c8a6a891c8 a6a891c8a6a891c8 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d40f0000d40f0000 d40f0000d40f0000 d40f0000d40f0000 d40f0000d40f0000 d40f0000d40f0000 d40f0000d40f0000 d40f0000d40f0000 d40f0000d40f0000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe4425 RDI=ffffffff9519f6a0 RBP=ffffffff9519f660 RSP=ffffc90000d37418 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff84fe43c0 R15=0000000000000000 RIP=ffffffff84fe444f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c4256cc CR3=0000000039d9a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a093 ffffffff8100a0af ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0af ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82002fa1 ffffffff82002f6e ffffffff82002f51 ffffffff82002dc6 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8200342c ffffffff8200339b ffffffff00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82003021 ffffffff82002fa1 ffffffff82002f6e ffffffff82002f51 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000001b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000005e479b RBX=0000000000000003 RCX=ffffffff8b11e719 RDX=0000000000000000 RSI=ffffffff8b4cc500 RDI=ffffffff8bb08500 RBP=ffffed100305b488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d666fd9 R10=ffff88806b337ecb R11=0000000000000000 R12=0000000000000003 R13=ffff8880182da440 R14=ffffffff9012ce98 R15=0000000000000000 RIP=ffffffff8b11fb0f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffd32f3880 CR3=000000002c514000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7177e600 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46affe6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001b8 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000001b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000